linux/poky.git/meta/recipes-connectivity/wpa-supplicant, branch yocto-3.4.3

wpa-supplicant: Match package override to PACKAGES for pkg_postinst

2021-11-21T11:41:39+00:00

In PACKAGES, ${PN} is used so it makes sense for the pkg_postinst variable override to match that else it causes user confusion. [YOCTO #14616] (From OE-Core rev: 2e0bbd8edcdcc892e593848e618a9a00f6dac05f) Signed-off-by: Richard Purdie (cherry picked from commit ae9094d45bbfff377bd542939e12a8451a4959b6) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

systemd: '${systemd_unitdir}/system' => '${systemd_system_unitdir}'

2021-09-07T20:54:11+00:00

Repo-wide replacement to use newer variable to represent systemd system unitdir directory. (From OE-Core rev: 5ace3ada5c54500c71becc8e0c6eddeb8bc053e3) Signed-off-by: Robert P. J. Day Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

Convert to new override syntax

2021-08-02T14:44:10+00:00

This is the result of automated script conversion: scripts/contrib/convert-overrides.py converting the metadata to use ":" as the override character instead of "_". (From OE-Core rev: 42344347be29f0997cc2f7636d9603b1fe1875ae) Signed-off-by: Richard Purdie

wpa-supplicant: Enable openssl

2021-04-20T12:56:48+00:00

Use openSSL for TLS/SSL implementation (From OE-Core rev: 2bd4702d68ef79320c8194934568c56b4cc87aa3) Signed-off-by: Khem Raj Signed-off-by: Richard Purdie

wpa-supplicant: fix CVE-2021-30004

2021-04-18T10:37:25+00:00

In wpa_supplicant and hostapd 2.9, forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c. References: https://nvd.nist.gov/vuln/detail/CVE-2021-30004 Upstream patches: https://w1.fi/cgit/hostap/commit/?id=a0541334a6394f8237a4393b7372693cd7e96f15 (From OE-Core rev: b32b671bf430b36a5547f8d822dbb760d6be47f7) Signed-off-by: Stefan Ghinea Signed-off-by: Richard Purdie

wpa-supplicant: fix CVE-2021-27803

2021-03-06T22:39:03+00:00

A vulnerability was discovered in how p2p/p2p_pd.c in wpa_supplicant before 2.10 processes P2P (Wi-Fi Direct) provision discovery requests. It could result in denial of service or other impact (potentially execution of arbitrary code), for an attacker within radio range. References: https://nvd.nist.gov/vuln/detail/CVE-2021-27803 Upstream patches: https://w1.fi/cgit/hostap/commit/?id=8460e3230988ef2ec13ce6b69b687e941f6cdb32 (From OE-Core rev: 81e4260b83c52558c320fd7d1c1eafcb312ad6be) Signed-off-by: Stefan Ghinea Signed-off-by: Richard Purdie

meta/recipes-connectivity: Add HOMEPAGE / DESCRIPTION

2021-02-26T15:21:21+00:00

Added HOMEPAGE and DESCRIPTION for recipes with missing decriptions or homepage [YOCTO #13471] (From OE-Core rev: ecf8922e6bb12a2facc59bbe794b575101fce1dc) Signed-off-by: Dorinda Bassey Signed-off-by: Richard Purdie

wpa-supplicant: fix CVE-2021-0326

2021-02-26T15:21:20+00:00

In p2p_copy_client_info of p2p.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if the target device is performing a Wi-Fi Direct search, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9 Android ID: A-172937525 References: https://nvd.nist.gov/vuln/detail/CVE-2021-0326 Upstream patches: https://w1.fi/cgit/hostap/commit/?id=947272febe24a8f0ea828b5b2f35f13c3821901e (From OE-Core rev: b7940edabe100512e8f558cc37f9da836feae74d) Signed-off-by: Stefan Ghinea Signed-off-by: Richard Purdie

wpa-supplicant: Security fix CVE-2020-12695

2020-06-28T07:35:59+00:00

Source: http://w1.fi/security/ Disposition: Backport from http://w1.fi/security/2020-1/ Affects <= 2.9 wpa-supplicant (From OE-Core rev: e9c696397ae1b4344b8329a13076f265980ee74d) Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

wpa-supplicant: remove service templates from SYSTEMD_SERVICE

2020-06-09T12:14:01+00:00

Remove service templates wpa_supplicant-nl80211@.service and wpa_supplicant-wired@.service from SYSTEMD_SERVICE that they should NOT be started/stopped by calling 'systemctl' in postinst and prerm scripts. (From OE-Core rev: fe9b8e50461ab00ab3ad8b065ebd32f0eea2a255) Signed-off-by: Kai Kang Signed-off-by: Richard Purdie