summaryrefslogtreecommitdiffstats
path: root/meta/recipes-connectivity
Commit message (Collapse)AuthorAgeFilesLines
* openssl: address ptest failures caused by perl 5.32.1Alexander Kanavin2021-03-021-0/+4
| | | | | | | | | | | For some reason the new perl no longer has . in list of directories searched in 'require', and so the file needs to be copied where perl can find it. (From OE-Core rev: 2ae879ddb72bd316e49a8200e99887dadb02b3dc) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* kea: Fix configure test error with gcc11Khem Raj2021-03-013-0/+61
| | | | | | | | | | Since the test program fails to compile, configure thinks compiler is not having thread support and bails out (From OE-Core rev: 232f97405a3e69cf9e54d4de0a8f1593da747603) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* iproute2: upgrade 5.10.0 -> 5.11.0Wang Mingyu2021-03-011-1/+1
| | | | | | | (From OE-Core rev: a3ce10f29c5c76da82d09e7bfe3d1a25d5230adf) Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* meta/recipes-connectivity: Add HOMEPAGE / DESCRIPTIONDorinda2021-02-266-0/+6
| | | | | | | | | | | Added HOMEPAGE and DESCRIPTION for recipes with missing decriptions or homepage [YOCTO #13471] (From OE-Core rev: ecf8922e6bb12a2facc59bbe794b575101fce1dc) Signed-off-by: Dorinda Bassey <dorindabassey@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nfs-utils: upgrade 2.5.2 -> 2.5.3Wang Mingyu2021-02-261-1/+1
| | | | | | | (From OE-Core rev: 6c943b114e31fad7c08645ba60ae80723fb5fe8d) Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bluez5: upgrade 5.55 -> 5.56Wang Mingyu2021-02-262-3/+3
| | | | | | | | | | -License-Update: remove the description of license from src/main.c (From OE-Core rev: 6d2fae223ff31e006423dfb1bce1f6d23cc1001b) Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* wpa-supplicant: fix CVE-2021-0326Stefan Ghinea2021-02-262-0/+46
| | | | | | | | | | | | | | | | | | | | In p2p_copy_client_info of p2p.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if the target device is performing a Wi-Fi Direct search, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9 Android ID: A-172937525 References: https://nvd.nist.gov/vuln/detail/CVE-2021-0326 Upstream patches: https://w1.fi/cgit/hostap/commit/?id=947272febe24a8f0ea828b5b2f35f13c3821901e<links_for_CVE_patches> (From OE-Core rev: b7940edabe100512e8f558cc37f9da836feae74d) Signed-off-by: Stefan Ghinea <stefan.ghinea@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssl: upgrade 1.1.1i -> 1.1.1jWang Mingyu2021-02-231-1/+1
| | | | | | | (From OE-Core rev: a67635ca2c7a016efcf450e4011f2032883e995d) Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* recipes: Update common-licenses references to match new namesRichard Purdie2021-02-211-1/+1
| | | | | | | | | The licenses were renamed to match their SPDX names, fix the references in LIC_FILES_CHKSUM in OE-Core. (From OE-Core rev: 9af48917cfe583d2db9e1e088c7e396fcf638949) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libuv: upgrade 1.40.0 -> 1.41.0Anuj Mittal2021-02-181-1/+1
| | | | | | | (From OE-Core rev: e7ceb8264292038005c865d83eaba0ad7de39e75) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* connman: update to 1.39akuster2021-02-121-2/+1
| | | | | | | | | | | | | | | | | | | | Bug fix only and includes two security fixes: CVE-2021-26675 CVE-2021-26676 Changelog: - Fix issue with scanning state synchronization and iwd. - Fix issue with invalid key with 4-way handshake offloading. - Fix issue with DNS proxy length checks to prevent buffer overflow. - Fix issue with DHCP leaking stack data via uninitialized variable. [Yocto #14231] (From OE-Core rev: eb20fd47d738f469f7bbeb4b8d85040f9163722b) Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bind: upgrade 9.16.10 -> 9.16.11Wang Mingyu2021-02-0910-2/+2
| | | | | | | | | | rename directory of patches -License-Update: Copyright year updated to 2021. (From OE-Core rev: 316f9602c633fdf52009b4567ccf598d1c716acd) Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* inetutils: update to 2.0Oleksandr Kravchuk2021-02-088-87/+65
| | | | | | | | | Removed upstreamed patches and refreshed q few other. (From OE-Core rev: a21e8fdf1b66961ddae5929d393daa08800bb748) Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssl: re-enable whirlpoolAndreas Müller2021-02-061-1/+2
| | | | | | | | | | | | * it breaks KDE's qca and dependencies * it is not deprecated. Openssl 3.0 (currently alpha) will deprecate whirlpool [1] https://www.openssl.org/news/changelog.html#openssl-30 (From OE-Core rev: bc02baadeee477b10eceae62985af4f4c323506e) Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh: Backport a fix to fix with glibc 2.33 on some platformsRichard Purdie2021-02-052-0/+29
| | | | | | | | | | This fixes openssh failing to work on qemux86 with glibc 2.33 due to seccomp and the fact new syscalls are used. Also likely fixes issues on other platforms. (From OE-Core rev: 22f8ce6e6d998c0539a40b2776b1a2abb4f44bb3) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssl: set CVE_VERSION_SUFFIXLee Chee Yang2021-02-031-0/+2
| | | | | | | (From OE-Core rev: 17df664a32a74f17baaef8c31ac23adec2d6255f) Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* iproute2: Add subpackage for rdma commandAlan Perry2021-01-271-1/+4
| | | | | | | | | | | The rdma command is part of iproute2 and is used to query or set the RDMA configuration where applicable. This patch adds options to build it and include it. (From OE-Core rev: a2d79159dd3fa583ae28fc138f68ad9c893f5de0) Signed-off-by: Alan Perry <alanp@snowmoose.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssl: Enable srp algorithmakuster2021-01-271-1/+2
| | | | | | | | | | This is still needed by libest in meta-security (From OE-Core rev: 1242b04e97fbef3d926bcf706ac99a580109e58b) Signed-off-by: Armin Kuster <akuster808@gmail.com> Cc: Shachar Menashe <shachar@vdoo.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* socat: upgrade 1.7.3.4 ->1.7.4.1Wang Mingyu2021-01-231-3/+3
| | | | | | | | | | | README updated: version updated add descrition of platform specifics - Debian (From OE-Core rev: d2bd5a0df7d81e167b718d0f65b7426d62701f2e) Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* resolvconf: upgrade 1.83 -> 1.87Anuj Mittal2021-01-201-3/+3
| | | | | | | (From OE-Core rev: 5240708714eaf7e6e769bc23809d85b18c94406d) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libpcap: upgrade 1.9.1 -> 1.10.0Wang Mingyu2021-01-161-2/+2
| | | | | | | (From OE-Core rev: 78450d4a591bcb3573fb8ff7149a8c5aa5e1617d) Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* iproute2: upgrade 5.9.0 -> 5.10.0Wang Mingyu2021-01-151-1/+1
| | | | | | | (From OE-Core rev: d9d451804c5955091d12ba6b0670fa50363fa8d8) Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssl: Enable psk for qtbaseKhem Raj2021-01-121-1/+2
| | | | | | | | | TLS 1.3 implementation in qt5 uses psk so retain it for now (From OE-Core rev: ab2cc33331ee931e65a63a02cf034c1b8ee695ac) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssl: Enable rc4/rc2/bf/md4 algorithmsKhem Raj2021-01-121-2/+9
| | | | | | | | | | They are still needed by several packages in meta-openembedded (From OE-Core rev: 52af41387f1c843e7677c0bb632b2b96f9793ebd) Signed-off-by: Khem Raj <raj.khem@gmail.com> Cc: Shachar Menashe <shachar@vdoo.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssl: drop support for deprecated algorithmsShachar Menashe2021-01-121-1/+7
| | | | | | | | | | 1. Drop support for many deprecated algorithms by default 2. Allow dropping support for TLS 1.0/1.1 via PACKAGECONFIG (From OE-Core rev: 304417a97db89d9ea4a41aa7c92b5a052896d63b) Signed-off-by: Shachar Menashe <shachar@vdoo.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* iproute2: split ip to individual packageSinan Kaya2021-01-121-2/+7
| | | | | | | | | | Move the ip tool into its own package. Useful for size constrained systems that only want the ip tool. (From OE-Core rev: 938fe58625e2285ee529ee589908bb0d54810f01) Signed-off-by: Sinan Kaya <okaya@kernel.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ppp: Fix patch typoRichard Purdie2021-01-091-1/+1
| | | | | | (From OE-Core rev: c138c8df3aadecfca5ea72d3e66b9bc359c5a8fd) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* mobile-broadband-provider-info: upgrade 20190618 ->20201225Wang Mingyu2021-01-081-2/+2
| | | | | | | (From OE-Core rev: 812eb3121e0aabe4e3de9a8c61b1e62c87f55aa4) Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ppp: Fix reproducibility issueRichard Purdie2021-01-082-0/+41
| | | | | | | | | | Depending on which patches the make program has, the internal or external utmp could would be used. Add add a patch which avoids the issue and makes the build determnistic. We saw the regression on ubuntu1604. (From OE-Core rev: 77e8c0f0e1236a134148dfb2c4ba5e8a612984fe) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ppp: Update 2.4.8 -> 2.4.9Richard Purdie2021-01-089-473/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is the first ppp release in a long time. Many patches were resolved upstream: * musl fixes were merged * EAP patch was a backport added upstream * cflags were fixed upstream * CVE fix was merged upstream and a backport * pcap header from the host was fixed upstream * suid bits during install was removed upstream The only patch left was the /var/ redirect for resolv.conf which no longer applied cleanly after upstream changes. For this one the patch will need to be rewritten (and preferably submitted upstream) by someone who needs/uses it. It was presumbaly for RO rootfs and may be resolved by symlinks in modern system usage anyway. Tweak the files pulled into the pppoe package for a compatibility symlink and module rename. Add CC to the OEMAKE command to allow builds correctly. [Big thanks to Alex Kanavin for a lot of the work with upstream and pre-release testing of this] (From OE-Core rev: b524ba3e7941b9112ae4b6ae4aa7795c59ff0d16) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh: Disable lastlog on muslKhem Raj2021-01-031-2/+2
| | | | | | | (From OE-Core rev: 0e9b2fe106e3c6c0a1f27e7a56a11e86e5de371e) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* dhcpcd: upgrade 9.3.4 -> 9.4.0Yi Zhao2020-12-313-89/+1
| | | | | | | | | | | Drop backported patches: 0001-Linux-Fix-privsep-build-by-including-sys-termios.h-f.patch 0001-privsep-Fix-Linux-i386-for-SECCOMP-as-it-just-uses-s.patch (From OE-Core rev: abb05cbfd954775decbd6556d3d5f036ebb01fe3) Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* kea: upgrade 1.8.1 -> 1.8.2Alexander Kanavin2020-12-301-1/+1
| | | | | | | (From OE-Core rev: f1635ee9b94c50b347fdd01277d27c3339026a49) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bind: upgrade 9.16.9 -> 9.16.10Alexander Kanavin2020-12-3010-1/+1
| | | | | | | (From OE-Core rev: c678600a55a8dccf461a8d0206ffdbc57313d1c4) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* inetutils: add dnsdomainname to ALTERNATIVEYi Zhao2020-12-241-1/+3
| | | | | | | | | | | The dnsdomainname can also be provided by busybox and net-tools. Also move it from ${bindir} to ${base_bindir} because the command provided by busybox or net-tools is located here. (From OE-Core rev: 3b258e4d9e38d4224029ad503c7821d9381264c0) Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* dhcpcd: fix SECCOMP for i386Yi Zhao2020-12-242-0/+58
| | | | | | | | | | The dhcpcd doesn't work on Intel 32bit platform. Backport a patch to fix the issue. (From OE-Core rev: e8b03a8e3a6748374340d45ce39e922eee6817e3) Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* kea: upgrade 1.7.10 -> 1.8.1Alexander Kanavin2020-12-181-1/+1
| | | | | | | (From OE-Core rev: 9a694510f60fbaece03215ec6d2379e422b88529) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* iproute2: Make it easier to manipulate SUBDIRS list from bbappendAnatol Belski2020-12-181-1/+3
| | | | | | | | | | | Currently there's no easy way to override this part as it's hardcoded into the EXTRA_OEMAKE var. This change makes it possible to manipulate the list of subdirs in a more fine graned and future oriented manner. (From OE-Core rev: 1ca2b21cb7d638f36860bd16a90c1fb8238d4552) Signed-off-by: Anatol Belski <anbelski@linux.microsoft.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssl: add support for mingw64 as targetDeepak Rawat2020-12-181-0/+5
| | | | | | | | | | | | Engines are installed in a slightly different path, and the host type doesn't precisely match in x86_64 Co-authored-by: Paul Eggleton <paul.eggleton@microsoft.com> Co-authored-by: Deepak Rawat <derawa@microsoft.com> (From OE-Core rev: 166bb89f6d97495b6522786182b4f9623acd7ff4) Signed-off-by: Luca Boccassi <luca.boccassi@microsoft.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssl: Update 1.1.1h -> 1.1.1iKhairul Rohaizzat Jamaluddin2020-12-181-1/+1
| | | | | | | | | | | | | | update version to 1.1.1i openssl 1.1.1i Fixed NULL pointer deref in GENERAL_NAME_cmp (CVE-2020-1971) updates include fix for CVE: CVE-2020-1971 (From OE-Core rev: ebbb732d7707d3e755dd9760fc292f86253f86b4) Signed-off-by: Khairul Rohaizzat Jamaluddin <khairul.rohaizzat.jamaluddin@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* dhcpcd: upgrade 9.3.2 -> 9.3.4Yi Zhao2020-12-152-1/+31
| | | | | | | | | Backport a patch to fix privsep build error on ppc. (From OE-Core rev: d79624f9dbe79f6185a2d6127c67508ba940f527) Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* kea: fix reproducibilityAlexander Kanavin2020-12-092-12/+44
| | | | | | | (From OE-Core rev: 5f486c39a766f921fb4374165b6e342dd87244ec) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bind: upgrade 9.16.7 -> 9.16.9Alexander Kanavin2020-12-0910-2/+2
| | | | | | | | | License-Update: http -> https (From OE-Core rev: c4e96412f30758e5321537d40d357b2ba6260b37) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* Revert "connman: set service to conflict with systemd-networkd"Jack Mitchell2020-12-062-30/+0
| | | | | | | | | | | | | | Without further examples of how this is failing revert as using both together is a valid use case, for example connman handling Wifi/AP and systemd-networkd handling more complex routing such as for containers and ethernet switches. This reverts commit 5303420ead25817f5caec276b79eec7ee797271a. (From OE-Core rev: 99d55bd094fe3d12724d77af3f15e2494cad4e0d) Signed-off-by: Jack Mitchell <ml@embed.me.uk> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* socat: make building with OpenSSL support optionalAlexander Vickberg2020-11-241-4/+3
| | | | | | | (From OE-Core rev: c9359340ee675f6876e29229000e72c5a17817c8) Signed-off-by: Alexander Vickberg <wickbergster@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh: whitelist CVE-2014-9278Steve Sakoman2020-11-111-0/+4
| | | | | | | | | | | | | | | The OpenSSH server, as used in Fedora and Red Hat Enterprise Linux 7 and when running in a Kerberos environment, allows remote authenticated users to log in as another user when they are listed in the .k5users file of that user, which might bypass intended authentication requirements that would force a local login. Whitelist the CVE since this issue is Redhat specific. (From OE-Core rev: 309132e50d23b1e3f15ef8db1a101166b35f7ca4) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssl: Add c_rehash to misc package and add perl runtime dependencyFederico Pellegrin2020-11-111-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | The following changes since commit f075071761172c69f8ae2be5868d51ef9ef646e7: conf: update for release 3.2 (2020-11-09 13:16:13 +0000) are available in the Git repository at: git://push.yoctoproject.org/poky-contrib fedepell/bug14083 Federico Pellegrin (1): openssl: Add c_rehash to misc package and add perl runtime dependency c_rehash implemented in perl is back (in history was moved to shell for some time), so handle it inside the -misc package so just that one will carry the heavy runtime dependency on perl and not the whole openssl package. Note: in misc there were already before a few perl files (tsget.pl and CA.pl) so the added perl dependency will fix those too. [YOCTO #14083] (From OE-Core rev: 70da1f956bfbb627691c47eba7451182aca758e3) Signed-off-by: Federico Pellegrin <fede@evolware.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* iproute2: upgrade 5.8.0 -> 5.9.0zangrc2020-11-112-26/+1
| | | | | | | | | | 0001-devlink.c-add-missing-include.patch Removed since this is included in 5.9.0. (From OE-Core rev: e434627b29a1a01b06473efeb291783a4afdd50f) Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* dhcpcd: upgrade 9.3.1 -> 9.3.2Yi Zhao2020-11-081-1/+1
| | | | | | | (From OE-Core rev: daddb89daf8c1048375cd2102b9819f8f1c2e41c) Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* dhcpcd: install dhcpcd to /sbin rather than /usr/sbinYi Zhao2020-11-083-3/+4
| | | | | | | | | | | The dhcpcd path is hardcoded to /sbin in ifupdown package. Move dhcpcd from /usr/sbin to /sbin to make sure ifup/ifdown can find it when dhcpcd as the dhcp client backend. (From OE-Core rev: ed7cdf95f1dcb3df6e954551f9578a8ac15f2795) Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>