Commit Graph

3218 Commits

Author SHA1 Message Date
Arsalan H. Awan
27bdecd1bc meta-networking/licenses/netperf: remove unused license
This removes the old unused license for netperf as upstream
moved to using the MIT license for netperf.

See: meta-openembedded commit 587fe58777

Signed-off-by: Arsalan H. Awan <arsalan.awan@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-04-28 06:59:50 -07:00
Wang Mingyu
643386c673 samba: upgrade 4.18.1 -> 4.18.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-04-23 21:55:52 -07:00
Wang Mingyu
f2d696e3fc networkmanager: upgrade 1.42.4 -> 1.42.6
Changelog:
==========
* Emit the dhcp-change dispatcher event also after a lease renewal.
* Fix assertion failure on DHCP renewal.
* Add support for EC2 IMDSv2 in nm-cloud-setup.
* Allow setting tunnel flags for ip6gre & ip6gretap connection
  profiles.
* Improve the Wi-Fi hotspot functionality.
* Fix setting the Wi-Fi roaming policy based on the number of seen
  BSSIDs.
* Support the "no-aaaa" resolv.conf option.
* Some oFono fixes.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-04-23 21:55:52 -07:00
Peter Marko
648912f72d ntp: whitelist CVE-2019-11331
Links from https://nvd.nist.gov/vuln/detail/CVE-2019-11331 lead to
conclusion that this is how icurrent ntp protocol is designed.
New RFC is propsed for future but it will not be compatible with current
one.

See https://support.f5.com/csp/article/K09940637

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-04-19 09:39:15 -07:00
Wang Mingyu
2e782260d0 tcpdump: upgrade 4.99.3 -> 4.99.4
Changelog:
==========
Source code:
----------------
  Fix spaces before tabs in indentation.
Updated printers:
-----------------
  LSP ping: Fix "Unused value" warnings from Coverity.
  CVE-2023-1801: Fix an out-of-bounds write in the SMB printer.
  DNS: sync resource types with IANA.
  ICMPv6: Update the output to show a RPL DAO field name.
  Geneve: Fix the Geneve UDP port test.
Building and testing:
----------------------
  Require at least autoconf 2.69.
  Don't check for strftime(), as it's in C90 and beyond.
  Update config.{guess,sub}, timestamps 2023-01-01,2023-01-21.
Documentation:
-------------
  man: Document TCP flag names better.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-04-17 09:53:32 -07:00
Wang Mingyu
f613df1f33 openvpn: upgrade 2.6.2 -> 2.6.3
Changelog:
==========
  GHA: remove Ubuntu 18.04 builds
  vcpkg: request "tools" feature of openssl for MSVC build
  doc: run rst2* with --strict to catch warnings
  Support of DNS domain for DHCP-less drivers
  Bug-fix: segfault in dco_get_peer_stats()

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-04-17 09:53:31 -07:00
Wang Mingyu
4b28dff276 mctp: upgrade 1.0 -> 1.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-04-17 09:53:31 -07:00
Petr Gotthard
d7001f534e nftables: upgrade 1.0.6 -> 1.0.7
Changelog:
https://netfilter.org/projects/nftables/files/changes-nftables-1.0.7.txt

The COPYING text changed to highlight that "New code though is moving to
GPL version 2 or any later which is the preferred license for this project
these days." Although the project itself stays GPLv2 only.
https://netfilter.org/licensing.html#terms

The upstream replaced distutils with setuptools, so the nftables-python
is now built using the standard approach. The coexistence of setuptools
and automake is solved in the same way as in meta-oe/recipes-support/libiio.

The removal of *.pyc is no longer necessary.

Signed-off-by: Petr Gotthard <petr.gotthard@advantech.cz>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-04-14 15:38:30 -07:00
Martin Jansa
89ca8235d4 restinio: fix S variable in multilib builds
* do_populate_lic as well as do_configure fails in multilib builds, because S points to empty:
  lib32-restinio/0.6.13-r0/lib32-restinio-0.6.13/dev

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-04-07 16:58:15 -07:00
Khem Raj
6d22cd4c12 libdnet: Upgrade to 1.16.3
Fix build with upcoming autoconf 1.16.3

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-04-06 13:45:10 -07:00
Peter Kjellerstedt
2e0a581bee recipes: Remove double protocol= from SRC_URIs
With the exception of paho-mqtt-cpp, the double protocol= attributes
were added to the SRC_URIs when protocol=https was added to all SRC_URIs
fetching from github.com in commit b402a3076f (recipes: Update SRC_URI
branch and protocols).

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-04-05 15:56:47 -07:00
Peter Kjellerstedt
506b6c9411 autossh: Correct the license information
Correct "startline=" to "beginline=" in LIC_FILES_CHKSUM so that the
correct lines from autossh.c and daemon.h are used. Also remove
autossh.spec from LIC_FILES_CHKSUM as it doesn't really contain any
license information.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-04-05 15:56:47 -07:00
Yi Zhao
46ab1a3f4f samba: upgrade 4.18.0 -> 4.18.1
Release Notes:
https://www.samba.org/samba/history/samba-4.18.1.html

This is a security release in order to address the following defects:
CVE-2023-0225
CVE-2023-0922
CVE-2023-0614

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-04-04 13:39:46 -07:00
Wang Mingyu
fc221b3211 openvpn: upgrade 2.6.1 -> 2.6.2
Changelog:
==========
 dco: don't use NetLink to exchange control packets
 dco: print version to log if available
 dco-linux: remove M_ERRNO flag when printing netlink error message
 multi: don't call DCO APIs if DCO is disabled
 dco-freebsd: use m->instances[] instead of m->hash
 dco-linux: implement dco_get_peer_stats{, multi} API
 Set netlink socket to be non-blocking
 Ensure n = 2 is set in key2 struct in tls_crypt_v2_unwrap_client_key
 Fix memory leaks in open_tun_dco()
 Fix memory leaks in HMAC initial packet generation
 Use key_state instead of multi for tls_send_payload parameter
 Make sending plain text control message session aware
 Only update frame calculation if we have a valid link sockets
 Improve description of compat-mode
 Simplify --compress parsing in options.c
 Refuse connection if server pushes an option contradicting allow-compress
 Add 'allow-compression stub-only' internally for DCO
 Parse compression options and bail out when compression is disabled
 tests/unit_tests: Fix 'make distcheck' with subdir-objects enabled
 preparing release 2.6.2
 dns option: allow up to eight addresses per server
 dco: print FreeBSD version
 Support --inactive option for DCO
 Fix '--inactive <time> 0' behavior for DCO
 Print DCO client stats on SIGUSR2
 Don't overwrite socket flags when using DCO on Windows
 using OpenSSL3 API for EVP PKEY type name reporting
 Bugfix: Convert ECDSA signature form pkcs11-helper to DER encoded form
 Import some sample certificates into Windows store for testing
 Add tests for finding certificates in Windows cert store
 Refactor SSL_CTX_use_CryptoAPI_certificate()
 Add a test for signing with certificates in Windows store
 Unit tests: add test for SSL_CTX_use_Cryptoapi_certificate()
 Improve error message on short read from socks proxy
 Make error in setting metric for IPv6 interface non-fatal

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-04-04 13:39:46 -07:00
Wang Mingyu
a014528ede ndisc6: upgrade 1.0.6 -> 1.0.7
Changelog:
=========
# Do not ignore multicast advertisements when discovery was sent as unicast
  (fix regression from 1.0.5).

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-04-04 13:39:46 -07:00
Wang Mingyu
d414cd15b3 libldb: upgrade 2.7.1 -> 2.7.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-04-04 13:39:46 -07:00
Khem Raj
77c6192de7 fwknop: Fix AS_IF configure syntax
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-04-02 10:06:48 -07:00
Khem Raj
0dbd8cf7d0 fwknop: Use pkg-config instead of gpgme-config
pkg-config is sysroot aware which is needed for cross-builds

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-04-02 10:06:48 -07:00
Peter Marko
c90081cebd dnsmasq: fix CVE-2023-28450
The patch is modified by removing irrelevant and conflicting
CHANGELOG entry.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-03-25 08:54:59 -07:00
Wang Mingyu
61809fdb5a adcli: upgrade 0.9.0 -> 0.9.2
0001-configure-check-for-ns_get16-and-ns_get32-as-well.patch
Fixed-build-error-on-musl.patch
removed since they're included in 0.9.2.

Changelog:
==========
 - adenroll: set password via LDAP instead Kerberos [#27]
 - disco: fall back to LDAPS if CLDAP ping was not successful [#31]
 - tools: replace getpass() [#10]
 - adenroll: write SID before secret to Samba's db [rhbz#1991619]
 - doc: add clarification to add-member command on doc/adcli.xml
 - tools: Set umask before calling mkdtemp()
 - Avoid undefined behaviour in short option parsing
 - library: include endian.h for le32toh
 - man: Fix typos and use consistent upper case for some keywords
 - doc: avoid gnu-make specific usage of $< [#26]
 - configure: check for ns_get16 and ns_get32 as well [rhbz#1984891]
 - Add setattr and delattr options [rhbz#1690920]
 - entry: add passwd-user sub-command [rhbz#1952828]
 - Add dont-expire-password option [rhbz#1769644]
 - build: add --with-vendor-error-message configure option [rhbz#1889386]
 - tools: add show-computer command [rhbz#1737342]
 - add description option to join and update [rhbz#1737342]
 - Use GSS-SPNEGO if available [rhbz#1762420]
 - add option use-ldaps [rhbz#1762420]
 - tools: disable SSSD's locator plugin [rhbz#1762633]
 - doc: explain required AD permissions [gfo#20]
 - computer: add create-msa sub-command [rhbz#1854112}
 - Add account-disable option [gfo#21]

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-03-23 21:46:12 -07:00
Wang Mingyu
d7ff124b03 nbdkit: upgrade 1.33.10 -> 1.33.11
License-Update:
 "Copyright (C) 2013-2020 Red Hat Inc." changed to "Copyright Red Hat"

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-03-23 21:46:12 -07:00
Fabio Estevam
ea6112ae77 ettercap: Update Upstream-Status
The patch has been applied upstream, so update the Upstream-Status
line accordingly.

Signed-off-by: Fabio Estevam <festevam@denx.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-03-23 16:57:01 -07:00
Khem Raj
977d61c936 ettercap: Fix build with libcurl >= 8
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-03-23 15:03:43 -07:00
Yi Zhao
7473b1ebf2 tcpreplay: 4.4.2 -> 4.4.3
ChangeLog:
https://github.com/appneta/tcpreplay/releases/tag/v4.4.3

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-03-23 15:03:43 -07:00
Khem Raj
d3b916b9ba packagegroup-meta-networking: Set PACKAGE_ARCH = "${MACHINE_ARCH}"
Remove memcached from rv64, its not buildable yet

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-03-22 09:10:39 -07:00
Khem Raj
864cea3d64 rp-pppoe: Define _GNU_SOURCE
Ensures that it picks up definitions of strlcpy() from string.h

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-03-22 09:10:39 -07:00
Yi Zhao
63749f10a4 mbedtls: add ptest
Results:
$ ptest-runner mbedtls
START: ptest-runner
2023-03-20T08:11
BEGIN: /usr/lib/mbedtls/ptest
PASS: test_suite_aes.cbc
PASS: test_suite_aes.cfb
PASS: test_suite_aes.ecb
PASS: test_suite_aes.ofb
PASS: test_suite_aes.rest
PASS: test_suite_aes.xts
PASS: test_suite_arc4
PASS: test_suite_aria
PASS: test_suite_asn1parse
PASS: test_suite_asn1write
PASS: test_suite_base64
PASS: test_suite_bignum.generated
PASS: test_suite_bignum.misc
PASS: test_suite_blowfish
PASS: test_suite_camellia
PASS: test_suite_ccm
PASS: test_suite_chacha20
PASS: test_suite_chachapoly
PASS: test_suite_cipher.aes
PASS: test_suite_cipher.arc4
PASS: test_suite_cipher.aria
PASS: test_suite_cipher.blowfish
PASS: test_suite_cipher.camellia
PASS: test_suite_cipher.ccm
PASS: test_suite_cipher.chacha20
PASS: test_suite_cipher.chachapoly
PASS: test_suite_cipher.des
PASS: test_suite_cipher.gcm
PASS: test_suite_cipher.misc
PASS: test_suite_cipher.nist_kw
PASS: test_suite_cipher.null
PASS: test_suite_cipher.padding
PASS: test_suite_cmac
PASS: test_suite_constant_time
PASS: test_suite_constant_time_hmac
PASS: test_suite_ctr_drbg
PASS: test_suite_debug
PASS: test_suite_des
PASS: test_suite_dhm
PASS: test_suite_ecdh
PASS: test_suite_ecdsa
PASS: test_suite_ecjpake
PASS: test_suite_ecp
PASS: test_suite_entropy
PASS: test_suite_error
PASS: test_suite_gcm.aes128_de
PASS: test_suite_gcm.aes128_en
PASS: test_suite_gcm.aes192_de
PASS: test_suite_gcm.aes192_en
PASS: test_suite_gcm.aes256_de
PASS: test_suite_gcm.aes256_en
PASS: test_suite_gcm.camellia
PASS: test_suite_gcm.misc
PASS: test_suite_hkdf
PASS: test_suite_hmac_drbg.misc
PASS: test_suite_hmac_drbg.nopr
PASS: test_suite_hmac_drbg.no_reseed
PASS: test_suite_hmac_drbg.pr
PASS: test_suite_md
PASS: test_suite_mdx
PASS: test_suite_memory_buffer_alloc
PASS: test_suite_mps
PASS: test_suite_net
PASS: test_suite_nist_kw
PASS: test_suite_oid
PASS: test_suite_pem
PASS: test_suite_pk
PASS: test_suite_pkcs12
PASS: test_suite_pkcs1_v15
PASS: test_suite_pkcs1_v21
PASS: test_suite_pkcs5
PASS: test_suite_pkparse
PASS: test_suite_pkwrite
PASS: test_suite_poly1305
PASS: test_suite_psa_crypto
PASS: test_suite_psa_crypto_attributes
PASS: test_suite_psa_crypto_driver_wrappers
PASS: test_suite_psa_crypto_entropy
PASS: test_suite_psa_crypto_generate_key.generated
PASS: test_suite_psa_crypto_hash
PASS: test_suite_psa_crypto_init
PASS: test_suite_psa_crypto_metadata
PASS: test_suite_psa_crypto_not_supported.generated
PASS: test_suite_psa_crypto_not_supported.misc
PASS: test_suite_psa_crypto_op_fail.generated
PASS: test_suite_psa_crypto_op_fail.misc
PASS: test_suite_psa_crypto_persistent_key
PASS: test_suite_psa_crypto_se_driver_hal
PASS: test_suite_psa_crypto_se_driver_hal_mocks
PASS: test_suite_psa_crypto_slot_management
PASS: test_suite_psa_crypto_storage_format.current
PASS: test_suite_psa_crypto_storage_format.misc
PASS: test_suite_psa_crypto_storage_format.v0
PASS: test_suite_psa_its
PASS: test_suite_random
PASS: test_suite_rsa
PASS: test_suite_shax
PASS: test_suite_ssl
PASS: test_suite_timing
PASS: test_suite_version
PASS: test_suite_x509parse
PASS: test_suite_x509write
PASS: test_suite_xtea
DURATION: 83
END: /usr/lib/mbedtls/ptest
2023-03-20T08:13
STOP: ptest-runner
TOTAL: 1 FAIL: 0

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-03-22 09:10:39 -07:00
AYP
545b18335b packagegroup-meta-networking: remove ntpdate
Follow 6315006aad

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-03-22 09:10:39 -07:00
Lei Maohui
25ef3eec88 pgpool2: Added a new recipe.
Pgpool-II is a middleware that works between PostgreSQL servers and a PostgreSQL database client. It is distributed under a license similar to BSD and MIT. It provides the  following features.

Signed-off-by: Lei Maohui <leimaohui@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-03-22 09:10:39 -07:00
Zhixiong Chi
6315006aad ntp: drop the deprecated ntpdate
The combination of ntpd and sntp now implements the functions of
ntpdate, which has been deprecated.
Now we don't need ntpdate anymore, and we can use the following
command 'ntpd -q -g -x' instead.
So drop the related section of ntpdate now.

Signed-off-by: Zhixiong Chi <zhixiong.chi@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-03-17 07:06:56 -07:00
Wang Mingyu
a029621253 rdma-core: upgrade 44.0 -> 45.0
Changelog:
==========
    53ee89b Merge pull request #1299 from zhuyj/dmabuf
    95507d0 Merge pull request #1311 from EdwardSro/pr-pyverbs-tests
    087deb5 irdma: Add support for ibv_reg_dmabuf_mr
    6644617 Merge pull request #1309 from hz-cheng/master
    fe9e480 Merge pull request #1304 from EdwardSro/pr-tests-fixes
    5c9f444 Merge pull request #1303 from EdwardSro/pr-mlx5-dr-steering
    8f56a83 Merge pull request #1310 from joshuafried/mlx5_dr_bugfix
    638ace8 tests: Add test for devx DBR-less mode data path
    25a4bf0 tests: Skip CUDA tests if there is no CUDA device
    5dad658 tests: Add set and copy modify action of metadata

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-03-17 07:06:55 -07:00
Wang Mingyu
5b2be0c687 networkmanager: upgrade 1.42.0 -> 1.42.4
0001-libnm-std-aux-Adjust-signature-of-_nm_assert_fail_in.patch
removed since it's not available in 1.42.4

Changelog:
==========
* Fix a possible crash when [global-dns] is used and improve the
  documentation.
* Documentation improvements.
* Add build option to set the mobile-broadband-provider-info database
  path.
* Add new "ipv[46].replace-local-rule" setting to control whether to
  remove the local route rule that is automatically generated.
* Add the DHCPv6 IAID to the lease information exposed in /run and on
  D-Bus.
* Fix assuming team connections at boot.
* Fix race condition when setting the MAC address of an OVS interface.
* Fix constructing the IPv4 name servers variable passed to dispatcher
  scripts.
* Don't use tentative IPv6 address to resolve the system hostname via DNS.
* Deprecate the "Master" property of the NMActiveConnection D-Bus object
  in favor of the new "Controller" property.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-03-17 07:06:55 -07:00
Yi Zhao
9818ed0ab7 samba: upgrade 4.17.5 -> 4.18.0
Release Notes:
https://www.samba.org/samba/history/samba-4.18.0.html

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-03-14 07:42:47 -07:00
Yi Zhao
8577ba2ee0 libldb: upgrade 2.6.1 -> 2.7.1
Refresh 0002-ldb-Add-configure-options-for-packages.patch

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-03-14 07:42:47 -07:00
Yi Zhao
e9df01df3d libnftnl: upgrade 1.2.4 -> 1.2.5
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-03-12 12:34:56 -07:00
Petr Gotthard
4138f34899 openvpn: upgrade 2.6.0 -> 2.6.1
Changelog:
https://github.com/OpenVPN/openvpn/blob/v2.6.1/Changes.rst

Signed-off-by: Petr Gotthard <petr.gotthard@advantech.cz>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-03-10 17:21:15 -08:00
Wang Mingyu
05d26628dc nbdkit: upgrade 1.33.7 -> 1.33.10
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-03-09 23:45:17 -08:00
Wang Mingyu
d72b4945ed rp-pppoe: upgrade 3.14 -> 3.15
dont-swallow-errors.patch
configure.in-Error-fix.patch
removed since they're not available in 3.14.

configure_in_cross.patch
refreshed for 3.14.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-03-09 23:45:17 -08:00
Wang Mingyu
b4fad2defe stunnel: upgrade 5.67 -> 5.69
License-Update: Copyright year updated to 2023.

Changelog:
==========
* New features
  - Improved logging performance with the "output" option.
  - Improved file read performance on the WIN32 platform.
  - DH and kDHEPSK ciphersuites removed from FIPS defaults.
  - Set the LimitNOFILE ulimit in stunnel.service to allow
    for up to 10,000 concurrent clients.
  - Added the new 'CAengine' service-level option
    to load a trusted CA certificate from an engine.
  - Added requesting client certificates in server
    mode with 'CApath' besides 'CAfile'.
  - Improved file read performance.
  - Improved logging performance.
* Bugfixes
  - Fixed the "CApath" option on the WIN32 platform by
    applying https://github.com/openssl/openssl/pull/20312.
  - Fixed stunnel.spec used for building rpm packages.
  - Fixed tests on some OSes and architectures by merging
    Debian 07-tests-errmsg.patch (thx to Peter Pentchev).
  - Fixed EWOULDBLOCK errors in protocol negotiation.
  - Fixed handling TLS errors in protocol negotiation.
  - Prevented following fatal TLS alerts with TCP resets.
  - Improved OpenSSL initialization on WIN32.
  - Improved testing suite stability.
* Security bugfixes
  - OpenSSL DLLs updated to version 3.0.8.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-03-09 23:45:17 -08:00
Yi Zhao
defad66961 packagegroup-meta-networking: add frr
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-03-09 09:54:04 -08:00
Yi Zhao
d7b8c3a9f7 frr: support more arches
Now frr can support more arches as libyang can be built on all arches.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-03-08 07:12:23 -08:00
Yi Zhao
8b4ea01ea1 freeradius: add UPSTREAM_CHECK_GITTAGREGEX
Add UPSTREAM_CHECK_GITTAGREGEX to check the correct latest stable
verison.

Before the patch:
$ devtool latest-version freeradius
INFO: Current version: 3.0.26
INFO: Latest version: 4.0.0
INFO: Latest version's commit: 8b5bff2d8a2cd2be1da58a417787d907c7a5d8f1

4.0.0 is not a stable version tag[1].

After the patch:
$ devtool latest-version freeradius
INFO: Current version: 3.0.26
INFO: Latest version: 3.2.2
INFO: Latest version's commit: b9ed73ef2d2628fa6e2a6d15a7782f8217966be0

[1] https://github.com/FreeRADIUS/freeradius-server/tags

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-03-06 08:41:13 -08:00
Yi Zhao
338c278f4c traceroute: upgrade 2.1.1 -> 2.1.2
Changes in 2.1.2:
  * Fix unprivileged ICMP tracerouting with Linux kernel >= 6.1
    (Eric Dumazet, SF bug #14)

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-03-06 08:41:13 -08:00
Yi Zhao
f1160a81c5 libnetfilter-cttimeout: upgrade 1.0.0 -> 1.0.1
Drop backport patch.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-03-06 08:41:13 -08:00
Yi Zhao
ab9aba9dd2 libnetfilter-cthelper: upgrade 1.0.0 -> 1.0.1
Drop backport patch.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-03-06 08:41:13 -08:00
Yi Zhao
517317de60 libnfnetlink: upgrade 1.0.1 -> 1.0.2
Drop backport patches.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-03-06 08:41:13 -08:00
Yi Zhao
4e453dae3b strongswan: 5.9.9 -> 5.9.10
Changelog:
https://github.com/strongswan/strongswan/releases/tag/5.9.10

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-03-06 08:41:13 -08:00
Yi Zhao
0b3e6c1973 quagga: drop recipe
Quagga is no longer maintained since 2018[1]. Its official repository is
not even available[2].
As an alternative, users can use FRRouting[3] which has been added to
meta-networking[4].

[1] https://github.com/Quagga/quagga
[2] https://git.savannah.gnu.org/cgit/quagga.git
[3] https://frrouting.org
[4] https://git.openembedded.org/meta-openembedded/tree/meta-networking/recipes-protocols/frr

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-03-05 14:34:38 -08:00
Yi Zhao
80740b1d3c frr: add UPSTREAM_CHECK_GITTAGREGEX
Add UPSTREAM_CHECK_GITTAGREGEX to check the correct latest stable
verison.

Before the patch:
$ devtool latest-version frr
INFO: Current version: 8.4.2
INFO: Latest version: 9.0
INFO: Latest version's commit: 16c38045b1a84f899da473398779cc593d82d2bd

Version 9.0 is a development tag[1].

After the patch:
$ devtool latest-version frr
INFO: Current version: 8.4.2
INFO: Latest version: 8.4.2
INFO: Latest version's commit: 9e25d07412e92bdcd1f69c4755dc7564b23023c0

[1] https://github.com/FRRouting/frr/tags

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-03-05 14:34:38 -08:00
Denys Dmytriyenko
e012fe075d mbedtls: set up /usr/bin/hello as alternative
As mbedtls installs this rather generically-named /usr/bin/hello binary,
it conflicts with the one provided by lmbench, hence set it up as an
alternative to avoid conflicts when both are installed to rootfs or SDK.

Signed-off-by: Denys Dmytriyenko <denis@denix.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-02-26 00:17:45 -08:00