Commit Graph

23956 Commits

Author SHA1 Message Date
Lee Chee Yang b78a651f68 libsdl: fix CVE-2022-34568
CVE-2022-34568 affected
From (including) 1.2.1
Up to (including) 1.2.15

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 49c97b4eef)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-01 19:40:58 +02:00
Soumya Sambu dd4360e0d8 gtk+: Fix CVE-2024-6655
A flaw was found in the GTK library. Under certain conditions, it is possible for a
library to be injected into a GTK application from the current working directory.

References:
https://nvd.nist.gov/vuln/detail/CVE-2024-6655

Upstream-patch:
https://gitlab.gnome.org/GNOME/gtk/-/commit/3bbf0b6176d42836d23c36a6ac410e807ec0a7a7

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 4bd9d757c1)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-01 19:40:58 +02:00
Mingli Yu ec84fbba45 dialog: Update the SRC_URI
Update the SRC_URI to fix the do_fetch error.

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 6d1b7df8c0)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-01 19:40:58 +02:00
Jiaying Song 50c1e08c94 vlock: fix do_fetch error
Change the SRC_URI to the correct value due to the following error:

WARNING: vlock-2.2.3-r0.vr2401 do_fetch: Failed to fetch URL http://distfiles.gentoo.org/distfiles/vlock-2.2.3.tar.gz, attempting MIRRORS if available

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 784942b68e)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-01 19:40:58 +02:00
Markus Volk c6be3e5e74 p8platform: unbreak do_populate_sdk
Error:
 Problem: package libcec-dev-6.0.2-r0.corei7_64 requires p8platform-dev, but none of the providers can be installed
  - conflicting requests
  - nothing provides p8platform = 2.1.0.1-r0 needed by p8platform-dev-2.1.0.1-r0.corei7_64
(try to add '--skip-broken' to skip uninstallable packages)

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 03a1a24618)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-01 19:40:58 +02:00
Khem Raj d285cfe095 nicstat: Use SOURCEFORGE_MIRROR in SRC_URI
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 256ea730b0)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-01 19:40:58 +02:00
Jiaying Song 5cb230959e libconfig: switch source to GitHub repository
The original tarball URL no longer provides version 1.7.3 or any other
historical releases.To ensure reproducible builds, the source has been
switched to the official GitHub repository.

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit c5de36f588)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-01 19:40:54 +02:00
Justin Bronder 0ef576c489 tk: inherit pkgconfig
I noticed that xft was not getting enabled as expected because the
recipe was using pkg-config from the host.

Signed-off-by: Justin Bronder <jsbronder@cold-front.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 95c14a9254)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-01 14:25:12 +02:00
Etienne Cordonnier 2e0ecba694 fsverity-utils: fix SRC_URI
This URL does not exist any more, and do_fetch works only because a mirrored
file is available at
http://downloads.yoctoproject.org/mirror/sources/git2_git.kernel.org.pub.scm.linux.kernel.git.ebiggers.fsverity-utils.git.tar.gz

Signed-off-by: Etienne Cordonnier <ecordonnier@snap.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit d54e2671e6)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-01 14:21:58 +02:00
Peter Kjellerstedt 4c8901f4fe paho-mqtt-cpp: Improve the license information
Replace the about.html and notice.html files in LIC_FILES_CHKSUM with
the license information from one of the source files. Including HTML
files in LIC_FILES_CHKSUM complicates things when the license files that
OE collects are, e.g., later processed and presented to a user where the
expectation is that they are plain text files.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 71e75357af)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-10-01 14:20:59 +02:00
Matthias Klein 616349d904 paho-mqtt-c: upgrade 1.3.12 -> 1.3.13
Service release.
Issues resolved:
https://github.com/eclipse/paho.mqtt.c/milestone/20?closed=1

Signed-off-by: Matthias Klein <matthias@extraklein.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 9f70554e43)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-29 20:15:32 +02:00
Peter Kjellerstedt e8be179802 recipes: Remove double protocol= from SRC_URIs
With the exception of paho-mqtt-cpp, the double protocol= attributes
were added to the SRC_URIs when protocol=https was added to all SRC_URIs
fetching from github.com in commit b402a3076f (recipes: Update SRC_URI
branch and protocols).

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 2e0a581bee)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-29 20:15:32 +02:00
Peter Kjellerstedt d11f0a27f5 paho-mqtt-c: Improve the license information
Replace the about.html and notice.html files in LIC_FILES_CHKSUM with
the LICENSE file. Including HTML files in LIC_FILES_CHKSUM complicates
things when the license files that OE collects are, e.g., later
processed and presented to a user where the expectation is that they are
plain text files.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 4decf7d0a7)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-29 20:15:32 +02:00
Matthias Klein 363008a4d6 paho-mqtt-c: upgrade 1.3.11 -> 1.3.12
Service release.
Issues resolved: https://github.com/eclipse/paho.mqtt.c/milestone/19?closed=1

Signed-off-by: Matthias Klein <matthias@extraklein.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 29c4df0cbe)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-29 20:15:31 +02:00
Matthias Klein d37c4ea0e8 paho-mqtt-c: upgrade 1.3.10 -> 1.3.11
Service release.
Issues resolved: https://github.com/eclipse/paho.mqtt.c/milestone/18?closed=1

Signed-off-by: Matthias Klein <matthias@extraklein.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit ef4fb2211e)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-29 20:15:31 +02:00
Khem Raj 3e316f1939 debootstrap: Update SRC_URI to point to valid URL
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 2db438f241)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-29 20:15:31 +02:00
Wang Mingyu a6c5155df6 flashrom: upgrade 1.2 -> 1.2.1
0001-typecast-enum-conversions-explicitly.patc
removed since it's included in 1.2.1

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit d8e50a9507)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-29 20:15:31 +02:00
Wang Mingyu 41b10de52e iperf3: upgrade 3.14 -> 3.15
Changelog:
===========
  Several bugs that could allow the iperf3 server to hang waiting
  for input on the control connection has been fixed.

  A bug that caused garbled output with UDP tests on 32-bit hosts
  has been fixed (PR #1554, PR #1556). This bug was introduced in
  iperf-3.14.

  A bug in counting UDP messages has been fixed (PR #1367, PR
  #1380).

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 8765f02ffb)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-29 20:15:31 +02:00
Wang Mingyu 23d9cf882f uftp: upgrade 5.0.2 -> 5.0.3
Changelog:
===========
-A memory leak fix in the prior version wasn't applied correctly, resulting
 in an invalid memory access causing a crash.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 5d050f078a)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-29 20:15:31 +02:00
Wang Mingyu 975368a20e uftp: upgrade 5.0.1 -> 5.0.2
Changelog:
=========
-Fixed bug that caused crash when a CLIENT_KEY arrived out of order
-Fixed option handling on Windows when an argument is missing

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 93a5628ae6)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-29 20:15:31 +02:00
Wang Mingyu 76de61ab0a uftp: upgrade 5.0 -> 5.0.1
Changelog:
==========
-On very low speed transfers (<10Kbps) sessions would time out due to a very
  large interpacket transmission interval.  Fixed by putting a lower limit
  on the advertised GRTT of of the interpacket transmission interval.
-Sending of ABORT messages on early shutdown would sometimes fail due to
  OpenSSL cleanup functions running before application cleanup.  Changed the
  ordering of atexit() handlers to ensure OpenSSL cleanup happens last.
-Fixed missing timestamp update when clients read CONG_CTRL messages
-Fix to GRTT handling on server to ensure it doesn't fall below minumim.
-Fixed bypassed checking of existing files on client for backup
-Various logging fixes

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 0a58426ed0)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-29 20:15:31 +02:00
Yi Zhao 68c66db375 libtdb: upgrade 1.4.3 -> 1.4.7
* Refresh patches
* Add a patch to skip checking PYTHONHASHSEED

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit cf53340f00)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-29 20:15:31 +02:00
wangmy 8426871255 cifs-utils: upgrade 6.14 -> 6.15
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 88ea7fc012)

Adapted to Kirkstone.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-29 20:15:31 +02:00
Randy MacLeod d42bb883dd tnftp: switch the SRC_URI to https
Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 8f4dc754cf)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-29 20:15:31 +02:00
Khem Raj bb12695af8 ssmping: Use debian mirror for SRC_URI
Original URI is not accessible anymore
Drop md5sum

Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit ceb9160341)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-29 20:15:31 +02:00
Randy MacLeod 790b431538 pimd: switch SRC_URI to https
Switch SRC_URI to https (yes, the URI still has ftp in the path!).
Also drop the obsolete SRC_URI[md5sum].

Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 9221eaa8d6)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-29 20:15:31 +02:00
Wang Mingyu a88c4f592f ndisc6: upgrade 1.0.7 -> 1.0.8
Changelog
============
Fix potential garbage whilst prining an advertised prefix.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 3fe7c5fae8)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-29 20:15:31 +02:00
Wang Mingyu b2dbbd49ca ndisc6: upgrade 1.0.6 -> 1.0.7
Changelog:
=========
# Do not ignore multicast advertisements when discovery was sent as unicast
  (fix regression from 1.0.5).

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit a014528ede)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-29 20:15:31 +02:00
Yi Zhao 515b34d850 lksctp-tools: upgrade 1.0.20 -> 1.0.21
ChangeLog:
https://github.com/sctp/lksctp-tools/blob/v1.0.21/ChangeLog

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 4c3e3638b9)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-29 20:15:31 +02:00
Yi Zhao bc1a12e9c5 lksctp-tools: upgrade 1.0.19 -> 1.0.20
ChangeLog:
https://github.com/sctp/lksctp-tools/blob/v1.0.20/ChangeLog

Drop redundant variables LK_REL, SOLIBVERSION and SOLIBMAJORVERSION in
recipe.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 162039c327)

Adapted to Kirkstone.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-29 20:15:31 +02:00
Randy MacLeod 3420cb0739 ncftp: Upgrade to 3.2.7
Switch the SRC_URI from "ftp:" to "https:". Drop the obsolete SRC_URI[md5sum].
Drop ncftp-3.2.5-gcc10.patch since we're using gcc13 and upstream has fixed the build
to work by adding an extern to sh_util/gpshare.c for example.

Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 9dbf1b42bb)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-26 15:13:03 +02:00
Yi Zhao efc78dfed0 devecot: set dovecot.conf file mode with chmod
The touch command doesn't support file mode setting. Set it with chmod.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 4b306f382f)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-26 15:13:03 +02:00
Khem Raj acdeeb0a4a radiusclient-ng: Point SRC_URI to archive.ubuntu.com
This tarball is not available on debian ftp archive anymore

Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit fe62e64c97)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-26 15:13:03 +02:00
Khem Raj 23b345c5a1 openflow: Switch SRC_URI to github mirror
Original repo seems to be not accessible.
Fix build with clang-18

Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 59bffb6844)

Adapted for Kirkstone.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-26 15:13:03 +02:00
Khem Raj 86b1d92dcc openflow: Include sys/stat.h for fchmod
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit e2b1b060b0)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-26 15:13:03 +02:00
Bergin, Peter 80968e146f freediameter: fix typo and old overide syntax
A typo that probably caused a left over from override syntax conversion.

    INITSCRIPT_PARAMS$_${PN} --> INITSCRIPT_PARAMS:${PN}

Signed-off-by: Peter Bergin <peter.bergin@windriver.com>
Signed-off-by: Peter Bergin <peter@berginkonsult.se>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 77f031776e)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-26 15:13:03 +02:00
Gyorgy Sarvari 1de3289aa2 znc: fix LICENSE value, clean up SRC_URI
1. Set the correct LICENSE value

2. Csocket is a submodule of the main znc project. Instead of
cloning it separately in a subfolder, just let the gitsm fetcher
to fetch the correct revisions, at the correct place.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 6a8d205e5c)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-26 15:13:03 +02:00
Khem Raj e93f4a53c9 nfacct: Update SRC_URI to point to valid URL
Update UPSTREAM_CHECK_URI accordingly

Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 88b295625d)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-26 15:13:03 +02:00
Wang Mingyu 71a07ae386 libnftnl: upgrade 1.2.5 -> 1.2.6
Changelog:
=========
tests: nft-rule-test: Add test cases to improve code coverage
tests: nft-table-test: fix typo	shixuantong
expr: meta: introduce broute meta expression

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit d358507597)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-26 15:13:03 +02:00
Yi Zhao a1460941fc libnftnl: upgrade 1.2.4 -> 1.2.5
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit e9df01df3d)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-26 15:13:03 +02:00
Wang Mingyu 4f2e3d6e39 libnftnl: upgrade 1.2.3 -> 1.2.4
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 9afefefac5)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-26 15:13:03 +02:00
Yi Zhao 5d465fed15 libnftnl: upgrade 1.2.2 -> 1.2.3
Drop 0001-avoid-naming-local-function-as-one-of-printf-family.patch as
the issue has been fixed upstream.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 333cdd80c6)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-26 15:13:03 +02:00
wangmy b9e3ddaefd libnftnl: upgrade 1.2.1 -> 1.2.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 6d997c52c5)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-26 15:13:03 +02:00
Wang Mingyu 8b4a5ad2c6 pure-ftpd: upgrade 1.0.51 -> 1.0.52
nostrip.patch
refreshed for 1.0.52

License-Update: Copyright year updated to 2024

Changelog:
==========
 - The QUIT command is now accepted during a transfer.
 - The server can be built with --with-minimal again.
 - Fixed an out of bounds read in the MLSD command.
 - Larger mmap()ed pages are used on aarch64.
 - Improved compatibility with HPUX
 - Improved OpenSSL API compatibility
 - Improved compatibility with OpenWall Linux
 - Improved compatibility with Netfilter

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit fac6357f60)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-26 15:13:03 +02:00
wangmy 1784ee6c9b pure-ftpd: upgrade 1.0.50 -> 1.0.51
0001-Remove-hardcoded-usr-local-includes-from-configure.a.patch
updated for new version.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 8a50039955)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-26 15:13:03 +02:00
alperak 95fcec5acd adcli: use https protocol for fetching
Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit c74cdd43f3)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-26 15:13:03 +02:00
Philippe Coval 72f4d030a8 ot-br-posix: Add dep to ipset as used by firewall
ipset is used by firewall module of ot-br-posix:

   third_party/openthread/repo/src/posix/platform/firewall.cpp:\
   return ExecuteCommand("%s add %s %s -exist", kIpsetCommand, aSetName, aAddress);

Related observed issue looked like:

```
oniro@oniro-linux-blueprint-gateway-raspberrypi4-64:~$ sudo journalctl -u otbr-agent.service
Apr 28 17:42:32 oniro-linux-blueprint-gateway-raspberrypi4-64 systemd[1]: Started OpenThread Border Router Agent.
Apr 28 17:42:38 oniro-linux-blueprint-gateway-raspberrypi4-64 otbr-agent[330]: sh: ipset: not found
```

Relate-to: https://gitlab.eclipse.org/eclipse/oniro-blueprints/transparent-gateway/meta-oniro-blueprints-gateway/-/issues/6
Cc: Stefan Schmidt <stefan.schmidt@huawei.com>
Forwarded: https://github.com/openembedded/meta-openembedded/pull/611
Signed-off-by: Philippe Coval <philippe.coval.ext@huawei.com>
(cherry picked from commit fc8209e8bc)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-26 15:13:03 +02:00
Jim Broadus ec0d9c4746 networkmanager: fix iptables and nft paths
The NetworkManager meson.build is searching for iptables and nft by
passing absolute paths to meson's find_program. The result is that it
locates tools on the host machine when they exist at those locations. If
they don't, it uses default locations. This often works out, but in some
cases, such as when the host uses a merged usr scheme and the build
target does not, the paths will be incorrect and the tools won't be
found at runtime.

These could be PACKAGECONFIG options, but since they have fallback
values, completely disabling the use of either iptables or nft would
require patching the meson.build or setting a bogus location.

Note that this meson.build file follows the same pattern elsewhere, but
most cases are already covered by PACKAGECONFIG options.

Signed-off-by: Jim Broadus <jim@thruwave.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 7c44094532)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-26 15:13:03 +02:00
Gianfranco Costamagna 68823348d6 mosquitto: bump to 2.0.22
Refresh patches, drop patch 3238, now part of upstream codebase

Signed-off-by: Gianfranco Costamagna <locutusofborg@debian.org>
Signed-off-by: Gianfranco Costamagna <costamagnagianfranco@yahoo.it>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 0331499e1f)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-26 15:13:03 +02:00
Louis Rannou 608dd96761 mosquitto: bump to 2.0.21
Upgrade to mosquitto 2.0.21. Update the patch status for issue 2895 and create a
new patch for an issue introduced in 2.0.19 which causes connections to get down
when the clock is changed.

Signed-off-by: Louis Rannou <louis.rannou@non.se.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 2a27eacee2)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2025-09-26 15:13:03 +02:00