Commit Graph

831 Commits

Author SHA1 Message Date
Yi Zhao fec5747a4c samba: upgrade 4.19.4 -> 4.19.5
Release Notes:
https://www.samba.org/samba/history/samba-4.19.5.html

Specify --pythondir to fix do_package_qa QA Issue:
WARNING: samba-4.19.5-r0 do_package_qa: QA Issue: File
/usr/lib/libsamba-util.so.0.0.1 in package libsamba-util contains
reference to TMPDIR [buildpaths]

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-03-10 21:54:07 -07:00
Yi Zhao f240c5cecf networkmanager: 1.44.0 -> 1.46.0
ChangeLog:
https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/blob/1.46.0/NEWS

Highlights:
- Drop build with python2, python3 is now required
- Support randomizing the MAC address based on the Wi-Fi network
- IPv4 DAD (Duplicate Address Detection) enabled by default

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-03-08 10:07:25 -08:00
Martin Jansa 26a287e260 networkmanager-fortisslvpn: use python3native and depend on python3-packaging-native
* it uses gdbus-codegen from glib-2.0-native which depended
  on python3-distutils-native until
  https://lists.openembedded.org/g/openembedded-core/message/196136
  but distutils on host was enforced by sanity check only until mickledore with:
  https://git.openembedded.org/openembedded-core/commit/?id=8e3a5b0709384f2b455a82ac1e8e212686fe4456

  so on hosts without distutils this was already failing with:
  http://errors.yoctoproject.org/Errors/Details/754697/

gdbus-codegen \
	--generate-c-code src/nm-fortisslvpn-pppd-service-dbus \
	--c-namespace NMDBus \
	--interface-prefix org.freedesktop.NetworkManager \
	../NetworkManager-fortisslvpn-1.4.0/src/nm-fortisslvpn-pppd-service.xml
Traceback (most recent call last):
  File "TOPDIR/tmp-glibc/work/core2-64-oe-linux/networkmanager-fortisslvpn/1.4.0/recipe-sysroot-native/usr/bin/gdbus-codegen", line 53, in <module>
    from codegen import codegen_main
  File "TOPDIR/tmp-glibc/work/core2-64-oe-linux/networkmanager-fortisslvpn/1.4.0/recipe-sysroot-native/usr/share/glib-2.0/codegen/codegen_main.py", line 29, in <module>
    from . import dbustypes
  File "TOPDIR/tmp-glibc/work/core2-64-oe-linux/networkmanager-fortisslvpn/1.4.0/recipe-sysroot-native/usr/share/glib-2.0/codegen/dbustypes.py", line 22, in <module>
    from . import utils
  File "TOPDIR/tmp-glibc/work/core2-64-oe-linux/networkmanager-fortisslvpn/1.4.0/recipe-sysroot-native/usr/share/glib-2.0/codegen/utils.py", line 22, in <module>
    import distutils.version
ModuleNotFoundError: No module named 'distutils'
make: *** [Makefile:2081: src/nm-fortisslvpn-pppd-service-dbus.h] Error 1

  and the glib-2.0-native change only changes the dependency from
  distutils to packaging which results in:
  http://errors.yoctoproject.org/Errors/Details/754693/

gdbus-codegen \
	--generate-c-code src/nm-fortisslvpn-pppd-service-dbus \
	--c-namespace NMDBus \
	--interface-prefix org.freedesktop.NetworkManager \
	../NetworkManager-fortisslvpn-1.4.0/src/nm-fortisslvpn-pppd-service.xml
Traceback (most recent call last):
  File "TOPDIR/tmp-glibc/work/core2-64-oe-linux/networkmanager-fortisslvpn/1.4.0/recipe-sysroot-native/usr/bin/gdbus-codegen", line 53, in <module>
    from codegen import codegen_main
  File "TOPDIR/tmp-glibc/work/core2-64-oe-linux/networkmanager-fortisslvpn/1.4.0/recipe-sysroot-native/usr/share/glib-2.0/codegen/codegen_main.py", line 29, in <module>
    from . import dbustypes
  File "TOPDIR/tmp-glibc/work/core2-64-oe-linux/networkmanager-fortisslvpn/1.4.0/recipe-sysroot-native/usr/share/glib-2.0/codegen/dbustypes.py", line 22, in <module>
    from . import utils
  File "TOPDIR/tmp-glibc/work/core2-64-oe-linux/networkmanager-fortisslvpn/1.4.0/recipe-sysroot-native/usr/share/glib-2.0/codegen/utils.py", line 22, in <module>
    import packaging.version
ModuleNotFoundError: No module named 'packaging'
make: *** [Makefile:2081: src/nm-fortisslvpn-pppd-service-dbus.h] Error 1

* packaging probably isn't as wide spread on host distros as old
  distutils was, so make sure it's available by using
  python3-native with python3-packaging-native from OE build

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-27 09:05:18 -08:00
Martin Jansa 7e420c584f snort3: fix snort.pc
* fixes:
  ERROR: lib32-snort3-3+git-r0 do_populate_sysroot: QA Issue: snort.pc failed sanity test (tmpdir) in path lib32-snort3/3+git/sysroot-destdir/usr/lib/pkg

* it's broken for non-multilib builds as well, the issue is that
  FLEX_CPPFLAGS points to native include dir, e.g.
  FLEX_CPPFLAGS=-I/OE/../lib32-snort3/3+git/recipe-sysroot-native/usr/include
  and the work around from:
  https://github.com/openembedded/meta-openembedded/commit/973647848049abda6f2adbee0189720109863731
  sed -i "s#${RECIPE_SYSROOT}##g" ${D}${libdir}/pkgconfig/snort.pc
  strips the "/OE/../lib32-snort3/3+git/recipe-sysroot" part in non-multilib
  case, but leaves:
  FLEX_CPPFLAGS=-I-native/usr/include
  which is still wrong, but not detected by buildpaths QA check anymore
  and in multilib case, this didn't strip the first part because the
  target sysroot is:
  "/OE/../lib32-snort3/3+git/lib32-recipe-sysroot"
  so it didn't strip anything from native sysroot:
  "/OE/../lib32-snort3/3+git/recipe-sysroot-native"

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-26 08:13:22 -08:00
Martin Jansa d731e6a370 snort3: drop SRCPV from PV
* as other recipes did in:
  https://git.openembedded.org/meta-openembedded/commit/?id=21f956598ddb1bb08855fbc9a3293acf957154d1

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-26 08:13:21 -08:00
Khem Raj 7132d7b571 snort3: Fix contains reference to TMPDIR [buildpaths] warnings
Fixes
WARNING: snort3-3+git-r0 do_package_qa: QA Issue: File /usr/lib/pkgconfig/snort.pc in package snort3-dev contains reference to TMPDIR [buildpaths]
WARNING: snort3-3+git-r0 do_package_qa: QA Issue: File /usr/src/debug/snort3/3+git/src/js_norm/pdf_tokenizer.cc in package snort3-src contains reference to TMPDIR
File /usr/src/debug/snort3/3+git/src/js_norm/js_tokenizer.cc in package snort3-src contains reference to TMPDIR [buildpaths]

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-21 19:59:51 -08:00
Khem Raj 97700116c2 snort: Do not use llvm libunwind
If llvm unwind is present then disable unwinding support since it will
not have all unw_* functions eg. unw_strerror

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-21 19:59:51 -08:00
Khawaja Shaheryar be6deab87e snort: add snort3 initial recipe
I am adding this recipe as snort2 is legacy now.
See more: https://github.com/snort3/snort3

Signed-off-by: Khawaja Shaheryar <behzadshaheryar@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-21 19:59:51 -08:00
Khawaja Shaheryar 26511bb42a libdaq: add recipe
I am adding this recipe as snort3 depends on it.
snort3 recipe will be provided in next commit.
See more: https://github.com/snort3/libdaq

Signed-off-by: Khawaja Shaheryar <behzadshaheryar@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-21 19:59:51 -08:00
Khem Raj a6c4624a68 ot-br-posix: Limit vla-cxx-extension option to clang >= 18
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-10 23:47:57 -08:00
Khem Raj 192f412b3d ot-br-posix: upgrade to latest trunk
Fix build with clang and drop unneeded patch for unused variable 'i'

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-09 09:52:15 -08:00
Martin Jansa 21f956598d recipes: drop ${SRCPV} usage
* Drop SRCPV similarly like oe-core did in:
  https://git.openembedded.org/openembedded-core/commit/?h=nanbield&id=843f82a246a535c353e08072f252d1dc78217872

* SRCPV is deferred now from PV to PKGV since:
  https://git.openembedded.org/openembedded-core/commit/?h=nanbield&id=a8e7b0f932b9ea69b3a218fca18041676c65aba0

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
2024-02-09 09:52:12 -08:00
Wang Mingyu 70e5584a4d nanomsg: upgrade 1.2 -> 1.2.1
Changelog:
===========
-Fixed #1105 which caused a SIGBUS on some some platforms due misaligned accesses.
-Fixed a problem when using absolute CMake target directories.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-09 09:52:08 -08:00
Beniamin Sandu f51fe152e8 mbedtls: upgrade 2.28.4 -> 2.28.7
Includes security fixes for:
CVE-2023-43615 - Buffer overread in TLS stream cipher suites
CVE-2024-23170 - Timing side channel in private key RSA operations
CVE-2024-23775 - Buffer overflow in mbedtls_x509_set_extension()

Other changes:
https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-2.28.5

License updated to dual Apache-2.0 OR GPL-2.0-or-later.

Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-09 09:52:06 -08:00
Beniamin Sandu b1e57692e0 mbedtls: upgrade 3.5.1 -> 3.5.2
* Includes security fix for CVE-2024-23170 - Timing side channel in private key RSA operations
* Includes security fix for CVE-2024-23775 - Buffer overflow in mbedtls_x509_set_extension()

Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-09 09:52:06 -08:00
Yi Zhao 28cb5f1801 samba: upgrade 4.19.3 -> 4.19.4
Release Notes:
https://www.samba.org/samba/history/samba-4.19.4.html

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-01-19 09:51:04 -08:00
alperak c74cdd43f3 adcli: use https protocol for fetching
Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-01-13 09:08:39 -08:00
Wang Mingyu 11056735e8 daq: Fix install conflict when enable multilib.
Error: Transaction test error:
  file /usr/bin/daq-modules-config conflicts between attempted installs of lib32-daq-2.0.7-r0.armv7ahf_neon and daq-2.0.7-r0.cortexa57

The differences of daq-modules-config are as follows:
@@ -7,7 +7,7 @@

 prefix=/usr
 exec_prefix=/usr
-LIBDIR=/usr/lib64
+LIBDIR=/usr/lib
 STATIC_LIBS=" -lsfbpf -lpcap -lsfbpf -lnfnetlink -lnetfilter_queue -lsfbpf -lpcap  -ldnet"

 static=0

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-01-09 20:51:45 -08:00
Wang Mingyu d1d3cf63e0 wolfssl: upgrade 5.6.4 -> 5.6.6
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-01-08 19:54:45 -08:00
Yi Zhao 5260f11b04 samba: upgrade 4.18.9 -> 4.19.3
According to samba release planning[1], 4.18 is already in maintenance
mode and will be EOL in Sep 2024. Upgrade to current stable release
4.19.

Release Notes
https://www.samba.org/samba/history/samba-4.19.0.html
https://www.samba.org/samba/history/samba-4.19.3.html

[1] https://wiki.samba.org/index.php/Samba_Release_Planning

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-01-08 19:54:40 -08:00
Yi Zhao f4c3c747d6 samba: upgrade 4.18.8 -> 4.18.9
This is the latest stable release of the Samba 4.18 release series.
It contains the security-relevant bugfix CVE-2018-14628:

    Wrong ntSecurityDescriptor values for "CN=Deleted Objects"
    allow read of object tombstones over LDAP
    (Administrator action required!)
    https://www.samba.org/samba/security/CVE-2018-14628.html

Release Notes:
https://www.samba.org/samba/history/samba-4.18.9.html

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-12-29 09:04:22 -08:00
Dmitry Baryshkov 4c8c144377 networkmanager: drop libnewt dependency
With the nmtui being now handled via tha PACKAGECONFIG, there is no need
for the global libnewt dependency, PACKAGECONFIG["nmtui"] handles it
correctrly. Drop the libnewt from DEPENDS list.

Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-12-29 09:04:22 -08:00
Alex Kiernan bf4d7f6284 bearssl: Upgrade to latest
Install headers so that dependencies can use this to build against. Make
`brssl` executable, fixup library soname. Drop patches which change
build flags in favour of command line overrides. Add support for static
build.

Changes:

Thomas Pornin (4):
      Added generic API for date range validation (with callbacks).
      Fixed RSA PSS verificatiobn bug (when hash_len != salt_len).
      Added macro that indicates presence of the time callback feature. Also added C++ compatibility.
      Fixed spurious warning about old-style prototype.

Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-12-29 09:04:15 -08:00
Thomas Perrot c331f59e42 networkmanager: fix some missing pkgconfig
- to build and package nmtui
- to automatically append networkmanager-adsl and
  networkmanager-wwan in recommended packages.
- to fix an invalid-packageconfig QA issue that is raised when
  adsl and wwan are added in pkgconfig.

Signed-off-by: Thomas Perrot <thomas.perrot@bootlin.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-12-21 08:20:34 -08:00
Alex Kiernan ebe950c8e9 mbedtls: Upgrade 3.5.0 -> 3.5.1
Use canonical URL, add UPSTREAM_CHECK_GITTAGREGEX.

Changes:

Dave Rodgman (12):
      Header updates
      Fix some non-standard headers
      Update documentation
      Add Changelog for license
      Update license for p256-m
      README improvements to 3rdparty section
      assemble Changelog
      Fix typos in changelog
      Bump version
      Update BRANCHES
      Update Changelog with bugfix entry
      Add docs re Everest license

David Horstmann (1):
      Fix 3rdparty target names for custom config

License-update: Upstream clarified licensing as dual Apache-2.0 or GPL-2.0 or later
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-12-18 22:17:25 -08:00
Thomas Perrot 5edb8335dc networkmanager: add missing modemmanager rdepends
Fix rdepends with modemmanager PACKAGECONFIG enabled.

Signed-off-by: Thomas Perrot <thomas.perrot@bootlin.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-12-18 22:17:23 -08:00
William Lyu b0bc64e930 networkmanager: Improved SUMMARY and added DESCRIPTION
The SUMMARY and DESCRIPTION are taken from Arch Linux wiki page:
https://wiki.archlinux.org/title/NetworkManager

Signed-off-by: William Lyu <William.Lyu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-12-14 07:53:25 -08:00
Hongxu Jia c6dc017438 freeradius: make sub packages to runtime depends on freeradius
Otherwise install packages reported warning at do_rootfs
...log.do_rootfs...
  Installing       : freeradius-ldap-3.0.26-r0.corei7_64              1235/1236
warning: user radiusd does not exist - using root
warning: group radiusd does not exist - using root
  Installing       : freeradius-krb5-3.0.26-r0.corei7_64              1236/1236
warning: user radiusd does not exist - using root
...log.do_rootfs...

The user/group radiusd is added by package freeradius,
explicitly made the sub packages to runtime depends on freeradius

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-28 08:55:39 -08:00
Khem Raj d7b8a3171c cannelloni: Fix build with clang and libc++ runtime
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-13 00:16:50 -08:00
alperak f13b5120ab openfortivpn: upgrade 1.20.5 -> 1.21.0
Changelog:

* fix "Peer refused to agree to his IP address" message, again
* deprecate option --plugin
* better masking of password in logs
* break on reading 0 from ppp pty, for non-Linux systems

Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-12 15:25:11 -08:00
alperak 7d65ad61e0 libdnet: upgrade 1.16.3 -> 1.17.0
Patches removed because fixed in the new version.

Changelog:

- Various fixes around the build process (esp. cmake support + string.h include fixes)
- Stronger cmake support, updated autotools and a few smaller fixes.

Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-12 15:25:11 -08:00
alperak fc60d791b8 civetweb: upgrade 1.12 -> 1.16
=========================
- Added "-DCIVETWEB_SSL_OPENSSL_API_3_0=ON" because of following error:

civetweb.c:1561:2: error: #error "Please define OPENSSL_API_#_# or USE_MBEDTLS"

You may also want to check out the available CMake options here:

https://github.com/civetweb/civetweb/blob/d7ba35bbb649209c66e582d5a0244ba988a15159/CMakeLists.txt
=========================

Changelog:

https://github.com/civetweb/civetweb/blob/d7ba35bbb649209c66e582d5a0244ba988a15159/RELEASE_NOTES.md

Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-12 12:18:48 -08:00
alperak 5e59c274c2 cannelloni: upgrade 1.0.0 -> 1.1.0
Changelog:

- Typo fix in cannelloni.h
- workflows: add nix-test.yml
- Add TCP mode
- No peer checking
- Add -Wall switch and fix all warnings

Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-12 12:18:48 -08:00
Khem Raj b1bac8e7ea meta-networking: Use autotools make system
OE-core is switching to default to meson for gnome recipes

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-12 12:02:25 -08:00
Markus Volk 84f8813858 drop GNOMEBASEBUILDCLASS = "meson"
It is set to meson by default

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-11 09:26:41 -08:00
Khem Raj 53c88ad2b3 wolfssl: upgrade 5.5.4 -> 5.6.4
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-06 08:48:27 -08:00
Khem Raj 915b6c02ee nng: upgrade 1.5.2 -> 12
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-06 08:48:27 -08:00
Beniamin Sandu ae4e1e70a1 mbedtls: upgrade 3.4.1 -> 3.5.0
* Includes security fix for CVE-2023-43615 - Buffer overread in TLS stream cipher suites
* Includes security fix for CVE-2023-45199 - Buffer overflow in TLS handshake parsing with ECDH
* Includes aesce compilation fixes

Full changelog: https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.5.0

The extra patch fixes x86 32-bit builds.

Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-10-30 14:29:34 -07:00
Khem Raj 22889b13f3 network-manager-applet,networkmanager-openvpn, networkmanager: Apply linker versioning patch when using lld only
This patch caused GNU linker to fail linking, therefore limit it to just
lld.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-10-28 11:06:18 -07:00
Peter Kjellerstedt ad27cdd560 mosquitto: Support building for native again
Support for building from native was removed in commit e1b332f2e
(meta-networking: Drop broken BBCLASSEXTEND variants), most likely due
to no support for building libwebsockets-native. That support has now
been added, so it is now possible to build mosquitto-native again.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-10-26 12:00:14 -07:00
Richard Purdie e1b332f2ef meta-networking: Drop broken BBCLASSEXTEND variants
The command "bitbake universe -c fetch" currently throws a ton of warnings
as there are many 'impossible' dependencies.

In some cases these variants may never have worked and were just added by copy
and paste of recipes. In some cases they once clearly did work but became
broken somewhere along the way. Users may also be carrying local bbappend files
which add further BBCLASSEXTEND.

Having universe fetch work without warnings is desireable so clean up the broken
variants. Anyone actually needing something dropped here can propose adding it
and the correct functional dependencies back quite easily. This also then
ensures we're not carrying or fixing things nobody uses.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-10-24 09:08:45 -07:00
Fabien Thomas c817cf55ae samba.bb : Disable ad-dc by default
When this feature is enabled by default in packageconfig
this implies a dependency to python3-dnspython which is in meta-python.

Disable ac-dc PACKAGECONFIG by default to avoid adding a layer
dependency only for this feature.

Signed-off-by: Fabien Thomas <fabien.thomas@smile.fr>
Reviewed-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-10-19 10:51:40 -07:00
Yi Zhao 649f63a235 samba: use external cmocka instead of bundled cmocka
Do not use bundled cmocka to get rid of bundled library
libcmocka-samba4.so.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-10-12 08:06:57 -07:00
Yi Zhao f674a9d4f9 samba: upgrade 4.18.6 -> 4.18.8
This is a security release in order to address the following defects:

CVE-2023-3961:  Unsanitized pipe names allow SMB clients to connect as root to
                existing unix domain sockets on the file system.
                https://www.samba.org/samba/security/CVE-2023-3961.html

CVE-2023-4091:  SMB client can truncate files to 0 bytes by opening files with
                OVERWRITE disposition when using the acl_xattr Samba VFS
                module with the smb.conf setting
		"acl_xattr:ignore system acls = yes"
                https://www.samba.org/samba/security/CVE-2023-4091.html

CVE-2023-4154:  An RODC and a user with the GET_CHANGES right can view all
                attributes, including secrets and passwords.  Additionally,
                the access check fails open on error conditions.
                https://www.samba.org/samba/security/CVE-2023-4154.html

CVE-2023-42669: Calls to the rpcecho server on the AD DC can request that the
                server block for a user-defined amount of time, denying
                service.
                https://www.samba.org/samba/security/CVE-2023-42669.html

CVE-2023-42670: Samba can be made to start multiple incompatible RPC
                listeners, disrupting service on the AD DC.
                https://www.samba.org/samba/security/CVE-2023-42670.html

Release Notes:
https://www.samba.org/samba/history/samba-4.18.8.html

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-10-12 08:06:57 -07:00
Pawel Langowski 470b24bc04 recipes-connectivity: Add tayga recipe
Recipe for TAYGA - an out-of-kernel stateless NAT64 implementation for Linux

Signed-off-by: Pawel Langowski <pawel.langowski@3mdeb.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-10-04 13:09:38 -07:00
Khem Raj 29a2122393 relayd: Fix build with clang
GNU extention is now in use in 6.5 kernel headers sadly

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-10-02 10:03:23 -07:00
Khem Raj 616991508e relayd: Update to latest tip of trunk
Drop the patch fixing an issue already addressed upstream

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-10-02 10:03:23 -07:00
Martin Jansa 5488a32d90 mosquitto, etcd-cpp-apiv3: add missing Upstream-Status
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-09-27 14:22:09 -07:00
Martin Jansa a1c3c7f4e8 gnome-tweaks, networkmanager-fortisslvpn, libesmtp, json-schema-validator, python3-pybluez, python3-pynetlinux, apache2: Fix Malformed Upstream-Status
* Accepted was replaced with Backport in gatesgarth:
  https://docs.yoctoproject.org/migration-guides/migration-3.2.html#miscellaneous-changes

* as detected with oe-core/scripts/contrib/patchreview.py:

meta-openembedded $ grep -A 3 Malformed *qa-patches
meta-gnome.qa-patches:Malformed Upstream-Status 'Malformed Upstream-Status in patch
meta-gnome.qa-patches-/OE/layers/meta-openembedded/meta-gnome/recipes-gnome/gnome-tweaks/gnome-tweaks/0002-meson-fix-invalid-positional-argument.patch
meta-gnome.qa-patches-Please correct according to https://docs.yoctoproject.org/contributor-guide/recipe-style-guide.html#patch-upstream-status :
meta-gnome.qa-patches-Upstream-Status: Accepted [https://gitlab.gnome.org/GNOME/gnome-tweaks/-/commit/dc9701e18775c01d0b69fabaa350147f70096da8]' (/OE/layers/meta-openembedded/meta-gnome/recipes-gnome/gnome-tweaks/gnome-tweaks/0002-meson-fix-invalid-positional-argument.patch)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-09-27 14:22:09 -07:00
Gianfranco Costamagna 79088766c8 mosquitto: upgrade 2.0.17 -> 2.0.18
Add two patches from Debian, pull requests proposed upstream as 2894 and 2895
to make it start only when board is online, and to fix dynamic websockets link failure

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-09-26 12:44:12 -07:00