Commit Graph

3408 Commits

Author SHA1 Message Date
Markus Volk
5f344ed2dd system-config-printer: Add cups to rdepends
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-14 07:35:06 -08:00
Khem Raj
d7b8a3171c cannelloni: Fix build with clang and libc++ runtime
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-13 00:16:50 -08:00
alperak
f13b5120ab openfortivpn: upgrade 1.20.5 -> 1.21.0
Changelog:

* fix "Peer refused to agree to his IP address" message, again
* deprecate option --plugin
* better masking of password in logs
* break on reading 0 from ppp pty, for non-Linux systems

Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-12 15:25:11 -08:00
alperak
7d65ad61e0 libdnet: upgrade 1.16.3 -> 1.17.0
Patches removed because fixed in the new version.

Changelog:

- Various fixes around the build process (esp. cmake support + string.h include fixes)
- Stronger cmake support, updated autotools and a few smaller fixes.

Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-12 15:25:11 -08:00
alperak
fc60d791b8 civetweb: upgrade 1.12 -> 1.16
=========================
- Added "-DCIVETWEB_SSL_OPENSSL_API_3_0=ON" because of following error:

civetweb.c:1561:2: error: #error "Please define OPENSSL_API_#_# or USE_MBEDTLS"

You may also want to check out the available CMake options here:

d7ba35bbb6/CMakeLists.txt
=========================

Changelog:

d7ba35bbb6/RELEASE_NOTES.md

Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-12 12:18:48 -08:00
alperak
5e59c274c2 cannelloni: upgrade 1.0.0 -> 1.1.0
Changelog:

- Typo fix in cannelloni.h
- workflows: add nix-test.yml
- Add TCP mode
- No peer checking
- Add -Wall switch and fix all warnings

Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-12 12:18:48 -08:00
Khem Raj
b1bac8e7ea meta-networking: Use autotools make system
OE-core is switching to default to meson for gnome recipes

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-12 12:02:25 -08:00
Markus Volk
84f8813858 drop GNOMEBASEBUILDCLASS = "meson"
It is set to meson by default

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-11 09:26:41 -08:00
Daiane Angolini
865411fbde wireguard-tools: Use PACKAGECONFIG to select wg-quick and bash-completion
Condition the creation of some files and their consequences to a
PACKAGECONFIG, which can be overridden outside the meta layer.

It removes the sub package wireguard-tools-wg-quick as PACKAGECONFIG is
supposed to work to configure a package only, and not deal with
sub packages.

Signed-off-by: Daiane Angolini <daiane.angolini@foundries.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-09 20:47:44 -08:00
Khem Raj
f8518f7c36 tnftp: upgrade 20210827 -> 20230507
License-Update: Its now under BSD-2-Clause

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-06 08:48:27 -08:00
Khem Raj
53c88ad2b3 wolfssl: upgrade 5.5.4 -> 5.6.4
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-06 08:48:27 -08:00
Khem Raj
ca49f2025e python3-scapy: upgrade to latest revision
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-06 08:48:27 -08:00
Khem Raj
f9082db2cb usrsctp: upgrade to latest revision
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-06 08:48:27 -08:00
Khem Raj
915b6c02ee nng: upgrade 1.5.2 -> 12
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-06 08:48:27 -08:00
Khem Raj
45ad525348 openvpn: upgrade 2.6.3 -> 2.6.6
License-Update: Added Apache2 linking exception

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-06 08:48:27 -08:00
Khem Raj
af5a977053 ipset: upgrade 7.15 -> 7.19
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-11-06 08:48:27 -08:00
Beniamin Sandu
ae4e1e70a1 mbedtls: upgrade 3.4.1 -> 3.5.0
* Includes security fix for CVE-2023-43615 - Buffer overread in TLS stream cipher suites
* Includes security fix for CVE-2023-45199 - Buffer overflow in TLS handshake parsing with ECDH
* Includes aesce compilation fixes

Full changelog: https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.5.0

The extra patch fixes x86 32-bit builds.

Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-10-30 14:29:34 -07:00
Andrew Jeffery
668cf43b21 mdio-tools: Add virtual/kernel dependency to avoid stale SPDX reference
OpenBMC enables SPDX SBOM generation by default. For Meta's Bletchley
platform we found that mdio-tools and its relationships with both
mdio-netlink and the mdio-netlink kernel module break SPDX processing
while generating the rootfs after a kernel bump. For example, the
following output was generated by `bitbake obmc-phosphor-image`:

    ERROR: obmc-phosphor-image-1.0-r0 do_rootfs: Cannot find any SPDX file for document http://spdx.org/spdxdoc/kernel-module-mdio-netlink-6.5.4-da279e9-00089-gda279e98c07f-89187488-3164-50cb-94c5-8b76a30ea093

The error occurred after the following patch was applied (again, in the
context of OpenBMC):

    diff --git a/meta-aspeed/recipes-kernel/linux/linux-aspeed_git.bb b/meta-aspeed/recipes-kernel/linux/linux-aspeed_git.bb
    index e6f98297c540..b852e993f0f6 100644
    --- a/meta-aspeed/recipes-kernel/linux/linux-aspeed_git.bb
    +++ b/meta-aspeed/recipes-kernel/linux/linux-aspeed_git.bb
    @@ -1,6 +1,6 @@
     KBRANCH ?= "dev-6.5"
    -LINUX_VERSION ?= "6.5.4"
    +LINUX_VERSION ?= "6.5.9"

    -SRCREV="da279e98c07f9c948c60a434ab0043a55c26ea1d"
    +SRCREV="fc8d4fdba5bd2b9b1cea2aa8a731531943c45aa7"

     require linux-aspeed.inc

With the lack of a dependency the mdio-tools package is not rebuilt
subsequent to the kernel bump and the package information remains stale,
leading to an incorrect SPDX path being generated.

Signed-off-by: Andrew Jeffery <andrew@codeconstruct.com.au>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-10-29 21:49:04 -07:00
Khem Raj
22889b13f3 network-manager-applet,networkmanager-openvpn, networkmanager: Apply linker versioning patch when using lld only
This patch caused GNU linker to fail linking, therefore limit it to just
lld.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-10-28 11:06:18 -07:00
Peter Kjellerstedt
ad27cdd560 mosquitto: Support building for native again
Support for building from native was removed in commit e1b332f2e
(meta-networking: Drop broken BBCLASSEXTEND variants), most likely due
to no support for building libwebsockets-native. That support has now
been added, so it is now possible to build mosquitto-native again.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-10-26 12:00:14 -07:00
Richard Purdie
e1b332f2ef meta-networking: Drop broken BBCLASSEXTEND variants
The command "bitbake universe -c fetch" currently throws a ton of warnings
as there are many 'impossible' dependencies.

In some cases these variants may never have worked and were just added by copy
and paste of recipes. In some cases they once clearly did work but became
broken somewhere along the way. Users may also be carrying local bbappend files
which add further BBCLASSEXTEND.

Having universe fetch work without warnings is desireable so clean up the broken
variants. Anyone actually needing something dropped here can propose adding it
and the correct functional dependencies back quite easily. This also then
ensures we're not carrying or fixing things nobody uses.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-10-24 09:08:45 -07:00
Wang Mingyu
7e44aac2fb wireshark: upgrade 4.0.8 -> 4.0.10
Bugfix:
Error loading g729.so plugin with Wireshark 4.0.9 and 3.6.17 on macOS.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-10-23 17:00:49 -07:00
Wang Mingyu
21db09270d rdma-core: upgrade 47.0 -> 48.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-10-23 17:00:49 -07:00
Yi Zhao
a48613d396 nftables: upgrade 1.0.8 -> 1.0.9
Changelog:
https://www.netfilter.org/projects/nftables/files/changes-nftables-1.0.9.txt

Drop configure option --disable-python as it has been removed upstream.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-10-23 17:00:49 -07:00
Yi Zhao
67f6c57dcd conntrack-tools: upgrade 1.4.7 -> 1.4.8
This release fixes several regressions in 1.4.7 with the -U/--update and
-D/--delete commands.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-10-23 17:00:48 -07:00
Wang Mingyu
b71cd660fc libcoap: upgrade 4.3.3 -> 4.3.4
Changelog:
===========
* Clean up use of tags.
* Support for MacOS with Contiki-NG builds.
* Support for Windows with OpenSSL 3.x builds.
* Reported bugs fixed.
* Documentation updated.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-10-23 08:05:01 -07:00
Fabien Thomas
c817cf55ae samba.bb : Disable ad-dc by default
When this feature is enabled by default in packageconfig
this implies a dependency to python3-dnspython which is in meta-python.

Disable ac-dc PACKAGECONFIG by default to avoid adding a layer
dependency only for this feature.

Signed-off-by: Fabien Thomas <fabien.thomas@smile.fr>
Reviewed-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-10-19 10:51:40 -07:00
Charles Perry
2b4cb938b0 libexosip2: add recipe
libexosip2 extends the capabilities of the osip2 library. It can be a
useful building block for an embedded device application.

Signed-off-by: Charles Perry <charles.perry@savoirfairelinux.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-10-17 21:42:56 -07:00
Charles Perry
03a948375e libosip2: add recipe
The GNU oSIP library is an implementation of SIP - rfc3261. It can be a
useful building block for an embedded device application.

Signed-off-by: Charles Perry <charles.perry@savoirfairelinux.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-10-17 21:42:56 -07:00
Yi Zhao
4a07ee78c5 libldb: add ptest
* use external cmocka instead of bundled cmocka
* add run-ptest script

Ptest results:
$ ptest-runner libldb
START: ptest-runner
2023-10-12T11:49
BEGIN: /usr/lib/libldb/ptest
PASS: test_ldb_dn
PASS: test_ldb_qsort
DURATION: 0
END: /usr/lib/libldb/ptest
2023-10-12T11:49
STOP: ptest-runner
TOTAL: 1 FAIL: 0

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-10-12 08:06:57 -07:00
Yi Zhao
287386a51f libtevent: fix ptest
* use external cmocka instead of bundled cmocka
* add run-ptest script

Ptest results:
$ ./run-ptest
PASS: replace_testsuite
PASS: test_tevent_tag
PASS: test_tevent_trace

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-10-12 08:06:57 -07:00
Yi Zhao
649f63a235 samba: use external cmocka instead of bundled cmocka
Do not use bundled cmocka to get rid of bundled library
libcmocka-samba4.so.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-10-12 08:06:57 -07:00
Yi Zhao
f674a9d4f9 samba: upgrade 4.18.6 -> 4.18.8
This is a security release in order to address the following defects:

CVE-2023-3961:  Unsanitized pipe names allow SMB clients to connect as root to
                existing unix domain sockets on the file system.
                https://www.samba.org/samba/security/CVE-2023-3961.html

CVE-2023-4091:  SMB client can truncate files to 0 bytes by opening files with
                OVERWRITE disposition when using the acl_xattr Samba VFS
                module with the smb.conf setting
		"acl_xattr:ignore system acls = yes"
                https://www.samba.org/samba/security/CVE-2023-4091.html

CVE-2023-4154:  An RODC and a user with the GET_CHANGES right can view all
                attributes, including secrets and passwords.  Additionally,
                the access check fails open on error conditions.
                https://www.samba.org/samba/security/CVE-2023-4154.html

CVE-2023-42669: Calls to the rpcecho server on the AD DC can request that the
                server block for a user-defined amount of time, denying
                service.
                https://www.samba.org/samba/security/CVE-2023-42669.html

CVE-2023-42670: Samba can be made to start multiple incompatible RPC
                listeners, disrupting service on the AD DC.
                https://www.samba.org/samba/security/CVE-2023-42670.html

Release Notes:
https://www.samba.org/samba/history/samba-4.18.8.html

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-10-12 08:06:57 -07:00
Khem Raj
df98f884b9 static-group: Match nogroup id to base-passwd from core.
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-10-11 12:46:09 -07:00
Fabien Thomas
714156cc42 Add static-passwd and static-group files
In order to pass reproducible tests, recipes that use the
useradd class must have static ids configured.

Signed-off-by: Fabien Thomas <fabien.thomas@smile.fr>
Reviewed-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-10-10 08:51:47 -07:00
Johannes Kauffmann
0287a38fbc open62541: add Backport status and link to patch
Signed-off-by: Johannes Kauffmann <johanneskauffmann@hotmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-10-07 16:50:44 -07:00
Khem Raj
0cb0180594 images: Rename <layer>-image to <layer>-image-all
These are test images to build all recipes in layer. Renaming them makes
them refect what they are. Moreover we can rename the ptest images to
match OE-Core naming conventions for meta-oe/meta-perl/meta-python

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-10-06 08:37:21 -07:00
Khem Raj
e88b777cbe images: Delete layer specific base images
These were essentially duplicates of core-image-minimal, however
core-image-base is a better baseline for upper layers, so switched the
consumers of these images to use core-image-base

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-10-06 08:37:21 -07:00
Khem Raj
ef9d73fced images: Inherit from core-image-base
We really do not need to define base images which already exist in core
layer, reuse them here.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-10-06 08:37:21 -07:00
Pawel Langowski
470b24bc04 recipes-connectivity: Add tayga recipe
Recipe for TAYGA - an out-of-kernel stateless NAT64 implementation for Linux

Signed-off-by: Pawel Langowski <pawel.langowski@3mdeb.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-10-04 13:09:38 -07:00
Khem Raj
29a2122393 relayd: Fix build with clang
GNU extention is now in use in 6.5 kernel headers sadly

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-10-02 10:03:23 -07:00
Khem Raj
616991508e relayd: Update to latest tip of trunk
Drop the patch fixing an issue already addressed upstream

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-10-02 10:03:23 -07:00
Martin Jansa
5488a32d90 mosquitto, etcd-cpp-apiv3: add missing Upstream-Status
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-09-27 14:22:09 -07:00
Martin Jansa
a1c3c7f4e8 gnome-tweaks, networkmanager-fortisslvpn, libesmtp, json-schema-validator, python3-pybluez, python3-pynetlinux, apache2: Fix Malformed Upstream-Status
* Accepted was replaced with Backport in gatesgarth:
  https://docs.yoctoproject.org/migration-guides/migration-3.2.html#miscellaneous-changes

* as detected with oe-core/scripts/contrib/patchreview.py:

meta-openembedded $ grep -A 3 Malformed *qa-patches
meta-gnome.qa-patches:Malformed Upstream-Status 'Malformed Upstream-Status in patch
meta-gnome.qa-patches-/OE/layers/meta-openembedded/meta-gnome/recipes-gnome/gnome-tweaks/gnome-tweaks/0002-meson-fix-invalid-positional-argument.patch
meta-gnome.qa-patches-Please correct according to https://docs.yoctoproject.org/contributor-guide/recipe-style-guide.html#patch-upstream-status :
meta-gnome.qa-patches-Upstream-Status: Accepted [dc9701e187]' (/OE/layers/meta-openembedded/meta-gnome/recipes-gnome/gnome-tweaks/gnome-tweaks/0002-meson-fix-invalid-positional-argument.patch)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-09-27 14:22:09 -07:00
Alex Kiernan
8ffef53d6a mdns: Upgrade 1790.80.10 -> 2200.0.8
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-09-27 14:22:09 -07:00
Gianfranco Costamagna
79088766c8 mosquitto: upgrade 2.0.17 -> 2.0.18
Add two patches from Debian, pull requests proposed upstream as 2894 and 2895
to make it start only when board is online, and to fix dynamic websockets link failure

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-09-26 12:44:12 -07:00
Jonas Gorski
6f1d32a9bf frr: upgrade 8.4.4 -> 9.0.1
Upgrade FRR to 9.0.1:

* drop all existing patches since they are included in 9.0.1
* add a patch fixing (harmless) error messages in log
* license files moved to doc/licenses
* protobuf-c-native (for protoc) and protobuf-c are now needed

Changelogs:
https://github.com/FRRouting/frr/releases/tag/frr-9.0.1
31ed3dd753
https://github.com/FRRouting/frr/releases/tag/frr-9.0
2863e7efbc

Signed-off-by: Jonas Gorski <jonas.gorski@bisdn.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-09-22 07:36:16 -07:00
Sanjay Chitroda
d629fe71e4 netkit-telnet: Fix CVE-2022-39028
References:
https://nvd.nist.gov/vuln/detail/CVE-2022-39028
https://security-tracker.debian.org/tracker/CVE-2022-39028

Upstream Patch:
https://cgit.freebsd.org/src/commit/?id=6914ffef4e23

- Patch is adopted from FreeBSD, as same vulnerability of
  telnetd is applicable to FreeBSD and netkit-telnet packages.

Signed-off-by: Sanjay Chitroda <sanjay.chitroda@einfochips.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-09-22 07:36:16 -07:00
Lee Chee Yang
0ad3c58736 ntpsec: 1.2.2 -> 1.2.2a
Fix a crash in ntpd if NTS is disabled and an NTS-enabled client request
(mode 3) is received. (CVE-2023-4012) #794

https://gitlab.com/NTPsec/ntpsec/-/releases/NTPsec_1_2_2a

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-09-22 07:36:16 -07:00
Martin Jansa
e002e885a3 ot-br-posix: exclude siggen dependency on ipset
* ipset is MACHINE_ARCH because inherits module-base.bbclass
* fixes:
  bitbake-diffsigs \
    sstate-before/hammerhead-halium/cortexa8t2hf-neon-halium-webos-linux-gnueabi/ot-br-posix/0.3.0+git.do_package_write_ipk.sigdata.48e7c1f619a5069d7aef82321e09d5598873d41cf561d3af1cffc94732dcacf0 \
    sstate-before/mako/cortexa8t2hf-neon-halium-webos-linux-gnueabi/ot-br-posix/0.3.0+git.do_package_write_ipk.sigdata.9e0988bdeaf607e7de39a2fc307129ef41b57170cd775805eee46f0f5f89b80c
  Hash for task dependency ipset:do_packagedata changed from 5d72520e773137ba1d716eeca111fce4355169ed18e4c81b5e5d764abf569f18 to 89ad5bdbdc7bd3fb72625cb963aff2c794da51fe2f70ecbfb34b9cff9b1b9308

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-09-20 22:15:39 -07:00