Khem Raj
52db0e6c05
squid: Upgrade to 3.5.25
...
Add patch to fix throw() errors with gcc7
Update copyright year to 2017
Signed-off-by: Khem Raj <raj.khem@gmail.com >
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com >
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com >
2017-04-25 16:10:55 -04:00
Khem Raj
9c022b475e
lowpan-tools: Fix build with gcc7
...
Signed-off-by: Khem Raj <raj.khem@gmail.com >
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com >
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com >
2017-04-25 16:10:52 -04:00
Khem Raj
09e7ae53fd
memcached: Upgrade to 1.4.36
...
Signed-off-by: Khem Raj <raj.khem@gmail.com >
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com >
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com >
2017-04-25 16:10:26 -04:00
Khem Raj
dec5adef49
ipsec-tools: Fix build with gcc7
...
Signed-off-by: Khem Raj <raj.khem@gmail.com >
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com >
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com >
2017-04-25 16:10:26 -04:00
Benjamin Gaignard
b9b6ace5a1
tinyproxy: Add recipe
...
Signed-off-by: Benjamin Gaignard <benjamin.gaignard@linaro.org >
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com >
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com >
2017-04-25 16:10:26 -04:00
Khem Raj
27ac61803c
lowpan-tools: Fix build with clang
...
Signed-off-by: Khem Raj <raj.khem@gmail.com >
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com >
2017-04-25 16:10:15 -04:00
Khem Raj
3f63557cc4
ez-ipupdate: Fix formatting security warnings
...
Signed-off-by: Khem Raj <raj.khem@gmail.com >
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com >
2017-04-25 16:10:15 -04:00
Khem Raj
752653a10e
libnetfilter-conntrack: Upgrade to 1.0.6
...
Signed-off-by: Khem Raj <raj.khem@gmail.com >
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com >
2017-04-25 16:10:15 -04:00
Khem Raj
0094968f13
conntrack-tools: Upgrade to 1.4.4
...
Signed-off-by: Khem Raj <raj.khem@gmail.com >
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com >
2017-04-25 16:10:15 -04:00
Khem Raj
93de05ce5f
libnetfilter-acct: Fix build with clang
...
Signed-off-by: Khem Raj <raj.khem@gmail.com >
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com >
2017-04-25 16:10:15 -04:00
Khem Raj
46eb9bad8a
libnetfilter-queue: Fix symbol visibility bug found with clang
...
Signed-off-by: Khem Raj <raj.khem@gmail.com >
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com >
2017-04-25 16:10:15 -04:00
Khem Raj
0237ee20da
libnetfilter-cthelper, libnetfilter-cttimeout: Backport patches to fix symbol visibility
...
These are needed for building it with clang
Signed-off-by: Khem Raj <raj.khem@gmail.com >
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com >
2017-04-25 16:10:14 -04:00
Khem Raj
5477d5bcb7
nftables: Upgrade to 0.7
...
Signed-off-by: Khem Raj <raj.khem@gmail.com >
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com >
2017-04-25 16:10:14 -04:00
Khem Raj
2571887a95
libnftnl: Upgrade to 1.0.7
...
Fix build with clang while here
Signed-off-by: Khem Raj <raj.khem@gmail.com >
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com >
2017-04-25 16:10:14 -04:00
Khem Raj
9a98b3f665
mtr: Upgrade 0.87+git
...
Fixes for musl build are not in a release yet
until then switch to using git for SRC_URI
License file changes are here
https://github.com/traviscross/mtr/commit/dd42b2305a94dcbf80847410be0288df29d6a5ef
Signed-off-by: Khem Raj <raj.khem@gmail.com >
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com >
2017-04-25 16:10:07 -04:00
Szombathelyi György
81efffcc22
samba: fix conflict between samba and sudo packages
...
Use the same permissions for sudoers.d as in the sudo package.
Signed-off-by: Gyorgy Szombathelyi <gyurco@freemail.hu >
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com >
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com >
2017-04-25 15:55:38 -04:00
Armin Kuster
c083405d2a
wireshark: update to 2.2.6
...
The following vulnerabilities have been fixed:
* [1]wnpa-sec-2017-12
IMAP dissector crash ([2]Bug 13466) [3]CVE-2017-7703
* [4]wnpa-sec-2017-13
WBMXL dissector infinite loop ([5]Bug 13477) [6]CVE-2017-7702
* [7]wnpa-sec-2017-14
NetScaler file parser infinite loop ([8]Bug 13478) [9]CVE-2017-7700
* [10]wnpa-sec-2017-15
RPCoRDMA dissector infinite loop ([11]Bug 13558) [12]CVE-2017-7705
* [13]wnpa-sec-2017-16
BGP dissector infinite loop ([14]Bug 13557) [15]CVE-2017-7701
* [16]wnpa-sec-2017-17
DOF dissector infinite loop ([17]Bug 13453) [18]CVE-2017-7704
* [19]wnpa-sec-2017-18
PacketBB dissector crash ([20]Bug 13559)
* [21]wnpa-sec-2017-19
SLSK dissector long loop ([22]Bug 13576)
* [23]wnpa-sec-2017-20
SIGCOMP dissector infinite loop ([24]Bug 13578)
* [25]wnpa-sec-2017-21
WSP dissector infinite loop ([26]Bug 13581)
Signed-off-by: Armin Kuster <akuster@mvista.com >
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com >
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com >
2017-04-25 15:55:38 -04:00
Andrea Galbusera
b6adc8bae7
openvpn: avoid hardcoded path
...
Signed-off-by: Andrea Galbusera <gizero@gmail.com >
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com >
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com >
2017-04-25 15:55:38 -04:00
Andrea Galbusera
a6916b2241
openvpn: avoid packaging /run
...
/run is in FILES_${PN} but nothing either populate or even create it.
Signed-off-by: Andrea Galbusera <gizero@gmail.com >
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com >
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com >
2017-04-25 15:55:37 -04:00
Andrea Galbusera
07e8b8ebe3
openvpn: openvpn-volatile.conf: avoid hardcoded localstatedir
...
Signed-off-by: Andrea Galbusera <gizero@gmail.com >
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com >
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com >
2017-04-25 15:55:37 -04:00
Andrea Galbusera
eb0a49cc9c
openvpn: remove duplicate attempt to create dir in ${localstatedir}
...
When systemd is in DISTRO_FEATURES we have two attempts to create
${localstatedir}/run/openvpn: one at build time with install command and
the other via systemd-tmpfiles at runtime which is enabled by installing
openvpn-volatile.conf. Beside looking redundant, by dropping the build-time
dir creation attempt solves the following error when building images with
both base-files and openvpn:
Error: Transaction check error:
file /var/run conflicts between attempted installs of
openvpn-2.3.9-r0.cortexa7hf_neon_vfpv4 and
base-files-3.0.14-r89.raspberrypi3
Signed-off-by: Andrea Galbusera <gizero@gmail.com >
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com >
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com >
2017-04-25 15:55:37 -04:00
Andrea Galbusera
ccaf0a99d8
openvpn: ensure ${sysconfdir}/tmpfiles.d is packaged
...
The file was installed but never packaged, ending up in no systemd-tmpfiles
configuration on the final rootfs.
Signed-off-by: Andrea Galbusera <gizero@gmail.com >
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com >
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com >
2017-04-25 15:55:37 -04:00
Chen Qi
a6e6115c89
quagga: set ac_cv_path_PERL to '/usr/bin/env perl'
...
Set ac_cv_path_PERL to '/usr/bin/env perl' to fix problem when
/path/to/hosttools/perl is longer than 128.
Signed-off-by: Chen Qi <Qi.Chen@windriver.com >
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com >
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com >
2017-04-25 15:55:37 -04:00
Oliver Graute
25bfdafcae
nfacct: fixed SRC_URI and dropped workdir statement
...
Signed-off-by: Oliver Graute <oliver.graute@neuhaus.de >
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com >
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com >
2017-04-25 15:55:37 -04:00
Jaap de Jong
171c528162
uftp: Add recipe
...
To: openembedded-devel@lists.openembedded.org
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com >
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com >
2017-04-25 15:55:37 -04:00
Khem Raj
1543614e94
ntimed: Use adjtimex on musl
...
Drop do_compile, default is same
Do not assume that configure is running in S
Signed-off-by: Khem Raj <raj.khem@gmail.com >
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com >
2017-04-25 15:55:37 -04:00
Khem Raj
488214259d
autofs: Patch to build on musl
...
Signed-off-by: Khem Raj <raj.khem@gmail.com >
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com >
2017-04-25 15:55:37 -04:00
Khem Raj
423d6f08d0
snort: Fix build with musl
...
Signed-off-by: Khem Raj <raj.khem@gmail.com >
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com >
2017-04-25 15:55:36 -04:00
Khem Raj
1412617849
libnetfilter-queue: Update to git for SRC_URI
...
brings in the fixes to build on musl
Add a typo fix patch
Signed-off-by: Khem Raj <raj.khem@gmail.com >
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com >
2017-04-25 15:55:36 -04:00
Khem Raj
3692f1e202
libnetfilter-log: Switch to git URI
...
Move to tip of tree which has needed fixes for musl build
add missing dependency on libmnl
Signed-off-by: Khem Raj <raj.khem@gmail.com >
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com >
2017-04-25 15:55:36 -04:00
Khem Raj
a8d26915e8
arptables: Upgrade to 0.0.4
...
Switch the SRC_URI to git based fetcher
Signed-off-by: Khem Raj <raj.khem@gmail.com >
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com >
2017-04-25 15:55:36 -04:00
Khem Raj
9e69cd9c18
daq: Fix build with musl
...
unistd.h is not in sys/ on all platforms
use standard location in /usr/include to look for it
Signed-off-by: Khem Raj <raj.khem@gmail.com >
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com >
2017-04-25 15:55:36 -04:00
Khem Raj
46cd79e49e
vpnc: Update to build from github SRC_URI
...
Fix build for musl
add packageconfig for crypto selection
Fix build with externalsrc
Signed-off-by: Khem Raj <raj.khem@gmail.com >
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com >
2017-04-25 15:55:36 -04:00
Khem Raj
3b94d8533c
dibbler: Upgrade to 1.0.2RC1
...
Delete dibbler from meta-oe
Signed-off-by: Khem Raj <raj.khem@gmail.com >
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com >
2017-04-25 15:55:36 -04:00
Khem Raj
764c7f46da
vsftpd: Fix build with musl
...
Signed-off-by: Khem Raj <raj.khem@gmail.com >
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com >
2017-04-25 15:55:36 -04:00
Khem Raj
d946331bc0
rp-pppoe: Fix build with musl
...
Signed-off-by: Khem Raj <raj.khem@gmail.com >
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com >
2017-04-25 15:55:36 -04:00
Khem Raj
2fee586153
openl2tp: Fix build with musl
...
Signed-off-by: Khem Raj <raj.khem@gmail.com >
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com >
2017-04-25 15:55:35 -04:00
Khem Raj
b57ae5a2bd
lowpan-tools: Fix build with musl
...
Signed-off-by: Khem Raj <raj.khem@gmail.com >
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com >
2017-04-25 15:55:35 -04:00
Khem Raj
2cc844809f
ebtables: Fix build with musl
...
Backport upstream fixes and add fixes to make it work with musl
Signed-off-by: Khem Raj <raj.khem@gmail.com >
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com >
2017-04-25 15:55:35 -04:00
Khem Raj
729eae7490
libnfnetlink: Backport patches to fix musl build
...
There are few upstream patches that are required for getting it
working with musl, backport these patches on top of 1.0.1
Signed-off-by: Khem Raj <raj.khem@gmail.com >
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com >
2017-04-25 15:55:35 -04:00
Khem Raj
d9dc6b2d4c
squid: Update to 3.5.23
...
Disable NIS on musl, it doesnt yet build
Signed-off-by: Khem Raj <raj.khem@gmail.com >
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com >
2017-04-25 15:55:35 -04:00
Khem Raj
3402c594e8
netcat-openbsd: Fix build and whitelist
...
pkgconfig is used so we need to inherit pkgconfig
secondly, base64 support is added for it to work
with musl
Signed-off-by: Khem Raj <raj.khem@gmail.com >
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com >
2017-04-25 15:55:25 -04:00
Armin Kuster
01511d4cde
ntp: update to 4.2.8.p10
...
LICENSE_FILE md5 changed do to copyright date change.
NTF's NTP Project is releasing ntp-4.2.8p10, which addresses:
6 MEDIUM severity vulnerabilities (1 is about the Windows PPSAPI DLL)
5 LOW severity vulnerabilities (2 are in the Windows Installer)
4 Informational-level vulnerabilities
15 other non-security fixes and improvements
All of the security issues in this release are listed in VU#633849.
ntp-4.2.8p10 was released on 21 March 2017.
Sec 3389 / CVE-2017-6464 / VU#325339: NTP-01-016 NTP: Denial of Service via Malformed Config (Pentest report 01.2017)
Sec 3388 / CVE-2017-6462 / VU#325339: NTP-01-014 NTP: Buffer Overflow in DPTS Clock (Pentest report 01.2017)
Sec 3387 / CVE-2017-6463 / VU#325339: NTP-01-012 NTP: Authenticated DoS via Malicious Config Option (Pentest report 01.2017)
Sec 3386: NTP-01-011 NTP: ntpq_stripquotes() returns incorrect Value (Pentest report 01.2017)
Sec 3385: NTP-01-010 NTP: ereallocarray()/eallocarray() underused (Pentest report 01.2017)
Sec 3384 / CVE-2017-6455 / VU#325339: NTP-01-009 NTP: Windows: Privileged execution of User Library code (Pentest report 01.2017)
Sec 3383 / CVE-2017-6452 / VU#325339: NTP-01-008 NTP: Windows Installer: Stack Buffer Overflow from Command Line (Pentest report 01.2017)
Sec 3382 / CVE-2017-6459 / VU#325339: NTP-01-007 NTP: Windows Installer: Data Structure terminated insufficiently (Pentest report 01.2017)
Sec 3381: NTP-01-006 NTP: Copious amounts of Unused Code (Pentest report 01.2017)
Sec 3380: NTP-01-005 NTP: Off-by-one in Oncore GPS Receiver (Pentest report 01.2017)
Sec 3379 / CVE-2017-6458 / VU#325339: NTP-01-004 NTP: Potential Overflows in ctl_put() functions (Pentest report 01.2017)
Sec 3378 / CVE-2017-6451 / VU#325339: NTP-01-003 Improper use of snprintf() in mx4200_send() (Pentest report 01.2017)
Sec 3377 / CVE-2017-6460 / VU#325339: NTP-01-002 Buffer Overflow in ntpq when fetching reslist (Pentest report 01.2017)
Sec 3376: NTP-01-001 Makefile does not enforce Security Flags (Pentest report 01.2017)
Sec 3361 / CVE-2016-9042 / VU#325339: 0rigin
Signed-off-by: Armin Kuster <akuster@mvista.com >
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com >
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com >
2017-04-25 10:24:47 -04:00
Aaron Zinghini
529b1e660f
wireless-regdb: fix crda failing from missing pubkey
...
crda fails with exit code 255 because the public key
from wireless-regdb is missing.
Signed-off-by: Aaron Zinghini <aaron.zinghini@seeingmachines.com >
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com >
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com >
2017-04-25 10:24:33 -04:00
Kai Kang
38a5b1104b
libdnet: update SRC_URI
...
The official homepage libdnet.googlecode.com has been redirected to
github. So update SRC_URI to use git repo on github.
Signed-off-by: Kai Kang <kai.kang@windriver.com >
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com >
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com >
2017-04-25 10:24:06 -04:00
Khem Raj
11618db5cb
ctdb: Fix build with musl
...
Fixes
| ./utils/smnotify/smnotify.h:9:10: fatal error: 'rpc/rpc.h' file not found
| #include <rpc/rpc.h>
Signed-off-by: Khem Raj <raj.khem@gmail.com >
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com >
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com >
2017-04-25 10:23:37 -04:00
Martin Jansa
cdb428e7c4
recipes: add removal date to PNBLACKLIST messages
...
* based on discussion in pndeprecated thread:
https://patchwork.openembedded.org/patch/137573/
update the messages to warn possible users that the
recipe will be removed before the end of the next development
cycle (before Yocto 2.4 is released).
* updated with:
sed -i 's/^\(PNBLACKLIST.*".*\)"/\1 - the recipe will be removed on 2017-09-01 unless the issue is fixed"/g' `git grep PNBLACKLIST | sed 's/:.*//g' | sort -u | xargs`
* then noticed couple recipes being blacklisted only based on
DISTRO_FEATURES, so removed those:
meta-networking/recipes-support/lksctp-tools/lksctp-tools_1.0.17.bb
meta-oe/recipes-connectivity/bluez/bluez-hcidump_2.5.bb
meta-oe/recipes-connectivity/bluez/bluez4_4.101.bb
meta-oe/recipes-connectivity/bluez/gst-plugin-bluetooth_4.101.bb
meta-oe/recipes-navigation/foxtrotgps/foxtrotgps_1.1.1.bb
meta-oe/recipes-navigation/gypsy/gypsy.inc
meta-oe/recipes-navigation/navit/navit.inc
meta-oe/recipes-support/opensync/libsyncml_0.5.4.bb
* if it isn't fixed by this date, it's fair game to be removed
whenever someone gets around to i
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com >
2017-04-05 19:36:45 +02:00
Kai Kang
f2dfae5655
curlpp: 0.7.3 -> 0.8.1
...
Upgrade curlpp from 0.7.3 to 0.8.1. The main difference between 0.7.x
and 0.8.0 is that it replaces autotools with cmake, see
https://github.com/jpbarrette/curlpp/releases/tag/v0.8.0
The homepage of curlpp on googlecode is obsoleted, so update it and use
soure code repo on github.
Remove dependency boost which is dropped by upstream. And remove extra
CXXFLAGS which has been fixed by upstream.
Signed-off-by: Kai Kang <kai.kang@windriver.com >
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com >
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com >
2017-03-24 14:10:18 -04:00
Khem Raj
cb3561aa22
lftp: Upgrade to 4.7.7
...
Delete charset.alias if generated
Signed-off-by: Khem Raj <raj.khem@gmail.com >
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com >
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com >
2017-03-24 14:10:18 -04:00
Khem Raj
e4e7c0ac8e
dovecot: Use libtirpc to provide rpc on musl systems
...
Signed-off-by: Khem Raj <raj.khem@gmail.com >
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com >
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com >
2017-03-24 14:10:18 -04:00