Commit Graph

2571 Commits

Author SHA1 Message Date
Peter Kjellerstedt 411c981ef0 net-snmp: A little clean up
* Remove the explicit dependency on libnl as the libnl PACKAGECONFIG
  depends on it as necessary.
* Add a PACKAGECONFIG for systemd to replace modifying EXTRA_OECONF
  directly.
* Sort the PACKAGECONFIGs.
* Some whitespace clean up.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-23 10:46:54 -07:00
Daiane Angolini 500ce4d46d wireguard-module: Stop overriding modules_install in the recipe
Configure the recipe to use the module_install function from the module
source code and remove the overriden modules_install function from the
recipe.

Using the default modules_install (instead of the function defined in
the recipe file) the module is signed when DISTRO_FEATURE contains modsign.

Signed-off-by: Daiane Angolini <daiane.angolini@foundries.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-23 10:46:24 -07:00
Sekine Shigeki 04a7dce625 ntp: add CVE-2016-9312 to allowlist
Signed-off-by: Sekine Shigeki <sekine.shigeki@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-18 08:42:25 -07:00
zangrc d7a5707894 mosquitto: upgrade 2.0.10 -> 2.0.11
-License-Update: notice.html does not exist in this version, use NOTICE.md to
check.

Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-18 08:42:25 -07:00
Geoff Parker 3c1e72d62c cifs-utils: set ROOTSBINDIR to /usr/sbin if DISTRO_FEATURES has usrmerge
Fixes cif-utils recipe build when DISTRO_FEATURES includes 'usrmerge'

Add do_configure_prepend() to override ROOTSSBINDIR environment variable
so that the utilities are installed in /usr/sbin rather than /sbin.
Setting --exec-prefix or --prefix in EXTRA_OECONF does not work.

Update do_install_append() to NOT remove /usr/bin /usr/sbin if usrmerge
is set in DISTRO_FEATURES

Signed-off-by: Geoff Parker <geoffrey.parker@arthrex.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-18 08:39:32 -07:00
Ed Tanous df8ecfeacf Use the built-in options for removing pack tools
For distros that want to use the ENABLE_LIB_ONLY option, the rm call
will fail, because ENABLE_HPACK_TOOLS (set implicitly as part of
ENABLE_LIB_ONLY) removes those two binaries from the build, so they then
can't be removed again.  This commit sets ENABLE_HPACK_TOOLS=OFF, which not
only allows for the option to be overridden in other meta layers, also
allows a simplified use of ENABLE_LIB_ONLY in meta layers that don't
want to ship the binaries.

Signed-off-by: Ed Tanous <ed@tanous.net>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-18 08:39:32 -07:00
ito-yuichi@fujitsu.com 3613b50a84 dovecot: add CVE-2016-4983 to allowlist
CVE-2016-4983 affects only postinstall script on specific distribution, so add it to allowlist.

Signed-off-by: Yuichi Ito <ito-yuichi@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-15 08:48:50 -07:00
ito-yuichi@fujitsu.com 711e932b14 cyrus-sasl: add CVE-2020-8032 to allowlist
This affects only openSUSE, so add it to allowlist.

Signed-off-by: Yuichi Ito <ito-yuichi@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-11 08:48:26 -07:00
Sekine Shigeki bb4a4f0ff8 add CVE-2011-2411 to allowlist
This affects only on HP NonStop Server, so add it to allowlist.

Signed-off-by: Sekine Shigeki <sekine.shigeki@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-11 08:48:26 -07:00
zhengruoqin 5411629c44 net-snmp: upgrade 5.9 -> 5.9.1
Refresh the following patch:
net-snmp-5.7.2-fix-engineBoots-value-on-SIGHUP.patch

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-10 07:06:34 -07:00
Yi Zhao 8fc9ecc767 samba: upgrade 4.14.4 -> 4.14.5
Changelog:
https://www.samba.org/samba/history/samba-4.14.5.html

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-09 08:49:21 -07:00
Yi Zhao 8260253c87 samba: disable check fcntl RW_HINTS when configure
This fails on cross-compilation for musl and clang.

Fixes configure error:
Checking whether fcntl supports setting/geting hints: UNKNOWN

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-09 08:49:21 -07:00
Yi Zhao b55788aedc packagegroup-meta-networking: add dhcp-relay
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-09 08:49:21 -07:00
Yi Zhao f78ef9ac0b dhcp-relay: update 4.4.2 -> 4.4.2-P1
Changes since 4.4.2 (Bug Fixes)
Corrected a buffer overwrite possible when parsing hexadecimal
literals with more than 1024 octets. Reported by Jon Franklin from Dell,
and also by Pawel Wieczorkiewicz from Amazon Web Services.
[Gitlab #182]
CVE: CVE-2021-25217

See: https://downloads.isc.org/isc/dhcp/4.4.2-P1/dhcp-4.4.2-P1-RELNOTES

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-09 08:49:21 -07:00
Yi Zhao 833919c1e9 dhcp-relay: disable backtrace in bundled bind
Disable backtrace in bundled bind to fix build error for qemuarm on
musl.

Fixes:
bind/bind-9.11.32/lib/isc/.libs/libisc.so: undefined reference to `_Unwind_GetIP'

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-09 08:49:20 -07:00
Yi Zhao ca31e8057a dhcp-relay: update bundled bind to 9.11.32
Update the bundled bind from 9.11.14 to 9.11.32.

Fixes build error on qemuarmv5:
stats.c: In function 'setcounter':
stats.c:300:36: error: 'val' undeclared (first use in this function); did you mean 'value'?
  300 |         stats->counters[counter] = val;
      |                                    ^~~
      |                                    value

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-09 08:49:20 -07:00
zangrc 1c3701018b wireshark: upgrade 3.4.5 -> 3.4.6
Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-09 08:49:20 -07:00
Khem Raj 236e2d738a netplan: Fix a warning with clang
Refresh musl patch to avoid fuzz

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Zang Ruochen <zangrc.fnst@fujitsu.com>
2021-06-09 08:49:20 -07:00
zangrc d612ad6f32 netplan: upgrade 0.101 -> 0.102
0001-dbus-Remove-unused-variabes.patch
0002-Makefile-Exclude-.h-files-from-target-rule.patch
Removed since these are included in 0.102.

Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-09 08:49:20 -07:00
Yi Zhao 2936dfbe67 samba: update smb.conf
There are some options are deprecated in smb.conf.

Refer to
https://salsa.debian.org/samba-team/samba/-/blob/master/debian/smb.conf
to update it.

* Remove the deprecated "syslog only" and "syslog" global options and
  replace them with the "logging" statement.
* Remove wins support and wins server comments since WINS protocol is
  outdated.
* Improve idmap config

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-05 08:19:07 -07:00
Yi Zhao dd422c5467 samba: upgrade 4.10.18 -> 4.14.4
The 4.10.x is EOL: https://wiki.samba.org/index.php/Samba_Release_Planning
Upgrade to latest 4.14.x.

Remove PACKAGECONFIG[gnutls] since the gnutls is now the mandatory
requirement for samba. See:
https://wiki.samba.org/index.php/Package_Dependencies_Required_to_Build_Samba#Mandatory

Refresh patches:
  16-do-not-check-xsltproc-manpages.patch
  20-do-not-import-target-module-while-cross-compile.patch
  21-add-config-option-without-valgrind.patch
  0001-Add-options-to-configure-the-use-of-libbsd.patch
  dnsserver-4.7.0.patch
  iconv-4.7.0.patch
  0001-samba-fix-musl-lib-without-innetgr.patch

Drop patches:
  0001-lib-replace-wscript-Avoid-generating-nested-main-fun.patch
  0001-nsswitch-nsstest.c-Avoid-nss-function-conflicts-with.patch
  0001-waf-add-support-of-cross_compile.patch
  0002-util_sec.c-Move-__thread-variable-to-global-scope.patch
  CVE-2020-14318.patch
  CVE-2020-14383.patch
  glibc_only.patch
  smb_conf-4.7.0.patch

Add new patches:
  0007-wscript_configure_system_gnutls-disable-check-gnutls.patch
  0008-source3-wscript-disable-check-fcntl-F_OWNER_EX.patch
  source3-wscript-disable-check-fcntl-RW_HINTS.patch

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-05 08:19:06 -07:00
Yi Zhao 861c0955dd libldb: upgrade 1.5.8 -> 2.3.0
Refresh patches:
  do-not-import-target-module-while-cross-compile.patch
  options-1.5.4.patch
  avoid-openldap-unless-wanted.patch
  libldb-fix-musl-libc-conflict-type-error.patch

Drop patches:
  0001-waf-add-support-of-cross_compile.patch
  libldb-fix-musl-libc-unkown-type-error.patch

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-05 08:19:06 -07:00
Khem Raj 4bcefa8176 memcached: upgrade to 1.6.9
Fix Set but unused clang warning
sigignore issue is already fixed in 1.6.9

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-05 06:06:27 -07:00
Khem Raj a854c2cb77 mbedtls: Add packageconfig for warning-as-errors
Disable the options by default, as we use different compilers there are
more warnings to handle then upstream

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-04 07:08:13 -07:00
Khem Raj 693ec65bf2 mbedtls: Upgrade to 2.26.0
https://github.com/ARMmbed/mbedtls/releases/tag/v2.26.0

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-03 19:12:33 -07:00
zhengruoqin 6fcc1f0309 opensaf: upgrade 5.21.03 -> 5.21.06
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-03 09:13:52 -07:00
Trevor Gamblin f7751298c5 nftables: upgrade 0.9.8 -> 0.9.9
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-03 09:13:52 -07:00
Trevor Gamblin c90b87b81e libnftnl: upgrade 1.1.9 -> 1.2.0
Upgrade libnftnl in preparation for the upgrade of nftables, since the
latter requires libnftnl >= 1.2.0.

Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-03 09:13:52 -07:00
Khem Raj 689e8ed550 dhcp-relay: Fix libtool files for internal bind build
The bundled libtool files are arcane and do not work in OE cross build
environment, resulting in creating wrong entried in DT_NEEDED section
as well as emitting build paths into rpaths into ELF files, therefore
copy the OE provided libtool files to fix this issue

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-01 07:49:06 -07:00
Khem Raj 2b01328f56 dovecot: Fix build with llvm libunwind
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-31 15:02:44 -07:00
Armin Kuster e6cc1f6a1f python3-scapy: add pkg to pkg grp
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
2021-05-31 07:38:06 -07:00
Armin Kuster 0073e325da python3-scapy: move from meta-security
This tracks the official scapy project.
includes ptest

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
2021-05-31 07:38:06 -07:00
Khem Raj 827f511765 dhcp-relay: Use recent config.guess and config.sub for bind
vendored version of bind is quite old which does not have all newer
architecture info like riscv in gnu-config files captured in the bind
tarball, therefore update these files before configuring bundled bind

Fixes build on rv32/rv64

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Yi Zhao <yi.zhao@windriver.com>
2021-05-28 06:55:33 -07:00
Yi Zhao ccc9d946e3 dhcp-relay: add recipe
The current default dhcp server kea in oe-core doesn't provide
dhcp-relay tool. Add a recipe to provide dhcrelay which is from dhcp.
This patch is picked up from dhcp recipe with some tweaks. In order to
fix the build dependency, we use bundled bind instead of external bind.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-28 06:55:33 -07:00
Khem Raj cd91cfb17c wireshark: Add zstd via packageconfig
Its disabled by default

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-28 06:55:33 -07:00
Romain Naour 6c2a802f42 libiec61850: Upgrade to 1.5.0
Remove all upstream patches
Rename patch 0003 -> 0001

Signed-off-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-28 06:55:33 -07:00
Khem Raj 03ff456f78 rdma-core: Upgrade to 35.0
Native python is being probed on some builds

Fixes
recipe-sysroot-native/usr/share/cmake-3.20/Modules/FindPackageHandleStandardArgs.cmake:230 (message):
  Could NOT find PythonLibs (missing: PYTHON_LIBRARIES PYTHON_INCLUDE_DIRS)
  (Required is exact version "3.8")

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-21 11:26:57 -07:00
Andrej Kozemcak 77e6147545 squid: upgrade 4.14 -> 4.15
Changes are found at: http://www.squid-cache.org/Versions/v4/changesets

Signed-off-by: Andrej Kozemcak <andrej.kozemcak@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-21 06:47:58 -07:00
zhengruoqin 5ca3bfcd20 chrony: upgrade 4.0 -> 4.1
Refresh the following patch:
arm_eabi.patch

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-19 19:11:06 -07:00
Stefan Wiehler 417a344477 restinio: fix license
Signed-off-by: Stefan Wiehler <stefan.wiehler@missinglinkelectronics.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-19 09:17:49 -07:00
zangrc 556fbae2ee tcpreplay: upgrade 4.3.3 -> 4.3.4
-License-Update: URL changed from HTTP to HTTPS.

Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-14 07:26:46 -07:00
zangrc 8a565dc1c5 nbdkit: upgrade 1.25.6 -> 1.25.7
Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-14 07:26:46 -07:00
zangrc f2c352d8ff lksctp-tools: upgrade 1.0.18 -> 1.0.19
0001-m4-sctp.m4-make-conpatible-to-autoconf-2.70.patch
Removed since this is included in 1.0.19.

Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-14 07:26:46 -07:00
zangrc 1447ec7019 ifenslave: upgrade 2.11 -> 2.12
Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-14 07:26:46 -07:00
Khem Raj b31524464a packagegroup-meta-networking.bb: Add http-parser to packagegroup-meta-networking-support
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-13 08:41:15 -07:00
Stefan Wiehler c049a4e2ce restinio: add recipe
Header-only C++14 library that gives you an embedded HTTP server.

Signed-off-by: Stefan Wiehler <stefan.wiehler@missinglinkelectronics.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-12 07:11:41 -07:00
Stefan Wiehler 6f47ea5061 http-parser: add recipe
HTTP request/response parser for C.

Signed-off-by: Stefan Wiehler <stefan.wiehler@missinglinkelectronics.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-12 07:11:41 -07:00
Khem Raj 422f18343b libowfat: Replace __pure__ with pure and remove using __deprecated__
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-03 14:22:55 -07:00
Khem Raj 7178a18131 dibbler: Add libpthread to linker flags
Fixed build issue
lowlevel-linux-link-state.c:(.text+0x450): undefined reference to `pthread_create'
clang-12: error: linker command failed with exit code 1 (use -v to see invocation)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-03 12:56:57 -07:00
Silcet 0a0894b78e ufw: bump version to 0.36 and add services
This commit brings the version of ufw up to 0.36 since version 0.33
had some problems:
* The setup.py calls sed to replace some variables in the source
code with the correct paths. However, this is done using a hardcoded
path and conflicts with distutils
* The python shebang was not properly corrected in setup.py, leading
to a script that only run if there is a python symlink to python2 or
python3

The first issue is addressed by the bump in version, while the second
one is fixed in patch 0003 of the recipe.

Also, the new version provides examples for systemd service and
sysvinit scripts to autostart ufw. These are added into the recipe
now.

Signed-off-by: Silcet <camorga1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-03 08:07:40 -07:00