Commit Graph

4113 Commits

Author SHA1 Message Date
Wang Mingyu
f520bdcee8
nftables: upgrade 1.1.2 -> 1.1.3
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-29 02:33:23 -07:00
Wang Mingyu
b8abfc747c
nbdkit: upgrade 1.42.1 -> 1.43.5
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-29 02:33:23 -07:00
Peter Marko
3adc396a6f
corosync: patch CVE-2025-30472
Pick commit from [1] mentioned in [2] from [3]

[1] https://github.com/corosync/corosync/issues/778
[2] https://github.com/corosync/corosync/pull/779
[3] https://nvd.nist.gov/vuln/detail/CVE-2025-30472

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-28 06:49:24 -07:00
Peter Marko
9621423109
corosync: upgrade 3.1.6 -> 3.1.9
dbus dir was changed from sysconfdir to datadir

drop unused configure code

License-Update: copyright years refreshed

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-28 06:49:23 -07:00
Peter Marko
dd40c65866
corosync: fix upstream version check
github-releases is needed that it work at all:
ERROR: Automatic discovery of latest version/revision failed - you must provide a version using the --version/-V option, or for recipes that fetch from an SCM such as git, the --srcrev/-S option.

UPSTREAM_CHECK_GITTAGREGEX is needed to get correct version, otherwise:
$ devtool latest-version corosync
...
INFO: Current version: 3.1.6
INFO: Latest version: 414.336.75.75.75

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-28 06:49:23 -07:00
Jason Schonberg
0ccc751f13
pgpool2: upgrade 4.5.1 -> 4.5.2
Fixes for memory leaks, uninitialized memory, segmentation faults and other fixes.

Changelog: https://www.pgpool.net/docs/latest/en/html/release-4-5-2.html

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-27 15:23:46 -07:00
Martin Jansa
2c816eab0c
pgpool2: use gnu17 to avoid build failure with gcc-15
* like e.g. gentoo does:
  https://bugs.gentoo.org/940128

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-26 10:31:27 -07:00
Martin Jansa
a3ef0f5c50
fetchmail: upgrade to 6.5.2 to fix build with gcc-15
* fixes:
  http://errors.yoctoproject.org/Errors/Details/852999/

../fetchmail-6.4.38/xmalloc.c:35:1: error: conflicting types for 'xrealloc'; have 'char *(char *, size_t)' {aka 'char *(char *, long unsigned int)'}
   35 | xrealloc (XMALLOCTYPE *p, size_t n)
      | ^~~~~~~~
In file included from ../fetchmail-6.4.38/xmalloc.c:9:
../fetchmail-6.4.38/xmalloc.h:28:14: note: previous declaration of 'xrealloc' with type 'char *(void *, size_t)' {aka 'char *(void *, long unsigned int)'}
   28 | XMALLOCTYPE *xrealloc(/*@null@*/ void *, size_t n);
      |              ^~~~~~~~

COPYING was updated (copyright years update and openssl note was dropped) in:
62a11ca406/

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-26 10:31:27 -07:00
Martin Jansa
9c6c2d06e8
open-vm-tools: fix build with gcc-15
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-26 10:31:27 -07:00
Martin Jansa
f7eeca8807
linux-atm: Fix build with gcc-15
* taken from:
  1d1c3f884d/patches/901-linux-atm-dont-use-bool-keyword.patch

* fixes:
  http://errors.yoctoproject.org/Errors/Details/852979/

In file included from load_lex.l:11:
../../../linux-atm-2.5.2/src/lane/load_lex.h:27:10: error: two or more data types in declaration specifiers
   27 |   Bool_t bool;
      |          ^~~~
../../../linux-atm-2.5.2/src/lane/load_lex.h:27:14: warning: declaration does not declare anything
   27 |   Bool_t bool;
      |              ^
In file included from ../../../linux-atm-2.5.2/src/lane/load.c:29:
../../../linux-atm-2.5.2/src/lane/load_lex.h:27:10: error: two or more data types in declaration specifiers
   27 |   Bool_t bool;
      |          ^~~~
../../../linux-atm-2.5.2/src/lane/load_lex.h:27:14: warning: declaration does not declare anything
   27 |   Bool_t bool;
      |              ^
load_lex.l: In function 'yylex':
load_lex.l:47:11: error: expected identifier before 'bool'
load_lex.l:51:11: error: expected identifier before 'bool'
../../../linux-atm-2.5.2/src/lane/load.c: In function 'load_vars':
../../../linux-atm-2.5.2/src/lane/load.c:501:29: error: expected identifier before 'bool'
  501 |                    g_return.bool==BL_TRUE?"True":"False");
      |                             ^~~~
../../../linux-atm-2.5.2/src/lane/load.c:502:51: error: expected identifier before 'bool'
  502 |         set_var_bool(curr_unit, varname, g_return.bool);
      |                                                   ^~~~
make[3]: *** [Makefile:513: load.o] Error 1

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-26 10:31:27 -07:00
Martin Jansa
e984a3504f
postfix: use gnu17 for now
* as recommended by postfix author in:
  https://marc.info/?l=postfix-users&m=173542420611213

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-26 10:31:27 -07:00
Martin Jansa
181fea00cb
proftpd: upgrade to 1.3.9 to fix build with gcc-15
* fixed in:
  61be7eb14f

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-26 10:31:26 -07:00
Martin Jansa
46c46c300b
snort: Fix build with gcc-15
* fixes:
  http://errors.yoctoproject.org/Errors/Details/852983/

../../../../../snort-2.9.20/src/preprocessors/HttpInspect/files/file_decomp_PDF.c:1062:13: error: conflicting types for 'File_Decomp_PDF'; have 'fd_status_t(struct fd_session_s *)' {aka 'enum fd_status(struct fd_session_s *)'}
 1062 | fd_status_t File_Decomp_PDF( fd_session_p_t SessionPtr )
      |             ^~~~~~~~~~~~~~~
In file included from ../../../../../snort-2.9.20/src/preprocessors/HttpInspect/include/file_decomp.h:59,
                 from ../../../../../snort-2.9.20/src/preprocessors/HttpInspect/files/file_decomp_PDF.c:31:
../../../../../snort-2.9.20/src/preprocessors/HttpInspect/include/file_decomp_PDF.h:83:13: note: previous declaration of 'File_Decomp_PDF' with type 'fd_status_t(void)' {aka 'enum fd_status(void)'}
   83 | fd_status_t File_Decomp_PDF();
      |             ^~~~~~~~~~~~~~~
make[5]: *** [Makefile:374: file_decomp_PDF.o] Error 1
make[5]: *** Waiting for unfinished jobs....
../../../../../snort-2.9.20/src/preprocessors/HttpInspect/files/file_decomp.c: In function 'Process_Decompression':
../../../../../snort-2.9.20/src/preprocessors/HttpInspect/files/file_decomp.c:245:24: error: too many arguments to function 'File_Decomp_PDF'; expected 0, have 1
  245 |             Ret_Code = File_Decomp_PDF( SessionPtr );
      |                        ^~~~~~~~~~~~~~~  ~~~~~~~~~~
In file included from ../../../../../snort-2.9.20/src/preprocessors/HttpInspect/include/file_decomp.h:59,
                 from ../../../../../snort-2.9.20/src/preprocessors/HttpInspect/files/file_decomp.c:34:
../../../../../snort-2.9.20/src/preprocessors/HttpInspect/include/file_decomp_PDF.h:83:13: note: declared here
   83 | fd_status_t File_Decomp_PDF();
      |             ^~~~~~~~~~~~~~~

  http://errors.yoctoproject.org/Errors/Details/852992/
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c: In function 'DCE2_InitGlobal':
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:348:25: error: too many arguments to function 'DCE2_GetReloadSafeMemcap'; expected 0, have 1
  348 |         size_t memcap = DCE2_GetReloadSafeMemcap(dce2_config);
      |                         ^~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:163:17: note: declared here
  163 | static uint32_t DCE2_GetReloadSafeMemcap();
      |                 ^~~~~~~~~~~~~~~~~~~~~~~~
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c: In function 'DCE2_ReloadGlobal':
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:1291:25: error: too many arguments to function 'DCE2_GetReloadSafeMemcap'; expected 0, have 1
 1291 |         size_t memcap = DCE2_GetReloadSafeMemcap(dce2_swap_config);
      |                         ^~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:163:17: note: declared here
  163 | static uint32_t DCE2_GetReloadSafeMemcap();
      |                 ^~~~~~~~~~~~~~~~~~~~~~~~
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c: In function 'DCE2_ReloadVerify':
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:1436:35: error: too many arguments to function 'DCE2_GetReloadSafeMemcap'; expected 0, have 1
 1436 |     uint32_t current_memcap     = DCE2_GetReloadSafeMemcap(dce2_config);
      |                                   ^~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:163:17: note: declared here
  163 | static uint32_t DCE2_GetReloadSafeMemcap();
      |                 ^~~~~~~~~~~~~~~~~~~~~~~~
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:1437:35: error: too many arguments to function 'DCE2_GetReloadSafeMemcap'; expected 0, have 1
 1437 |     uint32_t new_memcap         = DCE2_GetReloadSafeMemcap(dce2_swap_config);
      |                                   ^~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:163:17: note: declared here
  163 | static uint32_t DCE2_GetReloadSafeMemcap();
      |                 ^~~~~~~~~~~~~~~~~~~~~~~~
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c: In function 'DCE2_ReloadSwap':
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:1535:26: error: too many arguments to function 'DCE2_GetReloadSafeMemcap'; expected 0, have 1
 1535 |         current_memcap = DCE2_GetReloadSafeMemcap(dce2_config);
      |                          ^~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:163:17: note: declared here
  163 | static uint32_t DCE2_GetReloadSafeMemcap();
      |                 ^~~~~~~~~~~~~~~~~~~~~~~~
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:1538:26: error: too many arguments to function 'DCE2_GetReloadSafeMemcap'; expected 0, have 1
 1538 |         swap_memcap    = DCE2_GetReloadSafeMemcap(dce2_swap_config);
      |                          ^~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:163:17: note: declared here
  163 | static uint32_t DCE2_GetReloadSafeMemcap();
      |                 ^~~~~~~~~~~~~~~~~~~~~~~~
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c: At top level:
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:1673:17: error: conflicting types for 'DCE2_GetReloadSafeMemcap'; have 'uint32_t(tSfPolicyUserContext *)' {aka 'unsigned int(tSfPolicyUserContext *)'}
 1673 | static uint32_t DCE2_GetReloadSafeMemcap(tSfPolicyUserContextId pConfig)
      |                 ^~~~~~~~~~~~~~~~~~~~~~~~
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:163:17: note: previous declaration of 'DCE2_GetReloadSafeMemcap' with type 'uint32_t(void)' {aka 'unsigned int(void)'}
  163 | static uint32_t DCE2_GetReloadSafeMemcap();
      |                 ^~~~~~~~~~~~~~~~~~~~~~~~

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-26 10:31:26 -07:00
Niko Mauno
2cd4763dc1
system-config-printer: Update D-Bus runtime dependency declaration
In order to facilitate users who wish to use e.g. dbus-broker as their
runtime D-Bus implementation, change the Freedesktop.org specific D-Bus
runtime dependency to honor oe-core's new VIRTUAL-RUNTIME_dbus
variable.

With this change we also align with oe-core commit 5dfca64b78
("dbus-glib: depend on dbus, not dbus-x11") which mentions that

  dbus-x11 hasn't existed as a package since 2012[1] and is just a
  RPROVIDES in dbus, so depend on dbus directly instead.

Signed-off-by: Niko Mauno <niko.mauno@vaisala.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-24 18:43:19 -07:00
Wang Mingyu
11c07b393f
nftables: upgrade 1.1.1 -> 1.1.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-23 19:35:04 -07:00
Wang Mingyu
956ef2942d
nbdkit: upgrade 1.40.5 -> 1.42.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-23 19:35:04 -07:00
Wang Mingyu
17aa52ee3a
libnftnl: upgrade 1.2.8 -> 1.2.9
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-23 19:35:03 -07:00
Andreas Fenkart
63df976d8e
chrony: use inherit_defer for conditional inherit of useradd
conditionnal inherit is missed when PACKAGECONFIG privdrop is
activated after this inherit, eg in .bbappend.

Signed-off-by: Andreas Fenkart <afenkart@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-19 14:36:08 -07:00
Andreas Fenkart
b7ec477640
chrony: fix /sbin/nologin path in useradd cmdline
/sbin/nologin instead of /bin/nologin

Signed-off-by: Andreas Fenkart <afenkart@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-19 14:36:08 -07:00
mark.yang
7ad93a1c68
libowfat: fix error with gcc-15
* fix following errors:
  ./select.h:13:12: error: conflicting types for 'select'; have 'int(void)'
   13 | extern int select();
      |            ^~~~~~
   In file included from TOPDIR/tmp/work/core2-64-oe-linux/libowfat/0.32/recipe-sysroot/usr/include/sys/types.h:179,
                 from ./select.h:6:
   ./buffer.h:40:65: error: initialization of 'ssize_t (*)(void)' {aka 'long int (*)(void)'} from incompatible pointer type 'ssize_t (*)(int,  char *, size_t)' {aka 'long int (*)(int,  char *, long unsigned int)'} [-Wincompatible-pointer-types]
   40 | #define BUFFER_INIT(op,fd,buf,len) { (char*)(buf), 0, 0, (len), (op), NULL, NULL, (fd) }

Signed-off-by: mark.yang <mark.yang@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-19 14:36:07 -07:00
mark.yang
05def1ad00
strongswan: fix error with gcc-15
* Backport 3 Patch:
  - 0001-pki-Fix-signature-of-help-to-match-that-of-a-callbac.patch
  - 0002-callback-job-Replace-return_false-in-constructors-wi.patch
  - 0003-Cast-uses-of-return_-nop-and-enumerator_create_empty.patch

* To fix the error with gcc-15.
  - See more details: http://errors.yoctoproject.org/Errors/Details/851801

Signed-off-by: mark.yang <mark.yang@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-19 14:36:04 -07:00
mark.yang
a8b8eaa85b
netcat-openbsd: fix build error with gcc-15
* submit fix:
  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1097448
  to fix:
    netcat.c:1443:41: error: passing argument 2 of 'signal' from incompatible pointer type [-Wincompatible-pointer-types]
    1443 |                         signal(SIGALRM, quit);
        |                                         ^~~~
        |                                         |
        |                                         void (*)(void)
    In file included from netcat.c💯
    TOPDIR/tmp/work/core2-64-oe-linux/netcat-openbsd/1.195/recipe-sysroot/usr/include/signal.h:88:57: note: expected '__sighandler_t' {aka 'void (*)(int)'} but argument is of type 'void (*)(void)'
    88 | extern __sighandler_t signal (int __sig, __sighandler_t __handler)
        |                                          ~~~~~~~~~~~~~~~^~~~~~~~~
    netcat.c:241:13: note: 'quit' declared here
    241 | static void quit();
        |             ^~~~
    TOPDIR/tmp/work/core2-64-oe-linux/netcat-openbsd/1.195/recipe-sysroot/usr/include/signal.h:72:16: note: '__sighandler_t' declared here
    72 | typedef void (*__sighandler_t) (int);
        |                ^~~~~~~~~~~~~~
    make: *** [Makefile:17: netcat.o] Error 1

Signed-off-by: mark.yang <mark.yang@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-19 14:36:04 -07:00
Andreas Fenkart
e81fefb0ef
networkmanager: enable vala bindings if gobject introspection is enabled
when opting out from the DISTRO_FEATURE gobject-introspection-date, the
build fails with error:
../NetworkManager-1.50.0/meson.build:849:4: ERROR: Assert failed: vala api require GObject introspection. Use -Dvapi=false to disable it

The gobject-introspection-data feature, while ultimately added to
DISTRO_FEATURES via DISTRO_FEATURE_BACKFILL, isn't available during the
vala.bbclass inheritance check. This also excludes derived variables
e.g. GI_DATA_ENABLED.

To properly disable a DISTRO_FEATURE_BACKFILL feature, it must be
included in DISTRO_FEATURE_BACKFILL_CONSIDERED, a variable that is
available during the parsing phase.

Similar situations have been resolved in:

[openembedded-core:31daea70b18b2b2266bf94063b655aaf142a6166]
librsvg: Only enable the Vala bindings if GObject Introspection is enabled
 PACKAGECONFIG:append:class-target = " ${@bb.utils.contains('GI_DATA_ENABLED', 'True', 'vala', '', d)}"

  -- and --

[meta-openembedded:d89fc6ffbdf8f947643def51b804052bb5e7ac97
libpeas: add recipe for 2.0.5
 PACKAGECONFIG ?= "python3 gjs lua51 ${@bb.utils.contains('DISTRO_FEATURES', 'gobject-introspection', 'vala', '', d)}"

Signed-off: Andreas Fenkart <afenkart@gmail.com>
2025-04-19 14:36:04 -07:00
Andreas Fenkart
ed6a77501a
networkmanager: remove unnecessary typelib file location workaround.
The workaround introduced in commit
63db9c0d52 is no longer needed.
Typelib
files are now correctly located solely within STAGING_LIBDIR_NATIVE,
aligning with the intended build configuration. Removing the
workaround
avoids the following error during build:

cp: cannot stat '.../GObject*typelib': No such file or directory

Signed-off: Andreas Fenkart <afenkart@gmail.com>
2025-04-19 14:36:03 -07:00
mark.yang
cf98490262
netperf: fix build error with gcc-15
* submit fix:
  https://github.com/HewlettPackard/netperf/pull/86
  to fix:
  http://errors.yoctoproject.org/Errors/Details/851803/
    ../../git/src/nettest_bsd.c:4497:19: error: too many arguments to function 'alloc_sendfile_buf_ring'; expected 0, have 4
    4497 |       send_ring = alloc_sendfile_buf_ring(send_width,
        |                   ^~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~
    In file included from ../../git/src/nettest_bsd.c:175:
    ../../git/src/netlib.h:690:26: note: declared here
    690 | extern  struct ring_elt *alloc_sendfile_buf_ring();
        |                          ^~~~~~~~~~~~~~~~~~~~~~~
    In file included from ../../git/src/nettest_omni.c:184:
    ../../git/src/hist.h:135:6: error: conflicting types for 'HIST_purge'; have 'void(struct histogram_struct *)'
    135 | void HIST_purge(HIST h);
        |      ^~~~~~~~~~
  ...

Signed-off-by: mark.yang <mark.yang@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-19 14:36:02 -07:00
mark.yang
c81b4c74e4
ssmtp: fix build error with gcc-15
* fix build error with gcc-15
../ssmtp-2.64/ssmtp.c:1454:31: error: passing argument 2 of 'signal' from incompatible pointer type [-Wincompatible-pointer-types]
 1454 |         (void)signal(SIGALRM, (void(*)())handler);      /* Catch SIGALRM */
      |                               ^~~~~~~~~~~~~~~~~~
      |                               |
      |                               void (*)(void)
In file included from TOPDIR/tmp/work/core2-64-oe-linux/ssmtp/2.64/recipe-sysroot/usr/include/sys/param.h:28,
                 from ../ssmtp-2.64/ssmtp.c:18:
TOPDIR/tmp/work/core2-64-oe-linux/ssmtp/2.64/recipe-sysroot/usr/include/signal.h:88:57: note: expected '__sighandler_t' {aka 'void (*)(int)'} but argument is of type 'void (*)(void)'
   88 | extern __sighandler_t signal (int __sig, __sighandler_t __handler)
      |                                          ~~~~~~~~~~~~~~~^~~~~~~~~
../ssmtp-2.64/ssmtp.c:1393:6: note: 'handler' declared here
 1393 | void handler(void)
      |      ^~~~~~~

Signed-off-by: mark.yang <mark.yang@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-19 14:36:02 -07:00
Wang Mingyu
b505813ed9
nbdkit: upgrade 1.40.4 -> 1.40.5
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-16 08:18:06 -07:00
Khem Raj
aabf9768d0
meta-networking-image-ptest-all: Do not run PTESTS_PROBLEMS_META_NETWORKING
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-12 10:11:32 -07:00
Khem Raj
34b4c40f47
ptest-packagelists-meta-networking: Adjust ptests as per pass status
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-12 10:06:29 -07:00
Yi Zhao
bb89d2ca67
ntp: set UPSTREAM_CHECK_REGEX
Set UPSTREAM_CHECK_REGEX to skip RC/beta version.

Before the fix:
$ devtool latest-version ntp
INFO: Current version: 4.2.8p18
INFO: Latest version: 4.2.8p18-RC1

After the fix:
$ devtool latest-version ntp
INFO: Current version: 4.2.8p18
INFO: Latest version: 4.2.8p18

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-12 07:09:49 -07:00
Khem Raj
b019b4bd68
layers: Add whinlatter (5.3) to compatible layer series
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-11 20:51:29 -07:00
mark.yang
8586c9e2e8
tcpreplay: fix build error with gcc-15
There are two types of errors:
1. Linker errors for txring.c
TOPDIR/tmp/work/core2-64-oe-linux/tcpreplay/4.5.1/recipe-sysroot-native/usr/bin/x86_64-oe-linux/../../libexec/x86_64-oe-linux/gcc/x86_64-oe-linux/15.0.1/ld: ./common/libcommon.a(sendpacket.o): in function `sendpacket':
/usr/src/debug/tcpreplay/4.5.1/src/common/sendpacket.c:328:(.text+0x1be): undefined reference to `txring_put'
TOPDIR/tmp/work/core2-64-oe-linux/tcpreplay/4.5.1/recipe-sysroot-native/usr/bin/x86_64-oe-linux/../../libexec/x86_64-oe-linux/gcc/x86_64-oe-linux/15.0.1/ld: ./common/libcommon.a(sendpacket.o): in function `sendpacket_open_pf':
/usr/src/debug/tcpreplay/4.5.1/src/common/sendpacket.c:1088:(.text+0x7ea): undefined reference to `txring_init'
TOPDIR/tmp/work/core2-64-oe-linux/tcpreplay/4.5.1/recipe-sysroot-native/usr/bin/x86_64-oe-linux/../../libexec/x86_64-oe-linux/gcc/x86_64-oe-linux/15.0.1/ld: ./common/libcommon.a(sendpacket.o): in function `sendpacket':
/usr/src/debug/tcpreplay/4.5.1/src/common/sendpacket.c:328:(.text+0x1be): undefined reference to `txring_put'
TOPDIR/tmp/work/core2-64-oe-linux/tcpreplay/4.5.1/recipe-sysroot-native/usr/bin/x86_64-oe-linux/../../libexec/x86_64-oe-linux/gcc/x86_64-oe-linux/15.0.1/ld: ./common/libcommon.a(sendpacket.o): in function `sendpacket_open_pf':
/usr/src/debug/tcpreplay/4.5.1/src/common/sendpacket.c:1088:(.text+0x7ea): undefined reference to `txring_init'
TOPDIR/tmp/work/core2-64-oe-linux/tcpreplay/4.5.1/recipe-sysroot-native/usr/bin/x86_64-oe-linux/../../libexec/x86_64-oe-linux/gcc/x86_64-oe-linux/15.0.1/ld: ./common/libcommon.a(sendpacket.o): in function `sendpacket':
/usr/src/debug/tcpreplay/4.5.1/src/common/sendpacket.c:328:(.text+0x1be): undefined reference to `txring_put'
TOPDIR/tmp/work/core2-64-oe-linux/tcpreplay/4.5.1/recipe-sysroot-native/usr/bin/x86_64-oe-linux/../../libexec/x86_64-oe-linux/gcc/x86_64-oe-linux/15.0.1/ld: ./common/libcommon.a(sendpacket.o): in function `sendpacket_open_pf':
/usr/src/debug/tcpreplay/4.5.1/src/common/sendpacket.c:1088:(.text+0x7ea): undefined reference to `txring_init'

The txring file needs to include config.h to build properly.
Surprisingly, in the same environment with gcc14, HAVE_TX_RING is not declared in config.h because it fails during the configure stage.

The config.log below is from the same environment with gcc14.
configure:26549: result: no
configure:26557: checking for TX_RING socket sending support
configure:26579: conftest.c >&5
In file included from conftest.c:130:
/linux/if_packet.h:14:8: error: redefinition of 'struct sockaddr_ll'
   14 | struct sockaddr_ll {
      |        ^~~~~~~~~~~
Therefore, it seems that the linker error did not occur previously.

2. Incompatible type assignment in txring.c when allocating memory for txring_t structure

Signed-off-by: mark.yang <mark.yang@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-10 08:31:06 -07:00
Markus Volk
b6d13f8108
blueman: update 2.4.3 -> 2.4.4
- remove patch that was merged upstream

2.4.4
Bugs fixed

    Fix Rfcom plugin dbus signature
    Set an initial selected device in blueman-sendto
    AutoConnect: Store bluetooth address instead of object path
    Applet: Handle UnknownObject DBus error (@tommie)
    Make search button available after device list becomes empty (@astcri)
    Fatal LoadException

Changes

    Terminate applet on manager termination if it was started by manager
    Add Galic and Esperanto translations
    AutoConnect: Automatically convert path to address
    Add toggle to force symbolic statusicon

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-10 08:31:04 -07:00
Nguyen Dat Tho
e62c16c3e4
drbd-utils: Fix build with gcc-15
To fix error: http://errors.yoctoproject.org/Errors/Details/851808/
In file included from string_matching.cpp:1:
./string_matching.h:10:18: error: 'uint16_t' does not name a type
   10 |     extern const uint16_t   PATTERN_LIMIT;
      |                  ^~~~~~~~
./string_matching.h:7:1: note: 'uint16_t' is defined in header '<cstdint>'; this is probably fixable by adding '#include <cstdint>'

Signed-off-by: Nguyen Dat Tho <tho3.nguyen@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-10 08:31:03 -07:00
Nguyen Dat Tho
7be42e05de
mdns: Fix build with gcc-15
Fix error: http://errors.yoctoproject.org/Errors/Details/851809/

../mDNSShared/CommonServices.h:856:13: error: 'bool' cannot be defined via 'typedef'
  856 | typedef int bool;
      |             ^~~~
../mDNSShared/CommonServices.h:856:13: note: 'bool' is a keyword with '-std=c23' onwards
../mDNSShared/CommonServices.h:856:1: warning: useless type name in empty declaration
  856 | typedef int bool;
      | ^~~~~~~

Signed-off-by: Nguyen Dat Tho <tho3.nguyen@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-10 08:31:03 -07:00
Nguyen Dat Tho
058a9ee791
weechat: upgrade 4.5.0 -> 4.6.0
Changelog:
  https://github.com/weechat/weechat/blob/v4.6.0/CHANGELOG.md

Signed-off-by: Nguyen Dat Tho <tho3.nguyen@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-10 08:31:03 -07:00
Wang Mingyu
03efb8bf8c
openvpn: upgrade 2.6.13 -> 2.6.14
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-07 12:21:18 -07:00
Khem Raj
ceb9160341
ssmping: Use debian mirror for SRC_URI
Original URI is not accessible anymore
Drop md5sum

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-06 08:47:56 -07:00
mark.yang
c022f3ec33
unbound: fix build with gcc-15.0.1
* fix following error:
  http://errors.yoctoproject.org/Errors/Details/850313/
  ../git/compat/malloc.c:9:7: warning: conflicting types for built-in function 'malloc'; expected 'void *(long unsigned int)' [-Wbuiltin-declaration-mismatch]
    9 | void *malloc ();
      |       ^~~~~~
  ../git/compat/malloc.c:5:1: note: 'malloc' is declared in header '<stdlib.h>'
    4 | #include "config.h"
  +++ |+#include <stdlib.h>
    5 | #undef malloc
  ../git/compat/malloc.c: In function 'rpl_malloc_unbound':
  ../git/compat/malloc.c:23:10: error: too many arguments to function 'malloc'; expected 0, have 1
   23 |   return malloc (n);
      |          ^~~~~~  ~
  ../git/compat/malloc.c:9:7: note: declared here
    9 | void *malloc ();
      |       ^~~~~~

* Seeing that there is '#undef malloc', it appears they don't want to
  use the malloc from stdlib.h.
  Therefore, we need to correctly define the parameters for malloc.

Signed-off-by: mark.yang <mark.yang@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-02 07:29:32 -07:00
mark.yang
f452fa2fce
freediameter: fix build with gcc-15.0.1
* backport fix from:
  https://github.com/freeDiameter/freeDiameter/issues/72
  a54f10082f

  to fix:
  http://errors.yoctoproject.org/Errors/Details/850312/
  TOPDIR/tmp/work/qemux86_64-oe-linux/freediameter/1.5.0+git/git/libfdcore/sctp.c:622:21: note: 'bool' is a keyword with '-std=c23' onwards
  TOPDIR/tmp/work/qemux86_64-oe-linux/freediameter/1.5.0+git/git/libfdcore/sctp.c:622:26: error: expected identifier or '(' before '=' token
  622 |                 int bool = 1;
      |                          ^

Signed-off-by: mark.yang <mark.yang@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-01 23:08:15 -07:00
Nguyen Dat Tho
ffe4c94dca
snort3: upgrade 3.6.1 -> 3.7.1
Changelog:
  https://github.com/snort3/snort3/blob/master/ChangeLog.md

Add 0001-Fix-build-with-gcc-15.patch to fix build with gcc-15

Signed-off-by: Nguyen Dat Tho <tho3.nguyen@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-31 14:42:08 -07:00
Yi Zhao
f27fe8c6e2
mbedtls: 3.6.2 -> 3.6.3
ChangeLog:
https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.3

Remove mbedtls-framework repository, as the framework is now added
as a flat directory rather than a submodule[1][2].

[1] b41194ce7f
[2] 2c824b4fe5

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-31 14:42:06 -07:00
Yi Zhao
ca08c74223
mbedtls: upgrade 2.28.9 -> 2.28.10
ChangeLog
https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-2.28.10

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-31 14:42:06 -07:00
Yi Zhao
506cc7ef56
frr: upgrade 10.2.1 -> 10.3
ChangeLog:
https://github.com/FRRouting/frr/releases/tag/frr-10.3

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-31 14:42:06 -07:00
Khem Raj
f4a96810ba
Drop styhead from LAYERSERIES_COMPAT
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-31 07:41:47 -07:00
Khem Raj
8147a884c6
net-snmp: Fix a crash and support for 6.7+ kernel
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-29 09:31:02 -07:00
Khem Raj
7c0f6444e2
nftables: Fix build on musl when xtables enabled
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-28 22:54:17 -07:00
Khem Raj
6ca6265f7e
openl2tp: Replace ifconfig with ip command in ptest run script
ifconfig may not exist on all systems since its deprecated, fixes
ptests

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-28 22:22:24 -07:00
Martin Jansa
a2a531a61b
xl2tpd: fix build with gcc-15
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-28 10:28:12 -07:00
Wang Mingyu
66c1ad4149
memcached: upgrade 1.6.37 -> 1.6.38
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-25 09:33:53 -07:00
Wang Mingyu
998800ce49
libdaq: upgrade 3.0.18 -> 3.0.19
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-25 09:33:52 -07:00
Yi Zhao
e5271adea7
dnsmasq: upgrade 2.90 -> 2.91
ChangeLog:
https://thekelleys.org.uk/dnsmasq/CHANGELOG

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-24 07:29:13 -07:00
Yi Zhao
053d73ffd6
freeradius: 3.2.5 -> 3.2.7
ChangeLog:
https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_2_6
https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_2_7

* Refresh local patches.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-21 11:07:34 -07:00
Yi Zhao
0b1e0f24f2
drbd-utils: upgrade 9.28.0 -> 9.30.0
ChangeLog:
https://github.com/LINBIT/drbd-utils/blob/v9.30.0/ChangeLog

* Refresh local patches.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-21 11:07:34 -07:00
Yi Zhao
fd730c9269
strongswan: upgrade 6.0.0 -> 6.0.1
ChangeLog:
https://github.com/strongswan/strongswan/releases/tag/6.0.1

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-21 11:07:34 -07:00
Martin Jansa
f19750acc1
iftop: fix build with gcc-15
fixes:
http://errors.yoctoproject.org/Errors/Details/848458/

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-21 11:07:33 -07:00
Khem Raj
aa42e35225
openl2tp: Pin to C17 std
Does not compile with C23 with GCC-15 and the last
release was long time ago.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-20 08:46:56 -07:00
Richard Purdie
eac1f5b9c0
recipes: Fix variable assignment whitespace
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-20 08:46:56 -07:00
Khem Raj
9060bf3a42
rdist: Pin to C17 std
It can not be cleanly compiled with C23 defaults in GCC-15
therefore stick with C17 for now.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-20 08:46:55 -07:00
Ross Burton
5461aa6cbe
openl2tp: don't inherit autotools
This upstream does not in fact use autotools, so remove the inherit and
implement the required do_install.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-19 11:37:48 -07:00
Ross Burton
672062bb3a
miniupnpd: partial recipe rewrite
This upstream does not in fact use autotools, so remove the inherit.

Split the configure step (make config.h) into do_configure and ensure
that it always runs in case the configuration has changed.

Use PACKAGECONFIG for options, as there are more available upstream.

Add UPSTREAM_CHECK variables to check for new releases. This depends on
a bitbake change[1] but with that detects that 2.3.7 has been released.

Add a DEPENDS on openssl as the Makefiles try to link against it and
silently fail without it.

[1] https://lore.kernel.org/bitbake-devel/20250319165339.439776-1-ross.burton@arm.com/T/#u

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-19 11:37:48 -07:00
Ross Burton
fb38afef30
vblade: don't inherit autotools
This upstream does not in fact use autotools, so remove the inherit.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-19 11:37:47 -07:00
Ross Burton
632d43aa40
rdist: don't inherit autotools
This upstream does not in fact use autotools, so remove the inherit and
implement the required do_install directly.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-19 11:37:46 -07:00
Omri Sarig
0347365edc
chrony: Add nts support through PACKAGECONFIG
Chronyd is supporting NTS (network time security) protocol, however, to
build the application with this support, it require having gnutls at
build time.
This commit adds a PACKAGECONFIG line, allowing users to control whether
the supporting application will have nts or not.

Signed-off-by: Omri Sarig <omri.sarig13@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-19 09:17:26 -07:00
Yi Zhao
2fb2ee3c7e
civetweb: enable packageconfig cpp
Enable packageconfig cpp required by minifi-cpp.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-17 14:01:15 -07:00
Yoann Congal
26dab6c956
reproducibility: Mark phytool{,-dbg} as known non-reproducible
From AB run:
https://autobuilder.yoctoproject.org/valkyrie/#/builders/87/builds/36/steps/28/logs/stdio

Diffoscope output is at:
https://valkyrie.yocto.io/pub/repro-fail-openembedded/meta-networking/oe-reproducible-20250315-xxydi74w/packages/diff-html/

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-15 23:05:31 -07:00
Dmitriy Makhnin
ae1133e174
waf-samba: using python variable from python3native.bbclass
Waf-samba.bbclass inherits python3native.bbclass
which has the variable PYTHON="${STAGING_BINDIR_NATIVE}/python3-native/python3".
This allows this variable to be used in do_compile instead of python3.

Signed-off-by: Dmitry Makhnin <d.makhnin@yadro.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-13 22:09:36 -07:00
Alex Kiernan
972afd4c72
mdns: Upgrade 2559.60.39.0.1 -> 2559.80.8
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-13 22:09:35 -07:00
Khem Raj
d3b2d1f56a
keepalived: Make keepalived cross compile reproducible
This should help with not emitting configure commandline into
binaries, these may contain absolute build paths

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-12 08:15:43 -07:00
Yoann Congal
d7cef19fcc
reproducibility: update known non-reproducible packages
Those reproducible failures are from AB runs:
* https://autobuilder.yoctoproject.org/valkyrie/#/builders/87/builds/34
* https://autobuilder.yoctoproject.org/valkyrie/#/builders/87/builds/35

https://valkyrie.yocto.io/pub/repro-fail-openembedded/

NB: diffoscope output can be found in
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-11 19:34:55 -07:00
Wang Mingyu
c08b0046f4
udpcast: upgrade 20230924 -> 20250223
0001-include-stddef.h-for-ptrdiff_t.patch
refreshed for 20250223

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-11 17:17:24 -07:00
Sofiane HAMAM
06a5e82a83 Wolfssl: add ptest
Add ptest for Wolfssl package.
Set IMAGE_ROOTFS_EXTRA_SPACE:virtclass-mcextend-wolfssl to 700M
enough to avoid a "No space left on device".

BEGIN: /usr/lib/wolfssl/ptest
Wolfssl ptest logs are stored in /tmp/wolfss_temp.qvuQ9h/ptest.log
Test script returned: 0
unit_test: Success for all configured tests.
PASS: Wolfssl
DURATION: 7
END: /usr/lib/wolfssl/ptest

Signed-off-by: Sofiane HAMAM <sofiane.hamam@smile.fr>
Reviewed-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-06 06:58:00 -08:00
Johannes Kauffmann
767f429e81 open62541: split schema defs into separate package
The OPC UA schema definitions and nodeset descriptions make up 90MB of
the "normal" package and contain mostly text files not needed during
runtime.

Split them into a -tools package. The "normal" package size is reduced
drastically.

Signed-off-by: Johannes Kauffmann <johanneskauffmann@hotmail.com>
2025-03-06 11:16:49 +01:00
Johannes Kauffmann
d50733572e open62541: make generated namespace configurable
The default is still the FULL namespace, but it is now possible to
switch to REDUCED.

With the REDUCED namespace, the binary shrinks about 80% in size, from
4.5MB to ~800kB.

Signed-off-by: Johannes Kauffmann <johanneskauffmann@hotmail.com>
2025-03-06 11:16:05 +01:00
Johannes Kauffmann
05d68e53b1 open62541: remove amalgamation PACKAGECONFIG
open62541@9e0b766fbba73be8d703b6ccbfdeec5bfd200b48 made it an error to
install the package while the amalgamation option is enabled.

On the 1.3 branch, this is not yet an issue. However, it is clear that
this option is not deemed suitable for building open62541 in the context
of a distribution.

Thus, remove the PACKAGECONFIG outright, before someone depends on the
different (incompatible) header includes required by the amalgamation
option.

Signed-off-by: Johannes Kauffmann <johanneskauffmann@hotmail.com>
2025-03-06 11:16:05 +01:00
Johannes Kauffmann
33472c27b4 open62541: update to v1.3.15
Signed-off-by: Johannes Kauffmann <johanneskauffmann@hotmail.com>
2025-03-06 11:16:05 +01:00
Dmitry Baryshkov
caa27aaef6
netperf: fix build failure due to autotools.bbclass change
Recent change to autotools.bbclass broke netperf as it can not now find
proper macros. Remove old workaround and add a proper patch to utilize
ACLOCAL_AMFLAGS option.

Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-27 13:10:01 -08:00
Ross Burton
aa8db6600c lftp: remove obsolete acpaths
As of "autotools: don't try and find in-tree macros" in core, acpaths is
no longer used.

Also remove an obsolete FILES:PN-dbg as the debug package is packaged
automatically.

Signed-off-by: Ross Burton <ross.burton@arm.com>
2025-02-27 20:28:17 +00:00
Ross Burton
76a756989a
pureftp: fix autoreconf
autoreconf needs to be told where to find macros as the Makefile.am does
not do this.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-26 12:43:32 -08:00
Ross Burton
3a2439edb5
udpcast: add missing manpages PACKAGECONFIG
The manpages.bbclass adds the 'manpages' PACKAGECONFIG but this isn't
defined:

    ERROR: QA Issue: udpcast: invalid PACKAGECONFIG: manpages [invalid-packageconfig]

There is not an option to disable the manpages, so add a stub
PACKAGECONFIG to silence this error.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-26 12:43:31 -08:00
Ross Burton
aaa88e94d9
ifenslave: remove manpages class
This recipe doesn't ship any manpages since 2.10, so remove the manpage
support.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-26 12:43:31 -08:00
Wang Mingyu
bd7b50cc55
openfortivpn: upgrade 1.22.1 -> 1.23.1
Changelog:
===========
- fix a few coverity warnings
- Support older mac0S versions that lack vdprintf()
- Patch certificate login error for FortiOS 7.4.4
- Clear OTP after run
- Support SAML login authentication

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-26 08:30:51 -08:00
Wang Mingyu
66e7bd262f
memcached: upgrade 1.6.36 -> 1.6.37
Changelog:
- proto: -X disables stats detail as well

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-26 08:30:51 -08:00
Wang Mingyu
fe5ab4a23b
libtevent: upgrade 0.16.1 -> 0.16.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-26 08:30:51 -08:00
Wang Mingyu
bb2a0984e0
libtdb: upgrade 1.4.12 -> 1.4.13
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-26 08:30:51 -08:00
Wang Mingyu
54b42f4ee9
libtalloc: upgrade 2.4.2 -> 2.4.3
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-26 08:30:50 -08:00
Wang Mingyu
4283bca610
iscsi-initiator-utils: upgrade 2.1.10 -> 2.1.11
Changelog:
==============
- iscsid: Rate limit session reopen log messages
- Preparing for version 2.1.10
- Fix bug where abort_tmo read failures were ignored.
- Fix gcc issues
- Change a discovery function to void return type
- Fix firmware targets startup to always be "onboot"
- More testing cleanup, and fix dprint test usage
- Improve iscsiadm command line parsing messages
- grammar nitpicks
- Bugfix read specific sysfs value "off" of session attribute
- Fix a typo in test/README
- Make it visible when memory allocation failure
- improve the comments in idbm_lock()
- iscsid: Fix hang during login with scan=manual
- Fix memory leak in iscsi_check_session_use_count
- IPv6 support for iBFT iSCSI boot
- fix 4 issues which are finded when building with clang 17

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-26 08:30:50 -08:00
Yi Zhao
09a888062b
postfix: upgrade 3.8.9 -> 3.10.1
ChangeLog:
https://www.postfix.org/announcements/postfix-3.10.0.html
https://www.postfix.org/announcements/postfix-3.10.1.html

Refresh local patches.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-25 04:50:39 -08:00
Yi Zhao
9e656e3ac2
postfix: upgrade 3.8.6 -> 3.8.9
ChangeLog:
http://ftp.porcupine.org/mirrors/postfix-release/official/postfix-3.8.9.HISTORY

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-25 04:50:38 -08:00
Yi Zhao
ff0b697211
radvd: upgrade 2.19 -> 2.20
ChangeLog:
https://github.com/radvd-project/radvd/blob/v2.20/CHANGES

* Drop backport patch
* Add dependency libbsd
* Update rdavd.service
* Install systemd service file and sysvinit script separately through
  conditional statements.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-24 08:18:49 -08:00
Yi Zhao
8a29c46188
recipes: drop ld-is-gold support
The gold linker support has been dropped in oe-core[1]. Remove related
special cases and patches in recipes.

[1] https://git.openembedded.org/openembedded-core/commit/?id=a4addb9ab63011e7c604fc5daff95559e7d214e7

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-23 17:36:08 -08:00
Gyorgy Sarvari
7e576c0409
wireshark: fix SRC_URI
The original SRC_URI's content seems to be deleted regurarly,
when a new version is published, making the previous version
unavailable.

The new SRC_URI ("all-versions" folder) seems to be more
stable, the previous versions of Wireshark are not deleted from
there.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-23 09:56:37 -08:00
Jan Vermaete
ed5e4031a4
wireshark: version bump 4.2.10 -> 4.2.11
The 4.2.10 was not longer available at the original SRC_URI.
At the new SRC_URI all version of the wireshark releases are available.

Signed-off-by: Jan Vermaete <jan.vermaete@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-22 08:58:27 -08:00
Wang Mingyu
aadc2ac9dc
geoip: fix do_fetch error
Change the SRC_URI to the correct value due to the following error:
ERROR: geoip-1.6.12-r0 do_fetch: Bitbake Fetcher Error: FetchError('Unable to fetch URL from any source.', 'http://sources.openembedded.org/GeoIP.dat.20181205.gz;apply=no;name=GeoIP-dat;')

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-20 08:32:46 -08:00
Khem Raj
29897344f7
mctp: Fix build with latest musl
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-17 21:35:47 -08:00
Thu Nguyen
9b522de0f9
mctp: srcrev bump 9042704131d..dd944cf5b5a
Additional commit included in this version bump are below.

Jeremy Kerr (9):
  + tests: Add tests for dbus Network1 interface
  + tests: add System.del_address
  + tests: notify netlink socket on system link/neighbour/address/route
    changes
  + tests: Add NLSocket._create_msg
  + tests: rename NLSocket._send_resp to _send_msg
  + mctpd: fix error message and code for missing linkmap entry case
  + mctpd: remove unnecessary debug output
  + CHANGELOG: Add mctp-bench change

Thu Nguyen (1):
  + Support `LocalEIDs` property in `au.com.codeconstruct.MCTP.Network1`

Timon Liu (1):
  + mctp-bench: Add a utility tool to send/receive messages and display
    throughput

Signed-off-by: Thu Nguyen <thu@os.amperecomputing.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-17 10:16:24 -08:00
Christos Gavros
bb138b9f6b
corosync: reproducibility issue
Corosync is not reproducible due to change of value
in NETSNMP_SYS_CONTACT which is set in net-snmp:
NETSNMP_SYS_CONTACT = "$ME@$LOC"
$ME = whoami
$LOC assigned domain name from /etc/resolv.conf

Use build in'--with-sys-contact' to overwrite it

https://autobuilder.yoctoproject.org/valkyrie/#/builders/87/builds/30/steps/28/logs/stdio

CC: Yoann Congal <yoann.congal@smile.fr>
CC: Randy MacLeod <randy.macleod@windriver.com>
Signed-off-by: Christos Gavros <gavrosc@yahoo.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-13 20:54:52 -08:00
Wang Mingyu
c400aca52a
rp-pppoe: update SRC_URI
Upstream repository url changed.

Fixes unsuccessful fetch warning.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-12 23:45:35 -08:00
Wang Mingyu
1587704e45
wireshark: upgrade 4.2.9 -> 4.2.10
releasenote:
https://www.wireshark.org/docs/relnotes/wireshark-4.2.10.html

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-12 09:17:19 -08:00
Jose Quaresma
7e8b47ccc6
networkmanager: remove nmtui from EXTRA_OEMESON
In [1] nmtui PACKAGECONFIG was introduced but they are still be
explicit in EXTRA_OEMESON and so remove the last.

[1] https://git.openembedded.org/meta-openembedded/commit/?id=c331f59e42e9c0bda9d47d0365e6c276746fc81d

Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-12 09:16:09 -08:00
Wang Mingyu
579f5c5f2e
memcached: upgrade 1.6.34 -> 1.6.36
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-10 08:45:37 -08:00
Wang Mingyu
7d5d9acb2a
libdaq: upgrade 3.0.17 -> 3.0.18
Changelog:
 api: added a new dioctl for snort latency data

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-10 08:45:36 -08:00
Hongxu Jia
f02e99377c
net-snmp: correct typo on RDEPENDS
Move `append' to the behind of RDEPENDS:${PN}-libs

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-08 20:43:45 -08:00
Alex Kiernan
0ad477bb92
mdns: Separate out mdns-libnss-mdns package
Extract mdns-libnss-mdns from the main package so we can mark it as an
RPROVIDE for libnss-mdns (matching avahi-libnss-mdns) and then
RRECOMMEND this when building with glibc.

Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-05 13:56:33 -08:00
Alex Kiernan
f97bc097f4
mdns: Correct RPROVIDE to match libdns-sd in avahi
We want to select libdns_sd.so from either Avahi or mDNSResponder, make
the RPROVIDE match the one in Avahi.

Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-05 13:56:33 -08:00
Alex Kiernan
4bf0af485f
mdns: Upgrade 2559.40.32 -> 2559.60.39.0.1
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-05 13:56:33 -08:00
Gyorgy Sarvari
418ce47f92
ndpi: correct LICENSE value
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-01 08:59:27 -08:00
Gyorgy Sarvari
b5184644d4
open62541: fix qa error with encryption-openssl PACKAGECONFIG
In case "encryption-openssl" PACKAGECONFIG is enabled, do_package_qa fails:

ERROR: open62541-1.3.8-r0 do_package_qa: QA Issue: File /usr/lib/cmake/open62541/open62541Targets.cmake in package open62541-dev contains reference to TMPDIR [buildpaths]

Fix it by changing the value of RECIPE_SYSROOT to CMAKE_SYSROOT variable,
so the qa check passes, and other CMake projects should be still able to find the
CMake package provided by this recipe.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-01 08:59:27 -08:00
Gyorgy Sarvari
6a8d205e5c
znc: fix LICENSE value, clean up SRC_URI
1. Set the correct LICENSE value

2. Csocket is a submodule of the main znc project. Instead of
cloning it separately in a subfolder, just let the gitsm fetcher
to fetch the correct revisions, at the correct place.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-01 08:59:27 -08:00
Richard Purdie
bd6a1bb278
recipes: Fix variable assignment whitespace
Recipes are much more readable with whitespace around the assignment operators.
Fix various assignments in meta-openembedded recipes to show this is definitely
the preferred formatting.

This fixes recipes with larger numbers of issues but there are just under 100
other references left to fix.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-31 10:34:03 -08:00
Christos Gavros
80f9812ab2
net-snmp-native: dependency with libpci-native
Building of net-snmp-native aborted due to
missing dependency with libpci-native.
Fixed by keeping the dependency on for
target recipe and removing it for native

CC: Yoann Congal <yoann.congal@smile.fr>
CC: Randy MacLeod <randy.macleod@windriver.com>
Signed-off-by: Christos Gavros <gavrosc@yahoo.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-29 17:43:03 -08:00
Gyorgy Sarvari
924b1b1cb1
civetweb: fix pathes in cmake file
1. The do_install:append() deleted the TMPDIR from the cmake file,
however that left two absolute pathes in the file: /usr/lib/libssl.so
and /usr/lib/libcrypto.so. In case another project is trying to link
to civetweb-server with cmake, it fails with the following error:

ninja: error: '/usr/lib/libssl.so', needed by 'examples/prometheus/prometheus_example', missing and no known rule to make it

Instead of only deleting the TMPDIR, change it to ${CMAKE_SYSROOT} -
a variable set by cmake.bbclass. This allows other projects to find
the required interfacing libraries successfully.

2. When linking to civetweb-server from another project using cmake,
the cmake file verifies if the /usr/bin/civetweb binary exists. When using
the class-target package, this file is not included in the sysroot during
build-time, so this check fails with the following error:

 CMake Error at ${RECIPE_SYSROOT}/usr/lib/cmake/civetweb/civetweb-targets.cmake:97 (message):
   The imported target "civetweb::server" references the file

      "${RECIPE_SYSROOT}/usr/bin/civetweb"

   but this file does not exist.  Possible reasons include:

To avoid this error, this check is deleted for class-target.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-25 09:28:58 -08:00
Ross Burton
c941e231ad
ntp: set CONFIG_SITE in do_compile
Recent changes in to the autotools class in core means that it no longer
sets CONFIG_SITE for compile tasks.  However, ntp decides to reconfigure
itself mid-build, so the CONFIG_SITE values are lost.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-24 18:27:39 -08:00
Ross Burton
6ff48b6461
ncftp: update for autoconf changes in core
ACLOCALEXTRAPATH is no longer used, so pass the required -I via
EXTRA_AUTORECONF.

Also explicitly disable aclocal as the aclocal is hand-maintained.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-24 18:27:39 -08:00
Khem Raj
3de33656f9
ncftp: Replace references to ACLOCALEXTRAPATH
- ACLOCALEXTRAPATH is gone in core with commit 878e1517d4890b31332a506ce903d57e1d7dff87
- Add patches to fix build with latest clang and gcc
- Drop disabling warnings as the fixes above take care of the problem

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-24 18:27:33 -08:00
Wang Mingyu
75a6e4a617
openvpn: upgrade 2.6.12 -> 2.6.13
Changelog:
===========
- Refuse clients if username or password is longer than USER_PASS_LEN
- Improve peer fingerprint documentation
- console_systemd: remove the timeout when using 'systemd-ask-password'
- Fix missing spaces in various messages
- GHA: Update macOS runners
- GHA: Simplify macOS builds
- Various typo fixes
- forward: Fix potential unaligned access in drop_if_recursive_routing
- send uname() release as IV_PLAT_VER= on non-windows versions
- preparing release 2.6.13
- Route: remove incorrect routes on exit
- Use a more robust way to get dco-win version
- Fix check_addr_clash argument order
- Add calls to nvlist_destroy to avoid leaks
- proxy.c: Clear sensitive data after use
- Protect cached username, password and token on client
- Fix more of uninitialized struct user_pass local vars
- Fix IPv6 in port-share journal
- Fix port-share journal doc

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-24 18:20:01 -08:00
Peter Marko
20e3583f56 proftpd: define suffix for CVE version comparison
Similarly to old openssl versions, proftpd has patch releases with
characters instead of numbers.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-15 12:04:53 -08:00
Peter Marko
7fce6b033b proftpd: upgrade 1.3.8b -> 1.3.8c
See https://github.com/proftpd/proftpd/blob/1.3.8/RELEASE_NOTES

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-15 12:04:53 -08:00
Peter Marko
92fe348b76 proftpd: define UPSTREAM_CHECK_GITTAGREGEX
Patch releases have character after version
devtool upgrade would currently downgrade 1.3.8b -> 1.3.8
This will make it upgrade 1.3.8b -> 1.3.8c

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-15 12:04:53 -08:00
Wang Mingyu
52d727c6f7
wpan-tools: upgrade 0.9 -> 0.10
License-Update: Delete unnecessary blank lines

Changelog:
 https://github.com/linux-wpan/wpan-tools/releases/tag/wpan-tools-0.10

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-14 08:52:07 -08:00
Wang Mingyu
c9ceae2098
lldpd: upgrade 1.0.18 -> 1.0.19
Changelog:
=========
- Support of both Apple Silicon and Intel for macOS package.
- Add cvlan/svlan/tpmr capabilities.
- Disable LLDP in firmware for Intel X7xx cards on FreeBSD.
- Add lldpctl_watch_sync_unblock to liblldpctl.
- Add C++ wrapper for lldpctl.
- Fix AppArmor policy for /run/lldpd/lldpd.socket.lock.
- Do not query stats for a down interface on Linux.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-14 08:52:05 -08:00
Wang Mingyu
a67b258628
chrony: upgrade 4.5 -> 4.6.1
Changelog:
============
Enhancements
------------
* Add ntsaeads directive to enable only selected AEAD algorithms for NTS
* Add activate option to local directive to set activation threshold
* Add ipv4 and ipv6 options to server/pool/peer directive
* Add kod option to ratelimit directive for server KoD RATE support
* Add leapseclist directive to read NIST/IERS leap-seconds.list file
* Add ptpdomain directive to set PTP domain for NTP over PTP
* Allow disabling pidfile
* Improve copy server option to accept unsynchronised status instantly
* Log one selection failure on start
* Add offset command to modify source offset correction
* Add timestamp sources to ntpdata report

Workarounds
-----------
* Negotiate use of compliant NTS keys with AES-128-GCM-SIV AEAD algorithm
  (by default the keys are generated differently than in RFC 8915 for
  compatibility with chrony server and client versions 4.4, 4.5, and 4.6)
* Switch to compliant NTS keys if first response from server is NTS NAK

Bug fixes
---------
* Fix crash on sources reload during initstepslew or RTC initialisation
* Fix source refreshment to not repeat failed name resolving attempts

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-14 08:52:03 -08:00
Khem Raj
a489d2c9c9
vsomeip: Skip building, needs porting to boost >= 1.87
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-13 10:10:21 -08:00
Khem Raj
9cccd315bf
vsomeip: Upgrade to 3.5.3
Drop backports and not needed patches
Add local SRC_URI For googletests

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-13 10:10:20 -08:00
Wang Mingyu
ef3aa56f79
fping: upgrade 5.2 -> 5.3
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-07 09:33:14 -08:00
Jiaying Song
8ffe8112f7
chrony: fix do_fetch error
Change the SRC_URI to the correct value due to the following error:
WARNING: chrony-4.5-r0.wr2401 do_fetch: Failed to fetch URL https://download.tuxfamily.org/chrony/chrony-4.5.tar.gz, attempting MIRRORS if available

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-02 07:38:58 -08:00
Yi Zhao
3f7a140ed6
snort3: upgrade 3.3.4.0 -> 3.6.1.0
https://github.com/snort3/snort3/releases/tag/3.6.1.0
https://github.com/snort3/snort3/releases/tag/3.6.0.0
https://github.com/snort3/snort3/releases/tag/3.5.2.0
https://github.com/snort3/snort3/releases/tag/3.5.1.0
https://github.com/snort3/snort3/releases/tag/3.5.0.0
https://github.com/snort3/snort3/releases/tag/3.3.7.0
https://github.com/snort3/snort3/releases/tag/3.3.6.0
https://github.com/snort3/snort3/releases/tag/3.3.5.0

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-01 19:02:18 -08:00
Yi Zhao
07a8a11d94
frr: upgrade 10.2 -> 10.2.1
ChangeLog:
5f0beaa0fd

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-01 19:02:18 -08:00
Wang Mingyu
84cb88feb3
memcached: upgrade 1.6.33 -> 1.6.34
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-30 09:08:04 -08:00
Peter Marko
e44f3251b5
spice: set CVE-2016-2150 status to fixed
Debian has fixed this CVE with [1].
That patch is taken from [2].

.../tmp/work/core2-64-poky-linux/spice/0.15.2/git$ git describe 69628ea13
v0.13.1-190-g69628ea1
.../tmp/work/core2-64-poky-linux/spice/0.15.2/git$ git tag --contains 69628ea13
v0.13.2

[1] https://sources.debian.org/patches/spice/0.12.5-1%2Bdeb8u5/CVE-2016-2150/0002-improve-primary-surface-parameter-checks.patch/
[2] 69628ea137

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-27 09:21:42 -08:00
Yi Zhao
30580f909a
strongswan: upgrade 5.9.14 -> 6.0.0
ChangeLog:
https://github.com/strongswan/strongswan/releases/tag/6.0.0

The aes, curve25519, des, fips-prf, gmp, hmac, md5, pkcs12, rc2, sha1,
sha2 plugins are not enabled by default[1]. Remove these plugins from
RDEPENDS and add PACKAGECONFIG for them.

[1] https://github.com/strongswan/strongswan/blob/6.0.0/NEWS#L38

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-26 11:12:37 -08:00
Yi Zhao
a3c4d70afb
networkmanager: upgrade 1.48.10 -> 1.50.0
ChangeLog:
https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/blob/1.50.0/NEWS

Drop 0001-libnm-systemd-core-Disable-sd_dhcp6_client_set_duid_.patch as
it has been merged upstream.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-26 11:12:37 -08:00
Yi Zhao
44c18d1fb6
frr: upgrade 10.1.1 -> 10.2
ChangeLog:
https://github.com/FRRouting/frr/releases/tag/frr-10.2

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-26 11:12:37 -08:00
Peter Marko
46f22a10be
weechat: upgrade 4.0.4 -> 4.5.0
Solves CVE-2024-46613

Update dependencies:
- remove openssl and icu
- add cjson and gettext-native

Remove patch to find gcrypt which is no longer needed.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-20 19:47:57 -08:00
Peter Marko
2d3988f7b6
wireshark: upgrade 4.2.8 -> 4.2.9
Solves CVE-2024-9781

Release notes:
https://www.wireshark.org/docs/relnotes/wireshark-4.2.7.html
https://www.wireshark.org/docs/relnotes/wireshark-4.2.8.html

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-20 19:47:57 -08:00
Peter Marko
607a446491
libmemcached: ignore CVE-2023-27478
Per [1] this is fixed by [2].
The commit message says that it is reverting feature added in:

$ git tag --no-contains d7a0084 | grep 1.0.18
1.0.18

This recipe is for the original memcached which is unmaintained now.
Hence the ignore instead of upgrade.

[1] https://nvd.nist.gov/vuln/detail/CVE-2023-27478
[2] https://github.com/awesomized/libmemcached/commit/48dcc61a

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-20 19:47:56 -08:00
Peter Marko
cdacbdf075
libmemcached: merge inc into bb
After removing old libmemcached recipe version, these is no reasons
anymore to have this split.
The memcached resurrected project uses cmake and different urls.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-20 19:47:56 -08:00
Peter Marko
7d3c32d609
libmemcached: remove recipe for version 1.0.7
This no longer compiles with latest toolchains.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-20 19:47:56 -08:00
Peter Marko
fdbec64d99
memcached: upgrade 1.6.17 -> 1.6.33
Solves CVE-2023-46852 and CVE-2023-46853.

Upgrade done via "devtool upgrade".

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-20 19:47:56 -08:00
Peter Marko
65cc05d6ee
memcached: add UPSTREAM_CHECK_URI
Download URL is not listable so devtool upgrade fails.
Using homepage works as it contains link to latest release,

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-20 19:47:55 -08:00
Peter Marko
889ccce684
memcached: ignore disputed CVE-2022-26635
Per [1] this is a problem of applications using memcached inproperly.

This should not be a CVE against php-memcached, but for whatever
software the issue was actually found in. php-memcached and
libmemcached provide a VERIFY_KEY flag if they're too lazy to
filter untrusted user input.

[1] https://github.com/php-memcached-dev/php-memcached/issues/519

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-19 13:00:33 -08:00
Peter Marko
7e17f8cec0
spice-gtk: mark CVE-2012-4425 as fixed
It is fixed by [1] since 0.15.3.
NVD tracks this CVE as version-less.

[1] https://cgit.freedesktop.org/spice/spice-gtk/commit/?id=efbf867bb88845d5edf839550b54494b1bb752b9

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-19 13:00:33 -08:00
Peter Marko
073e845274
spice: ignore CVE-2016-0749
NVD tracks this as version-less CVE for spice.
It was fixed by [1] and [2] included in 0.13.2.

[1] 6b32af3e17
[2] 359ac42a7a

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-19 13:00:32 -08:00
Wang Mingyu
c38b70a70e
stunnel: upgrade 5.73 -> 5.74
fix-openssl-no-des.patch
refreshed for 5.74

* Bugfixes
  - Fixed a stapling cache deallocation crash.
  - Fixed "redirect" with protocol negotiation.
* Features
  - "protocolHost" support for "socks" protocol clients.
  - More detailed logs in OpenSSL 3.0 or later.

Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-19 09:41:25 -08:00
Chanh Nguyen
31b6cf91f2
mctp: upgrade 2.0 -> 2.1
Signed-off-by: Chanh Nguyen <chanh@os.amperecomputing.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-16 08:42:00 -08:00
Benjamin Bouvier
d03002f19c
bridge-utils: add CVE_PRODUCT
Add exact CPE name (from NVD database) in CVE_PRODUCT in order to ensure
CVE filtering and not be disturb by futur potential false-positive CVEs.

Signed-off-by: Benjamin Bouvier <benjamin.bouvier@ekinops.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-13 07:54:45 -08:00
Peter Marko
03a1b56bc7
proftpd: set status of CVE-2001-0027
This ancient CVE [1] is unversioned ("*") in NVD DB.
"mod_sqlpw module in ProFTPD does not reset a cached password..."

Looking at history and changelog, the module was removed [2] around
the time when this CVE was published, likely as reaction to this CVE.
"mod_sqlpw.c, mod_mysql.c and mod_pgsql.c have been REMOVED from the
distribution. They are currently unmaintained and have numerous bugs."

Note: It was later re-introduced as mod_sql when it got fixed under
new maintainer.

[1] https://nvd.nist.gov/vuln/detail/CVE-2001-0027
[2] https://github.com/proftpd/proftpd/blob/v1.3.8b/NEWS#L3362

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-10 13:43:54 -08:00
Martin Jansa
b0ceff0204
openhpi: explicitly disable ov-rest plugin
* since elfutils upgrade to 0.192 in:
  https://git.openembedded.org/openembedded-core/commit/?id=1d6ac3c811798732e6addc798656bbe104661d77
  json-c is detected in RSS and ov-rest plugin gets enabled, but fails to build:

../../../openhpi-3.8.0/plugins/ov_rest/ov_rest_event.c:78:10: fatal error: amqp_ssl_socket.h: No such file or directory
   78 | #include <amqp_ssl_socket.h>
      |          ^~~~~~~~~~~~~~~~~~~
compilation terminated.

../../../openhpi-3.8.0/plugins/ov_rest/ov_rest_re_discover.c:707:23: error: initialization of 'SaErrorT' {aka 'int'} from 'void *' makes integer from pointer without a cast [-Wint-conversion]
  707 |         SaErrorT rv = NULL;
      |                       ^~~~

* keep it explicitly disabled as it was disabled before
* add rabbitmq-c dependency for the first issue, the 2nd issue could be
  worked around by:
  # openhpi-3.8.0/plugins/ov_rest/ov_rest_re_discover.c:707:23: error: initialization of 'SaErrorT' {aka 'int'} from 'void *' makes integer from pointer without a cast [-Wint-conversion]
  CFLAGS += "-Wno-error=int-conversion"
  or better fixed properly by someone actually using this recipe

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-07 12:14:02 -08:00
deepan.shivap
dac624de3e
ot-br-posix: Fix Musl build error
Mistakenly removed musl-fixes.patch in previous commit.

update & Include 0001-Musl-build-fix.patch based on latest upstream of ot-br-posix

Remove CXXFLAGS:append:libc-musl:toolchain-clang = " -Wno-error=sign-compare
-Wno-error=unused-but-set-variable", as issue is not reproducible with
current SRCREV of ot-br-posix.

Signed-off-by: deepan.shivap <deepan.shivap@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-03 09:44:36 -08:00
Ghislain Mangé
97318e27eb
wireshark: use inherit_defer for conditional cases
Conditionnal inherit may be missed when PACKAGECONFIG qt5 is activated
after this inherit, eg in .bbappend. see patch [0]

[0]: https://lists.openembedded.org/g/bitbake-devel/message/16815

Reviewed-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Ghislain Mangé <ghislain.mange@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-03 09:44:31 -08:00
Ghislain Mangé
cc83b9ac17
wireshark: fix Qt5/6 configuration
Wireshark is built with Qt6 by default when Qt is enabled.
Forcibly disable Qt6 in our Qt5 PACKAGECONFIG

Github issue: https://github.com/openembedded/meta-openembedded/issues/844

Reported-by: Ludovic Jozeau <ludovic.jozeau@smile.fr>
Reviewed-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Ghislain Mangé <ghislain.mange@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-03 09:44:31 -08:00
deepan.shivap
168634c5e6
ot-br-posix: Fix GCC-14 build error
GCC 14 compiler uses -fvisibility-inlines-hidden by default and
it creates visibility conflicts.

Add 0001-fix-build-on-GCC-14-for-yocto.patch file to resolve build error.

Remove musl-fixes.patch, not applicable for latest Upstream.

Update SRCREV to latest Upstream.

Signed-off-by: deepan.shivap <deepan.shivap@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-11-29 07:56:56 -08:00
Marcin Nowakowski
262bab29e5
nbdkit: Bump to the newest stable repo
Recently, the official nbdkit repo has been changed:
from https://github.com/libguestfs/nbdkit
into https://gitlab.com/nbdkit/nbdkit

Additionally, the newest stable tag version is v1.40.4.
The patch used with version 1.33.11 is also copied
and modified to support the latest changes.

The version 1.33.11 is not removed for reference purposes.

It was tested with one of openbmc images.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-11-27 10:00:21 -08:00
Alex Kiernan
e008a7b6f0
mdns: Upgrade 2559.1.1 -> 2559.40.32
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-11-27 09:36:51 -08:00
Khem Raj
f1e8d8a510
meta: Add SECURITY.md file to all layers
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-11-23 09:00:14 -08:00
Khem Raj
e0c85bdc33
dovecot: Upgrade to 2.3.21.1
Fix build with icu-76.x while here

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-11-23 09:00:14 -08:00
Khem Raj
e8919e49d4
keepalived: Backport fix to build with musl
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-11-22 11:02:14 -08:00
Benjamin Bouvier
112120131d
tcpdump: add CVE_PRODUCT
Add exact CPE name in CVE_PRODUCT.

Signed-off-by: Benjamin Bouvier <benjamin.bouvier@ekinops.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-11-21 21:42:35 -08:00
Benjamin Bouvier
5efb5b44e8
net-snmp: add CVE_PRODUCT
Add exact CPE name in CVE_PRODUCT.

Signed-off-by: Benjamin Bouvier <benjamin.bouvier@ekinops.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-11-21 21:42:35 -08:00
Khem Raj
b90d48a1c1
keepalived: Upgrade to 2.3.2
Changes are
https://www.keepalived.org/release-notes/Release-2.3.0.html
https://www.keepalived.org/release-notes/Release-2.3.1.html
https://www.keepalived.org/release-notes/Release-2.3.2.html

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-11-19 23:57:59 -08:00
Jiaying Song
bea74f838b
openvpn: add ptest support
All test cases PASS.
Add openvpn to PTESTS_SLOW because test duration longer than 30s Below is parts of the run log:
[==========] xkey provider tests: Running 3 test(s).
[ RUN      ] xkey_provider_test_fetch
[       OK ] xkey_provider_test_fetch
[ RUN      ] xkey_provider_test_mgmt_sign_cb
[       OK ] xkey_provider_test_mgmt_sign_cb
[ RUN      ] xkey_provider_test_generic_sign_cb
[       OK ] xkey_provider_test_generic_sign_cb
[==========] xkey provider tests: 3 test(s) run.
[  PASSED  ] 3 test(s).
PASS: provider_testdriver

The files t_client.sh.in and t_cltsrv.sh were not added because they
require specific environment configuration files. It is recommended that
users configure these based on their environment before testing.

Since the recipe enables iproute2, the condition for t_net.sh based on
HAVE_SITNL is not met, so t_net.sh will not be included in the build.

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-11-19 22:26:45 -08:00
Ross Burton
f2c506e159
blueman: inherit cython class
Use the new cython class to avoid duplicated fixup code to remove build
paths.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-11-19 16:59:07 -08:00
Peter Kjellerstedt
7421816de9
ebtables: Remove the dependecy on bash
Rewrite ebtables-legacy-save to avoid using bashisms.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-11-19 16:59:05 -08:00
Peter Marko
508a2e6b94
squid: handle CVE-2024-45802
According to [1] the ESI implementation in squid feature is vulnerable
without any fix available.

NVD says it's fixed in 6.10, however the change in this release only
disables ESI by default (which we always did via PACKAGECONFIG).
This means CVE report would say Patched even if the vulnerability is
still present if someone adapts squid PACKAGECONFIG.

Commit in master branch related to this CVE is [2].
Title is "Remove Edge Side Include (ESI) protocol" and it's also what it
does. So there will never be a fix for these ESI vulnerabilities.
Based on this, remove vulnerable ESI PACKAGECONFIG already now.

[1] https://github.com/squid-cache/squid/security/advisories/GHSA-f975-v7qw-q7hj
[2] 5eb89ef3d8

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-11-19 13:50:56 -08:00
Peter Marko
928ef34ead
squid: upgrade 6.10 -> 6.12
License-Update: copyright year updated

Add patch to fix new build failure from release tarball.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-11-19 13:50:56 -08:00
Wang Mingyu
006af9e741
mosquitto: upgrade 2.0.19 -> 2.0.20
Changelog:
==========
Broker:
- Fix QoS 1 / QoS 2 publish incorrectly returning "no subscribers".
  Closes #3128.
- Open files with appropriate access on Windows.
- Don't allow invalid response topic values.
- Fix some strict protocol compliance issues.

Client library:
- Fix cmake build on OS X.

Build:
- Fix build on NetBSD

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-11-05 22:45:17 -08:00
Wang Mingyu
e04dac483c
libdaq: upgrade 3.0.16 -> 3.0.17
Changelog:
==========
- daq_netmap: Fix build on Linux with non-system headers
- example: support snap encapsulation

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-11-05 22:45:16 -08:00
Martin Jansa
dbf103d4cd
unbound: update to latest to fix occasional build failure
buildhistory-diff shows few new files in testdata:

packages/core2-64-oe-linux/unbound/unbound-ptest: FILELIST: added "
  /usr/lib/unbound/ptest/tests/testdata/rpz_val_block.rpl
  /usr/lib/unbound/ptest/tests/testdata/serve_expired_ttl_reset.rpl
  /usr/lib/unbound/ptest/tests/testdata/val_negcache_ttl_prefetch.rpl
  /usr/lib/unbound/ptest/tests/testdata/val_negcache_ttl.rpl
  /usr/lib/unbound/ptest/tests/testdata/iter_max_global_quota.rpl
  /usr/lib/unbound/ptest/tests/testdata/iter_unverified_glue.rpl
  /usr/lib/unbound/ptest/tests/testdata/serve_expired_val_bogus.rpl
  /usr/lib/unbound/ptest/tests/testdata/iter_unverified_glue_fallback.rpl
  /usr/lib/unbound/ptest/tests/testdata/serve_expired_client_timeout_val_bogus.rpl
  /usr/lib/unbound/ptest/tests/testdata/serve_expired_client_timeout_val_insecure_delegation.rpl
  /usr/lib/unbound/ptest/tests/testdata/dns64_prefetch_cache.rpl"

wasn't tested in runtime, I don't use it, I just wanted to get rid of
random build failure from world builds (happens at least since kirkstone
which has 1.15.0).

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-11-05 09:42:50 -08:00
Alex Kiernan
cedfa1be3a
mdns: Upgrade 2200.140.11 -> 2559.1.1
Add local fixes for:

* definition for MAX()
* missing `limit` declarations

Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-10-30 08:24:30 -07:00
Chanh Nguyen
cbf1c7d312
mctp: Fix build errors with clang19 + musl
Signed-off-by: Chanh Nguyen <chanh@os.amperecomputing.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-10-28 07:29:54 -07:00
Yi Zhao
792df8e977
mbedtls: upgrade 3.6.1 -> 3.6.2
ChangeLog:
https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.2

Security Fix:
CVE-2024-49195

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-10-21 20:54:47 -07:00
Chanh Nguyen
b51e4288b9
mctp: upgrade 1.1 -> 2.0
Signed-off-by: Chanh Nguyen <chanh@os.amperecomputing.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-10-18 09:25:46 -07:00
Jiaying Song
bc29ed7b10
wireguard-tools: fix do_fetch error
Change the SRC_URI to the correct value due to the following error:

WARNING: wireguard-tools-1.0.20210914-r0 do_fetch: Failed to fetch URL git://git.zx2c4.com/wireguard-tools;branch=master, attempting MIRRORS if available

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-10-18 09:25:45 -07:00
Fabrice Aeschbacher
5299775840
mosquitto: upgrade 2.0.18 -> 2.0.19
- Solves CVE-2024-8376
- removed 1571.patch and 2894.patch, already applied in v2.0.19

https://github.com/eclipse/mosquitto/blob/v2.0.19/ChangeLog.txt

Signed-off-by: Fabrice Aeschbacher <fabrice.aeschbacher@siemens.com>
Reviewed-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-10-17 14:07:45 -07:00
Jeroen Knoops
58679b6a51
nng: Rename default branch of github.com:nanomsg/nng.git
Default branch is renamed from `master` to `main`. Commitshas are the
same.

Signed-off-by: Jeroen Knoops <jeroen.knoops@philips.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-10-17 14:07:45 -07:00
Alban Bedel
456a5e1cc8
mdio-tools: RRECOMMENDS the kernel module
The mdio-tools package RDEPENDS on `kernel-module-mdio-netlink` but
this package doesn't exists if the module is built into the kernel.
Use RRECOMMENDS instead as is usually done with kernel modules.

Signed-off-by: Alban Bedel <alban.bedel@aerq.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-10-16 14:07:28 -07:00
Yi Zhao
9ea11d0857
open-vm-tools: upgrade 12.4.5 -> 12.5.0
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-10-13 09:21:55 -07:00
Khem Raj
d6110db995
unbound: Upgrade to 1.21.1
Disable rpaths we are cross building and paths on target will be
the usual locations e.g. /usr/lib

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-10-13 09:19:37 -07:00
Khem Raj
70c663b7ae
ndisc6: Fix reproducible build
includes the CFLAGS used to build the package in
the binary via PACKAGE_CONFIGURE_INVOCATION which then includes the
absolute build path via (eg.) the -ffile-prefix-map flag.

Here we remove using variables like PACKAGE_CONFIGURE_INVOCATION in code

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-10-10 12:53:51 -07:00
Yi Zhao
f514a646e8
nftables: upgrade 1.1.0 -> 1.1.1
ChangeLog:
https://www.netfilter.org/projects/nftables/files/changes-nftables-1.1.1.txt

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-10-07 23:18:54 -07:00
Yi Zhao
0681130a66
libnftnl: upgrade 1.2.7 -> 1.2.8
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-10-07 23:18:54 -07:00
Richard Tollerton
14c7d65643
firewalld: upgrade 1.3.2 -> 2.2.1
Major/minor release changelogs:
- https://firewalld.org/2023/06/firewalld-2-0-0-release
- https://firewalld.org/2024/01/firewalld-2-1-0-release
- https://github.com/firewalld/firewalld/releases/tag/v2.2.0 (dunno why the
  website wasn't updated)

Stop trying to rewrite /etc/firewalld/*.xml. It appears to be for the sake of
/etc/firewalld/lockdown-whitelist.xml, which is not being installed anymore.

Add RDEPENDS+=bash. Used by /usr/lib/firewalld/xmlschema/check.sh; adding to
avoid a QA failure.

Signed-off-by: Rich Tollerton <rich.tollerton@ni.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-10-07 14:15:09 -07:00
Yoann Congal
7fe2259571
non-repro-meta-networking: update known non-reproducible list
Add ncp, ncp-dbg: symbols are not sorted the same way

from: https://autobuilder.yoctoproject.org/typhoon/#/builders/155/builds/46/steps/28/logs/stdio

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-10-07 08:08:26 -07:00
Yoann Congal
1b3738d85c
non-repro-meta-networking: update known non-reproducible list
Add:
* ntopng: date in version
* opensaf: build host hostname in /etc/ files

from: https://autobuilder.yoctoproject.org/typhoon/#/builders/155/builds/45/steps/28/logs/stdio

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-10-02 19:49:53 -07:00
Ghislain Mangé
15758538ee
wireshark: fix typo in PACKAGECONFIG[zstd]
ENABLE_STTD is a typo, correct option is ENABLE_ZSTD.

This patches the following CMake warning in do_configure:
  Manually-specified variables were not used by the project: ENABLE_STTD
After, do_configure does not show the warning.

Github issue: https://github.com/openembedded/meta-openembedded/issues/845

Reported-by: Ludovic Jozeau <ludovic.jozeau@smile.fr>
Reviewed-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Ghislain Mangé <ghislain.mange@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-10-02 07:38:45 -07:00
alperak
56010090ef
curlpp: Fix build issue
Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-10-01 17:56:44 -07:00
Khem Raj
d909e0d1e3
layer.conf: Update to walnascar (5.2) layer/release series
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-10-01 09:23:12 -07:00
Khem Raj
d30427f475
openl2tp: Fix ptests
- Detect active network interface to use, instead of asking user, this needs
  to run in automation
- Find the location of ppp_null.so with find instead of rpm, rpm is a distro choice
  it can be assumed to be always there.
- Add missing runtime deps for ptests
- Kill openl2tpd started by run-ptest script before exiting, otherwise
  ptest runner hangs forever.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-09-30 23:54:17 -07:00
Wang Mingyu
fac6357f60
pure-ftpd: upgrade 1.0.51 -> 1.0.52
nostrip.patch
refreshed for 1.0.52

License-Update: Copyright year updated to 2024

Changelog:
==========
 - The QUIT command is now accepted during a transfer.
 - The server can be built with --with-minimal again.
 - Fixed an out of bounds read in the MLSD command.
 - Larger mmap()ed pages are used on aarch64.
 - Improved compatibility with HPUX
 - Improved OpenSSL API compatibility
 - Improved compatibility with OpenWall Linux
 - Improved compatibility with Netfilter

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-09-30 07:34:23 -07:00
Khem Raj
f9c4fa94fd
python3-scapy: Upgrade to 2.6.0 release
Switch to PEP-517 build backend

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-09-29 14:00:32 -07:00
Yi Zhao
d91297efee
libnetfilter-conntrack: upgrade 1.0.9 -> 1.1.0
* Drop backport patch

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-09-29 10:01:08 -07:00
Yi Zhao
4c3e3638b9
lksctp-tools: upgrade 1.0.20 -> 1.0.21
ChangeLog:
https://github.com/sctp/lksctp-tools/blob/v1.0.21/ChangeLog

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-09-29 10:01:08 -07:00
Yi Zhao
620aab7587
tcpslice: upgrade 1.7 -> 1.8
ChangeLog:
https://github.com/the-tcpdump-group/tcpslice/blob/tcpslice-1.8/CHANGES

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-09-23 09:47:35 -07:00
Yi Zhao
162039c327
lksctp-tools: upgrade 1.0.19 -> 1.0.20
ChangeLog:
https://github.com/sctp/lksctp-tools/blob/v1.0.20/ChangeLog

Drop redundant variables LK_REL, SOLIBVERSION and SOLIBMAJORVERSION in
recipe.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-09-23 09:47:35 -07:00
Yoann Congal
22677f96c2
non-repro-meta-networking: update known non-reproducible list
Remove packages seen reproducible in the last 3 completed tests:
https://autobuilder.yoctoproject.org/typhoon/#/builders/155/builds/44/steps/28/logs/stdio
https://autobuilder.yoctoproject.org/typhoon/#/builders/155/builds/43/steps/28/logs/stdio
https://autobuilder.yoctoproject.org/typhoon/#/builders/155/builds/41/steps/28/logs/stdio

Add babeld & babeld-dbg from:
https://autobuilder.yoctoproject.org/typhoon/#/builders/155/builds/44/steps/28/logs/stdio

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-09-23 09:47:34 -07:00
Wang Mingyu
6f17bc0c5d
traceroute: upgrade 2.1.5 -> 2.1.6
Changelog:
- Let getaddrinfo(3) select the default IPv4 or IPv6 protocol version
  when it is not explicitly specified on the command line

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-09-18 21:03:17 -07:00
Wang Mingyu
19ab5c336e
stunnel: upgrade 5.72 -> 5.73
fix-openssl-no-des.patch
refreshed for 5.73

Changelog:
===========
* Security bugfixes
  - OpenSSL DLLs updated to version 3.3.2.
  - OpenSSL FIPS Provider updated to version 3.0.9.
* Bugfixes
  - Fixed a memory leak while reloading stunnel.conf
    sections with "client=yes" and "delay=no".
  - Fixed TIMEOUTocsp with values greater than 4.
  - Fix the IPv6 test on a non-IPv6 machine.
* Features
  - HELO replaced with EHLO in the post-STARTTLS SMTP
    protocol negotiation (thx to Peter Pentchev).
  - OCSP stapling fetches moved away from server threads.
  - Improved client-side session resumption.
  - Added support for the mimalloc allocator.
  - Check for protocolHost moved to configuration file
    processing for the client-side CONNECT protocol.
  - Clarified some confusing OpenSSL's certificate
    verification error messages.
  - stunnel.nsi updated for Debian 13 and Fedora.
  - Improved NetBSD compatibility.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-09-18 21:03:17 -07:00
Keith McRae
ac20f1d653
ntp: Fix status call reporting incorrect value
The "status" function called by this script calls "pidof" to get the process id. "pidof" does not expect or operate with a full path.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-09-18 09:52:30 -07:00
Khem Raj
0dffbbc0c7
ot-br-posix: Link with libatomic on rv32
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-09-17 07:50:22 -07:00
Khem Raj
a730c21ea1
dlm: Disable fcf-protection on riscv32
Its not available on RISCV

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-09-17 07:50:22 -07:00
Yi Zhao
d11df3c4a2
open-vm-tools: upgrade 12.3.5 -> 12.4.5
Release Notes:
https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/ReleaseNotes.md
https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/ReleaseNotes.md

ChangeLog:
https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/open-vm-tools/ChangeLog
https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/open-vm-tools/ChangeLog

Drop --without-xerces configuration option as it has been removed since
12.4.0.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-09-15 17:54:16 -07:00
Yi Zhao
c4f2e8f626
frr: upgrade 10.1 -> 10.1.1
ChangeLog:
dbf8dac1ce

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-09-15 17:54:16 -07:00
Yoann Congal
af469bd2a5
non-repro-meta-networking: exclude packages that failed previously
Those are the non-reproducible packages from:
https://autobuilder.yoctoproject.org/typhoon/#/builders/155/builds/43

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-09-14 08:43:56 -07:00
Enrico Jörns
eeda4f91bb
libconfuse: move to meta-oe
This prepares for using libconfuse for the 'genimage' recipe which
should reside in meta-oe.

Also libftdi (which is in meta-oe already) optionally requires
libconfuse when PACKAGECONFIG option 'ftdi-eeprom' is enabled.

Signed-off-by: Enrico Jörns <ejo@pengutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-09-12 14:16:20 -07:00
Yi Zhao
6d2e3a4405
drbd-utils: upgrade 9.27.0 -> 9.28.0
ChangeLog:
https://github.com/LINBIT/drbd-utils/blob/v9.28.0/ChangeLog

* Drop backport patch:
  0001-configure.ac-Add-an-option-to-disable-host-udev-vers.patch

* Refresh patch:
  0001-drbd-utils-support-usrmerge.patch

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-09-11 06:50:25 -07:00
Yi Zhao
f5e791bfb1
mbedtls: upgrade 2.28.8 -> 2.28.9
ChangeLog
https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-2.28.9

Security fix:
CVE-2024-45157

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-09-11 06:50:24 -07:00
Yi Zhao
8340f5f011
mbedtls: upgrade 3.6.0 -> 3.6.1
ChangeLog:
https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.1

Security fixes:
CVE-2024-45157
CVE-2024-45158
CVE-2024-45159

* According to commit[1], install data_files into framework directory
  for ptest.

[1] 9c4dd4ee6f

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-09-11 06:50:24 -07:00
Yi Zhao
5b6a571312
autofs: upgrade 5.1.8 -> 5.1.9
ChangeLog:
https://git.kernel.org/pub/scm/linux/storage/autofs/autofs.git/tree/CHANGELOG?h=release_5_1_9

* Drop backport patches:
  0001-autofs-5.1.8-add-autofs_strerror_r-helper-for-musl.patch
  0002-autofs-5.1.8-handle-innetgr-not-present-in-musl.patch

* Drop the following patches as the issues have been fixed upstream:
  cross.patch
  pkgconfig-libnsl.patch
  fix_disable_ldap.patch
  add-the-needed-stdarg.h.patch
  autofs-5.0.7-fix-lib-deps.patch
  0001-Define-__SWORD_TYPE-if-undefined.patch
  0001-Define-__SWORD_TYPE-and-_PATH_NSSWITCH_CONF.patch
  0001-Bug-fix-for-pid_t-not-found-on-musl.patch
  0001-modules-lookup_multi.c-Replace-__S_IEXEC-with-S_IEXE.patch
  0002-Replace-__S_IEXEC-with-S_IEXEC.patch

* Reresh the following patches:
  no-bash.patch
  remove-bashism.patch
  mount_conflict.patch
  force-STRIP-to-emtpy.patch
  0001-include-libgen.h-for-basename.patch
  0001-Do-not-hardcode-path-for-pkg.m4.patch
  fix-the-YACC-rule-to-fix-a-building-failure.patch
  using-pkg-config-to-detect-libxml-2.0-and-krb5.patch

* Add patch to fix build on musl:
  0009-hash.h-include-sys-reg.h-instead-of-bits-reg.h.patch

* Backport patch to fix build with gcc14:
  0010-autofs-5.1.9-Fix-incompatible-function-pointer-types.patch

* Add PACKAGECONFIG[openldap] and PACKAGECONFIG[sasl]

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-09-10 20:13:08 -07:00
Yi Zhao
28d82d17c8
freeradius: upgrade 3.2.3 -> 3.2.5
ChangeLog:
https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_2_4
https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_2_5

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-09-10 20:13:08 -07:00
Vijay Anusuri
52d6841a10 wireshark: upgrade 4.2.6 -> 4.2.7
Bug Fixes

The following vulnerability has been fixed:

    wnpa-sec-2024-11 NTLMSSP dissector crash. Issue 19943. CVE-2024-8250.

The following bugs have been fixed:

    Fuzz job issue: fuzz-2024-01-31-7745.pcap. Issue 19627.

    OSS-Fuzz 70534: wireshark:fuzzshark_ip_proto-udp: Stack-overflow in dissect_cbor_main_type. Issue 19935.

    SOME/IP Protocol heuristic dissector fails to parse. Issue 19670.

    6loWPAN: Page Number Field Incorrect Registration. Issue 19934.

    PacketBB incorrectly reports "Malformed Packet" Issue 19972.

Release Notes:
https://www.wireshark.org/docs/relnotes/wireshark-4.2.7.html

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-09-09 07:56:50 -07:00
Markus Volk
84d6e138cb
cleanup after polkit fix
This commit removes the need to fix polkit permissions:
https://git.openembedded.org/meta-openembedded/commit/?h=master-next&id=d5e90541f8e35916abc930b2da6de037b23d51a1

That allows to do some cleanup

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-09-01 15:54:30 -07:00
Yi Zhao
6f0ed176f2
tcpdump: upgrade 4.99.4 -> 4.99.5
ChangeLog:
https://git.tcpdump.org/tcpdump/blob/HEAD:/CHANGES

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-09-01 08:12:58 -07:00
Yi Zhao
4506ce1031
snort3: upgrade 3.3.3.0 -> 3.3.4.0
ChangeLog:
https://github.com/snort3/snort3/releases/tag/3.3.4.0

* appid: notify binder on service change
* appid: replaced hsessions vector of raw pointers into vector of smart
  pointers
* ftp_telnet: refactoring ftp-data
* latency, dce, stream_ip: fix max pegs incorrectly declared sum
* telnet: avoid flush when cr or lf is between commands

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-29 07:27:26 -07:00
Wang Mingyu
9fac163596
unbound: upgrade 1.20.0 -> 1.21.0
Changelog:
 https://github.com/NLnetLabs/unbound/releases/tag/release-1.21.0

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-28 07:11:37 -07:00
Wang Mingyu
3cbd140c7d
samba: upgrade 4.19.7 -> 4.19.8
Changelog:
 https://www.samba.org/samba/history/samba-4.19.8.html

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-28 07:11:37 -07:00
Wang Mingyu
f199a2363b
networkmanager: upgrade 1.48.6 -> 1.48.10
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-28 07:11:32 -07:00
Wang Mingyu
20f77303a0
mdns: upgrade 2200.120.24 -> 2200.140.11
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-28 07:11:32 -07:00
Wang Mingyu
84c27b2848
libtdb: upgrade 1.4.11 -> 1.4.12
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-28 07:11:31 -07:00
Khem Raj
e8649443fc
bluealsa: Update cython patch to latest upstream patch
This patch reflects the latest revision submitted upstream

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-26 14:30:25 -07:00
Khem Raj
3af49fb610
frr: Upgrade to 10.1 release
Changes are here [1]

[1] 14c29f83a0

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-22 22:39:53 -07:00
Quentin Schulz
21a87a422c
nftables: fix pep517-backend warning
nftables has a pyproject.toml file since v1.0.9, c.f.
https://git.netfilter.org/nftables/commit/?id=8e603e0f7eec7c0000344a004228a30fbf0ece5c

Styhead has started to complain when a recipe inherits setuptools3 and a
proper pyproject.toml is provided in sources.

This uses python_pep517 functions instead of the setuptools3 ones,
inherits the proper class (still using setuptools3 but through pep517
process).

Notably, the python PACKAGECONFIG has its build dependency on
python3-setuptools-native removed as it's brought in by
python_setuptools_build_meta inherit, which is performed whenever the
python PACKAGECONFIG is selected. This avoids a "duplicate" but no
change in behavior is expected.

This was only build tested.

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-21 12:06:12 -07:00
Martin Jansa
202bcbd9d9
blueman: fix installation paths
* pass systemdsystemunitdir and systemduserunitdir to set correct directories
  instead of using libdir from:
  meson.build:systemd_base_path = join_paths(libdir, 'systemd')
  which is wrong e.g. with multilib where libdir might be /usr/lib64 instead of
  usr/lib used in ${nonarch_base_libdir} which is used by systemd_* variables:

  export systemd_system_unitdir="/usr/lib/systemd/system"
  export systemd_user_unitdir="/usr/lib/systemd/user"

  fixes:
  ERROR: Didn't find service unit 'blueman-mechanism.service', specified in SYSTEMD_SERVICE:blueman.

* inherit python3targetconfig to install into right python site-packages
  without this it installs into
  /usr/lib/python3.12/site-packages/
  instead of /usr/lib64/python3.12/site-packages set in PYTHON_SITEPACKAGES_DIR
  variable used in FILES, causing
  blueman: 295 installed and not shipped files. [installed-vs-shipped]

  # $PYTHON_SITEPACKAGES_DIR
  #   set oe-core/meta/classes-recipe/python3-dir.bbclass:11
  #     "${libdir}/${PYTHON_DIR}/site-packages"
  PYTHON_SITEPACKAGES_DIR="/usr/lib64/python3.12/site-packages"

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-19 10:19:32 -07:00
Adrian Freihofer
c4594daeab
networkmanager: remove modemmanager rdepends
This reverts commit: 5edb8335dc

The Networkmanager package must not depend on ModemManager. Only the
Networkmanager-wwan package should depend on the ModemManager package.

The mobile-broadband-provider-info is fully optional and it is often not
required for embedded devices. Let the user choose if it gets installed
or not. Adding it explicitely to IMAGE_INSTALL is simple. Adding an
RRECOMMENS would work as well. But adding an RDEPENDS is bad.

In general, NetworkManager packaging is intended to provide a set of
binary packages suitable for building many different images.
NetworkManager is designed to be used for binary packages distributions
where it is not possible to rebuild NetworkManager just to install
Modemmanager. Also for OE, where a rebuilding is possible, a rebuild is
a disadvantage. So please do not destroy this flexibility by adding
RDEPENDS, which are firstly wrong and secondly only suitable for your
specific needs.

Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-19 10:19:32 -07:00
Khem Raj
0439d42c55
ot-br-posix: Define config files explicitly
Otherwise it picks up from build area with absolute paths into builddir

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-19 10:19:32 -07:00
Khem Raj
8337af7da4
ippool: Fix buildpaths QA error
Pass OE's CFLAGS via CC since the Makefile disregards these flags from
environment and has it own notion of it. This ensures that flags to
rewrite debug flags are passed down correctly to compiler.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-19 10:19:31 -07:00
Khem Raj
be709e18cb
fwknop: Specify target locations of gpg and wget
This fixes emitting buildpaths into binary and also
fixes the issue where these tools wont exist on
the paths they were found on build machine

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-19 10:19:25 -07:00
Khem Raj
b152b54458
fwknop: Upgrade to 2.6.11
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-18 15:56:57 -07:00
Yi Zhao
7a0155e7c5
snort3: upgrade 3.3.2.0 -> 3.3.3.0
ChangeLog:
https://github.com/snort3/snort3/releases/tag/3.3.3.0

* control: code cleanup
* control: handle control commands after packet threads are fully
  initialised
* daq: add outstanding packets counter
* extractor: add flow hash key
* file_api: max depth is set as part of initial config
* file: remove unused variable in FileFlows destructor
* filters: update dev_notes.txt with details for event_filter
* flow: optimize timeout handling for different packet type
* http_inspect: add peg counts for gzip, known-not-supported, and
  unknown
* http_inspect: log normalized URI in extra data
* ips_options: separate main thread pcre counts from packet threads
  stats
* memory: account memory for profiler only when packet thread is
  involved
* src: resolve various warnings
* stream_tcp: make sure ports are correctly swapped when filling a
  meta-ACK packet

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-18 15:54:39 -07:00
Jörg Sommer
ec936d6893
dnsmasq: set config dhcp6, broken-rtc by FEATURES
Some of the PACKAGECONFIG can be derived from the DISTRO_FEATURES and
MACHINE_FEATURES.

Signed-off-by: Jörg Sommer <joerg.sommer@navimatix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-16 07:30:56 -07:00
Jörg Sommer
92be96659e
dnsmasq: Install conf example from upstream instead of our version
Our version was copied 2011 and is out of date. The changes in the meantime
affected only comments.

Signed-off-by: Jörg Sommer <joerg.sommer@navimatix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-16 07:30:56 -07:00
Khem Raj
797b3a8433
keepalived: Make build reproducible
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-15 23:20:05 -07:00
Khem Raj
7091189c6f
ndisc: Remove buildpaths from binaries
configure emits its arguments into binaries via PACKAGE_CONFIGURE_INVOCATION
therefore edit the paths from this in generated config.h before it gets into
binaries.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-15 23:20:05 -07:00
Khem Raj
0d6f463f02
proftpd: Upgrade to 1.3.8b
Fix buildpaths QA Errors while here

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-15 23:20:05 -07:00
Khem Raj
55bfe466db
blueman: Fix buildpathe issue with cython generated code
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Markus Volk <f_l_k@t-online.de>
2024-08-15 10:28:12 -07:00
Khem Raj
3267d1cf30
freediameter: Fix buildpaths QA error
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-15 10:28:11 -07:00
Khem Raj
aa94d5221e
wolfssl: Add packageconfig for reproducible build
Make this option turned on by default

Fixes
WARNING: wolfssl-5.7.2-r0 do_package_qa: QA Issue: File /usr/lib/libwolfssl.so.42.2.0 in package wolfssl contains reference to TMPDIR [buildpaths]

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-14 21:46:26 -07:00
Khem Raj
195d6196c6
vsomeip: Fix build with GCC-14
New libstdc++ headers do not include iomanip via other headers anymore

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-10 15:57:57 -07:00
alperak
0b6d6875b9
blueman: Fix do_package QA issue
ERROR: blueman-2.4.3-r0 do_package: QA Issue: blueman: Files/directories were installed but not shipped in any package:
  /usr/lib/systemd/system
  /usr/lib/systemd/system/blueman-mechanism.service
Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install.
blueman: 2 installed and not shipped files. [installed-vs-shipped]
ERROR: blueman-2.4.3-r0 do_package: Fatal QA errors were found, failing task.

Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-09 14:25:27 -07:00
Markus Volk
a4bd1cf8cc
blueman: update 2.3.5 -> 2.4.3
Remove 0001-meson-add-pythoninstalldir-option.patch. It was fixed by:
[https://github.com/blueman-project/blueman/pull/1700]

Remove 0001-Search-for-cython3.patch. It was fixed by:
[2682501e31/module/meson.build (L1)]

Remove 0001-meson-add-pythoninstalldir-option.patch. Not quite sure about this one,
but even without this patch there are no issues to enable bluetooth on my side

Dont add polkit rule. It is now added by default.

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-09 14:25:21 -07:00
Wang Mingyu
4d5ffd632f
wavemon: upgrade 0.9.5 -> 0.9.6
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-09 14:25:20 -07:00
Wang Mingyu
ffc22e14bf
openvpn: upgrade 2.6.11 -> 2.6.12
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-09 14:25:16 -07:00
Wang Mingyu
37e1ebef6e
openipmi: upgrade 2.0.35 -> 2.0.36
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-09 14:25:16 -07:00
Wang Mingyu
bf6deed8a1
networkmanager: upgrade 1.48.4 -> 1.48.6
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-09 14:25:15 -07:00
Wang Mingyu
b9bd9d0534
libtdb: upgrade 1.4.10 -> 1.4.11
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-09 14:25:14 -07:00
Peter Marko
c393973c85
squid: Upgrade to 6.10
Solves CVE-2024-37894

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-04 19:42:34 -07:00
Yi Zhao
b9693a6ec2
libdaq: upgrade 3.0.15 -> 3.0.16
ChangeLog:
https://github.com/snort3/libdaq/releases/tag/v3.0.16

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-01 20:57:21 -07:00
Yi Zhao
169f29314e
tcpreplay: upgrade 4.4.4 -> 4.5.1
ChangeLog:
https://github.com/appneta/tcpreplay/releases/tag/v4.5.1

Drop patches that have been merged upstream.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-01 20:57:21 -07:00
Yi Zhao
6c6d4d2d1c
snort3: upgrade 3.3.1.0 -> 3.3.2.0
ChangeLog:
https://github.com/snort3/snort3/releases/tag/3.3.2.0

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-01 20:57:21 -07:00
alperak
d1bf2db7cc
tayga: Fix contains reference to TMPDIR [buildpaths] warning
WARNING: tayga-0.9.2-r0 do_package_qa: QA Issue: File /usr/sbin/.debug/tayga in package tayga-dbg contains reference to TMPDIR [buildpaths]

Make sure that the OE provided CFLAGS are passed to the compiler.

Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-31 08:29:24 -07:00
Yi Zhao
62b0d59023
snort3: upgrade 3.1.84.0 -> 3.3.1.0
ChangeLog:
https://github.com/snort3/snort3/releases/tag/3.2.1.0
https://github.com/snort3/snort3/releases/tag/3.2.2.0
https://github.com/snort3/snort3/releases/tag/3.3.0.0
https://github.com/snort3/snort3/releases/tag/3.3.1.0

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-28 07:42:22 -07:00