947 Commits

Author SHA1 Message Date
Khem Raj
c89d48972c transmission: Inherit pkgconfig
Fixes
configure: error: The pkg-config script could not be found or is too old.  Make sure it
is in your PATH or set the PKG_CONFIG environment variable to the full
path to pkg-config.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-09-24 08:12:35 -07:00
Pierre-Jean Texier
4de9ab41e3 cppzmq: upgrade 4.8.0 -> 4.8.1
See changelog https://github.com/zeromq/cppzmq/releases/tag/v4.8.1

Signed-off-by: Pierre-Jean Texier <texier.pj2@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-09-24 08:12:35 -07:00
Yi Zhao
32140218a8 krb5: fix CVE-2021-37750
CVE-2021-37750:
The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before
1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in
kdc/do_tgs_req.c via a FAST inner body that lacks a server field.

References:
https://nvd.nist.gov/vuln/detail/CVE-2021-37750

Patches from:
d775c95af7

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-09-10 06:57:43 -07:00
wangmy
11c4703a0d libqmi: upgrade 1.30.0 -> 1.30.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-09-08 21:29:52 -07:00
wangmy
17aca2cf9d cppzmq: upgrade 4.7.1 -> 4.8.0
Fixed:

Fix MSYS libzmq discovery (#510)
Fix handshake event don't need DRAFT API in libzmq v4.3.0 and above (#509)
Use chrono duration for poll default timeout (#497)
context_t close no longer uses deprecated function (#490)
Fix for potential memory leak in monitor_t::check_event (#482)
Fix if constexpr warnings on MSVC (#460)
Fix conversion warnings (#459)
Deprecate confusing connected() function (#458)
Added:

Add all draft socket types up to libzmq 4.3.4 (#488)
Add support for socket_ref to multipart_t ctor/send/recv (#487, #470)
Expose zmq::fd_t (#452)
Add poller_t::size function (#451)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-09-08 21:29:52 -07:00
Yi Zhao
69087d69d0 krb5: fix CVE-2021-36222
CVE-2021-36222:
ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC)
in MIT Kerberos 5 (aka krb5) before 1.18.4 and 1.19.x before 1.19.2
allows remote attackers to cause a NULL pointer dereference and daemon
crash. This occurs because a return value is not properly managed in a
certain situation.

References:
https://nvd.nist.gov/vuln/detail/CVE-2021-36222

Patches from:
fc98f520ca

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-09-07 10:03:50 -07:00
wangmy
271bda48fe libwebsockets: upgrade 4.2.1 -> 4.2.2
ss: sigv4: disable ctest until new auth available

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-09-05 22:19:55 -07:00
Yi Zhao
39099453ce krb5: filtering out -f*-prefix-map from krb5-config
Remove -f*-prefix-map from LDFLAGS in krb5-config to fix reproducibility
issue.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-08-26 10:10:57 -07:00
zhengruoqin
b42cf80ae3 iwd: upgrade 1.16 -> 1.17
Changelog:
- Fix issue with sending additional and vendor IEs
- Fix issue with IE ordering for 802.11-2020 support
- Fix issue with frequency update on channel switch events
- Fix issue with drivers and handling of IF_OPER_UP setting

Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-08-26 10:10:57 -07:00
wangmy
5a6fc31c25 gensio: upgrade 2.2.8 -> 2.2.9
v2.2.9: Fix a crash if telnet is used without rfc2217

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-08-26 10:10:56 -07:00
Changqing Li
9c69112a06 linuxptp: upgrade 3.1 -> 3.1.1
* fix WARNING: linuxptp-3.1-r0 do_fetch: Failed to fetch URL
http://sourceforge.net/projects/linuxptp/files/v3.1/linuxptp-3.1.tgz,
attempting MIRRORS if available

linuxptp-3.1.tgz replace by linuxptp-3.1.1.tgz

* 3.1.1 release note
Version 3.1.1

Fixes:

    CVE-2021-3570 linuxptp: missing length check of forwarded messages
    CVE-2021-3571 linuxptp: wrong length of one-step follow-up in transparent clock

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-08-26 09:58:07 -07:00
zhengruoqin
eada419c72 libqmi: upgrade 1.28.8 -> 1.30.0
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-08-23 22:00:39 -07:00
wangmy
ae5b7d4c03 iwd: upgrade 1.15 -> 1.16
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-08-12 22:58:40 -07:00
Andrej Valek
ccd022736a thrift: upgrade to 0.14.2
License-Update: Added new sections for new files

Configuration changes:
 - BUILD_EXAMPLES - does not exist anymore
 - WITH_SHARED_LIB -> BUILD_SHARED_LIBS, WITH_STATIC_LIB are not to be
 allowed together
 - WITH_AS3=OFF - adobe action script 3 not available

Added new options (disabled by default):
 - javascript, nodejs

Signed-off-by: Andrej Valek <andrej.valek@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-08-07 21:35:04 -07:00
wangmy
43184bef34 libqmi: upgrade 1.28.6 -> 1.28.8
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-08-06 20:38:40 -07:00
Martin Jansa
c61dc077bb Convert to new override syntax
This is the result of automated script (0.9.1) conversion:

oe-core/scripts/contrib/convert-overrides.py .

converting the metadata to use ":" as the override character instead of "_".

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2021-08-03 10:21:25 -07:00
wangmy
10571d0821 libmbim: upgrade 1.24.8 -> 1.26.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-07-29 10:35:38 -07:00
wangmy
c23e84f3f7 gensio: upgrade 2.2.7 -> 2.2.8
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-07-29 10:35:38 -07:00
wangmy
f2302ec954 modemmanager: upgrade 1.16.6 -> 1.16.8
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-07-16 09:23:04 -07:00
Pierre-Jean Texier
c0057789b9 linuxptp: fix upstream version check
Fixes:

builder@2088cb10ccfb:/work/build$ devtool check-upgrade-status linuxptp
NOTE: Starting bitbake server...
<...>

INFO: linuxptp                  3.1             UNKNOWN_BROKEN  None

Signed-off-by: Pierre-Jean Texier <texier.pj2@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-07-16 09:23:03 -07:00
Luan Rafael Carneiro
8adf2bd2c6 libwebsockets: Update 4.2.0 -> 4.2.1
Update the library to the 4.2.1 stable release.
This commit includes following changes:

    8a580b59 v4.2.1
    e90f005a vhost: listen: protect listen port transfer between
    041baf93 mbedtls: sessions: clean session on bail path
    4038a7d4 windows: align plat insert socket POLLIN handling to linux
    a310e16f socks5: cast for mingw3 nonposix recv args
    439651fa openssl: manage _GNU_SOURCE better
    c042ba8c mqtt: handle NULL mqtt publish metadata
    04761c4b event libs: glib: use glib.h specifically
    599d318a mqtt: coverity: help coverity see we wont have an mqtt role wsi without mqtt member allocated
    bae99f63 tls: add option to serialize ssl handshake
    ff1b8ed0 tls: fix inbalanced tls restrict borrow/return calls
    ad3901d0 raw-proxy: fix role bind flag
    4bc8b1a4 extpoll: clean up test server for Wconversion in extpoll parts
    eeea000c dns: handle EAI_NONAME as fatal
    9e5acc05 minimal: hcmulti: modernize startup to use OPERATIONAL
    55533f96 netlink: hold in COLDPLUG until we actually have some routing table contents
    fa1a7040 sspc: close: differentiate between ss and sspc at final wsi close
    3f0fef17 gcc: gcc8 only recognizes fallthu
    e319b15b minimal: ws client spam: modernize with pvo and cancel service after interrupted
    ea4d8008 service: fix casts for EXTERNAL_POLL
    aea9d0ce tls-sessions: remove no stash warning
    10c1b882 ss: check destroy null policy
    e4aa3ece ss: check serialize null policy
    4141a68f ss: avoid null ss policy on req tx len
    de8185db ss: avoid null ss policy on req tx
    526310df ss: h1: log dereferences NULL
    7a283eba minimal: htt-client: send user agent and accept
    3d13468e ctest: do not reuse ctest-ssp path
    e3da2a3b android: getnameinfo uses nonstandard size_t
    8398ef79 getifaddrs: casts for android
    02ae95fa non-windows: explicit cast vaarg to mode_t
    7c3c179e win32: client: just do WIN32 check
    4c8195df windows: only conceal mode_t on windows
    0ba8df6e threadpool: disassociate wsi on close
    94c50618 tls: mbedtls: fix cast for dump helper
    d896d401 freertos: check for forcing each time around service loop
    cd87bc1c cmake: tls: use CHECK_SYMBOL_EXISTS
    da17f018 plugin: post: check unexpected write after protocol unbind
    1c935dff clean: else became a NOP
    896a2e09 strexp: handle NULL better
    aa090fc2 cygwin: include in unix type socket init
    58a34cb0 examples: embedded: keep loop running on WROVER
    85f772f2 OSX: Fixed can't find clock_gettime
    014aa77e core-net: Remove unused variable
    e1ef2301 ss: h2: handle zero length COLON_PATH for metadata
    0557e919 sspc: handle nonexistent metadata cleanly
    07bef6b8 coverity: ntp from blob: handle blob missing
    2f9ed48d coverity: report problem in hpack_dynamic_size() to parent
    d155970b coverity: h->cwsi must be valid if we are handling rx on it
    2d97e343 ss: split out blob into own minimal example
    c3dd4d05 ss: sspc: handle destroy for client_connect and request_tx

Signed-off-by: Luan Rafael Carneiro <luan.rafael@ossystems.com.br>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-07-16 09:23:03 -07:00
Oleksandr Kravchuk
0a14d9cea6 iwd: update to 1.15
Changelog:
- Add support for FT-over-DS procedure with multiple BSS.
- Add support for estimation of VHT RX data rate.
- Add support for exporting Daemon information.

Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-22 10:00:17 -07:00
Khem Raj
ab28d08793 czmq: Add nss packageconfig
Its already disabled by default so no changes otherwise

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-19 17:27:46 -07:00
Khem Raj
fc7b26b5fb czmq: Use Cmake knobs to enable/disable designed packageconfigs
CMAKE_DISABLE_FIND_PACKAGE_<pkg> disables detection and would achieve
same but ON/OFF seems easier to understand

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-19 17:27:46 -07:00
Khem Raj
7cc7d7b635 czmq: Add libmicrohttpd feature via packageconfig
Keep it disabled by default

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-19 17:27:46 -07:00
Khem Raj
88bcd95cff czmq: Inherit pkgconfig
This is required for cmake's find_package to work

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-19 17:27:46 -07:00
Peter Bergin
22491c404c linuxptp: ship example configurations in separate package
configs directory from source is shipped in linuxptp-configs package
and includes some example configuration files for the applications.

Signed-off-by: Peter Bergin <peter@berginkonsult.se>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-09 08:49:21 -07:00
Peter Bergin
efb7b4d2e3 linuxptp: add homepage
Signed-off-by: Peter Bergin <peter@berginkonsult.se>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-09 08:49:21 -07:00
Peter Bergin
96e7586426 linuxptp: use install from makefile and install more apps
Before this patch just a few of the produced binaries were installed.
This patch use install from linuxptp's makefile to install all binaries
and man pages. man pages are packaged in linuxptp-doc.

Signed-off-by: Peter Bergin <peter@berginkonsult.se>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-09 08:49:21 -07:00
Andreas Müller
544f26f199 modemmanager: upgrade 1.16.4 -> 1.16.6
Huge changelog can be found at [1]

[1] https://gitlab.freedesktop.org/mobile-broadband/ModemManager/-/blob/master/NEWS

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-09 08:49:21 -07:00
Andreas Müller
a243e5ce1b libqmi: upgrade 1.28.4 -> 1.28.6
Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-05 06:14:39 -07:00
Khem Raj
109700fc61 libwebsockets: Update to latest on v4.2-stable
Remove unused variable which is flagged by clang

License-Update: copy secondary license texts into LICENSE as a convenience

Add Apache-2.0 as well since lib/tls/mbedtls/wrapper is using it

[1] a12d5ebed6 (diff-c693279643b8cd5d248172d9c22cb7cf4ed163a3c98c8a3f69c2717edd3eacb7)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-05 06:06:27 -07:00
Andreas Müller
b10a377cb3 libmbim: upgrade 1.24.6 -> 1.24.8
Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-03 16:58:41 -07:00
zhengruoqin
d75fceff3b gensio: upgrade 2.2.5 -> 2.2.7
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-03 09:13:52 -07:00
zhengruoqin
199ea35b83 libndp: upgrade 1.7 -> 1.8
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-28 06:55:33 -07:00
Andreas Müller
babb2537ac modemmanager: upgrade 1.16.2 -> 1.16.4
Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-22 05:54:00 -07:00
zhengruoqin
faf4abe27d libqmi: upgrade 1.28.2 -> 1.28.4
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-19 19:11:06 -07:00
Alexander Vickberg
d6ef417074 hostapd: fix building with CONFIG_TLS=internal
The patch recently added for CVE-2021-30004 broke compilation with
CONFIG_TLS=internal. This adds the necessary function to let it
compile again.

Signed-off-by: Alexander Vickberg <wickbergster@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-17 09:15:23 -07:00
zangrc
fec704f62c iwd: upgrade 1.13 -> 1.14
Refresh the following patch:
0001-build-Use-abs_top_srcdir-instead-of-abs_srcdir-for-e.patch

Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-14 07:26:46 -07:00
zangrc
4cd13e9108 gensio: upgrade 2.2.4 -> 2.2.5
Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-14 07:26:46 -07:00
zangrc
fd27d08d47 libwebsockets: upgrade 4.1.6 -> 4.2.0
Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-04-22 11:19:38 -07:00
Khem Raj
9f34b0f0e8 iwd: Upgade to 1.13
Fix out of tree builds
Switch to tarball fetch

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-04-18 11:59:09 -07:00
zhengruoqin
71926e8f12 irssi: upgrade 1.2.2 -> 1.2.3
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-04-15 20:01:48 -07:00
Stefan Ghinea
e2bd6a52bf hostapd: fix CVE-2021-30004
In wpa_supplicant and hostapd 2.9, forging attacks may occur because
AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and
tls/x509v3.c.

References:
https://nvd.nist.gov/vuln/detail/CVE-2021-30004

Upstream patches:
https://w1.fi/cgit/hostap/commit/?id=a0541334a6394f8237a4393b7372693cd7e96f15

Signed-off-by: Stefan Ghinea <stefan.ghinea@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-04-13 08:09:17 -07:00
Vinícius Ossanes Aquino
fbd0b60a27 libqmi: upgrade 1.26.6 -> 1.28.2
Signed-off-by: Vinicius Aquino <voa.aquino@gmail.com>
Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-04-13 08:09:17 -07:00
Vinícius Ossanes Aquino
4174e40a98 modemmanager: upgrade 1.14.10 -> 1.16.2
Signed-off-by: Vinicius Aquino <voa.aquino@gmail.com>
Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-04-13 08:09:17 -07:00
Khem Raj
5d8dfa1ad4 Revert "iwd: Upgade to 1.13"
This reverts commit 87932984c3e4aa8dc03238d0997a3ee09e0f38b1.
2021-04-08 12:27:08 -07:00
zangrc
e1185b272a rabbitmq-c: upgrade 0.10.0 -> 0.11.0
Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-04-08 09:25:54 -07:00
Mingli Yu
5a085c588a hostapd: fix CVE-2021-0326 and CVE-2021-27803
Backport 2 patches to fix two CVEs.

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-04-08 09:25:54 -07:00
Khem Raj
87932984c3 iwd: Upgade to 1.13
Fix out of tree builds
Switch to tarball fetch

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-04-06 09:02:12 -07:00