Commit Graph

3620 Commits

Author SHA1 Message Date
Michael Olbrich 5cf3766cf6 nftables: avoid python dependencies when building without python
Use inherit_defer instead of inhert. This way, setuptools3 is not
inherited when python is removed from PACKAGECONFIG in a .bbappend file.
This avoids dependencies added by setuptools3.

Don't add nftables-python to PACKAGES if python is disabled. It adds
extra runtime dependencies on python3-core and python3-json.

Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-05-30 08:42:03 -07:00
Wang Mingyu 7f56ae763f wireshark: upgrade 4.2.4 -> 4.2.5
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-05-28 09:34:36 -07:00
Wang Mingyu 64b8b621b4 arno-iptables-firewall: upgrade 2.1.1 -> 2.1.2
Changelog:
============
* Enable IPv6 name record lookups for dig-wrapper. This indirectly enables
  IPv6/AAAA-record support for dyndns-host-open (& traffic-accounting) plugin
! Prevent systemd from terminating the job manager when some rules fail
* Renamed xxx_OUTPUT to INET_OUTPUT_xxx for clarity/consistency
+ Additional INET_OUTPUT_xxx settings to have better control
  of internet access on this machine
* Reorder some code/settings for clarity/consistency

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-05-28 09:34:28 -07:00
Dmitry Baryshkov 07772ae470 layers: stop declaring compatibility with scarthgap
With the UNPACKDIR changes in place the layers are no longer compatible
with the scarthgap release. Drop it from LAYERSERIES_COMPAT and limit
compatibility to styhead only.

Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-05-28 09:34:02 -07:00
Wang Mingyu d93d67dab3 fetchmail: Fix buildpaths warning.
WARNING: fetchmail-6.4.38-r0 do_package_qa: QA Issue: File /usr/bin/fetchmail in package fetchmail contains reference to TMPDIR [buildpaths]

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-05-23 16:17:11 -07:00
Khem Raj c33cfad1b0 recipes: Switch away from S = WORKDIR
Make it dependent on UNPACKDIR instead

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-05-23 08:44:44 -07:00
Khem Raj ffc64e9c6f recipes: Start WORKDIR -> UNPACKDIR transition
Replace references of WORKDIR with UNPACKDIR where it makes sense to do
so in preparation for changing the default value of UNPACKDIR.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-05-23 08:44:44 -07:00
Khem Raj 46db58f8c7 nbd: Do not inherit systemd
It does not provide/enable systemd script generation which results in

ERROR: nbd-3.26.1-r0 do_package: nbd does not appear in package list, please add it

Signes-off-by: Khem Raj <raj.khem@gmail.com>
2024-05-23 08:44:42 -07:00
Khem Raj 673ba54e98 nbd: Fix build with GCC14 on musl targets
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-05-23 08:44:42 -07:00
Khem Raj 5762e4fd55 nbd: Upgrade to 3.26.1
Backport a build fix when using --disable-manpages

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-05-23 08:44:41 -07:00
Yoann Congal d161de0b00 mdio-tools: fix mdio-netlink kernel module reproducibility
mdio-netlink source make reference to ${S}/.. which breaks
-fdebug-prefix-map and results in the full TMPDIR path being present in
the -dbg package and, also, change a related CRC in the main package.

This changes ${S} to enclose the whole SRC_URI repo and adapt relative paths to
build (MODULES_MODULE_SYMVERS_LOCATION)

This make mdio-netlink reproducible and fixes this warning:
WARNING: mdio-netlink-1.3.1-r0 do_package_qa: QA Issue: File /lib/modules/6.6.29-yocto-standard/updates/.debug/mdio-netlink.ko in package mdio-netlink-dbg contains reference to TMPDIR [buildpaths]

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Reviewed-by: Alexandre Truong <alexandre.truong@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-05-21 14:15:10 -07:00
Khem Raj bc0a516502 openflow: Fix build build with musl/gcc14
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-05-19 08:28:01 -07:00
Yoann Congal 1429a784c7 squid: workaround a build failure with native gcc10
When build on Debian 11 (gcc10), squid fails to build[0] because of a
bug[1] in the configure step (it mixes options between old native compiler
and recent target compiler: the former needs the std=c++17 option, the latter
doesn't).

The workaround is to force the "-std=c++17" option for the native build.

NB: Our Buildroot friends have the same workaround[2].

[0]: https://autobuilder.yoctoproject.org/typhoon/#/builders/155/builds/23/steps/28/logs/stdio
[1]: https://bugs.squid-cache.org/show_bug.cgi?id=5376
     Bug closed as invalid by upstream
[2]: https://github.com/buildroot/buildroot/blob/932b52fad87d79d9f26a343edafe2981079de16e/package/squid/squid.mk#L24

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Reviewed-by: Alexandre Truong <alexandre.truong@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-05-19 08:28:01 -07:00
Beniamin Sandu 967216f6d7 unbound: upgrade 1.19.3 -> 1.20.0
Full changelog:
https://github.com/NLnetLabs/unbound/releases/tag/release-1.20.0

Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-05-19 08:28:00 -07:00
Wang Mingyu 9ef0e88791 smcroute: upgrade 2.5.6 -> 2.5.7
Changelog:
 Fix #207: crash when adding IPv6 multicast route on a kernel without IPv6 multicast support

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-05-19 08:27:58 -07:00
Wang Mingyu aa0eb49df0 openipmi: upgrade 2.0.34 -> 2.0.35
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-05-19 08:27:54 -07:00
Wang Mingyu 41c3ad1a63 networkmanager-openvpn: upgrade 1.10.2 -> 1.11.0
Changelog:
===========
* Improve the support for 2FA dynamic challenge, not
  saving the response into the profile.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-05-19 08:27:54 -07:00
Khem Raj f804417cda geoip-perl: Add ptest missing dependency on perl-modules
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-05-12 21:51:32 -07:00
Yi Zhao 7222132115 samba: upgrade 4.19.5 -> 4.19.6
ChangeLog:
https://www.samba.org/samba/history/samba-4.19.6.html

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-05-09 17:10:59 -07:00
Yi Zhao 37d1908eea libtevent: upgrade 0.16.0 -> 0.16.1
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-05-09 17:10:59 -07:00
Ricardo Simoes 577a55f7a5 mbedtls: Fix warning for missing program
When PACKAGECONFIG does not contains 'programs', the hello binary will
not be generated, but the ALTERNATIVE 'hello' is still set, causing the
update-alternatives bbclass to generate warnings for the  missing
'hello' binary.

This commit fixes that by only populating ALTERNATIVES when 'programs'
is enabled.

Signed-off-by: Ricardo Simoes <ricardo.simoes@pt.bosch.com>
Signed-off-by: Mark Jonas <mark.jonas@de.bosch.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-05-02 07:32:55 -07:00
Wang Mingyu a733b0c75c fping: upgrade 5.1 -> 5.2
0001-fping-Initialize-msghdr-struct-in-a-portable-way.patch
removed since it's included in 5.2

Changelog:
============
-New option -X / --fast-reachable to exit immediately once N hosts have been found
-New option -k / -fwmark to set Linux fwmark mask
-Always output fatal error messages
-Fallback to SO_TIMESTAMP if SO_TIMESTAMPNS is not available
-Fix "not enough sequence numbers available" error on BSD-like systems
-Fix running in unprivileged mode
-Fix build issue for NetBSD/alpha
-Fix build issue for OpenBSD/alpha
-Fix build warning for long int usage
-Fix build error with musl libc
-Fix to guard against division by zero
-Decouple -a/-u effects from -c
-Added contrib/Dockerfile
-Remove host from Netdata chart titles
-Add additional tests
-Update github action os images
-Fix Azure pipeline tests
-Various autoconf fixes
-Extended configure script with --enable-debug and output cpu usage
-Documentation: Update Netdata website link
-Documentation: fix description of --file option
-Documentation: improve exit status description
-Documentation: move description of -i MSEC
-Documentation: improve help output for options -c and -C

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-05-02 07:32:47 -07:00
Markus Volk a87f7624e1 networkmanager: add missing glib-2.0 dependency
- also copy GLib*Typelib to STAGING_LIBDIR_NATIVE to avoid:
| gi.RepositoryError: Typelib file for namespace 'GLib', version '2.0' not found

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-05-01 09:06:43 -07:00
Markus Volk 43d20c156a networkmanager: fix gir build
Basically what is done in:
https://git.openembedded.org/meta-openembedded/commit/?h=master-next&id=4c40897893f43a99e6ae12e652c0cf789d89df90

This fixes:
| gi.RepositoryError: Typelib file for namespace 'Gobject', version '2.0' not found
| gi.RepositoryError: Typelib file for namespace 'Gio', version '2.0' not found
| gi.RepositoryError: Typelib file for namespace 'GModule', version '2.0' not found

- Remove uneeded do_compile:prepend. It was broken because of {B}} and seems to be unneeded anyway

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-30 08:20:34 -07:00
maffan 4fc97fe602 networkd-dispatcher: Add dependency on python3-json
networkd-dispatcher imports json. Add it as a RDEPENDS.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-30 08:20:34 -07:00
Ninette Adhikari 285b9c555b open-vm-tools: Update status for CVE-2014-4199 and CVE-2014-4200
Current version 12.3.5 is not affected by the issue.
Affected versions: Up to (incl) 10.0.3

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-29 11:11:52 -07:00
Yoann Congal d3751ce994 reproducibility: move repro excludes from AB config.json to meta-oe
For now, the known non-reproducible packages list is stored inside the
autobuilder config.json file. This is not ideal. Let's move this list
into each layers of meta-openembedded.

These lists can be used with, in local.conf:
  include conf/include/non-repro-meta-oe.inc
  OEQA_REPRODUCIBLE_EXCLUDED_PACKAGES = "${KNOWN_NON_REPRO_META_OE}"

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Acked-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-29 11:11:51 -07:00
Khem Raj 1e5ae73fd3 layers: Add styhead to compatible release series
styhead is codename for upcoming 5.1 release

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-28 08:55:01 -07:00
Markus Volk c203e6afa8 spice-gtk: add PACKAGECONFIG for webdav
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-23 15:15:35 -07:00
Markus Volk 3e27517f7e spice-gtk: use hwdata instead of usbids
spice-gtk seems to be the last recipe in meta-openembedded that uses
usbids instead of hwdata.

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-23 15:15:35 -07:00
Wang Mingyu d7d1da7a96 openfortivpn: upgrade 1.21.0 -> 1.22.0
Changelog:
==========
* make sure Homebrew packages for macOS are built with --enable-legacy-pppd
* do not print TLS socket options in log (revert change from 1.16.0)
* add option to specify SNI
* change most occurrences of "SSL" to "TLS" in user-visible text

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-23 15:15:32 -07:00
Martin Jansa 0ef3e9918d freediameter: fix dependency from libidn to libidn2
* it's used since:
  https://github.com/freeDiameter/freeDiameter/commit/da679d27c546e11f6e41ad8882699f726e58a9f7
  included with the upgrade to 1.5.0 in:
  https://git.openembedded.org/meta-openembedded/commit/?id=47ccb88d94852e327f3bdd45425f33e56983b50c

* libidn2 is usually pulled into the RSS by the dependency from gnutls
  but when gnutls doesn't depend on it, the build fails with:
-- Checking for module 'libidn2'
--   No package 'libidn2' found
CMake Error at include/freeDiameter/CMakeLists.txt:144 (MESSAGE):
  Unable to find libidn2, please install libidn2-dev or equivalent, or set
  DIAMID_IDNA_IGNORE or DIAMID_IDNA_REJECT

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-19 14:31:32 -07:00
Wang Mingyu 8c1aa2b8ae squid: upgrade 6.8 -> 6.9
Changelog:
==========
- Regression Bug 5349: basic_nis_auth build error: unterminated #ifndef
- Bug 5069: Keep listening after getsockname() error
- Bug 5360: FwdState::noteDestinationsEnd() assertion "err"
- Reduce stale errno usage
- Plug memory leak in handling cache manager requests
- Fix error: template-id not allowed for constructor in C++20
- Improve release packaging automation

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-17 23:47:28 -07:00
Wang Mingyu b58ee068c1 sngrep: upgrade 1.8.0 -> 1.8.1
Changelog:
 capture: fix possible buffer overflow while processing headers

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-17 23:47:28 -07:00
Wang Mingyu 2824a7ef39 rdma-core: upgrade 50.0 -> 51.0
Changelog:
============
-Merge pull request #1444 from yishaih/mlx5_dr
-Merge pull request #1439 from Kamalheib/qedr_pr
-mlx5: DR, Using sq ts format when RoCE is disabled
-Merge pull request #1440 from Honggang-LI/doc
-librdmacm: adjust ECE function name in man page
-providers/qedr: Remove unused debug files
-roviders/qelr: Replace DP_ERR with verbs_err
-providers/qelr: Replace DP_VERBOSE with verbs_debug
-providers/qelr: Remove unused macros
-Merge pull request #1438 from amzn/fix-rdma-tracepoint

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-17 23:47:28 -07:00
Alexander Vickberg 8d6078b19b nng: upgrade 1.5.2 -> 1.7.3
Signed-off-by: Alexander Vickberg <wickbergster@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-17 23:47:22 -07:00
Alexander Vickberg 4d41a11052 Revert "nng: upgrade 1.5.2 -> 12"
This reverts commit 915b6c02ee.

Mistake upgrade by AUH

Signed-off-by: Alexander Vickberg <wickbergster@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-17 23:47:22 -07:00
Yi Zhao 3716379d3f snort3: update to latest stable version 3.1.84.0
ChangeLog:
https://github.com/snort3/snort3/releases/tag/3.1.84.0

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-16 11:00:33 -07:00
Yi Zhao 891162dbb4 libdaq: update to latest stable version 3.0.14
ChangeLog:
https://github.com/snort3/libdaq/releases/tag/v3.0.14

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-16 11:00:33 -07:00
alperak d3a16ad4ae Use PYTHON_SITEPACKAGES_DIR instead of hard-coded site-packages directory path
The following paths have been replaced with PYTHON_SITEPACKAGES_DIR:

- "${libdir}/${PYTHON_DIR}/site-packages"
- "${libdir}/python${PYTHON_BASEVERSION}/site-packages"
- "${libdir}/python*/site-packages"
- "${libdir}/python3.*/site-packages"

Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-15 21:01:20 -07:00
Khem Raj 47ccb88d94 freediameter: Upgrade to latest on master 1.5.0+
This also fixes all ptests, therefore move freediameter
out of PTESTS_PROBLEMS_META_NETWORKING to PTESTS_FAST_META_NETWORKING

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-15 21:01:12 -07:00
alperak b4980bfc97 libcoap: fix CVE-2024-0962
CVE-2024-0962:

A vulnerability was found in obgm libcoap 4.3.4. It has been rated as critical. Affected by this issue is the function get_split_entry of the file src/coap_oscore.c of the component Configuration File Handler. The manipulation leads to stack-based buffer overflow.

Upstream-Status: Backport [https://github.com/obgm/libcoap/pull/1311]

WARNING: libcoap-4.3.4-r0 do_cve_check: Found unpatched CVE (CVE-2024-0962)

This vulnerability is only exist in 4.3.4.

Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-12 08:57:34 -07:00
Peter Marko 2f30540742 waf-samba: replace oldincludedir
oldincludedir was removed in oe-core by
commit  506c91cbc6a604a84e37e53ccff430436369802e

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-12 08:57:34 -07:00
Khem Raj 614956c5d7 nftables: Fix ptest runs
It gets OOMs with memory < 2G on x86_64 qemu
Export NFT variable in run-ptest script its used by few tests
Add required runtime dependencies for ptests to pass

This also requires changes to kernel config
features/nf_tables/nft_test.scc and CONFIG_VETH

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-10 16:06:30 -07:00
Randy MacLeod 4416aaf88e postfix: switch SRC_URI to http
Switch the SRC_URI to http since the postfix site does not yet use https.

Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-09 13:56:26 -07:00
Randy MacLeod 8f4dc754cf tnftp: switch the SRC_URI to https
Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-09 13:56:26 -07:00
Randy MacLeod 9221eaa8d6 pimd: switch SRC_URI to https
Switch SRC_URI to https (yes, the URI still has ftp in the path!).
Also drop the obsolete SRC_URI[md5sum].

Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-09 13:56:26 -07:00
Randy MacLeod 9dbf1b42bb ncftp: Upgrade to 3.2.7
Switch the SRC_URI from "ftp:" to "https:". Drop the obsolete SRC_URI[md5sum].
Drop ncftp-3.2.5-gcc10.patch since we're using gcc13 and upstream has fixed the build
to work by adding an extern to sh_util/gpshare.c for example.

Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-09 13:56:26 -07:00
Beniamin Sandu c581a72619 unbound: upgrade 1.19.1 -> 1.19.3
Includes security fixes for:
CVE-2024-1931 - Loop with Unreachable Exit Condition ('Infinite Loop')

Full release notes:
https://github.com/NLnetLabs/unbound/releases/tag/release-1.19.3

Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-05 10:21:15 -07:00
Beniamin Sandu 6c9a01f670 mbedtls: upgrade 2.28.7 -> 2.28.8
Includes security fixes for:
CVE-2024-28960 - Insecure handling of shared memory in PSA Crypto APIs

Full release notes:
https://github.com/Mbed-TLS/mbedtls/releases/tag/v2.28.8

Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-05 08:07:24 -07:00