Commit Graph

2372 Commits

Author SHA1 Message Date
Mingli Yu 04e4adcae0 netkit-telnet: Update SRC_URI
Fix the below do_fetch warning:
WARNING: netkit-telnet-0.17-r0 do_fetch: Failed to fetch URL http://ftp.linux.org.uk/pub/linux/Networking/netkit/netkit-telnet-0.17.tar.gz, attempting MIRRORS if available

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit f555f9d34f)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-03-21 19:12:04 -07:00
Mingli Yu ddc258df40 bridge-utils: Switch to use the main branch
Fix the below do_fetch warning:
WARNING: bridge-utils-1.7-r0 do_fetch: Failed to fetch URL git://git.kernel.org/pub/scm/linux/kernel/git/shemminger/bridge-utils.git, attempting MIRRORS if available

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit f1bb995a05)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-03-21 19:11:42 -07:00
Mingli Yu 88d8df41d0 geoip-perl: Switch to use the main branch
Fix the below do_fetch warning:
WARNING: geoip-perl-1.51-r0 do_fetch: Failed to fetch URL git://github.com/maxmind/geoip-api-perl.git;protocol=https;, attempting MIRRORS if available

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 2e97d3bd11)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-03-21 19:11:12 -07:00
Mingli Yu 182ee4b68c geoip: Switch to use the main branch
Fix the below do_fetch warning:
WARNING: geoip-1.6.12-r0 do_fetch: Failed to fetch URL git://github.com/maxmind/geoip-api-c.git, attempting MIRRORS if available

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit df3ef15834)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-03-21 19:10:52 -07:00
Mingli Yu f03e3e31be quagga: Update SRC_URI
Update the SRC_URI as the previous is unaccessible to fix the below
warning:
WARNING: quagga-1.2.4-r0 do_fetch: Failed to fetch URL https://download.savannah.gnu.org/releases/quagga/quagga-1.2.4.tar.gz;, attemptin MIRRORS if available

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit a1e3dd6a31)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-03-21 19:08:26 -07:00
Sana Kazi fee2024d74 mdns: Whitelisted CVE-2007-0613 for mdns
CVE-2007-0613 is not applicable as it only affects Apple products
i.e. ichat,mdnsresponder, instant message framework and MacOS.
Also, https://www.exploit-db.com/exploits/3230 shows the part of code
affected by CVE-2007-0613 which is not preset in upstream source code.
Hence, CVE-2007-0613 does not affect other Yocto implementations and
is not reported for other distros can be marked whitelisted.
Links:
https://vulmon.com/vulnerabilitydetails?qid=CVE-2007-0613
https://www.incibe-cert.es/en/early-warning/vulnerabilities/cve-2007-0613
https://security-tracker.debian.org/tracker/CVE-2007-0613
https://ubuntu.com/security/CVE-2007-0613
https://vulmon.com/vulnerabilitydetails?qid=CVE-2007-0613

Signed-off-by: Sana Kazi <Sana.Kazi@kpit.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit f37e5423da)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-03-11 21:13:43 -08:00
Khem Raj 59d3d64e90 openipmi: Inherit python3targetconfig
Fixes

configure: error:
  Could not link test program to Python. Maybe the main Python library has been
  installed in some non-standard library path. If so, pass it to configure,
  via the LIBS environment variable.
  Example: ./configure LIBS="-L/usr/non-standard-path/python/lib"

Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 59f817bbe3)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-02-14 15:47:53 -08:00
Martin Jansa f950286816 wireguard-module: remove PKG assignment
* it's not clear why it was added in first place and it's causing issues since:
  "package: get_package_mapping: avoid dependency mapping if renamed package provides original name"
  commit in oe-core as discussed in:
  https://lists.openembedded.org/g/openembedded-core/message/143672
  https://github.com/openembedded/meta-openembedded/issues/285

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 304f660f88)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-02-09 10:51:28 -08:00
Wang Mingyu 5eb538cd50 dnsmasq: upgrade 2.82 -> 2.84
Refresh the following patch:
lua.patch

Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 3e28a31bb4)
[ Bug fix only changes mostly CVEs
 CVE-2020-25681, CVE-2020-25682, CVE-2020-25683
 CVE-2020-25687, CVE-2020-25684, CVE-2020-25685
 CVE-2020-25686 ]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-02-09 10:35:43 -08:00
Mario Schuknecht 83842c9150 dnsmasq: Fix systemd service
Systemd service file option 'ExecStopPre' is warned and ignored by
systemd. By replacing 'ExecStopPre' with 'ExecStop', the intended
behavior is realized. The 'ExecStop' commands are executed one after the
other.

Signed-off-by: Mario Schuknecht <mario.schuknecht@dresearch-fe.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 55c94cb319)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-02-09 08:49:07 -08:00
changqing.li@windriver.com 1de0f4c33b celt051: update SRC_URI
original SRC_URI is not valid now, offical CELT repository
moved to gitlab

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 5450c958bf)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-02-09 08:45:03 -08:00
zangrc 46ea93dc42 iscsi-initiator-utils: upgrade 2.1.2 -> 2.1.3
0001-libopeniscsiusr-Compare-with-max-int-instead-of-max-.patch
Removed since this is included in 2.1.3

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 46e30569e3)
[Bug fix only update. Includes several CVE fixes.
CVE-2020-17437
CVE-2020-17438
CVE-2020-13987
CVE-2020-13988 ]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-01-25 20:54:49 -08:00
Armin Kuster a10ea62a1c wireshark: Several securtiy fixes
Source: Wireshark.org
MR: 106181, 106696, 107655, 107673, 107682
Type: Security Fix
Disposition: Backport from wireshark.org
ChangeID: 57df6ac3b11aabd96e6aec728501ce7988bc176a
Description:

Bugfix only update including these cves:
3.2.8
CVE-2020-26575
CVE-2020-28030

3.2.9
CVE-2020-26418
CVE-2020-26421
CVE-2020-26420

Signed-off-by: Armin Kuster <akuster@mvista.com>
2021-01-12 14:19:19 -08:00
Khem Raj 165ad9ad4c networkmanager: Fix reallocarray check in meson and configure
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 62c2f4a48a)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-01-10 11:11:22 -08:00
Yi Zhao f5324e4cd8 ebtables: do not install /etc/ethertypes
The /etc/ethertypes is provided by netbase since 6.0[1].
Do not instal the file in ebtables, otherwise there would be a conflict:
Error: Transaction test error:
  file /etc/ethertypes conflicts between attempted installs of netbase-1:6.2-r0.corei7_64 and ebtables-2.0.10+4-r4.corei7_64

[1] https://salsa.debian.org/md/netbase/-/commit/316680c6a2c3641b6abc76b3eebf88781f609d35

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit af6f068632)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-01-10 10:57:12 -08:00
Zheng Ruoqin 81d14a8635 samba: CVE-2020-14383 Security Advisory
References
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14383

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit baee1ebeaf)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-01-10 10:46:15 -08:00
Zheng Ruoqin 38beb6fe98 samba: CVE-2020-14318 Security Advisory
References
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14318

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 1d44b4c03d)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-01-10 10:46:15 -08:00
viatsk 5e4601a3f9 tcpdump: Patch for CVE-2020-8037
Signed-off-by: Stacy Gaikovaia <stacy.gaikovaia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-12-14 21:25:32 -08:00
Armin Kuster ec9065c822 README: updated Maintainers list for Gatesgarth
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-04 12:32:44 -08:00
Khem Raj a57f2a5e97 networkd-dispatcher: Upgrade to 2.1
Drop gitlab archives and use git fetcher directly instead

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-03 11:41:03 -08:00
Yi Zhao dccecd1411 quagga: unify volatiles file name
Make the volatiles file name starts with digital.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-03 11:03:45 -08:00
Mark Jonas 2fe4cb5882 mbedtls: Fix typo in PACKAGECONFIG
Signed-off-by: Mark Jonas <toertel@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-03 11:03:45 -08:00
Ricardo Salveti 0500b364b2 wireguard-tools: upgrade 1.0.20200513 -> 1.0.20200827
Changelog:
- 7a321ce version: bump
- 91fbeb4 Revert "wg-quick: wait on process substitutions"
- 9a0d65e wg-quick: android: use iproute2 to bring up interface instead of ndc
- fbca033 version: bump
- 26683f6 wg-quick: wait on process substitutions
- 13fac76 ctype: use non-locale-specific ctype.h
- cf2bf09 pubkey: isblank is a subset of isspace
- b4a8a18 man: wg-quick: use syncconf instead of addconf for strip example
- a66219f systemd: add reload target to systemd unit
- eb4665e wincompat: fold random into genkey
- 197995d ipc: split into separate files per-platform

Signed-off-by: Ricardo Salveti <ricardo@foundries.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-02 09:00:52 -08:00
Ricardo Salveti 446857e016 wireguard-module: upgrade 1.0.20200712 -> 1.0.20200908
Changelog:
- d97b575 version: bump
- 482d020 peerlookup: take lock before checking hash in replace operation
- dace9d0 compat: backport NLA policy macros
- a28032f netlink: consistently use NLA_POLICY_MIN_LEN()
- 515d544 netlink: consistently use NLA_POLICY_EXACT_LEN()
- 1a41e32 compat: backport kfree_sensitive and switch to it
- 90a9e82 compat: drop support for SUSE 15.1
- a567b4c version: bump
- 4213ef0 compat: add missing headers for ip_tunnel_parse_protocol
- 5a45add compat: ipv6_dst_lookup_flow was ported to rhel 7.9 beta
- 372427a compat: allow override of depmod basedir
- f04dae1 compat: rhel 8.3 beta removed nf_nat_core.h

Signed-off-by: Ricardo Salveti <ricardo@foundries.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-02 09:00:52 -08:00
Anatol Belski b4d7b1ee42 chrony: Patch CVE-2020-14367
Signed-off-by: Anatol Belski <anbelski@linux.microsoft.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-02 09:00:52 -08:00
Zang Ruochen f604ed19d2 nftables: upgrade 0.9.6 -> 0.9.7
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-02 09:00:52 -08:00
Zang Ruochen 917142fab5 radvd: upgrade 2.18 -> 2.19
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-02 09:00:52 -08:00
Zang Ruochen b18b12e549 libnftnl: upgrade 1.1.7 -> 1.1.8
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-02 09:00:51 -08:00
Fagundes, Paulo 36f6580943 vnstat: add recipe
vnStat is a console-based network traffic monitor for Linux and BSD
that keeps a log of network traffic for the selected interface(s).

Signed-off-by: Paulo Fagundes <paulohefagundes@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-23 10:20:24 -07:00
Khem Raj 409032dcc5 iscsi-initiator-utils: Silence a clang warning on 64bit systems
This unbreaks the build with clang as well.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-21 09:37:38 -07:00
Qi.Chen@windriver.com bb460fb3cb freediameter: use /run instead of /var/run in systemd service file
/var/run has been deprecated by systemd, so use /run instead,
as suggested by systemd.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-20 09:15:07 -07:00
Chen Qi 032e6879b5 openhpi: use /run instead of /var/run in systemd service file
/var/run has been deprecated by systemd, so use /run instead,
as suggested by systemd.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-19 23:49:22 -07:00
Chen Qi 7a0d9990a6 open-isns: use /run instead of /var/run in systemd service file
/var/run has been deprecated by systemd, so use /run instead,
as suggested by systemd.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-19 22:30:51 -07:00
Pierre-Jean Texier b76712700c stunnel: upgrade 5.56 -> 5.57
License-Update: copyright years updated.

This is a bug fix release:

 - X.509 v3 extensions required by modern versions of OpenSSL are added to generated self-signed test certificaes.
 - Fixed a tiny memory leak in configuration file reload error handling (thx to Richard Könning).
 - Merged Debian 05-typos.patch (thx to Peter Pentchev).
 - Merged with minor changes Debian 06-hup-separate.patch (thx to Peter Pentchev).
 - Merged Debian 07-imap-capabilities.patch (thx to Ansgar).
 - Merged Debian 08-addrconfig-workaround.patch (thx to Peter Pentchev).
 - Fixed tests on the WSL2 platform.

Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-19 22:23:13 -07:00
Qi.Chen@windriver.com 5a5f7ec345 cyrus-sasl: use /run instead of /var/run for systemd service file
/var/run has been deprecated by systemd, so use /run instead,
as suggested by systemd.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-16 09:21:54 -07:00
Mario Schuknecht 84681a31cf wireguard-tools: Fix systemd service installation
Install systemd configuration file wg-quick@.service into the proper folder.
Use 'systemd_system_unitdir' instead of 'systemd_unitdir' as the installation
path.

Signed-off-by: Mario Schuknecht <mario.schuknecht@dresearch-fe.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-15 11:42:15 -07:00
Khem Raj cd9eaf4318 meta-openembedded: Add gatesgarth to LAYERSERIES_COMPAT
Remove older releases from COMPAT

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-15 11:42:15 -07:00
Yi Zhao 17bc2a137f networkmanager: remove PACKAGECONFIG[dhclient]
The dhcp-client has been removed from oe-core and the current
networkmanager does not support dhcpcd >= 9.0 (See bug report:
https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/issues/410)

Remove the PACKAGECONFIG[dhclient] and pass --with-dhclient/dhcpcd=no
explicitly to EXTRA_OECONF. Otherwise it will search the host path when
configure.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-14 08:39:34 -07:00
Yi Zhao bebdea8530 samba: upgrade 4.10.17 -> 4.10.18
This is security release in order to address CVE-2020-1472
(Unauthenticated domain takeover via netlogon ("ZeroLogon")).

See: https://www.samba.org/samba/history/samba-4.10.18.html

Also remove 3 backported patches.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-14 08:39:34 -07:00
Zang Ruochen 47821db8ed wireshark: upgrade 3.2.6 -> 3.2.7
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-13 22:33:05 -07:00
Zang Ruochen 5bd81144e3 mtr: upgrade 0.93 -> 0.94
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-13 22:33:05 -07:00
Zang Ruochen 2519ac6932 firewalld: upgrade 0.9.0 -> 0.9.1
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-13 22:33:05 -07:00
Martin Jansa cc512cd9e1 utouch-*, ifenslave, iozone3, ttf-honkyfonts, python3-smbus: don't use trailing slash in S
* see oe-core base.bbclass changes from:
  https://lists.openembedded.org/g/openembedded-core/message/143159
  https://lists.openembedded.org/g/openembedded-core/message/143161

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-09 17:22:31 -07:00
Alexander Vickberg 35459c1d25 wolfssl: upgrade 4.4.0 -> 4.5.0
Add patch from upstream which fixes building on big endian.

Signed-off-by: Alexander Vickberg <wickbergster@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-06 08:45:24 -07:00
Winfried Dobbe 92524727d4 firewalld: Add missing rdep on nftables-python
Fixes Issue #280

Signed-off-by: Winfried Dobbe <winfried.dobbe@xmsnet.nl>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-26 07:20:26 -07:00
Zang Ruochen 683066f9e7 arno-iptables-firewall: upgrade 2.1.0 -> 2.1.1
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-25 08:41:40 -07:00
Romain Naour 25b91b3d2b libiec61850: add recipe for libiec61850
IEC 61850 is an international standard for communication systems in
Substation Automation Systems (SAS) and management of Decentralized
Energy Resources (DER). It is seen as one of the communication
standards of the emerging Smart Grid.

Add two upstream patch fixing build issues with musl libc.

Enable the libiec61850 python binding (pyiec61850) that require a fix
to find the correct PYTHON_SITE_DIR path while cross-compiling.

Signed-off-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-24 12:42:04 -07:00
Robert Yang ac313b6380 crda: rdepends on wireless-regdb-static
The wireless-regdb has been moved to oe-core. According the commit
message:

wireless-regdb-static should be used with kernel >= 4.15.
wireless-regdb can be used with older kernels and is mostly
irrelevant here, but keeping it in meta-networking would
create needless recipe duplication.

it should replace runtime dependency wireless-regdb with
wireless-regdb-static.

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-24 12:42:04 -07:00
Todd Cunningham 3c35fe419d firewalld: upgrade 0.8.3 -> 0.9.0
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-23 19:45:53 -07:00
Vladimir Zapolskiy 08801a358a cifs-utils: remove explicitly set PV variable
There is no need to set and then tediously modify PV variable on every
upgrade, what's worse it may happen that the PV is not modified like it
happened on the recent upgrade from cifs-utils-6.10 to cifs-utils-6.11.

Signed-off-by: Vladimir Zapolskiy <vladimir@tuxera.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-23 19:45:53 -07:00