linux/poky.git/meta/recipes-connectivity, branch 5.2_M2

ofono: patch CVE-2024-7540, CVE-2024-7541, CVE-2024-7542

2025-01-23T12:14:29+00:00

Cherry-pick commit https://git.kernel.org/pub/scm/network/ofono/ofono.git/commit/?id=29ff6334b492504ace101be748b256e6953d2c2f (From OE-Core rev: 2513c7504a270c7a079f4e942252f92d0e48bd32) Signed-off-by: Peter Marko Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Ross Burton

ofono: fix CVE-2024-7539

2025-01-20T13:38:59+00:00

oFono CUSD Stack-based Buffer Overflow Code Execution Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this vulnerability. The specific flaw exists within the parsing of responses from AT+CUSD commands. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-23195. Reference: https://security-tracker.debian.org/tracker/CVE-2024-7539 Upstream patch: https://git.kernel.org/pub/scm/network/ofono/ofono.git/commit/?id=389e2344f86319265fb72ae590b470716e038fdc (From OE-Core rev: 55aea716ca4665cf45579247dd5feec5668dd94f) Signed-off-by: Yogita Urade Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie

openssl: remove obsolete CVE version suffix

2025-01-20T13:38:59+00:00

Since 3.0.0 openssl no longer uses characters in version suffix. (From OE-Core rev: 80151340b0b20610030f3026e9fc71ef5970c2c5) Signed-off-by: Peter Marko Signed-off-by: Richard Purdie

boost: update 1.86.0 -> 1.87.0

2025-01-10T11:10:00+00:00

Backport a kea patch to address 1.87.0 compatibility. (From OE-Core rev: ac328183d4592ad146c41e48c2c92d1dbb53a894) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

ppp: update 2.5.1 -> 2.5.2

2025-01-10T11:10:00+00:00

License-Update: BSD items clarified to be 2-clause: https://github.com/ppp-project/ppp/commit/d4ec06ec5839350bd728da0e92a8cb2e1c37d880 passprompt plugin removed upstream. Add an enable a multilink option, as the build breaks without it at the linking step (upstream presumably didn't test that it works): https://github.com/ppp-project/ppp/issues/541 (From OE-Core rev: e6ea3ade8f3977ec93c68229d2660bbc335a80a6) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

iproute2: update 6.11.0 -> 6.12.0

2025-01-04T12:34:03+00:00

(From OE-Core rev: f8c665ca16bf643039bd3f0a918ea9cf9d1a3726) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

nfs-utils: Use v2 of upstream patch for tpyecast fix

2024-12-20T18:00:26+00:00

(From OE-Core rev: a2c5b2cad7857250b4a1b36ba792a8110989733a) Signed-off-by: Khem Raj Signed-off-by: Richard Purdie

ofono: fix the build when toolchain has old linux headers

2024-12-20T15:47:14+00:00

Whilst our default toolchain has modern kernel headers (6.12, at time of writing), some external toolchains may use old kernel headers. As ofono's rmnet module uses kernel defines which were added in 5.14, add some compatibility defines in case they are not set. (From OE-Core rev: 0313ea48a75480c2bcc6d35035f74a4dcf22f263) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

bind: upgrade 9.20.3 -> 9.20.4

2024-12-20T15:47:14+00:00

bind-ensure-searching-for-json-headers-searches-sysr.patch refreshed for 9.20.4 (From OE-Core rev: 5da817ca4d58eb70ad42fc1fa0f7f4edf696585d) Signed-off-by: Wang Mingyu Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie

nfs-utils: Fix warnings found with clang

2024-12-20T15:47:14+00:00

(From OE-Core rev: 5a6232b730e8d791cd270267cb32bbe15cc1ce14) Signed-off-by: Khem Raj Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie