406 Commits

Author SHA1 Message Date
Mike Krupicka 878e450a94 mosquitto: Use mosquitto.init for daemon init
Config file specification is missing in start) case. It is present already in restart) case.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 257ea010b7)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-03-15 13:24:57 -07:00
Stefan Agner 6ecbdf2131 networkmanager: do not deploy unnecessary udev rule file
The 84-nm-drivers.rules is not required for systemd-udevd versions
v210 and later. The file has been split into a separate file so
distributions with a new enough systemd version can drop it. See
also:
https://github.com/NetworkManager/NetworkManager/commit/1e0375826252abf9aab2aef273a2a24cd08c9f42

I noticed this while investigating into a warning show during
bootup:
  /usr/lib/udev/rules.d/84-nm-drivers.rules:10 Invalid value "/bin/sh -c
  'ethtool -i $1 | sed -n s/^driver:\ //p' -- $env{INTERFACE}" for PROGRAM
  (char 24: invalid substitution type), ignoring, but please fix it.

Signed-off-by: Stefan Agner <stefan.agner@toradex.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 82ecc0e69f)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-01-05 14:43:51 -08:00
Adrian Bunk 5320ae9f02 networkmanager: Upgrade 1.18.2 -> 1.18.4
Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 1db745db41)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-01-05 14:43:33 -08:00
Denys Dmytriyenko 0d16b31c3d mbedtls: upgrade 2.16.2 -> 2.16.3
* Mbed TLS 2.16.3 is a maintenance release of the Mbed TLS 2.16 branch, and
  provides bug fixes and minor enhancements.

https://github.com/ARMmbed/mbedtls/releases/tag/mbedtls-2.16.3

Most importantly, this fixes breakage on ARMv5TE platforms:

* Fix the build on ARMv5TE in ARM mode to not use assembly instructions that
  are only available in Thumb mode.

https://github.com/ARMmbed/mbedtls/pull/2169

Signed-off-by: Denys Dmytriyenko <denys@ti.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-12-08 08:12:43 -08:00
Yi Zhao df851c3e35 freeradius: fix CVE-2019-10143
Reference:
https://nvd.nist.gov/vuln/detail/CVE-2019-10143

Patch from:
https://github.com/FreeRADIUS/freeradius-server/commit/1f233773962bf1a9c2d228a180eacddb9db2d574

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-11-24 12:55:44 -08:00
Yi Zhao ee5aa6911b samba: upgrade 4.10.8 -> 4.10.10
Security fixes:

CVE-2019-10218: Client code can return filenames containing path
                separators.
CVE-2019-14833: Samba AD DC check password script does not receive the
                full password.
CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP
                server via dirsync.

See: https://www.samba.org/samba/history/samba-4.10.10.html

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-11-24 12:24:37 -08:00
Andreas Oberritter b6d1134bc8 samba: fix installation for minimal build
| chmod: cannot access '.../image/etc/sudoers.d': No such file or directory
| sed: can't read .../image/usr/bin/samba-tool: No such file or directory

Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-11-24 12:24:19 -08:00
Paul Eggleton a21cc89423 mosquitto: update to 1.6.7
Bugfix release. For details, see:

  https://mosquitto.org/blog/2019/09/version-1-6-7-released/

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-10-09 23:27:15 -07:00
Zang Ruochen 5386a37705 firewalld: upgrade 0.7.1 -> 0.7.2
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-10-08 22:10:54 -07:00
Trevor Gamblin 5d23c6329e freeradius: add -latomic for armv5
freeradius fails to build for armv5:

| *** Warning: Linking the executable build/bin/local/radeapclient against the loadable module
| *** libfreeradius-server.so is not portable!
|
| *** Warning: Linking the executable build/bin/local/radeapclient against the loadable module
| *** libfreeradius-eap.so is not portable!
path -Wl,/yow-lpggp31/tgamblin/freeradius.build/tmp-glibc/work/armv5e-oe-linux-gnueabi/freeradius/3.0.19-r0/git/build/lib/local//.libs
/arm-oe-linux-gnueabi/9.2.0/ld: build/lib/local/.libs/libfreeradius-radius.so: undefined reference to `__atomic_compare_exchange_8'
/arm-oe-linux-gnueabi/9.2.0/ld: build/lib/local/.libs/libfreeradius-radius.so: undefined reference to `__atomic_load_8'
/arm-oe-linux-gnueabi/9.2.0/ld: build/lib/local/.libs/libfreeradius-radius.so: undefined reference to `__atomic_store_8'
| collect2: error: ld returned 1 exit status
| scripts/boiler.mk:630: recipe for target 'build/bin/local/radeapclient' failed

Explicitly link libatomic to fix the issue.

Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-10-08 12:54:16 -07:00
Ovidiu Panait e17a684f28 kea: Disable parallel install
According to configure.ac, make install might fail when run with multiple jobs:

$ tail -15 log.do_configure
...
When running "make install" do not use any form of parallel or job
server options (such as GNU make's -j option). Doing so may cause
errors.
...

Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-10-04 19:11:55 -07:00
Callaghan, Dan 1eaeb89b94 firewalld: update to 0.7.1
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-10-04 19:11:55 -07:00
Adrian Bunk e5f1dbdca0 networkmanager: Correct the upstream version check
Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-30 16:54:51 -07:00
Otavio Salvador 0027df7f53 networkmanager: Add sysvinit support
Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-30 16:54:51 -07:00
Otavio Salvador 054fd87b62 networkmanager: Add a resolvconf PACKAGECONFIG
Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-30 16:54:51 -07:00
Otavio Salvador 4a7e40887e networkmanager: Fix ADSL plugin packaging
Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-30 16:54:51 -07:00
Changqing Li 95b316c701 kea: upgrade 1.5.0 -> 1.7.0
The license checksum change is due to the date being updated.

Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-28 12:49:37 -07:00
Callaghan, Dan cddf038131 firewalld: add UPSTREAM_CHECK_URI
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-25 09:48:19 -07:00
Leon Anavi 6f560065cf mosquitto: update to 1.6.6
Fix security vulnerabilities. For further details, see:
https://mosquitto.org/blog/2019/09/version-1-6-6-released/

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-22 08:13:17 -07:00
Yi Zhao ef1b17f4ef samba: upgrade 4.10.7 -> 4.10.8
Security fixes:

CVE-2019-10197: Combination of parameters and permissions can allow user
                to escape from the share path definition.

See: https://www.samba.org/samba/history/samba-4.10.8.html

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-17 07:22:52 -07:00
Paul Eggleton 40f6fd1253 mosquitto: update to 1.6.5
A lot of changes upstream since the last upgrade, the highlights:
* MQTT v5 protocol support
* Performance improvements
* New mosquitto_rr (request/response) client
* TLS enhancements: OCSP stapling, TLS Engine support, explicit TLS v1.3
  support, removed TLS v1.0 support

For further details, see https://mosquitto.org/blog/

Additionally, SUMMARY and DESCRIPTION were tidied up as needed.

Based upon an earlier upgrade patch by Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-16 18:25:26 -07:00
Khem Raj e7b382602a samba: Fix configure tests to work with clang
Do not use nested functions ( main inside main )
Use global scope for __thread variables

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-07 10:08:45 -07:00
Changqing Li 870e66d5f7 freeradius: upgrade 3.0.17 -> 3.0.19
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-02 20:26:58 -07:00
Adrian Bunk 8ebe4041dd Replace EXCLUDE_FROM_WORLD_libc-musl = "1" with COMPATIBLE_HOST_libc-musl = 'null'
This gives users a proper error message when trying to build
a known non-building package.

netkit-rsh already had COMPATIBLE_HOST_libc-musl = 'null'.

Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-29 09:06:54 -07:00
Yi Zhao 0469a69392 samba: upgrade 4.10.6 -> 4.10.7
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-29 09:06:54 -07:00
Adrian Bunk 6b41e0ad6f networkmanager: Upgrade 1.18.0 -> 1.18.2
Remove a generated file with always changing hash from LIC_FILES_CHKSUM.

Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-21 12:41:20 -07:00
Adrian Bunk db9ca7d7c3 networkmanager: musl now supports secure_getenv
It is no longer necessary to introduce a potential security
vulnerability for fixing the musl build.

Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-18 21:47:18 -07:00
Martin Jansa b386c97414 freeradius: add runtime dependency on perl
* fixes:
  ERROR: QA Issue: /usr/bin/radcrypt contained in package freeradius-utils requires /usr/bin/perl, but no providers found in RDEPENDS_freeradius-utils? [file-rdeps]

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-17 01:42:54 -07:00
Laszlo Toth 870571196e networkmanager: fix typo in nonarch_base_libdir
Signed-off-by: Laszlo Toth <laszlth@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-11 14:36:22 -07:00
Yi Zhao 493aa5b896 snort: upgrade 2.9.14 -> 2.9.14.1
Add volatile conf to create log directory.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-11 08:58:05 -07:00
Oleksandr Kravchuk 7202dc2675 dhcpcd: update to 8.0.2
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-05 00:38:49 -07:00
Oleksandr Kravchuk 5064a83dc0 wolfssl: update to 4.1.0
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-30 19:15:24 -07:00
Khem Raj d31ac50253 snort: Fix build with glibc 2.30
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-30 19:15:24 -07:00
Oleksandr Kravchuk 2bdd4a5995 dhcpcd: update to 8.0.1
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-28 17:11:17 -07:00
Yi Zhao 5032f0df2e snort: upgrade 2.9.13 -> 2.9.14
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-23 09:37:22 -07:00
Oleksandr Kravchuk 74ca25227b blueman: update to 2.1.1
Removed patch was upstreamed.

Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-22 09:31:46 -07:00
Khem Raj 07db1c40ee firewalld: Update to 0.6.3->0.6.4
Forward port patch to work with 0.6.4 and update the status

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-21 09:40:20 -07:00
Drew Moseley 3982dc5b19 networkmanager: Use ALTERNATIVES for resolv-conf handling.
This brings the networkmanager in sync with how systemd-resolved and connman
work. Additionally this allows it to function with a read-only rootFS.

Signed-off-by: Drew Moseley <drew.moseley@northern.tech>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-21 09:31:09 -07:00
Yi Zhao 76d12b8f00 samba: upgrade 4.10.5 -> 4.10.6
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-21 09:31:09 -07:00
Oleksandr Kravchuk f0ed6c4e4f dhcpcd: update to 7.2.3
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-18 11:21:57 -07:00
Radovan Scasny 23be1ab16d dhcpcd: fix building with pkgconfig
PKGCONFIG was used, but not inherited

Signed-off-by: Andrej Valek <andrej.valek@siemens.com>
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Radovan Scasny <radovan.scasny@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-12 11:14:37 -07:00
Zang Ruochen 826898d878 adcli: added new recipe.
-radiusclient-ng is too old. So, added a substitute.

-Has fixed the build on musl.

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-11 23:18:54 -07:00
Radovan Scasny 26361a6794 dhcpcd: enable udev by default
Signed-off-by: Radovan Scasny <radovan.scasny@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-10 09:34:20 -07:00
Oleksandr Kravchuk b7d4d1a2ec miniupnpd: update to 2.1.20190210
License checksum changed due to modified copyright years.

Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-10 09:24:33 -07:00
Changqing Li 0c9e727a28 samba: upgrade 4.8.12 -> 4.10.5
1. switch to python3, from 4.10.x, samba support both python2 and python3,
   and from 4.11.x, python2 will be dropped.
2. fix cross-compile problem caused by waf
3. disable lmdb
4. refresh patch

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-10 09:24:32 -07:00
Oleksandr Kravchuk 9bd0009b34 sethdlc: set PV in filename
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-10 09:24:32 -07:00
Adrian Bunk 5341caddb7 networkmanager: Drop bluez4 support
bluez4 was removed from meta-oe 2 years ago.

Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-10 09:24:32 -07:00
Adrian Bunk f51548eff6 blueman: Enable thunar support by default but don't rdepend on it
This matches upstream default.
The no longer required bbappend in meta-xfce is also removed.

Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-10 09:24:32 -07:00
Yi Zhao 8cab57e4aa snort: fix compile-host-path QA issue
The Fedora 28+ does not have inbuilt SunRPC support in glibc and is
separately availble in tirpc package. So it enables tirpc checking for
fedora in configure.

Drop this piece of code since we had specify '-ltirpc' in LDFLAGS
explicitly. Otherwise it will cause a compile-host-path QA issue if the
host is Fedora 28+:
cc1: warning: include location "/usr/include/tirpc" is unsafe for
cross-compilation [-Wpoison-system-directories]

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-10 09:24:32 -07:00
Oleksandr Kravchuk db4b115ef3 dhcpcd: update to 7.2.2
udev is now enabled by default and is always requested.

License checksum changed due to modified copyright year.

Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-06-25 14:22:33 -07:00