linux/meta-openembedded.git/meta-networking, branch stable/kirkstone-nut

mbedtls: upgrade 3.4.0 -> 3.5.0

2023-11-03T14:49:47+00:00

* Includes security fix for CVE-2023-43615 - Buffer overread in TLS stream cipher suites * Includes security fix for CVE-2023-45199 - Buffer overflow in TLS handshake parsing with ECDH * Includes aesce compilation fixes Full changelog: https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.5.0 The extra patch fixes x86 32-bit builds. Signed-off-by: Beniamin Sandu Signed-off-by: Armin Kuster

mbedtls: upgrade 2.28.2 -> 2.28.5

2023-10-17T13:07:38+00:00

This release includes security fix for CVE-2023-43615. Changelog: https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-2.28.5 Signed-off-by: Yi Zhao [Minor tweak to get it to apply] Signed-off-by: Armin Kuster

mbedtls: set up /usr/bin/hello as alternative

2023-10-17T12:52:32+00:00

As mbedtls installs this rather generically-named /usr/bin/hello binary, it conflicts with the one provided by lmbench, hence set it up as an alternative to avoid conflicts when both are installed to rootfs or SDK. Signed-off-by: Denys Dmytriyenko Signed-off-by: Khem Raj Signed-off-by: Armin Kuster

mosquitto: add missing Upstream-Status

2023-10-17T12:51:15+00:00

Signed-off-by: Martin Jansa Signed-off-by: Khem Raj Signed-off-by: Peter Marko Signed-off-by: Armin Kuster

mosquitto: upgrade 2.0.17 -> 2.0.18

2023-10-17T12:50:47+00:00

Add two patches from Debian, pull requests proposed upstream as 2894 and 2895 to make it start only when board is online, and to fix dynamic websockets link failure Signed-off-by: Khem Raj Signed-off-by: Peter Marko Signed-off-by: Armin Kuster

mosquitto: upgrade 2.0.15 -> 2.0.17

2023-10-17T12:50:15+00:00

Fix for CVE-2023-28366, CVE-2023-0809, CVE-2023-3592 Signed-off-by: Gianfranco Costamagna Signed-off-by: Khem Raj Signed-off-by: Peter Marko Signed-off-by: Armin Kuster

mosquitto: do not automatically depend on dlt-daemon, it's a non-mandatory logging system

2023-10-17T12:47:54+00:00

Signed-off-by: Khem Raj Signed-off-by: Peter Marko Signed-off-by: Armin Kuster

mosquitto: upgrade 2.0.14 -> 2.0.15

2023-10-17T12:47:48+00:00

Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj Signed-off-by: Peter Marko Signed-off-by: Armin Kuster

open-vm-tools: fix CVE-2023-20867

2023-10-17T12:44:17+00:00

A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine. Signed-off-by: Meenali Gupta Signed-off-by: Armin Kuster

samba: fix CVE-2023-34968

2023-10-17T12:42:14+00:00

A path disclosure vulnerability was found in Samba. As part of the Spotlight protocol, Samba discloses the server-side absolute path of shares, files, and directories in the results for search queries. This flaw allows a malicious client or an attacker with a targeted RPC request to view the information that is part of the disclosed path. Signed-off-by: Archana Polampalli Signed-off-by: Armin Kuster