425 Commits

Author SHA1 Message Date
Yi Zhao
f859d299e6 postfix: upgrade 3.4.12 -> 3.4.23
Changelog:
http://cdn.postfix.johnriley.me/mirrors/postfix-release/official/postfix-3.3.20.HISTORY

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-12-31 10:17:53 -08:00
Yi Zhao
c5928e2b1a postfix: fix build with glibc 2.34
Backport a patch to fix build against glibc 2.34 (e.g. on Fedora 35)

Fixes:
| In file included from attr_clnt.c:88:
| /usr/include/unistd.h:363:13: error: conflicting types for
‘closefrom’; have ‘void(int)’
|   363 | extern void closefrom (int __lowfd) __THROW;
|       |             ^~~~~~~~~
| In file included from attr_clnt.c:87:
| ./sys_defs.h:1506:12: note: previous declaration of ‘closefrom’ with
type ‘int(int)’
|  1506 | extern int closefrom(int);
|       |            ^~~~~~~~~

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-12-31 10:17:53 -08:00
Armin Kuster
7fbb276718 recipes: Update SRC_URI branch and protocols
This patch updates SRC_URIs using git to include branch=master if no branch is set
and also to use protocol=https for github urls as generated by the conversion script
in OE-Core.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-11-13 07:45:48 -08:00
Mingli Yu
672a7420b2 vsftpd: Upgrade to 3.0.5
Drop 2 seccomp patches as seccomp sandbox policy tweaks in new version [1].

[1] https://security.appspot.com/vsftpd/Changelog.txt

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>

This upgrade fix CVE-2021-3618, refer above Changelog
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-10-23 07:39:36 -07:00
ito-yuichi@fujitsu.com
2681937544 cyrus-sasl: add CVE-2020-8032 to allowlist
This affects only openSUSE, so add it to allowlist.

Signed-off-by: Yuichi Ito <ito-yuichi@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 711e932b14de57a5f341124470b2f3f131615a25)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-27 06:54:50 -07:00
Andrej Kozemcak
9362c5078d squid: upgrade 4.14 -> 4.15
Changes are found at: http://www.squid-cache.org/Versions/v4/changesets

Signed-off-by: Andrej Kozemcak <andrej.kozemcak@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 77e614754553e64c4bc554ae802dc09e56eb6209)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-06 20:25:36 -07:00
zhengruoqin
d63cab7c0b lldpd: upgrade 1.0.4 -> 1.0.8
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 55669e9214f3213ade48896e7cfe72396cb1e795)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-03 07:46:03 -07:00
Ming Liu
9a7e075512 atftp: move atftpd.init from files to atftp subdirectory
It does not have to maintain two patch directories files and atftp,
merge them.

Signed-off-by: Ming Liu <liu.ming50@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-23 08:52:15 -07:00
zangrc
f2f3a3bf43 iscsi-initiator-utils: upgrade 2.1.3 -> 2.1.4
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-18 12:40:20 -07:00
zangrc
e179ed99da opensaf: upgrade 5.20.11 -> 5.21.03
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-04 09:04:24 -08:00
Khem Raj
c481ee79a2 squid: Include <limits> for using std::numeric_limits
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-03 11:08:29 -08:00
Yi Zhao
a71d1dc472 vsftpd: allow newfstatat and pselect6 syscalls in the seccomp sandbox
Allow newfstatat and pselect6 in the seccomp sanbox for glibc 2.33.

Fixes the following OOPS error:
root@qemux86-64:~# tnftp 192.168.1.1
Connected to 192.168.1.1.
220 (vsFTPd 3.0.3)
Name (192.168.1.1:root): anonymous
331 Please specify the password.
Password:
230 Login successful.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> ls
OOPS: priv_sock_get_cmd

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-28 23:51:14 -08:00
Oleksandr Kravchuk
f4e0b86fa4 atftp: update to 0.7.4
Removed upstreamed patches.

Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-07 20:38:39 -08:00
Khem Raj
95d5b1d804 keepalived: Upgrade to 2.2.1
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-04 15:29:01 -08:00
Zheng Ruoqin
7f3ccef7b4 igmpproxy: upgrade 0.2.1 -> 0.3
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-12 00:54:53 -08:00
zhengruoqin
18a57eb1d7 opensaf: upgrade 5.20.08 -> 5.20.11
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-28 22:34:02 -08:00
Mingli Yu
a921faaee4 tftp-hpa: change the ALTERNATIVE_PRIORITY
Both inetutils-tftp and tftp-hpa provide the tftp command and
the ALTERNATIVE_PRIORITY of inetutils-tftp is 79 until now.

Increase the ALTERNATIVE_PRIORITY of tftp-hpa to 100 to guarantee
the tftp command provided by tftp-hpa when both of the packages
installed.

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-24 19:34:49 -08:00
zangrc
46e30569e3 iscsi-initiator-utils: upgrade 2.1.2 -> 2.1.3
0001-libopeniscsiusr-Compare-with-max-int-instead-of-max-.patch
Removed since this is included in 2.1.3

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-24 19:34:49 -08:00
Khem Raj
a82ae84619 cyrus-sasl: Disable ntlm plugin by default
ntlm requires md4 algorith defines which is now disabled in openssl
recipe by default also see [1]

[1] https://github.com/cyrusimap/cyrus-sasl/issues/632

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-23 22:47:02 -08:00
zangrc
4e5e5479c0 vblade: upgrade 24 -> 25
gcc-10.patch
Removed since this is included in 25.

Refresh the following patch:
cross.patch
makefile-add-ldflags.patch

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-18 08:23:14 -08:00
Li Zhou
885149082b ptpd: Solve memory leak for function NTPDCrequest
Solve the memory leak in function NTPDCrequest detected by valgrind tool.

Memory leak log example:
==619== 21 bytes in 1 blocks are still reachable in loss record 1 of 3
==619==    at 0x4A09DB0: calloc (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
==619==    by 0x43512E: NTPDCrequest (ntpdcontrol.c:255)
==619==    by 0x43512E: NTPDCquery.isra.1 (ntpdcontrol.c:683)
==619==    by 0x4359EE: ntpdInControl (ntpdcontrol.c:807)
==619==    by 0x4364F5: ntpServiceUpdate (timingdomain.c:622)
==619==    by 0x436935: timingDomainUpdate (timingdomain.c:756)
==619==    by 0x4334A7: protocol (protocol.c:263)
==619==    by 0x402BAE: main (ptpd.c:131)

Signed-off-by: Li Zhou <li.zhou@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-29 22:02:14 -08:00
Khem Raj
f7a175c5b4 opensaf: Fix build on 32bit arches with 64bit time_t e.g. RISCV-32
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-15 13:27:46 -08:00
Zang Ruochen
3866391da4 opensaf: upgrade 5.20.05 -> 5.20.08
0001-Add-configure-time-check-for-gettid-API.patch
Removed since this is included in 5.20.08

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-09 13:41:02 -08:00
Khem Raj
a57f2a5e97 networkd-dispatcher: Upgrade to 2.1
Drop gitlab archives and use git fetcher directly instead

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-03 11:41:03 -08:00
Zang Ruochen
917142fab5 radvd: upgrade 2.18 -> 2.19
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-02 09:00:52 -08:00
Khem Raj
409032dcc5 iscsi-initiator-utils: Silence a clang warning on 64bit systems
This unbreaks the build with clang as well.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-21 09:37:38 -07:00
Chen Qi
032e6879b5 openhpi: use /run instead of /var/run in systemd service file
/var/run has been deprecated by systemd, so use /run instead,
as suggested by systemd.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-19 23:49:22 -07:00
Qi.Chen@windriver.com
5a5f7ec345 cyrus-sasl: use /run instead of /var/run for systemd service file
/var/run has been deprecated by systemd, so use /run instead,
as suggested by systemd.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-16 09:21:54 -07:00
Mingli Yu
592d9be3f6 ippool: Remove obsolete setting in service file
The Standard error type "syslog" is obsolete, causing a warning since systemd
version 246 [1].

Please consider using "journal" or "journal+console"

[1] https://github.com/systemd/systemd/blob/master/NEWS#L202

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-23 19:45:53 -07:00
Andrej Valek
c449e8a8b7 squid: upgrade 4.12 -> 4.13
Changes are found at: http://www.squid-cache.org/Versions/v4/changesets

Signed-off-by: Andrej Valek <andrej.valek@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-25 11:24:58 -07:00
Khem Raj
545f6d0891 opensaf: Fix build with -fno-common
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-17 12:26:41 -07:00
Khem Raj
ca50225db7 tftp-hpa: Fix build with -fno-common
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-13 22:32:07 -07:00
Khem Raj
b99b2f5297 iscsi-initiator-utils: Upgrade to _2.1.2
Fix build with clang

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-13 22:32:07 -07:00
Khem Raj
0e86a9bddd ncftp: Fix build with -fno-common
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-13 22:32:07 -07:00
Khem Raj
7c50553449 vblade: Upgrade to version 24
Switch to github for src_uri
Add a patch to fix build with -fno-common

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-13 22:32:07 -07:00
Oleksandr Kravchuk
71dfa48c6b keepalived: update to 2.1.5
Removed config argument does not exist anymore (see
@05443e1efa3569fcd39a).

Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-07-28 12:52:14 -07:00
Changqing Li
5af77740a4 radvd: add /etc/radvd.conf
When starting radvd without any configuration the following errors would
be triggered.

"""
root@intel-x86-64:~# systemctl status radvd
● radvd.service - Router advertisement daemon for IPv6
Loaded: loaded (/lib/systemd/system/radvd.service; enabled; vendor preset:
	enabled)
Active: inactive (dead)
        Condition: start condition failed at Tue 2019-09-24 13:29:36 UTC; 3s ago
	    └─ ConditionPathExists=/etc/radvd.conf was not met
"""

Normally the user should create and configrue the /etc/radvd.conf
manually.  However the radvd provide a example file for redhad located
at "radvd/redhat/radvd.conf.empty". When installing, it would copy
radvd/redhat/radvd.conf.empty to /etc/radvd.conf. Also add this empty
conf here to used as an example of configuration

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-07-21 16:46:36 -07:00
Andreas Müller
63a4a54500 squid: upgrade 4.9 -> 4.12
License checksum was changed by change of copyright year

Changes are found at [1-3]

[1] http://www.squid-cache.org/Versions/v4/changesets/SQUID_4_12.html
[2] http://www.squid-cache.org/Versions/v4/changesets/SQUID_4_11.html
[3] http://www.squid-cache.org/Versions/v4/changesets/SQUID_4_10.html

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-06-19 12:42:55 -07:00
Wang Mingyu
ad0a826dce opensaf: upgrade 5.19.10 -> 5.20.05
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-06-05 18:42:45 -07:00
Konrad Weihmann
5caca0f7bd proftpd: Fix typo for SRC_URI[md5sum]
Signed-off-by: Konrad Weihmann <kweihmann@outlook.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-05-31 22:42:25 -07:00
Adrian Bunk
3d81f6d013 postfix: Upgrade 3.4.10 -> 3.4.12
Remove patch applied upstream.
Manual -fcommon is no longer necessary.

Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-05-21 15:07:44 -07:00
Khem Raj
d04f3a1be3 postfix: Upgrade to 3.4.10 and compile with -fcommon
Ensures it can build with gcc10

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-05-16 14:52:48 -07:00
Yi Zhao
335e0bd0cc postfix: split ${PN}-bin from ${PN} to solve recursive dependency
The commit 89d86b96f80d8a136d38113baf69d8ccad5a5ff6 which tries to fix
the installation issue for ostree introduces a recursive dependency
issue. When installing the postfix package on target via online
repository, the postinst function for postfix-cfg package needs
newaliases but this command is from postfix package which causes an
error:
  Configuring postfix-cfg.
  /var/lib/opkg/info/postfix-cfg.postinst: line 9: newaliases: not found
  pkg_run_script: package "postfix-cfg" postinst script returned status 127.

Split a new package postfix-bin from postfix and make it as the runtime
dependency for postfix-cfg.

Set USERADD_PACKAGES to ${PN}-bin to avoid image do_rootfs warnings when
installing postfix via IMAGE_INSTALL:
  [log_check] warning: group postdrop does not exist - using root
  [log_check] warning: user postfix does not exist - using root

Set ALTERNATIVE to ${PN}-bin to make sure the newaliases symbolic link
is installed before installing postfix-cfg.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-04-17 19:05:58 -07:00
Wang Mingyu
ecc0bb9fa3 postfix: upgrade 3.4.7 -> 3.4.8
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-04-08 08:15:03 -07:00
Pierre-Jean Texier
407ba50380 igmpproxy: fix upstream check URL
Fixes:

$: devtool check-upgrade-status igmpproxy
<...>

INFO: igmpproxy                 0.2.1           UNKNOWN_BROKEN  None

Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-04-04 07:22:16 -07:00
Pierre-Jean Texier
b0ff824330 ptpd: fix upstream check URL
Fixes:

$: devtool check-upgrade-status ptpd
<...>

INFO: ptpd                      2.3.1           UNKNOWN_BROKEN  None

Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-04-04 07:22:16 -07:00
Pierre-Jean Texier
279f39be53 opensaf: fix upstream check URL
Fixes:

$: devtool check-upgrade-status opensaf
<...>

INFO: opensaf                   5.19.10         UNKNOWN_BROKEN  None

Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-04-04 07:22:16 -07:00
Ovidiu Panait
6c44a5ebe3 tftp-hpa: Use alternatives to avoid manpage conflicts
Fix the following manpage conflicts:
 * check_data_file_clashes: Package inetutils-doc wants to install file /usr/share/man/man1/tftp.1
	But that file is already provided by package  * tftp-hpa-doc
 * check_data_file_clashes: Package inetutils-doc wants to install file /usr/share/man/man8/tftpd.8
	But that file is already provided by package  * tftp-hpa-doc

Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-31 23:56:42 -07:00
Jeremy Puhlman
fd2e895c9c proftpd: make prxs a mulitlib script
Script encodes compiler settings and compiler name.

my $compiler = q(x86_64-poky-linux-gcc  -m64 -march=nehalem -mtune=generic -mfpmath=sse -msse4.2 );

Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-06 17:23:54 -08:00
Jeremy Puhlman
8bfb1ff1a6 proftpd: remove macro-prefix-map from prxs
macro-prefix-map points to build WORKDIR which will
cause reproducibilty failures.

Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-06 17:23:54 -08:00