Commit Graph

1642 Commits

Author SHA1 Message Date
Changqing Li c219926ef0 dnsmasq: upgrade to 2.80
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-27 11:13:37 -08:00
Changqing Li 047d9fb8fd netcat-openbsd: upgrade to 1.195
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-27 11:13:37 -08:00
Kai Kang 49466c7917 net-snmp: inherit ptest
Inherit ptest for net-snmp to create ${PN}-ptest. Update run-ptest as
well to avoid only could be run in the same directory.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-27 11:13:36 -08:00
Paul Eggleton b26618c971 mosquitto: update to 1.5.4
1.5.2, 1.5.3 and 1.5.4 include a number of fixes, notably for
vulnerability CVE-2018-12543 which allowed the server process to be
remotely crashed. For further information see:

  https://mosquitto.org/blog/2018/11/version-154-released/
  https://mosquitto.org/blog/2018/09/security-advisory-cve-2018-12543/
  https://mosquitto.org/blog/2018/09/version-152-released/

A build option was added to use the system version of uthash rather than
the bundled version so we no longer need the patch to do this.

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-26 09:38:14 -08:00
douglas.royds af46a5ef3a net-snmp: Simplify sed expressions
Readability.
The existing patterns allowed each pattern to be matched multiple times (with no
intevening spaces), but the "g" modifier achieves this anyway.

Signed-off-by: Douglas Royds <douglas.royds@taitradio.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-26 09:38:14 -08:00
douglas.royds dcdb5fa302 net-snmp: Reproducibility: Set NETSNMP_CONFIGURE_OPTIONS null
To avoid build host paths being written into binaries,
accept a null NETSNMP_CONFIGURE_OPTIONS from the environment.

Upstream-Status: Submitted https://sourceforge.net/p/net-snmp/patches/1384/
Signed-off-by: Douglas Royds <douglas.royds@taitradio.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-26 09:38:14 -08:00
douglas.royds 374bfe0cc6 net-snmp: Reproducibility: Don't check build host for /etc/printcap
Don't check for /etc/printcap on the build machine when cross-compiling.
Use AC_CHECK_FILE to set the cached variable ac_cv_file__etc_printcap instead.
When cross-compiling, this variable should be set in the environment to "yes" or
"no" as appropriate for the target platform.

I have taken the simple expedient of setting ac_cv_file__etc_printcap=no.
If this proves to be a problem, we can easily add a new variable, HAS_PRINTCAP.

Upstream-Status: Submitted https://sourceforge.net/p/net-snmp/patches/1385/
Signed-off-by: Douglas Royds <douglas.royds@taitradio.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-26 09:38:14 -08:00
douglas.royds e3151ee00a net-snmp: Reproducibility: Remove PKG_CONFIG paths from net-snmp-config
PKG_CONFIG_PATH and PKG_CONFIG_LIBDIR point into the net-snmp recipe-sysroot.
Careful not to trim trailing quotes from the CFLAGS

Signed-off-by: Douglas Royds <douglas.royds@taitradio.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-26 09:38:14 -08:00
douglas.royds 231fb5d1a4 net-snmp: Reproducibility: Fixed path to /bin/uname
Signed-off-by: Douglas Royds <douglas.royds@taitradio.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-26 09:38:14 -08:00
douglas.royds 11b685bf00 Revert "net-snmp: improve reproducibility"
This reverts commit 57d8e2c673.

Signed-off-by: Douglas Royds <douglas.royds@taitradio.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-26 09:38:14 -08:00
Changqing Li f6e6519bb0 geoip: add downloadfilename for geoip database files
previous change of checksum don't trigger archive to re-downloaded,
, which will cause checksum mismatch. add downloadfilename to
trigger re-download.

1. for user with PREMIRROR, another benefit is it can still compile
success event upstream checksum change frequently.
2. but for user don't use PREMIRROR, if upstream checksum changed,
still might have checksum mismatch problem.

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-26 09:38:14 -08:00
Mark Asselstine 952d746611 networkmanager: package additional .la files
This fixes:
     ERROR: networkmanager-1.14.4-r0 do_package: QA Issue: networkmanager: Files/directories were installed but not shipped in any package:
       /usr/lib64/NetworkManager/1.14.4/libnm-settings-plugin-ifupdown.la
       /usr/lib64/NetworkManager/1.14.4/libnm-device-plugin-adsl.la
       /usr/lib64/NetworkManager/1.14.4/libnm-device-plugin-wifi.la
       /usr/lib64/NetworkManager/1.14.4/libnm-device-plugin-ovs.la
     Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install.
     networkmanager: 4 installed and not shipped files. [installed-vs-shipped]

As with similar changes in the past, if the distro makes use of
'remove-libtool' this issue is not seen but we should add .la files to
the -dev package when they do exist.

Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-13 12:13:26 -08:00
douglas.royds 13335e4e8e ntp: Reproducible build: Use fixed path to posix shell
At configure time, the ntp build goes looking on the build machine for a posix
shell, using `which` to find it. Under OE, it settles on hosttools/bash,
resulting in this build host path being written into several binaries.
This did not affect the Debian reproducibility project, presumably because it
consistently found bash at /bin/bash.

Don't go looking, just use a fixed path to /bin/sh instead.

Upstream-Status: Submitted http://bugs.ntp.org/show_bug.cgi?id=3551
Signed-off-by: Douglas Royds <douglas.royds@taitradio.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-13 08:32:18 -08:00
douglas.royds 9535ee3321 ntp: Reproducible build: Respect SOURCE_DATE_EPOCH
If a SOURCE_DATE_EPOCH is set in the environment, use that date in the build
version string, otherwise use the current build date.
See https://reproducible-builds.org/docs/source-date-epoch/

Should GNU date options fail, try BSD date options as a fall-back.
This patch can potentially be pushed upstream for use on Mac OSX or OpenBSD,
though it has not been tested on OSX or any BSD platform.

Upstream-Status: Submitted http://bugs.ntp.org/show_bug.cgi?id=3550
Signed-off-by: Douglas Royds <douglas.royds@taitradio.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-13 08:32:18 -08:00
Changqing Li 727d77af16 geoip: update GeoLite Database checksum
GeoLite Database checksum changed again recently, so
update it.

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-12 10:04:31 -08:00
Alex Kiernan a445b3bca4 nftables: Upgrade to 0.9.0
Drop all the backports as they're upstream

Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-12 10:04:31 -08:00
Alex Kiernan cb9b98f69b libnftnl: Upgrade to 1.1.1
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-12 10:04:31 -08:00
Robert Tiemann aea60d4cc1 curlpp: Fix packaging and reference to license
This patch fixes three issues:

1. The recipe used "libcurlpp" for its package base name. It defined
  PACKAGES and corresponding package contents manually, but the
  non-standard naming led to an error message when trying to depend on
  it (nothing provides curlpp needed by curlpp-dev).

  See also
  https://lists.yoctoproject.org/pipermail/poky/2018-February/011236.html.

  Fixed by removing PACKAGES and corresponding FILES_*, relying on
  automatic packaging now.

2. Upstream ships a license file (MIT), which is referenced by the
  recipe now (instead of the stock COPYING.MIT file).

3. There was a do_install_append() function which patched the
  installed curlpp.pc file. Since it seemed to be of no use, it was
  removed.

Signed-off-by: Robert Tiemann <rtie@gmx.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-08 06:17:58 -08:00
Khem Raj 8a88083150 networkmanager: Fix build with musl
Remove redundant header includes

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Andreas Müller <schnitzeltony@gmail.com>
2018-11-07 12:05:31 -08:00
Andreas Müller 4be3dce466 networkmanager: upgrade 1.10.10 -> 1.14.4
* License checksum: copyright year changed
* packageconfig glib: with this version (udev-)glib support hase to be enabled
  explicitly. Split this out to meta-gnome where network-manager-applet lives.
* packageconfig netconfig: This was nonsense: netconfig is a SUSE tool [1]
  which is not found in layer index. The error was detected now because
  configuration checks for presence of netconfig.
* --disable-ifnet and --disable-ifcfg-suse are gone
* musl patches were aligned but have no resources to test them

[1] https://github.com/openSUSE/sysconfig

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-02 10:05:06 -07:00
Kai Kang bcbbace221 netkit-telnet: fix qa warnings of alternative target
When build lib32-netkit-telnet that multilib is enabled, it shows qa
warnings of alternative target:

| WARNING: lib32-netkit-telnet-0.17-r0 do_package: netkit-telnet:
|   alternative target (/usr/bin/telnet or /usr/bin/telnet.netkit-telnet)
|   does not exist, skipping...
| WARNING: lib32-netkit-telnet-0.17-r0 do_package: netkit-telnet: NOT
|   adding alternative provide /usr/bin/telnet:
|   /usr/bin/telnet.netkit-telnet does not exist
| WARNING: lib32-netkit-telnet-0.17-r0 do_package: netkit-telnet: alt_link
|   == alt_target: /usr/bin/telnet == /usr/bin/telnet

Set ALTERNATIVE_TARGET to fix the issue.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-02 10:05:06 -07:00
Pascal Bach b5dd6804f6 civetweb: disable tests
Tests try to download third party code and bypass the bitbake fetcher to
do that. This will not work in environments with no internet access.

Signed-off-by: Pascal Bach <pascal.bach@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-02 10:05:06 -07:00
Pascal Bach a21e2ae87d civetweb: remove redundant EXTRA_OECMAKE_class-native
They are the same as the default version.

Signed-off-by: Pascal Bach <pascal.bach@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-02 10:05:06 -07:00
Changqing Li 4d53ab2221 netcat-openbsd: update SRC_URI
update SRC_URI since previous is not valid now

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-01 10:04:54 -07:00
Changqing Li 32e5f35069 netkit-telnet: update SRC_URI
update SRC_URI since previous is not valid now

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-01 10:04:54 -07:00
Changqing Li 5cf604e136 vlan: update SRC_URI
tar on previous link checksum changed, so changed SRC_URI to
get previous tar

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-01 10:04:54 -07:00
Changqing Li 2aa70599d5 geoip: update md5sum and sha256sum
Geolite database update periodically, md5sum and sha256sum
have changed, update them

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-01 10:04:54 -07:00
Johannes Pointner bce1210d2e mbedtls: upgrade to 2.13.0
Signed-off-by: Johannes Pointner <johannes.pointner@br-automation.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-10-25 13:51:52 -07:00
Mingli Yu a9bef8df07 snort: Update SRC_URI
Update SRC_URI for snort as the previous
one is invalid.

Signed-off-by: Mingli Yu <Mingli.Yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-10-23 13:23:47 -07:00
Kai Kang fe77460642 openipmi: not install .pyc and .pyo files
openipmi load swig/python/.libs/_OpenIPMI.so to create .pyc and .pyo
files. It fails when multilib is enable:

| ImportError: .../lib32-openipmi/2.0.25-r0/OpenIPMI-2.0.25/swig/python/.libs/_OpenIPMI.so:
| wrong ELF class: ELFCLASS32

Don't compile and install .pyc and .pyo files to fix the failure.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-10-19 11:03:18 -07:00
Yi Zhao a5591f7aee radvd: remove update-rc.d settings
We don't offer /etc/radvd.conf but only radvd.conf.example which would
cause a startup error:
  Starting radvd:
  * /etc/radvd.conf does not exist or is empty.

Remove update-rc.d settings to make it doesn't start by default.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-10-18 06:32:00 -07:00
Qi.Chen@windriver.com 3e6226f85c strongswan: upgrade to 5.7.1
Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-10-16 23:27:55 -07:00
Yi Zhao dd2f7c15ac wireshark: update to 2.6.4
* Update SRC_URI
  In https://1.as.dl.wireshark.org/src/, it only keep the latest
  release. Switch to https://1.as.dl.wireshark.org/src/all-versions/
  to make sure the old release can be found.

* Drop patch fix-fatal-no-names-found-git-error.patch
  Actually this piece of code should not be invoked when build from
  tarball. But in previous releases the code will be performed when
  building native package if host with rpmbuild and git installed, which
  will cause a configure error. This issue has been fixed in 2.6.4:
    commit 4fbc017e80d6d11f8c26cad12d883fd6da9d3504
    CMake: Fix build from tarball under certain conditions

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-10-15 22:59:56 -07:00
Qi.Chen@windriver.com 336242ef27 keepalived: remove update-rc.d settings
The recipe wants to install a script under init.d but does not
want to it be started by default. It did so by inheriting update-rc.d
and setting INITSCRIPT_PARAMS to "remove". This is not correct.
We could just not inherit 'update-rc.d' to achieve such effect.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-10-15 13:37:23 -07:00
Armin Kuster 0dfc9ab6f0 blueman: really belongs in meta-networking
it has a build dependancy on python-cython and python-pyparsing with are in
meta-python

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-10-12 13:08:17 -07:00
Yi Zhao 47a9cc6c53 postfix: add -lnsl and -lresolv to SYSLIBS by default
When building native package, the do_compile function tries to check
libnsl.so and libresolv.so on host machine and add -lnsl and -lresolv to
SYSLIBS if they exist. But finally it will link the libnsl.so from
${STAGING_LIBDIR_NATIVE}. Actually there is no need to check them since
the libnsl2 is specified in DEPENDS and libresolv.so is from c libarary.
So add -lnsl and -lresolv to SYSLIBS directly.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-10-12 02:07:52 -07:00
Changqing Li 9f47fcd337 freeradius: fix radiusd.service startup failed problem
during radiusd start up, it will check several CVEs of libssl,
if allow_vulnerable_openssl set to no and one of the CVEs is
matched, radiusd will not startup.

in tls.c, two CVEs's version number is wrong, and after upgrade openssl
to 1.1.1, one CVE matched, so startup failed. correct the version numner
to make radiusd startup successfully.

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-10-10 20:48:18 -07:00
Jan Kaisrlik f72160a3dc grpc: fix grpc_cpp_plugin interpfor nativesdk
When building grpc for nativesdk the project tries to execute the
nativesdk grpc_cpp_plugin instead of the host one. Apply the patch
fixing the cross-compilation for nativesdk build and modify its
contents to reflect its new purpose.

Also: add grpc-native to dependencies.

Signed-off-by: Hiram Lew <lew@avast.com>
Signed-off-by: Jan Kaisrlik <jan.kaisrlik@avast.com>
Signed-off-by: Lukas Karas <karas@avast.com>
Signed-off-by: Bartosz Golaszewski <bgolaszewski@baylibre.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-10-10 08:53:21 -07:00
Hiram Lew 1b68e3eb58 c-ares: add nativesdk to BBCLASSEXTEND
grpc won't build as nativesdk package since it depends on nativesdk-c-ares.

Signed-off-by: Hiram Lew <lew@avast.com>
Signed-off-by: Jan Kaisrlik <jan.kaisrlik@avast.com>
Signed-off-by: Bartosz Golaszewski <bgolaszewski@baylibre.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-10-10 08:53:21 -07:00
Armin Kuster 09ae486b7c openvpn: update to 2.4.6
LIC_FILES_CHKSUM changed do to "Update copyright to include 2018 plus company name change"
includes: CVE-2018-9336

see: https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn24

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-10-09 19:08:26 -07:00
Yi-Soo An c249286bb8 babeld: Add Babel routing protocol recipe
Babel is a loop-avoiding distance-vector routing protocol for
IPv6 and IPv4 with fast convergence properties.

Signed-off-by: Yi-Soo An <yisooan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-10-09 19:08:26 -07:00
Alex Kiernan c1b4548322 crda: Fix usrmerge install path
Set UDEV_RULE_DIR so we follow usrmerge paths, fixing:

  ERROR: QA Issue: crda package is not obeying usrmerge distro feature. /lib should be relocated to /usr. [usrmerge]

Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-10-09 19:08:25 -07:00
Randy MacLeod 8a71561246 postfix: update to 3.3.1
The patch:
   0001-Check-for-glibc-before-setting-CANT_USE_SEND_RECV_MS.patch
has ben integrated upstream.

update the upstream check regex

Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-10-09 19:07:58 -07:00
Armin Kuster f818700c23 openvpn: enable sysvinit
add INITSCRIPT

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-10-08 10:48:17 -07:00
Hongxu Jia 9254a77848 umip: fix recipe location typo
Since `36983fe umip: move to meta-networking' applied,
it was moved to invalid location.

Fix prior partial move to meta-networking

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-10-07 21:45:20 -07:00
Joe MacDonald fba08d1990 update maintainers
Signed-off-by: Joe MacDonald <joe@deserted.net>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-10-02 17:53:46 -07:00
Khem Raj ab43d22479 tsocks: Link with libc_nonshared.a
Link step uses -nostdlib which means all defaults from gcc spec file are
not used and it results in errors when using stack protector options

e.g.
in function `send_socksv5_connect':
| /usr/src/debug/tsocks/1.8beta5-r0/tsocks-1.8/tsocks.c:954: undefined reference to `__stack_chk_fail_local'

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-10-02 08:48:28 -07:00
Armin Kuster 36983fea5e umip: move to meta-networking
ERROR: Nothing PROVIDES 'radvd' (but /home/akuster/oss/maint/meta-openembedded/meta-oe/recipes-connectivity/umip/umip_1.0.bb DEPENDS on or otherwise requires it)

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-10-01 10:16:15 -07:00
Khem Raj d273070293 layers: Update layer compatibility to thud
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Andreas Müller <schnitzeltony@googlemail.com>
Cc: Derek Straka <derek@asterius.io>
Cc: Tim Orling <TicoTimo@gmail.com>
Cc: Hongxu Jia <hongxu.jia@windriver.com>
Cc: Armin Kuster <akuster808@gmail.com>
Cc: Joe MacDonald <joe_macdonald@mentor.com>
Cc: Andrea Adami <andrea.adami@gmail.com>
2018-09-30 10:17:48 -07:00
Khem Raj 08ab868140 grpc-native: Fix buld on ubuntu 14.04 with gcc 4.8
Fixes a compiler error

terminate called after throwing an instance of 'std::system_error'
  what():  Enable multithreading to use std:🧵 Operation not
permitted

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-09-29 02:10:12 -07:00