Commit Graph

329 Commits

Author SHA1 Message Date
Yi Zhao 59e296dc30 vsomeip: add recipe
The vsomeip stack implements the http://some-ip.com/ (Scalable
service-Oriented MiddlewarE over IP (SOME/IP)) protocol.
The stack consists out of:
  a shared library for SOME/IP (libvsomeip3.so)
  a shared library for SOME/IP's configuration module
  (libvsomeip3-cfg.so)
  a shared library for SOME/IP's service discovery
  (libvsomeip3-sd.so)
  a shared library for SOME/IP's E2E protection module
  (libvsomeip3-e2e.so)

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-09-07 08:22:43 -07:00
Robert Yang 3ed51f2d3b frr: Fix CVE-2023-41358 and CVE-2023-41360
Backport patches to fix CVE-2023-41358 and CVE-2023-41360.

References:
https://nvd.nist.gov/vuln/detail/CVE-2023-41358
https://nvd.nist.gov/vuln/detail/CVE-2023-41360

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-09-07 08:22:43 -07:00
Yi Zhao ee1026ab77 frr: Security fix CVE-2023-3748
CVE-2023-3748:
A flaw was found in FRRouting when parsing certain babeld unicast hello
messages that are intended to be ignored. This issue may allow an
attacker to send specially crafted hello messages with the unicast flag
set, the interval field set to 0, or any TLV that contains a sub-TLV
with the Mandatory flag set to enter an infinite loop and cause a denial
of service.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2023-3748

Patch from:
https://github.com/FRRouting/frr/commit/ae1e0e1fed77716bc06f181ad68c4433fb5523d0

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-08-28 08:55:26 -07:00
Michael Opdenacker c1330b1f53 remove unused AUTHOR variable
No longer used in generating packages
Also creates a possible confusion with the recipe maintainer
name.

Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-08-03 09:14:20 -07:00
Wang Mingyu ecac50cbf5 babeld: upgrade 1.12.2 -> 1.13.1
Changelog:
==========
  * Implemented the per-interface option "probe-mtu", which automatically
    discards links with a mis-configured MTU.
  * Fixed a typo in the handing of the option "v4viav6".
  * Removed diversity support and related configuration file directives.
  * Optimised route redistribution.  We now install just the route that the
    kernel sent us rather than doing a full route dump on every change.
  * Added optional delay to daemon shutdown; see the configuration option
    "shutdown-delay-ms".
  * Fixed compilation under BSD.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-08-01 08:46:48 -07:00
Andrej Valek 8af2f17a6f cve_check: convert CVE_CHECK_IGNORE to CVE_STATUS
- Try to add convert and apply statuses for old CVEs
- Drop some obsolete ignores, while they are not relevant for current
  version

Signed-off-by: Andrej Valek <andrej.valek@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-07-27 08:54:40 -07:00
Yi Zhao 50577b639a frr: upgrade 8.4.2 -> 8.4.4
ChangeLog:
https://github.com/FRRouting/frr/releases/tag/frr-8.4.4
https://github.com/FRRouting/frr/commit/45e36c0c00a517ad1606135b18c5753e210cfc0d

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-06-28 13:53:12 -07:00
Martin Jansa be8c765c7c *.patch: add Upstream-Status to all patches
There is new patch-status QA check in oe-core:
https://git.openembedded.org/openembedded-core/commit/?id=76a685bfcf927593eac67157762a53259089ea8a

This is temporary work around just to hide _many_ warnings from
optional patch-status (if you add it to WARN_QA).

This just added
Upstream-Status: Pending
everywhere without actually investigating what's the proper status.

This is just to hide current QA warnings and to catch new .patch files being
added without Upstream-Status, but the number of Pending patches is now terrible:

5 (26%) 	meta-xfce
6 (50%) 	meta-perl
15 (42%)        meta-webserver
21 (36%)        meta-gnome
25 (57%)        meta-filesystems
26 (43%)        meta-initramfs
45 (45%)        meta-python
47 (55%)        meta-multimedia
312 (63%)       meta-networking
756 (61%)       meta-oe

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-06-21 09:15:20 -07:00
Beniamin Sandu d552fa0478 mdns: remove unneeded headers
Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-06-19 18:41:19 -07:00
Johannes Kauffmann f8f47d5732 open62541: allow disabling subscriptions
By default, subscriptions are turned on.

Signed-off-by: Johannes Kauffmann <johanneskauffmann@hotmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-06-14 09:41:35 -07:00
Johannes Kauffmann d613875f54 open62541: add multithreading PACKAGECONFIG option
By default, open62541 is built without multithreading support. Make this
configurable.

Signed-off-by: Johannes Kauffmann <johanneskauffmann@hotmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-06-14 09:41:35 -07:00
Johannes Kauffmann 5bbfb95eed open62541: build optimized binary
Without any build type specified, open62541 defaults to "Debug".

Signed-off-by: Johannes Kauffmann <johanneskauffmann@hotmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-06-05 09:45:30 -07:00
Johannes Kauffmann dffc4afc53 open62541: update to v1.3.6
Since v1.3.4, support for OpenSSL 3.0 has been added.

Signed-off-by: Johannes Kauffmann <johanneskauffmann@hotmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-05-31 08:28:50 -07:00
Khem Raj 085703da29 zeroconf: Pass cflags from environment
Fixes
WARNING: zeroconf-0.9-r1 do_package_qa: QA Issue: File /usr/sbin/.debug/zeroconf in package zeroconf-dbg contains reference to TMPDIR [buildpaths]

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-05-26 18:36:56 -07:00
Johannes Kauffmann 9cf8bab2f3 open62541: add OpenSSL as crypto provider
Since multiple crypto provider aren't supported simultaneously, the
mbedtls packageconfig conflicts with the openssl packgeconfig.

Signed-off-by: Johannes Kauffmann <johanneskauffmann@hotmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-05-23 15:04:38 -07:00
Johannes Kauffmann f9907fe018 open62541: rename encryption PACKAGECONFIG
... in anticipation for OpenSSL as crypto provider.

Signed-off-by: Johannes Kauffmann <johanneskauffmann@hotmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-05-23 15:04:38 -07:00
Khem Raj fa1910548c babeld: Upgrade to 1.12.2
Fix buildpath QA errors while here by passing bitbake provided cflags to
build env

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-05-23 15:04:38 -07:00
Johannes Kauffmann bd7cd3bc6f open62541: disable warnings as errors
When using OpenSSL as the encryption provider, the package does not
build without deprecation warnings, thus breaking the build. Disable
warnings as errors to unbreak the build.

Signed-off-by: Johannes Kauffmann <johanneskauffmann@hotmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-05-09 17:27:51 -07:00
Johannes Kauffmann beb018a3ac open62541: allow overriding encryption providers
Without "encryption" PACKAGECONFIG, the option UA_ENABLE_ENCRYPTION=OFF
is passed, which disables encryption support altogether and makes it
impossible to override the encryption provider. Since no encryption
support is already the default, we don't have to specify anthing to
disable encryption.

Additionally, explicitly specify MbedTLS as the encryption provider;
this is the preferred way to enable any one of the three supported
providers (LibreSSL, OpenSSL or MbedTLS). The current method prints a
deprecation warning:

    CMake Deprecation Warning at CMakeLists.txt:200 (message):
      Set UA_ENABLE_ENCRYPTION to the desired encryption library.

Signed-off-by: Johannes Kauffmann <johanneskauffmann@hotmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-05-09 17:27:51 -07:00
Chen Qi 10c7793832 frr: add CVE_PRODUCT
The CVE_PRODUCT is frrouting in NVD database.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-05-08 21:45:53 -07:00
Bergin, Peter 77f031776e freediameter: fix typo and old overide syntax
A typo that probably caused a left over from override syntax conversion.

    INITSCRIPT_PARAMS$_${PN} --> INITSCRIPT_PARAMS:${PN}

Signed-off-by: Peter Bergin <peter.bergin@windriver.com>
Signed-off-by: Peter Bergin <peter@berginkonsult.se>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-05-02 07:53:16 -07:00
Khem Raj fe62e64c97 radiusclient-ng: Point SRC_URI to archive.ubuntu.com
This tarball is not available on debian ftp archive anymore

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-05-01 23:20:22 -07:00
Khem Raj 2b2cc606ec rp-pppoe: Point SRC_URI to valid location
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-04-30 23:05:52 -07:00
Khem Raj 864cea3d64 rp-pppoe: Define _GNU_SOURCE
Ensures that it picks up definitions of strlcpy() from string.h

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-03-22 09:10:39 -07:00
Wang Mingyu d72b4945ed rp-pppoe: upgrade 3.14 -> 3.15
dont-swallow-errors.patch
configure.in-Error-fix.patch
removed since they're not available in 3.14.

configure_in_cross.patch
refreshed for 3.14.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-03-09 23:45:17 -08:00
Yi Zhao d7b8c3a9f7 frr: support more arches
Now frr can support more arches as libyang can be built on all arches.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-03-08 07:12:23 -08:00
Yi Zhao 0b3e6c1973 quagga: drop recipe
Quagga is no longer maintained since 2018[1]. Its official repository is
not even available[2].
As an alternative, users can use FRRouting[3] which has been added to
meta-networking[4].

[1] https://github.com/Quagga/quagga
[2] https://git.savannah.gnu.org/cgit/quagga.git
[3] https://frrouting.org
[4] https://git.openembedded.org/meta-openembedded/tree/meta-networking/recipes-protocols/frr

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-03-05 14:34:38 -08:00
Yi Zhao 80740b1d3c frr: add UPSTREAM_CHECK_GITTAGREGEX
Add UPSTREAM_CHECK_GITTAGREGEX to check the correct latest stable
verison.

Before the patch:
$ devtool latest-version frr
INFO: Current version: 8.4.2
INFO: Latest version: 9.0
INFO: Latest version's commit: 16c38045b1a84f899da473398779cc593d82d2bd

Version 9.0 is a development tag[1].

After the patch:
$ devtool latest-version frr
INFO: Current version: 8.4.2
INFO: Latest version: 8.4.2
INFO: Latest version's commit: 9e25d07412e92bdcd1f69c4755dc7564b23023c0

[1] https://github.com/FRRouting/frr/tags

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-03-05 14:34:38 -08:00
Martin Jansa 285b7cd79f .patch: fix Upstream-Status formatting issues reported by patchreview tool from oe-core
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-02-24 08:45:44 -08:00
Narpat Mali 5ae6f9434f net-snmp: CVE-2022-44792 & CVE-2022-44793 Fix NULL Pointer Exception
References:
https://nvd.nist.gov/vuln/detail/CVE-2022-44792
https://nvd.nist.gov/vuln/detail/CVE-2022-44793

Signed-off-by: Narpat Mali <narpat.mali@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-02-09 15:56:25 -08:00
Yi Zhao 85aa214ce0 frr: upgrade 8.4.1 -> 8.4.2
ChangeLog:
https://github.com/FRRouting/frr/releases/tag/frr-8.4.2

Per [1], update frr.pam to eliminate the warning issued by pam:
vtysh[485]: pam_warn(frr:account): function=[pam_sm_acct_mgmt] flags=0
service=[frr] terminal=[<unknown>] user=[root] ruser=[<unknown>] rhost=[<unknown>]

[1] https://github.com/FRRouting/frr/commit/6031b8a3224cde14fd1df6e60855310f97942ff9

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-02-07 07:01:21 -08:00
Alex Kiernan dec789229a mdns: Upgrade 1790.60.25 -> 1790.80.10
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-02-03 07:47:10 -08:00
Khem Raj 426a1e4f8f dante: Add -P to preprocessor flags
configure uses AC_PREPROC_IFELSE to check for certain errors from getaddrinfo()
it user search operation in a preprocessed file

 UNIQUEVALS=`sort $ERRVALFILE | uniq | wc -l | awk '{ print $1 }'`

However, line numbers are generated into the preprocesser files and they
get sorted higher than numbers

 gaierrval:
 # 130 "conftest.c" 3 4
           -3

-P ensures that line numbers are not generated into preprocessed files,
so these checks can succeed.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-01-29 21:09:39 -08:00
Martin Jansa e99f187966 .patch: fix Upstream-Status formatting issues reported by patchreview tool from oe-core
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-01-27 17:06:52 -08:00
Khem Raj ee0de616df net-snmp: Fix build with clang16
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-01-21 10:02:02 -08:00
Alex Kiernan bac76edc08 mdns: Upgrade 1790.40.31 -> 1790.60.25
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-12-14 08:22:04 -08:00
Alex Kiernan 7c7380d930 mdns: Set MDNS_VERSIONSTR_NODTS
MDNS_VERSIONSTR_NODTS disables __DATE__ and __TIME__ in the version string,
which are fixed anyway for build reproducibility.

Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-12-14 08:22:04 -08:00
Yi Zhao f9024bf768 frr: upgrade 8.3.1 -> 8.4.1
Drop backport patches.

ChangeLog:
https://github.com/FRRouting/frr/releases/tag/frr-8.4.1

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-12-14 08:22:04 -08:00
Alex Kiernan ec96eb577b mdns: Upgrade 1310.140.1 -> 1790.40.31
Reinstate and rework patches from @garmin.com dropped in 21afab4609
("mdns: update to version 1096.40.7") as these were the functional
pieces of this series; we should either maintain it as a whole or drop
it in its entirety. With this update and without this series,
steady-state operation is a constant churn of all names being removed
and re-added every few seconds. These were refactored to handle the move
to getifaddrs() from get_ifi_info().

Check and cleanup all the other patches, much of which was redundant.

Move source releases to github which is where the Apple site now
redirects to (though these are still effectively just tarball dumps into
git).

Cleanup the recipe so it doesn't override all the packaging defaults.

Fixup musl installs so they don't fail attempting to patch a
non-existent /etc/nsswitch.conf.

Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-12-09 10:39:27 -08:00
Alexander Kanavin 4035dfc557 frr: add a patch to correctly check presence of python from pkg-config
Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-11-10 10:41:35 -08:00
Yi Zhao 9628ca83c2 frr: Security fix CVE-2022-37032
CVE-2022-37032:
An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may
lead to a segmentation fault and denial of service. This occurs in
bgp_capability_msg_parse in bgpd/bgp_packet.c.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2022-37032

Patch from:
https://github.com/FRRouting/frr/commit/066770ac1c69ee5b484bb82581b22ad0423b004d

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-10-12 19:19:27 -07:00
Khem Raj 111e73d712 open62541: Disable lto on riscv/clang
clang errors out linking lto objects
riscv64-yoe-linux-musl-ld: /tmp/lto-llvm-d497c5.o: can't link soft-float modules with double-float modules

This is something needs to be addressed in clang for riscv
as of now disable lto for rv32/rv64 when using clang

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-10-04 09:29:47 -07:00
Vyacheslav Yurkov 3d65e0460c opcua: Add new recipe
open62541 (http://open62541.org) is an open source and free implementation
of OPC Unified Architecture according to IEC62541 standard

The patch exclude git-related files from installation directory
Upstream-Status: Accepted
https://github.com/open62541/open62541/commit/a0328d4cb527f9778a262fc4a6b42bfbdffc38e9

Signed-off-by: Vyacheslav Yurkov <v.yurkov@precitec.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-10-03 23:48:07 -07:00
Yi Zhao f684687591 frr: upgrade 8.2.2 -> 8.3.1
Backport patches to fix build error with --disable-ospfapi and
CVE-2022-37035.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-09-29 13:32:15 -07:00
Khem Raj 26af1e5673 quagga: Fix AC_CHECK_LIB for libreadline
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-09-01 13:09:22 -07:00
Khem Raj d8c94d06cf frr: Fix configure check for libreadline
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-09-01 10:55:23 -07:00
Khem Raj 4e3e97ed27 openl2tp: Provide prototype for l2tp_api_rpc_check_request
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-08-30 00:14:58 -07:00
Khem Raj 7a880dcbd9 openlldp: Upgrade to 1.1.0
Drop already upstreamed patches
Add fix for clang15 build
Drop Wno-error

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-08-30 00:14:58 -07:00
Khem Raj e2b1b060b0 openflow: Include sys/stat.h for fchmod
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-08-30 00:14:58 -07:00
Khem Raj 8c05c5b088 dante: Upgrade to 1.4.3
License-Update: Dates and address changed

Link with libtirpc for bindresvport() implementation
Drop krb5 packageconfig, its gone from this version

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-08-30 00:14:58 -07:00