OpenSSL 4.0 removed the ENGINE API entirely, so the openssl-engines
package no longer exists. Remove it from RDEPENDS.
Signed-off-by: Jaipaul Cheernam <jaipaul.cheernam@est.tech>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
The default product-only mapping generates vendor-wildcard CPEs for the
recipe's Simon Kelley source. dnsmasq:dnsmasq is an NVD configuration
identity and CNA affected-data identity; the_kelleys:dnsmasq is an NVD
configuration identity; and thekelleys:dnsmasq is an active NVD
dictionary CPE and configuration identity with CNA affected-data records.
This changes the generated product identities. With the frozen
sbom-cve-check database, the 48-entry CVE report is unchanged, so this is
an identity correction with no CVE delta.
Signed-off-by: Devansh Patel <devanshp@cisco.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
I am hoping to start contributing more to OpenEmbedded and this seems
like a very obvious place to start. I am on the NNG advisory board [1]
and actively working on NNG, while using Yocto for both my day job and
several hobby projects.
[1]: https://github.com/nanomsg/nng/discussions/1782
Signed-off-by: Nate Kent <nate@nkent.net>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
ntpdate has been deprecated. meta-openembedded@6315006aadd in theory
dropped it, but in practice the binary was still being built and
shipped, but now as part of ntp-utils package.
To avoid this, let's patch it out of the build.
Signed-off-by: Michal Sieron <michal.sieron@nokia.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Linux commit 8f9616500c59 ("atm: remove orphaned uAPI for deleted drivers,
protocols and SVCs") deleted atm uAPI headers and ioctls in
linux/atmdev.h, legacy ATM drivers had been dropped from the kernel.
linux-atm is the userspace side of exactly those interfaces, so it no
longer builds once linux-libc-headers is 7.2:
| ispl_l.l:15:10: fatal error: 'linux/atmsvc.h' file not found
| ispl_y.y:15:10: fatal error: 'linux/atmsvc.h' file not found
| src/test/isp.c:19:10: fatal error: 'linux/atmsvc.h' file not found
| make[3]: *** [Makefile:589: ispl_y.o] Error 1
Remove the package
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
samba package also installs LDB command line tools and python LDB
module. libldb package installs the same tools and pyldb module from
standalone LDB source.
pkgdata shows the conflict clearly:
samba: /usr/bin/ldbadd
libldb: /usr/bin/ldbadd
samba-python3: site-packages/ldb.so
pyldb: site-packages/ldb.so
So when both samba and libldb are added in same image, rootfs can fail
because package manager sees same files from two different packages.
Both package sets are not expected to be installed together.
Add RCONFLICTS for samba/libldb and samba-python3/pyldb. This makes the
conflict explicit during dependency resolution instead of failing later
as file install conflict.
Older meta-networking had similar conflict handling for samba/libldb in
commit: https://git.openembedded.org/meta-openembedded/commit/?id=8e641e28f630dac61a03373ad70c72a2370ad11e
This change adds the same handling again with current python3 package names.
Signed-off-by: Himanshu Jadon <hjadon@cisco.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
UTscapy writes its detailed report, including the traceback of every
failing test, to a file under ${PTEST_PATH}. Under testimage that path
only exists inside the ephemeral image, which is discarded as soon as the
run finishes, so a failure left nothing behind but a bare
FAIL: 000.01s Emulate interact()
line and diagnosing it required rebuilding the image by hand.
Pass -F so the report expands only the failed tests, and cat it to stdout
when there is one, where ptest-runner records it. A clean run is
unaffected.
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The "Emulate interact()" UTScapy regression test failed:
IPython requested but not found !
Using the default Python shell: History is disabled.
Traceback (most recent call last):
File "/usr/lib/python3.14/site-packages/scapy/main.py", line 857, in interact
banner += "\n"
UnboundLocalError: cannot access local variable banner where it is
not associated with a value
scapy.main.interact() only binds "banner" in the branches handling the
ipython, ptipython, ptpython and bpython shells. The test asks for
ipython, which is not in the image, so scapy falls back to the plain
Python shell and leaves "banner" unbound while still running the
unconditional "banner += \n" for the caller-supplied mybanner.
The test is correct and the bug is in scapy, which still has it in
master, so carry a patch initializing banner from banner_text before the
shell-specific chain.
meta-networking-image-ptest-python3-scapy now reports PASSED=319
FAILED=0, up from PASSED=318 FAILED=1.
Signed-off-by: Khem Raj <raj.khem@gmail.com>
ptest.bbclass pulls ptest-runner into the -ptest package with
RRECOMMENDS:${PN}-ptest += "ptest-runner"
but the recipe then used a hard assignment for its own recommendation,
which overwrote that and left openl2tp-ptest recommending only
kernel-module-l2tp-ppp. ptest-runner was therefore never installed in
the ptest image, and meta-networking-image-ptest-openl2tp skipped the
whole run with "Test requires ptest-runner to be installed" instead of
executing any test.
Append instead of assigning, so both recommendations survive. The
openl2tp ptest now runs and passes.
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
============
- fix READNU32 by casting to uint32_t
- filter out non printable characters in description for lease file
- check for the return value of snprintf() : overflow or error
- nftables: Avoid building too long rule with nftnl_rule_nlmsg_build_payload() by triming description to 256 chars.
- HTTPS: Do not abort on SSL errors
- Fix heap overflow in PinholeVerification()
- Free resources on start error
- print usage on stdout or stderr depending on command line
- increase maximum description length when possible (netfilter/nftables)
- fix nfqueue code
- Re-enable port forwarding properly (broken in 2.3.10)
- Fix PCP option size parsing
- Allow using ip/mask when IPv6 is compiled but disabled
- use a 8kB buffer for Netlink as recommended
- fix URL parsing in upnpevents.c
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Drop redundant md5sum.
Changelog:
8.2.4
- Provide compile time options -DMIN_PORT=n, -DMIN_CTL_PORT=n,
and -DMIN_DATA_PORT=n to set the allowed mimimum port number
- Provide compile time option -DNO_BLANK_LINE to suppress
- blank line in normal nuttcp output
- New "-A" option to bind to a specified interface IP address
- Fix compilation with -DNO_IPV6
- Document -D user compile time options in Usage: statement
- Shut up apparently bogus gcc 10.2.1 warning:
- writing 1 byte into a region of size 0 [-Wstringop-overflow=]
8.2.3
- Simplify handling of stream_idx (no more references to [stream_idx + 1])
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
- Update SRC_URI as upstream moved to GitHub
- Upstream now builds via Makefile and no longer ships a configure script
- Refresh LICENSE file path and checksum
- Install template systemd service and conf provided by upstream
- Drop patch which is merged in the upstream version
- Recommend kernel-module-tun since /dev/net/tun is required at runtime
Fixes:
root@qemuarm64:~# systemctl status tayga@default.service
x tayga@default.service - Simple, no-fuss NAT64
Loaded: loaded (/usr/lib/systemd/system/tayga@.service; enabled; preset: disabled)
Active: failed (Result: exit-code) since Tue 2026-08-18 03:16:11 UTC; 12s ago
Invocation: a950b39a22a141baaa88e5c919a59009
Process: 300 ExecStart=tayga --config /etc/tayga/default.conf --journal --nodetach (code=exited, status=1/FAILURE)
Main PID: 300 (code=exited, status=1/FAILURE)
Mem peak: 1.7M
CPU: 190ms
Aug 18 03:16:11 qemuarm64 systemd[1]: Starting Simple, no-fuss NAT64...
Aug 18 03:16:11 qemuarm64 tayga[300]: Starting TAYGA 0.9.6
Aug 18 03:16:11 qemuarm64 tayga[300]: Compiled from tags/0.9.6
Aug 18 03:16:11 qemuarm64 tayga[300]: Commit 7f00122b75d808f696df0efe481a8c8919ba9bd7
Aug 18 03:16:11 qemuarm64 tayga[300]: Unable to open /dev/net/tun, aborting: No such file or directory
Aug 18 03:16:11 qemuarm64 systemd[1]: tayga@default.service: Main process exited, code=exited, status=1/FAILURE
Aug 18 03:16:11 qemuarm64 systemd[1]: tayga@default.service: Failed with result 'exit-code'.
Aug 18 03:16:11 qemuarm64 systemd[1]: Failed to start Simple, no-fuss NAT64.
- Add UPSTREAM_CHECK_GITTAGREGEX for git tag version checks
Fixes:
$ devtool latest-version tayga
...
INFO: Current version: 0.9.2
INFO: Latest version:
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
The current mctp recipe relies on the upstream's conditional build and
install of the mctpd binary if systemd is present, only building the
mctp utility otherwise. Future upstream changes allowing running as
non-root require more control over the build process. We will need to
add a new system user when mctpd is built.
Adding a user requires inheriting useradd, which assumes at least one
user will be created, failing the recipe otherwise. Building without
mctpd would then cause the recipe to fail as conditionally inheriting
useradd seems infeasible.
To make useradd available for the new upstream release, split the recipe
into "mctp" for the utilities and "mctpd" for the daemon, isolating the
systemd dependency to "mctpd".
This makes the two parts of the source explicitly selectable from user
choice, rather than auto-detecting based on the presence of systemd.
This will allow the mctpd daemon to be installed without the mctp
utilities and allow the utilities to be installed without the daemon in
distros without systemd. It will also let us express the useradd rules
only when they're needed for the mctpd installation in the upcoming
version bump.
The mctp/mctpd split cannot be done with different packages within the
same recipe. It would require the systemd and useradd classes be added
to inherit_defer only when mctpd is to be built, and the library
functions cannot be used to detect which packages are built.
Signed-off-by: James Lee james@codeconstruct.com.au
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Ankur Tyagi
Nate Kent
Jaipaul Cheernam
Devansh Patel
Michal Sieron
Khem Raj
Zheng Ruoqin
Himanshu Jadon
Khem Raj
Wang Mingyu
James Lee