linux/poky.git/meta/recipes-connectivity, branch honister

openssl: Minor security upgrade 1.1.1n to 1.1.1o

2022-06-01T10:20:25+00:00

This security upgrade fixes CVE-2022-1292 as per below link Link: https://www.openssl.org/news/cl111.txt (From OE-Core rev: 4c8f7c3533d1c3f10c6754c35c6da3f9aa05a09b) Signed-off-by: Ranjitsinh Rathod Signed-off-by: Ranjitsinh Rathod Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

openssl: upgrade 1.1.1l -> 1.1.1n

2022-06-01T10:20:25+00:00

Upgrade openssl 1.1.1l -> 1.1.1n to fix CVE-2022-0778: https://nvd.nist.gov/vuln/detail/CVE-2022-0778 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65 This also fixes an evp_extra_test ptest failure introduced by openssl-1.1.1m: """ not ok 19 - test_signatures_with_engine ERROR: (ptr) 'e = ENGINE_by_id(engine_id) != NULL' failed @ ../openssl-1.1.1m/test/evp_extra_test.c:1890 0x0 not ok 20 - test_cipher_with_engine """ The ptest change is already present in Yocto master since oe-core commit 5cd40648b0ba ("openssl: upgrade to 3.0.1"). (From OE-Core rev: e21e33e2d868b37812575ddbc94aed5f5121786e) Signed-off-by: Ovidiu Panait Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

neard: Switch SRC_URI to git repo

2022-05-12T15:42:12+00:00

The tarball (neard-0.16.tar.xz) fetched by the recipe is incomplete. Few plugins (e.g. tizen) and tests scripts (e.g. Test-channel, test-see, neard-ui.py, ndef-agent etc) are missing. Since neard did not release latest tarballs, so as per community recommendation switching the recipe SRC_URI to git repo. Community Discussion: https://lists.openembedded.org/g/openembedded-core/topic/90058043#163681 (From OE-Core rev: 1095841ef77bce46bcd7c6db28a376372cb12c50) Signed-off-by: Rahul Kumar Signed-off-by: Luca Ceresoli Signed-off-by: Richard Purdie (cherry picked from commit b563f40ebf4461d9c35df72bd7599ea11e97da9c) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

libpcap: Disable DPDK explicitly

2022-02-24T11:12:39+00:00

libpcap looks for DPDK in the same way it looks for DAG. This can poison the build even if it doesn't find anything. Explicitly disable dpdk. (From OE-Core rev: 61fe2321426af41cc36f3fdbdf9774edae398933) Signed-off-by: Sean Anderson Signed-off-by: Richard Purdie (cherry picked from commit be5442f065da40b41d3cd60793341e22654f2681) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

socat: update SRC_URI

2022-01-31T21:55:57+00:00

The orginal one is unaccessible now. (From OE-Core rev: 0014b0d5d1fe503387ecbcc078916830a8e6c307) Signed-off-by: Mingli Yu Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

openssl: Add reproducibility fix

2022-01-12T22:03:31+00:00

When the date rolled from one year to another, it highlighted a reproducibility issue in openssl. Patch a workaround for this to avoid autobuilder failures. Help submitting upstream welcome. (From OE-Core rev: 8666c89f44e5cebbba66019f3a85edc9176b922a) Signed-off-by: Richard Purdie (cherry picked from commit f8281e290737dba16a46d7ae937c66b3266e0fe8) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

bind: fix CVE-2021-25219

2021-12-17T10:02:39+00:00

Backport patches to fix CVE-2021-25219. (From OE-Core rev: 918660a2d4bc89a763a5934765ff6a1647709fcc) (From OE-Core rev: 6dda02aa752c618f2adb0b1372e93b48a0a09a17) Signed-off-by: Mingli Yu Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie (cherry picked from commit 729693f0c250aec7dfdb91a9bb4dd5420c7efbee) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

openssh: fix CVE-2021-41617

2021-12-17T10:02:39+00:00

(From OE-Core rev: 37edef7d39c829b8d01a0471e612d62d6388fb7e) Signed-off-by: Changqing Li Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

wpa-supplicant: Match package override to PACKAGES for pkg_postinst

2021-11-21T11:41:39+00:00

In PACKAGES, ${PN} is used so it makes sense for the pkg_postinst variable override to match that else it causes user confusion. [YOCTO #14616] (From OE-Core rev: 2e0bbd8edcdcc892e593848e618a9a00f6dac05f) Signed-off-by: Richard Purdie (cherry picked from commit ae9094d45bbfff377bd542939e12a8451a4959b6) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

avahi: update CVE id fixed by local-ping.patch

2021-11-21T11:41:39+00:00

CVE-2021-36217 is treated as a duplicate of CVE-2021-3502. Update the local-ping.patch to mark it resolve both. (From OE-Core rev: efb82a8e56c9af7846b391a031511ab60d12ced4) Signed-off-by: Chen Qi Signed-off-by: Richard Purdie (cherry picked from commit 4d75d6c39f1faeb38191b55f1fa9311b63fcfb29) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie