According to [1]:
2025-02-21: Socat version 1.8.0.3 has been released. It fixes a lot of minor
issues and provides some minor improvements, see file CHANGES [2]. The
experimental POSIXMQ feature has been improved, got a few new options,
and is now considered stable.
License in README has no change
[1] http://www.dest-unreach.org/socat/
[2] http://www.dest-unreach.org/socat/CHANGES:
(From OE-Core rev: 650e9b72ded376ef5974cb7a71ade00a93e4612f)
Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
When kea is built with "-D_GLIBCXX_ASSERTIONS " set in SECURITY_CFLAGS,
an assertion occurs if the kea server receives an empty DHCPDISCOVER
packet:
kea-dhcp4[596]: /usr/include/c++/13.3.0/bits/stl_vector.h:1128:
std::vector<Tp, _Alloc>::reference std::vector<_Tp, _Alloc>::operator[](size_type)
[with _Tp = unsigned char; _Alloc = std::allocator<unsigned char>; reference = unsigned char&;
size_type = long unsigned int]: Assertion '_n < this->size()' failed.
Backport patches to fix this issue[1].
[1] 0b98eae16d16306026e3
(From OE-Core rev: 17c67a47ec9c6e90a339f32c35f80ca4c908a254)
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
If the location of the log lock file is changed using the environment
variable KEA_LOCKFILE_DIR, the kea-dhcp process will work properly, but
the lfc (lease file cleanup) process spawned by it will not inherit this
value and use the default path[1], which will cause the kea server to
print the following message when running:
kea-dhcp4[6767]: Unable to use interprocess sync lockfile (No such file or directory): /var/run/kea/logger_lockfile
Backport a patch to fix this issue[2].
[1] https://gitlab.isc.org/isc-projects/kea/-/issues/3450
[2] f477e8ebcc
(From OE-Core rev: 34f1392aef4d5fa402600b21f6d7a47cd735cfd4)
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Changes since version 1.49.2:
==============================
* ci: run macOS and iOS tests also on macOS 14
* unix,win: map ENOEXEC errno
* test: skip multicast join test on ENOEXEC
* ci: make sure the macOS firewall is disabled
* darwin,test: squelch EBUSY error on multicast join
* build: update minimum cmake to 3.10
* kqueue: use EVFILT_USER for async if available
* unix,win: fix off-by-one in uv_wtf8_to_utf16()
* doc: add scala-native-loop to LINKS.md
* unix: fix build breakage on haiku, openbsd, etc
* kqueue: lower overhead in uv__io_check_fd
* doc: move cjihrig back to active maintainers
* build(deps): bump actions/checkout from 3 to 4
* unix,pipe: fix handling null buffer in uv_pipe_get{sock,peer}name
* unix,win: harmonize buffer checking
* unix,win: add support for detached threads
* src: add uv_thread_set/getname() methods
* build: fix qemu builds
* win: drop support for windows 8
* linux: fix uv_cpu_info() arm cpu model detection
* linux: always use io_uring for epoll batching
* doc: clarify repeating timer behavior more
* unix,win: handle nbufs=0 in uv_udp_try_send
* win: use GetQueuedCompletionStatusEx directly
* win: enable uv_thread_{get,set}name on MinGW
* win: drop support for the legacy MinGW
* win,fs: get (most) fstat when no permission
* win: plug uv_fs_event_start memory leak
* test: address FreeBSD kernel bug causing NULL path in fsevents
* unix: refactor udp sendmsg code
* unix,win: add uv_udp_try_send2
* build: enable fdsan in Android
* test: fix udp-multicast-join for FreeBSD
* win: fix leak processing fs event
* src: set a default thread name for workers
* misc: implement uv_getrusage_thread
(From OE-Core rev: 0a941918275ea089fa94d05129a2b88858aec8bd)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Rewrite the nfs sysvinit scripts to start the services required
by nfsv4: gssd, idmapd, and statd.
(From OE-Core rev: 2cca2dfb6acc25f1a6a25dc60423708a78cef85d)
Signed-off-by: Daniel McGregor <daniel.mcgregor@vecima.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Add support for the nfsv4 user ID mapping daemon, configured with
a sensible default, and add a packageconfig for Kerberos support.
This is reasonably tested in production in our environment, but only
systemd support. There'll be some more work to do to get GSSAPI and
NFS idmapd support integreated into that.
(From OE-Core rev: a7ea135108e445197a58b19601d77eb9d287af69)
Signed-off-by: Daniel McGregor <daniel.mcgregor@vecima.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Reduce diffs against upstream by using the service files provided
by them. This reduces our dependence on patches that simply change
the names of a service.
This also changes the way some nfs options get set for systemd, it
introduces the nfs.conf file for configuration, which all daemons
already support.
(From OE-Core rev: eeab3fa1423d499f9b39fda7a7514e619a3ac010)
Signed-off-by: Daniel McGregor <daniel.mcgregor@vecima.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Change the sysvinit script to start at the S runlevel, this matches
Debian, and prevents systemd from generating a unit file for it.
Also have the nfsd systemd service request the nfsd kernel filesystem
mountpoint. This avoids startup failures in unpriviled containers
or other setups that don't support the filesystem.
(From OE-Core rev: 6110687d199bf390380fe84c330858e3b03f681d)
Signed-off-by: Daniel McGregor <daniel.mcgregor@vecima.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Release information:
https://github.com/openssl/openssl/blob/openssl-3.4/NEWS.md#major-changes-between-openssl-340-and-openssl-341-11-feb-2025
Handles CVE-2024-12797 and CVE-2024-13176.
Remove two patches included in the new version.
(From OE-Core rev: d7ac886d91ccf6b91f67fb0c843fc1765d9dafb1)
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
As this recipe builds the tagged releases we can put the PV in the
filename.
(From OE-Core rev: 2c7c9eb6ff996639a632059102de4d1168958eb6)
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Backport a patch from upstream to fix register tramping on aarch64.
(From OE-Core rev: 9005321e37030d916f4f26e7201e2f86c85ebdbd)
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
These were replaced with python3 in 2.5.2 (commit d1683f).
(From OE-Core rev: 85ae456a12bccabc62cb0906b92d6705f88c932f)
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Rather than using the RPROVIDES on libnss-mdns which comes from
avahi-libnss-mdns, RRECOMMENDS avahi-libnss-mdns directly to avoid
picking any other version.
(From OE-Core rev: 61f44f8b817738c0e220b3d461952816ef7f1449)
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta-networking has Apple's mDNSResponder which also delivers libnss-mdns
nsswitch plugin. Rename this recipe to avahi-libss-mdns and add an RPROVIDE so
that either than be chosen.
(From OE-Core rev: f9d10d6ac4b2a081d110ab58e7137aedddd960cb)
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Recipes are much more readable with whitespace around the assignment operators.
Fix various assignments in OE-Core to show this is definitely the preferred
formatting.
(From OE-Core rev: 30ea609d3357fb3de911f2f6a5e6856c151b976a)
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
oFono CUSD Stack-based Buffer Overflow Code Execution Vulnerability.
This vulnerability allows local attackers to execute arbitrary code
on affected installations of oFono. An attacker must first obtain
the ability to execute code on the target modem in order to exploit
this vulnerability.
The specific flaw exists within the parsing of responses from AT+CUSD
commands. The issue results from the lack of proper validation of the
length of user-supplied data prior to copying it to a stack-based buffer.
An attacker can leverage this vulnerability to execute code in the
context of root. Was ZDI-CAN-23195.
Reference:
https://security-tracker.debian.org/tracker/CVE-2024-7539
Upstream patch:
https://git.kernel.org/pub/scm/network/ofono/ofono.git/commit/?id=389e2344f86319265fb72ae590b470716e038fdc
(From OE-Core rev: 55aea716ca4665cf45579247dd5feec5668dd94f)
Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Since 3.0.0 openssl no longer uses characters in version suffix.
(From OE-Core rev: 80151340b0b20610030f3026e9fc71ef5970c2c5)
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Backport a kea patch to address 1.87.0 compatibility.
(From OE-Core rev: ac328183d4592ad146c41e48c2c92d1dbb53a894)
Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
License-Update: BSD items clarified to be 2-clause:
d4ec06ec58
passprompt plugin removed upstream.
Add an enable a multilink option, as the build breaks without it at the linking
step (upstream presumably didn't test that it works): https://github.com/ppp-project/ppp/issues/541
(From OE-Core rev: e6ea3ade8f3977ec93c68229d2660bbc335a80a6)
Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Whilst our default toolchain has modern kernel headers (6.12, at time of
writing), some external toolchains may use old kernel headers.
As ofono's rmnet module uses kernel defines which were added in 5.14,
add some compatibility defines in case they are not set.
(From OE-Core rev: 0313ea48a75480c2bcc6d35035f74a4dcf22f263)
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Changelog:
===========
- Fix issue with STK and buffer length checks.
- Fix issue with SMS and buffer length checks.
- Fix issue with QMI and handling RAT detection.
- Fix issue with QMI and handling call forwarding.
- Add support for handling MHI network interfaces.
(From OE-Core rev: e57e032bd504d2bc2cb1dbb6ed0182acea39e36a)
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
__NR_riscv_hwprobe is not exported in musl's hwprobe.h
this fails to build with newer kernels
Fixes
| :85:20: error: use of undeclared identifier '__NR_riscv_hwprobe'; did you mean 'riscv_hwprobe'?
| 85 | return syscall(__NR_riscv_hwprobe, pairs, pair_count, cpu_count, cpus, flags);
| | ^~~~~~~~~~~~~~~~~~
(From OE-Core rev: 5271f24643c303d0e6d3d9c12c722f5d818252fe)
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
If the users specifically asks for inetutils-hostname, it's likely they
want it to take precedence over busybox' implementation. Increase the
alternative priority for this package's version.
(From OE-Core rev: 36f718a8cd04d1098eca06fed1e83a0e6f43ab64)
Signed-off-by: Bartosz Golaszewski <bartosz.golaszewski@linaro.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Changelog:
==========
- Add support for handling QMI PIN and Lock methods.
- Add support for handling QMI WWAN interfaces.
- Add support for handling RMNet interfaces.
(From OE-Core rev: 212c449f369c8e640d637566a4a236c2f8df52a5)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
The script does not work if the connman service is already stopped.
The start-stop-daemon checks for the existence of a specified process.
If such a process exists, start-stop-daemon sends it the signal specified
by --signal, and exits with error status 0. If such a process does
not exist, start-stop-daemon exits with error status 1 (0 if --oknodo is specified).
The script uses set -e so we need to add --oknodo option to stop
(From OE-Core rev: b1c1b67166049181136d5eb68740f3bf98bf670d)
Signed-off-by: Michael Trimarchi <michael@amarulasolutions.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Dropped two patches which are now merged upstream.
Added one new patch to resolve a build error when using musl.
Changelog
* Fix issue with handling address type while pairing.
* Add support for allowing to set A2DP transport delay.
* Add support for persistent userspace HID operation.
* Add support for handling syncing to multiple BISes.
(From OE-Core rev: 52d4168f66dd3c4d68e63c8ee17d186b4bdd0e55)
Signed-off-by: Guðni Már Gilbert <gudni.m.g@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Explicitly enable pam support, otherwise it goes into
detection mode and ends up poking at build host
Turn openssl into packageconfig as well
cc1: warning: include location "/usr/include" is unsafe for cross-compilation [-Wpoison-system-directories]
conftest.c: In function 'main':
conftest.c:68:1: warning: argument 1 null where non-null expected [-Wnonnull]
68 | pam_authenticate(NULL, 0);
| ^~~~~~~~~~~~~~~~
In file included from conftest.c:63:
/usr/include/security/pam_appl.h:38:1: note: in a call to function 'pam_authenticate' declared 'nonnull'
38 | pam_authenticate(pam_handle_t *pamh, int flags);
| ^~~~~~~~~~~~~~~~
(From OE-Core rev: 9b0c69a0bac18627cc6190f64bf9cabc518e4777)
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Changelog:
==========
* win,fs: remove trailing slash in junctions
* Revert "linux: eliminate a read on eventfd per wakeup"
* win: Fix linked list logic in getaddrinfo
* win: fix compilation against Windows 24H2 SDK
* win: remap ERROR_NOACCESS and ERROR_BUFFER_OVERFLOW
* win,fs: match trailing slash presence in junctions to user input
* build: add darwin-syscalls.h to release tarball
* linux: use IORING_SETUP_NO_SQARRAY when available
* linux: use IORING_OP_FTRUNCATE when available
* win: fix pNtQueryDirectoryFile check
* win: fix WriteFile() error translation
* win,fs: uv_fs_rmdir() to return ENOENT on file
* win,pipe: ipc code does not support async read
* netbsd: fix build
* win,fs: fix bug in fs__readdir
* unix: workaround gcc bug on armv7
* unix: work around arm-linux-gnueabihf-gcc bug
* unix: fix uv_tcp_keepalive in smartOS
* unix: fix uv_getrusage ru_maxrss on solaris
(From OE-Core rev: a5a347efe3d557033f87b9978999a2b704c02fc1)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
The license on chat.c was clarified to MIT with a license identifier
so add to LICENSE as such. The ccp.c change was an email address.
(From OE-Core rev: 980c5c8b8b4354c0caa4f41f701eb3005d6c8e3f)
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This is regular release of iproute2 corresponding to the 6.11 kernel.
Most of the changes are to the man pages.
Release is smaller than usual less activity during summer vacations
The two musl build fixes have been backported from upstream.
(From OE-Core rev: 1d826f145d0704f6981f6cccb5754fc41f2f2e33)
Signed-off-by: Changhyeok Bae <changhyeok.bae@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Sometimes default permissions on filesystems can be more permissive
e.g. 0644, this can make the private key file created here to inherit
those permissions and these permissions can then cause ssh server to
not allow ssh connections due to non-secure permissions on file.
Reported-by: Jean-Michel Papy <jean-michel.papy@exail.com>
(From OE-Core rev: 5c9f456cc39ca25123249ecb32b311736bd4e1f8)
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Jörg Sommer <joerg.sommer@navimatix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Changes since version 1.48.0:
==============================
* test: fix -Wpointer-to-int-cast on 32 bits systems
* build: add alias for libuv to CMakeLists.txt
* linux: create io_uring sqpoll ring lazily
* misc: run sample CI when code changes
* linux: fix uv_available_parallelism using cgroup
* doc: fix tty example segfault
* udp,unix: fix sendmsg use-after-free
* cygwin: implement uv_resident_set_memory
* win: almost fix race detecting ESRCH in uv_kill
* test: disable env var test under win32+asan
* unix,fs: fix realpath calls that use the system allocator
* linux: fix /proc/self/stat executable name parsing
* test,ci: fix [AM]San, disable ASLR
* win: remove _alloca usage
* unix: reinstate preadv/pwritev fallback code
* linux: don't delay EPOLL_CTL_DEL operations
* doc: fix typos in ChangeLog
* unix,win: error on zero delay tcp keepalive
* win: simplify uv_once implementation
* doc: correct udp socket options documentation
* linux: don't use sendmmsg() for single datagrams
* unix: fix fd leaks in SCM_RIGHTS error path
* win: robustify uv_os_getenv() error checking
* test: use newer ASSERT_MEM_EQ macro
* unix: de-duplicate conditions for using kqueue
* darwin: simplify uv_hrtime
* mailmap: update saghul's main email address
* win: remove no longer needed define
* doc: fix some typos
* linux,darwin: make `uv_fs_copyfile` behaves like `cp -r`
* dragonfly: disable SO_REUSEPORT for UDP socket bindings
* test: remove the obsolete HAVE_KQUEUE macro
* unix: use the presence of SOCK_* instead of OS macros for socketpair
* bsd: support pipe2() on *BSD
* unix: support SO_REUSEPORT with load balancing for TCP
* doc: add entries for extended getpw
* test: fix the flaky test-tcp-reuseport
* aix,ibmi: fix compilation errors in fs_copyfile
* unix: support SO_REUSEPORT with load balancing for UDP
* tcpkeepalive: distinguish OS versions and use proper time units
* win: map ERROR_BAD_EXE_FORMAT to UV_EFTYPE
* doc: add instruction how to install with Conan
* unix,win: remove unused req parameter from macros
* build: fix android ci build
* unix,win: export wtf8 functions properly
* hurd: add includes and macro prerequisites
* hurd: stub uv_thread_setpriority()
* ci: use macOS 12 for macOS and iOS builds
* darwin: fix crash on iOS(arm64)
* Create dependabot.yml for updating github-actions
* doc: correct names of Win32 APIs in fs.rst
* ci: bump upload and download-artifact versions
* ci: bump actions/setup-python from 4 to 5
* ci: bump KyleMayes/install-llvm-action from 1 to 2
* win,error: remap ERROR_NO_DATA to EAGAIN
* test: handle zero-length udp datagram
* misc: remove splay trees macros
* test,openbsd: remove superfluous ifdef guard
* win,fs: use posix delete semantics, if supported
* win: fix env var in uv_os_homedir and uv_os_tmpdir
* fsevents: detect watched directory removal
* ci: bump actions/checkout to 4
* linux: eliminate a read on eventfd per wakeup
* test: pipe_overlong_path handle ENAMETOOLONG
* win,fs: use the new Windows fast stat API
* win,pipe: fix race with concurrent readers
* win,signal: fix data race dispatching SIGWINCH
* build: ubsan fixes
* linux: disable SQPOLL io_uring by default
* win: fix fs.c ubsan failure
* test: rmdir can return `EEXIST` or `ENOTEMPTY`
* test: check for `UV_CHANGE` or `UV_RENAME` event
* unix,fs: silence -Wunused-result warning
* linux: support abstract unix socket autobinding
* kqueue: use EVFILT_USER for async if available
* win: remove deprecated GetVersionExW call
* doc: document uv_loop_option
* doc: fix the `uv_*_set_data` series of functions
* doc: properly label enumerations and types
* doc: document specific macOS fs_event behavior
* win,pipe: restore fallback handling for blocking pipes
* unix,win: remove unused rb-tree macro parameters
* win: compute parallelism from process cpu affinity
* win: use NtQueryInformationProcess in uv_os_getppid
* win,pipe: fix missing assignment to success
* win: fix uv_available_parallelism on win32
* win,pipe: fix another missing assignment to success
* kqueue: disallow ill-suited file descriptor kinds
* unix: restore tty attributes on handle close
* test: delete test with invalid assumption
* dragonflybsd: fix compilation failure
* test: run android tests on ci
* darwin: add udp mmsg support
* unix: work around arm-linux-gnueabihf-gcc bug
* unix: expand uv_available_parallelism() to support more platforms
* doc: add known issue in armv7
(From OE-Core rev: 5ba5cee38a6fb792eb85bc479e0af80f81aa0a9a)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
