3890 Commits

Author SHA1 Message Date
gudni
7b05b69104 mbedtls: upgrade 3.6.3.1 -> 3.6.4
Fixes several security vulnerabilities:
CVE-2025-49601, CVE-2025-49600, CVE-2025-52496,
CVE-2025-47917, CVE-2025-48965, CVE-2025-52497,
and CVE-2025-49087

The framework directory has been changed into a git submodule.[1][2]
The recipe now uses Git Submodule Fetcher (gitsm)

Changelog:
https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.4

[1] 8cf5666a17
[2] c90c6d8ff7

Signed-off-by: Guðni Már Gilbert <gudni.m.g@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2025-07-27 14:35:10 -04:00
Wang Mingyu
4f92de2059 mbedtls: upgrade 3.6.3 -> 3.6.3.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2025-07-27 14:35:10 -04:00
Peter Marko
eb21281551 libcoap: patch CVE-2024-31031
Pick commit [1] from [2] which fixes [3] as listed in [4].

[1] 214665ac4b
[2] https://github.com/obgm/libcoap/pull/1352
[3] https://github.com/obgm/libcoap/issues/1351
[4] https://nvd.nist.gov/vuln/detail/CVE-2024-31031

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2025-07-27 14:35:10 -04:00
Jinfeng Wang
6b9b9658e6 postfix: fix rootfs file difference
Rootfs file differs with the same project configure, add preliminary
setting to avoid this.

Signed-off-by: Jinfeng Wang <jinfeng.wang.cn@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2025-07-06 19:23:22 -04:00
Changqing Li
e1411aa0a8 netcf: remove EXTRA_AUTORECONF
Refer [1], Makefile.am already set ACLOCAL_AMFLAGS = -I gnulib/m4, set
EXTRA_AUTORECONF will cause do_configure failure with long build path,
just drop EXTRA_AUTORECONF.

[1] https://git.openembedded.org/openembedded-core/commit/meta/classes-recipe/autotools.bbclass?id=e718d1be2c4fb54cf363c23f929358e1be68c724

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2025-07-06 19:23:22 -04:00
Yogita Urade
9c782b2e9d open-vm-tools: fix CVE-2025-22247
VMware Tools contains an insecure file handling vulnerability.
\xa0A malicious actor with non-administrative privileges on a
guest VM may tamper the local files to trigger insecure file
operations within that VM.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-22247

Upstream patch:
https://github.com/vmware/open-vm-tools/blob/CVE-2025-22247.patch/CVE-2025-22247-1230-1250-VGAuth-updates.patch

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2025-07-06 19:23:22 -04:00
Clayton Casciato
8de6879654 chrony: use inherit_defer for conditional inherit of useradd
[ Upstream commit 63df976d8eec0fa714e8da30f4333f8af23c57d3 ]

conditionnal inherit is missed when PACKAGECONFIG privdrop is
activated after this inherit, eg in .bbappend.

Signed-off-by: Andreas Fenkart <afenkart@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Clayton Casciato <majortomtosourcecontrol@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2025-06-20 10:46:49 -04:00
Peter Kjellerstedt
327df8652e meta-networking/README.md: Correct the branch for dependent layers
This was missed in commit 0d2d2d193a1619b6dbebaf335f1ef785478049e3.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
---

PATCHv2:
* Added my Signed-off-by.
* Removed unintentional Change-Id.
2025-05-17 11:56:38 -06:00
Armin Kuster
0d2d2d193a
meta-openemnedded: Add myself as walnascar maintainer
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-16 18:20:05 -07:00
Markus Volk
b6d13f8108
blueman: update 2.4.3 -> 2.4.4
- remove patch that was merged upstream

2.4.4
Bugs fixed

    Fix Rfcom plugin dbus signature
    Set an initial selected device in blueman-sendto
    AutoConnect: Store bluetooth address instead of object path
    Applet: Handle UnknownObject DBus error (@tommie)
    Make search button available after device list becomes empty (@astcri)
    Fatal LoadException

Changes

    Terminate applet on manager termination if it was started by manager
    Add Galic and Esperanto translations
    AutoConnect: Automatically convert path to address
    Add toggle to force symbolic statusicon

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-10 08:31:04 -07:00
Nguyen Dat Tho
e62c16c3e4
drbd-utils: Fix build with gcc-15
To fix error: http://errors.yoctoproject.org/Errors/Details/851808/
In file included from string_matching.cpp:1:
./string_matching.h:10:18: error: 'uint16_t' does not name a type
   10 |     extern const uint16_t   PATTERN_LIMIT;
      |                  ^~~~~~~~
./string_matching.h:7:1: note: 'uint16_t' is defined in header '<cstdint>'; this is probably fixable by adding '#include <cstdint>'

Signed-off-by: Nguyen Dat Tho <tho3.nguyen@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-10 08:31:03 -07:00
Nguyen Dat Tho
7be42e05de
mdns: Fix build with gcc-15
Fix error: http://errors.yoctoproject.org/Errors/Details/851809/

../mDNSShared/CommonServices.h:856:13: error: 'bool' cannot be defined via 'typedef'
  856 | typedef int bool;
      |             ^~~~
../mDNSShared/CommonServices.h:856:13: note: 'bool' is a keyword with '-std=c23' onwards
../mDNSShared/CommonServices.h:856:1: warning: useless type name in empty declaration
  856 | typedef int bool;
      | ^~~~~~~

Signed-off-by: Nguyen Dat Tho <tho3.nguyen@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-10 08:31:03 -07:00
Nguyen Dat Tho
058a9ee791
weechat: upgrade 4.5.0 -> 4.6.0
Changelog:
  https://github.com/weechat/weechat/blob/v4.6.0/CHANGELOG.md

Signed-off-by: Nguyen Dat Tho <tho3.nguyen@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-10 08:31:03 -07:00
Wang Mingyu
03efb8bf8c
openvpn: upgrade 2.6.13 -> 2.6.14
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-07 12:21:18 -07:00
Khem Raj
ceb9160341
ssmping: Use debian mirror for SRC_URI
Original URI is not accessible anymore
Drop md5sum

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-06 08:47:56 -07:00
mark.yang
c022f3ec33
unbound: fix build with gcc-15.0.1
* fix following error:
  http://errors.yoctoproject.org/Errors/Details/850313/
  ../git/compat/malloc.c:9:7: warning: conflicting types for built-in function 'malloc'; expected 'void *(long unsigned int)' [-Wbuiltin-declaration-mismatch]
    9 | void *malloc ();
      |       ^~~~~~
  ../git/compat/malloc.c:5:1: note: 'malloc' is declared in header '<stdlib.h>'
    4 | #include "config.h"
  +++ |+#include <stdlib.h>
    5 | #undef malloc
  ../git/compat/malloc.c: In function 'rpl_malloc_unbound':
  ../git/compat/malloc.c:23:10: error: too many arguments to function 'malloc'; expected 0, have 1
   23 |   return malloc (n);
      |          ^~~~~~  ~
  ../git/compat/malloc.c:9:7: note: declared here
    9 | void *malloc ();
      |       ^~~~~~

* Seeing that there is '#undef malloc', it appears they don't want to
  use the malloc from stdlib.h.
  Therefore, we need to correctly define the parameters for malloc.

Signed-off-by: mark.yang <mark.yang@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-02 07:29:32 -07:00
mark.yang
f452fa2fce
freediameter: fix build with gcc-15.0.1
* backport fix from:
  https://github.com/freeDiameter/freeDiameter/issues/72
  a54f10082f

  to fix:
  http://errors.yoctoproject.org/Errors/Details/850312/
  TOPDIR/tmp/work/qemux86_64-oe-linux/freediameter/1.5.0+git/git/libfdcore/sctp.c:622:21: note: 'bool' is a keyword with '-std=c23' onwards
  TOPDIR/tmp/work/qemux86_64-oe-linux/freediameter/1.5.0+git/git/libfdcore/sctp.c:622:26: error: expected identifier or '(' before '=' token
  622 |                 int bool = 1;
      |                          ^

Signed-off-by: mark.yang <mark.yang@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-01 23:08:15 -07:00
Nguyen Dat Tho
ffe4c94dca
snort3: upgrade 3.6.1 -> 3.7.1
Changelog:
  https://github.com/snort3/snort3/blob/master/ChangeLog.md

Add 0001-Fix-build-with-gcc-15.patch to fix build with gcc-15

Signed-off-by: Nguyen Dat Tho <tho3.nguyen@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-31 14:42:08 -07:00
Yi Zhao
f27fe8c6e2
mbedtls: 3.6.2 -> 3.6.3
ChangeLog:
https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.3

Remove mbedtls-framework repository, as the framework is now added
as a flat directory rather than a submodule[1][2].

[1] b41194ce7f
[2] 2c824b4fe5

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-31 14:42:06 -07:00
Yi Zhao
ca08c74223
mbedtls: upgrade 2.28.9 -> 2.28.10
ChangeLog
https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-2.28.10

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-31 14:42:06 -07:00
Yi Zhao
506cc7ef56
frr: upgrade 10.2.1 -> 10.3
ChangeLog:
https://github.com/FRRouting/frr/releases/tag/frr-10.3

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-31 14:42:06 -07:00
Khem Raj
f4a96810ba
Drop styhead from LAYERSERIES_COMPAT
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-31 07:41:47 -07:00
Khem Raj
8147a884c6
net-snmp: Fix a crash and support for 6.7+ kernel
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-29 09:31:02 -07:00
Khem Raj
7c0f6444e2
nftables: Fix build on musl when xtables enabled
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-28 22:54:17 -07:00
Khem Raj
6ca6265f7e
openl2tp: Replace ifconfig with ip command in ptest run script
ifconfig may not exist on all systems since its deprecated, fixes
ptests

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-28 22:22:24 -07:00
Martin Jansa
a2a531a61b
xl2tpd: fix build with gcc-15
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-28 10:28:12 -07:00
Wang Mingyu
66c1ad4149
memcached: upgrade 1.6.37 -> 1.6.38
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-25 09:33:53 -07:00
Wang Mingyu
998800ce49
libdaq: upgrade 3.0.18 -> 3.0.19
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-25 09:33:52 -07:00
Yi Zhao
e5271adea7
dnsmasq: upgrade 2.90 -> 2.91
ChangeLog:
https://thekelleys.org.uk/dnsmasq/CHANGELOG

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-24 07:29:13 -07:00
Yi Zhao
053d73ffd6
freeradius: 3.2.5 -> 3.2.7
ChangeLog:
https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_2_6
https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_2_7

* Refresh local patches.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-21 11:07:34 -07:00
Yi Zhao
0b1e0f24f2
drbd-utils: upgrade 9.28.0 -> 9.30.0
ChangeLog:
https://github.com/LINBIT/drbd-utils/blob/v9.30.0/ChangeLog

* Refresh local patches.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-21 11:07:34 -07:00
Yi Zhao
fd730c9269
strongswan: upgrade 6.0.0 -> 6.0.1
ChangeLog:
https://github.com/strongswan/strongswan/releases/tag/6.0.1

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-21 11:07:34 -07:00
Martin Jansa
f19750acc1
iftop: fix build with gcc-15
fixes:
http://errors.yoctoproject.org/Errors/Details/848458/

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-21 11:07:33 -07:00
Khem Raj
aa42e35225
openl2tp: Pin to C17 std
Does not compile with C23 with GCC-15 and the last
release was long time ago.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-20 08:46:56 -07:00
Richard Purdie
eac1f5b9c0
recipes: Fix variable assignment whitespace
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-20 08:46:56 -07:00
Khem Raj
9060bf3a42
rdist: Pin to C17 std
It can not be cleanly compiled with C23 defaults in GCC-15
therefore stick with C17 for now.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-20 08:46:55 -07:00
Ross Burton
5461aa6cbe
openl2tp: don't inherit autotools
This upstream does not in fact use autotools, so remove the inherit and
implement the required do_install.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-19 11:37:48 -07:00
Ross Burton
672062bb3a
miniupnpd: partial recipe rewrite
This upstream does not in fact use autotools, so remove the inherit.

Split the configure step (make config.h) into do_configure and ensure
that it always runs in case the configuration has changed.

Use PACKAGECONFIG for options, as there are more available upstream.

Add UPSTREAM_CHECK variables to check for new releases. This depends on
a bitbake change[1] but with that detects that 2.3.7 has been released.

Add a DEPENDS on openssl as the Makefiles try to link against it and
silently fail without it.

[1] https://lore.kernel.org/bitbake-devel/20250319165339.439776-1-ross.burton@arm.com/T/#u

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-19 11:37:48 -07:00
Ross Burton
fb38afef30
vblade: don't inherit autotools
This upstream does not in fact use autotools, so remove the inherit.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-19 11:37:47 -07:00
Ross Burton
632d43aa40
rdist: don't inherit autotools
This upstream does not in fact use autotools, so remove the inherit and
implement the required do_install directly.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-19 11:37:46 -07:00
Omri Sarig
0347365edc
chrony: Add nts support through PACKAGECONFIG
Chronyd is supporting NTS (network time security) protocol, however, to
build the application with this support, it require having gnutls at
build time.
This commit adds a PACKAGECONFIG line, allowing users to control whether
the supporting application will have nts or not.

Signed-off-by: Omri Sarig <omri.sarig13@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-19 09:17:26 -07:00
Yi Zhao
2fb2ee3c7e
civetweb: enable packageconfig cpp
Enable packageconfig cpp required by minifi-cpp.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-17 14:01:15 -07:00
Yoann Congal
26dab6c956
reproducibility: Mark phytool{,-dbg} as known non-reproducible
From AB run:
https://autobuilder.yoctoproject.org/valkyrie/#/builders/87/builds/36/steps/28/logs/stdio

Diffoscope output is at:
https://valkyrie.yocto.io/pub/repro-fail-openembedded/meta-networking/oe-reproducible-20250315-xxydi74w/packages/diff-html/

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-15 23:05:31 -07:00
Dmitriy Makhnin
ae1133e174
waf-samba: using python variable from python3native.bbclass
Waf-samba.bbclass inherits python3native.bbclass
which has the variable PYTHON="${STAGING_BINDIR_NATIVE}/python3-native/python3".
This allows this variable to be used in do_compile instead of python3.

Signed-off-by: Dmitry Makhnin <d.makhnin@yadro.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-13 22:09:36 -07:00
Alex Kiernan
972afd4c72
mdns: Upgrade 2559.60.39.0.1 -> 2559.80.8
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-13 22:09:35 -07:00
Khem Raj
d3b2d1f56a
keepalived: Make keepalived cross compile reproducible
This should help with not emitting configure commandline into
binaries, these may contain absolute build paths

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-12 08:15:43 -07:00
Yoann Congal
d7cef19fcc
reproducibility: update known non-reproducible packages
Those reproducible failures are from AB runs:
* https://autobuilder.yoctoproject.org/valkyrie/#/builders/87/builds/34
* https://autobuilder.yoctoproject.org/valkyrie/#/builders/87/builds/35

https://valkyrie.yocto.io/pub/repro-fail-openembedded/

NB: diffoscope output can be found in
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-11 19:34:55 -07:00
Wang Mingyu
c08b0046f4
udpcast: upgrade 20230924 -> 20250223
0001-include-stddef.h-for-ptrdiff_t.patch
refreshed for 20250223

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-11 17:17:24 -07:00
Sofiane HAMAM
06a5e82a83 Wolfssl: add ptest
Add ptest for Wolfssl package.
Set IMAGE_ROOTFS_EXTRA_SPACE:virtclass-mcextend-wolfssl to 700M
enough to avoid a "No space left on device".

BEGIN: /usr/lib/wolfssl/ptest
Wolfssl ptest logs are stored in /tmp/wolfss_temp.qvuQ9h/ptest.log
Test script returned: 0
unit_test: Success for all configured tests.
PASS: Wolfssl
DURATION: 7
END: /usr/lib/wolfssl/ptest

Signed-off-by: Sofiane HAMAM <sofiane.hamam@smile.fr>
Reviewed-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-06 06:58:00 -08:00
Johannes Kauffmann
767f429e81 open62541: split schema defs into separate package
The OPC UA schema definitions and nodeset descriptions make up 90MB of
the "normal" package and contain mostly text files not needed during
runtime.

Split them into a -tools package. The "normal" package size is reduced
drastically.

Signed-off-by: Johannes Kauffmann <johanneskauffmann@hotmail.com>
2025-03-06 11:16:49 +01:00