linux/poky.git/meta/recipes-connectivity, branch hardknott-next

bind: upgrade 9.16.15 -> 9.16.16

2021-06-02T22:32:44+00:00

(From OE-Core rev: 5e1a46f08284e0c54f42f999e3a1c0a403943810) Signed-off-by: Trevor Gamblin Signed-off-by: Richard Purdie

bind: upgrade 9.16.13 -> 9.16.15

2021-06-02T22:32:44+00:00

(From OE-Core rev: bceca3c36eade64c87a88d70eecd45ae1cb5aae9) Signed-off-by: Richard Purdie

bind: upgrade 9.16.12 -> 9.16.13

2021-06-02T22:32:44+00:00

(From OE-Core rev: 342cdbc0671cbf8a41984784db7d986086b64977) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

avahi: Exclude CVE-2021-26720 from cve-check

2021-05-22T09:01:03+00:00

Issue only affects Debian and SUSE. (From OE-Core rev: 37ff24c9ba0634e7b69dd9c2219b8fd8b2315de6) Signed-off-by: Richard Purdie

bluez: Exclude CVE-2020-12352 CVE-2020-24490 from cve-check

2021-05-22T09:01:03+00:00

These CVEs are fixed with kernel changes and don't affect the bluez recipe. (From OE-Core rev: 21b6975cc6c785aa3bf7f7d4ea2400e11f1800bd) Signed-off-by: Richard Purdie

openssh: Exclude CVE-2008-3844 from cve-check

2021-05-22T09:01:02+00:00

CVE only applies to some distributed RHEL binaries so irrelavent to us. (From OE-Core rev: 416230b7236c391e89d0d7941b2d34b6234f993c) Signed-off-by: Richard Purdie

openssh: Exclude CVE-2007-2768 from cve-check

2021-05-22T09:01:02+00:00

We don't build/use the OPIE PAM module, exclude the CVE from this recipe. (From OE-Core rev: a7aba0f1226411f44f316cdced6b2b47621d1d3f) Signed-off-by: Richard Purdie

wpa-supplicant: fix CVE-2021-30004

2021-04-30T13:37:25+00:00

In wpa_supplicant and hostapd 2.9, forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c. References: https://nvd.nist.gov/vuln/detail/CVE-2021-30004 Upstream patches: https://w1.fi/cgit/hostap/commit/?id=a0541334a6394f8237a4393b7372693cd7e96f15 (From OE-Core rev: decf95ad84a38b86e4e9f86a78f76535f4f22d4f) Signed-off-by: Stefan Ghinea Signed-off-by: Richard Purdie (cherry picked from commit b32b671bf430b36a5547f8d822dbb760d6be47f7) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

openssl: update to 1.1.1k to fix CVE-2021-3450 and CVE-2021-3449

2021-03-28T21:28:27+00:00

Only security issues fixed in this release according to https://www.openssl.org/news/cl111.txt (From OE-Core rev: 557d956743ecf5e1d002ae0b2135b1307736b7c8) Signed-off-by: Mikko Rapeli Signed-off-by: Richard Purdie

openssh: Improve LICENSE to show BSD license variants.

2021-03-23T22:51:26+00:00

Update LICENSE to show that BSD-2-Clause, BSD-3-Clause and BSD-4-Clause are all present. (From OE-Core rev: d17938953fc2524bc5f04db4409a47aa400e756a) Signed-off-by: Wang Mingyu Signed-off-by: Richard Purdie