linux/poky.git/meta/recipes-connectivity, branch 4.1_M2

inetutils: upgrade 2.2 -> 2.3

2022-07-12T22:56:10+00:00

(From OE-Core rev: 14fa9cd03aaa2dca53d2026ddc8afcd8a3a2966d) Signed-off-by: Wang Mingyu Signed-off-by: Richard Purdie

openssl: update 3.0.4 -> 3.0.5

2022-07-07T23:09:42+00:00

CVEs fixed: https://www.openssl.org/news/secadv/20220705.txt (From OE-Core rev: 84204dea7dec05e053cce5be0071cd9c1fb4ff6f) Signed-off-by: Alexander Kanavin Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

openssl: Upgrade 3.0.3 -> 3.0.4

2022-07-01T10:31:42+00:00

Includes a fix for CVE-2022-2068. (From OE-Core rev: f034faebd45e63385849078e6ee4b51257763e99) Signed-off-by: Richard Purdie

bitbake.conf/recipes: Introduce add DEV_PKG_DEPENDENCY to change RDEPENDS:${PN}-dev

2022-06-28T22:49:37+00:00

There is a pattern that several recipes need to break the dependency of ${PN}-dev on ${PN}, most often as ${PN} may be be empty. Add a new variable to parameterise this and allow it to be changed more easily. (From OE-Core rev: a5b381c0f45c590a762647a9956a8f41e2e2315e) Signed-off-by: Richard Purdie

bind: upgrade 9.18.3 -> 9.18.4

2022-06-22T21:40:28+00:00

Changelog: ========== [func] Don't try to process DNSSEC-related and ZONEMD records in catz. [GL #3380] [func] Add some more dnssec-policy checks to detect weird policies. [GL #1611] [test] Add new set of unit test macros and move the unit tests under single namespace in /tests/. [GL !6243] [func] Key timing options for 'dnssec-settime' and related utilities now accept "UNSET" times as printed by 'dnssec-settime -p'. [GL #3361] [bug] When the fetches-per-server quota was adjusted because of an authoritative server timing out more or less frequently, it was incorrectly set to 1 rather than the intended value. This has been fixed. [GL #3327] [bug] Only write key files if the dnssec-policy keymgr has changed the metadata. [GL #3302] [func] Key timing options for 'dnssec-keygen' and 'dnssec-settime' now accept times as printed by 'dnssec-settime -p'. [GL !2947] (From OE-Core rev: d5a12d549209f01324d03963db96449ee43452eb) Signed-off-by: Wang Mingyu Signed-off-by: Luca Ceresoli Signed-off-by: Richard Purdie

openssl: Backport fix for ptest cert expiry

2022-06-02T09:25:55+00:00

ptests in in openssl have started failing as one of the test certificates has expired. Backport a fix for this from upstream, replacing the test certificate to allow the ptests to pass again. (From OE-Core rev: f26f0b34f12bbca2beed153da402a3594d127374) Signed-off-by: Richard Purdie

iw: upgrade 5.16 -> 5.19

2022-05-31T14:24:18+00:00

(From OE-Core rev: 3e33ed8afa7bb4001ebe40b7a92d776bc4adf61d) Signed-off-by: Wang Mingyu Signed-off-by: Luca Ceresoli Signed-off-by: Richard Purdie

iproute2: upgrade 5.17.0 -> 5.18.0

2022-05-31T14:24:18+00:00

(From OE-Core rev: 995c5dc8816eaa07b21ed08c4d6afb7bffd9e368) Signed-off-by: Wang Mingyu Signed-off-by: Luca Ceresoli Signed-off-by: Richard Purdie

bind: upgrade 9.18.2 -> 9.18.3

2022-05-27T22:50:47+00:00

Changelog: ========== [security] Fix a crash in DNS-over-HTTPS (DoH) code caused by premature TLS stream socket object deletion. (CVE-2022-1183) [GL #3216] [bug] RPZ NSIP and NSDNAME rule processing didn't handle stub and static-stub zones at or above the query name. This has now been addressed. [GL #3232] Fixed a deadlock that could occur if an rndc connection arrived during the shutdown of network interfaces. [GL #3272] Refactor the fctx_done() function to set fctx to NULL after detaching, so that reference counting errors will be easier to avoid. [GL #2969] udp_recv() in dispatch could trigger an INSIST when the callback's result indicated success but the response was canceled in the meantime. [GL #3300] Work around a jemalloc quirk which could trigger an out-of-memory condition in named over time. [GL #3287] If there was a pending negative cache DS entry, validations depending upon it could fail. [GL #3279] dig returned a 0 exit status on UDP connection failure. [GL #3235] Fix an assertion failure when using dig with +nssearch and +tcp options by starting the next query in the send_done() callback (like in the UDP mode) instead of doing that recursively in start_tcp(). Also ensure that queries interrupted while connecting are detached properly. [GL #3144] Don't remove CDS/CDNSKEY DELETE records on zone sign when using 'auto-dnssec maintain;'. [GL #2931] [contrib] Avoid name space collision in dlz modules by prefixing functions with 'dlz_'. [GL !5778] dlz: Add FALLTHROUGH and UNREACHABLE macros. [GL #3306] [func] Add new named command-line option -C to print built-in defaults. [GL #1326] Introduce the concept of broken catalog zones described in the DNS catalog zones draft version 5 document. [GL #3224] Add DNS Extended Errors when stale answers are returned from cache. [GL #2267] Implement support for catalog zones change of ownership (coo) mechanism described in the DNS catalog zones draft version 5 document. [GL #3223] Implement support for catalog zones options new syntax based on catalog zones custom properties with "ext" suffix described in the DNS catalog zones draft version 5 document. [GL #3222] Implement reference counting for TLS contexts and allow reloading of TLS certificates on reconfiguration without destroying the underlying TCP listener sockets for TLS-based DNS transports. [GL #3122] Add support for remote TLS certificates verification, both to BIND and dig, making it possible to implement Strict and Mutual TLS authentication, as described in RFC 9103, Section 9.3. [GL #3163] [cleanup] Remove use of exclusive mode in ns_interfacemgr in favor of rwlocked access to localhost and localnets members of dns_aclenv_t structure. [GL #3229] Remove the task exclusive mode use in ns_clientmgr. [GL #3230] (From OE-Core rev: d2ae8b85c71be2e9e332b1ef0a2d3083b30c63e6) Signed-off-by: Wang Mingyu Signed-off-by: Luca Ceresoli Signed-off-by: Richard Purdie

mobile-broadband-provider-info: upgrade 20220315 -> 20220511

2022-05-20T21:52:23+00:00

(From OE-Core rev: f14c8094e7a049ac1b04c45b76855d0503559932) Signed-off-by: Alexander Kanavin Signed-off-by: Luca Ceresoli Signed-off-by: Richard Purdie