Commit Graph

1001 Commits

Author SHA1 Message Date
Yi Fan Yu 138e4f59c3 tcpdump: update 4.9.3 -> 4.99.0
Removed patches:
    * avoid-absolute-path-when-searching-for-libdlpi.patch
    reason: this is a solaris specific patch,
            It no longer generates QA error.

    * unnecessary-to-check-libpcap.patch
    reason: upstream changed the logic, a new patch was needed.

New patch:
    * 0001-aclocal.m4-Skip-checking-for-pcap-config.patch
    reason: configure shouldn't look for pcap-config.
    upstream reference: cfc4c750a

Modified patch:
    * add-ptest.patch
    reason: Makefile had slight change.
            new unrelated perl script was introduced,
            removed to make package QA happy.

License:
    upstream removed some whitespace

Ptest:
    binaries are now present in /usr/bin not /usr/sbin
        upstream commit: 95096be4f
    add perl libraries dependencies

    tests passed: 571 (qemux86-64)
    tests failed: 0

Signed-off-by: Yi Fan Yu <yifan.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-21 23:37:54 -08:00
Khem Raj ed54f12e19 recipes: Update common-licenses references to match new names
The licenses were renamed to match their SPDX names, fix the
references in LIC_FILES_CHKSUM

Correct the checksums where they were wrong

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-21 23:37:54 -08:00
Oleksiy Obitotskyy ac4c2dc26d wireshark-src: improve reproducibility
What was done:
- add --noline option to flex, --no-line to bison
  and -l to lemon generators to prevent
  adding #line directives with absolute path.
- eliminate absolute source path in python code generator
  and use baseline instead.

Signed-off-by: Oleksiy Obitotskyy <oobitots@cisco.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-17 09:58:35 -08:00
Oleksandr Kravchuk 57ccfc7f79 wireshark: update to 3.4.3
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-11 09:05:11 -08:00
Oleksandr Kravchuk eec3d38a7a fetchmail: udpate to 6.4.16
License-Update: copyright years.

Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-11 09:05:11 -08:00
Hongxu Jia 5506dc7ddb ndpi: fix autoconf-2.71 compatibility
While DEBUG_BUILD != 1, Yocto adds option _FORTIFY_SOURCE to CPP and CC [1],
since _FORTIFY_SOURCE requires -O1 or higher, if no -O1 or higher then
results in a compiler warning.

The configure.ac of ndpi uses macro AC_PROG_CC to test toolchain, since
CPPFLAGS does not have the option -O<level> [1], while building with autoconf
2.71+, the toolchain test will report a warning.

The configure.ac of ndpi uses macro AC_LANG_WERROR to treat the warning as
error. Then it broke the build
...
|configure: error: C preprocessor "i686-wrs-linux-gcc -E --sysroot=tmp-glibc/
work/core2-32-wrs-linux/ndpi/3.4-r0/recipe-sysroot  -m32 -march=core2
-mtune=core2 -msse3 -mfpmath=sse -fstack-protector-strong -D_FORTIFY_SOURCE=2
-Wformat -Wformat-security -Werror=format-security" fails sanity check
...

The SELECTED_OPTIMIZATION contains option -O<level>, add SELECTED_OPTIMIZATION
to CPPFLAGS to could fix the issue

[1] The definition of CPP and CC and XXXFLAGS in bitbake.conf
[snip]
export CPP = "${HOST_PREFIX}gcc -E${TOOLCHAIN_OPTIONS} ${HOST_CC_ARCH}"
export CC = "${CCACHE}${HOST_PREFIX}gcc ${HOST_CC_ARCH}${TOOLCHAIN_OPTIONS}"
...
export CFLAGS = "${TARGET_CFLAGS}"
TARGET_CFLAGS = "${TARGET_CPPFLAGS} ${SELECTED_OPTIMIZATION}"
...
export CPPFLAGS = "${TARGET_CPPFLAGS}"
TARGET_CPPFLAGS = ""
[snip]

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-09 08:51:48 -08:00
Oleksandr Kravchuk e6b20e7711 nghttp2: update to 1.43.0
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-06 21:52:33 -08:00
zangrc a12c6cf8a9 libtalloc: upgrade 2.3.1 -> 2.3.2
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-06 21:52:33 -08:00
Hongxu Jia bf527522e0 spice: make conpatible to autoconf-2.70
In order to build with autoconf 2.7, explicitly link to jpeg lib
since lib jpeg is already in DEPENDS
...
| checking for jpeglib.h... ../git/configure: line 16008: CPP: command not found
...

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-05 10:59:49 -08:00
zhengruoqin 118fccf2d1 open-isns: upgrade 0.99 -> 0.101
* Changes v0.100 to v0.101:

Dmitry Bogdanov (1):
      Fix parsing of GetNextRsp

Lee Duncan (10):
      Ignore common build files
      Fix compiler issue when not in security mode
      Do not ignore write() return value.
      Fix 586 compile issue and remove -Werror
      Added a TODO: 'make depend' not worrking
      Update version string to "0.100".
      Fix broken server authentication initialization.
      Add man page for isnssetup.
      Added TODO to test "isnsd --init"
      Preparing for version 0.101

Leo (1):
      socket.c: include poll.h instead of sys/poll.h for POSIX compatibility

Rosen Penev (2):
      fix compilation without deprecated OpenSSL APIs
      libisns: remove sighold and sigrelse

* Changes v0.99 to v0.100:

Chris Leech (1):
      Travis-CI and Coverity Scan setup

Lee Duncan (7):
      Fix compiler complaint about possible alignment issue
      add tags to ignored list of files
      Change isns_portal_string() to return allocated string.
      Remove old compiler option, and add "-Werror".
      openssl: handle newer version with ifdefs
      General cleanup for the compiler.
      Fix problem with parsing IPv6 Addresses with brakcets.
      Preparing for version v0.100
      Added debugging, moved .cvsignore to .gitignore
      fixed issues with old openssl usage
      Adding python compiled files
      Change isns_portal_string() to use static mem
      Running make twice should not rebuild everything
      Fix mdebug.c so it compiles when enabled.
      Handle restarting test harness server correctly
      Ignore SO lib
      Create and use pythong unittest framework

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-04 19:10:38 -08:00
Hongxu Jia 974fed367e lksctp-tools: make conpatible to autoconf-2.70
...
./configure: line 16398: syntax error: unexpected end of file
...

Backport a commit from upstream to fix it

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-04 09:26:39 -08:00
Wang Mingyu 3e28a31bb4 dnsmasq: upgrade 2.82 -> 2.84
Refresh the following patch:
lua.patch

Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-29 09:52:13 -08:00
Yi Zhao 561a5c9d44 openipmi: upgrade 2.0.30 -> 2.0.31
Refresh openipmi-remove-host-path-from-la_LDFLAGS.patch

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-29 09:52:13 -08:00
Mario Schuknecht 55c94cb319 dnsmasq: Fix systemd service
Systemd service file option 'ExecStopPre' is warned and ignored by
systemd. By replacing 'ExecStopPre' with 'ExecStop', the intended
behavior is realized. The 'ExecStop' commands are executed one after the
other.

Signed-off-by: Mario Schuknecht <mario.schuknecht@dresearch-fe.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-25 14:58:54 -08:00
changqing.li@windriver.com 5450c958bf celt051: update SRC_URI
original SRC_URI is not valid now, offical CELT repository
moved to gitlab

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-19 09:12:04 -08:00
Wang Mingyu 33086407b1 dovecot: upgrade 2.2.36.4 -> 2.3.13
0001-doveadm-Fix-parallel-build.patch
removed since it is included in 2.3.13

refresh 0001-configure.ac-convert-AC_TRY_RUN-to-AC_TRY_LINK-state.patch

add 0001-not-check-pandoc.patch to not check pandoc of configure

Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-18 22:38:29 -08:00
Armin Kuster b2d9c69405 wireshark: Several securtiy fixes
Source: Wireshark.org
MR: 106181, 106696, 107655, 107673, 107682
Type: Security Fix
Disposition: Backport from wireshark.org
ChangeID: 57df6ac3b11aabd96e6aec728501ce7988bc176a
Description:

Bugfix only update including these cves:
3.2.8
CVE-2020-26575
CVE-2020-28030

3.2.9
CVE-2020-26418
CVE-2020-26421
CVE-2020-26420

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-13 10:22:23 -08:00
Zheng Ruoqin 3055f59683 cifs-utils: upgrade 6.11 -> 6.12
0001-Bugfix-Modify-the-dir-of-install-exec-hook-and.patch
Removed since this is included in 6.12.

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-12 00:54:53 -08:00
zangrc b8e884d638 rdma-core: upgrade 32.0 -> 33.0
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-07 22:57:45 -08:00
Yi Zhao d97b95466d tcpdump: add UPSTREAM_CHECK_REGEX
Add UPSTREAM_CHECK_REGEX to skip checking testing version (e.g. 4.99.0).

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-05 09:16:25 -08:00
zhengruoqin 1d112d988e bridge-utils: upgrade 1.6 -> 1.7
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-28 22:34:02 -08:00
zangrc 667a7b1027 libtevent: upgrade 0.10.1 -> 0.10.2
Refresh the following patch:
avoid-attr-unless-wanted.patch
options-0.10.0.patch

0001-waf-add-support-of-cross_compile.patch
Removed since this is included in 0.10.2

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-28 22:34:02 -08:00
zangrc d8426e0637 libtalloc: upgrade 2.3.0 -> 2.3.1
0001-waf-add-support-of-cross_compile.patch
Removed since this is included in 2.3.1.

Refresh the following patch:
avoid-attr-unless-wanted.patch
options-2.2.0.patch

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-28 22:34:02 -08:00
Mingli Yu 049f0b3e83 traceroute: change the ALTERNATIVE_PRIORITY
Both inetutils-traceroute and traceroute provide the traceroute
command and the ALTERNATIVE_PRIORITY of inetutils-traceroute is
79 until now.

Increase the ALTERNATIVE_PRIORITY of traceroute to 100 to guarantee
the traceroute command provided by traceroute when both of the
packages installed.

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-23 22:47:02 -08:00
zangrc 4a3e3f2d2d openipmi: upgrade 2.0.29 -> 2.0.30
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-18 08:23:14 -08:00
zangrc 3e05b98d08 nghttp2: upgrade 2.41.0 -> 2.42.0
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-27 11:54:04 -08:00
viatsk 0192d60708 tcpdump: Patch for CVE-2020-8037
Signed-off-by: Stacy Gaikovaia <stacy.gaikovaia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-24 21:19:34 -08:00
Khem Raj d9d8713860 chrony: Upgrade to 4.0
ChangeLog is here [1]

Do not install /var/log as it conflicts with basefiles package

Collected errors:
 * check_data_file_clashes: Package chrony wants to install file /var/log
        But that file is already provided by package  * base-files

Remove CVE patch since its upstream

Forward port arm_eabi.patch patch

Make builds reproducible

[1] https://chrony.tuxfamily.org/news.html

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-23 22:51:38 -08:00
Beni 70662b5b7e unbound: upgrade to 1.12.0
Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-23 07:09:34 -08:00
zangrc 9a77c8d8f0 strongswan: upgrade 5.8.4 -> 5.9.1
0001-Remove-obsolete-setting-regarding-the-Standard-Outpu.patch
Removed since this is included in 5.9.1

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-23 07:09:33 -08:00
zangrc f682696a05 rdma-core: upgrade 31.1 -> 32.0
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-23 07:09:33 -08:00
Mingli Yu bcfd6f7a4b traceroute: set VPATH
Fixes:
make[1]: *** No rule to make target '-lm', needed by 'traceroute'.  Stop.

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-18 08:25:43 -08:00
Khem Raj 59f817bbe3 openipmi: Inherit python3targetconfig
Fixes

configure: error:
  Could not link test program to Python. Maybe the main Python library has been
  installed in some non-standard library path. If so, pass it to configure,
  via the LIBS environment variable.
  Example: ./configure LIBS="-L/usr/non-standard-path/python/lib"

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-17 15:04:43 -08:00
Khem Raj 05d7f36548 ntopng: Link with libatomic on rv32
Fixes build errors e.g.
include/c++/10.2.0/bits/atomic_base.h:426: undefined reference to `__atomic_load_8'

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-15 12:25:54 -08:00
Khem Raj 02c21a0342 spice: Add leading whitespace for append operator
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-15 12:25:53 -08:00
Nick Rosbrook 4cdd651960 strongswan: remove ldap from default PACKAGECONFIG
Since ldap is not a standard DISTRO_FEATURE, leave it disabled by default.

Signed-off-by: Nick Rosbrook <rosbrookn@ainfosec.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-10 08:15:56 -08:00
Nick Rosbrook b570072902 strongswan: do not use deprecated stroke and starter by default
The swanctl and vici configuration of strongswan is preferred, as the stroke
plugin used with starter is deprecated. As a reasonable default, add swanctl
to PACKAGECONFIG by default, and remove stroke. When systemd is in DISTRO_FEATURES,
add systemd-charon to PACKAGECONFIG, and add charon when systemd is not in
DISTRO_FEATURES.

While here, make sure strongswan-starter.service is only installed when
charon is enabled. The current unconditional installation of
strongswan-starter.service can break systems which install strongswan.service
for use with swanctl.

Signed-off-by: Nick Rosbrook <rosbrookn@ainfosec.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-10 08:15:56 -08:00
Mingli Yu 127e50b456 ntop: remove the recipe
The ntop project is inactive and there is no new version
since 2012 [1] and it has been replaced by ntopng.

[1] https://sourceforge.net/projects/ntop/files/ntop/Stable/

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-09 20:49:52 -08:00
Mingli Yu f5b9e4ecd2 ntopng: add new recipe
ntopng is a web-based network traffic monitoring application
released under GPLv3. It is the new incarnation of the original
ntop written in 1998, and now revamped in terms of performance,
usability, and features.

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-09 20:49:52 -08:00
Mingli Yu 3b6b36e32d libmaxminddb: add new recipe
The libmaxminddb library provides a C library for reading MaxMind
DB files, including the GeoIP2 databases from MaxMind.

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-09 20:49:52 -08:00
Mingli Yu 1b37387c39 ndpi: add new recipe
nDPI is an open source LGPLv3 library for deep-packet inspection.

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-09 20:49:52 -08:00
Zang Ruochen f20a4ba04f openvpn: upgrade 2.4.9 -> 2.5.0
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-09 13:41:02 -08:00
Khem Raj 7a0117ec4e dovecot: Disable LTO
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-09 13:41:02 -08:00
Khem Raj 294e945309 traceroute: Fix build with LTO
Drop patch needed to build when S = B, we do not use this setting
anymore

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-09 13:40:57 -08:00
Khem Raj 7b31db8928 rdma-core: Upgrade to 31.1
Disable LTO, its uses ASM constructs for symbol versioning which are incompatible with LTO,
they should migrate to gcc-10's mechanism for symbol versioning which is
compatible with LTO

disable manpages, it needs pandoc to build

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-09 00:00:05 -08:00
Khem Raj e1745fb68f lksctp-tools: Update to latest master
Drop the patches which are upstream now

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-09 00:00:05 -08:00
Nick Rosbrook b6e1480592 strongswan: add some PACKAGECONFIG options for EAP
Add options for eap-identity and eap-mschapv2 plugins.

Signed-off-by: Nick Rosbrook <rosbrookn@ainfosec.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-06 21:26:27 -08:00
Anatol Belski b4d7b1ee42 chrony: Patch CVE-2020-14367
Signed-off-by: Anatol Belski <anbelski@linux.microsoft.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-02 09:00:52 -08:00
Fagundes, Paulo 36f6580943 vnstat: add recipe
vnStat is a console-based network traffic monitor for Linux and BSD
that keeps a log of network traffic for the selected interface(s).

Signed-off-by: Paulo Fagundes <paulohefagundes@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-23 10:20:24 -07:00
Chen Qi 7a0d9990a6 open-isns: use /run instead of /var/run in systemd service file
/var/run has been deprecated by systemd, so use /run instead,
as suggested by systemd.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-19 22:30:51 -07:00