1864 Commits
Author SHA1 Message Date
Alex Kiernan 157c661157 wireshark: Break dumpcap into its own package
dumpcap is a lightweight capture tool which carries no dependencies on
wireshark. Break it into its own package, with an RDEPENDS back to
wireshark.

Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-15 22:22:00 -07:00
Ankur Tyagi b04a2625cc tinyproxy: patch CVE-2026-54388
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-54388

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-15 22:21:58 -07:00
James Lee fc3f39d1a7 mctp: upgrade 2.6 -> 2.7
mctp version 2.7 adds Meson's installation tags to the project, now allowing
binaries to be selectively installed.

Use MESON_INSTALL_TAGS to selectively install files specific to each recipe.
No longer rm in mctpd's do_install step, which was a now-unneeded hack.
Meson tags prevent installation of the extra binaries.

Add mctpd.conf to FILES in the mctpd recipe following its installation to
improve recipe readability.

Signed-off-by: James Lee <james@codeconstruct.com.au>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-15 22:21:57 -07:00
Ankur Tyagi bf39596278 strongwan: upgrade 6.0.7 -> 6.1.0
- Remove PACKAGECONFIG entries for soup, tnc-ifmap, tnccs-11, tnccs-dynamic
- Include xauth-generic in default PACKAGECONFIG. This preserves default
  plugin as upstream disabled IKEv1 by default.

root@qemux86-64:~# swanctl --stats
uptime: 38 seconds, since Oct 13 03:27:29 2026
worker threads: 16 total, 11 idle, working: 4/0/1/0
job queues: 0/0/0/0
jobs scheduled: 0
IKE_SAs: 0 total, 0 half-open
mallinfo: sbrk 1503232, mmap 0, used 552176, free 951056
loaded plugins: charon-systemd random nonce x509 revocation constraints pubkey pkcs1 pkcs7 pgp dnskey sshkey pem openssl pkcs8 xcbc cmac kdf drbg curl sqlite attr kernel-netlink resolve socket-default vici updown xauth-generic

Changelog:
https://github.com/strongswan/strongswan/releases/tag/6.1.0

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-12 21:57:15 -07:00
Ankur Tyagi 30acdca706 sngrep: patch CVE-2026-90558
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-90558

(cherry picked from commit 36ddee53b1)

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-12 21:57:15 -07:00
Ankur Tyagi ba9537ae1f ntopng: patch CVE-2026-86090 and CVE-2026-86091
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-86090
https://nvd.nist.gov/vuln/detail/cve-2026-86091

(cherry picked from commit ae180302f4)

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-12 21:57:14 -07:00
Ankur Tyagi 4e8a7265bd ntopng: patch CVE-2026-84990
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-84990

(cherry picked from commit 2d932fa4e3)

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-12 21:57:14 -07:00
Ankur Tyagi 896ea53058 openvpn: upgrade 2.7.7 -> 2.7.8
Changelog:
https://github.com/OpenVPN/openvpn/releases/tag/v2.7.8

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-12 21:57:12 -07:00
Ankur Tyagi 9b938c1616 tinyproxy: patch CVE-2026-55202
Backport commit identified by Debian[1]

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-55202

[1]https://security-tracker.debian.org/tracker/CVE-2026-55202

(cherry picked from commit 233e6a56e5)

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-12 11:26:15 -07:00
Ankur Tyagi c3796d630f tinyproxy: patch CVE-2026-54387
Backport commit identified by Debian[1]

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-54387

[1]https://security-tracker.debian.org/tracker/CVE-2026-54387

(cherry picked from commit 33649b0657)

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-12 11:26:15 -07:00
Ankur Tyagi 568c569c2f tinyproxy: patch CVE-2026-31842
Backport commit identified by Debian[1]

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-31842

[1]https://security-tracker.debian.org/tracker/CVE-2026-31842

(cherry picked from commit 985acd9e7c)

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-12 11:26:15 -07:00
Ankur Tyagi ead8f70fa6 dovecot: ignore already fixed CVEs
Upstream has confirmed that these vulnerabilities are fixed,
and Debian has also identified the relevant commits:

CVE-2025-59028: https://security-tracker.debian.org/tracker/CVE-2025-59028
CVE-2025-59032: https://security-tracker.debian.org/tracker/CVE-2025-59032
CVE-2026-27859: https://security-tracker.debian.org/tracker/CVE-2026-27859
CVE-2026-27851: https://security-tracker.debian.org/tracker/CVE-2026-27851
CVE-2026-33603: https://security-tracker.debian.org/tracker/CVE-2026-33603
CVE-2026-40016: https://security-tracker.debian.org/tracker/CVE-2026-40016
CVE-2026-40020: https://security-tracker.debian.org/tracker/CVE-2026-40020
CVE-2026-42006: https://security-tracker.debian.org/tracker/CVE-2026-42006

(cherry picked from commit 86a9ad852a)

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-11 21:45:39 -07:00
Ankur Tyagi 192d012d9a pgpool2: upgrade 4.7.2 -> 4.7.3
Changelog:
https://www.pgpool.net/docs/latest/en/html/release-4-7-3.html

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-10-09 10:01:40 -07:00
Khem Raj 2a254b1e75 netcat-openbsd: define IPTOS_DSCP_VA for musl
netcat.c uses IPTOS_DSCP_VA, which glibc's <netinet/ip.h> defines but
musl's doesn't. Add a guarded fallback definition.

AI-Generated: Uses Claude Code

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-29 09:57:24 -07:00
Khem Raj c65a95a35b tcpreplay: fix struct ethhdr redefinition on musl
Same struct ethhdr / __UAPI_DEF_ETHHDR ordering issue as xdp-tools:
common.h/txring.c pull in musl's <netinet/if_ether.h> after the raw
<linux/if_ether.h> uapi header has already defined struct ethhdr.

AI-Generated: Uses Claude Code

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-29 09:57:23 -07:00
Khem Raj 11d88c43bd ettercap: don't strip a pre-existing _GNU_SOURCE define in ec.h
ec.h unconditionally #defines _GNU_SOURCE without checking if it is
already defined, which trips -Werror on musl toolchains that predefine
it via the driver. Guard the define.

AI-Generated: Uses Claude Code

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-29 09:57:22 -07:00
Khem Raj f5b8366ede lksctp-tools: fix sctp_connectx() and ptests on musl
Three func_tests failed on musl:

- test_1_to_1_sendmsg and test_1_to_1_recvmsg died with SIGSEGV. They
  pass (struct msghdr *)-1 and expect EFAULT, but on 64-bit musl the
  sendmsg()/recvmsg() wrappers copy the msghdr to clear its padding
  before making the syscall. Issue those two calls with syscall(2) so
  they test the kernel's handling of the bad pointer.

- test_connectx reported "Association id mismatch: connectx returned 3,
  notification returned:240". libsctp exports an unversioned
  sctp_connectx alias of the original API next to the VERS_1..VERS_3
  versions. musl's dynamic linker does not implement symbol versioning
  and binds that alias, so every sctp_connectx() call on musl ran the old
  API, which never returns the association id. The alias only serves
  binaries linked before libsctp was versioned, so only emit it on
  glibc; sctp_connectx@@VERS_3 is then the one musl resolves.

Tested with meta-networking-image-ptest-lksctp-tools on qemux86-64 with
yoe-musl-systemd-wayland: TOTAL: 1 FAIL: 0.

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-28 06:57:40 -07:00
Ankur Tyagi 650ced113c wireshark: upgrade 4.6.8 -> 4.6.9
Release Notes:
https://www.wireshark.org/docs/relnotes/wireshark-4.6.9.html

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-27 07:53:48 -07:00
Ankur Tyagi 71a448e877 unbound: upgrade 1.26.0 -> 1.26.1
Changelog:
https://github.com/NLnetLabs/unbound/releases/tag/release-1.26.1
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-27 07:53:48 -07:00
Ankur Tyagi a4b49fa5f7 tcpdump: upgrade 4.99.6 -> 4.99.7
Changelog:
https://github.com/the-tcpdump-group/tcpdump/blob/tcpdump-4.99/CHANGES

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-27 07:53:48 -07:00
Ankur Tyagi 6348a197b2 openvpn: upgrade 2.7.6 -> 2.7.7
Changelog:
https://github.com/OpenVPN/openvpn/releases/tag/v2.7.7

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-27 07:53:47 -07:00
Ankur Tyagi 704a945577 cifs-utils: upgrade 7.7 -> 7.8
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-27 07:53:47 -07:00
Corey J. Siltala 75feccfbeb bmon: upgrade 4.0 -> 5.0
From 2ae37918536db0431b0667fc4800a0b15b9e1a80 Mon Sep 17 00:00:00 2001
From: Corey Siltala <csiltala@atcorp.com>
Date: Tue, 22 Sep 2026 19:01:49 -0500
Subject: [PATCH] bmon: upgrade 4.0 -> 5.0

Note: ownership of bmon repo was transferred from Thomas Graf (tgraf)
      to Jafar Al-Gharaibeh (Jafaral)

Fixes:
- out_curses: use xcalloc instead of a fixed buffer
- Avoid trying to include <values.h> on Android
- Fix typographical errors
- curses: Fix seperator lines
- Fix build in FreeBSD/DragonflyBSD
- fix segfault on element removal
- fix: Fix memory leaks in module_set()
- fix: Convert usage of strdup/free to xstrdup/xfree
- Fix compile issue in OpenBSD
- Fix spelling and grammar in docs and comments

Features:
- Allow numeric colors in bmonrc
- curses: Add CTRL-N/CTRL-P for next/previous element
- feat: Add IPv4/IPv6 addresses to additional info
- feat: Add configure option to disable IPv6 in netlink module
- feat: Add ability to toggle TC elements
- curses: render graphs with Braille cells
- display filters for TC ingress and egress
- Add support for JSON output
- Remove the 'Really quit' dialog and just exit cleanly

Misc:
- Update to autoconf of the common era

See full release notes at https://github.com/Jafaral/bmon/releases/tag/v5.0

Signed-off-by: Corey Siltala <csiltala@atcorp.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-24 21:56:17 -07:00
Ross Burton 17969db98a spice-gtk: upgrade 0.42 -> 0.43
Documentation is now built with gi-docgen instead of gtk-doc.

Drop python3-six build dependency, no longer needed.

Add udev build dependency to avoid it being dependend on what is in the
sysroot.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-21 08:13:54 -07:00
Ross Burton 1d7aab70cc spice-gtk: clean up dependencies
Instead of a single huge list of DEPENDS, add a number of PACKAGECONFIGs
that reflect the upstream options available.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-21 08:13:54 -07:00
Ross Burton 7d0ef322e7 spice: clean up dependencies
We can disable building the tests, and remove a few build dependencies.

python3-six is no longer needed, remove that.

openssl is always required, add to DEPENDS.

Add lz4 PACKAGECONFIG as this is an option upstream, enabled by default
to preserve behaviour.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-21 08:13:54 -07:00
Alper Ak b183cb8a1c unbound: fix build with OpenSSL 4.0
do_compile fails with:

  keyraw.c:158:16: error: implicit declaration of function
  'EVP_PKEY_asn1_find_str'

The GOST code needs the OpenSSL ENGINE API, which 4.0 removed. configure
cannot run its GOST test when cross compiling and answers "maybe", which
enables GOST anyway. Make it check that the API is there first.

Nothing is lost by this and no layer ships a GOST engine, so the lookup
already returned 0 at runtime. gost-engine has not been ported to
providers yet [1].

[1] https://github.com/gost-engine/engine/issues/496

Signed-off-by: Alper Ak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-11 07:07:59 -07:00
Alper Ak 77bc6e2615 ntp: fix build with OpenSSL 4.0
do_compile fails with:

  ntp_crypto.c:2035:23: error: invalid use of incomplete typedef
  'ASN1_TIME' {aka 'const struct asn1_string_st'}

Signed-off-by: Alper Ak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-11 07:07:58 -07:00
Khem Raj e39fd90bde dovecot: Work around clang 23 hang
clang 23 enables DFAJumpThreading by default and takes over 90
minutes on the switch based state machine loops in the lib-json
tests, where clang 22 needs under a second. Reported upstream with a
bisect and reduced testcase:
https://github.com/llvm/llvm-project/issues/221391

Disable just that pass for clang builds until the fix lands. gcc
builds are not affected.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Sunil Dora <sunilkumar.dora@windriver.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-05 09:07:03 -07:00
Ankur Tyagi 8b6a79bfab dovecot: upgrade 2.4.4 -> 2.4.5
License-Update: Simplify and standardize copyright handling[1]

Changelog:
https://github.com/dovecot/core/blob/2.4.5/NEWS

[1]https://github.com/dovecot/core/commit/2a5809c115ed270c26fdca5c9b0c29a369706210

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-29 23:00:18 -07:00
Jaipaul Cheernam 4b53361ea4 ntopng: fix build with OpenSSL 4.0
OpenSSL 4.0 returns const X509_NAME* from X509_get_subject_name().
Cast where non-const API (X509_NAME_oneline, X509_NAME_get_text_by_NID)
requires it.

Upstream-Status: Backport [https://github.com/ntop/ntopng/pull/10830]
Signed-off-by: Jaipaul Cheernam <jaipaul.cheernam@est.tech>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-27 23:33:16 -07:00
Jaipaul Cheernam 335021f7cd libesmtp: fix build with OpenSSL 4.0
OpenSSL 4.0 makes ASN1_STRING opaque. Use accessor functions.

Upstream-Status: Submitted [https://github.com/libesmtp/libESMTP/pull/34]
Signed-off-by: Jaipaul Cheernam <jaipaul.cheernam@est.tech>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-27 23:33:16 -07:00
Devansh Patel 8dffafdd1d dnsmasq: correct CVE_PRODUCT mapping
The default product-only mapping generates vendor-wildcard CPEs for the
recipe's Simon Kelley source. dnsmasq:dnsmasq is an NVD configuration
identity and CNA affected-data identity; the_kelleys:dnsmasq is an NVD
configuration identity; and thekelleys:dnsmasq is an active NVD
dictionary CPE and configuration identity with CNA affected-data records.

This changes the generated product identities. With the frozen
sbom-cve-check database, the 48-entry CVE report is unchanged, so this is
an identity correction with no CVE delta.

Signed-off-by: Devansh Patel <devanshp@cisco.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-26 10:26:42 -07:00
Jaipaul Cheernam f9f7a9482a meta-networking: fix trailing whitespace
Bitbake now warns about trailing whitespace in parsed metadata lines.
Fix the affected files to silence the warnings during parsing.

Reported on:
https://autobuilder.yoctoproject.org/valkyrie/#/builders/89/builds/4284/steps/15/logs/warnings

Signed-off-by: Jaipaul Cheernam <jaipaul.cheernam@est.tech>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-26 01:43:11 -07:00
Michal Sieron 0e1bcb85b4 ntp: Stop building and delivering ntpdate
ntpdate has been deprecated. meta-openembedded@6315006aadd in theory
dropped it, but in practice the binary was still being built and
shipped, but now as part of ntp-utils package.
To avoid this, let's patch it out of the build.

Signed-off-by: Michal Sieron <michal.sieron@nokia.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-22 18:50:03 -07:00
Khem Raj b31a666c34 linux-atm: Remove recipe
Linux commit 8f9616500c59 ("atm: remove orphaned uAPI for deleted drivers,
protocols and SVCs") deleted atm uAPI headers and ioctls in
linux/atmdev.h, legacy ATM drivers had been dropped from the kernel.

linux-atm is the userspace side of exactly those interfaces, so it no
longer builds once linux-libc-headers is 7.2:

  | ispl_l.l:15:10: fatal error: 'linux/atmsvc.h' file not found
  | ispl_y.y:15:10: fatal error: 'linux/atmsvc.h' file not found
  | src/test/isp.c:19:10: fatal error: 'linux/atmsvc.h' file not found
  | make[3]: *** [Makefile:589: ispl_y.o] Error 1

Remove the package

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-22 18:50:02 -07:00
Himanshu Jadon ee1c39e595 samba, libldb: add package conflicts
samba package also installs LDB command line tools and python LDB
module. libldb package installs the same tools and pyldb module from
standalone LDB source.

pkgdata shows the conflict clearly:

  samba: /usr/bin/ldbadd
  libldb: /usr/bin/ldbadd
  samba-python3: site-packages/ldb.so
  pyldb: site-packages/ldb.so

So when both samba and libldb are added in same image, rootfs can fail
because package manager sees same files from two different packages.
Both package sets are not expected to be installed together.

Add RCONFLICTS for samba/libldb and samba-python3/pyldb. This makes the
conflict explicit during dependency resolution instead of failing later
as file install conflict.

Older meta-networking had similar conflict handling for samba/libldb in
commit: https://git.openembedded.org/meta-openembedded/commit/?id=8e641e28f630dac61a03373ad70c72a2370ad11e

This change adds the same handling again with current python3 package names.

Signed-off-by: Himanshu Jadon <hjadon@cisco.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-20 11:10:54 -07:00
Ankur Tyagi 897908c73e wireshark: upgrade 4.6.7 -> 4.6.8
Release Notes:
https://www.wireshark.org/docs/relnotes/wireshark-4.6.8.html

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-19 00:52:56 -07:00
Ankur Tyagi ef32eafdc6 vnstat: add UPSTREAM_CHECK variables
Fixes:
$ devtool latest-version
...
INFO: Current version: 2.13
INFO: Latest version:

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-19 00:52:54 -07:00
Ankur Tyagi 608af6a8bd nuttcp: upgrade 8.2.2 -> 8.2.4
Drop redundant md5sum.

Changelog:
8.2.4
- Provide compile time options -DMIN_PORT=n, -DMIN_CTL_PORT=n,
  and -DMIN_DATA_PORT=n to set the allowed mimimum port number
- Provide compile time option -DNO_BLANK_LINE to suppress
- blank line in normal nuttcp output
- New "-A" option to bind to a specified interface IP address
- Fix compilation with -DNO_IPV6
- Document -D user compile time options in Usage: statement
- Shut up apparently bogus gcc 10.2.1 warning:
- writing 1 byte into a region of size 0 [-Wstringop-overflow=]
8.2.3
- Simplify handling of stream_idx (no more references to [stream_idx + 1])

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-19 00:52:54 -07:00
Ankur Tyagi 522369db81 macchanger: add UPSTREAM_CHECK variables
Fixes:
$ devtool latest-version macchanger
...
INFO: Current version: 1.7.0
INFO: Latest version:

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-19 00:52:54 -07:00
Ankur Tyagi 6c65205ee0 tcpreplay: upgrade 4.6.0 -> 4.6.1
Release Notes:
https://github.com/appneta/tcpreplay/releases/tag/v4.6.1

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-17 22:32:06 -07:00
Ankur Tyagi 4e4d00c205 tinyproxy: add UPSTREAM_CHECK_REGEX variable
Fixes:
$ devtool latest-version tinyproxy
...
INFO: Current version: 1.11.3
INFO: Latest version:

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-17 22:32:06 -07:00
Ankur Tyagi 1426adc5d7 libmaxminddb: add UPSTREAM_CHECK variables
Fixes:
$ devtool latest-version libmaxminddb
...
INFO: Current version: 1.13.3
INFO: Latest version:

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-17 22:32:06 -07:00
Ankur Tyagi d64d33e69e geoipupdate: add UPSTREAM_CHECK variables
Fixes:
$ devtool latest-version geoipupdate
...
INFO: Current version: 3.1.1
INFO: Latest version:

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-17 22:32:06 -07:00
James Lee b1c302feeb mctp: upgrade 2.5 -> 2.6
Bumped mctp and mctp-daemon version to 2.6, and added the new system
user to own mctpd's service.

Signed-off-by: James Lee <james@codeconstruct.com.au>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-14 14:38:25 -07:00
James Lee e059fc1543 mctp: split mctp tools and mctpd into separate recipes
The current mctp recipe relies on the upstream's conditional build and
install of the mctpd binary if systemd is present, only building the
mctp utility otherwise. Future upstream changes allowing running as
non-root require more control over the build process. We will need to
add a new system user when mctpd is built.

Adding a user requires inheriting useradd, which assumes at least one
user will be created, failing the recipe otherwise. Building without
mctpd would then cause the recipe to fail as conditionally inheriting
useradd seems infeasible.

To make useradd available for the new upstream release, split the recipe
into "mctp" for the utilities and "mctpd" for the daemon, isolating the
systemd dependency to "mctpd".

This makes the two parts of the source explicitly selectable from user
choice, rather than auto-detecting based on the presence of systemd.
This will allow the mctpd daemon to be installed without the mctp
utilities and allow the utilities to be installed without the daemon in
distros without systemd. It will also let us express the useradd rules
only when they're needed for the mctpd installation in the upcoming
version bump.

The mctp/mctpd split cannot be done with different packages within the
same recipe. It would require the systemd and useradd classes be added
to inherit_defer only when mctpd is to be built, and the library
functions cannot be used to detect which packages are built.

Signed-off-by: James Lee james@codeconstruct.com.au
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-14 14:38:24 -07:00
Khem Raj f23f06fd0e llhttp: add new recipe (9.4.3)
restinio 0.7.x drops its bundled http_parser and instead requires
llhttp to be supplied externally via find_package().

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-14 09:06:58 -07:00
Khem Raj 073acc4f58 tcpreplay: upgrade 4.5.5 -> 4.6.0
Bump to the 4.6.0 release tarball. As of 4.6.0 upstream introduces
CMake as the recommended build system, but the release tarball still
ships the Autotools build files (configure/Makefile.am) and Autotools
remains fully supported for building from release tarballs (only
deprecated for eventual removal in a future release), so the existing
autotools-brokensep-based recipe continues to work unchanged.

0001-libopts.m4-set-POSIX_SHELL-to-bin-sh.patch kept unchanged, still
needed, applies cleanly.

Build-verified: tcpreplay builds and packages successfully (existing
buildpaths QA warnings for libtcpreplay.pc/defines.h are pre-existing
and expected, WARN not ERROR on this distro).

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-14 09:06:33 -07:00
Khem Raj c3683a2d3e ssmtp: upgrade 2.64 -> 2.66
Bump to the upstream 2.66 orig tarball (now .orig.tar.gz instead of
.orig.tar.bz2) from Debian.

- ssmtp-bug584162-fix.patch dropped: the fix (dropping trailing '\r'
  in standardise() and the header_parse() EOF/empty-header handling)
  is already present verbatim in the 2.66 source.
- 0001-ssmtp-Correct-the-null-pointer-assignment-to-char-po.patch
  dropped: upstream already initializes all the char pointers with
  NULL instead of (char)NULL.
- 0001-Fix-incompatible-pointer-types-error-with-gcc-15.patch
  rebased: the call site already casts to (sighandler_t)handler in
  2.66, so only the handler() signature hunk is still needed; the
  call-site hunk was dropped as it no longer applies and is
  unnecessary once the signature takes an int.
- use-DESTDIR.patch rebased: upstream 2.66 already appends $(LDFLAGS)
  in the ssmtp link rule, so that hunk was dropped; the DESTDIR
  hunks for install/uninstall are still needed and were regenerated
  against the new Makefile.in.
- build-ouside_srcdir.patch and 0001-include-libgen.h-for-basename.patch
  kept unchanged, still needed, apply cleanly.

Build-verified: ssmtp builds and packages successfully.

AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-08-14 09:06:32 -07:00