903 Commits

Author SHA1 Message Date
Wang Mingyu
7d5d9acb2a
libdaq: upgrade 3.0.17 -> 3.0.18
Changelog:
 api: added a new dioctl for snort latency data

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-10 08:45:36 -08:00
Richard Purdie
bd6a1bb278
recipes: Fix variable assignment whitespace
Recipes are much more readable with whitespace around the assignment operators.
Fix various assignments in meta-openembedded recipes to show this is definitely
the preferred formatting.

This fixes recipes with larger numbers of issues but there are just under 100
other references left to fix.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-31 10:34:03 -08:00
Gyorgy Sarvari
924b1b1cb1
civetweb: fix pathes in cmake file
1. The do_install:append() deleted the TMPDIR from the cmake file,
however that left two absolute pathes in the file: /usr/lib/libssl.so
and /usr/lib/libcrypto.so. In case another project is trying to link
to civetweb-server with cmake, it fails with the following error:

ninja: error: '/usr/lib/libssl.so', needed by 'examples/prometheus/prometheus_example', missing and no known rule to make it

Instead of only deleting the TMPDIR, change it to ${CMAKE_SYSROOT} -
a variable set by cmake.bbclass. This allows other projects to find
the required interfacing libraries successfully.

2. When linking to civetweb-server from another project using cmake,
the cmake file verifies if the /usr/bin/civetweb binary exists. When using
the class-target package, this file is not included in the sysroot during
build-time, so this check fails with the following error:

 CMake Error at ${RECIPE_SYSROOT}/usr/lib/cmake/civetweb/civetweb-targets.cmake:97 (message):
   The imported target "civetweb::server" references the file

      "${RECIPE_SYSROOT}/usr/bin/civetweb"

   but this file does not exist.  Possible reasons include:

To avoid this error, this check is deleted for class-target.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-25 09:28:58 -08:00
Yi Zhao
3f7a140ed6
snort3: upgrade 3.3.4.0 -> 3.6.1.0
https://github.com/snort3/snort3/releases/tag/3.6.1.0
https://github.com/snort3/snort3/releases/tag/3.6.0.0
https://github.com/snort3/snort3/releases/tag/3.5.2.0
https://github.com/snort3/snort3/releases/tag/3.5.1.0
https://github.com/snort3/snort3/releases/tag/3.5.0.0
https://github.com/snort3/snort3/releases/tag/3.3.7.0
https://github.com/snort3/snort3/releases/tag/3.3.6.0
https://github.com/snort3/snort3/releases/tag/3.3.5.0

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-01 19:02:18 -08:00
Yi Zhao
a3c4d70afb
networkmanager: upgrade 1.48.10 -> 1.50.0
ChangeLog:
https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/blob/1.50.0/NEWS

Drop 0001-libnm-systemd-core-Disable-sd_dhcp6_client_set_duid_.patch as
it has been merged upstream.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-26 11:12:37 -08:00
deepan.shivap
dac624de3e
ot-br-posix: Fix Musl build error
Mistakenly removed musl-fixes.patch in previous commit.

update & Include 0001-Musl-build-fix.patch based on latest upstream of ot-br-posix

Remove CXXFLAGS:append:libc-musl:toolchain-clang = " -Wno-error=sign-compare
-Wno-error=unused-but-set-variable", as issue is not reproducible with
current SRCREV of ot-br-posix.

Signed-off-by: deepan.shivap <deepan.shivap@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-03 09:44:36 -08:00
deepan.shivap
168634c5e6
ot-br-posix: Fix GCC-14 build error
GCC 14 compiler uses -fvisibility-inlines-hidden by default and
it creates visibility conflicts.

Add 0001-fix-build-on-GCC-14-for-yocto.patch file to resolve build error.

Remove musl-fixes.patch, not applicable for latest Upstream.

Update SRCREV to latest Upstream.

Signed-off-by: deepan.shivap <deepan.shivap@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-11-29 07:56:56 -08:00
Ross Burton
f2c506e159
blueman: inherit cython class
Use the new cython class to avoid duplicated fixup code to remove build
paths.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-11-19 16:59:07 -08:00
Wang Mingyu
006af9e741
mosquitto: upgrade 2.0.19 -> 2.0.20
Changelog:
==========
Broker:
- Fix QoS 1 / QoS 2 publish incorrectly returning "no subscribers".
  Closes #3128.
- Open files with appropriate access on Windows.
- Don't allow invalid response topic values.
- Fix some strict protocol compliance issues.

Client library:
- Fix cmake build on OS X.

Build:
- Fix build on NetBSD

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-11-05 22:45:17 -08:00
Wang Mingyu
e04dac483c
libdaq: upgrade 3.0.16 -> 3.0.17
Changelog:
==========
- daq_netmap: Fix build on Linux with non-system headers
- example: support snap encapsulation

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-11-05 22:45:16 -08:00
Yi Zhao
792df8e977
mbedtls: upgrade 3.6.1 -> 3.6.2
ChangeLog:
https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.2

Security Fix:
CVE-2024-49195

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-10-21 20:54:47 -07:00
Fabrice Aeschbacher
5299775840
mosquitto: upgrade 2.0.18 -> 2.0.19
- Solves CVE-2024-8376
- removed 1571.patch and 2894.patch, already applied in v2.0.19

https://github.com/eclipse/mosquitto/blob/v2.0.19/ChangeLog.txt

Signed-off-by: Fabrice Aeschbacher <fabrice.aeschbacher@siemens.com>
Reviewed-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-10-17 14:07:45 -07:00
Jeroen Knoops
58679b6a51
nng: Rename default branch of github.com:nanomsg/nng.git
Default branch is renamed from `master` to `main`. Commitshas are the
same.

Signed-off-by: Jeroen Knoops <jeroen.knoops@philips.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-10-17 14:07:45 -07:00
Khem Raj
0dffbbc0c7
ot-br-posix: Link with libatomic on rv32
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-09-17 07:50:22 -07:00
Yi Zhao
f5e791bfb1
mbedtls: upgrade 2.28.8 -> 2.28.9
ChangeLog
https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-2.28.9

Security fix:
CVE-2024-45157

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-09-11 06:50:24 -07:00
Yi Zhao
8340f5f011
mbedtls: upgrade 3.6.0 -> 3.6.1
ChangeLog:
https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.1

Security fixes:
CVE-2024-45157
CVE-2024-45158
CVE-2024-45159

* According to commit[1], install data_files into framework directory
  for ptest.

[1] 9c4dd4ee6f

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-09-11 06:50:24 -07:00
Yi Zhao
28d82d17c8
freeradius: upgrade 3.2.3 -> 3.2.5
ChangeLog:
https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_2_4
https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_2_5

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-09-10 20:13:08 -07:00
Markus Volk
84d6e138cb
cleanup after polkit fix
This commit removes the need to fix polkit permissions:
https://git.openembedded.org/meta-openembedded/commit/?h=master-next&id=d5e90541f8e35916abc930b2da6de037b23d51a1

That allows to do some cleanup

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-09-01 15:54:30 -07:00
Yi Zhao
4506ce1031
snort3: upgrade 3.3.3.0 -> 3.3.4.0
ChangeLog:
https://github.com/snort3/snort3/releases/tag/3.3.4.0

* appid: notify binder on service change
* appid: replaced hsessions vector of raw pointers into vector of smart
  pointers
* ftp_telnet: refactoring ftp-data
* latency, dce, stream_ip: fix max pegs incorrectly declared sum
* telnet: avoid flush when cr or lf is between commands

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-29 07:27:26 -07:00
Wang Mingyu
3cbd140c7d
samba: upgrade 4.19.7 -> 4.19.8
Changelog:
 https://www.samba.org/samba/history/samba-4.19.8.html

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-28 07:11:37 -07:00
Wang Mingyu
f199a2363b
networkmanager: upgrade 1.48.6 -> 1.48.10
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-28 07:11:32 -07:00
Khem Raj
e8649443fc
bluealsa: Update cython patch to latest upstream patch
This patch reflects the latest revision submitted upstream

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-26 14:30:25 -07:00
Martin Jansa
202bcbd9d9
blueman: fix installation paths
* pass systemdsystemunitdir and systemduserunitdir to set correct directories
  instead of using libdir from:
  meson.build:systemd_base_path = join_paths(libdir, 'systemd')
  which is wrong e.g. with multilib where libdir might be /usr/lib64 instead of
  usr/lib used in ${nonarch_base_libdir} which is used by systemd_* variables:

  export systemd_system_unitdir="/usr/lib/systemd/system"
  export systemd_user_unitdir="/usr/lib/systemd/user"

  fixes:
  ERROR: Didn't find service unit 'blueman-mechanism.service', specified in SYSTEMD_SERVICE:blueman.

* inherit python3targetconfig to install into right python site-packages
  without this it installs into
  /usr/lib/python3.12/site-packages/
  instead of /usr/lib64/python3.12/site-packages set in PYTHON_SITEPACKAGES_DIR
  variable used in FILES, causing
  blueman: 295 installed and not shipped files. [installed-vs-shipped]

  # $PYTHON_SITEPACKAGES_DIR
  #   set oe-core/meta/classes-recipe/python3-dir.bbclass:11
  #     "${libdir}/${PYTHON_DIR}/site-packages"
  PYTHON_SITEPACKAGES_DIR="/usr/lib64/python3.12/site-packages"

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-19 10:19:32 -07:00
Adrian Freihofer
c4594daeab
networkmanager: remove modemmanager rdepends
This reverts commit: 5edb8335dc46450fd6bcdbb3fcf55336b32bd422

The Networkmanager package must not depend on ModemManager. Only the
Networkmanager-wwan package should depend on the ModemManager package.

The mobile-broadband-provider-info is fully optional and it is often not
required for embedded devices. Let the user choose if it gets installed
or not. Adding it explicitely to IMAGE_INSTALL is simple. Adding an
RRECOMMENS would work as well. But adding an RDEPENDS is bad.

In general, NetworkManager packaging is intended to provide a set of
binary packages suitable for building many different images.
NetworkManager is designed to be used for binary packages distributions
where it is not possible to rebuild NetworkManager just to install
Modemmanager. Also for OE, where a rebuilding is possible, a rebuild is
a disadvantage. So please do not destroy this flexibility by adding
RDEPENDS, which are firstly wrong and secondly only suitable for your
specific needs.

Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-19 10:19:32 -07:00
Khem Raj
0439d42c55
ot-br-posix: Define config files explicitly
Otherwise it picks up from build area with absolute paths into builddir

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-19 10:19:32 -07:00
Yi Zhao
7a0155e7c5
snort3: upgrade 3.3.2.0 -> 3.3.3.0
ChangeLog:
https://github.com/snort3/snort3/releases/tag/3.3.3.0

* control: code cleanup
* control: handle control commands after packet threads are fully
  initialised
* daq: add outstanding packets counter
* extractor: add flow hash key
* file_api: max depth is set as part of initial config
* file: remove unused variable in FileFlows destructor
* filters: update dev_notes.txt with details for event_filter
* flow: optimize timeout handling for different packet type
* http_inspect: add peg counts for gzip, known-not-supported, and
  unknown
* http_inspect: log normalized URI in extra data
* ips_options: separate main thread pcre counts from packet threads
  stats
* memory: account memory for profiler only when packet thread is
  involved
* src: resolve various warnings
* stream_tcp: make sure ports are correctly swapped when filling a
  meta-ACK packet

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-18 15:54:39 -07:00
Khem Raj
55bfe466db
blueman: Fix buildpathe issue with cython generated code
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Markus Volk <f_l_k@t-online.de>
2024-08-15 10:28:12 -07:00
Khem Raj
aa94d5221e
wolfssl: Add packageconfig for reproducible build
Make this option turned on by default

Fixes
WARNING: wolfssl-5.7.2-r0 do_package_qa: QA Issue: File /usr/lib/libwolfssl.so.42.2.0 in package wolfssl contains reference to TMPDIR [buildpaths]

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-14 21:46:26 -07:00
alperak
0b6d6875b9
blueman: Fix do_package QA issue
ERROR: blueman-2.4.3-r0 do_package: QA Issue: blueman: Files/directories were installed but not shipped in any package:
  /usr/lib/systemd/system
  /usr/lib/systemd/system/blueman-mechanism.service
Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install.
blueman: 2 installed and not shipped files. [installed-vs-shipped]
ERROR: blueman-2.4.3-r0 do_package: Fatal QA errors were found, failing task.

Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-09 14:25:27 -07:00
Markus Volk
a4bd1cf8cc
blueman: update 2.3.5 -> 2.4.3
Remove 0001-meson-add-pythoninstalldir-option.patch. It was fixed by:
[https://github.com/blueman-project/blueman/pull/1700]

Remove 0001-Search-for-cython3.patch. It was fixed by:
[2682501e31/module/meson.build (L1)]

Remove 0001-meson-add-pythoninstalldir-option.patch. Not quite sure about this one,
but even without this patch there are no issues to enable bluetooth on my side

Dont add polkit rule. It is now added by default.

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-09 14:25:21 -07:00
Wang Mingyu
bf6deed8a1
networkmanager: upgrade 1.48.4 -> 1.48.6
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-09 14:25:15 -07:00
Yi Zhao
b9693a6ec2
libdaq: upgrade 3.0.15 -> 3.0.16
ChangeLog:
https://github.com/snort3/libdaq/releases/tag/v3.0.16

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-01 20:57:21 -07:00
Yi Zhao
6c6d4d2d1c
snort3: upgrade 3.3.1.0 -> 3.3.2.0
ChangeLog:
https://github.com/snort3/snort3/releases/tag/3.3.2.0

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-01 20:57:21 -07:00
alperak
d1bf2db7cc
tayga: Fix contains reference to TMPDIR [buildpaths] warning
WARNING: tayga-0.9.2-r0 do_package_qa: QA Issue: File /usr/sbin/.debug/tayga in package tayga-dbg contains reference to TMPDIR [buildpaths]

Make sure that the OE provided CFLAGS are passed to the compiler.

Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-31 08:29:24 -07:00
Yi Zhao
62b0d59023
snort3: upgrade 3.1.84.0 -> 3.3.1.0
ChangeLog:
https://github.com/snort3/snort3/releases/tag/3.2.1.0
https://github.com/snort3/snort3/releases/tag/3.2.2.0
https://github.com/snort3/snort3/releases/tag/3.3.0.0
https://github.com/snort3/snort3/releases/tag/3.3.1.0

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-28 07:42:22 -07:00
Wang Mingyu
e23eaf27d8
wolfssl: upgrade 5.7.0 -> 5.7.2
Changelog:
 https://github.com/wolfSSL/wolfssl/releases/tag/v5.7.2-stable

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-15 16:36:16 -07:00
Wang Mingyu
4117b96652
networkmanager: upgrade 1.48.2 -> 1.48.4
Changelog:
==========
* Support matching a OVS system interface by MAC address.
* When looking up the system hostname from the reverse DNS lookup of
  addresses configured on interfaces, NetworkManager now takes into
  account the content of /etc/hosts.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-15 16:36:12 -07:00
Yoann Congal
7bbf253811
daq: fix SRC_URI to point to the real 2.0.7 release
The previous fossies.org archive contained a 2.0.6 release.
(The included "configure" script contained PACKAGE_VERSION='2.0.6')

Switch to the upstream archive hosted on snort.org which look like a
real 2.0.7 version (configure contains PACKAGE_VERSION='2.0.7')

Diff of the before vs after archive includes:
* configure script :
  * New option : -runstatedir
  * PACKAGE_VERSION='2.0.6' -> '2.0.7' (+ other related variables)
* New copyright year (2014-2021 Cisco) on some files

Use a custom downloadfilename to avoid conflicts with the "wrong" 2.0.7
archive.

CC: Romain Naour <romain.naour@smile.fr>
CC: Yann E. MORIN <yann.morin.1998@free.fr>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-09 13:21:30 -07:00
Martin Jansa
f0c767407d
recipes: ignore various issues fatal with gcc-14
work arounds for:
meta-oe/meta-oe/recipes-devtools/nodejs/nodejs_20.12.2.bb:do_compile
meta-oe/meta-oe/recipes-support/pidgin/pidgin_2.14.2.bb:do_compile
meta-oe/meta-oe/recipes-devtools/uw-imap/uw-imap_2007f.bb:do_compile
meta-oe/meta-oe/recipes-extended/rrdtool/rrdtool_1.8.0.bb:do_compile
meta-oe/meta-oe/recipes-extended/cmpi-bindings/cmpi-bindings_1.0.4.bb:do_compile
meta-oe/meta-python/recipes-devtools/python/python3-gevent_24.2.1.bb:do_compile
meta-oe/meta-oe/recipes-support/avro/avro-c++_1.11.3.bb:do_compile
meta-oe/meta-python/recipes-devtools/python/python3-h5py_3.10.0.bb:do_compile
meta-oe/meta-oe/recipes-multimedia/cdrkit/cdrkit_1.1.11.bb:do_compile
meta-oe/meta-networking/recipes-connectivity/openthread/ot-br-posix_git.bb:do_compile
meta-oe/meta-oe/recipes-devtools/heaptrack/heaptrack_1.2.0.bb:do_configure
meta-oe/meta-oe/recipes-support/avro/avro-c_1.11.3.bb:do_compile
meta-oe/meta-oe/recipes-core/usleep/usleep_1.2.bb:do_compile
meta-oe/meta-networking/recipes-protocols/openflow/openflow_git.bb:do_compile
meta-oe/meta-oe/recipes-extended/sblim-sfcc/sblim-sfcc_2.2.8.bb:do_compile
meta-oe/meta-networking/recipes-support/linux-atm/linux-atm_2.5.2.bb:do_compile
meta-oe/meta-oe/recipes-kernel/ipmitool/ipmitool_1.8.19.bb:do_compile
meta-oe/meta-networking/recipes-support/ssmping/ssmping_0.9.1.bb:do_compile
meta-oe/meta-oe/recipes-connectivity/wifi-test-suite/wifi-test-suite_10.10.1.bb:do_compile
meta-oe/meta-oe/recipes-extended/zsync/zsync-curl_git.bb:do_compile
meta-oe/meta-python/recipes-devtools/python/python3-kivy_2.3.0.bb:do_compile
meta-oe/meta-oe/recipes-support/openct/openct_0.6.20.bb:do_compile
meta-oe/meta-oe/recipes-benchmark/dhrystone/dhrystone_2.1.bb:do_compile
meta-oe/meta-networking/recipes-daemons/ncftp/ncftp_3.2.7.bb:do_compile
meta-oe/meta-oe/recipes-support/daemontools/daemontools_0.76.bb:do_compile
meta-oe/meta-oe/recipes-devtools/libgee/libgee_0.20.6.bb:do_compile
meta-oe/meta-oe/recipes-devtools/mcpp/mcpp_2.7.2.bb:do_compile
meta-oe/meta-oe/recipes-devtools/android-tools/android-tools_5.1.1.r37.bb:do_compile
meta-oe/meta-networking/recipes-connectivity/dibbler/dibbler_git.bb:do_compile
meta-oe/meta-oe/recipes-devtools/glade/glade_3.22.2.bb:do_compile

http://errors.yoctoproject.org/Errors/Build/183124/

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-08 08:42:43 -07:00
Wang Mingyu
738ed3edf0
networkmanager: upgrade 1.48.0 -> 1.48.2
Changelog:
===========
* Support matching a OVS system interface by MAC address.
* Fix port reactivation when the controller is reactivating.
* Save connection timestamps when shutting down, so that the right
  connection autoactivates after restart.
* Fix handling of VPN secrets for 2-factor authentication.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-01 08:01:58 -07:00
alperak
46154b133f
rdist: Fix contains reference to TMPDIR [buildpaths] warning
Pass OE cflags to makefile

WARNING: rdist-6.1.5-r0 do_package_qa: QA Issue: File /usr/bin/.debug/rdistd in package rdist-dbg contains reference to TMPDIR
File /usr/bin/.debug/rdist in package rdist-dbg contains reference to TMPDIR [buildpaths]

Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-06-28 11:22:01 -07:00
Wang Mingyu
c50a209d31
networkmanager-openvpn: upgrade 1.11.0 -> 1.12.0
Changelog:
==========
* Adapt to the new way of handling the 2FA secret by the
  daemon, needed by it to fix a bug with certain clients.
  Requires NetworkManager >= 1.46.2.
* Update Slovenian and Hungarian translations.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-06-27 09:18:55 -07:00
Wang Mingyu
158a4d0869
libdaq: upgrade 3.0.14 -> 3.0.15
Changelog:
 api: Add DIOCTL_GET_CPU_PROFILE_DATA ioctl to get cpu profile data

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-06-27 09:18:53 -07:00
Yi Zhao
41df431b91
samba: upgrade 4.19.6 -> 4.19.7
ChangeLog:
https://www.samba.org/samba/history/samba-4.19.7.html

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-06-20 19:25:52 -07:00
Timo Schuster
e35ce3956a
mbedtls: Do not set LIB_INSTALL_DIR to an absolute path to make MbedTLSTargets.cmake relocateable.
Signed-off-by: Timo Schuster <timo.schuster@leica-microsystems.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-06-14 15:46:50 -07:00
Kai Kang
d0d0e6efb9
daq: fix incompatible pointer type error
Fix incompatible pointer type error for daq:

| ../../daq-2.0.7/os-daq-modules/daq_nfq.c: In function 'SetPktHdr':
| ../../daq-2.0.7/os-daq-modules/daq_nfq.c:394:37: error: passing argument 2
   of 'nfq_get_payload' from incompatible pointer type [-Wincompatible-pointer-types]
|   394 |     int len = nfq_get_payload(nfad, (char**)pkt);
|       |                                     ^~~~~~~~~~~
|       |                                     |
|       |                                     char **

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-06-09 16:14:58 -07:00
Khem Raj
751cb7534c
networkmanager: Fix undefined symbol errors on musl+lld
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-06-07 21:53:33 -07:00
Wang Mingyu
7cd1f5a871
openfortivpn: upgrade 1.22.0 -> 1.22.1
Bugfix:
 do not advertise we talk compressed HTTP

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-06-07 09:11:59 -07:00
Wang Mingyu
485dfc19be
networkmanager: upgrade 1.46.0 -> 1.48.0
Changelog:
============
* Building with autotools is now deprecated and will be completely removed
  in the next development cycle. We recommend using meson to build
  NetworkManager -- for basic setup, see the CONTRIBUTING.md file.
  To ignore this deprecation and still build with Autotools, you can specify
  the '--disable-autotools-deprecation' argument when configuring.
* Support changing the OpenSSL ciphers for 802.1X authentication via
  connection property "802-1x.openssl-ciphers".
* The reason why a device is unmanaged is now properly set in the
  "StateReason" property of the "Device" D-Bus object. The property is
  visible in nmcli via "nmcli -f all device show $DEV".
* Deprecated 802-11-wireless and 802-11-wired property 'mac-address-blacklist'
  and introduced the 'mac-address-denylist' property.
* Properly restore in-memory connection profiles during the rollback
  of a checkpoint.
* Fix detection of 6 GHz band capability for WiFi devices
* Allow IPv6 SLAAC and static IPv6 DNS server assignment for modem broadband
  when IPv6 device address was not explicitly passed on by ModemManager
* Fix a performance issue that was leading to 100% CPU usage by NetworkManager
  if external programs were doing a big amount of routes updates.
* Patch-level development releases (i.e. 1.48.1-dev) won't be used anymore.
  From now on, all the patch releases whithin a stable branch will be normal
  releases, like 1.48.0, 1.48.1, 1.48.2, 1.48.3 and so on.
  Odd numbers in the minor version number still indicates if it's a development
  branch like 1.49 or a stable one like 1.48.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-06-07 09:11:59 -07:00
Wang Mingyu
1b0f933f5b
libiec61850: upgrade 1.5.1 -> 1.5.3
Changelog:
=============
- config file parser dynamically allocates linebuffer to allow multithreaded applications
- parse time values in model configuration file
- config file generator: added missing code for GSEControl
- Config file generator: support multiple access points for GOOSE and SMV control blocks
- config file generator: added code to add SMVCBs to config files
- IED server: added code to create SMVCBs with the dynamic model API
- MMS server: added support for write access with component alternate access
- MMS client: added function MmsConnection_writeVariableComponent to write to variables with alternate component access
- make write access to RCB elements configurable according to ReportSettings
- Added function IedConnection_setLocalAddress to define local IP address and optionally local port of a client connection
- IED server: added ControlAction_getSynchroCheck and ControlAction_getInterlockCheck functions
- fixed - IEC 61580 server: dataset is not released when RCB.Datset is set to empty string by client
- PAL: fixed wrong order of function arguments for fread and fwrite functions
- MMS client: parsing of servicecsSupported in MMS init response is off by one
- fixed - potential memory leaks in goose publisher code
- fixed - server sends dchg report when only dupd is enabled in RCB
- GOOSE subscriber: fixed - possible heap corruption in parseAllData due to missing validity check in bit-string handling
- IED server: fixed problem with implicit ResvTms setting when reserved with RptEna
- IED server: fixed - segmentation fault when compiled with CONFIG_MMS_THREADLESS_STACK
- fixed - MMS server: messages can be corrupted when TCP buffer is full
- fixed - .NET: IedConenction.WriteDataSetValues throws a NullReferenceException
- fixed - server send invalid response- when client uses wrong ctlModel
- fixed - IedConnection_setRCBValuesAsync crashes when RCB is already reserved by other client
- fixed - outstanding call not released in IedConnection_getDataSetDirectoryAsync

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-06-07 09:11:58 -07:00