Commit Graph

2610 Commits

Author SHA1 Message Date
Geoff Parker 02aeda00ab cifs-utils: typo fix fakse --> false
Signed-off-by: Geoff Parker <geoffrey.parker@arthrex.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-08-11 10:23:54 -07:00
Changqing Li 7fd9678e64 ndpi: fix CVE-2021-36082
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-08-10 09:01:46 -07:00
Chen Qi 242ba8e2fc Convert to new override syntax using latest convert-overrides.py script
This patch is the result of running the latest convert-ovrrides.py
script.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-08-09 10:30:44 -07:00
Tony Battersby c40e01b0fc curlpp: fix QA Issue after LDFLAGS change
Adding -f*-prefix-map to LDFLAGS caused the following issue:

QA Issue: curlpp.pc failed sanity test (tmpdir)

Fix by filtering out -f*-prefix-map from *.pc files.

[YOCTO #14481]

Signed-off-by: Tony Battersby <tonyb@cybernetics.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-08-09 10:20:30 -07:00
Khem Raj 4e05a4362f nis: Drop uclibc check in anon python function
uclibc is no longer supported

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-08-06 20:38:40 -07:00
wangmy 970a7a52fb fetchmail: upgrade 6.4.19 -> 6.4.20
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-08-06 20:38:40 -07:00
Khem Raj a133111e69 recipes: Fix override syntax
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Martin Jansa <Martin.Jansa@gmail.com>
2021-08-06 20:38:40 -07:00
Martin Jansa 17adfde3bd layer.conf: Update to honister
This marks the layers as compatible with honister now they use the new override
syntax.

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2021-08-03 10:21:25 -07:00
Martin Jansa c61dc077bb Convert to new override syntax
This is the result of automated script (0.9.1) conversion:

oe-core/scripts/contrib/convert-overrides.py .

converting the metadata to use ":" as the override character instead of "_".

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2021-08-03 10:21:25 -07:00
Khem Raj daf661d19b ntp: Fix make check
Some test code is not yet ported to build with gcc 11

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-08-03 08:53:04 -07:00
Khem Raj 7055c764c8 ntp: Do not use PTHREAD_STACK_MIN on glibc
Int not a compile time constant in glibc 2.34+

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-08-03 08:53:04 -07:00
Khem Raj d94bafe1f9 autofs: Fix build with glibc 2.34+
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-08-03 08:53:03 -07:00
Khem Raj 96e37f4a59 addcli: check for ns_get16 and ns_get32
Fixes build with glibc 2.34+

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-08-03 08:53:03 -07:00
wangmy 82739e6f1e networkmanager: upgrade 1.32.2 -> 1.32.4
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-07-29 10:35:38 -07:00
Tony Battersby 5e042ac207 net-snmp: fix QA Issue after LDFLAGS change
Adding -f*-prefix-map to LDFLAGS caused the following issue:

QA Issue: netsnmp-agent.pc failed sanity test (tmpdir)

Fix by filtering out -f*-prefix-map from *.pc files.

[YOCTO #14481]

Signed-off-by: Tony Battersby <tonyb@cybernetics.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-07-29 10:35:38 -07:00
Yi Zhao 8446eab8fd postfix: upgrade 3.6.1 -> 3.6.2
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-07-27 09:52:23 -07:00
Armin Kuster b68fe48192 wireshark: update to 3.4.7
Stable branch bug fix update. Includes:
CVE-2021-22235

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-07-27 09:52:23 -07:00
wangmy b767b37e3a nghttp2: upgrade 1.43.0 -> 1.44.0
v1.44.0 changelog:

lib: Port new ngtcp2 map implementation
doc: Replace master with main
build: Add precious variables for libev and jemalloc and use JEMALLOC_CFLAGS
build: Add more --with-* configure flags
build: Add LIBTOOL_LDFLAGS configure variable
third-party: Bump llhttp to 6.0.2
src: Replace black-list with block-list
nghttpx: Fix max distance in weight group/address cycle comparison
nghttpx: Set connect_blocker and live_check after shuffling addresses
nghttpx: Replace master with main
nghttpx: Remove trailing white space after $method log variable
(https://github.com/nghttp2/nghttp2/pull/1553)
h2load: Add --rps option
(https://github.com/nghttp2/nghttp2/pull/1559)
h2load: Allow unit in -D option
asio: fix some typos (Patch from Jan Kundrát)
(https://github.com/nghttp2/nghttp2/pull/1550)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-07-27 09:52:23 -07:00
wangmy 173cf5fd6b libtalloc: upgrade 2.3.2 -> 2.3.3
License-Update:
 add note:
     ** NOTE! The following LGPL license applies to the talloc
     ** library. This does NOT imply that all of Samba is released
     ** under the LGPL
 "GNU General Public License" changed to "GNU Lesser General Public License"

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-07-27 09:52:23 -07:00
Li Wang 145f59ba75 openlldp: fix segfault
~ lldpad -d
~ 8021q: 802.1Q VLAN Support v1.8
~ 8021q: adding VLAN 0 to HW filter on device eth0
~ lldpad[xxx]: segfault at 0 ip xxx sp xxx error 4 in lldpad[xxx+xxx]
~ Code: xxx

the issue is introduced by:
0002-lldp_head-rename-and-make-extern.patch

Upstream patches:
https://github.com/intel/openlldp/commit/ed6a8e5a75f56b7034a46294a0bf2a9a7fd14fbc

Signed-off-by: Li Wang <li.wang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-07-27 09:52:23 -07:00
Khem Raj 2039ff1935 netperf: Add systemd unit file
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-07-27 09:52:23 -07:00
Khem Raj 587fe58777 netperf: Update to latest
License-Update: Upstream has switched to MIT [1]

[1] https://github.com/HewlettPackard/netperf/commit/2d88bcc75d97f462eafe8605f8da0c1f875b7dad

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-07-27 09:52:23 -07:00
Khem Raj 7d64ce0490 autofs: Upgrade to 5.1.7
License-Update:  correct fsf address [1]

- Drop upstreamed autofs-5.0.7-include-linux-nfs.h-directly-in-rpc_sub.patch
- Forward port remaining patches
- Package libautofs.so which is new
- Add a patch to fix build on musl systems
- Detailed ChangeLog [2]

[1] https://git.kernel.org/pub/scm/linux/storage/autofs/autofs.git/commit/COPYING?id=b74dcdd3f6b05522388729141c29286829c302fc
[2] https://www.spinics.net/lists/autofs/msg02344.html

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-07-17 10:15:51 -07:00
Khem Raj d774c88023 layers: Fix git send-email instructions in README
This ensures that cut-n-paste of this command from README will work

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-07-17 09:08:47 -07:00
Khem Raj 06cae38842 postfix: Upgrade to 3.6.1
Fix build with glibc 2.34+
Details of this release [1]

[1] http://cdn.postfix.johnriley.me/mirrors/postfix-release/official/postfix-3.6.1.RELEASE_NOTES

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-07-16 09:23:03 -07:00
zangrc 67b26428a6 strongswan: upgrade 5.9.2 -> 5.9.3
- Added AES_ECB, SHA-3 and SHAKE-256 support to wolfssl plugin.

- Added AES_CCM and SHA-3 signature support to openssl plugin.

- The x509 and openssl plugins now consider the authorityKeyIdentifier, if
  available, before verifying signatures, which avoids unnecessary signature
  verifications after a CA key rollover if both certificates are loaded.

- The pkcs11 plugin better handles optional attributes like CKA_TRUSTED, which
  previously depended on a version check.

- charon-nm now supports using SANs as client identities, not only full DNs.

- charon-tkm now handles IKE encryption.

- A MOBIKE update is sent again if a a change in the NAT mappings is detected
  but the endpoints stay the same.

- Converted most of the test case scenarios to the vici interface

Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-07-13 09:39:15 -07:00
zangrc cdac00501f firewalld: upgrade 0.9.3 -> 0.9.4
This is a bug fix only release.

$ git shortlog --grep "^fix" v0.9.3..v0.9.4
Eric Garver (10):

fix(dbus): conf: setting deprecated properties should be ignored
fix(dbus): properties: IPv4 and IPv6 should be true if using nftables
fix(fw): when checking tables make sure to check the actual backend
fix(ipset): nftables: use interval flag for "ip" types
fix(rpm): applet: don't replace config modified by admin
fix(rpm): logrotate: don't replace config modified by admin
fix(ipv6_filter): match fwmark
fix(direct): rule order with multiple address with -s/-d
fix(nm): reload: only consider NM connections with a real interface
fix(policy): warn instead of error for overlapping ports
Fabrizio D'Angelo (1):

fix(ipset): fix hash:net,net functionality
Robert Richmond (1):

fix(ipset): entry delete with timeout
Ye Shu (1):

fix(applet): Show a basic tooltip instead of HTML

Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-07-13 09:39:15 -07:00
Khem Raj db860191b2 keepalived: Upgrade to 2.2.2
Fix build with upcoming glibc 2.34 while here

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-07-08 09:21:41 -07:00
Andreas Müller 08d4c28d16 networkmanager: upgrade 1.30.4 -> 1.32.2
Did not find hints upstream but musl build turned painless!

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-07-08 09:21:40 -07:00
Andreas Müller 9569d222eb blueman: upgrade 2.1.4 -> 2.2.1
Manually refresh 0002-fix-fail-to-enable-bluetooth.patch - it did not apply

2.2.1
Bugs fixed
    Hard dependency of DBusService on NetworkManager

2.2
New features
    Disconnect items in applet menu (plugin)
    Desktop notifications on connect / disconnect (plugin)
    Notifications with battery level for connecting devices (applet plugin)
    Stop discovery and retry connection for broken adapter drivers
    Auto-connect settings for supported services

Changes
    Drop blueman-report
    Drop blueman-assistant
    Raise minimum Python version to 3.6
    Raise GTK+ 3 version to 3.22
    Raise minimum BlueZ version to 5.48
    Allow opening device menus via keyboard (Shift+F10 or menu key)
    Add Ctrl+Q and Ctrl+W accelerators for closing blueman-manager
    Allow cancelling device connection attempts
    Improved passkey handling (fixed padding, highlighting, single notifitication)
    Hide devices with no name

Bugs fixed
    Fix disconnecting NMDevice
    Exceptions from asynchronous DBus calls (getting picked up by tools like Apport or ABRT)
    DiscvManager plugin showed its icon unreliably

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-07-08 09:21:40 -07:00
Yi Zhao 6db58b2837 samba: add missing runtime dependency for pidl
Add libparse-yapp-perl to RDEPENDS for pidl.

Fixes:
$ pidl
Can't locate Parse/Yapp/Driver.pm in @INC (you may need to install the Parse::Yapp::Driver module)

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-07-01 08:09:38 -07:00
Yi Zhao 7b5b96b444 samba: fix shebang for pidl
The shebang in pidl points to wrong location:
$ pidl
-sh: /usr/bin/pidl: /buildarea/build/tmp-glibc/hosttools/env: bad interpreter: No such file or directory

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-07-01 08:09:38 -07:00
Adrian Zaharia 73d5cd5e8d ntp: fix ntpdate to wait for subprocesses
When using systemd, ntpdate-sync script will start in background
triggering the start of ntpd without actually exiting.
This results in an bind error in ntpd startup.

Add wait at the end of ntpdate script to ensure that when the ntpdate.service
is marked as finished the oneshot script ntpdate-sync finished and unbind the
ntp port

Fixes #386

Signed-off-by: Adrian Zaharia <Adrian.Zaharia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-28 09:49:22 -07:00
Akifumi Chikazawa d49e96aac4 openvpn: add CVE-2020-7224 and CVE-2020-27569 to allowlist
CVE-2020-7224 and CVE-2020-27569 are for Aviatrix OpenVPN client,
not for openvpn.

Signed-off-by: Akifumi Chikazawa <chikazawa.akifu@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-26 00:45:10 -07:00
Persian Prince a6653e6dd4 samba: Don't guess dirs for perllocal.pod removing
We're not living in a perfect world so avoid build failures like:

ERROR: samba-4.14.5-r0 do_package_qa: QA Issue: samba-pidl contains perllocal.pod (/usr/lib/perl5/5.34.0/x86_64-linux/perllocal.pod), should not be installed [perllocalpod]
ERROR: samba-4.14.5-r0 do_package_qa: QA run found fatal errors. Please consider fixing them.
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-24 16:17:33 -07:00
wangmy 31fb422660 samba: Solve the dependency problem when installing Samba
Error Message:
 Problem: conflicting requests
  - nothing provides samba-pidl needed by samba-client-4.14.5-r0.aarch64

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-23 23:20:36 -07:00
zangrc 4449b3a7b6 snort: upgrade 2.9.17.1 -> 2.9.18
Refresh the following patch:
configure.in-disable-tirpc-checking-for-fedora.patch

Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-23 23:20:35 -07:00
zangrc 471cc226a6 openvpn: upgrade 2.5.2 -> 2.5.3
-License-Update: Copyright year updated to 2021.

Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-23 23:20:35 -07:00
Peter Kjellerstedt 74d58bc6e8 net-snmp: Support building for native
Due to the sed commands in do_install_append() that removed
${STAGING_DIR_HOST} and it being empty when building for native, it was
impossible to add support for building this as native using a bbappend.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-23 10:46:54 -07:00
Peter Kjellerstedt 411c981ef0 net-snmp: A little clean up
* Remove the explicit dependency on libnl as the libnl PACKAGECONFIG
  depends on it as necessary.
* Add a PACKAGECONFIG for systemd to replace modifying EXTRA_OECONF
  directly.
* Sort the PACKAGECONFIGs.
* Some whitespace clean up.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-23 10:46:54 -07:00
Daiane Angolini 500ce4d46d wireguard-module: Stop overriding modules_install in the recipe
Configure the recipe to use the module_install function from the module
source code and remove the overriden modules_install function from the
recipe.

Using the default modules_install (instead of the function defined in
the recipe file) the module is signed when DISTRO_FEATURE contains modsign.

Signed-off-by: Daiane Angolini <daiane.angolini@foundries.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-23 10:46:24 -07:00
Sekine Shigeki 04a7dce625 ntp: add CVE-2016-9312 to allowlist
Signed-off-by: Sekine Shigeki <sekine.shigeki@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-18 08:42:25 -07:00
zangrc d7a5707894 mosquitto: upgrade 2.0.10 -> 2.0.11
-License-Update: notice.html does not exist in this version, use NOTICE.md to
check.

Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-18 08:42:25 -07:00
Geoff Parker 3c1e72d62c cifs-utils: set ROOTSBINDIR to /usr/sbin if DISTRO_FEATURES has usrmerge
Fixes cif-utils recipe build when DISTRO_FEATURES includes 'usrmerge'

Add do_configure_prepend() to override ROOTSSBINDIR environment variable
so that the utilities are installed in /usr/sbin rather than /sbin.
Setting --exec-prefix or --prefix in EXTRA_OECONF does not work.

Update do_install_append() to NOT remove /usr/bin /usr/sbin if usrmerge
is set in DISTRO_FEATURES

Signed-off-by: Geoff Parker <geoffrey.parker@arthrex.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-18 08:39:32 -07:00
Ed Tanous df8ecfeacf Use the built-in options for removing pack tools
For distros that want to use the ENABLE_LIB_ONLY option, the rm call
will fail, because ENABLE_HPACK_TOOLS (set implicitly as part of
ENABLE_LIB_ONLY) removes those two binaries from the build, so they then
can't be removed again.  This commit sets ENABLE_HPACK_TOOLS=OFF, which not
only allows for the option to be overridden in other meta layers, also
allows a simplified use of ENABLE_LIB_ONLY in meta layers that don't
want to ship the binaries.

Signed-off-by: Ed Tanous <ed@tanous.net>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-18 08:39:32 -07:00
ito-yuichi@fujitsu.com 3613b50a84 dovecot: add CVE-2016-4983 to allowlist
CVE-2016-4983 affects only postinstall script on specific distribution, so add it to allowlist.

Signed-off-by: Yuichi Ito <ito-yuichi@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-15 08:48:50 -07:00
ito-yuichi@fujitsu.com 711e932b14 cyrus-sasl: add CVE-2020-8032 to allowlist
This affects only openSUSE, so add it to allowlist.

Signed-off-by: Yuichi Ito <ito-yuichi@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-11 08:48:26 -07:00
Sekine Shigeki bb4a4f0ff8 add CVE-2011-2411 to allowlist
This affects only on HP NonStop Server, so add it to allowlist.

Signed-off-by: Sekine Shigeki <sekine.shigeki@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-11 08:48:26 -07:00
zhengruoqin 5411629c44 net-snmp: upgrade 5.9 -> 5.9.1
Refresh the following patch:
net-snmp-5.7.2-fix-engineBoots-value-on-SIGHUP.patch

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-10 07:06:34 -07:00
Yi Zhao 8fc9ecc767 samba: upgrade 4.14.4 -> 4.14.5
Changelog:
https://www.samba.org/samba/history/samba-4.14.5.html

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-09 08:49:21 -07:00