Commit Graph

4113 Commits

Author SHA1 Message Date
Gyorgy Sarvari
41662e93db
frr: upgrade 10.3 -> 10.4.1
Drop the "datacenter" PACKAGECONFIG, because it became obsolete:
"The --enable-datacenter compile time option is deprecated.  Please modify the init script to pass -F datacenter to the daemons instead."

Note: grpc PACKAGECONFIG seems to be broken (it was broken in the previous version also).
At the first sight it looks that the application's Makefile enforces c++11 standard,
but abseil (which is a dependency of grpc) requires at least c++17.

Changelog:
10.4.1:
- bgpd: initialize local variable
- ospfd: Use after free cleanup of lsa
- vtysh: copy config from file should actually apply
- Revert PR #18358: BGP evpn testing and bug fixes related to non default EVPN backbone
- topotests: improve embedded RP test reliability
- lib, zebra: mark singleton nexthops inactive/active on link state changes for wecmp
- bgpd: LL next-hop capabilty fixes
- eigrp: validate hello packets and tlvs better
- bgpd: Fix compilation error in bgpd module: Update TP_ARGS for bgp
- bgpd: Ensure addpath does not withdraw selected route in some situations
- bgpd: [GR] fixed selectionDeferralTimer to display select_defer_time val
- bgpd: LL next-hop capabilty fixes (round 2)
- lib: compute link-state zapi message size
- zebra: Fix buffer overflows found by fuzzing.

10.4:
- BGP BFD Strict-Mode
- BGP Link-Local Next Hop Capability [draft-ietf-idr-linklocal-capability]
- BGP Transparent mode
- BGP Next Hop Dependent Characteristics Attribute [draft-ietf-idr-entropy-label]
- IGMP and MLD group/source limits
- PIM dense and sparse-dense mode support [RFC3973]
- IGMPv2/MLDv1 immediate leave
- v4-via-v6 nexthop support for static routes
- Timeout for vtysh
- Discover PREF64 in Router Advertisements [RFC8781]

10.3.2:
- bgpd: correct no form commands
- bgpd: fix to show exist/non-exist-map in 'show run' properly
- redhat: make FRR RPM build to work on RedHat 10
- build: check for libunwind.h, not unwind.h
- bgpd: use AS4B format for BGP loc-rib messages.
- bgpd: fix for the validity and the presence of prefixes in the BGP VPN table.
- bgpd: Force adj-rib-out updates if MRAI is kicked in
- zebra: Provide SID value when sending SRv6 SID release notify message
- bgpd: Fix crash when fetching statistics for bgp instance
- nhrpd: fix crash when accessing invalid memory zone
- zebra: Initialize RB tree for router tables
- zebra: fix null pointer dereference in zebra_evpn_sync_neigh_del
- zebra: fix stale NHG in kernel
- bgpd: Fix incorrect stripping of transitive extended communities
- lib: Fix no on-match goto NUM command
- bgpd: Fix extended community check for IP non-transitive type
- bgpd: Fix DEREF_OF_NULL.EX.COND in bgp_updgrp_packet
- lib: revert addition of vtysh_flush() call in vty_out()
- bgpd: Extract link bandwidth value from extcommunity before using for WCMP
- Use ipv4 class E addresses (240.0.0.0/4) as connected routes by default
- bfdd: Set bfd.LocalDiag when transitioning to AdminDown
- zebra: clean up a json object leak
- bgpd: Do not try to reuse freed route-maps
- lib: fix routemap crash
- bgpd: initialize local variable
- ospfd: Use after free cleanup of lsa
- vtysh: copy config from file should actually apply
- bgpd : Fix compilation error in bgpd module: Update TP_ARGS for bgp
- bgpd: Ensure addpath does not withdraw selected route in some situations
- lib, zebra: mark singleton nexthops inactive/active on link state changes for wecmp
- eigrp: validate hello packets and tlvs better
- bgpd: [GR] fixed selectionDeferralTimer to display select_defer_time val

10.3.1:
- Check valid babel port
- Fix incorrect type assignment in parse_request_subtlv
- Fix `set evpn gateway-ip ipv[46]` route-map
- Fix bmp heap use after free on non connected session
- Fix evpn attributes being dropped on input
- Fix holdtime not working properly when busy
- Fix leaked memory when showing some bgp routes
- Fixed crash upon bgp network import-check command
- On shutdown free up memory leak found by topotest
- Prevent crash when issuing a show rpki connections
- Remove unused defines from bgp_label.h
- Retain the routes if we do a clear with n-bit set for graceful-restart
- Set the label for mp_unreach_nlri 0x800000 instead of 0x000000
- Treat the peer as not active due to bfd down only if established
- Fix incorrect bestpath reasoning in some situations
- Fix show bgp vpn rd json
- Add total path count for bgp net in json output
- Fix import all adj-rib-in and loc-rib after bmp connects
- On shutdown prefix/access list memory was being leaked
- Fix srv6_sid memory leak
- Free up leaked prefix-list memory on shutdown
- Create vrf if needed
- Return duplicate ipv6 prefix-list entry test
- Return duplicate prefix-list entry test
- Add hop count validation before forwarding in nhrp_peer_recv()
- Disable and delete ospfv3 areas that no longer have interfaces or configuration.
- Fix lsa memory leaks related to graceful restart
- Fix crash when ospf client connects before doing 'router ospf'
- Fix for crash during networking restart
- Fix memory leak on shutdown
- Initialize gm proxy to false
- Make docs and rpki optional for rpm package build
- Make sure zeromq is always disabled
- Revert - Add option to build pkg without docs and rpki support
- Add Workaround for inet_ntop replacement which breaks rpms
- Avoid requesting srv6 sid from zebra when loc and sid block dont match
- Add more tests to bgp_rpki_topo1 test
- Add nb test binary to .gitignore
- Add route-map evpn set gateway-ip topotest
- Check if routes are marked as stale and retained with n-bit for gr
- Fix typo when configuring delayopen timer
- Fix wait times in test_ospf6_gr_topo1 topotest
- Use label 0x800000 instead of 0x000000 for bmp tests
- Use little-endian order for libyang api
- Fix reload script for srv6 locators and formats

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-12 10:23:52 -07:00
Peter Kjellerstedt
52e2cac8e0
net-snmp: Backport a patch to make sure $(LDFLAGS) is before any libs
After commit 1997d3d6c4 (net-snmp: Do not
pass LDFLAGS to compiler), some linker flags, like "-Wl,--as-needed",
appear too late on the linker command line. Backport a patch that
corrects the order of the arguments given to the linker.

Unfortunately, the patch is not enough. libtool reorders the arguments
given to libtool --mode=link so that any lib dependencies appear before
other linker arguments. Therefore it is needed to inject -Wl,--as-needed
on the linker command line that libtool produces.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-10 19:27:35 -07:00
Peter Marko
9619695788
squid: patch CVE-2025-59362
Pick patch from PR ]1] mentioned in NVD report [2].

[1] https://github.com/squid-cache/squid/pull/2149
[2] https://nvd.nist.gov/vuln/detail/CVE-2025-59362

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-09 16:15:49 -07:00
Peter Marko
66b553130b
squid: upgrade 6.12 -> 7.1
Refresh all patches.
ptest patches needed larger rework for new test testHeader.

License-Update: copyright years refreshed

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-09 16:15:49 -07:00
Peter Marko
f088e1e1f9
squid: download from github
Devtool could not find latest versions before.

Download page [1] shows message
"Squid sources are released through GitHub. Please refer to the Releases
Page to find all released versions."

Note that also squid security advisories were moved to Github.

[1] https://www.squid-cache.org/Versions/

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-09 16:15:49 -07:00
Wang Mingyu
1543159149
spice-guest-vdagent: upgrade 0.22.1 -> 0.23.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 23:35:55 -07:00
Wang Mingyu
9b5ab1a96c
openvpn: upgrade 2.6.14 -> 2.6.15
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 23:35:52 -07:00
Gyorgy Sarvari
74d3d9c2be
libiec61850: upgrade 1.5.3 -> 1.6.1
This update contains a fix for CVE-2024-26529, CVE-2024-45970 and CVE-2024-45971

Changelog: https://github.com/mz-automation/libiec61850/blob/v1.6/CHANGELOG

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 18:46:04 -07:00
Rajeshkumar Ramasamy
5929150a19
open-vm-tools: upgrade 12.5.0 -> 13.0.5
this release addressed below CVE:
CVE-2025-41244

Drop 0001-Fix-build-when-compiling-with-std-c23.patch which have been
merged upstream.

Changelog:
https://github.com/vmware/open-vm-tools/releases

Signed-off-by: Rajeshkumar Ramasamy <rajeshkumar.ramasamy@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 18:46:03 -07:00
Gyorgy Sarvari
ec5a9b9684
pgpool2: upgrade 4.5.5 -> 4.6.3
Drop 0001-fix-compiling-on-32-bit-systems.patch, and change to another
patch that solves the same issue in OE, but is more likely to be
adapted by upstream (after discussion with upstream in
https://github.com/pgpool/pgpool2/pull/128)

Shortlog: https://github.com/pgpool/pgpool2/compare/V4_5_5...V4_6_3

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 18:46:03 -07:00
Gyorgy Sarvari
dedb716445
nbdkit: upgrade 1.45.1 -> 1.45.9
While working on it, also ignore CVE-2025-47711 and CVE-2025-47712.
Both vulnerabilities are fixed already (they were fixed before the
upgrade also, but there is no version-range associated with the CVE report).

CVE-2025-47711: e6f96bd1b7
CVE-2025-47712: a486f88d1e

Shortlog:
Merge branch '2025-optional-qemu-img' into 'master'
build: Check for qemu-img and disable some tests if not present
tests/curl: Skip test if 'disk' was not created
server/public.c: Use common/include parse_bool function
common/include: Extra bool parsing into a mini-library
docs: Shorter title and tweaks to the description
indexed-gzip: Include <stddef.h> to get ptrdiff_t
indexed-gzip: Move variable decl outside for loop
vddk: Sort synopsis into alphabetical order
ext2: Update docs since filter supports concurrent connections
docs: Move --short/--long-options to right place in synopsis
(origin/rhel-10.2) docs: Document how to probe for server command line options
server: Document --long-options and --short-options
docs/nbdkit-probing.pod: Rearrange synopsis to match description
server: Add --name parameter
docs: Fix bolding of --log=/path option
tests/test-python-plugin.py: Remove unused variables
python: Add binding for nbdkit_parse_bool
tests/test-python-plugin.py: Add name of test for test_parse_size
(tag: v1.45.6) Version 1.45.6.
Merge branch '2025-rounding' into 'master'
server/public.c: Use lrint() instead of implicit conversion to int
indexed-gzip: Fixes for 32-bit support
indexed-gzip: More editorially neutral content
Merge branch 'add-indexed-gzip-filter' into 'master'
Introduce index-gzip filter
Move unmodified index build/extract to ig_zran.h/c
Add serialize/deserialize fn for zran structs
Restructure zran.h, zran.c for use as library
Import zran.c/zran.h v1.6 (2 Aug 2024) from zlib
Merge branch '2025-delay-trigger' into 'master'
delay: Add new delay-trigger option
delay: Rearrange the options in alphabetical order in the documentation
tests/test-map.sh: Fix "nbd_pread: count cannot be 0: Invalid argument"
docs/nbdkit-client.pod: Document attaching NBD devices to QEMU VMs
docs/nbdkit-client.pod: Combine and rename "LIMITATIONS" section
Merge branch '2025-fix-golang-test' into 'master'
tests/test-golang-fork-warning.sh: Fix hanging test
Merge branch '2025-misc-fixes' into 'master'
tests: Use 'define script' in a few more places
tests: Modify make-pki and make-psk scripts to be atomic
tests: Define common functions for requiring TLS certs and PSK
tests/test-tls.sh: Remove unused export of pkidir
tests: Generate make-psk.sh
tests/make-psk.sh: Fix typo "pkstool" -> "psktool"
tests: Fix typo "An good" -> "A good"
map: Implement map-size feature
tests/test-at-file.sh: Fix srcdir != builddir
tests: Work around realpath error on BSDs
Merge branch '2025-eq-file' into 'master'
Merge branch '2025-server-debug' into 'master'
server: Use debug() instead of nbdkit_debug() consistently in the server
map: Refer to @PATH syntax in documentation
server: Add @PATH syntax
server/main.c: Factor out the function that parses key=value
server/main.c: Fix comment
server/main.c: Move key=value parsing to a new function
server/options.h: Reject empty string ("") as a short name
server/options.h: Add comment to is_short_name
server/main.c: Reject empty string as a plugin name or filter name
common: utils: Add const to <vector>_duplicate variable decls
data: Use new vector_append_array in a couple of places
map: Use new vector_append_array function instead of loop
common: utils: vector: Fix vector_uniq prototype and add a test
common: utils: vector: Add range functions for insert, append and remove
common: utils: vector: Prefer vector_reset over free()
Merge branch '2025-map-filter' into 'master'
New filter: map for remapping arbitrary blocks
common: utils: vector: Add new vector_uniq function
tests/functions: Factor out 2^63-1 constant used by a few tests
tests/test-cache-block-size.sh: Remove unused socket
data: Minor revisions to the documentation for clarity
full: Remove reference to equivalence of nbdkit-readonly-filter
tests/test-floppy.sh: Simplify this test
count: Add an example to the documentation
common/include/test-once.c: Further fixes for pthread_barrier_t
common/include/test-once.c: Skip test on macOS which lacks pthread_barrier_t

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 18:46:02 -07:00
Andrew Bradford
ec7f6f5660
samba: Add PACKAGECONFIG[ad-dc] python3-markdown RDEPENDS
For Samba's Active Directory Domain Controller functionality, it needs
to have python3-markdown listed as an RDEPENDS as well as a DEPENDS.

When trying to provision a domain with samba-tool without this change
then it will error out like:

$ samba-tool domain provision --realm=EXAMPLE.COM --domain=EXAMPLE \
	--adminpass='YourPassword123!' --server-role=dc \
	--dns-backend=SAMBA_INTERNAL --use-rfc2307
<snip>
Temporarily overriding 'dsdb:schema update allowed' setting
ERROR(<class 'ModuleNotFoundError'>): uncaught exception - No module named 'markdown'
  File "/usr/lib/python3.13/site-packages/samba/netcmd/init.py", line 279, in _run
	return self.run(*args, **kwargs)
		   ~~~~~~~~^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3.13/site-packages/samba/netcmd/domain/provision.py", line 343, in run
	result = provision(self.logger,
					   session, smbconf=smbconf, targetdir=targetdir,
	...<16 lines>...
					   backend_store=backend_store,
					   backend_store_size=backend_store_size)
  File "/usr/lib/python3.13/site-packages/samba/provision/init.py", line 2404, in provision
	raise e
  File "/usr/lib/python3.13/site-packages/samba/provision/init.py", line 2394, in provision
	forest = ForestUpdate(samdb, fix=True)
  File "/usr/lib/python3.13/site-packages/samba/forest_update.py", line 212, in init
	from samba.ms_forest_updates_markdown import read_ms_markdown
  File "/usr/lib/python3.13/site-packages/samba/ms_forest_updates_markdown.py", line 27, in <module>
	import markdown

Signed-off-by: Andrew Bradford <andrew.bradford@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 18:46:02 -07:00
Gyorgy Sarvari
480ac24af3
tinyproxy: upgrade 1.11.1 -> 1.11.2
This upgrade contains fixes for CVE-2023-49606 and CVE-2022-40468.

Changelog:
https://github.com/tinyproxy/tinyproxy/compare/1.11.1...1.11.2

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-06 14:14:37 -07:00
Gyorgy Sarvari
0c6f60790a
dovecot: upgrade 2.3.21.1 -> 2.4.1-4
Remove obsolete CVE_STATUS variable: CVE-2016-4983 is marked for v2.3.

Drop 0001-not-check-pandoc.patch because it became obsolete, pandoc is
not used anymore.
Drop 1ccd5b54a408d12fce0c94ab0bbaedbb5ef69830.patch, because it is
included in this release.

Add a backported patch to fix compiling with musl.

Changelog:
2.4: https://github.com/dovecot/core/releases/tag/2.4.0
2.4.1: https://github.com/dovecot/core/releases/tag/2.4.1

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-06 14:14:37 -07:00
Gyorgy Sarvari
fbf17d5f9b
civetweb: update to the latest revision
This update contains a fix for CVE-2025-55763.

License-Update: copyright year bump to 2025.

Shortlog since last update:
5864b55a94...b6ef58f4c4

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-05 21:52:27 -07:00
Liu Yiding
95dd373592
freeradius: Fix the multilib config
When enabling multilib with lib32, the radiusd will use etc file for lib32 as default

  #systemctl status radiusd
  ......
   /usr/sbin/radiusd -d /etc/lib32-raddb

It should be lib64 as default.

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-24 19:22:56 -07:00
Gyorgy Sarvari
8e1e733f24
znc: upgrade 1.8.2 -> 1.10.1
The project has switched to cmake since the last update.

The changelog is long, but there is a link:
https://github.com/znc/znc/blob/master/ChangeLog.md

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-24 14:17:45 -07:00
Gyorgy Sarvari
8e69890597
arno-iptables-firewall: upgrade 2.1.2 -> 2.1.2a
Changelog:
- dig wrapper function was broken since 2.1.2
- No longer send nslookup/dig stderr to /dev/null

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-24 13:17:41 -07:00
Gyorgy Sarvari
66f1ee096f
ipset: upgrade 7.22 -> 7.24
Changelog:

7.24
Userspace changes
    Improve fixing commas in sorted json output
    Fix extra quotes around elements in json output (bugzilla #1793, issue 3.)
    Fix commas in sorted json output (bugzilla #1793, issue 4)
    Fix unquoted port range in json output (bugzilla #1793, issue 1)
    Fix extraneous comma in terse list json output (Joachim, bugzilla #1793, issue 2)
    bash-completion: restore fix for syntax error (Jeremy Sowden)
    Correct typo in man-page (Jeremy Sowden)
Kernel part changes
    netfilter: ipset: fix region locking in hash types
    Handle "netfilter: ipset: Fix for recursive locking warning" patch for backward compatibility
    netfilter: ipset: Fix for recursive locking warning

7.23
Userspace changes
    tests: runtest.sh: Keep running, print summary of failed tests (Phil Sutter)
    tests: cidr.sh: Fix for quirks in RHEL's ipcalc (Phil Sutter)
    tests: cidr.sh: Respect IPSET_BIN env var (Phil Sutter)
    ipset: Fix implicit declaration of function basename (Mike Pagano)
    tests: Reduce testsuite run-time (Phil Sutter)
    lib: ipset: Avoid 'argv' array overstepping (Phil Sutter)
    lib: data: Fix for global-buffer-overflow warning by ASAN (Phil Sutter)
Kernel part changes
    netfilter: ipset: Hold module reference while requesting a module (Phil Sutter)
    netfilter: ipset: add missing range check in bitmap_ip_uadt (Jeongjun Park)
    netfilter: ipset: Fix suspicious rcu_dereference_protected()
    Replace BUG_ON() with WARN_ON_ONCE() according to usage policy.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-24 13:17:41 -07:00
Gyorgy Sarvari
6ac3bc3950
keepalived: upgrade 2.3.2 -> 2.3.4
0001-vrrp-Don-t-include-linux-if_ether.h-if-not-needed.patch is included
in this release, so drop the patch.

Many changes and updates, easier to look in the changelogs themselves
rather than pasting here:
https://www.keepalived.org/release-notes/Release-2.3.3.html
https://www.keepalived.org/release-notes/Release-2.3.4.html

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-24 10:54:44 -07:00
Archana Polampalli
b9669bc006
tcpreplay: upgrade 4.5.1 -> 4.5.2
Changelog:
https://github.com/appneta/tcpreplay/releases/tag/v4.5.2

Drop patches that have been merged upstream.

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-23 09:24:48 -07:00
Liu Yiding
97376e916e
freeradius: Fix service start error
Following error occurred while starting this service.
 Error: tls: (TLS) Failed reading certificate file "/etc/raddb/certs/server.pem"
 Error: tls: (TLS) error:03000072:digital envelope routines::decode error
 Error: tls: (TLS) error:0A00018F:SSL routines::ee key too small
 Error: rlm_eap_tls: Failed initializing SSL context
 Error: rlm_eap (EAP): Failed to initialise rlm_eap_tls
 Error: /etc/raddb/mods-enabled/eap[14]: Instantiation failed for module "eap"

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-22 08:30:05 -07:00
Wang Mingyu
c7f520bd1d
lldpd: upgrade 1.0.19 -> 1.0.20
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-16 09:59:16 -07:00
Jason Schonberg
7c0a0f73bd
pgpool2: upgrade 4.5.4 -> 4.5.5
Changelog: https://www.pgpool.net/docs/latest/en/html/release-4-5-5.html

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-15 11:41:20 -07:00
Gyorgy Sarvari
0601a0bd8f
pgpool2: update patch statuses
The patches were submitted to upstream, they are not pending anymore.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-15 09:55:16 -07:00
Gyorgy Sarvari
909985d1b9
pgpool2: fix compiling for 32-bit arches
When compiling for 32-bit targets, two issues came to surface:

1. gcc was complaining that math.h is not included in snprintf, and some
   calls were implicitly defined. Added a patch that includes the required
   headers in snprintf.c file:

| snprintf.c: In function 'fmtfloat':
| snprintf.c:1232:13: error: implicit declaration of function 'isnan' [-Wimplicit-function-declaration]
|  1232 |         if (isnan(value))
|       |             ^~~~~
| snprintf.c:50:1: note: include '<math.h>' or provide a declaration of 'isnan'

2. The code passes a time_t argument to a function that expects a long. This works for
   64-bit targets, because on those usually time_t is long.
   However on 32-bit systems time_t is usually long long, which makes compilation fail
   with the following error:

| wd_json_data.c:540:66: error: passing argument 3 of 'json_get_long_value_for_key' from incompatible pointer type [-Wincompatible-pointer-types]
|   540 |         if (json_get_long_value_for_key(root, "StartupTimeSecs", &wdNode->startup_time.tv_sec))
|       |                                                                  ^~~~~~~~~~~~~~~~~~~~~~~~~~~~

   To account for this, add a new helper method in a patch that returns the required json value
   as a time_t value.

The patches are in pending state, because the mailing list of the project is sufferring from
technical problems - when the site loads, sign up attempts throw internal server errors.

It is planned to submit the patches and to update the status once their infrastructure is back.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-11 17:31:42 -07:00
Khem Raj
40d911dc7e
kronosnet: Upgrade to 1.31
Drop Upstreamed patch

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-07 17:09:26 -07:00
Wang Mingyu
94caa8666f
nftables: upgrade 1.1.4 -> 1.1.5
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-04 10:28:24 -07:00
Wang Mingyu
23a7f368cc
networkmanager-openvpn: upgrade 1.12.2 -> 1.12.3
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-04 10:28:24 -07:00
Wang Mingyu
afbe561190
fping: upgrade 5.3 -> 5.4
Changelog:
=========
- Memory allocation safety checks for event storage (thanks David.A for bug report)
- Fix off-by-one boundary check in seqmap code
- The minimum value for the period (-p flag) is now 0.001 milliseconds,
  since it probably never makes sense to use a smaller value, and to avoid doing
  a very large memory allocation for event storage.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-04 10:28:22 -07:00
Khem Raj
2ebb85fbb8
ot-br-posix: Fix build with clang-21
Update to latest tip of trunk
Fix mbedTLS issue seen with clang-21

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-08-29 22:02:54 -07:00
Alex Kiernan
3153c527ee
mdns: Upgrade 2600.120.12 -> 2600.140.3
Also cleanup dangling comments in the recipe.

Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-08-29 08:26:18 -07:00
Khem Raj
33fec4b4f4
networkmanager: Fix build with clang-21
Do not mark Wincompatible-function-pointer-types warning as error

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-08-21 13:15:39 -07:00
Jiaying Song
8e28287dde
openvpn: change ptest output format
The format selected is the automake "simple test" format: "result: testname".

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-08-21 13:15:39 -07:00
Wang Mingyu
de128865a5
nftables: upgrade 1.1.3 -> 1.1.4
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-08-20 07:35:09 -07:00
Wang Mingyu
cd4ff7ebe4
networkmanager-openvpn: upgrade 1.12.0 -> 1.12.2
Changelog:
============
* Fix bug that caused that challenge was incorrectly reused if invalid or expired.
* Add support for "data-ciphers-fallback" option.
* Add GUI support for "data-ciphers" option.
* Fix export for password connection type that was not exporting some fields.
* Fix mnemonics in editor's Identity - Advanced view
* Auth-dialog ported to GTK4
* Import certificates into the XDG_DATA_HOME directory.
* Update translations: Hindi, Slovenian, Catalan, Polish, Brazilian Portuguese, Ukrainian, Georgian,
  Swedish, Hebrew, Russian and Danish.
* Skip release 1.12.1 because of a bug in the release pipeline.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-08-20 07:35:09 -07:00
Wang Mingyu
9b1bd9bbe5
libtevent: upgrade 0.17.0 -> 0.17.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-08-20 07:35:09 -07:00
Wang Mingyu
6814d6bb19
libtdb: upgrade 1.4.13 -> 1.4.14
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-08-20 07:35:08 -07:00
Wang Mingyu
20d5201dbb
libnftnl: upgrade 1.2.9 -> 1.3.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-08-20 07:35:08 -07:00
Wang Mingyu
cfc699399e
libdaq: upgrade 3.0.20 -> 3.0.21
Changelog:
 api: add support for handling DIOCTL_SET_INJECT_DROP

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-08-20 07:35:08 -07:00
Zoltán Böszörményi
df6a14a27c
openvpn: Add PACKAGECONFIG for data channel offload
Moved the iproute2 backend enablement into a new PACKAGECONFIG.
It is enabled to keep the current defaults. Added the explicit
runtime dependency on iproute2-ip (the "ip" command) which this
backend requires.

Added a new PACKAGECONFIG[dco] which enables the libnl backend,
which is mutually incompatible with iproute2 backend in OpenVPN.

With these:

  PACKAGECONFIG:remove = "iproute2"
  PACKAGECONFIG:append = " dco"

the data channel offload is enabled:

  checking for LIBNL_GENL... yes
  configure: Enabled ovpn-dco support for Linux

With Linux kernel 6.16 or newer, and CONFIG_OVPN enabled,
the data channel offload will be used.

Signed-off-by: Zoltán Böszörményi <zboszor@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-08-14 07:40:09 -07:00
Gianfranco Costamagna
0331499e1f
mosquitto: bump to 2.0.22
Refresh patches, drop patch 3238, now part of upstream codebase

Signed-off-by: Gianfranco Costamagna <locutusofborg@debian.org>
Signed-off-by: Gianfranco Costamagna <costamagnagianfranco@yahoo.it>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-08-13 08:01:50 -07:00
Dean Sellers
eea415cfbd
tailscale: Added support for systemd init
Includes the provided service and defaults files for using the
tailscale daemon on systemd init machines.
Added the other kernel modules necessary for tailscaled to work
without warnings to RRECOMMENDS.

Tested with `core-image-minimal` under qemu with machines
`qemux86-64`, `genericx86-64` and `qemuarm64`. Ping
host on tailscale network using magicDNS host lookup.

Signed-off-by: Dean Sellers <dean@sellers.id.au>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-08-07 21:58:51 -07:00
Wang Mingyu
407adc7192
memcached: upgrade 1.6.38 -> 1.6.39
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-08-04 11:45:23 -07:00
Liu Yiding
9547f35175
chrony: upgrade 4.6.1 -> 4.7
Changelog:
==========
- Add opencommands directive to select remote monitoring commands
- Add interval option to driftfile directive
- Add waitsynced and waitunsynced options to local directive
- Add sanity checks for integer values in configuration
- Add support for systemd Type=notify service
- Add RTC refclock driver
- Allow PHC refclock to be specified with network interface name
- Don’t require multiple refclock samples per poll to simplify filter configuration
- Keep refclock reachable when dropping samples with large delay
- Improve quantile-based filtering to adapt faster to larger delay
- Improve logging of selection failures
- Detect clock interference from other processes
- Try to reopen message log (-l option) on cyclelogs command
- Fix sourcedir reloading to not multiply sources
- Fix tracking offset after failed clock step
- Drop support for NTS with Nettle < 3.6 and GnuTLS < 3.6.14
- Drop support for building without POSIX threads

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-22 16:39:48 -07:00
Liu Yiding
6c5a38dbe0
nbdkit: upgrade 1.43.11 -> 1.45.1
Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-21 22:43:59 -07:00
Khem Raj
457c117418
tsocks: Always use ligcc for compiler runtime with clang on x86
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-20 21:21:32 -07:00
Khem Raj
813ae0b029
ruli: Fix build with clang
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-18 21:02:45 -07:00
Khem Raj
1997d3d6c4
net-snmp: Do not pass LDFLAGS to compiler
This fixed issues like incompatible hash sections
it was added in 2009 [1], however these errors are
not seen in todays OE builds

On the contrary it regresses build with clang since
it rejects the options which results in some configure
test failures, resulting finally in build/compile failures

arm-yoe-linux-gnueabi-clang: warning: -Wl,-O1: 'linker' input unused [-Wunused-command-line-argument]

[1] https://git.openembedded.org/openembedded/commit/?id=07f750c6382476b799201b5ca47f93a5f7aa7e84

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Jan Luebbe <jlu@pengutronix.de>
2025-07-18 21:02:45 -07:00
Guðni Már Gilbert
b9bf053c44
mbedtls: upgrade 3.6.3.1 -> 3.6.4
Fixes several security vulnerabilities:
CVE-2025-49601, CVE-2025-49600, CVE-2025-52496,
CVE-2025-47917, CVE-2025-48965, CVE-2025-52497,
and CVE-2025-49087

The framework directory has been changed into a git submodule.[1][2]
The recipe now uses Git Submodule Fetcher (gitsm)

Changelog:
https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.4

[1] 8cf5666a17
[2] c90c6d8ff7

Signed-off-by: Guðni Már Gilbert <gudni.m.g@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-16 08:52:06 -07:00
Jeroen Hofstee
1c9490d376
tailscale: add initial recipe for v1.84.3
Tailscale is a mesh VPN built on the WireGuard protocol.
On the client side, it includes a node agent (tailscaled)
and a client application for configuration (tailscale).
These components can be bundled into a single binary for
a more smaller total size, which is done in this recipe.

Signed-off-by: Jeroen Hofstee <jhofstee@victronenergy.com>
Signed-off-by: Mark Bath <mark@baggywrinkle.co.uk>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-16 08:52:06 -07:00
Wang Mingyu
2b9e429a24
strongswan: upgrade 6.0.1 -> 6.0.2
0001-pki-Fix-signature-of-help-to-match-that-of-a-callbac.patch
0002-callback-job-Replace-return_false-in-constructors-wi.patch
0003-Cast-uses-of-return_-nop-and-enumerator_create_empty.patch
removed since they're included in 6.0.2

Changelog:
=============
- Support for per-CPU SAs (RFC 9611) has been added (Linux 6.13+).
- Basic support for AGGFRAG mode (RFC 9347) has been added (Linux 6.14+).
- POSIX regular expressions can be used to match remote identities.
- Switching configs based on EAP-Identities is supported. Setting
  'remote.eap_id' now always initiates an EAP-Identity exchange.
- On Linux, sequence numbers from acquires are used when installing SAs. This
  allows handling narrowing properly.
- During rekeying, the narrowed traffic selectors are now proposed instead of
  the configured ones.
- The default AH/ESP proposals contain all supported key exchange methods plus
  'none' to make PFS optional and accept proposals of older peers.
- GRO for ESP in enabled for NAT-T UDP sockets, which can improve performance
  if the esp4|6_offload modules are loaded.
- charon-nm sets the VPN connection as persistent, preventing NetworkManager
  from tearing down the connection if the network connectivity changes.
- ML-KEM is supported via OpenSSL 3.5+.
- The wolfssl plugin is now compatible to wolfSSL's FIPS module.
- The libsoup plugin has been migrated to libsoup 3, libsoup 2 is not supported
  anymore.
- The long defunct uci plugin has been removed.
- Log messages by watcher_t are now logged in a separate log group ('wch').

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-15 23:54:16 -07:00
Wang Mingyu
73498cf9bc
mtr: upgrade 0.95 -> 0.96
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-15 23:54:15 -07:00
Khem Raj
be3c11c82d
relayd: Fix building with CMake 4+
Bump minimum cmake dialect to be 3.5+, this is an openwrt
component, which does not get many updates these days. Ideally
the cmake files for the project should be fixed.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-15 00:25:32 -07:00
Khem Raj
d78a537ee8
civetweb: Update to latest tip if trunk
Fixes build with cmake4+

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-13 09:46:10 -07:00
Khem Raj
220a6e7f5d
ot-br-posix: Update to latest tip on trunk
Fix build with cmake4

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-13 09:46:09 -07:00
Khem Raj
60c7d0de57
nngpp: Fix build with cmake4
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-13 09:46:09 -07:00
Khem Raj
3424960e05
ot-daemon: Update to latest of trunk
Fixes build with trunk
Disable prepending uptime to logs

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-13 09:46:09 -07:00
Louis Rannou
2a27eacee2
mosquitto: bump to 2.0.21
Upgrade to mosquitto 2.0.21. Update the patch status for issue 2895 and create a
new patch for an issue introduced in 2.0.19 which causes connections to get down
when the clock is changed.

Signed-off-by: Louis Rannou <louis.rannou@non.se.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-11 08:35:06 -07:00
Alper Ak
16db1ad432
cannelloni: Upgrade 1.1.0 -> 2.0.0 to allow CMake 4+ compatibility
- Appends -Wno-error=vla-cxx-extension to CXXFLAGS as a temporary workaround for the following Clang error:

   sctpthread.cpp:95:18: error: variable length arrays in C++ are a Clang extension [-Werror,-Wvla-cxx-extension]
      95 |   uint8_t buffer[m_linkMtuSize];
         |                  ^~~~~~~~~~~~~

An upstream fix has been proposed: https://github.com/mguentner/cannelloni/pull/82

Please remove this workaround once the upstream patch is merged or fixed in some other way. Make sure it is fixed in the new version.

- Drop 0001-include-bits-stdc-.h-only-when-using-libstdc.patch because already fixed in newer version.

Changelog:

https://github.com/mguentner/cannelloni/compare/v1.1.0...v2.0.0

Fix:

| CMake Error at CMakeLists.txt:1 (cmake_minimum_required):
|   Compatibility with CMake < 3.5 has been removed from CMake.
|
|   Update the VERSION argument <min> value.  Or, use the <min>...<max> syntax
|   to tell CMake that the project requires at least <min> but has been updated
|   to work with policies introduced by <max> or earlier.
|
|   Or, add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to try configuring anyway.
|
|
| -- Configuring incomplete, errors occurred!

Signed-off-by: Alper Ak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-09 13:57:04 -07:00
Alper Ak
38c37d867c
ettercap: Add patch for CMake 4+ compatibility
Fix:

| CMake Error at CMakeLists.txt:1 (cmake_minimum_required):
|   Compatibility with CMake < 3.5 has been removed from CMake.
|
|   Update the VERSION argument <min> value.  Or, use the <min>...<max> syntax
|   to tell CMake that the project requires at least <min> but has been updated
|   to work with policies introduced by <max> or earlier.
|
|   Or, add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to try configuring anyway.
|
|
| -- Configuring incomplete, errors occurred!

Signed-off-by: Alper Ak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-09 13:35:19 -07:00
Alper Ak
4dcd2d7e71
nanomsg: Add patch for CMake 4+ compatibility
Fix:

| CMake Error at CMakeLists.txt:27 (cmake_minimum_required):
|   Compatibility with CMake < 3.5 has been removed from CMake.
|
|   Update the VERSION argument <min> value.  Or, use the <min>...<max> syntax
|   to tell CMake that the project requires at least <min> but has been updated
|   to work with policies introduced by <max> or earlier.
|
|   Or, add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to try configuring anyway.
|
|
| -- Configuring incomplete, errors occurred!

Signed-off-by: Alper Ak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-09 13:35:18 -07:00
Alper Ak
66d216a02b
snort3: Upgrade 3.7.1.0 -> 3.9.1.0 to allow CMake 4+ compatibility
- Drop 0001-Fix-build-with-gcc-15.patch because fixed in the newer version.

Changelog:

https://github.com/snort3/snort3/blob/3.9.1.0/ChangeLog.md

Fix:

| CMake Error at CMakeLists.txt:1 (cmake_minimum_required):
|   Compatibility with CMake < 3.5 has been removed from CMake.
|
|   Update the VERSION argument <min> value.  Or, use the <min>...<max> syntax
|   to tell CMake that the project requires at least <min> but has been updated
|   to work with policies introduced by <max> or earlier.
|
|   Or, add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to try configuring anyway.
|
|
| -- Configuring incomplete, errors occurred!

Signed-off-by: Alper Ak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-09 13:35:18 -07:00
Alper Ak
74acd72248
freediameter: Add patch for CMake 4+ compatibility
Fix:

| CMake Error at CMakeLists.txt:24 (CMAKE_MINIMUM_REQUIRED):
|   Compatibility with CMake < 3.5 has been removed from CMake.
|
|   Update the VERSION argument <min> value.  Or, use the <min>...<max> syntax
|   to tell CMake that the project requires at least <min> but has been updated
|   to work with policies introduced by <max> or earlier.
|
|   Or, add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to try configuring anyway.
|
|
| -- Configuring incomplete, errors occurred!

Signed-off-by: Alper Ak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-09 09:16:08 -07:00
Wang Mingyu
dd8508039b
libdaq: upgrade 3.0.19 -> 3.0.20
Changelog:
=============
- decode: add check for ipv4 fragmentation for decode_ip
- example: added IP configs for other systems

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-08 23:40:28 -07:00
Wang Mingyu
9d21874db0
blueman: upgrade 2.4.4 -> 2.4.6
Changelog:
===========
- Make connection notifications transient
- StatusNotifierItem: announce children-display
- Manager: Hide bt status switch when PowerManager is not available
- Handling for new StatusNotifierWatcher

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-07 10:00:53 -07:00
Jinfeng Wang
f72a91a5d9
postfix: fix rootfs file difference
Rootfs file differs with the same project configure, add preliminary
setting to avoid this.

Signed-off-by: Jinfeng Wang <jinfeng.wang.cn@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-02 23:27:07 -07:00
Jason Schonberg
7740ec9e95
pgpool2: upgrade 4.5.3 -> 4.5.4
This version brings a fix for CVE-2024-45624

Changlog: https://www.pgpool.net/docs/latest/en/html/release-4-5-4.html

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-02 12:50:58 -07:00
Khem Raj
b29ce87bb4
nbdkit: Fix build after S moved into UNPACKDIR
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-07-01 08:11:11 -07:00
Changqing Li
b1fd03235a
netcf: remove EXTRA_AUTORECONF
Refer [1], Makefile.am already set ACLOCAL_AMFLAGS = -I gnulib/m4, set
EXTRA_AUTORECONF will cause do_configure failure with long build path,
just drop EXTRA_AUTORECONF.

[1] https://git.openembedded.org/openembedded-core/commit/meta/classes-recipe/autotools.bbclass?id=e718d1be2c4fb54cf363c23f929358e1be68c724

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-26 07:26:21 -07:00
Wang Mingyu
d6c6a07794
libtevent: upgrade 0.16.2 -> 0.17.0
0002-Fix-pyext_PATTERN-for-cross-compilation.patch
refreshed for 0.17.0

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-26 07:24:01 -07:00
Wang Mingyu
e60adb3597
libcpr: upgrade 1.11.0 -> 1.12.0
Changelog:
===============
- Updated supported versions for 1.11.0
- Add FreeBSD package/port mention into README
- Fixed grammatical issues and corrected spelling errors in README.md
- Refactored timeout.h: added template ctr and removed redundant ctrs
- fix no-revoke.
- Resolve CURLOPT_SSL_OPTIONS issues
- fix: remove duplicate call in Session::prepareCommonDownload()
- Update To The Latest Clang-Tidy Version
- Enhance: Use unordered_map for CURL error mapping
- Public cpr::Session::GetSharedPtrFromThis
- Replace ubuntu:22.04 and ubuntu:23.04 with ubuntu:latest
- [BUG] Fix cpr::ssl:KeyBlob: Copy blob to curl
- Added handling no_proxy override through Proxies
- fix: let bad-host-tests pass when there is DNS error redirection
- Removed 1.9.x from the supported versions
- Replaced the secureStringClear mechanism with a SecureString class
- Clang-Tidy And cppcheck Fixes
- Getter function for Session::header_ to enable the user to read back all headers set and delete select ones
- Status code int32_t -> long
- Fix windows static library build parameter in CMakeLists.txt
- Fix Seg-fault when setting proxy username + password
- Add Session::RemoveContent()
- Cookie expires date is now only 100 days in the future
- add curl's ANY and ANSAFE authorization options
- Fixed memory leak in threadpool
- Add enforced HTTP/3
- Update README.md to add Bazel extension instructions
- feat: Use CMAKE_MSVC_RUNTIME_LIBRARY for runtime selection in MSVC
- Update CMakeLists.txt project version for 1.11.2 release
- Add std::to_string functionality for ErrorCode to ease human meaningful logging
- Make cpr::async and HTTP (Get, Post, Put, etc.) callbacks cancelable
- Refactor AsyncWrapper to make it safer
- Do Not Check For Sanitizers If They Are Not Enabled
- Fix usage for TLS v1.3 cipher
- Changed LowSpeed to use std::chrono
- Better OpenSSL headers include based on headers version.
- Ensure cpr::LowSpeed properties are cased to long for curl
- Implemented cpr::BodyView.
- Add primary_ip primary_port to Response
- Bump stefanzweifel/git-auto-commit-action from 5 to 6
- Load all certs in a CaBuffer
- WIP CURL 8.13 Support

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-26 07:24:01 -07:00
Alper Ak
5c6cc78fab
autossh: Replace WORKDIR with UNPACKDIR to prevent compile error
Issue was related to latest UNPACKDIR changes -> https://git.openembedded.org/openembedded-core/commit/?id=46480a5e66747a673041fe4452a0ab14a1736d5e

ERROR: autossh-1.4g-r0 do_compile: Execution of '/srv/pokybuild/yocto-worker/meta-oe/build/build/tmp/work/core2-64-poky-linux/autossh/1.4g/temp/run.do_compile.2252' failed with exit code 1

Signed-off-by: Alper Ak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-25 06:44:54 -07:00
Alper Ak
5b6000c52a
mdio-netlink and mdio-tools: Fix license file path
Issue was related to latest UNPACKDIR changes -> https://git.openembedded.org/openembedded-core/commit/?id=46480a5e66747a673041fe4452a0ab14a1736d5e

WARNING: mdio-netlink-1.3.1-r0 do_populate_lic: Could not copy license file - [Errno 2] No such file or directory: '/srv/pokybuild/yocto-worker/meta-oe/build/build/tmp/work/qemux86_64-poky-linux/mdio-netlink/1.3.1/git/COPYING'
ERROR: mdio-netlink-1.3.1-r0 do_populate_lic: QA Issue: mdio-netlink: LIC_FILES_CHKSUM points to an invalid file: /srv/pokybuild/yocto-worker/meta-oe/build/build/tmp/work/qemux86_64-poky-linux/mdio-netlink/1.3.1/git/COPYING [license-checksum]

WARNING: mdio-tools-1.3.1-r0 do_populate_lic: Could not copy license file - [Errno 2] No such file or directory: '/srv/pokybuild/yocto-worker/meta-oe/build/build/tmp/work/core2-64-poky-linux/mdio-tools/1.3.1/git/COPYING'
ERROR: mdio-tools-1.3.1-r0 do_populate_lic: QA Issue: mdio-tools: LIC_FILES_CHKSUM points to an invalid file: /srv/pokybuild/yocto-worker/meta-oe/build/build/tmp/work/core2-64-poky-linux/mdio-tools/1.3.1/git/COPYING [license-checksum]

Signed-off-by: Alper Ak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-25 06:44:52 -07:00
Jason Schonberg
baca88733d
libcpr: upgrade 1.10.5 -> 1.11.0
Changelog: https://github.com/libcpr/cpr/releases/tag/1.11.0

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-25 06:44:52 -07:00
Alexander Kanavin
fc78d37ff0
meta-openembedded/all: adapt to UNPACKDIR changes
Please see
https://git.yoctoproject.org/poky/commit/?id=4dd321f8b83afecd962393101b2a6861275b5265
for what changes are needed, and sed commands that can be used to make them en masse.

I've verified that bitbake -c patch world works with these, but did not run a world
build; the majority of recipes shouldn't need further fixups, but if there are
some that still fall out, they can be fixed in followups.

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-25 06:44:52 -07:00
Chaitanya Vadrevu
9fd087d298
samba: Run populate-volatile.sh update in postinst
samba-common installs a volatiles configuration file but had not been
calling populate-volatile.sh to apply the configuration. This causes
samba installation to fail on a running target due to missing
directories.

Call "populate-volatile.sh update" in samba-common's postinst which
creates the required directories and enables samba to work.

Signed-off-by: Chaitanya Vadrevu <chaitanya.vadrevu@emerson.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-25 06:44:50 -07:00
Yoann Congal
bf400cd73f
reproducibility: move known non-repro list to layer.conf
The current include file that stores the known non-reproducible packages
is layer dependent and that forces the user of the layers to maintain
the list of the files (for example, see AB config[0]).

By moving the exclude list to each layer.conf and extending the common
OEQA_REPRODUCIBLE_EXCLUDED_PACKAGES variable, the known non-reproducible
packages will be automatically excluded for each layer used in the
reproducibility test without any special knowledge in the test
environment.

NB: the empty list for meta-initramfs was just removed not moved.

[0]: https://git.yoctoproject.org/yocto-autobuilder-helper/tree/config.json?id=7d8933e75bdf7fb821a25617cb2dcabf1f3f8700#n322

Suggested-by: Quentin Schulz <quentin.schulz@cherry.de>
Co-Developed-by: Guillaume Swaenepoel <guillaume.swaenepoel@smile.fr>
Signed-off-by: Guillaume Swaenepoel <guillaume.swaenepoel@smile.fr>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-20 10:34:11 -07:00
Alex Kiernan
ede9e1799e
libcoap: Add PACKAGECONFIG[wolfssl]
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-20 10:34:11 -07:00
Alex Kiernan
ac184d5f50
libcoap: Upgrade 4.3.4 -> 4.3.5
Drop backport of CVE-2024-0962.

Change summary for version 4.3.5:

        * Support for wolfSSL TLS library.
        * Support for DTLS1.3 (using wolfSSL).
        * Support for Mbed TLS 3.6.0.
        * Support for EC-JPAKE (Mbed TLS)
        * TinyDTLS version update.
        * Support for RIOT using SOCK i/f.
        * Support for LwIP 2.2.0.
        * Support for LwIP using NO_SYS set to 0.
        * Support for (Posix based) Zephyr.
        * Support for QNX builds.
        * Support for ESP32 xtensa builds.
        * Updated Contiki-NG support.
        * Support for multi-thread safe libcoap usage.
        * Support for defining binary PSK for coap-client and coap-server.
        * Support for Connection-ID (CID) (Mbed TLS, wolfSSL and TinyDTLS).
        * Added new define types for defining PKI parameters.
        * Support for user definable ENGINE for OpenSSL.
        * Support for using noTLS and TinyDTLS with WebSockets.
        * Support for providing list of compilation #defines.
        * Support for proxy code running within lbcoap.
        * Cleaned up support for building .h files.
        * Additional scan-build and pre-commit checks in build tests.
        * Updated CI build tests to use latest action versions.
        * Fixes CVE-2023-35862.
        * Reported bugs fixed.
        * Documentation added and updated (Doxygen and man).

License-Update: Updated years
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-20 10:34:11 -07:00
Ross Burton
ca201985da
bridge-utils: remove sysfsutils DEPENDS
This dependency was removed in bridge-utils 1.2 back in 2006[1].

[1] bridge-utils 29cd6d997cacb9191d1f869ec83fc86045885527.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-12 06:34:19 -07:00
Wang Mingyu
7ee2cfbaf9
wireguard-tools: upgrade 1.0.20210914 -> 1.0.20250521
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-09 21:24:17 -07:00
Wang Mingyu
289ee5e410
stunnel: upgrade 5.74 -> 5.75
License-Update: Copyright year updated to 2025

fix-openssl-no-des.patch
refreshed for 5.75

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-09 21:24:16 -07:00
Wang Mingyu
7df26ff32c
nbdkit: upgrade 1.43.9 -> 1.43.11
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-09 21:24:11 -07:00
Vijay Anusuri
dc779c8715
wireshark: upgrade 4.2.11 -> 4.2.12
releasenote:
https://www.wireshark.org/docs/relnotes/wireshark-4.2.12.html

Includes security fix CVE-2025-5601

License-Update: Update GPL copies for FSF no longer having an address
Link: 18e4db97c4

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-06-09 13:01:21 -07:00
Chen Qi
c21040ea2d
Revert "waf-samba.bbclass: adapt to qemu.bbclass refactoring"
This reverts commit a8995fc3f3.

The patches for oe-core were re-worked. But I forgot to recall
this patch.

In fact, inheriting qemu is needed because it sets a clear barriar
for people to use qemu user mode. And the QEMU_OPTIONS settings
are also in qemu.bbclass.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-05-29 22:28:02 -07:00
Khem Raj
af1612a85b
wolfssl: Use the return value from unit.test as pass/fail indicator
Using a string search for Fail is not going to work always e.g.
when all tests are passing it still prints a summary string with string
"Fail" in it which points to 0, however the logic here catches that and
counts it as 1 failure and marks the return value as 1 and ptest runner
interprets that as failure

Pass the return value from unit.test which should be 0 on all passes
or non zero otherwise.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-05-29 08:19:31 -07:00
Khem Raj
5cf87bcb87
wolfssl: Upgrade to 5.8.0
Define relative path for certs
Backport patch to fix ptests

Fixes
WARNING: wolfssl-5.8.0-r0 do_package_qa: QA Issue: File /usr/lib/wolfssl/ptest/test/.libs/unit.test in package wolfssl-ptest contains reference to TMPDIR [buildpaths]

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-05-29 00:08:10 -07:00
Khem Raj
9ff6cce43f
system-config-printer: Remove pyc files
The pyc files contain references to TMPDIR and they can be regenerated
during execution on device

Fixes
stdio: ERROR: system-config-printer-1.5.18-r0 do_package_qa: QA Issue: File /usr/lib/python3.13/site-packages/cupshelpers/__pycache__/__init__.cpython-313.pyc in package system-config-printer contains reference to TMPDIR [buildpaths]
stdio: ERROR: system-config-printer-1.5.18-r0 do_package_qa: QA Issue: File /usr/lib/python3.13/site-packages/cupshelpers/__pycache__/installdriver.cpython-313.pyc in package system-config-printer contains reference to TMPDIR [buildpaths]
stdio: ERROR: system-config-printer-1.5.18-r0 do_package_qa: QA Issue: File /usr/lib/python3.13/site-packages/cupshelpers/__pycache__/ppds.cpython-313.pyc in package system-config-printer contains reference to TMPDIR [buildpaths]
stdio: ERROR: system-config-printer-1.5.18-r0 do_package_qa: QA Issue: File /usr/lib/python3.13/site-packages/cupshelpers/__pycache__/xmldriverprefs.cpython-313.pyc in package system-config-printer contains reference to TMPDIR [buildpaths]
stdio: ERROR: system-config-printer-1.5.18-r0 do_package_qa: QA Issue: File /usr/lib/python3.13/site-packages/cupshelpers/__pycache__/config.cpython-313.pyc in package system-config-printer contains reference to TMPDIR [buildpaths]
stdio: ERROR: system-config-printer-1.5.18-r0 do_package_qa: QA Issue: File /usr/lib/python3.13/site-packages/cupshelpers/__pycache__/cupshelpers.cpython-313.pyc in package system-config-printer contains reference to TMPDIR [buildpaths]
stdio: ERROR: system-config-printer-1.5.18-r0 do_package_qa: QA Issue: File /usr/lib/python3.13/site-packages/cupshelpers/__pycache__/openprinting.cpython-313.pyc in package system-config-printer contains reference to TMPDIR [buildpaths]

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-05-28 16:13:02 -07:00
Markus Volk
faffa1906d
networkmanager: update 1.50.0 -> 1.52.0
- there is no tarball hosted at gnome anymore -> switch from
  gnomebase class to meson + git
- add missing dependencies for uuid and nvme, add pkgconfig class
- dhcpcanon option was removed upstream
- gtkdoc is broken. Disable to unbreak builds if api-documentation
  is enabled

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-05-28 13:09:08 -07:00
Alex Kiernan
d106898fbf
mdns: Upgrade 2600.100.147 -> 2600.120.12
Drop redundant limit declaration patch. Swap issetugid()/getenv() call for
secure_getenv() on Linux.

Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-05-28 08:55:15 -07:00
Wang Mingyu
d3565ecf66
nbdkit: upgrade 1.43.5 -> 1.43.9
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-05-21 07:38:25 -07:00
Wang Mingyu
9fa57a47b3
mbedtls: upgrade 3.6.3 -> 3.6.3.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-05-21 07:38:25 -07:00
Alex Kiernan
3b3e1565b8
mdns: Upgrade 2559.80.8 -> 2600.100.147
Drop fixes which are upstream (fixed differently):

* 0001-Fix-SIGSEGV-during-DumpStateLog.patch
* 0004-Add-definition-for-MAX.patch

Upstream has significantly reworked the netlink handling, this breaks the
existing patches which:

* Rework the interface handling from a bitbmap into a list
* Include checks for significant changes to interfaces before discarding the
  entire set and restarting
* A fix for deleting interfaces

The upstream code appears to handle the latter two cases, the former was
noted as a problem on Android in 2017.

Drop all these changes and hope that they are indeed resolved; the upstream
changes appear to be based on code from the matter-openwrt tree (authored by
Apple):

https://github.com/project-chip/matter-openwrt/tree/main/third_party/mdnsresponder/patches

Refresh all other patches.

Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-05-18 09:08:11 -07:00
Mike Crowe
2d431c2d0b
civetweb: Fix build with ssl disabled
Move enabling of openssl 3.0 API from EXTRA_OECMAKE to
PACKAGECONFIG[ssl] so that this package can still be configured
successfully without ssl in PACKAGECONFIG.

Signed-off-by: Mike Crowe <mac@mcrowe.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-05-17 10:58:32 -07:00
Markus Volk
c10b45a196
samba: add patch to fix gcc-15 issue
Add a backport patch to fix:
libcli/smbreadline/smbreadline.c: In function ‘smb_readline’:
libcli/smbreadline/smbreadline.c:139:17: warning: ‘CPPFunction’ is deprecated [-Wdeprecated-declarations]
  139 |                 rl_attempted_completion_function = RL_COMPLETION_CAST completion_fn;
      |                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
libcli/smbreadline/smbreadline.c:139:50: error: assignment to ‘char ** (*)(const char *, int,  int)’ from incompatible pointer type ‘char ** (*)(void)’ [-Wincompatible-pointer-types]
  139 |                 rl_attempted_completion_function = RL_COMPLETION_CAST completion_fn;
      |

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-05-05 15:46:00 -07:00
Jason Schonberg
71f8b389b2
pgpool2: upgrade 4.5.2 -> 4.5.3
Changelog: https://www.pgpool.net/docs/latest/en/html/release-4-5-3.html

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-05-05 10:18:38 -07:00
Chen Qi
a8995fc3f3
waf-samba.bbclass: adapt to qemu.bbclass refactoring
Avoid inheriting qemu.bbclass and use oe.qemu.xxx instead.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-05-03 01:59:06 -07:00
Khem Raj
6e136a6bdc
ot-br-posix: Upgrade to latest on top of trunk
Drop a denied patch and use the suggestion to ignore the warning.
Compile with C++20 std, because gcc-15 has started to warn about

recipe-sysroot/usr/include/c++/15.1.0/ciso646:46:4: error: #warning "<ciso646> is deprecated in C++17, use <version> to detect implementation-specific macros" [-Werror=cpp]

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-05-02 00:00:29 -07:00
Martin Jansa
f340b4079d
libnftnl: fix tag name
* ${P} doesn't work e.g. with multilib

* fixes:
  git -c gc.autoDetach=false -c core.pager=cat -c safe.bareRepository=all -c clone.defaultRemoteName=origin rev-list -n 1 lib32-libnftnl-1.2.9 failed with exit code 128, output:
  fatal: ambiguous argument \'lib32-libnftnl-1.2.9\': unknown revision or path not in the working tree.

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-29 02:33:26 -07:00
Wang Mingyu
f520bdcee8
nftables: upgrade 1.1.2 -> 1.1.3
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-29 02:33:23 -07:00
Wang Mingyu
b8abfc747c
nbdkit: upgrade 1.42.1 -> 1.43.5
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-29 02:33:23 -07:00
Peter Marko
3adc396a6f
corosync: patch CVE-2025-30472
Pick commit from [1] mentioned in [2] from [3]

[1] https://github.com/corosync/corosync/issues/778
[2] https://github.com/corosync/corosync/pull/779
[3] https://nvd.nist.gov/vuln/detail/CVE-2025-30472

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-28 06:49:24 -07:00
Peter Marko
9621423109
corosync: upgrade 3.1.6 -> 3.1.9
dbus dir was changed from sysconfdir to datadir

drop unused configure code

License-Update: copyright years refreshed

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-28 06:49:23 -07:00
Peter Marko
dd40c65866
corosync: fix upstream version check
github-releases is needed that it work at all:
ERROR: Automatic discovery of latest version/revision failed - you must provide a version using the --version/-V option, or for recipes that fetch from an SCM such as git, the --srcrev/-S option.

UPSTREAM_CHECK_GITTAGREGEX is needed to get correct version, otherwise:
$ devtool latest-version corosync
...
INFO: Current version: 3.1.6
INFO: Latest version: 414.336.75.75.75

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-28 06:49:23 -07:00
Jason Schonberg
0ccc751f13
pgpool2: upgrade 4.5.1 -> 4.5.2
Fixes for memory leaks, uninitialized memory, segmentation faults and other fixes.

Changelog: https://www.pgpool.net/docs/latest/en/html/release-4-5-2.html

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-27 15:23:46 -07:00
Martin Jansa
2c816eab0c
pgpool2: use gnu17 to avoid build failure with gcc-15
* like e.g. gentoo does:
  https://bugs.gentoo.org/940128

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-26 10:31:27 -07:00
Martin Jansa
a3ef0f5c50
fetchmail: upgrade to 6.5.2 to fix build with gcc-15
* fixes:
  http://errors.yoctoproject.org/Errors/Details/852999/

../fetchmail-6.4.38/xmalloc.c:35:1: error: conflicting types for 'xrealloc'; have 'char *(char *, size_t)' {aka 'char *(char *, long unsigned int)'}
   35 | xrealloc (XMALLOCTYPE *p, size_t n)
      | ^~~~~~~~
In file included from ../fetchmail-6.4.38/xmalloc.c:9:
../fetchmail-6.4.38/xmalloc.h:28:14: note: previous declaration of 'xrealloc' with type 'char *(void *, size_t)' {aka 'char *(void *, long unsigned int)'}
   28 | XMALLOCTYPE *xrealloc(/*@null@*/ void *, size_t n);
      |              ^~~~~~~~

COPYING was updated (copyright years update and openssl note was dropped) in:
62a11ca406/

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-26 10:31:27 -07:00
Martin Jansa
9c6c2d06e8
open-vm-tools: fix build with gcc-15
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-26 10:31:27 -07:00
Martin Jansa
f7eeca8807
linux-atm: Fix build with gcc-15
* taken from:
  1d1c3f884d/patches/901-linux-atm-dont-use-bool-keyword.patch

* fixes:
  http://errors.yoctoproject.org/Errors/Details/852979/

In file included from load_lex.l:11:
../../../linux-atm-2.5.2/src/lane/load_lex.h:27:10: error: two or more data types in declaration specifiers
   27 |   Bool_t bool;
      |          ^~~~
../../../linux-atm-2.5.2/src/lane/load_lex.h:27:14: warning: declaration does not declare anything
   27 |   Bool_t bool;
      |              ^
In file included from ../../../linux-atm-2.5.2/src/lane/load.c:29:
../../../linux-atm-2.5.2/src/lane/load_lex.h:27:10: error: two or more data types in declaration specifiers
   27 |   Bool_t bool;
      |          ^~~~
../../../linux-atm-2.5.2/src/lane/load_lex.h:27:14: warning: declaration does not declare anything
   27 |   Bool_t bool;
      |              ^
load_lex.l: In function 'yylex':
load_lex.l:47:11: error: expected identifier before 'bool'
load_lex.l:51:11: error: expected identifier before 'bool'
../../../linux-atm-2.5.2/src/lane/load.c: In function 'load_vars':
../../../linux-atm-2.5.2/src/lane/load.c:501:29: error: expected identifier before 'bool'
  501 |                    g_return.bool==BL_TRUE?"True":"False");
      |                             ^~~~
../../../linux-atm-2.5.2/src/lane/load.c:502:51: error: expected identifier before 'bool'
  502 |         set_var_bool(curr_unit, varname, g_return.bool);
      |                                                   ^~~~
make[3]: *** [Makefile:513: load.o] Error 1

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-26 10:31:27 -07:00
Martin Jansa
e984a3504f
postfix: use gnu17 for now
* as recommended by postfix author in:
  https://marc.info/?l=postfix-users&m=173542420611213

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-26 10:31:27 -07:00
Martin Jansa
181fea00cb
proftpd: upgrade to 1.3.9 to fix build with gcc-15
* fixed in:
  61be7eb14f

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-26 10:31:26 -07:00
Martin Jansa
46c46c300b
snort: Fix build with gcc-15
* fixes:
  http://errors.yoctoproject.org/Errors/Details/852983/

../../../../../snort-2.9.20/src/preprocessors/HttpInspect/files/file_decomp_PDF.c:1062:13: error: conflicting types for 'File_Decomp_PDF'; have 'fd_status_t(struct fd_session_s *)' {aka 'enum fd_status(struct fd_session_s *)'}
 1062 | fd_status_t File_Decomp_PDF( fd_session_p_t SessionPtr )
      |             ^~~~~~~~~~~~~~~
In file included from ../../../../../snort-2.9.20/src/preprocessors/HttpInspect/include/file_decomp.h:59,
                 from ../../../../../snort-2.9.20/src/preprocessors/HttpInspect/files/file_decomp_PDF.c:31:
../../../../../snort-2.9.20/src/preprocessors/HttpInspect/include/file_decomp_PDF.h:83:13: note: previous declaration of 'File_Decomp_PDF' with type 'fd_status_t(void)' {aka 'enum fd_status(void)'}
   83 | fd_status_t File_Decomp_PDF();
      |             ^~~~~~~~~~~~~~~
make[5]: *** [Makefile:374: file_decomp_PDF.o] Error 1
make[5]: *** Waiting for unfinished jobs....
../../../../../snort-2.9.20/src/preprocessors/HttpInspect/files/file_decomp.c: In function 'Process_Decompression':
../../../../../snort-2.9.20/src/preprocessors/HttpInspect/files/file_decomp.c:245:24: error: too many arguments to function 'File_Decomp_PDF'; expected 0, have 1
  245 |             Ret_Code = File_Decomp_PDF( SessionPtr );
      |                        ^~~~~~~~~~~~~~~  ~~~~~~~~~~
In file included from ../../../../../snort-2.9.20/src/preprocessors/HttpInspect/include/file_decomp.h:59,
                 from ../../../../../snort-2.9.20/src/preprocessors/HttpInspect/files/file_decomp.c:34:
../../../../../snort-2.9.20/src/preprocessors/HttpInspect/include/file_decomp_PDF.h:83:13: note: declared here
   83 | fd_status_t File_Decomp_PDF();
      |             ^~~~~~~~~~~~~~~

  http://errors.yoctoproject.org/Errors/Details/852992/
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c: In function 'DCE2_InitGlobal':
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:348:25: error: too many arguments to function 'DCE2_GetReloadSafeMemcap'; expected 0, have 1
  348 |         size_t memcap = DCE2_GetReloadSafeMemcap(dce2_config);
      |                         ^~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:163:17: note: declared here
  163 | static uint32_t DCE2_GetReloadSafeMemcap();
      |                 ^~~~~~~~~~~~~~~~~~~~~~~~
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c: In function 'DCE2_ReloadGlobal':
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:1291:25: error: too many arguments to function 'DCE2_GetReloadSafeMemcap'; expected 0, have 1
 1291 |         size_t memcap = DCE2_GetReloadSafeMemcap(dce2_swap_config);
      |                         ^~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:163:17: note: declared here
  163 | static uint32_t DCE2_GetReloadSafeMemcap();
      |                 ^~~~~~~~~~~~~~~~~~~~~~~~
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c: In function 'DCE2_ReloadVerify':
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:1436:35: error: too many arguments to function 'DCE2_GetReloadSafeMemcap'; expected 0, have 1
 1436 |     uint32_t current_memcap     = DCE2_GetReloadSafeMemcap(dce2_config);
      |                                   ^~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:163:17: note: declared here
  163 | static uint32_t DCE2_GetReloadSafeMemcap();
      |                 ^~~~~~~~~~~~~~~~~~~~~~~~
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:1437:35: error: too many arguments to function 'DCE2_GetReloadSafeMemcap'; expected 0, have 1
 1437 |     uint32_t new_memcap         = DCE2_GetReloadSafeMemcap(dce2_swap_config);
      |                                   ^~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:163:17: note: declared here
  163 | static uint32_t DCE2_GetReloadSafeMemcap();
      |                 ^~~~~~~~~~~~~~~~~~~~~~~~
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c: In function 'DCE2_ReloadSwap':
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:1535:26: error: too many arguments to function 'DCE2_GetReloadSafeMemcap'; expected 0, have 1
 1535 |         current_memcap = DCE2_GetReloadSafeMemcap(dce2_config);
      |                          ^~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:163:17: note: declared here
  163 | static uint32_t DCE2_GetReloadSafeMemcap();
      |                 ^~~~~~~~~~~~~~~~~~~~~~~~
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:1538:26: error: too many arguments to function 'DCE2_GetReloadSafeMemcap'; expected 0, have 1
 1538 |         swap_memcap    = DCE2_GetReloadSafeMemcap(dce2_swap_config);
      |                          ^~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:163:17: note: declared here
  163 | static uint32_t DCE2_GetReloadSafeMemcap();
      |                 ^~~~~~~~~~~~~~~~~~~~~~~~
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c: At top level:
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:1673:17: error: conflicting types for 'DCE2_GetReloadSafeMemcap'; have 'uint32_t(tSfPolicyUserContext *)' {aka 'unsigned int(tSfPolicyUserContext *)'}
 1673 | static uint32_t DCE2_GetReloadSafeMemcap(tSfPolicyUserContextId pConfig)
      |                 ^~~~~~~~~~~~~~~~~~~~~~~~
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:163:17: note: previous declaration of 'DCE2_GetReloadSafeMemcap' with type 'uint32_t(void)' {aka 'unsigned int(void)'}
  163 | static uint32_t DCE2_GetReloadSafeMemcap();
      |                 ^~~~~~~~~~~~~~~~~~~~~~~~

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-26 10:31:26 -07:00
Niko Mauno
2cd4763dc1
system-config-printer: Update D-Bus runtime dependency declaration
In order to facilitate users who wish to use e.g. dbus-broker as their
runtime D-Bus implementation, change the Freedesktop.org specific D-Bus
runtime dependency to honor oe-core's new VIRTUAL-RUNTIME_dbus
variable.

With this change we also align with oe-core commit 5dfca64b78
("dbus-glib: depend on dbus, not dbus-x11") which mentions that

  dbus-x11 hasn't existed as a package since 2012[1] and is just a
  RPROVIDES in dbus, so depend on dbus directly instead.

Signed-off-by: Niko Mauno <niko.mauno@vaisala.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-24 18:43:19 -07:00
Wang Mingyu
11c07b393f
nftables: upgrade 1.1.1 -> 1.1.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-23 19:35:04 -07:00
Wang Mingyu
956ef2942d
nbdkit: upgrade 1.40.5 -> 1.42.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-23 19:35:04 -07:00
Wang Mingyu
17aa52ee3a
libnftnl: upgrade 1.2.8 -> 1.2.9
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-23 19:35:03 -07:00
Andreas Fenkart
63df976d8e
chrony: use inherit_defer for conditional inherit of useradd
conditionnal inherit is missed when PACKAGECONFIG privdrop is
activated after this inherit, eg in .bbappend.

Signed-off-by: Andreas Fenkart <afenkart@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-19 14:36:08 -07:00
Andreas Fenkart
b7ec477640
chrony: fix /sbin/nologin path in useradd cmdline
/sbin/nologin instead of /bin/nologin

Signed-off-by: Andreas Fenkart <afenkart@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-19 14:36:08 -07:00
mark.yang
7ad93a1c68
libowfat: fix error with gcc-15
* fix following errors:
  ./select.h:13:12: error: conflicting types for 'select'; have 'int(void)'
   13 | extern int select();
      |            ^~~~~~
   In file included from TOPDIR/tmp/work/core2-64-oe-linux/libowfat/0.32/recipe-sysroot/usr/include/sys/types.h:179,
                 from ./select.h:6:
   ./buffer.h:40:65: error: initialization of 'ssize_t (*)(void)' {aka 'long int (*)(void)'} from incompatible pointer type 'ssize_t (*)(int,  char *, size_t)' {aka 'long int (*)(int,  char *, long unsigned int)'} [-Wincompatible-pointer-types]
   40 | #define BUFFER_INIT(op,fd,buf,len) { (char*)(buf), 0, 0, (len), (op), NULL, NULL, (fd) }

Signed-off-by: mark.yang <mark.yang@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-19 14:36:07 -07:00
mark.yang
05def1ad00
strongswan: fix error with gcc-15
* Backport 3 Patch:
  - 0001-pki-Fix-signature-of-help-to-match-that-of-a-callbac.patch
  - 0002-callback-job-Replace-return_false-in-constructors-wi.patch
  - 0003-Cast-uses-of-return_-nop-and-enumerator_create_empty.patch

* To fix the error with gcc-15.
  - See more details: http://errors.yoctoproject.org/Errors/Details/851801

Signed-off-by: mark.yang <mark.yang@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-19 14:36:04 -07:00
mark.yang
a8b8eaa85b
netcat-openbsd: fix build error with gcc-15
* submit fix:
  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1097448
  to fix:
    netcat.c:1443:41: error: passing argument 2 of 'signal' from incompatible pointer type [-Wincompatible-pointer-types]
    1443 |                         signal(SIGALRM, quit);
        |                                         ^~~~
        |                                         |
        |                                         void (*)(void)
    In file included from netcat.c💯
    TOPDIR/tmp/work/core2-64-oe-linux/netcat-openbsd/1.195/recipe-sysroot/usr/include/signal.h:88:57: note: expected '__sighandler_t' {aka 'void (*)(int)'} but argument is of type 'void (*)(void)'
    88 | extern __sighandler_t signal (int __sig, __sighandler_t __handler)
        |                                          ~~~~~~~~~~~~~~~^~~~~~~~~
    netcat.c:241:13: note: 'quit' declared here
    241 | static void quit();
        |             ^~~~
    TOPDIR/tmp/work/core2-64-oe-linux/netcat-openbsd/1.195/recipe-sysroot/usr/include/signal.h:72:16: note: '__sighandler_t' declared here
    72 | typedef void (*__sighandler_t) (int);
        |                ^~~~~~~~~~~~~~
    make: *** [Makefile:17: netcat.o] Error 1

Signed-off-by: mark.yang <mark.yang@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-19 14:36:04 -07:00
Andreas Fenkart
e81fefb0ef
networkmanager: enable vala bindings if gobject introspection is enabled
when opting out from the DISTRO_FEATURE gobject-introspection-date, the
build fails with error:
../NetworkManager-1.50.0/meson.build:849:4: ERROR: Assert failed: vala api require GObject introspection. Use -Dvapi=false to disable it

The gobject-introspection-data feature, while ultimately added to
DISTRO_FEATURES via DISTRO_FEATURE_BACKFILL, isn't available during the
vala.bbclass inheritance check. This also excludes derived variables
e.g. GI_DATA_ENABLED.

To properly disable a DISTRO_FEATURE_BACKFILL feature, it must be
included in DISTRO_FEATURE_BACKFILL_CONSIDERED, a variable that is
available during the parsing phase.

Similar situations have been resolved in:

[openembedded-core:31daea70b18b2b2266bf94063b655aaf142a6166]
librsvg: Only enable the Vala bindings if GObject Introspection is enabled
 PACKAGECONFIG:append:class-target = " ${@bb.utils.contains('GI_DATA_ENABLED', 'True', 'vala', '', d)}"

  -- and --

[meta-openembedded:d89fc6ffbdf8f947643def51b804052bb5e7ac97
libpeas: add recipe for 2.0.5
 PACKAGECONFIG ?= "python3 gjs lua51 ${@bb.utils.contains('DISTRO_FEATURES', 'gobject-introspection', 'vala', '', d)}"

Signed-off: Andreas Fenkart <afenkart@gmail.com>
2025-04-19 14:36:04 -07:00
Andreas Fenkart
ed6a77501a
networkmanager: remove unnecessary typelib file location workaround.
The workaround introduced in commit
63db9c0d52 is no longer needed.
Typelib
files are now correctly located solely within STAGING_LIBDIR_NATIVE,
aligning with the intended build configuration. Removing the
workaround
avoids the following error during build:

cp: cannot stat '.../GObject*typelib': No such file or directory

Signed-off: Andreas Fenkart <afenkart@gmail.com>
2025-04-19 14:36:03 -07:00
mark.yang
cf98490262
netperf: fix build error with gcc-15
* submit fix:
  https://github.com/HewlettPackard/netperf/pull/86
  to fix:
  http://errors.yoctoproject.org/Errors/Details/851803/
    ../../git/src/nettest_bsd.c:4497:19: error: too many arguments to function 'alloc_sendfile_buf_ring'; expected 0, have 4
    4497 |       send_ring = alloc_sendfile_buf_ring(send_width,
        |                   ^~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~
    In file included from ../../git/src/nettest_bsd.c:175:
    ../../git/src/netlib.h:690:26: note: declared here
    690 | extern  struct ring_elt *alloc_sendfile_buf_ring();
        |                          ^~~~~~~~~~~~~~~~~~~~~~~
    In file included from ../../git/src/nettest_omni.c:184:
    ../../git/src/hist.h:135:6: error: conflicting types for 'HIST_purge'; have 'void(struct histogram_struct *)'
    135 | void HIST_purge(HIST h);
        |      ^~~~~~~~~~
  ...

Signed-off-by: mark.yang <mark.yang@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-19 14:36:02 -07:00
mark.yang
c81b4c74e4
ssmtp: fix build error with gcc-15
* fix build error with gcc-15
../ssmtp-2.64/ssmtp.c:1454:31: error: passing argument 2 of 'signal' from incompatible pointer type [-Wincompatible-pointer-types]
 1454 |         (void)signal(SIGALRM, (void(*)())handler);      /* Catch SIGALRM */
      |                               ^~~~~~~~~~~~~~~~~~
      |                               |
      |                               void (*)(void)
In file included from TOPDIR/tmp/work/core2-64-oe-linux/ssmtp/2.64/recipe-sysroot/usr/include/sys/param.h:28,
                 from ../ssmtp-2.64/ssmtp.c:18:
TOPDIR/tmp/work/core2-64-oe-linux/ssmtp/2.64/recipe-sysroot/usr/include/signal.h:88:57: note: expected '__sighandler_t' {aka 'void (*)(int)'} but argument is of type 'void (*)(void)'
   88 | extern __sighandler_t signal (int __sig, __sighandler_t __handler)
      |                                          ~~~~~~~~~~~~~~~^~~~~~~~~
../ssmtp-2.64/ssmtp.c:1393:6: note: 'handler' declared here
 1393 | void handler(void)
      |      ^~~~~~~

Signed-off-by: mark.yang <mark.yang@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-19 14:36:02 -07:00
Wang Mingyu
b505813ed9
nbdkit: upgrade 1.40.4 -> 1.40.5
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-16 08:18:06 -07:00
Khem Raj
aabf9768d0
meta-networking-image-ptest-all: Do not run PTESTS_PROBLEMS_META_NETWORKING
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-12 10:11:32 -07:00
Khem Raj
34b4c40f47
ptest-packagelists-meta-networking: Adjust ptests as per pass status
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-12 10:06:29 -07:00
Yi Zhao
bb89d2ca67
ntp: set UPSTREAM_CHECK_REGEX
Set UPSTREAM_CHECK_REGEX to skip RC/beta version.

Before the fix:
$ devtool latest-version ntp
INFO: Current version: 4.2.8p18
INFO: Latest version: 4.2.8p18-RC1

After the fix:
$ devtool latest-version ntp
INFO: Current version: 4.2.8p18
INFO: Latest version: 4.2.8p18

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-12 07:09:49 -07:00
Khem Raj
b019b4bd68
layers: Add whinlatter (5.3) to compatible layer series
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-11 20:51:29 -07:00
mark.yang
8586c9e2e8
tcpreplay: fix build error with gcc-15
There are two types of errors:
1. Linker errors for txring.c
TOPDIR/tmp/work/core2-64-oe-linux/tcpreplay/4.5.1/recipe-sysroot-native/usr/bin/x86_64-oe-linux/../../libexec/x86_64-oe-linux/gcc/x86_64-oe-linux/15.0.1/ld: ./common/libcommon.a(sendpacket.o): in function `sendpacket':
/usr/src/debug/tcpreplay/4.5.1/src/common/sendpacket.c:328:(.text+0x1be): undefined reference to `txring_put'
TOPDIR/tmp/work/core2-64-oe-linux/tcpreplay/4.5.1/recipe-sysroot-native/usr/bin/x86_64-oe-linux/../../libexec/x86_64-oe-linux/gcc/x86_64-oe-linux/15.0.1/ld: ./common/libcommon.a(sendpacket.o): in function `sendpacket_open_pf':
/usr/src/debug/tcpreplay/4.5.1/src/common/sendpacket.c:1088:(.text+0x7ea): undefined reference to `txring_init'
TOPDIR/tmp/work/core2-64-oe-linux/tcpreplay/4.5.1/recipe-sysroot-native/usr/bin/x86_64-oe-linux/../../libexec/x86_64-oe-linux/gcc/x86_64-oe-linux/15.0.1/ld: ./common/libcommon.a(sendpacket.o): in function `sendpacket':
/usr/src/debug/tcpreplay/4.5.1/src/common/sendpacket.c:328:(.text+0x1be): undefined reference to `txring_put'
TOPDIR/tmp/work/core2-64-oe-linux/tcpreplay/4.5.1/recipe-sysroot-native/usr/bin/x86_64-oe-linux/../../libexec/x86_64-oe-linux/gcc/x86_64-oe-linux/15.0.1/ld: ./common/libcommon.a(sendpacket.o): in function `sendpacket_open_pf':
/usr/src/debug/tcpreplay/4.5.1/src/common/sendpacket.c:1088:(.text+0x7ea): undefined reference to `txring_init'
TOPDIR/tmp/work/core2-64-oe-linux/tcpreplay/4.5.1/recipe-sysroot-native/usr/bin/x86_64-oe-linux/../../libexec/x86_64-oe-linux/gcc/x86_64-oe-linux/15.0.1/ld: ./common/libcommon.a(sendpacket.o): in function `sendpacket':
/usr/src/debug/tcpreplay/4.5.1/src/common/sendpacket.c:328:(.text+0x1be): undefined reference to `txring_put'
TOPDIR/tmp/work/core2-64-oe-linux/tcpreplay/4.5.1/recipe-sysroot-native/usr/bin/x86_64-oe-linux/../../libexec/x86_64-oe-linux/gcc/x86_64-oe-linux/15.0.1/ld: ./common/libcommon.a(sendpacket.o): in function `sendpacket_open_pf':
/usr/src/debug/tcpreplay/4.5.1/src/common/sendpacket.c:1088:(.text+0x7ea): undefined reference to `txring_init'

The txring file needs to include config.h to build properly.
Surprisingly, in the same environment with gcc14, HAVE_TX_RING is not declared in config.h because it fails during the configure stage.

The config.log below is from the same environment with gcc14.
configure:26549: result: no
configure:26557: checking for TX_RING socket sending support
configure:26579: conftest.c >&5
In file included from conftest.c:130:
/linux/if_packet.h:14:8: error: redefinition of 'struct sockaddr_ll'
   14 | struct sockaddr_ll {
      |        ^~~~~~~~~~~
Therefore, it seems that the linker error did not occur previously.

2. Incompatible type assignment in txring.c when allocating memory for txring_t structure

Signed-off-by: mark.yang <mark.yang@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-10 08:31:06 -07:00
Markus Volk
b6d13f8108
blueman: update 2.4.3 -> 2.4.4
- remove patch that was merged upstream

2.4.4
Bugs fixed

    Fix Rfcom plugin dbus signature
    Set an initial selected device in blueman-sendto
    AutoConnect: Store bluetooth address instead of object path
    Applet: Handle UnknownObject DBus error (@tommie)
    Make search button available after device list becomes empty (@astcri)
    Fatal LoadException

Changes

    Terminate applet on manager termination if it was started by manager
    Add Galic and Esperanto translations
    AutoConnect: Automatically convert path to address
    Add toggle to force symbolic statusicon

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-10 08:31:04 -07:00
Nguyen Dat Tho
e62c16c3e4
drbd-utils: Fix build with gcc-15
To fix error: http://errors.yoctoproject.org/Errors/Details/851808/
In file included from string_matching.cpp:1:
./string_matching.h:10:18: error: 'uint16_t' does not name a type
   10 |     extern const uint16_t   PATTERN_LIMIT;
      |                  ^~~~~~~~
./string_matching.h:7:1: note: 'uint16_t' is defined in header '<cstdint>'; this is probably fixable by adding '#include <cstdint>'

Signed-off-by: Nguyen Dat Tho <tho3.nguyen@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-10 08:31:03 -07:00
Nguyen Dat Tho
7be42e05de
mdns: Fix build with gcc-15
Fix error: http://errors.yoctoproject.org/Errors/Details/851809/

../mDNSShared/CommonServices.h:856:13: error: 'bool' cannot be defined via 'typedef'
  856 | typedef int bool;
      |             ^~~~
../mDNSShared/CommonServices.h:856:13: note: 'bool' is a keyword with '-std=c23' onwards
../mDNSShared/CommonServices.h:856:1: warning: useless type name in empty declaration
  856 | typedef int bool;
      | ^~~~~~~

Signed-off-by: Nguyen Dat Tho <tho3.nguyen@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-10 08:31:03 -07:00
Nguyen Dat Tho
058a9ee791
weechat: upgrade 4.5.0 -> 4.6.0
Changelog:
  https://github.com/weechat/weechat/blob/v4.6.0/CHANGELOG.md

Signed-off-by: Nguyen Dat Tho <tho3.nguyen@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-10 08:31:03 -07:00
Wang Mingyu
03efb8bf8c
openvpn: upgrade 2.6.13 -> 2.6.14
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-07 12:21:18 -07:00
Khem Raj
ceb9160341
ssmping: Use debian mirror for SRC_URI
Original URI is not accessible anymore
Drop md5sum

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-06 08:47:56 -07:00
mark.yang
c022f3ec33
unbound: fix build with gcc-15.0.1
* fix following error:
  http://errors.yoctoproject.org/Errors/Details/850313/
  ../git/compat/malloc.c:9:7: warning: conflicting types for built-in function 'malloc'; expected 'void *(long unsigned int)' [-Wbuiltin-declaration-mismatch]
    9 | void *malloc ();
      |       ^~~~~~
  ../git/compat/malloc.c:5:1: note: 'malloc' is declared in header '<stdlib.h>'
    4 | #include "config.h"
  +++ |+#include <stdlib.h>
    5 | #undef malloc
  ../git/compat/malloc.c: In function 'rpl_malloc_unbound':
  ../git/compat/malloc.c:23:10: error: too many arguments to function 'malloc'; expected 0, have 1
   23 |   return malloc (n);
      |          ^~~~~~  ~
  ../git/compat/malloc.c:9:7: note: declared here
    9 | void *malloc ();
      |       ^~~~~~

* Seeing that there is '#undef malloc', it appears they don't want to
  use the malloc from stdlib.h.
  Therefore, we need to correctly define the parameters for malloc.

Signed-off-by: mark.yang <mark.yang@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-02 07:29:32 -07:00
mark.yang
f452fa2fce
freediameter: fix build with gcc-15.0.1
* backport fix from:
  https://github.com/freeDiameter/freeDiameter/issues/72
  a54f10082f

  to fix:
  http://errors.yoctoproject.org/Errors/Details/850312/
  TOPDIR/tmp/work/qemux86_64-oe-linux/freediameter/1.5.0+git/git/libfdcore/sctp.c:622:21: note: 'bool' is a keyword with '-std=c23' onwards
  TOPDIR/tmp/work/qemux86_64-oe-linux/freediameter/1.5.0+git/git/libfdcore/sctp.c:622:26: error: expected identifier or '(' before '=' token
  622 |                 int bool = 1;
      |                          ^

Signed-off-by: mark.yang <mark.yang@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-01 23:08:15 -07:00
Nguyen Dat Tho
ffe4c94dca
snort3: upgrade 3.6.1 -> 3.7.1
Changelog:
  https://github.com/snort3/snort3/blob/master/ChangeLog.md

Add 0001-Fix-build-with-gcc-15.patch to fix build with gcc-15

Signed-off-by: Nguyen Dat Tho <tho3.nguyen@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-31 14:42:08 -07:00
Yi Zhao
f27fe8c6e2
mbedtls: 3.6.2 -> 3.6.3
ChangeLog:
https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.3

Remove mbedtls-framework repository, as the framework is now added
as a flat directory rather than a submodule[1][2].

[1] b41194ce7f
[2] 2c824b4fe5

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-31 14:42:06 -07:00
Yi Zhao
ca08c74223
mbedtls: upgrade 2.28.9 -> 2.28.10
ChangeLog
https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-2.28.10

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-31 14:42:06 -07:00
Yi Zhao
506cc7ef56
frr: upgrade 10.2.1 -> 10.3
ChangeLog:
https://github.com/FRRouting/frr/releases/tag/frr-10.3

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-31 14:42:06 -07:00
Khem Raj
f4a96810ba
Drop styhead from LAYERSERIES_COMPAT
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-31 07:41:47 -07:00
Khem Raj
8147a884c6
net-snmp: Fix a crash and support for 6.7+ kernel
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-29 09:31:02 -07:00
Khem Raj
7c0f6444e2
nftables: Fix build on musl when xtables enabled
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-28 22:54:17 -07:00
Khem Raj
6ca6265f7e
openl2tp: Replace ifconfig with ip command in ptest run script
ifconfig may not exist on all systems since its deprecated, fixes
ptests

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-28 22:22:24 -07:00
Martin Jansa
a2a531a61b
xl2tpd: fix build with gcc-15
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-28 10:28:12 -07:00
Wang Mingyu
66c1ad4149
memcached: upgrade 1.6.37 -> 1.6.38
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-25 09:33:53 -07:00