linux/poky.git/meta/recipes-connectivity, branch halstead/hashclient

iproute2: add bridge package

2024-04-12T17:04:02+00:00

Add package for using the bridge tool. (From OE-Core rev: 44121c3080328b22077b212e464be909a508d2c4) Signed-off-by: Michael Haener Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

openssh: upgrade 9.6p1 -> 9.7p1

2024-04-12T17:04:01+00:00

0001-systemd-Add-optional-support-for-systemd-sd_notify.patch refresh for 9.7p1 Changelog: ============ New features ------------ * ssh(1), sshd(8): add a "global" ChannelTimeout type that watches all open channels and will close all open channels if there is no traffic on any of them for the specified interval. This is in addition to the existing per-channel timeouts added recently. * All: make DSA key support compile-time optional, defaulting to on. Bugfixes -------- * sshd(8): don't append an unnecessary space to the end of subsystem arguments * ssh(1): fix the multiplexing "channel proxy" mode, broken when keystroke timing obfuscation was added. * ssh(1), sshd(8): fix spurious configuration parsing errors when options that accept array arguments are overridden * ssh-agent(1): fix potential spin in signal handler * Many fixes to manual pages and other documentation * Greatly improve interop testing against PuTTY. (From OE-Core rev: 8abc886e23317f9747f2bee6bb7a6c59e20a1460) Signed-off-by: Wang Mingyu Signed-off-by: Richard Purdie

bind: upgrade 9.18.24 -> 9.18.25

2024-04-12T17:04:01+00:00

Changelog: ============ -Create the pruning task in the dns_cache_flush(), so the cache pruning still works after the flush. -Improve the TTL-based cleaning by removing the expired headers from the heap, so they don't block the next cleaning round and clean more than a single item for each new addition to the RBTDB. -Revert change 6319 and decrease lock contention during RBTDB tree pruning by not cleaning up nodes recursively within a single prune_tree() call. -Address use after free in expire_lru_headers. (From OE-Core rev: 9b967e90cec478d61c72ab34ba2f79c3de0acbcf) Signed-off-by: Wang Mingyu Signed-off-by: Richard Purdie

openssl: fix crash on aarch64 if BTI is enabled but no Crypto instructions

2024-03-30T22:22:19+00:00

On aarch64, if the processor doesn't have the Crypto instructions then OpenSSL will fall back onto the "bit-sliced" assembler routines. When branch protection (BTI) was enabled in OpenSSL these routines were missed, so if BTI is available libssl will immediately abort when it enters this assembler. Backport a patch submitted upstream to add the required call target annotations so that BTI doesn't believe the code is being exploited. (From OE-Core rev: 438a390e8e1811bc2d3820c1cd2b8e099e70064a) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

openssh: Add a workaround for ICE on powerpc64le

2024-03-08T08:06:16+00:00

Fixes [YOCTO #15415] The new openssh version has an ICE on powerpc64le similar to the one on mips/mips64[1]. By adding flag "--without-hardening" to "./configure", compiler option "-fzero-call-used-regs" will be removed when compiling. This prevents certain functions from triggering the following ICE: unimplemented: argument 'used' is not supported for '-fzero-call-used-regs' on this target References [1] https://git.openembedded.org/openembedded-core/commit/?id=5b290566519a87c563945a033cb49863317ad63d (From OE-Core rev: bc793fa9d1fe24c102d91e97b7002b6e637cbfa5) Signed-off-by: William Lyu Signed-off-by: Richard Purdie

ofono: upgrade 2.3 -> 2.4

2024-03-01T09:28:51+00:00

Changelog: ============ -Add support for new provision database format. -Add support for Quectel EG96 modem. (From OE-Core rev: c24adeab8287bcedfd04dc67b08dd8b57cfa42ef) Signed-off-by: Wang Mingyu Signed-off-by: Richard Purdie

wpa-supplicant: Fix CVE-2023-52160

2024-02-29T10:26:13+00:00

PEAP client: Update Phase 2 authentication requirements. Also see https://www.top10vpn.com/research/wifi-vulnerabilities/ (From OE-Core rev: 57b6a329df897de69ae8b90706d9fe37e0ed6d35) Signed-off-by: Claus Stovgaard Signed-off-by: Richard Purdie

openssl: Match target name for loongarch64

2024-02-27T11:35:43+00:00

This is updated in openssl [1] since opensssl 3.2.0-alpha1 onwards [1] https://github.com/openssl/openssl/commit/b625e21e67666213ffd3ba6b1f2cd8a847ba6b66 (From OE-Core rev: 1e5b30d92da2e51e6a4ba75e2cc1e9ccebc8efe7) Signed-off-by: Xiaotian Wu Signed-off-by: Richard Purdie

meta: Remove some not needed CVE_STATUS

2024-02-24T16:10:23+00:00

CVE_STATUS was set for those components, but meanwhile databases are updated with corrected information, so setting the CVE_STATUS is not needed anymore. (From OE-Core rev: 5ec6057cfa66ceeb33bec013e320f8e3fa7d7ecf) Signed-off-by: Simone Weiß Signed-off-by: Richard Purdie

bluez5: remove configuration files from install task

2024-02-24T16:10:23+00:00

Since be0e796299b0 ("build: ship all config files with --enable-datafiles") in bluez, installing input.conf and network.conf has been redundant, as the bluez5 recipe already includes --enable-datafiles. (From OE-Core rev: 49391fdcf71b32c5fd3c7b134c1d1c45cc1db388) Signed-off-by: Emil Kronborg Signed-off-by: Richard Purdie