<feed xmlns='http://www.w3.org/2005/Atom'>
<title>linux/poky.git/meta/recipes-connectivity/avahi, branch styhead</title>
<subtitle>Mirror of git.yoctoproject.org/poky</subtitle>
<id>https://git.enea.com/cgit/linux/poky.git/atom?h=styhead</id>
<link rel='self' href='https://git.enea.com/cgit/linux/poky.git/atom?h=styhead'/>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/'/>
<updated>2024-05-02T14:15:51+00:00</updated>
<entry>
<title>recipes: Update WORKDIR references to UNPACKDIR</title>
<updated>2024-05-02T14:15:51+00:00</updated>
<author>
<name>Richard Purdie</name>
<email>richard.purdie@linuxfoundation.org</email>
</author>
<published>2024-04-30T13:23:37+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=0ea63b6a439fe97f840c69d08cf381687baaae3f'/>
<id>urn:sha1:0ea63b6a439fe97f840c69d08cf381687baaae3f</id>
<content type='text'>
Since we want to be able to stop unpacking to WORKDIR, correct the WORKDIR
references in recipe do_compile/do_install tasks to use UNPACKDIR in the
appropraite places instead.

(From OE-Core rev: d73595df69667fe9d12ecd407b77a0b8dae2109c)

Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>avahi: backport CVE-2023-1981 &amp; CVE's follow-up patches</title>
<updated>2023-12-21T10:38:30+00:00</updated>
<author>
<name>Vijay Anusuri</name>
<email>vanusuri@mvista.com</email>
</author>
<published>2023-12-12T09:05:18+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=198d891baa5dbeaca0e02e1904208d0edd30d495'/>
<id>urn:sha1:198d891baa5dbeaca0e02e1904208d0edd30d495</id>
<content type='text'>
import patches from ubuntu to fix
 CVE-2023-1981
 CVE-2023-38469-2
 CVE-2023-38470-2
 CVE-2023-38471-2

Upstream-Status: Backport [import from ubuntu https://git.launchpad.net/ubuntu/+source/avahi/tree/debian/patches?h=ubuntu/jammy-security
Upstream commit
https://github.com/lathiat/avahi/commit/a2696da2f2c50ac43b6c4903f72290d5c3fa9f6f
&amp;
https://github.com/lathiat/avahi/commit/c6cab87df290448a63323c8ca759baa516166237
&amp;
https://github.com/lathiat/avahi/commit/94cb6489114636940ac683515417990b55b5d66c
&amp;
https://github.com/lathiat/avahi/commit/b675f70739f404342f7f78635d6e2dcd85a13460]

Ref: https://git.openembedded.org/openembedded-core-contrib/commit/?h=stable/nanbield-nut&amp;id=a9203c46cd64c3ec5e5b00e381bbac85733f85df

(From OE-Core rev: 2b0d8a63a212897b33e85cc3694cd9a3d6e09ca8)

Signed-off-by: Vijay Anusuri &lt;vanusuri@mvista.com&gt;
Signed-off-by: Alexandre Belloni &lt;alexandre.belloni@bootlin.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>avahi: update URL for new project location</title>
<updated>2023-12-06T22:55:49+00:00</updated>
<author>
<name>Ross Burton</name>
<email>ross.burton@arm.com</email>
</author>
<published>2023-12-04T10:41:04+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=a9168feacb6d3d19a2658fe8c80cc25248f9a14e'/>
<id>urn:sha1:a9168feacb6d3d19a2658fe8c80cc25248f9a14e</id>
<content type='text'>
Avahi has moved to a new parent organisation on GitHub, so update the
URLs to match.

(From OE-Core rev: 02caef1567186f250e64ae3ef84fcff33d7323e4)

Signed-off-by: Ross Burton &lt;ross.burton@arm.com&gt;
Signed-off-by: Alexandre Belloni &lt;alexandre.belloni@bootlin.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>avahi: fix CVE-2023-38473</title>
<updated>2023-11-20T15:30:52+00:00</updated>
<author>
<name>Meenali Gupta</name>
<email>meenali.gupta@windriver.com</email>
</author>
<published>2023-11-16T11:19:25+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=34f496c2d47f1ab34a8330a0830726f24e7ba6cc'/>
<id>urn:sha1:34f496c2d47f1ab34a8330a0830726f24e7ba6cc</id>
<content type='text'>
A vulnerability was found in Avahi. A reachable assertion exists
in the avahi_alternative_host_name() function.

(From OE-Core rev: fbe506e7af1ce47f6d04c122cb77573e0527ab91)

Signed-off-by: Meenali Gupta &lt;meenali.gupta@windriver.com&gt;
Signed-off-by: Alexandre Belloni &lt;alexandre.belloni@bootlin.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>avahi: fix CVE-2023-38472</title>
<updated>2023-11-20T15:30:52+00:00</updated>
<author>
<name>Meenali Gupta</name>
<email>meenali.gupta@windriver.com</email>
</author>
<published>2023-11-16T11:44:50+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=9580629d5b34aa8a02f88582e15e179a900d9034'/>
<id>urn:sha1:9580629d5b34aa8a02f88582e15e179a900d9034</id>
<content type='text'>
A vulnerability was found in Avahi. A reachable assertion exists
in the avahi_rdata_parse() function.

(From OE-Core rev: 988d115ca18db1872d7a4dab39040029e5c61d6b)

Signed-off-by: Meenali Gupta &lt;meenali.gupta@windriver.com&gt;
Signed-off-by: Alexandre Belloni &lt;alexandre.belloni@bootlin.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>avahi: fix CVE-2023-38471</title>
<updated>2023-11-20T15:30:52+00:00</updated>
<author>
<name>Meenali Gupta</name>
<email>meenali.gupta@windriver.com</email>
</author>
<published>2023-11-16T11:18:17+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=fb61e440a59a2612781e74e7e69fad2461a16c55'/>
<id>urn:sha1:fb61e440a59a2612781e74e7e69fad2461a16c55</id>
<content type='text'>
A vulnerability was found in Avahi. A reachable assertion exists
in the dbus_set_host_name function.

(From OE-Core rev: 292956cd7b2ea909a0cb39973536ddd007f7e47d)

Signed-off-by: Meenali Gupta &lt;meenali.gupta@windriver.com&gt;
Signed-off-by: Alexandre Belloni &lt;alexandre.belloni@bootlin.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>avahi: fix CVE-2023-38470</title>
<updated>2023-11-20T15:30:52+00:00</updated>
<author>
<name>Meenali Gupta</name>
<email>meenali.gupta@windriver.com</email>
</author>
<published>2023-11-16T11:17:44+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=820c282b7de5daed91693e95e2ee9e2988929ad8'/>
<id>urn:sha1:820c282b7de5daed91693e95e2ee9e2988929ad8</id>
<content type='text'>
A vulnerability was found in Avahi. A reachable assertion exists
in the avahi_escape_label() function.

(From OE-Core rev: 93b4489c84f5f21e3fbcd66a39d50b5d64001a58)

Signed-off-by: Meenali Gupta &lt;meenali.gupta@windriver.com&gt;
Signed-off-by: Alexandre Belloni &lt;alexandre.belloni@bootlin.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>avahi: fix CVE-2023-38469</title>
<updated>2023-11-20T15:30:52+00:00</updated>
<author>
<name>Meenali Gupta</name>
<email>meenali.gupta@windriver.com</email>
</author>
<published>2023-11-16T11:17:12+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=4dd9e54a3b230bd542284a451905cb5203effa84'/>
<id>urn:sha1:4dd9e54a3b230bd542284a451905cb5203effa84</id>
<content type='text'>
A vulnerability was found in Avahi, where a reachable assertion exists
in avahi_dns_packet_append_record.

(From OE-Core rev: 885d64f067b9ddaf890d9bdef7b76898ff90b04e)

Signed-off-by: Meenali Gupta &lt;meenali.gupta@windriver.com&gt;
Signed-off-by: Alexandre Belloni &lt;alexandre.belloni@bootlin.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>avahi: handle invalid service types gracefully</title>
<updated>2023-09-08T21:59:47+00:00</updated>
<author>
<name>Ross Burton</name>
<email>ross.burton@arm.com</email>
</author>
<published>2023-09-07T10:40:18+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=eee809e3856000b302b973ab94a3891ee621b87f'/>
<id>urn:sha1:eee809e3856000b302b973ab94a3891ee621b87f</id>
<content type='text'>
Services which broadcast an invalid service type will cause the browse
to fail. Instead of failing, replace the service type and continue.

(From OE-Core rev: e581da6c4db21312833395e96b48e868a202f0f9)

Signed-off-by: Ross Burton &lt;ross.burton@arm.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>recipes: remove unused AUTHOR variable</title>
<updated>2023-08-10T08:18:53+00:00</updated>
<author>
<name>Michael Opdenacker</name>
<email>michael.opdenacker@bootlin.com</email>
</author>
<published>2023-08-03T08:27:18+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=a26970fa3a7c2eced819640f9050a3aadcef59ad'/>
<id>urn:sha1:a26970fa3a7c2eced819640f9050a3aadcef59ad</id>
<content type='text'>
No longer used in generating packages
Also creates a possible confusion with the recipe maintainer
name.

(From OE-Core rev: 9d5edd124b7dddb995ceddd79f8a7fc8cf44badf)

Signed-off-by: Michael Opdenacker &lt;michael.opdenacker@bootlin.com&gt;
Signed-off-by: Alexandre Belloni &lt;alexandre.belloni@bootlin.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
</feed>
