linux/poky.git/meta/recipes-connectivity, branch daisy

openssl: upgrade to 1.0.1p

2015-07-15T14:25:46+00:00

This upgrade fixes CVE-2015-1793 Removed openssl-fix-link.patch. The linking issue has been fixed in openssl. (From OE-Core rev: d140c1b13c3f3a7e2d982b5aa8b11c5e0c23c158) Signed-off-by: Tudor Florea Signed-off-by: Richard Purdie

openssl: Fix x32 openssl patch which was not building

2015-04-15T14:56:08+00:00

x32 builds where broken due to patch rebase not having been done correctly for this patch (From OE-Core rev: a2966949e68bbdce8d0a0fd5946d078b84ae63e9) Signed-off-by: Brendan Le Foll Signed-off-by: Richard Purdie

openssl: Upgrade to 1.0.1m

2015-03-25T15:05:42+00:00

Security update, some patches modified to apply correctly mostly due to upstream changing indentation/styling * configure-targets.patch updated * fix-cipher-des-ede3-cfb1.patch updated * openssl-avoid-NULL-pointer-dereference-in-EVP_DigestInit_ex.patch updated * openssl-avoid-NULL-pointer-dereference-in-dh_pub_encode.patch removed as no merged with 3942e7d9ebc262fa5c5c42aba0167e06d981f004 in upstream (From OE-Core rev: 248dec5e550cfcaaaa479a5bff9b79ba5cd0765d) Signed-off-by: Brendan Le Foll Signed-off-by: Richard Purdie

bind: fix for CVE-2014-8500

2015-02-06T14:56:07+00:00

[From upstream commit: 603a0e2637b35a2da820bc807f69bcf09c682dce] [YOCTO #7098] External References: =================== https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8500 (From OE-Core rev: 7225d6e0c82f264057de40c04b31655f2b0e0c96) (From OE-Core rev: 97fcb0bb1f0bead8190b0c8f2435e551c2e2efe0) Signed-off-by: Sona Sarmadi Signed-off-by: Richard Purdie

openssh: move setting LD to allow for correct override

2015-02-06T14:56:07+00:00

Using the export LD in the recipe does not allow for secodnary toolchain overriding LD later, by setting it in the do_configure_append the export is used by autotools setting LD based on the env, but would allow for override later. [YOCTO #6997] (From OE-Core rev: 9b37e630f5f6e37e928f825c4f67481cf58c98a1) (From OE-Core rev: b38f33c96b31c807306dd8b2d7b25cf8fad21026) Signed-off-by: Saul Wold Signed-off-by: Ross Burton Signed-off-by: Richard Purdie Conflicts: meta/recipes-connectivity/openssh/openssh_6.5p1.bb

resolvconf: add fixes for busybox and make it work

2015-02-06T14:56:07+00:00

resolvconf was missing a script and needed readlink which was in /usr/bin. Also the /etc/resolv.conf was not being correctly linked to /etc/resolvconf/run/resolv.conf, which is fixed by the volaties change which is now a file as opposed to created in do_install. Ensure that the correct scripts for ifup/ifdown get installed and that resolvconf is correctly enabled at startup [YOCTO #5361] (From OE-Core rev: 853e8d2c7aff6dddc1d555af22f54c4ecef13df1) (From OE-Core rev: cb3c7cfe00e96580db5aedc7f7c0970378ab3c6e) Signed-off-by: Saul Wold Signed-off-by: Ross Burton Signed-off-by: Richard Purdie Conflicts: meta/recipes-connectivity/resolvconf/resolvconf_1.74.bb

openssh: avoid screen sessions being killed on disconnect with systemd

2014-11-06T11:40:37+00:00

Tell systemd just to kill the sshd process when the ssh connection drops instead of the entire cgroup for sshd, so that any screen sessions (and more to the point, processes within them) do not get killed. (This is what the Fedora sshd service file does, and what we're already doing in the dropbear service file). (From OE-Core master rev: 3c238dff41fbd3687457989c7b17d22b2cc844be) (From OE-Core rev: 6e6aeb7cca52b92a0c8013473e2b8bb18738a119) Signed-off-by: Paul Eggleton Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

openssl: Upgrade to 1.0.1j

2014-10-23T20:43:11+00:00

This address the latest set of CVE issues (From OE-Core rev: 461e598815f8749bb26e97369e3b877f7ce749cf) Signed-off-by: Saul Wold Signed-off-by: Richard Purdie

openssl: upgrade to 1.0.1j

2014-10-23T15:13:30+00:00

(From OE-Core rev: 5163eb2c3c492d3640aa0628c29f6b8d446a8261) Signed-off-by: Ross Burton Conflicts: meta/recipes-connectivity/openssl/openssl_1.0.1g.bb meta/recipes-connectivity/openssl/openssl_1.0.1i.bb meta/recipes-connectivity/openssl/openssl_1.0.1j.bb Signed-off-by: Richard Purdie

openssl: fix CVE-2014-3470

2014-06-10T16:12:20+00:00

http://www.openssl.org/news/secadv_20140605.txt Anonymous ECDH denial of service (CVE-2014-3470) OpenSSL TLS clients enabling anonymous ECDH ciphersuites are subject to a denial of service attack. (Patch borrowed from Fedora.) (From OE-Core rev: 595f2fc7dd642d729ab61f20a6719a2cc6c80426) Signed-off-by: Paul Eggleton Signed-off-by: Saul Wold Signed-off-by: Richard Purdie