summaryrefslogtreecommitdiffstats
path: root/meta/recipes-connectivity
Commit message (Collapse)AuthorAgeFilesLines
* meta: Remove remnants of bluez4 supportAdrian Bunk2019-07-155-10/+8
| | | | | | | | | | | | | | bluez4 was removed from meta-oe 2 years ago. Simplfy the setup of the two level bluetooth and bluez4/bluez5 distro features by removing the bluez4/bluez5 distro features. This also removes the no longer required bluetooth class. (From OE-Core rev: dcf889e93401f7c4de0055d53271eacc3882eccc) Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssl: fix multilib files conflictKai Kang2019-07-111-1/+2
| | | | | | | | | | | | | Inherit multilib_script to fix openssl multilib files conflict issue: | Error: Transaction check error: | file /usr/bin/c_rehash conflicts between attempted installs of | lib32-openssl-bin-1.1.1c-r0.core2_32 and openssl-bin-1.1.1c-r0.core2_64 (From OE-Core rev: 01e17130f68a2b96c852756ea3dabef4164bc114) Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* mobile-broadband-provider-info: upgrade 20190116 -> 20190618Alexander Kanavin2019-06-301-2/+4
| | | | | | | | | The new version is using xsltproc utility (From OE-Core rev: a8c370a9ff2c6f7d7d516ef69cc2c4c8b8279f61) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bluez5: Remove obsolete dependency on dbus-glibAdrian Bunk2019-06-271-1/+1
| | | | | | | | | Upstream stopped using it in 2008. (From OE-Core rev: 5a73ba641f2fad8d0afa954e7c1a7d199263fbe0) Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh: Add missing DEPENDS on virtual/cryptRichard Purdie2019-06-201-1/+1
| | | | | | | | Changes to libxcrypt revealed a missing dependency in the openssh recipe. (From OE-Core rev: 0fd0a1b1f733a8d9978d64fa23e9d083a716de87) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssl: Fix a build bug on aarch64BE.Lei Maohui2019-06-192-0/+44
| | | | | | | | | | | Fix bug as following on aarch64BE: Error: operand 1 must be an integer register -- `rev v31.16b,v31.16b' (From OE-Core rev: f29572f70a89fd88ab3898d334c126422b66755c) Signed-off-by: Lei Maohui <leimaohui@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssl: fix failure of ptest test_shlibloadKai Kang2019-06-181-2/+2
| | | | | | | | | | It fails to run ptest case test_shlibload which requires libcrypto.so and libssl.so with version numbers now. (From OE-Core rev: 728cd93f45096a1ba0997b3812504d27194b1b49) Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh: fix potential signed overflow in pointer arithmaticHongxu Jia2019-06-181-7/+19
| | | | | | | | | | | | | | Pointer arithmatic results in implementation defined signed integer type, so that 'd - dst’ in strlcat may trigger signed overflow if pointer ‘d’ is near 0x7fffffff in 32 bits system. In case of ompilation by gcc or clang with -ftrapv option, the overflow would generate program abort. (From OE-Core rev: 1c4b8d797c76a08ebd1658066e9d32972b6abe58) Signed-off-by: hguo3 <heng.guo@windriver.com> Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bluez: fix test case failures with GCC 9Ross Burton2019-06-122-0/+302
| | | | | | | | | [ YOCTO #13366 ] (From OE-Core rev: ca737408bb7e9dd24f3a18e60fad290c6e539b7b) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* dhcp:"dhclient -x eth0" action is not correct.Jiping Ma2019-06-112-28/+0
| | | | | | | | | | | The action of "dhclient -x eth0" and "dhclient -r eth0" is same when enable ENABLE_GENTLE_SHUTDOWN. Disable ENABLE_GENTLE_SHUTDOWN that will use the default signal hander. (From OE-Core rev: 8e5c85332f222efd5ffddaa9da9272c6e42881f5) Signed-off-by: Jiping Ma <jiping.ma2@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh: Document skipped test dependencyRichard Purdie2019-06-081-0/+1
| | | | | | | | | | | In minimal images the agent-ptrace test is skipped unless gdb is installed which explains the difference in test counts. We don't want a build dependency on gdb and the test isn't critical so just document the dependency. (From OE-Core rev: d3f29e6e52367e124e3f543f970038c0332ad3e1) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh: Add missing ptest dependency on coreutilsRichard Purdie2019-06-071-1/+1
| | | | | | | | | | | This fixes the openssh tests in minimal images since they use options not present in the busybox versions of the commands. [YOCTO #13295] (From OE-Core rev: 4059d8eedc5cf6f46a834997b7120150fcec4c0e) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssl: Upgrade 1.1.1b -> 1.1.1cAdrian Bunk2019-06-073-75/+5
| | | | | | | | | Backported patch removed. (From OE-Core rev: 147d66495622332fdbf3cb1d0c3f0948402e1d1b) Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bluez5: fix obex packagingDiego Rondini2019-06-061-0/+3
| | | | | | | | | | | | | Ship some obex files in the appropriate obex package. This fixes boot error: [FAILED] Failed to start Bluetooth OBEX service. that was caused by the obex.service being shipped in the main package, rather than the -obex (that includes obexd). (From OE-Core rev: bc9f5f4c107ea34171aad3245a49b25b671d8679) Signed-off-by: Diego Rondini <diego.rondini@kynetics.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh: Upgrade 7.9p1 -> 8.0p1Zang Ruochen2019-05-315-629/+2
| | | | | | | | | | | | | | | Upgrade from openssh_7.9p1.bb to openssh_8.0p1.bb. -openssh/0001-upstream-Have-progressmeter-force-an-update-at-the-b.patch -openssh/CVE-2018-20685.patch -openssh/CVE-2019-6109.patch -openssh/CVE-2019-6111.patch -Removed since these are included in 8.0p1. (From OE-Core rev: 7e21cfec4de3d66585c92632e1503df54a89b79a) Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* inetutils: fix wrong package nameChangqing Li2019-05-301-1/+1
| | | | | | | | | | | fix below error: file /etc/xinetd.d/telnet conflicts between attempted installs of netkit-telnet-0.17-r0.i586 and inetutils-telnetd-1.9.4-r0.i586 file /usr/sbin/in.telnetd conflicts between attempted installs of netkit-telnet-0.17-r0.i586 and inetutils-telnetd-1.9.4-r0.i586 (From OE-Core rev: 1ceaaab6aab449f05a6e5f984bd20fa33d84937d) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* connman: add networkmanager as rconflictChangqing Li2019-05-301-0/+1
| | | | | | | (From OE-Core rev: 240dfe2399ec43c81b3c816c299253ddf6c3a732) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bluez5: manage udev dependency with PACKAGECONFIGDavid Frey2019-05-291-1/+3
| | | | | | | | | | udev is an optional dependency of bluez5, so use PACKAGECONFIG to give users the ability to build bluez5 without udev support. (From OE-Core rev: 862438543ef04a3c23f38ec65cd66a3b4e3907d5) Signed-off-by: David Frey <dpfrey@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* iproute2: upgrade 5.0.0 -> 5.1.0Alexander Kanavin2019-05-271-2/+2
| | | | | | | (From OE-Core rev: dc9ff41d4087d9a6e3e070f35ba95de547728b9c) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* avahi: Add PACKAGECONFIG for libdns_sdJoshua Watt2019-05-271-0/+7
| | | | | | | | | | Adds a PACKAGECONFIG option to enable the libdns_sd compatibility library. (From OE-Core rev: f09a7b7b3a390dace73a94a6ebbe062b0af160df) Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* connman: fix segfault with musl >v1.1.21Nicola Lunghi2019-05-272-0/+35
| | | | | | | | | | | musl > v1.1.21 changed the implementation of the freeaddrinfo() function not allowing anymore to pass null pointers to it. This was causing a segmentation fault in connman. (From OE-Core rev: a9bf875af4a5133e4f0e3039a76b1dfc6d5d1f63) Signed-off-by: Nicola Lunghi <nick83ola@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ofono: Add TEMP_FAILURE_RETRY optional definitionKhem Raj2019-05-272-0/+37
| | | | | | | | | Fixes build with musl where TEMP_FAILURE_RETRY is not provided (From OE-Core rev: 2a6c1c33bcf061f65da159d66fae78b31bcc9e60) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh: Add sudo dependency for ptestRichard Purdie2019-05-221-1/+1
| | | | | | | | Without this we see test failures due to the sudo binary being missing. (From OE-Core rev: b9e4db06dd95ce709a4a895014cc98fdd7df4624) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ofono: Fix another race condition during the buildAdrian Bunk2019-05-222-0/+51
| | | | | | | (From OE-Core rev: 1e4b8c0f60edad14a422dc22b42bd6618695ce85) Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ofono: Use external ell instead of an internal copyAdrian Bunk2019-05-223-2/+39
| | | | | | | (From OE-Core rev: 3683f524dc60325b3f3b1bc3a32e70a41064ae03) Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* socat: Remove workaround for musl issue now fixed upstreamAdrian Bunk2019-05-212-33/+0
| | | | | | | (From OE-Core rev: f9c6556ade1dc4e03aa83e86402f77c9eef662e7) Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libnss-mdns: Stop trying to build for muslAdrian Bunk2019-05-212-57/+2
| | | | | | | | | | There's no point in building an NSS module for a C library that doesn't support NSS. (From OE-Core rev: e3197eeaf352cb5c578a675ce2a07881fad597e6) Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ofono: upgrade 1.25 -> 1.29Adrian Bunk2019-05-175-36/+65
| | | | | | | | | | Remove patch applied upstream. Backport two fixes for build failures (From OE-Core rev: 8a6ef2044c912d58f3d3bfed614363799a341110) Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* dhcp: fix a NSUPDATE compiling issueMing Liu2019-05-162-0/+69
| | | | | | | | | | | | | | | | | | | | | | | | | | | This patch fixes a following issue: | omapip/isclib.c: In function 'dns_client_init': | omapip/isclib.c:356:18: error: 'dhcp_context_t {aka struct dhcp_context}' has no member named 'dnsclient' | if (dhcp_gbl_ctx.dnsclient == NULL) { | ^ | omapip/isclib.c:363:24: error: 'dhcp_context_t {aka struct dhcp_context}' has no member named 'dnsclient' | &dhcp_gbl_ctx.dnsclient, | ^ | omapip/isclib.c:364:24: error: 'dhcp_context_t {aka struct dhcp_context}' has no member named 'use_local4' | (dhcp_gbl_ctx.use_local4 ? | ^ | omapip/isclib.c:365:25: error: 'dhcp_context_t {aka struct dhcp_context}' has no member named 'local4_sockaddr' | &dhcp_gbl_ctx.local4_sockaddr | ^ | omapip/isclib.c:367:24: error: 'dhcp_context_t {aka struct dhcp_context}' has no member named 'use_local6' | (dhcp_gbl_ctx.use_local6 ? | ^ | omapip/isclib.c:368:25: error: 'dhcp_context_t {aka struct dhcp_context}' has no member named 'local6_sockaddr' | &dhcp_gbl_ctx.local6_sockaddr (From OE-Core rev: e36076b6feca481b7a7a44b1c03c4cfca2dd8c48) Signed-off-by: Ming Liu <liu.ming50@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* Remove irda-utils and the irda featureAdrian Bunk2019-05-154-245/+0
| | | | | | | | | IrDA support was removed in kernel 4.17. (From OE-Core rev: 9609256bfcfbb3860f68f1d8e553e9dd051ad218) Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssl: Remove openssl10Adrian Bunk2019-05-1534-7044/+0
| | | | | | | | | | OpenSSL 1.0 has been replaced by 1.1, and it would be harder to security-support after the upstream EOL at the end of 2019. (From OE-Core rev: 0f7ffcaa18db7bc27f30c994aafbb9f4f8b2ae7e) Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh: Avoid PROVIDES warning from rng-tools dependencyRichard Purdie2019-05-121-1/+1
| | | | | | | | | | Avoid the warning: WARNING: Nothing RPROVIDES 'nativesdk-rng-tools' (but virtual:nativesdk:/home/pokybuild/yocto-worker/build-appliance/build/meta/recipes-connectivity/openssh/openssh_7.9p1.bb RDEPENDS on or otherwise requires it) (From OE-Core rev: f93f026212ebc28fce66682cdb995e061586df45) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* iproute2: Remove bogus workaround patch for muslAdrian Bunk2019-05-122-31/+0
| | | | | | | | | | | | | | | | This patch worked around a problem in musl but caused the following: iplink_bridge.c: In function 'br_dump_bridge_id': iplink_bridge.c:77:2: warning: implicit declaration of function 'ether_ntoa_r'; did you mean 'inet_ntoa'? [-Wimplicit-function-declaration] ether_ntoa_r((const struct ether_addr *)id->addr, eaddr); ^~~~~~~~~~~~ In the meantime upstream has already implemented a different workaround for musl, so this patch can just be dropped. Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh: recommend rng-tools with sshdMikko Rapeli2019-05-121-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Since openssl 1.1.1 and openssh which uses it, sshd startup is delayed. The delays range from few seconds to minutes and even to hours. The delays are visible in host keys generation and when sshd process is started in response to incoming TCP connection but is failing to provide SSH version string and clients or tests time out. In all cases traces show that sshd is waiting for getentropy() system call to return from Linux kernel, which returns only after kernel side random number pool is initialized. The pool is initialized via various entropy source which may be missing on embedded development boards or via rngd from rng-tools package from userspace. HW random number generation and kernel support help but rngd is till needed to feed that data back to the Linux kernel. Example from an NXP imx8 board shows that kernel random number pool initialization can take over 400 seconds without rngd, and with rngd it is initialized at around 4 seconds after boot. The completion of initialization is visible in kernel dmesg with line "random: crng init done". More details are available from: * https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=912087 * https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=897572 * https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=43838a23a05fbd13e47d750d3dfd77001536dd33 * http://www.man7.org/linux/man-pages/man2/getrandom.2.html (From OE-Core rev: 9b01375236e19e3366c58877c4154d7c71632984) Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de> Cc: Mark Hatle <mark.hatle@windriver.com> Cc: Rasmus Villemoes <rasmus.villemoes@prevas.dk> Cc: Adrian Bunk <bunk@stusta.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* wpa-supplicant: update to 2.8Oleksandr Kravchuk2019-05-081-5/+5
| | | | | | | | | License checksums were changed due to modified copyright years. (From OE-Core rev: d6df8c1a7766e5df6351bb56f905664394cbdcc0) Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* socat: upgrade 1.7.3.2 -> 1.7.3.3Adrian Bunk2019-05-083-91/+2
| | | | | | | | | Remove patches for issues fixed upstream. (From OE-Core rev: e697fe9c109234f914976ccec78a0776aa59d08d) Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh/systemd/python/qemu: Fix patch Upstream-StatusRichard Purdie2019-05-083-3/+3
| | | | | | | | Fix some missing or corrupted patch Upstream-Status values. (From OE-Core rev: 07bc5a5367e0dec45253fd849e0157094152fd31) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh: fix CVE-2018-20685, CVE-2019-6109, CVE-2019-6111Anuj Mittal2019-04-305-0/+627
| | | | | | | | | Also backport a patch to fix issues introduced by fix for CVE-2019-6109. (From OE-Core rev: 31b7485d8377c1c535d1878220bbc1d49dc5f13e) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* connman: add PACKAGECONFIG for nfc, fix MACHINE_ARCH signature when l2tp is ↵Martin Jansa2019-04-231-0/+1
| | | | | | | | | | | | | | | | | enabled * import 2 fixes from LuneOS * with l2tp PACKAGECONFIG enabled connman depends on MACHINE_ARCH xl2tpd: === Comparing signatures for task do_package_write_ipk.sigdata between hammerhead and mako === ERROR: connman different signature for task do_package_write_ipk.sigdata between hammerhead and mako NOTE: Starting bitbake server... Hash for dependent task xl2tpd/xl2tpd_git.bb.do_packagedata changed from 6312d5711b5c2c1a85ee235d09bf37a8ec00f7ad9e7248c087bb83ef1d5bd078 to c0d3ef52b37bda945d8b2a015980ddb8fe7b4b3dca3d82d71a84176cc5125142 Unable to find matching sigdata for /OE/build/luneos-master/webos-ports/meta-openembedded/meta-networking/recipes-protocols/xl2tpd/xl2tpd_git.bb.do_packagedata with hashes 6312d5711b5c2c1a85ee235d09bf37a8ec00f7ad9e7248c087bb83ef1d5bd078 or c0d3ef52b37bda945d8b2a015980ddb8fe7b4b3dca3d82d71a84176cc5125142 (From OE-Core rev: ba89fea0e443e1492000b7114f32edf15819a151) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* dhcp: Replace OE specific patch for compatibility with latest bind with ↵Adrian Bunk2019-04-163-2883/+80
| | | | | | | | | | | upstream patch This also fixes a dhcp breakage noticed by Enrico Scholz. (From OE-Core rev: 64047300da42b2cf29026c0b570f91b58bab5e6a) Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* iw: upgrade 4.14 -> 5.0.1Changhyeok Bae2019-04-163-207/+19
| | | | | | | (From OE-Core rev: e1bc9b8d25365fbf3e5f7546c8dd2db7bef704b2) Signed-off-by: Changhyeok Bae <changhyeok.bae@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* connman: update to 1.37Oleksandr Kravchuk2019-04-122-365/+2
| | | | | | | | | | | | | | | | | | Removed patch has been upstreamed. Changelog: - Fix issue with handling invalid gateway addresses. - Fix issue with handling updates of default gateway. - Fix issue with DHCP servers that require broadcast flag. - Add support for option to use gateways as time servers. - Add support for option to select default technology. - Add support for Address Conflict Detection (ACD). - Add support for IPv6 iptables management. (From OE-Core rev: f3c5958268a6fb8146300e4c33512b9f9d3b3c1c) Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* iproute2: update to 5.0.0Oleksandr Kravchuk2019-04-123-17/+34
| | | | | | | (From OE-Core rev: 4861becda779e79f0f52c94a0869c9aab9c92a42) Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bind: upgrade 9.11.5 -> 9.11.5-P4Adrian Bunk2019-04-101-3/+3
| | | | | | | | | | | Bugfix-only compared to 9.11.5, mostly CVE fixes. COPYRIGHT checksum changed due to 2018 -> 2019. (From OE-Core rev: 5d286da0fbe1a7ded2f84eec990e49d221bdeab4) Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh/util-linux/python*: Ensure ptest output is unbufferedRichard Purdie2019-04-092-2/+2
| | | | | | | | | | | | | We need to run sed with the -u option to ensure the output is unbuffered else ptest-runner may timeout thinkig things were idle. Busybox doesn't have the -u option so we need to RDEPEND on sed (which is a good thing to do if we use it anyway). Alex Kanavin should get credit for discovering the problem. (From OE-Core rev: d3ffbebf43c23faa43af81c9ecf6fcaef36d675b) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* avahi: fix CVE-2017-6519Kai Kang2019-04-032-1/+51
| | | | | | | | | | | Backport patch to fix CVE-2017-6519. CVE: CVE-2017-6519 (From OE-Core rev: 979e3f4ac1e12228d368315169a32d5ab0209e91) Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssl: follow OE's rule for specifying CVE IDChen Qi2019-03-291-1/+1
| | | | | | | (From OE-Core rev: 7e29e7cb13ed13a7049328cd2169cd515b630fc3) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bluez5: fix CVE-2018-10910Ross Burton2019-03-262-0/+706
| | | | | | | | | | Fix this CVE (Bluetooth discoverability may be enabled with no agents to handle requests) by backporting a number of patches from upstream. (From OE-Core rev: 7bdf9581e807b978b92f29e11ab2a9e69e08410f) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssl10: Upgrade 1.0.2q -> 1.0.2rOtavio Salvador2019-03-191-2/+2
| | | | | | | (From OE-Core rev: 31b0f25026145b81aca2b58aada2dbc7c8b0e420) Signed-off-by: Otavio Salvador <otavio@ossystems.com.br> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssl: Upgrade 1.1.1a -> 1.1.1bOtavio Salvador2019-03-191-3/+3
| | | | | | | | License-Update: copyright years updated (From OE-Core rev: 5a67844a4dba03c27a5ff8bd1cf4de0b47616a4b) Signed-off-by: Otavio Salvador <otavio@ossystems.com.br> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>