Commit Graph

2315 Commits

Author SHA1 Message Date
Mikko Rapeli d12ea80ef5 mdns: add BSD-3-Clause to LICENSE
The LICENSE file in source tree says:

The majority of the source code in the mDNSResponder project is licensed
under the terms of the Apache License, Version 2.0, available from:
   <http://www.apache.org/licenses/LICENSE-2.0>

To accommodate license compatibility with the widest possible range
of client code licenses, the shared library code, which is linked
at runtime into the same address space as the client using it, is
licensed under the terms of the "Three-Clause BSD License".

The Linux Name Service Switch code, contributed by National ICT
Australia Ltd (NICTA) is licensed under the terms of the NICTA Public
Software Licence (which is substantially similar to the "Three-Clause
BSD License", with some additional language pertaining to Australian law).

Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-08 11:53:53 -07:00
Mikko Rapeli 6c14299d09 mdns: set CVE_PRODUCT to "apple:mdnsresponder"
This is used in CVEs like
https://nvd.nist.gov/vuln/detail/CVE-2015-7987

Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-08 11:53:53 -07:00
Mikko Rapeli 21afab4609 mdns: update to version 1096.40.7
Refresh Makefile patch (build.patch) to properly cross compile
mdns. Then try refresh patches which still apply. Following patches
don't apply anymore due to refactoring done on mdns side so thus
dropping patches:

 * 0005-Handle-noisy-netlink-sockets.patch
 * 0007-Indicate-loopback-interface-to-mDNS-core.patch

Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-08 11:53:53 -07:00
Khem Raj b7f2a66d62 packagegroup-meta-networking: Remove dhcpcd and kea
They moved out from meta-networking into core

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-03 07:54:13 -07:00
Armin Kuster 45ccf2f43f dhcpcd: pkg moved to core
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-03 07:54:13 -07:00
Armin Kuster 89adc5d3ec kea: pkg moved to core
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-03 07:54:13 -07:00
Leon Anavi afe3b35c84 fping: Upgrade 4.4 -> 5.0
Upgrade to release 5.0:

- In non-quiet loop and count mode, a line is printed for every
  lost packet
- The returned size in bytes now always excludes the IP header, so
  if before it reported '84 bytes' e.g. when using 'fping -l', now
  it reports '64 bytes'. This is to make the reported size
  consistent with ping(8) from iputils and also with fping when
  pinging a IPv6 host (which never included the IPv6 header size).
- The number of sent pings is only counted when the pings are
  received or have timed out, ensuring that the loss ratio will be
  always correct. This makes it possible, for example, to use loop
  mode (-l) with interval statistics (-Q) and a timeout larger
  than period, without having the issue that initially some pings
  would be reported as missing
- Improved precision of measurements from 10us to 1us
- The reported size of received packets is now always correct on
  Linux even for packets > 4096 bytes
- Travis CI automated testing now also macos testing and additional
  ubuntu distributions

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-03 07:54:13 -07:00
Leon Anavi 9701b83409 mosquitto: Upgrade 1.6.11 -> 1.6.12
Upgrade to release 1.6.12:

Security:
- In some circumstances, Mosquitto could leak memory when handling
  PUBLISH messages. This is limited to incoming QoS 2 messages,
  and is related to the combination of the broker having
  persistence enabled, a clean session=false client, which was
  connected prior to the broker restarting, then has reconnected
  and has now sent messages at a sufficiently high rate that the
  incoming queue at the broker has filled up and hence messages
  are being dropped. This is more likely to have an effect where
  max_queued_messages is a small value. This has now been fixed.

Broker:
- Build warning fixes when building with WITH_BRIDGE=no and
  WITH_TLS=no.

Clients:
- All clients exit with an error exit code on CONNACK failure.
- Don't busy loop with `mosquitto_pub -l` on a slow connection.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-03 07:54:13 -07:00
Leon Anavi b127e56bc8 znc: Upgrade 1.7.5 -> 1.8.1
Upgrade to release 1.8.1:

- Bug fix: authenticated users can trigger an application crash
  (with a NULL pointer dereference) if echo-message is not enabled
  and there is no network.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-03 07:54:13 -07:00
Khem Raj 43bd735121 netkit-rwho: Convert to ontarget postinst
Starting the service is something to be done when its booted on target

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-01 15:37:44 -07:00
Khem Raj 6cfa5d0ed8 netkit-ftp: Use update-alternatives for ftp
So it can live with other providers

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-01 15:37:44 -07:00
Khem Raj 915844297a netkit-rwho: Use update-alternatives for tftp
So it can live along other providers

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-01 15:37:44 -07:00
Khem Raj 916b6f15ef ssmtp: Use update alternatives for conflicts with esmtp
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-01 15:37:44 -07:00
Khem Raj ab2f8b5051 netkit-rpc: Use update alternatives for rpcinfo
This helps it live along rpcbind

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-01 15:37:44 -07:00
Khem Raj 7df48b8014 quagga,pimd: Use update-alternatives for pimd
pimd is provided by both quagga and pimd, prefer quagga over pimd when
both are in image

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-01 15:37:44 -07:00
Khem Raj 0b15dce76a autossh: Depend on ssh instead of hardcoding openssh
This helps it to use dropbear

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-01 15:37:44 -07:00
Khem Raj 40ef9eea78 bearssl: fix GNU_HASH link error
Fixes
No GNU_HASH in the ELF binary /mnt/b/yoe/master/build/tmp/work/cortexa57-yoe-linux/bearssl/0.6-r0/packages-split/bearssl/usr/lib/libbearssl.so.6.0.0, didn't pass LDFLAGS? [ldflag
s]

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-01 15:37:44 -07:00
Khem Raj 9b23aab0dd packagegroup-meta-networking: Add new packages
Reorganize to have one package per line

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-01 15:37:44 -07:00
Khem Raj 17b8039078 networkmanager: Depend on dhcpcd
dhcp-client is being removed from oe-core

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-01 15:37:44 -07:00
Ovidiu Panait dbf619019d net-snmp: upgrade 5.8 -> 5.9
Upgrade net-snmp 5.8 -> 5.9:
* refresh patches
* drop backports:
  https://github.com/net-snmp/net-snmp/commit/5f881d3bf24599b90d67a45cae7a3eb099cd71c9
  https://github.com/net-snmp/net-snmp/commit/6e1329bde834e0edcfadb88d3c05e6015e945638
  https://github.com/net-snmp/net-snmp/commit/abdcb6af8df352a257a7092c1649471af1e4e97b
  https://github.com/net-snmp/net-snmp/commit/21260fdd60c172839f997fb6f888a6e21c6825eb

Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-31 13:04:43 -07:00
Jugurtha BELKALEM a100cce1fc recipe/ettercap : new ettercap recipe
Ettercap is a comprehensive suite for man in the
middle attacks. It features sniffing of live
connections, content filtering on the fly and
many other interesting tricks. It supports active
and passive dissection of many protocols and includes
many features for network and host analysis.

To test ettercap :
$ ettercap -T -i eth0 # Text mode
or
$ ettercap -C -i eth0 # console based mode

Signed-off-by: Jugurtha BELKALEM <jugurtha.belkalem@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-28 17:16:57 -07:00
Andrej Valek c449e8a8b7 squid: upgrade 4.12 -> 4.13
Changes are found at: http://www.squid-cache.org/Versions/v4/changesets

Signed-off-by: Andrej Valek <andrej.valek@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-25 11:24:58 -07:00
Jack Mitchell af306b7f7f meta-networking: dhcpcd: backport ALIGN compile error fix
Fails to build on an aarch64 system with ipv6 disabled. This backported
patch fixes it.

Signed-off-by: Jack Mitchell <ml@embed.me.uk>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-25 10:39:27 -07:00
Alejandro Enedino Hernandez Samaniego 8f5ed264da weechat: Upgrade to 2.9
- Add python3 rdepends on PACKAGECONFIG

Signed-off-by: Alejandro Hernandez Samaniego <alejandro@enedino.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-23 22:51:20 -07:00
Khem Raj 63ebd02d22 wireguard-module: Exlude from world builds
Moving beyond kernel 5.6, this kmod is not needed and core has moved the
reference kernel to 5.8 for reference machines

wireguard-tools should RDEPEND but not DEPEND

Remove it from meta-networking packagegroup as well

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-21 16:35:25 -07:00
Jens Rehsack c79884d9b5 bearssl: fix missing install
Default Makefile of bearssl doesn't have a make target which hadn't
enough attraction when creating the recipe.

Add missing functionality.

Signed-off-by: Jens Rehsack <sno@netbsd.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-21 16:35:25 -07:00
Zang Ruochen 88df26ab74 wireshark: upgrade 3.2.5 -> 3.2.6
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-21 10:16:29 -07:00
Zang Ruochen 903a808600 lftp: upgrade 4.9.1 -> 4.9.2
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-21 10:16:29 -07:00
Jens Rehsack 7527b1425f bearssl: add new recipe
Add recipe for BearSSL - an an implementation of the SSL/TLS protocol with
the approach of:
* Be correct and secure.
* Be small
* Be highly portable
* Be feature-rich and extensible

See https://bearssl.org for more details.

Signed-off-by: Jens Rehsack <sno@netbsd.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-19 14:02:48 -07:00
Colin McAllister 02f2eb8d50 autossh: Created recipe
Added recipe for autossh tool.

Signed-off-by: Colin McAllister <colinmca242@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-17 17:59:34 -07:00
Leon Anavi 7c6bf8926c mosquitto: Upgrade 1.6.10 -> 1.6.11
Upgrade to release 1.6.11:

Broker:
- Fix usage message only mentioning v3.1.1.
- Fix broker refusing to start if only websockets listeners were
  defined.
- Change systemd unit files to create /var/log/mosquitto before
  starting.
- Don't quit with an error if opening the log file isn't possible.
- Fix bridge topic remapping when using "" as the topic.
- Fix messages being queued for disconnected bridges when clean
  start was set to true.
- Fix `autosave_interval` not being triggered by messages being
  delivered.
- Fix websockets clients sometimes not being disconnected promptly.
- Fix "slow" file based logging by switching to line based
  buffering.
- Log protocol error message where appropriate from a bad
  UNSUBSCRIBE, rather than the generic "socket error".
- Don't try to start DLT logging if DLT unavailable, to avoid a
  long delay when shutting down the broker.
- Fix potential memory leaks.
- Fix clients not receiving messages after a previous client with
  the same client ID and positive will delay interval quit.
- Fix overly broad HAVE_PTHREAD_CANCEL compile guard.

Client library:
- Improved documentation around connect callback return codes.
- Fix `mosquitto_publish*()` no longer returning
  `MOSQ_ERR_NO_CONN` when not connected.
- `mosquitto_loop_start()` now sets a thread name on Linux,
  FreeBSD, NetBSD, and OpenBSD.
- Fix `mosquitto_loop_stop()` not stopping on Windows.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-17 12:26:41 -07:00
Khem Raj 545f6d0891 opensaf: Fix build with -fno-common
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-17 12:26:41 -07:00
Slater, Joseph 98991b2e0f aoetool: make builds reproducible
Strip host path infomation out of binaries by not suppressing
default CFLAGS.

Signed-off-by: Joe Slater <joe.slater@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-13 22:37:48 -07:00
Khem Raj 4515a5556e iftop: Fix build with -fno-common
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-13 22:32:07 -07:00
Khem Raj a49b1ab1ad openlldp: Update to latest master
Backport patches from https://github.com/intel/openlldp/pull/55
to fix build with -fno-common

Append SRCPV to PV since we are not at exact release point

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-13 22:32:07 -07:00
Khem Raj 328b1fb12b daq: Upgrade to 2.0.7
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-13 22:32:07 -07:00
Khem Raj 2dae71f7cd snort: Upgrade to 2.9.16.1
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-13 22:32:07 -07:00
Khem Raj bd499150d2 drbd-utils: Uphgrade to 9.13.1
Fix build with gcc10

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-13 22:32:07 -07:00
Khem Raj 4928a2b6e9 drbd: Upgrade to 9.0.24-1
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-13 22:32:07 -07:00
Khem Raj e24ea72c2b quagga: Use -fcommon to compile
clang11 and gcc10 have switched to using -fno-common by default this
hoowever still needs to use -fcommon until fixed

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-13 22:32:07 -07:00
Khem Raj 748aea615e dibbler: Update to latest
Drop upstreamed patch
Fixed compatibility with g++-10

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-13 22:32:07 -07:00
Khem Raj d87fb0d30c fwknop: Fix build with gcc10
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-13 22:32:07 -07:00
Khem Raj ca50225db7 tftp-hpa: Fix build with -fno-common
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-13 22:32:07 -07:00
Khem Raj b99b2f5297 iscsi-initiator-utils: Upgrade to _2.1.2
Fix build with clang

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-13 22:32:07 -07:00
Khem Raj 0e86a9bddd ncftp: Fix build with -fno-common
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-13 22:32:07 -07:00
Khem Raj 18e85358d3 netplan: Update to latest to fix build with -fno-common
Add patches to fix build with clang-11

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-13 22:32:07 -07:00
Khem Raj b66dc11366 netperf: Fix build with -fno-common
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-13 22:32:07 -07:00
Khem Raj 7c50553449 vblade: Upgrade to version 24
Switch to github for src_uri
Add a patch to fix build with -fno-common

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-13 22:32:07 -07:00
Zang Ruochen d69a160f98 rdma-core: upgrade 28.0 -> 30.0
Refresh the following patch:
rdma-core/0001-Remove-man-files-which-cant-be-built.patch

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-05 21:45:25 -07:00
Mingli Yu 52f5141109 freeradius: fix the occasional verification failure
Fixes:
  # cd /etc/raddb/certs
  # ./bootstrap
[snip]
chmod g+r ca.key
openssl pkcs12 -in server.p12 -out server.pem -passin pass:'whatever' -passout pass:'whatever'
chmod g+r server.pem
C = FR, ST = Radius, O = Example Inc., CN = Example Server Certificate, emailAddress = admin@example.org
error 7 at 0 depth lookup: certificate signature failure
140066667427072:error:04067084:rsa routines:rsa_ossl_public_decrypt:data too large for modulus:../openssl-1.1.1g/crypto/rsa/rsa_ossl.c:553:
140066667427072:error:0D0C5006:asn1 encoding routines:ASN1_item_verify:EVP lib:../openssl-1.1.1g/crypto/asn1/a_verify.c:170:
error server.pem: verification failed
make: *** [Makefile:107: server.vrfy] Error 2

It seems the ca.pem mismatchs server.pem which results in failing to
execute "openssl verify -CAfile ca.pem server.pem", so add the logic
to check the file to avoid inconsistency.

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-05 10:02:11 -07:00