summaryrefslogtreecommitdiff
path: root/meta-openembedded/meta-networking
diff options
context:
space:
mode:
authorAndrew Geissler <geissonator@yahoo.com>2023-09-11 15:41:39 +0300
committerAndrew Geissler <geissonator@yahoo.com>2023-09-18 14:19:32 +0300
commit5082cc7fedfff6c28a1406c79606b09012b134bc (patch)
treebc994073c7289536f801a16ca7e20d21c05ad7b6 /meta-openembedded/meta-networking
parent2edf0648b7c401072e7183c7f9e0e7c437e5f3f0 (diff)
downloadopenbmc-5082cc7fedfff6c28a1406c79606b09012b134bc.tar.xz
subtree updates openembedded poky
meta-openembedded: 491b7592f4..eff1b182c1: Alejandro Hernandez Samaniego (1): emacs: update to 29.1 Archana Polampalli (2): python3-pyroute2: fix ptest failure nodejs: upgrade 18.17.0 -> 18.17.1 Bartosz Golaszewski (1): libgpiod: update to v2.0.2 Beniamin Sandu (3): unbound: upgrade 1.17.1 -> 1.18.0 mbedtls: upgrade 3.4.0 -> 3.4.1 mbedtls: upgrade 2.28.3 -> 2.28.4 Benjamin Bara (3): libvpx: fix VPXTARGET for non-neon armv7a ne10: set incompatible for armv7 without neon openh264: make neon optional and disable if not supported Chaitanya Vadrevu (1): bolt: Add recipe Chen Qi (2): spice-protocol: fix populate_sdk error when spice is installed python3-blivetgui: switch from master to main Christophe Vu-Brugier (1): sg3-utils: upgrade 1.47 -> 1.48 Danik (2): python3-gspread: interface for google spreadsheet python3-piccata: piccata - a simple CoAP toolkit added Denys Zagorui (1): bpftool: add native and nativesdk support Emil Kronborg Andersen (3): lcms: add CVE_PRODUCT snappy: add CVE_PRODUCT libopus: add CVE_PRODUCT Enrico Jorns (1): microcom: add new recipe Ewa Kujawska (1): python3-oauth2client_4.1.2.bb: recipe added Frieder Schrempf (1): python3-can: Add missing runtime dependencies Gianfranco Costamagna (1): dlt-daemon: upgrade 2.18.9 -> 2.18.10 (commit: 0f2d4cfffada6f8448a2cb27995b38eb4271044f) Joe Slater (1): python3-inotify: fix tests Justin Bronder (5): python3-mypy-extensions: upgrade 0.4.3 -> 1.0.0 python3-types-setuptools: add 68.0.0.3 python3-typed-ast: remove EOL package python3-types-psutil: add 5.9.5.16 python3-mypy: upgrade 0.971 -> 1.5.0 Kai Kang (1): libmcrypt: fix multilib conflict Khem Raj (31): qad: Fix build with clang python3-dominate: Fix get_thread_context ptest on musl perfetto: Add SRCREV_FORMAT gosu: Define SRCREV_FORMAT libsdl2-ttf: Define SRCREV_FORMAT gosu: Define SRCREV_FORMAT sysdig: Add SRCREV_FORMAT cockpit: Upgrade to 298 release librelp: Fix function prototypes in tests jemalloc: Unbolt clang workaroud python3-protobuf: Fix build errors seen with clang mariadb: Fix build with libfmt 10.1+ librelp: Add packageconfigs for TLS implementations librelp: Fix ptests builds on musl librelp: Fix ptest installs to work with dash librelp: Add to meta-oe ptest image liburing: Upgrade to 2.4 release rsyslog: Enable openssl transport by default libio-socket-ssl-perl: Upgrade to 2.083 libfaketime: Fix build with clang libfaketime: Eanable LFS64 on musl python3-lz4: Drop using PYTHON_PN python3-lz4: Add missing rdeps needed for ptests rsyslog: Skip failing omfile-outchannel test on musl python3-m2crypto: Append architecture to SWIG_FEATURES instead of overriding networkmanager: Fix build on musl network-manager-applet: Fix build with musl/lld linker networkmanager-openvpn: Fix build with lld on musl openconnect: Upgrade to 9.12 openconnect: Fix build with GnuTLS v3.8.1 fontforge: Fix build with gettext 0.22 Kirk Hays (1): jack: Drop dependency on readline Leon Anavi (2): aml: add new recipe neatvnc: add new recipe Marek Vasut (2): libiio: Use tagged v0.25 libiio: Rename to versioned recipe filename Marine Vovard (1): python3-kivy: Require X11 or Wayland in DISTRO_FEATURES Mark Hatle (1): kconfig-frontends: Avoid using hard coded /usr/include paths Markus Volk (28): gvfs: update 1.51.1 -> 1.51.90 gnome-themes-extra: fix datadir path libnice: add graphviz-native dependency libcanberra: fix api-documentation build libgweather4: fix api-documentation build appstream: disable docs gtksourceview5: fix api-documentation build libpeas: fix api-documentation build nautilus: fix api-documentation build evince: fix api-documentation build usbids: add recipe libcacard: add recipe usbredir: upgrade 0.9.0 -> 0.13.0 spice: upgrade 0.14.2 -> 0.15.2 gnome-remote-desktop: add recipe libosinfo: add recipe gnome-boxes: add recipe pipewire: upgrade 0.3.77 -> 0.3.78 spice-gtk: fix api-documentation build flatpak: fix api-documentation build phodav: add recipe libdecor: update to latest commit spice-guest-vdagent: add recipe pipewire: upgrade 0.3.78 -> 0.3.79 spice: add missing dependency on orc spice-guest-vdagent: add missing dependencies libosinfo: build vapi only if gobject-introspection is enabled gnome-boxes: remove dependency on ovmf Martin Jansa (12): openh264: fix installed-vs-shared QA issue with multilib libfaketime: simplify packaging json-schema-validator: restore 0004-cmake-Use-GNUInstallDirs.patch phodav: make sure systemd files are packaged correctly sysbench: avoid -L/usr/lib32 and configure-unsafe QA issue mongodb: enable hardware crc32 only with crc in TUNE_FEATURES khronos-cts.inc: respect MLPREFIX when appending DEPENDS with anonymous python libcyusbserial: fix installed-vs-shipped QA issue with multilib tcpreplay: fix pcap detection with /usr/lib32 multilib libiio: use main branch instead of master webkitgtk: explicitly disable JIT for armv7* with softfp layer.conf: update LAYERSERIES_COMPAT for nanbield Ming Liu (1): libusbgx: usbgx.service: use Type=oneshot Mingli Yu (4): mariadb: Upgrade to 10.11.5 dialog: Update the SRC_URI gnulib: Update SRC_URI thrift: Remove buildpaths Nicolas Marguet (1): librelp: add ptest Parian Golchin (1): json-schema-validator: Updrade to 2.2.0 Pawel Langowski (1): qcbor: add recipe Petr Chernikov (1): Fix empty 0.0.0-0-g0 jemalloc version by adding --with-version Petr Gotthard (1): python3-sdbus: add recipe Robert Yang (1): frr: Fix CVE-2023-41358 and CVE-2023-41360 Roger Knecht (1): python3-schedule: add recipe Roland Hieber (1): fbida: update Upstream-Status for submitted patches Ross Burton (1): Revert "protobuf: stage protoc binary to sysroot" Soumya (1): yasm: fix CVE-2023-37732 Soumya Sambu (1): krb5: Upgrade 1.20.1 -> 1.20.2 Sourav Kumar Pramanik (1): meta-oe-components: Avoid usage of nobranch=1 Sourav Pramanik (2): rapidjson: Avoid usage of nobranch=1 nlohmann-json: Avoid usage of nobranch=1 Stanislav Angelovic (1): feat: bump sdbus-c++ up to v1.3.0 Sudip Mukherjee (1): qad: Add initial recipe Trevor Gamblin (1): python3-kivy: fix filename Tymoteusz Burak (2): ttf-google-fira: add recipe libfaketime: add recipe Vincent Davis Jr (1): cglm: upgrade v0.8.9 -> v0.9.1 Wang Mingyu (108): libcloudproviders: upgrade 0.3.1 -> 0.3.2 chrony: upgrade 4.3 -> 4.4 networkmanager: upgrade 1.42.8 -> 1.44.0 weechat: upgrade 4.0.2 -> 4.0.3 ctags: upgrade 6.0.20230730.0 -> 6.0.20230813.0 fmt: upgrade 10.0.0 -> 10.1.0 gensio: upgrade 2.6.7 -> 2.7.2 googletest: upgrade 1.13.0 -> 1.14.0 lvgl: upgrade 8.3.8 -> 8.3.9 postgresql: upgrade 15.3 -> 15.4 smartmontools: upgrade 7.3 -> 7.4 xdg-dbus-proxy: upgrade 0.1.4 -> 0.1.5 yaml-cpp: upgrade 0.7.0 -> 0.8.0 libtest-harness-perl: upgrade 3.44 -> 3.47 python3-alembic: upgrade 1.11.1 -> 1.11.2 python3-async-timeout: upgrade 4.0.2 -> 4.0.3 python3-bitarray: upgrade 2.8.0 -> 2.8.1 python3-cmake: upgrade 3.27.0 -> 3.27.2 python3-coverage: upgrade 7.2.7 -> 7.3.0 python3-dnspython: upgrade 2.4.1 -> 2.4.2 python3-google-api-python-client: upgrade 2.95.0 -> 2.96.0 python3-googleapis-common-protos: upgrade 1.59.1 -> 1.60.0 python3-joblib: upgrade 1.3.1 -> 1.3.2 python3-luma-oled: upgrade 3.12.0 -> 3.13.0 python3-platformdirs: upgrade 3.9.1 -> 3.10.0 python3-pycodestyle: upgrade 2.10.0 -> 2.11.0 python3-pyflakes: upgrade 3.0.1 -> 3.1.0 python3-pymisp: upgrade 2.4.173 -> 2.4.174 python3-rdflib: upgrade 6.3.2 -> 7.0.0 python3-regex: upgrade 2023.6.3 -> 2023.8.8 python3-rich: upgrade 13.4.2 -> 13.5.2 python3-sh: upgrade 2.0.4 -> 2.0.6 python3-tox: upgrade 4.6.4 -> 4.8.0 python3-tqdm: upgrade 4.65.0 -> 4.66.1 python3-uefi-firmware: upgrade 1.10 -> 1.11 python3-virtualenv: upgrade 20.24.2 -> 20.24.3 python3-web3: upgrade 6.7.0 -> 6.8.0 python3-yamlloader: upgrade 1.2.2 -> 1.3.2 python3-zeroconf: upgrade 0.71.4 -> 0.76.0 python3-protobuf: upgrade 4.23.4 -> 4.24.0 ctags: upgrade 6.0.20230813.0 -> 6.0.20230820.0 debootstrap: upgrade 1.0.128 -> 1.0.131 gensio: upgrade 2.7.2 -> 2.7.4 gnome-bluetooth: upgrade 42.5 -> 42.6 nginx: upgrade 1.25.1 -> 1.25.2 geary: update 44.0 -> 44.1 php: upgrade 8.2.8 -> 8.2.9 python3-redis: upgrade 4.6.0 -> 5.0.0 python3-alembic: upgrade 1.11.2 -> 1.11.3 python3-awesomeversion: upgrade 23.5.0 -> 23.8.0 python3-bitstring: upgrade 4.0.2 -> 4.1.0 python3-click: upgrade 8.1.6 -> 8.1.7 python3-engineio: upgrade 4.5.1 -> 4.6.0 python3-google-api-python-client: upgrade 2.96.0 -> 2.97.0 python3-humanize: upgrade 4.7.0 -> 4.8.0 python3-mypy: upgrade 1.5.0 -> 1.5.1 python3-oauth2client: upgrade 4.1.2 -> 4.1.3 python3-protobuf: upgrade 4.24.0 -> 4.24.1 python3-pycocotools: upgrade 2.0.6 -> 2.0.7 python3-pymetno: upgrade 0.10.0 -> 0.11.0 python3-pymongo: upgrade 4.4.1 -> 4.5.0 python3-pywbem: upgrade 1.6.1 -> 1.6.2 python3-sqlalchemy: upgrade 2.0.19 -> 2.0.20 python3-tox: upgrade 4.8.0 -> 4.10.0 python3-typeguard: upgrade 4.1.0 -> 4.1.2 python3-types-setuptools: upgrade 68.0.0.3 -> 68.1.0.0 python3-zeroconf: upgrade 0.76.0 -> 0.82.1 redis: upgrade 7.0.12 -> 7.2.0 weechat: upgrade 4.0.3 -> 4.0.4 traceroute: upgrade 2.1.2 -> 2.1.3 wireshark: upgrade 4.0.7 -> 4.0.8 adw-gtk3: upgrade 4.8 -> 4.9 ctags: upgrade 6.0.20230820.0 -> 6.0.20230827.0 debootstrap: upgrade 1.0.131 -> 1.0.132 dialog: upgrade 1.3-20210509 -> 1.3-20230209 fmt: upgrade 10.1.0 -> 10.1.1 gensio: upgrade 2.7.4 -> 2.7.5 iwd: upgrade 2.7 -> 2.8 libgphoto2: upgrade 2.5.30 -> 2.5.31 libzip: upgrade 1.10.0 -> 1.10.1 logwatch: upgrade 7.8 -> 7.9 thrift: upgrade 0.18.1 -> 0.19.0 libnet-dns-perl: upgrade 1.39 -> 1.40 python3-alembic: upgrade 1.11.3 -> 1.12.0 python3-argh: upgrade 0.28.1 -> 0.29.3 python3-asttokens: upgrade 2.2.1 -> 2.4.0 python3-bitstring: upgrade 4.1.0 -> 4.1.1 python3-cmake: upgrade 3.27.2 -> 3.27.4.1 python3-diskcache: upgrade 5.6.1 -> 5.6.3 python3-engineio: upgrade 4.6.0 -> 4.7.0 python3-imageio: upgrade 2.31.1 -> 2.31.3 python3-ipython: upgrade 8.14.0 -> 8.15.0 python3-kiwisolver: upgrade 1.4.4 -> 1.4.5 python3-langtable: upgrade 0.0.62 -> 0.0.63 python3-luma-core: upgrade 2.4.0 -> 2.4.1 python3-protobuf: upgrade 4.24.1 -> 4.24.2 python3-pymisp: upgrade 2.4.174 -> 2.4.175 python3-pymodbus: upgrade 3.4.1 -> 3.5.0 python3-smbus2: upgrade 0.4.2 -> 0.4.3 python3-snagboot: upgrade 1.1 -> 1.2 python3-socketio: upgrade 5.8.0 -> 5.9.0 python3-soupsieve: upgrade 2.4.1 -> 2.5 python3-tox: upgrade 4.10.0 -> 4.11.1 python3-typeguard: upgrade 4.1.2 -> 4.1.3 python3-types-setuptools: upgrade 68.1.0.0 -> 68.1.0.1 python3-virtualenv: upgrade 20.24.3 -> 20.24.4 python3-web3: upgrade 6.8.0 -> 6.9.0 python3-zeroconf: upgrade 0.82.1 -> 0.97.0 Willy Tu (1): abseil-cpp: upgrade 20230125.3 -> 20230802.0 Yi Zhao (7): nftables: upgrade 1.0.7 -> 1.0.8 libssh: upgrade 0.10.4 -> 0.10.5 samba: upgrade 4.18.5 -> 4.18.6 libyang: upgrade 2.1.55 -> 2.1.111 frr: Security fix CVE-2023-3748 vsomeip: add recipe ntp: add missing runtime dependencies Yogita Urade (2): poppler: fix CVE-2023-34872 hwloc: fix CVE-2022-47022 Βούλγαρη Αικατερίνη (1): collectd: build with rrdcached plugin poky: 71282bbc53..61531cd395: Adrian Freihofer (2): cmake.bbclass: cleanup spaces and tabs cmake.bbclass: refactor cmake args Alberto Planas (1): bitbake.conf: add bunzip2 in HOSTTOOLS Alexander Kanavin (18): lib/oe/recipeutils.py: accommodate SRCPV being optional and deprecated in version check regex python3-sphinx: correct version check systemd-bootchart: musl fixes have been rejected upstream openssl: build and install manpages only if they are enabled gettext: upgrade 0.21.1 -> 0.22 connman: update 1.41 -> 1.42 libcgroup: update 3.0.0 -> 3.1.0 perlcross: update 1.4.1 -> 1.5 perl: update 5.36.1 -> 5.38.0 groff: update 1.22.4 -> 1.23.0 libglu: update 9.0.2 -> 9.0.3 libpthread-stubs: update 0.4 -> 0.5 gpgme: upgrade 1.20.0 -> 1.22.0 libgudev: upgrade 237 -> 238 gnupg: upgrade 2.4.2 -> 2.4.3 gnutls: update 3.8.0 -> 3.8.1 runqemu: check permissions of available render nodes as well as their presence build-sysroots: target or native sysroot population need to be selected explicitly Alexis Lothoré (7): oeqa/utils/gitarchive: fix tag computation when creating archive oeqa/selftest: introduce gitarchive tests oeqa/utils/gitarchive: fix tag computation when creating archive oeqa/selftest/gitarchive: add tests about tags lisiting when no remote is configured oeqa/utils/gitarchive: allow to pass a logger to get_tags oeqa/utils/gitarchive: fall back to local tags when listing existing tags oeqa/utils/gitarchive: replace warning with info when reading local tags Angelo Ribeiro (1): ccache.bbclass: Add allowed list for native recipes Anuj Mittal (3): gstreamer1.0: upgrade 1.22.4 -> 1.22.5 harfbuzz: upgrade 8.0.1 -> 8.1.1 stress-ng: upgrade 0.15.08 -> 0.16.04 Archana Polampalli (1): vim: upgrade 9.0.1592 -> 9.0.1664 Benjamin Bara (6): rust-target-config: fix target_features for vfpv3d16 README: fix mail address in git example command pixman: avoid neon on unsupported machines nettle: avoid neon on unsupported machines ffmpeg: avoid neon on unsupported machines ghostscript: avoid neon on unsupported machines Bruce Ashfield (19): conf/machine: set preferred kernel to be 6.4 poky/poky-tiny: set preferred linux-yocto version to 6.4 linux-yocto/6.1: update to v6.1.44 linux-yocto/6.4: update to v6.4.10 linux-yocto/6.1: update to v6.1.45 kern-tools: include utility to post process config diffs linux-yocto/6.1: fix uninitialized read in nohz_full/isolcpus setup linux-yocto/6.4: fix uninitialized read in nohz_full/isolcpus setup linux-yocto/6.4: update to v6.4.11 linux-yocto/6.1: update to v6.1.46 linux-yocto/6.1: fix IRQ-80 warnings linux-yocto/6.4: fix IRQ-80 warnings linux-yocto/6.4: fix CONFIG_F2FS_IO_TRACE configuration warning linux-yocto/6.1: fix CONFIG_F2FS_IO_TRACE configuration warning linux-yocto/6.4: update to v6.4.12 linux-yocto/6.1: update to v6.1.50 linux-yocto/6.4: update to v6.4.13 linux-yocto/6.4: update to v6.4.14 linux-yocto/6.1: update to v6.1.51 Changqing Li (1): sqlite3: set CVE_STATUS for CVE-2023-36191 Chen Qi (6): bitbake: runqueue.py: fix PSI check logic cmake: drop OE specific environment variable support cmake.bbclass: fix allarch override syntax uninative.bbclass: sync to use UNINATIVE_STAGING_DIR stress-ng: disable DEBUG_BUILD oe-depends-dot: improve '-w' behavior Daniel Semkowicz (1): dev-manual: wic.rst: Update native tools build command David Reyna (3): bitbake: toaster: Update to Django 4.2 bitbake: toaster: import only used layers bitbake: toaster: accommodate missing 'Image Name' value in buildinfohelper Dmitry Baryshkov (4): mdadm: disable strace on rv32 arch linux-firmware: upgrade 20230625 -> 20230804 linux-firmware: package audio topology for Lenovo X13s linux-firmware: package Dragonboard 845c sensors DSP firmware Eilís 'pidge' Ní Fhlannagáin (1): nativesdk-intercept: Fix bad intercept chgrp/chown logic Emil Ekmečić (2): bitbake: fetch2: add Google Cloud Platform (GCP) fetcher Add GCP fetcher to list of supported protocols Emil Kronborg Andersen (2): dbus: add additional entries to CVE_PRODUCT libxkbcommon: add CVE_PRODUCT Etienne Cordonnier (2): vim: update obsolete comment migration-guides: system-conf -> systemd-conf Frederic Martinsons (5): rust: add cargo-c native recipe classes-recipe: add cargo_c.bbclass rust: provide examples for C library generation in rust oeqa/runtime/rust: correct rust test ref-manual: classes.rst: suppress rust-hello-world reference, add ptest-cargo class Jaeyoon Jung (1): cml1: Fix KCONFIG_CONFIG_COMMAND not conveyed fully in do_menuconfig Jasper Orschulko (1): cve_check: Fix cpe_id generation Joe Slater (1): file: fix call to localtime_r() Jon Mason (1): linux-yocto-dev: correct qemuarmv5 device tree location Jose Quaresma (3): systemd: fix efi dependency systemd-boot: remove old gummiboot TUNE_CCARGS pybootchartgui: also match do_compile and do_configure subtasks Joshua Watt (9): bitbake: bblayers/query: Add multiconfig support to `show-appends` bitbake: cooker: Fix error message bitbake: lib/bb: Add xattr and acl libraries buildtools-tarball: Add libacl classes/image_types: Add vfat image type bitbake: fetch2: git: Check if clone directory is a git repo wic: Add gpt-hybrid partition layout bitbake: fetch2: git: Remove useless try..else clause Add libacl to required packages Julien Stephan (4): less: upgrade 633 -> 643 less: add ptest support patch.py: use --absolute-git-dir instead of --show-toplevel to retrieve gitdir vulkan-samples: convert debugfix.patch to git format patch Kai Kang (1): webkitgtk: fix build failure with DEBUG_BUILD enabled Khem Raj (22): gnu-efi: Fix build on musl systemd-boot: Fix build on musl glibc: Upgrade to 2.38 release glibc: Enable fortify sources by defaults glibc: Drop --enable-tunables glibc: Fix SVE detection on aarch64 glibc-tests: Add missing libgcc runtime dependency kernel.bbclass: Use KERNEL_STRIP instead of STRIP build-sysroots: Add SUMMARY field tunes: Add support for sve instructions on armv8/armv9 arch-armv8,arch-armv9: Add sve based tune options python3: Increase default thread stack size on musl inetutils: Fix CVE-2023-40303 inetutils: Apply devtool formatting suggestions qemu: Fix CVE-2023-40360 core-image-ptest: Define a fallback for SUMMARY field dos2unix: upgrade 7.5.0 -> 7.5.1 python3: Fix ptests on musl tcl: Add a way to skip ptests rust-target-config: Map rust target to OE target libc-test: Depend on musl-staticdev apr: Fix ptests on musl Lee Chee Yang (2): migration-guides: add release notes for 4.2.3 migration-guides: add release notes for 4.0.12 Lei Maohui (1): glibc-package: Fix conflict error when enable multilib. Luan Rafael Carneiro (2): weston: Upgrade version 12.0.1 -> 12.0.2 weston: Add sysconfdir to FILES:${PN} Luca Ceresoli (1): Revert "oeqa/runtime/parselogs: Exclude preempt-rt error for now" Markus Niebel (2): wic: fix wrong attempt to create file system in upartitioned regions oeqa: wic: Add test for --no-table option Markus Volk (8): gtk4: upgrade 4.10.4 -> 4.10.5 libadwaita: upgrade 1.3.3 -> 1.3.4 gtk4: upgrade 4.10.5 -> 4.12.0 qemu: fix libudev packageconfig for systemd images qemu: build pulseaudio support depending on distro_feature qemu: add packageconfigs for fuse and dbus-display gtk4: upgrade 4.12.0 -> 4.12.1 mesa: add intel raytracing support to opencl build Martin Jansa (6): tcl: prevent installing another copy of tzdata cross-localedef-native: fix build on hosts with older glibc bitbake: runqueue: show more pressure data Makefile: remove from top-level directory bitbake: runqueue: show number of currently running bitbake threads when pressure changes webkitgtk: explicitly disable JIT for armv7* with softfp Michael Halstead (2): yocto-uninative: Update to 4.2 for glibc 2.38 yocto-uninative: Update to 4.3 Michael Opdenacker (26): scripts/create-pull-request: update URLs to git repositories manuals: create a dedicated "Contributor Guide" document ref-manual: classes.rst: fix location of _ref-classes-ccache ref-manual: update supported distro versions contributor-guide: add missing links to mailing lists contributor-guide: add section about why we use mailing lists contributor-guide: add recipe style guide ref-manual: remove AUTHOR variable contributor guide: call section "Reporting a defect" contributor-guide: remove obsolete pkg-config guidelines contributor guide: remove unnecessary information about mailing lists contributor-guide: clarification about patchtest contributor guide: update instructions for making and sharing changes dev-manual: disk-space: mention faster "find" command to trim sstate cache contributor-guide: move to 2nd place in top menu contributor-guide: submit-changes: simplify note contributor-guide: identify component: provide link to repositories contributor-guide: submit-changes: detail commit and patch creation contributor-guide: submit-changes: develop sending patches section manuals: README: update list of manuals contributor-guide: submit-changes: reorganize and develop sections contributor-guide: submit-changes: improvements to mailing lists section contributor-guide: submit-changes: commit guidelines for recipes contributor-guide: submit-changes: how to request push access to repositories README: update/fix contribution guidelines bitbake: doc: bitbake-user-manual: remove reference to SSTATE_MIRRORS variable Mikko Rapeli (4): openssh: capture ptest regression test failure logs oeqa selftest context.py: whitespace fix oeqa selftest context.py: remove warning from missing meta-selftest oeqa selftest context.py: fix git commands and set branch name Mingli Yu (2): qemu: Add qemu-common package webkitgtk: Add opengl to REQUIRED_DISTRO_FEATURES Narpat Mali (1): ffmpeg: add CVE_STATUS for CVE-2023-39018 Otavio Salvador (2): weston-init: remove misleading comment about udev rule weston-init: fix init code indentation Ovidiu Panait (1): mdadm: skip running 04update-uuid and 07revert-inplace testcases Paulo Neves (1): bitbake: siggen.py: Improve taskhash reproducibility Peter Kjellerstedt (3): bin_package.bbclass: Inhibit the default dependencies insane.bbclass: Remove an unused variable poky.conf: Switch to post release name/version Peter Marko (2): openssl: Upgrade 3.1.1 -> 3.1.2 gcc-runtime: remove bashism Poonam Jadhav (1): pixman: Remove duplication of license MIT Randolph Sapp (1): bitbake: gitsm: tolerate git-lfs in submodules Richard Purdie (39): bitbake: siggen: Fix indentation bitbake: siggen: Update debug resulttool/report: Avoid divide by zero gcc-testsuite: Fix qemu binary filtering code logic error gcc-testsuite: Set qemu options for mips correctly mips/tune-mips64r2: Set qemu cpu option correctly binutils-cross-testsuite: Pass TUNE_LDARGS to tests arch-mips: Ensure TUNE_LDARGS is set correctly gcc: Add patch to improve testsuite failures, particularly mips oeqa/runtime/parselogs: Exclude preempt-rt error for now qemu: Upgrade 8.0.3 -> 8.0.4 lib/package_manager: Improve repo artefact filtering Revert "oeqa/utils/gitarchive: fix tag computation when creating archive" lttng-modules: Upgrade 2.13.9 -> 2.13.10 lttng-tools: Upgrade 2.13.9 -> 2.13.10 pseudo: Fix to work with glibc 2.38 binutils: Add missing DEPENDS on pod2man build-sysroots: Ensure dependency chains are minimal bitbake: fetch2: Add new srcrev fetcher API base/package: Move source revision information from PV to PKGV recipes/classes/scripts: Drop SRCPV usage in OE-Core glibc: Add glibc 2.38 stable updates README: Update to point to new contributor guide bitbake: README: Update to point to new contributor guide bitbake: command: Avoid time intensive distractions for ping README: Clarify/standardise contributions process python3-numpy: Attempt to fix reproducibility issue bitbake: doc: Document challenges of tags with git fetcher bitbake: server/process: Add more timing debug qemu: Upgrade 8.0.4 -> 8.1.0 qemu: Add patches to resolve x86 and then mips boot issues mdadm: Disable further tests due to intermittent failures Revert "oeqa selftest context.py: fix git commands and set branch name" classes: Drop ';' delimiter from ROOTFS/IMAGE*COMMAND variables build-appliance-image: Update to master head revision layer.conf: Update to nanbield release series bitbake: bitbake: Update to 2.6.0 release series/version layer.conf: Update to nanbield release series build-appliance-image: Update to master head revision Ross Burton (47): connman-conf: don't take over any ethernet devices, not just eth0 meson.bbclass: add MESON_TARGET meson.bbclass:: update do_write_config vardeps systemd-boot: use MESON_TARGET systemd-boot: improve cross file generation p11-kit: fix build without qemu-usermode gi-docgen: depend on qemu-usermode MACHINE_FEATURES python3-pygobject: add explicit check for qemu-usermode MACHINE_FEATURE graphene: fix runtime detection of IEEE754 behaviour python3: ignore disputed CVE-2023-36632 procps: backport fix for CVE-2023-4016 linux/generate-cve-exclusions.py: fix comparison linux/cve-exclusions: update CVE_STATUS exclusions perf: enable verbose feature detection perf: add more PACKAGECONFIGs perf: fix perl binding support perf: split scripting PACKAGECONFIG into perl and python perf: disable perl support libtraceevent: build with Meson linux/generate-cve-exclusions: add version check warning linux-yocto: update CVE exclusions files site: remove at-spi2-core values inetutils: don't guess target paths inetutils: remove obsolete patches inetutils: remove obsolete cruft from do_configure glib-networking: enable build with GnuTLS if PKCS#11 was disabled glib-networking: use gnutls backend for TLS sockets cve-extra-exclusions: remove historic kernel CVEs which are handled now cve-extra-exclusions: remove BlueZ issues linux-yocto: update kernel CVE status linux: review some historic CVE_STATUS glib-2.0: explicitly enable strlcpy() scripts/oe-find-native-sysroot: use bitbake-getvar qemu-system-native: enable PNG support python3-build: upgrade to 1.0.0 glib-2.0: libelf has a configure option now, specify it harfbuzz: update PACKAGECONFIG pango: explictly enable/disable libthai libsoup-2.4: update PACKAGECONFIG libsoup: update PACKAGECONFIG wayland-utils: add libdrm PACKAGECONFIG cve-exclusion: review the last of the historical kernel CVEs busybox: remove coreutils dependency in busybox-ptest libgudev: explicitly disable tests and vapi linux: update CVE exclusions python3-build: upgrade to 1.0.3 avahi: handle invalid service types gracefully Ryan Eatmon (1): kernel.bbclass: Add force flag to rm calls Samantha Jalabert (1): bitbake: Fix disk space monitoring on cephfs Stéphane Veyret (1): nfs-utils: Add needed library to client Sudip Mukherjee (4): kea: upgrade to v2.4.0 cmake: upgrade to v3.27.4 dpkg: upgrade to v1.22.0 openssh: upgrade to v9.4p1 Tom Hochstein (1): linux-firmware: add firmware files for NXP BT chipsets Trevor Gamblin (16): python3-hypothesis: upgrade 6.82.0 -> 6.82.5 python3-more-itertools: upgrade 10.0.0 -> 10.1.0 python3-pygments: upgrade 2.15.1 -> 2.16.1 python3-wheel: upgrade 0.41.0 -> 0.41.1 maintainers.inc: Add self for unmaintained Python recipes oe-buildenv-internal: update required Python version python3-dbusmock: upgrade 0.29.0 -> 0.29.1 python3-numpy: upgrade 1.25.1 -> 1.25.2 python3-trove-classfiers: upgrade 2023.7.6 -> 2023.8.7 python3-setuptools: upgrade 68.0.0 -> 68.1.0 python3-dtc: upgrade 1.6.1 -> 1.7.0 python3-poetry: upgrade 1.6.1 -> 1.7.0 python3-git: upgrade 3.1.32 -> 3.1.34 python3-hypothesis: upgrade 6.82.7 -> 6.84.0 python3-pytest: upgrade 7.4.0 -> 7.4.1 python3-sphinx: upgrade 7.1.1 -> 7.2.5 Ulrich Ölmann (1): weston: fix comment Wang Mingyu (47): btrfs-tools: upgrade 6.3.1 -> 6.3.3 curl: upgrade 8.2.0 -> 8.2.1 file: upgrade 5.44 -> 5.45 gmp: upgrade 6.2.1 -> 6.3.0 xxhash: upgrade 0.8.1 -> 0.8.2 python3-editables: upgrade 0.4 -> 0.5 python3-markdown: upgrade 3.4.3 -> 3.4.4 python3-pathspec: upgrade 0.11.1 -> 0.11.2 python3-pip: upgrade 23.2 -> 23.2.1 python3-pyparsing: upgrade 3.1.0 -> 3.1.1 re2c: upgrade 3.0 -> 3.1 shaderc: upgrade 2023.4 -> 2023.5 sudo: upgrade 1.9.14p2 -> 1.9.14p3 libarchive: upgrade 3.6.2 -> 3.7.1 tar: upgrade 1.34 -> 1.35 bind: upgrade 9.18.17 -> 9.18.18 bluez5: upgrade 5.68 -> 5.69 ell: upgrade 0.57 -> 0.58 git: upgrade 2.41.0 -> 2.42.0 kbd: upgrade 2.6.1 -> 2.6.2 libconvert-asn1-perl: upgrade 0.33 -> 0.34 libdrm: upgrade 2.4.115 -> 2.4.116 libedit: upgrade 20221030-3.1 -> 20230828-3.1 libgit2: upgrade 1.7.0 -> 1.7.1 librepo: upgrade 1.15.1 -> 1.15.2 libsecret: upgrade 0.20.5 -> 0.21.0 libsndfile1: upgrade 1.2.0 -> 1.2.2 libxml2: upgrade 2.11.4 -> 2.11.5 mc: upgrade 4.8.29 -> 4.8.30 mpfr: upgrade 4.2.0 -> 4.2.1 neard: upgrade 0.18 -> 0.19 python3: upgrade 3.11.4 -> 3.11.5 pango: upgrade 1.50.14 -> 1.51.0 pigz: upgrade 2.7 -> 2.8 pkgconf: upgrade 1.9.5 -> 2.0.2 python3-setuptools: upgrade 68.1.0 -> 68.1.2 repo: upgrade 2.35 -> 2.36.1 shaderc: upgrade 2023.5 -> 2023.6 sqlite3: upgrade 3.42.0 -> 3.43.0 sysklogd: upgrade 2.5.0 -> 2.5.2 xz: upgrade 5.4.3 -> 5.4.4 zlib: upgrade 1.2.13 -> 1.3 python3-hypothesis: upgrade 6.82.5 -> 6.82.7 python3-pluggy: upgrade 1.2.0 -> 1.3.0 python3-sphinx-rtd-theme: upgrade 1.2.2 -> 1.3.0 python3-wheel: upgrade 0.41.1 -> 0.41.2 librepo: upgrade 1.15.2 -> 1.16.0 Yang Xu (1): meson: don't fail if no .pyc exists Yi Zhao (2): dhcpcd: upgrade 10.0.1 -> 10.0.2 dhcpcd: fix buffer overflow Yoann Congal (1): dev-manual: remove unsupported :term: markup inside markup Yogita Urade (1): dropbear: fix CVE-2023-36328 Yuta Hayama (3): linux/generate-cve-exclusions: print the generated time in UTC linux/generate-cve-exclusions: fix mishandling of boundary values linux-yocto: correct the wording in CVE_STATUS Zang Ruochen (6): tcf-agent: Disable non-building features on loongarch64 gcc-sanitizers: Add loongarch as a compatible architecture. goarch.bbclass: Add loongarch64 to go_map_arch qemuloongarch.inc:Change to use virtio-serial-pci kernel-devsrc: Fixed missing loongarch64 kernel source code when test_kernelmodules gcc: Fresh 0003-64-bit-multilib-hack.patch to add loongarch64 support Change-Id: I4d4752539711b34471002dd1817bb7c14a590675 Signed-off-by: Andrew Geissler <geissonator@yahoo.com>
Diffstat (limited to 'meta-openembedded/meta-networking')
-rw-r--r--meta-openembedded/meta-networking/conf/layer.conf2
-rw-r--r--meta-openembedded/meta-networking/recipes-connectivity/mbedtls/mbedtls/0001-aesce-do-not-specify-an-arch-version-when-enabling-c.patch2
-rw-r--r--meta-openembedded/meta-networking/recipes-connectivity/mbedtls/mbedtls/0002-aesce-use-correct-target-attribute-when-building-wit.patch2
-rw-r--r--meta-openembedded/meta-networking/recipes-connectivity/mbedtls/mbedtls_2.28.4.bb (renamed from meta-openembedded/meta-networking/recipes-connectivity/mbedtls/mbedtls_2.28.3.bb)2
-rw-r--r--meta-openembedded/meta-networking/recipes-connectivity/mbedtls/mbedtls_3.4.1.bb (renamed from meta-openembedded/meta-networking/recipes-connectivity/mbedtls/mbedtls_3.4.0.bb)2
-rw-r--r--meta-openembedded/meta-networking/recipes-connectivity/networkmanager/networkmanager-openvpn/0001-linker-script-Do-not-export-_IO_stdin_used.patch30
-rw-r--r--meta-openembedded/meta-networking/recipes-connectivity/networkmanager/networkmanager-openvpn_1.10.2.bb2
-rw-r--r--meta-openembedded/meta-networking/recipes-connectivity/networkmanager/networkmanager/0001-linker-scripts-Do-not-export-_IO_stdin_used.patch41
-rw-r--r--meta-openembedded/meta-networking/recipes-connectivity/networkmanager/networkmanager_1.44.0.bb (renamed from meta-openembedded/meta-networking/recipes-connectivity/networkmanager/networkmanager_1.42.8.bb)3
-rw-r--r--meta-openembedded/meta-networking/recipes-connectivity/openconnect/openconnect/0001-Shim-for-renaming-of-GNUTLS_NO_EXTENSIONS-in-GnuTLS-.patch43
-rw-r--r--meta-openembedded/meta-networking/recipes-connectivity/openconnect/openconnect_9.12.bb (renamed from meta-openembedded/meta-networking/recipes-connectivity/openconnect/openconnect_9.01.bb)5
-rw-r--r--meta-openembedded/meta-networking/recipes-connectivity/samba/samba_4.18.6.bb (renamed from meta-openembedded/meta-networking/recipes-connectivity/samba/samba_4.18.5.bb)2
-rw-r--r--meta-openembedded/meta-networking/recipes-filter/nftables/nftables_1.0.8.bb (renamed from meta-openembedded/meta-networking/recipes-filter/nftables/nftables_1.0.7.bb)2
-rw-r--r--meta-openembedded/meta-networking/recipes-irc/weechat/weechat_4.0.4.bb (renamed from meta-openembedded/meta-networking/recipes-irc/weechat/weechat_4.0.2.bb)2
-rw-r--r--meta-openembedded/meta-networking/recipes-protocols/frr/frr/CVE-2023-3748.patch54
-rw-r--r--meta-openembedded/meta-networking/recipes-protocols/frr/frr/CVE-2023-41358.patch106
-rw-r--r--meta-openembedded/meta-networking/recipes-protocols/frr/frr/CVE-2023-41360.patch35
-rw-r--r--meta-openembedded/meta-networking/recipes-protocols/frr/frr_8.4.4.bb3
-rw-r--r--meta-openembedded/meta-networking/recipes-protocols/vsomeip/vsomeip/0001-Fix-pkgconfig-dir-for-multilib.patch28
-rw-r--r--meta-openembedded/meta-networking/recipes-protocols/vsomeip/vsomeip/0002-Install-example-configuration-files-to-etc-vsomeip.patch28
-rw-r--r--meta-openembedded/meta-networking/recipes-protocols/vsomeip/vsomeip/0003-Do-not-build-external-gtest.patch160
-rw-r--r--meta-openembedded/meta-networking/recipes-protocols/vsomeip/vsomeip/0004-Do-not-specify-PIE-flag-explicitly.patch47
-rw-r--r--meta-openembedded/meta-networking/recipes-protocols/vsomeip/vsomeip_3.3.8.bb72
-rw-r--r--meta-openembedded/meta-networking/recipes-support/chrony/chrony/arm_eabi.patch20
-rw-r--r--meta-openembedded/meta-networking/recipes-support/chrony/chrony_4.4.bb (renamed from meta-openembedded/meta-networking/recipes-support/chrony/chrony_4.3.bb)2
-rw-r--r--meta-openembedded/meta-networking/recipes-support/ntp/ntp_4.2.8p17.bb9
-rw-r--r--meta-openembedded/meta-networking/recipes-support/spice/libcacard_2.8.1.bb13
-rw-r--r--meta-openembedded/meta-networking/recipes-support/spice/phodav_3.0.bb25
-rw-r--r--meta-openembedded/meta-networking/recipes-support/spice/spice-gtk_0.42.bb12
-rw-r--r--meta-openembedded/meta-networking/recipes-support/spice/spice-guest-vdagent_0.22.1.bb25
-rw-r--r--meta-openembedded/meta-networking/recipes-support/spice/spice-protocol_0.14.4.bb2
-rw-r--r--meta-openembedded/meta-networking/recipes-support/spice/spice/0001-Convert-pthread_t-to-be-numeric.patch59
-rw-r--r--meta-openembedded/meta-networking/recipes-support/spice/spice/0001-Fix-compile-errors-on-Linux-32bit-system.patch96
-rw-r--r--meta-openembedded/meta-networking/recipes-support/spice/spice/0001-configure.ac-explicitly-link-to-jpeg-lib.patch48
-rw-r--r--meta-openembedded/meta-networking/recipes-support/spice/spice_git.bb37
-rw-r--r--meta-openembedded/meta-networking/recipes-support/spice/usbredir_0.13.0.bb (renamed from meta-openembedded/meta-networking/recipes-support/spice/usbredir_0.9.0.bb)10
-rw-r--r--meta-openembedded/meta-networking/recipes-support/tcpreplay/tcpreplay/0001-configure.ac-unify-search-dirs-for-pcap-and-add-lib3.patch82
-rw-r--r--meta-openembedded/meta-networking/recipes-support/tcpreplay/tcpreplay_4.4.4.bb9
-rw-r--r--meta-openembedded/meta-networking/recipes-support/traceroute/traceroute_2.1.3.bb (renamed from meta-openembedded/meta-networking/recipes-support/traceroute/traceroute_2.1.2.bb)2
-rw-r--r--meta-openembedded/meta-networking/recipes-support/unbound/unbound/0001-contrib-add-yocto-compatible-init-script.patch80
-rw-r--r--meta-openembedded/meta-networking/recipes-support/unbound/unbound_1.18.0.bb (renamed from meta-openembedded/meta-networking/recipes-support/unbound/unbound_1.17.1.bb)8
-rw-r--r--meta-openembedded/meta-networking/recipes-support/wireshark/wireshark_4.0.8.bb (renamed from meta-openembedded/meta-networking/recipes-support/wireshark/wireshark_4.0.7.bb)2
42 files changed, 860 insertions, 354 deletions
diff --git a/meta-openembedded/meta-networking/conf/layer.conf b/meta-openembedded/meta-networking/conf/layer.conf
index 5716eb3f22..12ce08c8a1 100644
--- a/meta-openembedded/meta-networking/conf/layer.conf
+++ b/meta-openembedded/meta-networking/conf/layer.conf
@@ -16,7 +16,7 @@ LAYERVERSION_networking-layer = "1"
LAYERDEPENDS_networking-layer = "core"
LAYERDEPENDS_networking-layer += "openembedded-layer"
-LAYERSERIES_COMPAT_networking-layer = "mickledore"
+LAYERSERIES_COMPAT_networking-layer = "nanbield"
LICENSE_PATH += "${LAYERDIR}/licenses"
diff --git a/meta-openembedded/meta-networking/recipes-connectivity/mbedtls/mbedtls/0001-aesce-do-not-specify-an-arch-version-when-enabling-c.patch b/meta-openembedded/meta-networking/recipes-connectivity/mbedtls/mbedtls/0001-aesce-do-not-specify-an-arch-version-when-enabling-c.patch
index d98d8fa575..44d74754c9 100644
--- a/meta-openembedded/meta-networking/recipes-connectivity/mbedtls/mbedtls/0001-aesce-do-not-specify-an-arch-version-when-enabling-c.patch
+++ b/meta-openembedded/meta-networking/recipes-connectivity/mbedtls/mbedtls/0001-aesce-do-not-specify-an-arch-version-when-enabling-c.patch
@@ -8,7 +8,7 @@ Building mbedtls with different aarch64 tuning variations revealed
that we should use the crypto extensions without forcing a particular
architecture version or core, as that can create issues.
-Upstream-Status: Submitted [https://github.com/Mbed-TLS/mbedtls/pull/7834]
+Upstream-Status: Backport [https://github.com/Mbed-TLS/mbedtls/commit/471a975942dec76bf0ccb92b6c6da055385683fb]
Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com>
---
diff --git a/meta-openembedded/meta-networking/recipes-connectivity/mbedtls/mbedtls/0002-aesce-use-correct-target-attribute-when-building-wit.patch b/meta-openembedded/meta-networking/recipes-connectivity/mbedtls/mbedtls/0002-aesce-use-correct-target-attribute-when-building-wit.patch
index 4775c8ddb7..c8f6cb7509 100644
--- a/meta-openembedded/meta-networking/recipes-connectivity/mbedtls/mbedtls/0002-aesce-use-correct-target-attribute-when-building-wit.patch
+++ b/meta-openembedded/meta-networking/recipes-connectivity/mbedtls/mbedtls/0002-aesce-use-correct-target-attribute-when-building-wit.patch
@@ -9,7 +9,7 @@ the needed instructions instead of the broad crypto feature.
E.g.: https://github.com/llvm/llvm-project/issues/61645
-Upstream-Status: Pending
+Upstream-Status: Backport [https://github.com/Mbed-TLS/mbedtls/commit/aa4f6219014d863bed51453e5261178adc66be34]
Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com>
---
diff --git a/meta-openembedded/meta-networking/recipes-connectivity/mbedtls/mbedtls_2.28.3.bb b/meta-openembedded/meta-networking/recipes-connectivity/mbedtls/mbedtls_2.28.4.bb
index 4626e400f4..80ec8a5af5 100644
--- a/meta-openembedded/meta-networking/recipes-connectivity/mbedtls/mbedtls_2.28.3.bb
+++ b/meta-openembedded/meta-networking/recipes-connectivity/mbedtls/mbedtls_2.28.4.bb
@@ -23,7 +23,7 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=3b83ef96387f14655fc854ddc3c6bd57"
SECTION = "libs"
S = "${WORKDIR}/git"
-SRCREV = "981743de6fcdbe672e482b6fd724d31d0a0d2476"
+SRCREV = "aeb97a18913a86f051afab11b2c92c6be0c2eb83"
SRC_URI = "git://github.com/ARMmbed/mbedtls.git;protocol=https;branch=mbedtls-2.28 \
file://run-ptest \
"
diff --git a/meta-openembedded/meta-networking/recipes-connectivity/mbedtls/mbedtls_3.4.0.bb b/meta-openembedded/meta-networking/recipes-connectivity/mbedtls/mbedtls_3.4.1.bb
index 10fb7de8ca..a6f8583b23 100644
--- a/meta-openembedded/meta-networking/recipes-connectivity/mbedtls/mbedtls_3.4.0.bb
+++ b/meta-openembedded/meta-networking/recipes-connectivity/mbedtls/mbedtls_3.4.1.bb
@@ -23,7 +23,7 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=3b83ef96387f14655fc854ddc3c6bd57"
SECTION = "libs"
S = "${WORKDIR}/git"
-SRCREV = "1873d3bfc2da771672bd8e7e8f41f57e0af77f33"
+SRCREV = "72718dd87e087215ce9155a826ee5a66cfbe9631"
SRC_URI = "git://github.com/ARMmbed/mbedtls.git;protocol=https;branch=master \
file://0001-aesce-do-not-specify-an-arch-version-when-enabling-c.patch \
file://0002-aesce-use-correct-target-attribute-when-building-wit.patch \
diff --git a/meta-openembedded/meta-networking/recipes-connectivity/networkmanager/networkmanager-openvpn/0001-linker-script-Do-not-export-_IO_stdin_used.patch b/meta-openembedded/meta-networking/recipes-connectivity/networkmanager/networkmanager-openvpn/0001-linker-script-Do-not-export-_IO_stdin_used.patch
new file mode 100644
index 0000000000..eafd497ae2
--- /dev/null
+++ b/meta-openembedded/meta-networking/recipes-connectivity/networkmanager/networkmanager-openvpn/0001-linker-script-Do-not-export-_IO_stdin_used.patch
@@ -0,0 +1,30 @@
+From e09ba80e342b3b24bb2a46e11dae1c30cc61c75c Mon Sep 17 00:00:00 2001
+From: Khem Raj <raj.khem@gmail.com>
+Date: Sun, 3 Sep 2023 08:48:42 -0700
+Subject: [PATCH] linker-script: Do not export _IO_stdin_used
+
+This is glibc specific toolhain issue, it should have been handled in
+toolchain instead of exposing to applications. This was done to fix
+
+https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=835550
+
+Upstream-Status: Pending
+Signed-off-by: Khem Raj <raj.khem@gmail.com>
+---
+ linker-script-binary.ver | 1 -
+ 1 file changed, 1 deletion(-)
+
+diff --git a/linker-script-binary.ver b/linker-script-binary.ver
+index a2780c0..f030d35 100644
+--- a/linker-script-binary.ver
++++ b/linker-script-binary.ver
+@@ -1,6 +1,5 @@
+ {
+ global:
+- _IO_stdin_used;
+ local:
+ *;
+ };
+--
+2.42.0
+
diff --git a/meta-openembedded/meta-networking/recipes-connectivity/networkmanager/networkmanager-openvpn_1.10.2.bb b/meta-openembedded/meta-networking/recipes-connectivity/networkmanager/networkmanager-openvpn_1.10.2.bb
index 3114731f2a..024ef39361 100644
--- a/meta-openembedded/meta-networking/recipes-connectivity/networkmanager/networkmanager-openvpn_1.10.2.bb
+++ b/meta-openembedded/meta-networking/recipes-connectivity/networkmanager/networkmanager-openvpn_1.10.2.bb
@@ -10,6 +10,8 @@ inherit gnomebase useradd gettext systemd
SRC_URI = "${GNOME_MIRROR}/NetworkManager-openvpn/${@gnome_verdir("${PV}")}/NetworkManager-openvpn-${PV}.tar.xz"
+SRC_URI:append:libc-musl = " file://0001-linker-script-Do-not-export-_IO_stdin_used.patch"
+
SRC_URI[sha256sum] = "62f0f2a8782221b923f212ac2a8ebbc1002efd6a90ee945dad4adfb56d076d21"
S = "${WORKDIR}/NetworkManager-openvpn-${PV}"
diff --git a/meta-openembedded/meta-networking/recipes-connectivity/networkmanager/networkmanager/0001-linker-scripts-Do-not-export-_IO_stdin_used.patch b/meta-openembedded/meta-networking/recipes-connectivity/networkmanager/networkmanager/0001-linker-scripts-Do-not-export-_IO_stdin_used.patch
new file mode 100644
index 0000000000..71ad01f51c
--- /dev/null
+++ b/meta-openembedded/meta-networking/recipes-connectivity/networkmanager/networkmanager/0001-linker-scripts-Do-not-export-_IO_stdin_used.patch
@@ -0,0 +1,41 @@
+From 3ee6967689b3da30cc4551885d8bcdd44a7a9b52 Mon Sep 17 00:00:00 2001
+From: Khem Raj <raj.khem@gmail.com>
+Date: Thu, 31 Aug 2023 21:16:55 -0700
+Subject: [PATCH] linker-scripts: Do not export _IO_stdin_used
+
+This is glibc specific and it is not needed with musl.
+See https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=835550
+
+Upstream-Status: Pending
+Signed-off-by: Khem Raj <raj.khem@gmail.com>
+---
+ linker-script-binary.ver | 1 -
+ tools/create-exports-NetworkManager.sh | 1 -
+ 2 files changed, 2 deletions(-)
+
+diff --git a/linker-script-binary.ver b/linker-script-binary.ver
+index a2780c0..f030d35 100644
+--- a/linker-script-binary.ver
++++ b/linker-script-binary.ver
+@@ -1,6 +1,5 @@
+ {
+ global:
+- _IO_stdin_used;
+ local:
+ *;
+ };
+diff --git a/tools/create-exports-NetworkManager.sh b/tools/create-exports-NetworkManager.sh
+index ef4b381..60865ad 100755
+--- a/tools/create-exports-NetworkManager.sh
++++ b/tools/create-exports-NetworkManager.sh
+@@ -54,7 +54,6 @@ get_symbols_nm () {
+
+ get_symbols_explicit() {
+ cat <<EOF | _sort
+-_IO_stdin_used
+ EOF
+ }
+
+--
+2.42.0
+
diff --git a/meta-openembedded/meta-networking/recipes-connectivity/networkmanager/networkmanager_1.42.8.bb b/meta-openembedded/meta-networking/recipes-connectivity/networkmanager/networkmanager_1.44.0.bb
index 5d9c6f4274..84ef70c9af 100644
--- a/meta-openembedded/meta-networking/recipes-connectivity/networkmanager/networkmanager_1.42.8.bb
+++ b/meta-openembedded/meta-networking/recipes-connectivity/networkmanager/networkmanager_1.44.0.bb
@@ -31,8 +31,9 @@ SRC_URI = " \
file://enable-dhcpcd.conf \
file://enable-iwd.conf \
"
+SRC_URI:append:libc-musl = " file://0001-linker-scripts-Do-not-export-_IO_stdin_used.patch"
-SRC_URI[sha256sum] = "0337e7583d2ec5ade2ba2e8c625d2f09eeccda1d22836ee29aa72925d399c353"
+SRC_URI[sha256sum] = "edca09637d182f806b3b12d8c5623d7badbd73ccca1ae63be20d2f298779fb9f"
S = "${WORKDIR}/NetworkManager-${PV}"
diff --git a/meta-openembedded/meta-networking/recipes-connectivity/openconnect/openconnect/0001-Shim-for-renaming-of-GNUTLS_NO_EXTENSIONS-in-GnuTLS-.patch b/meta-openembedded/meta-networking/recipes-connectivity/openconnect/openconnect/0001-Shim-for-renaming-of-GNUTLS_NO_EXTENSIONS-in-GnuTLS-.patch
new file mode 100644
index 0000000000..9dd3da75ad
--- /dev/null
+++ b/meta-openembedded/meta-networking/recipes-connectivity/openconnect/openconnect/0001-Shim-for-renaming-of-GNUTLS_NO_EXTENSIONS-in-GnuTLS-.patch
@@ -0,0 +1,43 @@
+From e4ea64134cfe3763332c16dcac52dd894b935880 Mon Sep 17 00:00:00 2001
+From: Daniel Lenski <dlenski@gmail.com>
+Date: Tue, 22 Aug 2023 12:02:19 -0700
+Subject: [PATCH] Shim for renaming of GNUTLS_NO_EXTENSIONS in GnuTLS v3.8.1
+
+The constant `GNUTLS_NO_EXTENSIONS` was renamed in
+https://gitlab.com/gnutls/gnutls/-/commit/a7c4a04e (released in v3.8.1), and
+then a backwards-compatibility shim was belatedly added in
+https://gitlab.com/gnutls/gnutls/-/commit/abfa8634, which has not yet been
+released.
+
+We need to re-add the constant ourselves in order to build correctly with
+GnuTLS v3.8.1. This should fix
+https://gitlab.com/openconnect/openconnect/-/issues/650.
+
+Upstream-Status: Backport [https://git.infradead.org/users/dwmw2/openconnect.git/commit/7512698217c4104aade7a2df669a20de68f3bb8c]
+Signed-off-by: Daniel Lenski <dlenski@gmail.com>
+---
+ gnutls-dtls.c | 8 ++++++++
+ 1 file changed, 8 insertions(+)
+
+diff --git a/gnutls-dtls.c b/gnutls-dtls.c
+index 3fd78e95..50a4bb4e 100644
+--- a/gnutls-dtls.c
++++ b/gnutls-dtls.c
+@@ -39,6 +39,14 @@
+ # define GNUTLS_CIPHER_CHACHA20_POLY1305 23
+ #endif
+
++#if GNUTLS_VERSION_NUMBER >= 0x030801 && !defined(GNUTLS_NO_EXTENSIONS)
++/* XX: GNUTLS_NO_EXTENSIONS was renamed in GnuTLS v3.8.1. A
++ * backwards-compatibility shim was added in a subsequent commit, but
++ * not yet released.
++ */
++# define GNUTLS_NO_EXTENSIONS GNUTLS_NO_DEFAULT_EXTENSIONS
++#endif
++
+ /* sets the DTLS MTU and returns the actual tunnel MTU */
+ unsigned dtls_set_mtu(struct openconnect_info *vpninfo, unsigned mtu)
+ {
+--
+2.42.0
+
diff --git a/meta-openembedded/meta-networking/recipes-connectivity/openconnect/openconnect_9.01.bb b/meta-openembedded/meta-networking/recipes-connectivity/openconnect/openconnect_9.12.bb
index afdbdca4e3..7d0e5f2052 100644
--- a/meta-openembedded/meta-networking/recipes-connectivity/openconnect/openconnect_9.01.bb
+++ b/meta-openembedded/meta-networking/recipes-connectivity/openconnect/openconnect_9.12.bb
@@ -1,11 +1,12 @@
SUMMARY = "Open client for Cisco AnyConnect VPN"
LICENSE = "LGPL-2.1-only"
-LIC_FILES_CHKSUM = "file://COPYING.LGPL;md5=8c2e1ec1540fb3e0beb68361344cba7e"
+LIC_FILES_CHKSUM = "file://COPYING.LGPL;md5=4fbd65380cdd255951079008b364516c"
SRC_URI = " \
git://git.infradead.org/users/dwmw2/openconnect.git;branch=master \
+ file://0001-Shim-for-renaming-of-GNUTLS_NO_EXTENSIONS-in-GnuTLS-.patch \
"
-SRCREV = "5695cd6b0c7d42ca293ce0f00abcbe3d1ec4e609"
+SRCREV = "59f2e59eb3e436364ef82e630e5a2f88f32acd58"
DEPENDS = "vpnc libxml2 krb5 gettext-native"
RDEPENDS:${PN} = "bash python3-core vpnc-script"
diff --git a/meta-openembedded/meta-networking/recipes-connectivity/samba/samba_4.18.5.bb b/meta-openembedded/meta-networking/recipes-connectivity/samba/samba_4.18.6.bb
index 9d8802ff54..c40e102245 100644
--- a/meta-openembedded/meta-networking/recipes-connectivity/samba/samba_4.18.5.bb
+++ b/meta-openembedded/meta-networking/recipes-connectivity/samba/samba_4.18.6.bb
@@ -32,7 +32,7 @@ SRC_URI:append:libc-musl = " \
file://cmocka-uintptr_t.patch \
"
-SRC_URI[sha256sum] = "095256ac332e1d9fbf9b7ff7823f92a3233d3ed658ce7fc9b33905c2243f447f"
+SRC_URI[sha256sum] = "284c8a994ce989c87cd6808c390fcb9d00c36b21a0dc1a8a75474b67c9e715e7"
UPSTREAM_CHECK_REGEX = "samba\-(?P<pver>4\.18(\.\d+)+).tar.gz"
diff --git a/meta-openembedded/meta-networking/recipes-filter/nftables/nftables_1.0.7.bb b/meta-openembedded/meta-networking/recipes-filter/nftables/nftables_1.0.8.bb
index 8380bbd73d..00fe483bbd 100644
--- a/meta-openembedded/meta-networking/recipes-filter/nftables/nftables_1.0.7.bb
+++ b/meta-openembedded/meta-networking/recipes-filter/nftables/nftables_1.0.8.bb
@@ -9,7 +9,7 @@ DEPENDS = "libmnl libnftnl bison-native \
SRC_URI = "http://www.netfilter.org/projects/nftables/files/${BP}.tar.xz \
file://run-ptest \
"
-SRC_URI[sha256sum] = "c12ac941fff9adaedf17367d5ce213789b98a0d314277bc22b3d71e10891f412"
+SRC_URI[sha256sum] = "9373740de41a82dbc98818e0a46a073faeb8a8d0689fa4fa1a74399c32bf3d50"
inherit autotools manpages pkgconfig ptest
diff --git a/meta-openembedded/meta-networking/recipes-irc/weechat/weechat_4.0.2.bb b/meta-openembedded/meta-networking/recipes-irc/weechat/weechat_4.0.4.bb
index 8f1e06f390..d13764e4c7 100644
--- a/meta-openembedded/meta-networking/recipes-irc/weechat/weechat_4.0.2.bb
+++ b/meta-openembedded/meta-networking/recipes-irc/weechat/weechat_4.0.4.bb
@@ -10,7 +10,7 @@ SRC_URI = "https://weechat.org/files/src/weechat-${PV}.tar.xz \
file://0001-use-pkg-config-for-gcrypt-instead.patch \
"
-SRC_URI[sha256sum] = "0e648ee0d024c8099425ee60d41b272924ec8e19800ee8f1441090708834023c"
+SRC_URI[sha256sum] = "ae5f4979b5ada0339b84e741d5f7e481ee91e3fecd40a09907b64751829eb6f6"
inherit cmake pkgconfig
diff --git a/meta-openembedded/meta-networking/recipes-protocols/frr/frr/CVE-2023-3748.patch b/meta-openembedded/meta-networking/recipes-protocols/frr/frr/CVE-2023-3748.patch
new file mode 100644
index 0000000000..4a8a7e1afd
--- /dev/null
+++ b/meta-openembedded/meta-networking/recipes-protocols/frr/frr/CVE-2023-3748.patch
@@ -0,0 +1,54 @@
+From e61593f2ded104c4c7f01eb93e2b404e93e0c560 Mon Sep 17 00:00:00 2001
+From: harryreps <harryreps@gmail.com>
+Date: Fri, 3 Mar 2023 23:17:14 +0000
+Subject: [PATCH] babeld: fix #11808 to avoid infinite loops
+
+Replacing continue in loops to goto done so that index of packet buffer
+increases.
+
+Signed-off-by: harryreps <harryreps@gmail.com>
+
+CVE: CVE-2023-3748
+
+Upstream-Status: Backport
+[https://github.com/FRRouting/frr/commit/ae1e0e1fed77716bc06f181ad68c4433fb5523d0]
+
+Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
+---
+ babeld/message.c | 6 +++---
+ 1 file changed, 3 insertions(+), 3 deletions(-)
+
+diff --git a/babeld/message.c b/babeld/message.c
+index 7d45d91bf..2bf233796 100644
+--- a/babeld/message.c
++++ b/babeld/message.c
+@@ -439,7 +439,7 @@ parse_packet(const unsigned char *from, struct interface *ifp,
+ debugf(BABEL_DEBUG_COMMON,
+ "Received Hello from %s on %s that does not have all 0's in the unused section of flags, ignoring",
+ format_address(from), ifp->name);
+- continue;
++ goto done;
+ }
+
+ /*
+@@ -451,7 +451,7 @@ parse_packet(const unsigned char *from, struct interface *ifp,
+ debugf(BABEL_DEBUG_COMMON,
+ "Received Unicast Hello from %s on %s that FRR is not prepared to understand yet",
+ format_address(from), ifp->name);
+- continue;
++ goto done;
+ }
+
+ DO_NTOHS(seqno, message + 4);
+@@ -469,7 +469,7 @@ parse_packet(const unsigned char *from, struct interface *ifp,
+ debugf(BABEL_DEBUG_COMMON,
+ "Received hello from %s on %s should be ignored as that this version of FRR does not know how to properly handle interval == 0",
+ format_address(from), ifp->name);
+- continue;
++ goto done;
+ }
+
+ changed = update_neighbour(neigh, seqno, interval);
+--
+2.25.1
+
diff --git a/meta-openembedded/meta-networking/recipes-protocols/frr/frr/CVE-2023-41358.patch b/meta-openembedded/meta-networking/recipes-protocols/frr/frr/CVE-2023-41358.patch
new file mode 100644
index 0000000000..59633ef699
--- /dev/null
+++ b/meta-openembedded/meta-networking/recipes-protocols/frr/frr/CVE-2023-41358.patch
@@ -0,0 +1,106 @@
+From 9efd9a47db4f13ebf88c2ffe14301d7441bcb40d Mon Sep 17 00:00:00 2001
+From: Donatas Abraitis <donatas@opensourcerouting.org>
+Date: Tue, 22 Aug 2023 22:52:04 +0300
+Subject: [PATCH 1/2] bgpd: Do not process NLRIs if the attribute length is
+ zero
+
+```
+3 0x00007f423aa42476 in __GI_raise (sig=sig@entry=11) at ../sysdeps/posix/raise.c:26
+4 0x00007f423aef9740 in core_handler (signo=11, siginfo=0x7fffc414deb0, context=<optimized out>) at lib/sigevent.c:246
+5 <signal handler called>
+6 0x0000564dea2fc71e in route_set_aspath_prepend (rule=0x564debd66d50, prefix=0x7fffc414ea30, object=0x7fffc414e400)
+ at bgpd/bgp_routemap.c:2258
+7 0x00007f423aeec7e0 in route_map_apply_ext (map=<optimized out>, prefix=prefix@entry=0x7fffc414ea30,
+ match_object=match_object@entry=0x7fffc414e400, set_object=set_object@entry=0x7fffc414e400, pref=pref@entry=0x0) at lib/routemap.c:2690
+8 0x0000564dea2d277e in bgp_input_modifier (peer=peer@entry=0x7f4238f59010, p=p@entry=0x7fffc414ea30, attr=attr@entry=0x7fffc414e770,
+ afi=afi@entry=AFI_IP, safi=safi@entry=SAFI_UNICAST, rmap_name=rmap_name@entry=0x0, label=0x0, num_labels=0, dest=0x564debdd5130)
+ at bgpd/bgp_route.c:1772
+9 0x0000564dea2df762 in bgp_update (peer=peer@entry=0x7f4238f59010, p=p@entry=0x7fffc414ea30, addpath_id=addpath_id@entry=0,
+ attr=0x7fffc414eb50, afi=afi@entry=AFI_IP, safi=<optimized out>, safi@entry=SAFI_UNICAST, type=9, sub_type=0, prd=0x0, label=0x0,
+ num_labels=0, soft_reconfig=0, evpn=0x0) at bgpd/bgp_route.c:4374
+10 0x0000564dea2e2047 in bgp_nlri_parse_ip (peer=0x7f4238f59010, attr=attr@entry=0x7fffc414eb50, packet=0x7fffc414eaf0)
+ at bgpd/bgp_route.c:6249
+11 0x0000564dea2c5a58 in bgp_nlri_parse (peer=peer@entry=0x7f4238f59010, attr=attr@entry=0x7fffc414eb50,
+ packet=packet@entry=0x7fffc414eaf0, mp_withdraw=mp_withdraw@entry=false) at bgpd/bgp_packet.c:339
+12 0x0000564dea2c5d66 in bgp_update_receive (peer=peer@entry=0x7f4238f59010, size=size@entry=109) at bgpd/bgp_packet.c:2024
+13 0x0000564dea2c901d in bgp_process_packet (thread=<optimized out>) at bgpd/bgp_packet.c:2933
+14 0x00007f423af0bf71 in event_call (thread=thread@entry=0x7fffc414ee40) at lib/event.c:1995
+15 0x00007f423aebb198 in frr_run (master=0x564deb73c670) at lib/libfrr.c:1213
+16 0x0000564dea261b83 in main (argc=<optimized out>, argv=<optimized out>) at bgpd/bgp_main.c:505
+```
+
+With the configuration:
+
+```
+frr version 9.1-dev-MyOwnFRRVersion
+frr defaults traditional
+hostname ip-172-31-13-140
+log file /tmp/debug.log
+log syslog
+service integrated-vtysh-config
+!
+debug bgp keepalives
+debug bgp neighbor-events
+debug bgp updates in
+debug bgp updates out
+!
+router bgp 100
+ bgp router-id 9.9.9.9
+ no bgp ebgp-requires-policy
+ bgp bestpath aigp
+ neighbor 172.31.2.47 remote-as 200
+ !
+ address-family ipv4 unicast
+ neighbor 172.31.2.47 default-originate
+ neighbor 172.31.2.47 route-map RM_IN in
+ exit-address-family
+exit
+!
+route-map RM_IN permit 10
+ set as-path prepend 200
+exit
+!
+```
+
+The issue is that we try to process NLRIs even if the attribute length is 0.
+
+Later bgp_update() will handle route-maps and a crash occurs because all the
+attributes are NULL, including aspath, where we dereference.
+
+According to the RFC 4271:
+
+A value of 0 indicates that neither the Network Layer
+ Reachability Information field nor the Path Attribute field is
+ present in this UPDATE message.
+
+But with a fuzzed UPDATE message this can be faked. I think it's reasonable
+to skip processing NLRIs if both update_len and attribute_len are 0.
+
+Reported-by: Iggy Frankovic <iggyfran@amazon.com>
+Signed-off-by: Donatas Abraitis <donatas@opensourcerouting.org>
+
+Upstream-Status: Backport [https://github.com/FRRouting/frr/commit/28ccc24d38df1d51ed8a563507e5d6f6171fdd38]
+
+CVE: CVE-2023-41358
+
+Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
+---
+ bgpd/bgp_packet.c | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/bgpd/bgp_packet.c b/bgpd/bgp_packet.c
+index ec54943f3..3c2e73c59 100644
+--- a/bgpd/bgp_packet.c
++++ b/bgpd/bgp_packet.c
+@@ -1951,7 +1951,7 @@ static int bgp_update_receive(struct peer *peer, bgp_size_t size)
+ /* Network Layer Reachability Information. */
+ update_len = end - stream_pnt(s);
+
+- if (update_len) {
++ if (update_len && attribute_len) {
+ /* Set NLRI portion to structure. */
+ nlris[NLRI_UPDATE].afi = AFI_IP;
+ nlris[NLRI_UPDATE].safi = SAFI_UNICAST;
+--
+2.35.5
+
diff --git a/meta-openembedded/meta-networking/recipes-protocols/frr/frr/CVE-2023-41360.patch b/meta-openembedded/meta-networking/recipes-protocols/frr/frr/CVE-2023-41360.patch
new file mode 100644
index 0000000000..8ee3985b42
--- /dev/null
+++ b/meta-openembedded/meta-networking/recipes-protocols/frr/frr/CVE-2023-41360.patch
@@ -0,0 +1,35 @@
+From 9ecacf2176d2bac4b90e17d49facb8712c1b467a Mon Sep 17 00:00:00 2001
+From: Donatas Abraitis <donatas@opensourcerouting.org>
+Date: Sun, 20 Aug 2023 22:15:27 +0300
+Subject: [PATCH 2/2] bgpd: Don't read the first byte of ORF header if we are
+ ahead of stream
+
+Reported-by: Iggy Frankovic iggyfran@amazon.com
+Signed-off-by: Donatas Abraitis <donatas@opensourcerouting.org>
+
+Upstream-Status: Backport [https://github.com/FRRouting/frr/commit/9b855a692e68e0d16467e190b466b4ecb6853702]
+
+CVE: CVE-2023-41360
+
+Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
+---
+ bgpd/bgp_packet.c | 3 ++-
+ 1 file changed, 2 insertions(+), 1 deletion(-)
+
+diff --git a/bgpd/bgp_packet.c b/bgpd/bgp_packet.c
+index 3c2e73c59..f1d0e54c0 100644
+--- a/bgpd/bgp_packet.c
++++ b/bgpd/bgp_packet.c
+@@ -2375,7 +2375,8 @@ static int bgp_route_refresh_receive(struct peer *peer, bgp_size_t size)
+ * and 7 bytes of ORF Address-filter entry from
+ * the stream
+ */
+- if (*p_pnt & ORF_COMMON_PART_REMOVE_ALL) {
++ if (p_pnt < p_end &&
++ *p_pnt & ORF_COMMON_PART_REMOVE_ALL) {
+ if (bgp_debug_neighbor_events(peer))
+ zlog_debug(
+ "%pBP rcvd Remove-All pfxlist ORF request",
+--
+2.35.5
+
diff --git a/meta-openembedded/meta-networking/recipes-protocols/frr/frr_8.4.4.bb b/meta-openembedded/meta-networking/recipes-protocols/frr/frr_8.4.4.bb
index b87c3e78b0..826b687806 100644
--- a/meta-openembedded/meta-networking/recipes-protocols/frr/frr_8.4.4.bb
+++ b/meta-openembedded/meta-networking/recipes-protocols/frr/frr_8.4.4.bb
@@ -12,6 +12,9 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=b234ee4d69f5fce4486a80fdaf4a4263 \
SRC_URI = "git://github.com/FRRouting/frr.git;protocol=https;branch=stable/8.4 \
file://frr.pam \
file://0001-m4-ax_python.m4-check-for-python-x.y-emded.pc-not-py.patch \
+ file://CVE-2023-3748.patch \
+ file://CVE-2023-41358.patch \
+ file://CVE-2023-41360.patch \
"
SRCREV = "45e36c0c00a517ad1606135b18c5753e210cfc0d"
diff --git a/meta-openembedded/meta-networking/recipes-protocols/vsomeip/vsomeip/0001-Fix-pkgconfig-dir-for-multilib.patch b/meta-openembedded/meta-networking/recipes-protocols/vsomeip/vsomeip/0001-Fix-pkgconfig-dir-for-multilib.patch
new file mode 100644
index 0000000000..1c7eb17b28
--- /dev/null
+++ b/meta-openembedded/meta-networking/recipes-protocols/vsomeip/vsomeip/0001-Fix-pkgconfig-dir-for-multilib.patch
@@ -0,0 +1,28 @@
+From e8a1b7a176398c2a9b5969f1b48ae0e1aa30f4ec Mon Sep 17 00:00:00 2001
+From: Yi Zhao <yi.zhao@windriver.com>
+Date: Wed, 2 Mar 2022 14:51:13 +0800
+Subject: [PATCH] Fix pkgconfig dir for multilib
+
+Upstream-Status: Pending
+
+Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
+---
+ CMakeLists.txt | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/CMakeLists.txt b/CMakeLists.txt
+index add3edda..fea80b4a 100644
+--- a/CMakeLists.txt
++++ b/CMakeLists.txt
+@@ -602,7 +602,7 @@ endif()
+ # create pkg-config file
+ if(NOT WIN32)
+ configure_file(${VSOMEIP_NAME}.pc.in ${PROJECT_BINARY_DIR}/${VSOMEIP_NAME}.pc @ONLY)
+- install(FILES ${PROJECT_BINARY_DIR}/${VSOMEIP_NAME}.pc DESTINATION lib/pkgconfig)
++ install(FILES ${PROJECT_BINARY_DIR}/${VSOMEIP_NAME}.pc DESTINATION ${INSTALL_LIB_DIR}/pkgconfig)
+ endif()
+
+ ##############################################################################
+--
+2.25.1
+
diff --git a/meta-openembedded/meta-networking/recipes-protocols/vsomeip/vsomeip/0002-Install-example-configuration-files-to-etc-vsomeip.patch b/meta-openembedded/meta-networking/recipes-protocols/vsomeip/vsomeip/0002-Install-example-configuration-files-to-etc-vsomeip.patch
new file mode 100644
index 0000000000..c22ef697b2
--- /dev/null
+++ b/meta-openembedded/meta-networking/recipes-protocols/vsomeip/vsomeip/0002-Install-example-configuration-files-to-etc-vsomeip.patch
@@ -0,0 +1,28 @@
+From aea4c06ee2a0661d0c7b4773e846276a4f10e2e8 Mon Sep 17 00:00:00 2001
+From: Yi Zhao <yi.zhao@windriver.com>
+Date: Wed, 9 Mar 2022 11:48:44 +0800
+Subject: [PATCH] Install example configuration files to /etc/vsomeip
+
+Upstream-Status: Inappropriate [configuration]
+
+Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
+---
+ CMakeLists.txt | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/CMakeLists.txt b/CMakeLists.txt
+index fea80b4a..e7a92ec6 100644
+--- a/CMakeLists.txt
++++ b/CMakeLists.txt
+@@ -501,7 +501,7 @@ install(FILES ${PROJECT_BINARY_DIR}/vsomeip.pc DESTINATION lib/pkgconfig)
+ endif ()
+
+ install (
+- FILES ${EXAMPLE_CONFIG_FILES} DESTINATION etc/vsomeip COMPONENT config
++ FILES ${EXAMPLE_CONFIG_FILES} DESTINATION ${DEFAULT_CONFIGURATION_FOLDER} COMPONENT config
+ )
+
+ # Add all targets to the build-tree export set
+--
+2.25.1
+
diff --git a/meta-openembedded/meta-networking/recipes-protocols/vsomeip/vsomeip/0003-Do-not-build-external-gtest.patch b/meta-openembedded/meta-networking/recipes-protocols/vsomeip/vsomeip/0003-Do-not-build-external-gtest.patch
new file mode 100644
index 0000000000..370d8a0fe0
--- /dev/null
+++ b/meta-openembedded/meta-networking/recipes-protocols/vsomeip/vsomeip/0003-Do-not-build-external-gtest.patch
@@ -0,0 +1,160 @@
+From e012f91a73af7469ef6f660c3a6a752430a4d649 Mon Sep 17 00:00:00 2001
+From: Yi Zhao <yi.zhao@windriver.com>
+Date: Tue, 11 Jul 2023 16:53:46 +0800
+Subject: [PATCH] Do not build external gtest
+
+We don't need to build external gtest since we already depend on
+googletest.
+
+Upstream-Status: Inappropriate [embedded specific]
+
+Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
+---
+ CMakeLists.txt | 30 ++----------
+ test/network_tests/CMakeLists.txt | 80 -------------------------------
+ 2 files changed, 3 insertions(+), 107 deletions(-)
+
+diff --git a/CMakeLists.txt b/CMakeLists.txt
+index e7a92ec6..f6c680d4 100644
+--- a/CMakeLists.txt
++++ b/CMakeLists.txt
+@@ -18,14 +18,6 @@ set (VSOMEIP_VERSION ${VSOMEIP_MAJOR_VERSION}.${VSOMEIP_MINOR_VERSION}.${VSOMEIP
+ set (PACKAGE_VERSION ${VSOMEIP_VERSION}) # Used in documentation/doxygen.in
+ set (CMAKE_VERBOSE_MAKEFILE off)
+
+-if (NOT GTEST_ROOT)
+- if (DEFINED ENV{GTEST_ROOT})
+- set(GTEST_ROOT $ENV{GTEST_ROOT})
+- else()
+- set(GTEST_ROOT "n/a" CACHE STRING "Path to root folder of googletest. Must be set for building the tests.")
+- endif()
+-endif()
+-
+ ###################################################################################################
+ # see http://www.cmake.org/Wiki/CMake/Tutorials/How_to_create_a_ProjectConfig.cmake_file
+ ###################################################################################################
+@@ -630,27 +622,11 @@ find_package(benchmark)
+ ##############################################################################
+ # google test
+
+-# check for set environment variable
+-if(${GTEST_ROOT} STREQUAL "n/a")
+- message(STATUS "GTEST_ROOT is not defined. For building the tests the variable
+- GTEST_ROOT has to be defined. Tests can not be built.")
+- # early exit
+- return() # test can not be build -> make commands build_tests and check are not available
+-else()
+- message(STATUS "GTEST_ROOT is set. gtest root path set to ${GTEST_ROOT}")
++find_package(GTest)
++if (NOT GTest_FOUND)
++ message(WARNING "GTest is not found. Tests can not be built.")
+ endif()
+
+-# build google test as static library (always) -> therefore deactivate BUILD_SHARED_LIBS in case it is active
+-set(BUILD_SHARED_LIBS_AUTOMATIC_OFF 0)
+-if ("${BUILD_SHARED_LIBS}" STREQUAL "ON")
+- set(BUILD_SHARED_LIBS OFF)
+- set(BUILD_SHARED_LIBS_AUTOMATIC_OFF 1)
+-endif()
+-add_subdirectory(${GTEST_ROOT} ${CMAKE_CURRENT_BINARY_DIR}/gtest EXCLUDE_FROM_ALL)
+-if ("${BUILD_SHARED_LIBS_AUTOMATIC_OFF}" STREQUAL "1")
+- set(BUILD_SHARED_LIBS ON)
+- set(BUILD_SHARED_LIBS_AUTOMATIC_OFF 0)
+-endif()
+
+
+
+diff --git a/test/network_tests/CMakeLists.txt b/test/network_tests/CMakeLists.txt
+index 6a148604..a501b6a7 100644
+--- a/test/network_tests/CMakeLists.txt
++++ b/test/network_tests/CMakeLists.txt
+@@ -3633,86 +3633,6 @@ if(NOT ${TESTS_BAT})
+
+ endif()
+
+-##############################################################################
+-# Add for every test a dependency to gtest
+-##############################################################################
+-
+-if(NOT ${TESTS_BAT})
+- add_dependencies(${TEST_CONFIGURATION} gtest)
+- add_dependencies(${TEST_APPLICATION} gtest)
+- add_dependencies(${TEST_APPLICATION_SINGLE_PROCESS_NAME} gtest)
+- add_dependencies(${TEST_APPLICATION_AVAILABILITY_NAME} gtest)
+- add_dependencies(${TEST_MAGIC_COOKIES_CLIENT} gtest)
+- add_dependencies(${TEST_MAGIC_COOKIES_SERVICE} gtest)
+- add_dependencies(${TEST_HEADER_FACTORY} gtest)
+- add_dependencies(${TEST_HEADER_FACTORY_CLIENT} gtest)
+- add_dependencies(${TEST_HEADER_FACTORY_SERVICE} gtest)
+- add_dependencies(${TEST_LOCAL_ROUTING_SERVICE} gtest)
+- add_dependencies(${TEST_LOCAL_ROUTING_CLIENT} gtest)
+- add_dependencies(${TEST_EXTERNAL_LOCAL_ROUTING_SERVICE} gtest)
+- add_dependencies(${TEST_PAYLOAD_SERVICE} gtest)
+- add_dependencies(${TEST_PAYLOAD_CLIENT} gtest)
+- add_dependencies(${TEST_BIG_PAYLOAD_SERVICE} gtest)
+- add_dependencies(${TEST_BIG_PAYLOAD_CLIENT} gtest)
+- add_dependencies(${TEST_CLIENT_ID_SERVICE} gtest)
+- add_dependencies(${TEST_CLIENT_ID_UTILITY} gtest)
+- add_dependencies(${TEST_DEBOUNCE_CLIENT} gtest)
+- add_dependencies(${TEST_DEBOUNCE_SERVICE} gtest)
+- add_dependencies(${TEST_SUBSCRIBE_NOTIFY_SERVICE} gtest)
+- add_dependencies(${TEST_SUBSCRIBE_NOTIFY_ONE_EVENT_TWO_EVENTGROUPS_SERVICE} gtest)
+- add_dependencies(${TEST_SUBSCRIBE_NOTIFY_ONE_EVENT_TWO_EVENTGROUPS_CLIENT} gtest)
+- add_dependencies(${TEST_SUBSCRIBE_NOTIFY_ONE_SERVICE} gtest)
+- add_dependencies(${TEST_CPU_LOAD_SERVICE} gtest)
+- add_dependencies(${TEST_CPU_LOAD_CLIENT} gtest)
+- add_dependencies(${TEST_INITIAL_EVENT_SERVICE} gtest)
+- add_dependencies(${TEST_INITIAL_EVENT_CLIENT} gtest)
+- add_dependencies(${TEST_INITIAL_EVENT_AVAILABILITY_CHECKER} gtest)
+- add_dependencies(${TEST_INITIAL_EVENT_STOP_SERVICE} gtest)
+- add_dependencies(${TEST_OFFER_SERVICE} gtest)
+- add_dependencies(${TEST_OFFER_CLIENT} gtest)
+- add_dependencies(${TEST_OFFER_SERVICE_EXTERNAL} gtest)
+- add_dependencies(${TEST_OFFER_EXTERNAL_SD_MESSAGE_SENDER} gtest)
+- add_dependencies(${TEST_OFFERED_SERVICES_INFO_CLIENT} gtest)
+- add_dependencies(${TEST_OFFERED_SERVICES_INFO_SERVICE} gtest)
+- add_dependencies(${TEST_PENDING_SUBSCRIPTION_SERVICE} gtest)
+- add_dependencies(${TEST_PENDING_SUBSCRIPTION_CLIENT} gtest)
+- add_dependencies(${TEST_MALICIOUS_DATA_SERVICE} gtest)
+- add_dependencies(${TEST_MALICIOUS_DATA_CLIENT} gtest)
+- if (${TEST_SECURITY})
+- add_dependencies(${TEST_SECURITY_SERVICE} gtest)
+- add_dependencies(${TEST_SECURITY_CLIENT} gtest)
+- endif()
+- add_dependencies(${TEST_E2E_SERVICE} gtest)
+- add_dependencies(${TEST_E2E_CLIENT} gtest)
+- if (${TEST_E2E_PROFILE_04})
+- add_dependencies(${TEST_E2E_PROFILE_04_SERVICE} gtest)
+- add_dependencies(${TEST_E2E_PROFILE_04_CLIENT} gtest)
+- endif()
+- add_dependencies(${TEST_EVENT_SERVICE} gtest)
+- add_dependencies(${TEST_EVENT_CLIENT} gtest)
+- add_dependencies(${TEST_NPDU_SERVICE_ONE} gtest)
+- add_dependencies(${TEST_NPDU_SERVICE_TWO} gtest)
+- add_dependencies(${TEST_NPDU_SERVICE_THREE} gtest)
+- add_dependencies(${TEST_NPDU_SERVICE_FOUR} gtest)
+- add_dependencies(${TEST_NPDU_CLIENT_ONE} gtest)
+- add_dependencies(${TEST_NPDU_CLIENT_TWO} gtest)
+- add_dependencies(${TEST_NPDU_CLIENT_THREE} gtest)
+- add_dependencies(${TEST_NPDU_CLIENT_FOUR} gtest)
+- add_dependencies(${TEST_NPDU_DAEMON_CLIENT} gtest)
+- add_dependencies(${TEST_NPDU_DAEMON_SERVICE} gtest)
+- add_dependencies(${TEST_SOMEIPTP_CLIENT} gtest)
+- add_dependencies(${TEST_SOMEIPTP_SERVICE} gtest)
+- if(${TEST_SECOND_ADDRESS})
+- add_dependencies(${TEST_SECOND_ADDRESS_CLIENT} gtest)
+- add_dependencies(${TEST_SECOND_ADDRESS_SERVICE} gtest)
+- endif()
+- add_dependencies(${TEST_SUSPEND_RESUME_CLIENT} gtest)
+- add_dependencies(${TEST_SUSPEND_RESUME_SERVICE} gtest)
+-else()
+- add_dependencies(${TEST_LOCAL_ROUTING_SERVICE} gtest)
+- add_dependencies(${TEST_LOCAL_ROUTING_CLIENT} gtest)
+-endif()
+-
+ ##############################################################################
+ # Add tests to the target build_network_tests
+ ##############################################################################
+--
+2.25.1
+
diff --git a/meta-openembedded/meta-networking/recipes-protocols/vsomeip/vsomeip/0004-Do-not-specify-PIE-flag-explicitly.patch b/meta-openembedded/meta-networking/recipes-protocols/vsomeip/vsomeip/0004-Do-not-specify-PIE-flag-explicitly.patch
new file mode 100644
index 0000000000..970a37e50f
--- /dev/null
+++ b/meta-openembedded/meta-networking/recipes-protocols/vsomeip/vsomeip/0004-Do-not-specify-PIE-flag-explicitly.patch
@@ -0,0 +1,47 @@
+From 69805f9c8973a7a4d29297f8d50c29c88f981bee Mon Sep 17 00:00:00 2001
+From: Yi Zhao <yi.zhao@windriver.com>
+Date: Mon, 17 Jul 2023 14:33:32 +0800
+Subject: [PATCH] Do not specify PIE flag explicitly
+
+For nodistro distro, packages are built without PIE because
+security_flags.inc is not included by default. But in vsomeip, the PIE
+flag is explicitly specified in CMAKE_CXX_FLAGS, which will cause
+building with PIE even in nodistro, causing an error when linking the
+googletest static library:
+
+TOPDIR/tmp-glibc/work/cortexa53-oe-linux/vsomeip/3.1.20.3-r0/recipe-sysroot-native/usr/bin/aarch64-oe-linux/../../libexec/aarch64-oe-linux/gcc/aarch64-oe-linux/12.2.0/ld:
+TOPDIR/tmp-glibc/work/cortexa53-oe-linux/vsomeip/3.1.20.3-r0/recipe-sysroot/usr/lib/libgtest.a(gtest-all.cc.o)(.text+0x4a90):
+unresolvable R_AARCH64_ADR_PREL_PG_HI21 relocation against symbol `_ZSt4cerr@@GLIBCXX_3.4'
+
+Remove PIE flag from CMAKE_CXX_FLAGS and only enable PIE flag by
+including security_flags.inc.
+
+Upstream-Status: Inappropriate [embedded specific]
+
+Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
+---
+ CMakeLists.txt | 4 ++--
+ 1 file changed, 2 insertions(+), 2 deletions(-)
+
+diff --git a/CMakeLists.txt b/CMakeLists.txt
+index f6c680d4..dce1e701 100644
+--- a/CMakeLists.txt
++++ b/CMakeLists.txt
+@@ -60,12 +60,12 @@ if (${CMAKE_SYSTEM_NAME} MATCHES "Linux")
+ if (CMAKE_CXX_COMPILER_ID STREQUAL "GNU")
+ # This is only relevant for GCC and causes warnings on Clang
+ set(EXPORTSYMBOLS "-Wl,-export-dynamic -Wl,--version-script=${CMAKE_CURRENT_SOURCE_DIR}/exportmap.gcc")
+- set(OS_CXX_FLAGS "${OS_CXX_FLAGS} -pie -Wl,-z,relro,-z,now")
++ set(OS_CXX_FLAGS "${OS_CXX_FLAGS} -Wl,-z,relro,-z,now")
+ endif()
+
+ set(NO_DEPRECATED "")
+ set(OPTIMIZE "")
+- set(OS_CXX_FLAGS "${OS_CXX_FLAGS} -D_GLIBCXX_USE_NANOSLEEP -pthread -O -Wall -Wextra -Wformat -Wformat-security -Wconversion -fexceptions -fstrict-aliasing -fstack-protector-strong -fasynchronous-unwind-tables -fno-omit-frame-pointer -D_FORTIFY_SOURCE=2 -Wformat -Wformat-security -Wpedantic -Werror -fPIE")
++ set(OS_CXX_FLAGS "${OS_CXX_FLAGS} -D_GLIBCXX_USE_NANOSLEEP -pthread -O -Wall -Wextra -Wformat -Wformat-security -Wconversion -fexceptions -fstrict-aliasing -fstack-protector-strong -fasynchronous-unwind-tables -fno-omit-frame-pointer -D_FORTIFY_SOURCE=2 -Wformat -Wformat-security -Wpedantic")
+
+ # force all use of std::mutex and std::recursive_mutex to use runtime init
+ # instead of static initialization so mutexes can be hooked to enable PI as needed
+--
+2.25.1
+
diff --git a/meta-openembedded/meta-networking/recipes-protocols/vsomeip/vsomeip_3.3.8.bb b/meta-openembedded/meta-networking/recipes-protocols/vsomeip/vsomeip_3.3.8.bb
new file mode 100644
index 0000000000..b45bd2d63e
--- /dev/null
+++ b/meta-openembedded/meta-networking/recipes-protocols/vsomeip/vsomeip_3.3.8.bb
@@ -0,0 +1,72 @@
+SUMMARY = "The implementation of SOME/IP"
+DESCRIPTION = "The vsomeip stack implements the http://some-ip.com/ \
+(Scalable service-Oriented MiddlewarE over IP (SOME/IP)) protocol."
+HOMEPAGE = "https://github.com/COVESA/vsomeip"
+SECTION = "net"
+
+LICENSE = "MPL-2.0"
+LIC_FILES_CHKSUM = "file://LICENSE;md5=9741c346eef56131163e13b9db1241b3"
+
+SRC_URI = "git://github.com/GENIVI/${BPN}.git;branch=master;protocol=https;name=vsomeip \
+ file://0001-Fix-pkgconfig-dir-for-multilib.patch \
+ file://0002-Install-example-configuration-files-to-etc-vsomeip.patch \
+ file://0003-Do-not-build-external-gtest.patch \
+ file://0004-Do-not-specify-PIE-flag-explicitly.patch \
+ "
+
+SRCREV = "07464840f503670bc75997b8e926b54734ffa410"
+
+COMPATIBLE_HOST:mips = "null"
+COMPATIBLE_HOST:mips64 = "null"
+COMPATIBLE_HOST:powerpc = "null"
+COMPATIBLE_HOST:libc-musl = 'null'
+
+DEPENDS = "boost dlt-daemon googletest"
+
+S = "${WORKDIR}/git"
+
+inherit cmake pkgconfig
+
+EXTRA_OECMAKE = "-DINSTALL_LIB_DIR:PATH=${baselib} \
+ -DINSTALL_CMAKE_DIR:PATH=${baselib}/cmake/vsomeip3 \
+ "
+
+# For vsomeip-test
+EXTRA_OECMAKE += "-DTEST_IP_MASTER=10.0.3.1 \
+ -DTEST_IP_SLAVE=10.0.3.2 \
+ -DTEST_IP_SLAVE_SECOND=10.0.3.3 \
+ -DTEST_UID=1000 -DTEST_GID=1000 \
+ "
+
+RDEPENDS:${PN}-test = "bash lsof"
+
+do_compile:append() {
+ cmake_runcmake_build --target examples
+ cmake_runcmake_build --target build_tests
+}
+
+do_install:append() {
+ install -d ${D}/opt/${PN}-test/examples
+ install -m 0755 ${B}/examples/*-sample ${D}/opt/${PN}-test/examples
+ install -d ${D}/opt/${PN}-test/examples/routingmanagerd
+ install -m 0755 ${B}/examples/routingmanagerd/routingmanagerd \
+ ${D}/opt/${PN}-test/examples/routingmanagerd
+
+ install -d ${D}/opt/${PN}-test/test/test/common
+ cp -rf ${S}/test/common/examples_policies \
+ ${D}/opt/${PN}-test/test/test/common/
+
+ for d in unit_tests network_tests; do
+ install -d ${D}/opt/${PN}-test/test/$d
+ cp -f ${B}/test/$d/*test* ${D}/opt/${PN}-test/test/$d
+ done
+}
+
+PACKAGES += "${PN}-test"
+
+FILES:${PN}-dbg += " \
+ /opt/${PN}-test/.debug/* \
+ "
+FILES:${PN}-test = " \
+ /opt/${PN}-test \
+ "
diff --git a/meta-openembedded/meta-networking/recipes-support/chrony/chrony/arm_eabi.patch b/meta-openembedded/meta-networking/recipes-support/chrony/chrony/arm_eabi.patch
index 82c0e1b68b..b9bb374e53 100644
--- a/meta-openembedded/meta-networking/recipes-support/chrony/chrony/arm_eabi.patch
+++ b/meta-openembedded/meta-networking/recipes-support/chrony/chrony/arm_eabi.patch
@@ -1,4 +1,4 @@
-From 28b9f115e36e2133301b02fa02ad71a8efbed9b9 Mon Sep 17 00:00:00 2001
+From 71c44c214c0ab8dc8e9675e5e862f2e342fcb271 Mon Sep 17 00:00:00 2001
From: Joe Slater <jslater@windriver.com>
Date: Thu, 9 Mar 2017 10:58:06 -0800
Subject: [PATCH] chrony: fix build failure for arma9
@@ -28,10 +28,10 @@ Signed-off-by: Khem Raj <raj.khem@gmail.com>
1 file changed, 9 insertions(+), 6 deletions(-)
diff --git a/sys_linux.c b/sys_linux.c
-index f2baab1..14a9241 100644
+index 6849637..10f9a57 100644
--- a/sys_linux.c
+++ b/sys_linux.c
-@@ -484,7 +484,6 @@ SYS_Linux_EnableSystemCallFilter(int level, SYS_ProcessContext context)
+@@ -485,7 +485,6 @@ SYS_Linux_EnableSystemCallFilter(int level, SYS_ProcessContext context)
#endif
SCMP_SYS(gettimeofday),
SCMP_SYS(settimeofday),
@@ -39,15 +39,15 @@ index f2baab1..14a9241 100644
/* Process */
SCMP_SYS(clone),
-@@ -494,7 +493,6 @@ SYS_Linux_EnableSystemCallFilter(int level, SYS_ProcessContext context)
+@@ -495,7 +494,6 @@ SYS_Linux_EnableSystemCallFilter(int level, SYS_ProcessContext context)
SCMP_SYS(exit),
SCMP_SYS(exit_group),
SCMP_SYS(getpid),
- SCMP_SYS(getrlimit),
SCMP_SYS(getuid),
SCMP_SYS(getuid32),
- #ifdef __NR_rseq
-@@ -511,7 +509,6 @@ SYS_Linux_EnableSystemCallFilter(int level, SYS_ProcessContext context)
+ #ifdef __NR_membarrier
+@@ -515,7 +513,6 @@ SYS_Linux_EnableSystemCallFilter(int level, SYS_ProcessContext context)
/* Memory */
SCMP_SYS(brk),
SCMP_SYS(madvise),
@@ -55,7 +55,7 @@ index f2baab1..14a9241 100644
SCMP_SYS(mmap2),
SCMP_SYS(mprotect),
SCMP_SYS(mremap),
-@@ -571,8 +568,6 @@ SYS_Linux_EnableSystemCallFilter(int level, SYS_ProcessContext context)
+@@ -575,8 +572,6 @@ SYS_Linux_EnableSystemCallFilter(int level, SYS_ProcessContext context)
SCMP_SYS(sendmsg),
SCMP_SYS(sendto),
SCMP_SYS(shutdown),
@@ -64,15 +64,15 @@ index f2baab1..14a9241 100644
/* General I/O */
SCMP_SYS(_newselect),
-@@ -596,7 +591,6 @@ SYS_Linux_EnableSystemCallFilter(int level, SYS_ProcessContext context)
+@@ -600,7 +595,6 @@ SYS_Linux_EnableSystemCallFilter(int level, SYS_ProcessContext context)
#ifdef __NR_futex_time64
SCMP_SYS(futex_time64),
#endif
- SCMP_SYS(select),
SCMP_SYS(set_robust_list),
SCMP_SYS(write),
-
-@@ -604,6 +598,15 @@ SYS_Linux_EnableSystemCallFilter(int level, SYS_ProcessContext context)
+ SCMP_SYS(writev),
+@@ -609,6 +603,15 @@ SYS_Linux_EnableSystemCallFilter(int level, SYS_ProcessContext context)
SCMP_SYS(getrandom),
SCMP_SYS(sysinfo),
SCMP_SYS(uname),
diff --git a/meta-openembedded/meta-networking/recipes-support/chrony/chrony_4.3.bb b/meta-openembedded/meta-networking/recipes-support/chrony/chrony_4.4.bb
index 420cc78ca4..d4e03bc182 100644
--- a/meta-openembedded/meta-networking/recipes-support/chrony/chrony_4.3.bb
+++ b/meta-openembedded/meta-networking/recipes-support/chrony/chrony_4.4.bb
@@ -39,7 +39,7 @@ SRC_URI = "https://download.tuxfamily.org/chrony/chrony-${PV}.tar.gz \
SRC_URI:append:libc-musl = " \
file://0001-Fix-compilation-with-musl.patch \
"
-SRC_URI[sha256sum] = "9d0da889a865f089a5a21610ffb6713e3c9438ce303a63b49c2fb6eaff5b8804"
+SRC_URI[sha256sum] = "eafb07e6daf92b142200f478856dfed6efc9ea2d146eeded5edcb09b93127088"
DEPENDS = "pps-tools"
diff --git a/meta-openembedded/meta-networking/recipes-support/ntp/ntp_4.2.8p17.bb b/meta-openembedded/meta-networking/recipes-support/ntp/ntp_4.2.8p17.bb
index e80ea4c149..4ed58cd6a4 100644
--- a/meta-openembedded/meta-networking/recipes-support/ntp/ntp_4.2.8p17.bb
+++ b/meta-openembedded/meta-networking/recipes-support/ntp/ntp_4.2.8p17.bb
@@ -136,7 +136,14 @@ RPROVIDES:${PN}-utils = "${PN}-bin"
RREPLACES:${PN}-utils = "${PN}-bin"
RCONFLICTS:${PN}-utils = "${PN}-bin"
# ntpdc and ntpq were split out of ntp-utils
-RDEPENDS:${PN}-utils = "ntpdc ntpq"
+RDEPENDS:${PN}-utils = "ntpdc ntpq \
+ perl-module-lib \
+ perl-module-exporter \
+ perl-module-carp \
+ perl-module-version \
+ perl-module-socket \
+ perl-module-getopt-long \
+ "
SYSTEMD_PACKAGES = "${PN} sntp"
SYSTEMD_SERVICE:${PN} = "ntpd.service"
diff --git a/meta-openembedded/meta-networking/recipes-support/spice/libcacard_2.8.1.bb b/meta-openembedded/meta-networking/recipes-support/spice/libcacard_2.8.1.bb
new file mode 100644
index 0000000000..c81322e680
--- /dev/null
+++ b/meta-openembedded/meta-networking/recipes-support/spice/libcacard_2.8.1.bb
@@ -0,0 +1,13 @@
+SUMMARY = "This library provides emulation of smart cards to a virtual card reader running in a guest virtual machine."
+LICENSE = "LGPL-2.1-or-later"
+LIC_FILES_CHKSUM = "file://COPYING;md5=79ffa0ec772fa86740948cb7327a0cc7"
+
+DEPENDS = "glib-2.0 pcsc-lite nss"
+
+SRCREV = "7b07684ea6698d4885ff2062350ad8798a04de42"
+
+SRC_URI = "git://gitlab.freedesktop.org/spice/libcacard.git;protocol=https;branch=master"
+
+S = "${WORKDIR}/git"
+
+inherit meson pkgconfig
diff --git a/meta-openembedded/meta-networking/recipes-support/spice/phodav_3.0.bb b/meta-openembedded/meta-networking/recipes-support/spice/phodav_3.0.bb
new file mode 100644
index 0000000000..990e017022
--- /dev/null
+++ b/meta-openembedded/meta-networking/recipes-support/spice/phodav_3.0.bb
@@ -0,0 +1,25 @@
+SUMMARY = "phodav is a WebDav server implementation using libsoup (RFC 4918)."
+LICENSE = "LGPL-2.1-only"
+LIC_FILES_CHKSUM = "file://COPYING;md5=4fbd65380cdd255951079008b364516c"
+
+DEPENDS = " \
+ glib-2.0 \
+ libsoup \
+"
+
+GNOMEBASEBUILDCLASS = "meson"
+GTKDOC_MESON_OPTION = 'gtk_doc'
+GTKDOC_MESON_ENABLE_FLAG = 'enabled'
+GTKDOC_MESON_DISABLE_FLAG = 'disabled'
+
+PACKAGECONFIG ??= "avahi"
+PACKAGECONFIG[avahi] = "-Davahi=enabled,-Davahi=disabled,avahi"
+
+inherit pkgconfig gnomebase gettext gtk-doc
+
+EXTRA_OEMESON += "-Dsystemdsystemunitdir=${systemd_system_unitdir}"
+
+SRC_URI = "https://download.gnome.org/sources/phodav/3.0/phodav-${PV}.tar.xz;name=archive"
+SRC_URI[archive.sha256sum] = "392ec2d06d50300dcff1ef269a2a985304e29bce3520002fca29f2edc1d138d1"
+
+FILES:${PN} += "${libdir} ${systemd_system_unitdir}"
diff --git a/meta-openembedded/meta-networking/recipes-support/spice/spice-gtk_0.42.bb b/meta-openembedded/meta-networking/recipes-support/spice/spice-gtk_0.42.bb
index 27504392a6..3d34f222d0 100644
--- a/meta-openembedded/meta-networking/recipes-support/spice/spice-gtk_0.42.bb
+++ b/meta-openembedded/meta-networking/recipes-support/spice/spice-gtk_0.42.bb
@@ -40,19 +40,23 @@ DEPENDS = " \
"
DEPENDS:append:libc-musl = " libucontext"
-RDEPENDS:${PN} = "python3-pyparsing python3-six"
+RDEPENDS:${PN} = "python3-pyparsing python3-six usbids"
-inherit meson pkgconfig vala gobject-introspection features_check
+inherit meson pkgconfig vala gobject-introspection features_check gtk-doc
REQUIRED_DISTRO_FEATURES = "opengl"
GIR_MESON_ENABLE_FLAG = 'enabled'
GIR_MESON_DISABLE_FLAG = 'disabled'
+GTKDOC_MESON_OPTION = 'gtk_doc'
+GTKDOC_MESON_ENABLE_FLAG = 'enabled'
+GTKDOC_MESON_DISABLE_FLAG = 'disabled'
-PACKAGECONFIG ??= "${@bb.utils.contains('GI_DATA_ENABLED', 'True', 'vapi', '', d)}"
+PACKAGECONFIG ??= "${@bb.utils.contains('GI_DATA_ENABLED', 'True', 'vapi', '', d)} smartcard"
PACKAGECONFIG[vapi] = "-Dvapi=enabled,-Dvapi=disabled"
+PACKAGECONFIG[smartcard] = "-Dsmartcard=enabled,-Dsmartcard=disabled,libcacard"
-EXTRA_OEMESON = "-Dpie=true"
+EXTRA_OEMESON = "-Dpie=true -Dusb-ids-path=${datadir}/usb.ids "
EXTRA_OEMESON:append:libc-musl = " -Dcoroutine=libucontext"
LDFLAGS += "${@bb.utils.contains('DISTRO_FEATURES', 'ld-is-lld', ' -Wl,--undefined-version', '', d)}"
diff --git a/meta-openembedded/meta-networking/recipes-support/spice/spice-guest-vdagent_0.22.1.bb b/meta-openembedded/meta-networking/recipes-support/spice/spice-guest-vdagent_0.22.1.bb
new file mode 100644
index 0000000000..3af973eed1
--- /dev/null
+++ b/meta-openembedded/meta-networking/recipes-support/spice/spice-guest-vdagent_0.22.1.bb
@@ -0,0 +1,25 @@
+SUMMARY = "Spice agent for Linux"
+HOMEPAGE = "https://spice-space.org"
+LICENSE = "GPL-3.0-only"
+LIC_FILES_CHKSUM = "file://COPYING;md5=d32239bcb673463ab874e80d47fae504"
+
+SRCREV = "aa08162f036840d3e33502dc0a836b03b9cec97c"
+
+SRC_URI = "git://gitlab.freedesktop.org/spice/linux/vd_agent.git;protocol=https;branch=master"
+
+S = "${WORKDIR}/git"
+
+ANY_OF_DISTRO_FEATURES = "${GTK3DISTROFEATURES}"
+REQUIRED_DISTRO_FEATURES = "opengl x11"
+
+inherit autotools pkgconfig features_check
+
+DEPENDS = "glib-2.0 alsa-lib gtk4 dbus libdrm spice-protocol libxfixes xrandr xinerama libx11"
+
+EXTRA_OECONF = " \
+ --with-gtk4 \
+ --enable-pie \
+"
+
+FILES:${PN} += "${datadir}"
+
diff --git a/meta-openembedded/meta-networking/recipes-support/spice/spice-protocol_0.14.4.bb b/meta-openembedded/meta-networking/recipes-support/spice/spice-protocol_0.14.4.bb
index 9ce019ed86..3c8458baac 100644
--- a/meta-openembedded/meta-networking/recipes-support/spice/spice-protocol_0.14.4.bb
+++ b/meta-openembedded/meta-networking/recipes-support/spice/spice-protocol_0.14.4.bb
@@ -16,4 +16,6 @@ S = "${WORKDIR}/git"
inherit meson pkgconfig
+ALLOW_EMPTY:${PN} = "1"
+
BBCLASSEXTEND = "native nativesdk"
diff --git a/meta-openembedded/meta-networking/recipes-support/spice/spice/0001-Convert-pthread_t-to-be-numeric.patch b/meta-openembedded/meta-networking/recipes-support/spice/spice/0001-Convert-pthread_t-to-be-numeric.patch
deleted file mode 100644
index e63cbe3b72..0000000000
--- a/meta-openembedded/meta-networking/recipes-support/spice/spice/0001-Convert-pthread_t-to-be-numeric.patch
+++ /dev/null
@@ -1,59 +0,0 @@
-From 0726ce6d6f52e135e28f15ca8392568c84909b1d Mon Sep 17 00:00:00 2001
-From: Khem Raj <raj.khem@gmail.com>
-Date: Sat, 16 Jun 2018 16:21:39 -0700
-Subject: [PATCH] Convert pthread_t to be numeric
-
-typecast pthread_t to unsigned long
-pthread_t is implemented as a struct point in musl and its as per standard
-
-Signed-off-by: Khem Raj <raj.khem@gmail.com>
----
-Upstream-Status: Pending
-
- server/red-channel.c | 5 +++--
- server/red-client.c | 6 +++---
- 2 files changed, 6 insertions(+), 5 deletions(-)
-
---- a/server/red-channel.c
-+++ b/server/red-channel.c
-@@ -204,7 +204,7 @@ red_channel_constructed(GObject *object)
- {
- RedChannel *self = RED_CHANNEL(object);
-
-- red_channel_debug(self, "thread_id 0x%" G_GSIZE_MODIFIER "x", self->priv->thread_id);
-+ red_channel_debug(self, "thread_id 0x%" G_GSIZE_MODIFIER "x", (unsigned long)self->priv->thread_id);
-
- RedChannelClass *klass = RED_CHANNEL_GET_CLASS(self);
-
-@@ -479,7 +479,8 @@ void red_channel_remove_client(RedChanne
- "pthread_self (0x%" G_GSIZE_MODIFIER "x)."
- "If one of the threads is != io-thread && != vcpu-thread, "
- "this might be a BUG",
-- channel->priv->thread_id, pthread_self());
-+ (unsigned long)channel->priv->thread_id,
-+ (unsigned long)pthread_self());
- }
- spice_return_if_fail(channel);
- link = g_list_find(channel->priv->clients, rcc);
---- a/server/red-client.c
-+++ b/server/red-client.c
-@@ -180,7 +180,7 @@ void red_client_migrate(RedClient *clien
- "pthread_self (0x%" G_GSIZE_MODIFIER "x)."
- "If one of the threads is != io-thread && != vcpu-thread,"
- " this might be a BUG",
-- client->thread_id, pthread_self());
-+ (unsigned long)client->thread_id, (unsigned long)pthread_self());
- }
- FOREACH_CHANNEL_CLIENT(client, rcc) {
- if (red_channel_client_is_connected(rcc)) {
-@@ -199,8 +199,8 @@ void red_client_destroy(RedClient *clien
- "pthread_self (0x%" G_GSIZE_MODIFIER "x)."
- "If one of the threads is != io-thread && != vcpu-thread,"
- " this might be a BUG",
-- client->thread_id,
-- pthread_self());
-+ (unsigned long)client->thread_id,
-+ (unsigned long)pthread_self());
- }
- red_client_set_disconnecting(client);
- FOREACH_CHANNEL_CLIENT(client, rcc) {
diff --git a/meta-openembedded/meta-networking/recipes-support/spice/spice/0001-Fix-compile-errors-on-Linux-32bit-system.patch b/meta-openembedded/meta-networking/recipes-support/spice/spice/0001-Fix-compile-errors-on-Linux-32bit-system.patch
deleted file mode 100644
index d04bee95fa..0000000000
--- a/meta-openembedded/meta-networking/recipes-support/spice/spice/0001-Fix-compile-errors-on-Linux-32bit-system.patch
+++ /dev/null
@@ -1,96 +0,0 @@
-From a2af005b5d4a62839e56f42a43df793356e78f58 Mon Sep 17 00:00:00 2001
-From: "Hongzhi.Song" <hongzhi.song@windriver.com>
-Date: Tue, 4 Jun 2019 03:58:17 -0400
-Subject: [PATCH] Fix compile errors on Linux 32bit system
-
-There are folowing compile errors on Linux 32bit system:
-
-red-channel.c:207:73: error: format '%x' expects argument of type
-'unsigned int', but argument 7 has type 'long unsigned int' [-Werror=format=]
-|207| red_channel_debug(self, "thread_id 0x%" G_GSIZE_MODIFIER "x",
- ~~~~~~~~~~~~~~~~~~~~~^
- self->priv->thread_id);
- ~~~~~~~~~~~~~~~~~~~~~^
-
-On 32bit system, #define G_GSIZE_MODIFIER "". But the type of
-'self->priv->thread_id' is 'unsigned long int' which should match '%lx'
-not '%x'.
-
-So we should recovery the <0x%" G_GSIZE_MODIFIER "x"> to <0x%lx">.
-And others files modification are similar to G_GSIZE_MODIFIER.
-
-Signed-off-by: Hongzhi.Song <hongzhi.song@windriver.com>
----
-Upstream-Status: Submitted [https://lists.freedesktop.org/archives/spice-devel/2019-June/049285.html]
-
- server/red-channel.c | 6 +++---
- server/red-client.c | 8 ++++----
- server/red-replay-qxl.c | 2 +-
- 3 files changed, 8 insertions(+), 8 deletions(-)
-
-diff --git a/server/red-channel.c b/server/red-channel.c
-index f81142d..6a03ec2 100644
---- a/server/red-channel.c
-+++ b/server/red-channel.c
-@@ -202,7 +202,7 @@ red_channel_constructed(GObject *object)
- {
- RedChannel *self = RED_CHANNEL(object);
-
-- red_channel_debug(self, "thread_id 0x%" G_GSIZE_MODIFIER "x", (unsigned long)self->priv->thread_id);
-+ red_channel_debug(self, "thread_id 0x%lx", (unsigned long)self->priv->thread_id);
-
- RedChannelClass *klass = RED_CHANNEL_GET_CLASS(self);
-
-@@ -473,8 +473,8 @@ void red_channel_remove_client(RedChannel *channel, RedChannelClient *rcc)
-
- if (!pthread_equal(pthread_self(), channel->priv->thread_id)) {
- red_channel_warning(channel,
-- "channel->thread_id (0x%" G_GSIZE_MODIFIER "x) != "
-- "pthread_self (0x%" G_GSIZE_MODIFIER "x)."
-+ "channel->thread_id (0x%lx) != "
-+ "pthread_self (0x%lx)."
- "If one of the threads is != io-thread && != vcpu-thread, "
- "this might be a BUG",
- (unsigned long)channel->priv->thread_id,
-diff --git a/server/red-client.c b/server/red-client.c
-index 2b859cb..ff4da2a 100644
---- a/server/red-client.c
-+++ b/server/red-client.c
-@@ -174,8 +174,8 @@ void red_client_migrate(RedClient *client)
- RedChannel *channel;
-
- if (!pthread_equal(pthread_self(), client->thread_id)) {
-- spice_warning("client->thread_id (0x%" G_GSIZE_MODIFIER "x) != "
-- "pthread_self (0x%" G_GSIZE_MODIFIER "x)."
-+ spice_warning("client->thread_id (0x%lx) != "
-+ "pthread_self (0x%lx)."
- "If one of the threads is != io-thread && != vcpu-thread,"
- " this might be a BUG",
- (unsigned long)client->thread_id, (unsigned long)pthread_self());
-@@ -193,8 +193,8 @@ void red_client_destroy(RedClient *client)
- RedChannelClient *rcc;
-
- if (!pthread_equal(pthread_self(), client->thread_id)) {
-- spice_warning("client->thread_id (0x%" G_GSIZE_MODIFIER "x) != "
-- "pthread_self (0x%" G_GSIZE_MODIFIER "x)."
-+ spice_warning("client->thread_id (0x%lx) != "
-+ "pthread_self (0x%lx)."
- "If one of the threads is != io-thread && != vcpu-thread,"
- " this might be a BUG",
- (unsigned long)client->thread_id,
-diff --git a/server/red-replay-qxl.c b/server/red-replay-qxl.c
-index 6d34818..0deb406 100644
---- a/server/red-replay-qxl.c
-+++ b/server/red-replay-qxl.c
-@@ -264,7 +264,7 @@ static replay_t read_binary(SpiceReplay *replay, const char *prefix, size_t *siz
- exit(1);
- }
- if ((ret = inflate(&strm, Z_NO_FLUSH)) != Z_STREAM_END) {
-- spice_error("inflate error %d (disc: %" G_GSSIZE_FORMAT ")",
-+ spice_error("inflate error %d (disc: %li)",
- ret, *size - strm.total_out);
- if (ret == Z_DATA_ERROR) {
- /* last operation may be wrong. since we do the recording
---
-2.8.1
-
diff --git a/meta-openembedded/meta-networking/recipes-support/spice/spice/0001-configure.ac-explicitly-link-to-jpeg-lib.patch b/meta-openembedded/meta-networking/recipes-support/spice/spice/0001-configure.ac-explicitly-link-to-jpeg-lib.patch
deleted file mode 100644
index 2d05143dbf..0000000000
--- a/meta-openembedded/meta-networking/recipes-support/spice/spice/0001-configure.ac-explicitly-link-to-jpeg-lib.patch
+++ /dev/null
@@ -1,48 +0,0 @@
-From 6ffd9db8e02e411bda2f421abf7951dab6cf0e38 Mon Sep 17 00:00:00 2001
-From: Hongxu Jia <hongxu.jia@windriver.com>
-Date: Fri, 5 Feb 2021 01:43:44 -0800
-Subject: [PATCH] configure.ac: explicitly link to jpeg lib
-
-Since oe has added lib jpeg to the depends, explicitly link to jpeg lib
-to workaround build failure with autoconf 2.7
-
-Upstream-Status: Inappropriate [oe specific]
-
-Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
----
- configure.ac | 14 +-------------
- 1 file changed, 1 insertion(+), 13 deletions(-)
-
-diff --git a/configure.ac b/configure.ac
-index 1ce81f91..8bbb50de 100644
---- a/configure.ac
-+++ b/configure.ac
-@@ -191,24 +191,12 @@ AC_SUBST(SSL_CFLAGS)
- AC_SUBST(SSL_LIBS)
- AS_VAR_APPEND([SPICE_REQUIRES], [" openssl"])
-
--AC_CHECK_LIB(jpeg, jpeg_destroy_decompress,
-- AC_MSG_CHECKING([for jpeglib.h])
-- AC_TRY_CPP(
--[#include <stdio.h>
--#undef PACKAGE
--#undef VERSION
--#undef HAVE_STDLIB_H
--#include <jpeglib.h>],
-- JPEG_LIBS='-ljpeg'
-- AC_MSG_RESULT($jpeg_ok),
-- AC_MSG_ERROR([jpeglib.h not found])),
-- AC_MSG_ERROR([libjpeg not found]))
-+JPEG_LIBS='-ljpeg'
- AC_SUBST(JPEG_LIBS)
-
- AC_CHECK_LIB(z, deflate, Z_LIBS='-lz', AC_MSG_ERROR([zlib not found]))
- AC_SUBST(Z_LIBS)
-
--
- AC_ARG_ENABLE([manual],
- AS_HELP_STRING([--enable-manual=@<:@auto/yes/no@:>@],
- [Build SPICE manual]),
---
-2.29.2
-
diff --git a/meta-openembedded/meta-networking/recipes-support/spice/spice_git.bb b/meta-openembedded/meta-networking/recipes-support/spice/spice_git.bb
index 5732f509b1..a1f3010dd1 100644
--- a/meta-openembedded/meta-networking/recipes-support/spice/spice_git.bb
+++ b/meta-openembedded/meta-networking/recipes-support/spice/spice_git.bb
@@ -13,49 +13,32 @@ architectures."
LICENSE = "LGPL-2.1-or-later"
LIC_FILES_CHKSUM = "file://COPYING;md5=4fbd65380cdd255951079008b364516c"
-PV = "0.14.2+git${SRCPV}"
+PV = "0.15.2"
-SRCREV_spice = "7cbd70b931db76c69c89c2d9d5d704f67381a81b"
-SRCREV_spice-common = "4fc4c2db36c7f07b906e9a326a9d3dc0ae6a2671"
+SRCREV = "0c2c1413a8b387ea597a95b6c867470a7c56c8ab"
-SRCREV_FORMAT = "spice_spice-common"
-
-SRC_URI = " \
- git://anongit.freedesktop.org/spice/spice;name=spice;branch=master \
- git://anongit.freedesktop.org/spice/spice-common;destsuffix=git/subprojects/spice-common;name=spice-common;branch=master \
- file://0001-Convert-pthread_t-to-be-numeric.patch \
- file://0001-Fix-compile-errors-on-Linux-32bit-system.patch \
- file://0001-configure.ac-explicitly-link-to-jpeg-lib.patch \
-"
+SRC_URI = "gitsm://gitlab.freedesktop.org/spice/spice;branch=master;protocol=https"
S = "${WORKDIR}/git"
CVE_STATUS[CVE-2018-10893] = "fixed-version: patched already, caused by inaccurate CPE in the NVD database."
-inherit autotools gettext python3native python3-dir pkgconfig
+inherit meson gettext python3native python3-dir pkgconfig
-DEPENDS += "spice-protocol jpeg pixman alsa-lib glib-2.0 python3-pyparsing-native python3-six-native glib-2.0-native"
+DEPENDS = "spice-protocol jpeg pixman alsa-lib glib-2.0 gdk-pixbuf lz4 orc python3-pyparsing-native python3-six-native glib-2.0-native zlib"
DEPENDS:append:class-nativesdk = " nativesdk-openssl"
export PYTHON="${STAGING_BINDIR_NATIVE}/python3-native/python3"
-CFLAGS:append = " -Wno-error"
-
PACKAGECONFIG:class-native = ""
PACKAGECONFIG:class-nativesdk = ""
-PACKAGECONFIG ?= "sasl"
+PACKAGECONFIG ?= "sasl opus smartcard gstreamer"
-PACKAGECONFIG[celt051] = "--enable-celt051,--disable-celt051,celt051"
-PACKAGECONFIG[smartcard] = "--enable-smartcard,--disable-smartcard,libcacard,"
-PACKAGECONFIG[sasl] = "--with-sasl,--without-sasl,cyrus-sasl,"
-PACKAGECONFIG[client] = "--enable-client,--disable-client,,"
-PACKAGECONFIG[gui] = "--enable-gui,--disable-gui,,"
-PACKAGECONFIG[opus] = "--enable-opus,--disable-opus,libopus,"
-PACKAGECONFIG[opengl] = "--enable-opengl,--disable-opengl,,"
-PACKAGECONFIG[xinerama] = "--enable-xinerama,--disable-xinerama,libxinerama,"
+PACKAGECONFIG[gstreamer] = "-Dgstreamer=1.0,-Dgstreamer=no,gstreamer1.0 gstreamer1.0-plugins-base"
+PACKAGECONFIG[smartcard] = "-Dsmartcard=enabled,-Dsmartcard=disabled,libcacard,libcacard"
+PACKAGECONFIG[sasl] = "-Dsasl=true,-Dsasl=false,cyrus-sasl,"
+PACKAGECONFIG[opus] = "-Dopus=enabled,-Dopus=disabled,libopus,"
COMPATIBLE_HOST = '(x86_64|i.86|aarch64).*-linux'
BBCLASSEXTEND = "native nativesdk"
-
-EXTRA_OECONF:append:toolchain-clang = " --disable-werror"
diff --git a/meta-openembedded/meta-networking/recipes-support/spice/usbredir_0.9.0.bb b/meta-openembedded/meta-networking/recipes-support/spice/usbredir_0.13.0.bb
index 452491023e..3a73f9b189 100644
--- a/meta-openembedded/meta-networking/recipes-support/spice/usbredir_0.9.0.bb
+++ b/meta-openembedded/meta-networking/recipes-support/spice/usbredir_0.13.0.bb
@@ -5,16 +5,14 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=b234ee4d69f5fce4486a80fdaf4a4263 \
file://COPYING.LIB;md5=4b54a1fd55a448865a0b32d41598759d \
"
-DEPENDS = "libusb1"
+DEPENDS = "libusb1 glib-2.0"
-SRCREV = "bca484fc6f206ab9da2f73e8a0118fad45374d4e"
+SRCREV = "5fc0e1c43194d948545941d408f4c10d084eb6ed"
-SRC_URI = " \
- git://anongit.freedesktop.org/spice/usbredir;branch=master \
-"
+SRC_URI = "git://gitlab.freedesktop.org/spice/usbredir;branch=main;protocol=https"
S = "${WORKDIR}/git"
-inherit autotools pkgconfig
+inherit meson pkgconfig
BBCLASSEXTEND = "native nativesdk"
diff --git a/meta-openembedded/meta-networking/recipes-support/tcpreplay/tcpreplay/0001-configure.ac-unify-search-dirs-for-pcap-and-add-lib3.patch b/meta-openembedded/meta-networking/recipes-support/tcpreplay/tcpreplay/0001-configure.ac-unify-search-dirs-for-pcap-and-add-lib3.patch
new file mode 100644
index 0000000000..709d2cccbc
--- /dev/null
+++ b/meta-openembedded/meta-networking/recipes-support/tcpreplay/tcpreplay/0001-configure.ac-unify-search-dirs-for-pcap-and-add-lib3.patch
@@ -0,0 +1,82 @@
+From 5f8c78362b3b1e06f5adff2d4b140509c4799894 Mon Sep 17 00:00:00 2001
+From: Martin Jansa <Martin.Jansa@gmail.com>
+Date: Sun, 3 Sep 2023 12:31:59 +0200
+Subject: [PATCH] configure.ac: unify search dirs for pcap and add lib32
+
+* add lib32 because when building lib32-tcpreplay it's
+ impossible to set --with-libpcap so that it would find
+ both include files as well as the library in lib32 directory
+
+* maybe it would be beneficial to split --with-libpcap
+ into --with-libpcap-includedir --with-libpcap-libdir as this
+ already searches in the --with-libpcap value with and
+ without any "lib" prefix, but include files always expect
+ "include" dir there
+
+* most of this code was added in:
+ https://github.com/appneta/tcpreplay/commit/202b8e82f9fd3c84ce5804577caeb36a33baabe7#diff-49473dca262eeab3b4a43002adb08b4db31020d190caaad1594b47f1d5daa810R570
+
+* then search for
+ ${host_cpu} lib/${host_cpu} (without -${host_os} suffix)
+ and ${build_arch}-${host_os} lib/${build_arch}-${host_os}
+ was added, but only for search of dynamic library in:
+ https://github.com/appneta/tcpreplay/commit/c3d5236563985a99f8bb02c3f1bd6950e3929047
+
+* ${build_arch}-${host_os} lib/${build_arch}-${host_os}
+ was later replaced with:
+ lib/${MULTIARCH} ${MULTIARCH}
+ and it was added to static library search as well
+
+ but for dynamic library it was searching in reversed order:
+ ${MULTIARCH} lib/${MULTIARCH}
+ https://github.com/appneta/tcpreplay/commit/ed9e3a818bde04813144014561e62f018c9eb85f
+
+ I don't think this reversed order was intentional, just unify all 4 cases
+ to use the same directories in the same order
+
+Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
+Upstream-Status: Submitted [https://github.com/appneta/tcpreplay/pull/819]
+---
+ configure.ac | 8 ++++----
+ 1 file changed, 4 insertions(+), 4 deletions(-)
+
+diff --git a/configure.ac b/configure.ac
+index 387219de..26ba31a5 100644
+--- a/configure.ac
++++ b/configure.ac
+@@ -671,7 +671,7 @@ AC_ARG_WITH(libpcap,
+ LPCAPINCDIR=${testdir}
+ if test $dynamic_link = yes; then
+ for ext in .dylib .so .tbd ; do
+- for dir in . lib lib64 lib/${host_cpu}-${host_os} ${host_cpu}-${host_os} lib/${MULTIARCH} ${MULTIARCH}; do
++ for dir in . lib lib64 lib32 lib/${host_cpu}-${host_os} ${host_cpu}-${host_os} lib/${MULTIARCH} ${MULTIARCH}; do
+ sharefile=$(ls ${testdir}/$dir/libpcap${ext}* 2> /dev/null | sort | head -n1)
+ if test -n "${sharefile}"; then
+ LPCAP_LD_LIBRARY_PATH="$(dirname ${sharefile})"
+@@ -690,7 +690,7 @@ AC_ARG_WITH(libpcap,
+ dnl If dynamic library not found, try static
+ dnl
+ for ext in ${libext} .a .A.tbd ; do
+- for dir in . lib lib64 lib/${host_cpu}-${host_os} ${host_cpu}-${host_os} lib/${MULTIARCH} ${MULTIARCH}; do
++ for dir in . lib lib64 lib32 lib/${host_cpu}-${host_os} ${host_cpu}-${host_os} lib/${MULTIARCH} ${MULTIARCH}; do
+ staticfile=$(ls ${testdir}/$dir/libpcap${ext} 2> /dev/null | sort | head -n1)
+ if test -n "${staticfile}"; then
+ LPCAPLIB="${staticfile}"
+@@ -771,7 +771,7 @@ AC_ARG_WITH(libpcap,
+ LPCAPINCDIR="${testdir}/include"
+ if test $dynamic_link = yes; then
+ for ext in .dylib .so .tbd; do
+- for dir in . lib lib64 ${host_cpu} lib/${host_cpu} ${host_cpu}-${host_os} lib/${host_cpu}-${host_os} ${MULTIARCH} lib/${MULTIARCH}; do
++ for dir in . lib lib64 lib32 lib/${host_cpu}-${host_os} ${host_cpu}-${host_os} lib/${MULTIARCH} ${MULTIARCH}; do
+ sharefile=$(ls "${testdir}/$dir/libpcap${ext}" 2> /dev/null | sort | head -n1)
+ if test -n "${sharefile}"; then
+ LPCAPLIB="-L$(dirname ${sharefile}) -lpcap"
+@@ -790,7 +790,7 @@ AC_ARG_WITH(libpcap,
+ dnl If dynamic library not found, try static
+ dnl
+ for ext in ${libext} .a .A.tbd ; do
+- for dir in . lib lib64 lib/${host_cpu}-${host_os} ${host_cpu}-${host_os} lib/${MULTIARCH} ${MULTIARCH}; do
++ for dir in . lib lib64 lib32 lib/${host_cpu}-${host_os} ${host_cpu}-${host_os} lib/${MULTIARCH} ${MULTIARCH}; do
+ staticfile=$(ls "${testdir}/$dir/libpcap${ext}" 2> /dev/null | sort | head -n1)
+ if test -n "${staticfile}"; then
+ LPCAPLIB="${staticfile}"
diff --git a/meta-openembedded/meta-networking/recipes-support/tcpreplay/tcpreplay_4.4.4.bb b/meta-openembedded/meta-networking/recipes-support/tcpreplay/tcpreplay_4.4.4.bb
index c7d14e2ab6..53f17c9619 100644
--- a/meta-openembedded/meta-networking/recipes-support/tcpreplay/tcpreplay_4.4.4.bb
+++ b/meta-openembedded/meta-networking/recipes-support/tcpreplay/tcpreplay_4.4.4.bb
@@ -7,9 +7,10 @@ SECTION = "net"
LICENSE = "GPL-3.0-only"
LIC_FILES_CHKSUM = "file://docs/LICENSE;md5=10f0474a2f0e5dccfca20f69d6598ad8"
-SRC_URI = "https://github.com/appneta/tcpreplay/releases/download/v${PV}/tcpreplay-${PV}.tar.gz \
- file://0001-libopts.m4-set-POSIX_SHELL-to-bin-sh.patch \
- "
+SRC_URI = "https://github.com/appneta/${BPN}/releases/download/v${PV}/${BP}.tar.gz \
+ file://0001-libopts.m4-set-POSIX_SHELL-to-bin-sh.patch \
+ file://0001-configure.ac-unify-search-dirs-for-pcap-and-add-lib3.patch \
+"
SRC_URI[sha256sum] = "44f18fb6d3470ecaf77a51b901a119dae16da5be4d4140ffbb2785e37ad6d4bf"
@@ -17,7 +18,7 @@ UPSTREAM_CHECK_URI = "https://github.com/appneta/tcpreplay/releases"
DEPENDS = "libpcap"
-EXTRA_OECONF += "--with-libpcap=${STAGING_DIR_HOST}/usr"
+EXTRA_OECONF += "--with-libpcap=${STAGING_DIR_HOST}${prefix}"
inherit siteinfo autotools-brokensep
diff --git a/meta-openembedded/meta-networking/recipes-support/traceroute/traceroute_2.1.2.bb b/meta-openembedded/meta-networking/recipes-support/traceroute/traceroute_2.1.3.bb
index 51b581a4c6..ed75ba34de 100644
--- a/meta-openembedded/meta-networking/recipes-support/traceroute/traceroute_2.1.2.bb
+++ b/meta-openembedded/meta-networking/recipes-support/traceroute/traceroute_2.1.3.bb
@@ -17,7 +17,7 @@ UPSTREAM_CHECK_URI = "https://sourceforge.net/projects/traceroute/files/tracerou
SRC_URI = "${SOURCEFORGE_MIRROR}/traceroute/traceroute/${BP}/${BP}.tar.gz \
"
-SRC_URI[sha256sum] = "507c268f2977b4e218ce73e7ebed45ba0d970a8ca4995dd9cbb1ffe8e99b5b1f"
+SRC_URI[sha256sum] = "05ebc7aba28a9100f9bbae54ceecbf75c82ccf46bdfce8b5d64806459a7e0412"
EXTRA_OEMAKE = "VPATH=${STAGING_LIBDIR}"
LTOEXTRA += "-flto-partition=none"
diff --git a/meta-openembedded/meta-networking/recipes-support/unbound/unbound/0001-contrib-add-yocto-compatible-init-script.patch b/meta-openembedded/meta-networking/recipes-support/unbound/unbound/0001-contrib-add-yocto-compatible-init-script.patch
deleted file mode 100644
index 7bcf972612..0000000000
--- a/meta-openembedded/meta-networking/recipes-support/unbound/unbound/0001-contrib-add-yocto-compatible-init-script.patch
+++ /dev/null
@@ -1,80 +0,0 @@
-From 26614b6578056ec30b95013592e308bf24d924c2 Mon Sep 17 00:00:00 2001
-From: Beniamin Sandu <beniaminsandu@gmail.com>
-Date: Fri, 20 Nov 2020 23:00:20 +0200
-Subject: [PATCH] contrib: add yocto compatible init script
-
-Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com>
----
-Upstream-Status: Pending
-
- contrib/unbound.init | 20 ++++++++++----------
- 1 file changed, 10 insertions(+), 10 deletions(-)
-
-diff --git a/contrib/unbound.init b/contrib/unbound.init
-index c5bb52bb..4eba752b 100644
---- a/contrib/unbound.init
-+++ b/contrib/unbound.init
-@@ -19,11 +19,11 @@
- ### END INIT INFO
-
- # Source function library.
--. /etc/rc.d/init.d/functions
-+. /etc/init.d/functions
-
- exec="/usr/sbin/unbound"
- prog="unbound"
--config="/var/unbound/unbound.conf"
-+config="/etc/unbound/unbound.conf"
- pidfile="/var/unbound/unbound.pid"
- rootdir="/var/unbound"
-
-@@ -54,14 +54,14 @@ start() {
- [ -e ${rootdir}/dev/log ] || touch ${rootdir}/dev/log
- mount --bind -n /dev/log ${rootdir}/dev/log >/dev/null 2>&1;
- fi;
-- if ! egrep -q '^/[^[:space:]]+[[:space:]]+'${rootdir}'/dev/urandom' /proc/mounts; then
-+ if ! egrep -q '^/[^[:space:]]+[[:space:]]+'${rootdir}'/dev/random' /proc/mounts; then
- [ -d ${rootdir}/dev ] || mkdir -p ${rootdir}/dev ;
-- [ -e ${rootdir}/dev/urandom ] || touch ${rootdir}/dev/urandom
-- mount --bind -n /dev/urandom ${rootdir}/dev/urandom >/dev/null 2>&1;
-+ [ -e ${rootdir}/dev/random ] || touch ${rootdir}/dev/random
-+ mount --bind -n /dev/random ${rootdir}/dev/random >/dev/null 2>&1;
- fi;
-
- # if not running, start it up here
-- daemon $exec
-+ daemonize $exec
- retval=$?
- echo
- [ $retval -eq 0 ] && touch $lockfile
-@@ -71,15 +71,15 @@ start() {
- stop() {
- echo -n $"Stopping $prog: "
- # stop it here, often "killproc $prog"
-- killproc -p $pidfile $prog
-+ killproc $prog
- retval=$?
- echo
- [ $retval -eq 0 ] && rm -f $lockfile
- if egrep -q '^/[^[:space:]]+[[:space:]]+'${rootdir}'/dev/log' /proc/mounts; then
- umount ${rootdir}/dev/log >/dev/null 2>&1
- fi;
-- if egrep -q '^/[^[:space:]]+[[:space:]]+'${rootdir}'/dev/urandom' /proc/mounts; then
-- umount ${rootdir}/dev/urandom >/dev/null 2>&1
-+ if egrep -q '^/[^[:space:]]+[[:space:]]+'${rootdir}'/dev/random' /proc/mounts; then
-+ umount ${rootdir}/dev/random >/dev/null 2>&1
- fi;
- return $retval
- }
-@@ -99,7 +99,7 @@ force_reload() {
-
- rh_status() {
- # run checks to determine if the service is running or use generic status
-- status -p $pidfile $prog
-+ status $prog
- }
-
- rh_status_q() {
---
-2.25.1
-
diff --git a/meta-openembedded/meta-networking/recipes-support/unbound/unbound_1.17.1.bb b/meta-openembedded/meta-networking/recipes-support/unbound/unbound_1.18.0.bb
index ff3d879ea9..179af8050a 100644
--- a/meta-openembedded/meta-networking/recipes-support/unbound/unbound_1.17.1.bb
+++ b/meta-openembedded/meta-networking/recipes-support/unbound/unbound_1.18.0.bb
@@ -9,10 +9,8 @@ SECTION = "net"
LICENSE = "BSD-3-Clause"
LIC_FILES_CHKSUM = "file://LICENSE;md5=5308494bc0590c0cb036afd781d78f06"
-SRC_URI = "git://github.com/NLnetLabs/unbound.git;protocol=https;branch=master \
- file://0001-contrib-add-yocto-compatible-init-script.patch \
-"
-SRCREV = "90831af981221bbce1cd7b15055562336760e484"
+SRC_URI = "git://github.com/NLnetLabs/unbound.git;protocol=https;branch=master"
+SRCREV = "3795e374107ac7a5a977c516e144a3cd9b0da998"
inherit autotools pkgconfig systemd update-rc.d
@@ -39,7 +37,7 @@ do_install:append() {
install -m 0644 ${B}/contrib/unbound.service ${D}${systemd_unitdir}/system
install -d ${D}${sysconfdir}/init.d
- install -m 0755 ${S}/contrib/unbound.init ${D}${sysconfdir}/init.d/unbound
+ install -m 0755 ${S}/contrib/unbound.init_yocto ${D}${sysconfdir}/init.d/unbound
}
SYSTEMD_SERVICE:${PN} = "${BPN}.service"
diff --git a/meta-openembedded/meta-networking/recipes-support/wireshark/wireshark_4.0.7.bb b/meta-openembedded/meta-networking/recipes-support/wireshark/wireshark_4.0.8.bb
index d7df76a692..2117e9ee3c 100644
--- a/meta-openembedded/meta-networking/recipes-support/wireshark/wireshark_4.0.7.bb
+++ b/meta-openembedded/meta-networking/recipes-support/wireshark/wireshark_4.0.8.bb
@@ -17,7 +17,7 @@ SRC_URI = "https://1.eu.dl.wireshark.org/src/wireshark-${PV}.tar.xz \
UPSTREAM_CHECK_URI = "https://1.as.dl.wireshark.org/src"
-SRC_URI[sha256sum] = "a79f7b04cbff823e30452abf4bcb86773d8583eb62d5f71f16c09f019f8a8777"
+SRC_URI[sha256sum] = "16663585c0ffefd5593a6628d4a20cc8241b9703b11283cfe71ead2b750888c8"
PE = "1"