linux/meta-openembedded.git/meta-oe/recipes-connectivity, branch hardknott

zabbix: Fix sereval CVEs

2022-04-16T16:53:03+00:00

fix CVE-2022-24349,CVE-2022-24917,CVE-2022-24918,CVE-2022-24919 Signed-off-by: Changqing Li Signed-off-by: Armin Kuster

recipes: Update SRC_URI branch and protocols

2021-11-13T15:45:48+00:00

This patch updates SRC_URIs using git to include branch=master if no branch is set and also to use protocol=https for github urls as generated by the conversion script in OE-Core. Signed-off-by: Armin Kuster

gattlib: Place pkgconfig file in correct package

2021-10-30T11:35:21+00:00

Fixes in OE-Core added some pkgconfig dependencies back and this flagged that the .pc file was in ${PN}, not ${PN}-dev. Fix that. Signed-off-by: Richard Purdie Signed-off-by: Khem Raj Signed-off-by: Armin Kuster (cherry picked from commit ea4afdb6a846aecd1be5f81f989aee3dfc08cc60) [fixup for hardknott context] Signed-off-by: Armin Kuster

krb5: fix CVE-2021-36222

2021-09-07T15:09:37+00:00

CVE-2021-36222: ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.4 and 1.19.x before 1.19.2 allows remote attackers to cause a NULL pointer dereference and daemon crash. This occurs because a return value is not properly managed in a certain situation. References: https://nvd.nist.gov/vuln/detail/CVE-2021-36222 Patches from: https://github.com/krb5/krb5/commit/fc98f520caefff2e5ee9a0026fdf5109944b3562 Signed-off-by: Yi Zhao Signed-off-by: Khem Raj (cherry picked from commit 620badcbf8a59fbd2cdda6ab01c4ffba1c3ee327) Signed-off-by: Armin Kuster

linuxptp: upgrade 3.1 -> 3.1.1

2021-08-27T02:18:28+00:00

* fix WARNING: linuxptp-3.1-r0 do_fetch: Failed to fetch URL http://sourceforge.net/projects/linuxptp/files/v3.1/linuxptp-3.1.tgz, attempting MIRRORS if available linuxptp-3.1.tgz replace by linuxptp-3.1.1.tgz * 3.1.1 release note Version 3.1.1 Fixes: CVE-2021-3570 linuxptp: missing length check of forwarded messages CVE-2021-3571 linuxptp: wrong length of one-step follow-up in transparent clock Signed-off-by: Changqing Li Signed-off-by: Armin Kuster

hostapd: fix building with CONFIG_TLS=internal

2021-05-22T23:17:39+00:00

The patch recently added for CVE-2021-30004 broke compilation with CONFIG_TLS=internal. This adds the necessary function to let it compile again. Signed-off-by: Alexander Vickberg Signed-off-by: Khem Raj (cherry picked from commit d6ef4170747d6668fa940328334055eef3e1e1d6) Signed-off-by: Armin Kuster

irssi: upgrade 1.2.2 -> 1.2.3

2021-04-18T20:49:13+00:00

Signed-off-by: Zheng Ruoqin Signed-off-by: Khem Raj (cherry picked from commit 71926e8f12d5c72b9ae58fd9f28cbad9d9945cec) Signed-off-by: Armin Kuster

hostapd: fix CVE-2021-30004

2021-04-17T13:46:24+00:00

In wpa_supplicant and hostapd 2.9, forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c. References: https://nvd.nist.gov/vuln/detail/CVE-2021-30004 Upstream patches: https://w1.fi/cgit/hostap/commit/?id=a0541334a6394f8237a4393b7372693cd7e96f15 Signed-off-by: Stefan Ghinea Signed-off-by: Khem Raj (cherry picked from commit e2bd6a52bf689b77b237eaee3067d2b0b6eee3d5) Signed-off-by: Armin Kuster

libqmi: upgrade 1.26.6 -> 1.28.2

2021-04-17T13:46:24+00:00

Signed-off-by: Vinicius Aquino Signed-off-by: Otavio Salvador Signed-off-by: Khem Raj (cherry picked from commit fbd0b60a277911a03fc8ef08ee49142781627670) Signed-off-by: Armin Kuster

modemmanager: upgrade 1.14.10 -> 1.16.2

2021-04-17T13:46:24+00:00

Signed-off-by: Vinicius Aquino Signed-off-by: Otavio Salvador Signed-off-by: Khem Raj (cherry picked from commit 4174e40a9833fe1a59ffe774d472073f96b1cc40) Signed-off-by: Armin Kuster