linux/poky.git/meta/recipes-connectivity, branch master

The poky repository master branch is no longer being updated.

2025-11-07T13:31:53+00:00

You can either: a) switch to individual clones of bitbake, openembedded-core, meta-yocto and yocto-docs b) use the new bitbake-setup You can find information about either approach in our documentation: https://docs.yoctoproject.org/ Note that "poky" the distro setting is still available in meta-yocto as before and we continue to use and maintain that. Long live Poky! Some further information on the background of this change can be found in: https://lists.openembedded.org/g/openembedded-architecture/message/2179 Signed-off-by: Richard Purdie

openssl: extend check_cwm test timeout

2025-11-06T15:09:32+00:00

Fixes [YOCTO 14649] The default 3s test execution timeout isn't always enough for the check_cwm test on the autobuilder in case there is a high load on the host machine, and due to this this case fails sometimes. This patch doubles the timeout for this testcase to 6 seconds to allow enough time for execution even if there is high CPU usage by other processes. (From OE-Core rev: 561aba8d38d1e15d23bd13736013825bd04aff2c) Signed-off-by: Gyorgy Sarvari Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie

kea: fix CVE-2025-11232

2025-11-06T15:09:32+00:00

Backport a patch from upstream to resolve CVE-2025-11232: Invalid characters cause assert To trigger the issue, three configuration parameters must have specific settings: "hostname-char-set" must be left at the default setting, which is "[^A-Za-z0-9.-]"; "hostname-char-replacement" must be empty (the default); and "ddns-qualifying-suffix" must NOT be empty (the default is empty). DDNS updates do not need to be enabled for this issue to manifest. A client that sends certain option content would then cause kea-dhcp4 to exit unexpectedly. (From OE-Core rev: f9331b42fd8b0df64517969a794a93d41624bd96) Signed-off-by: Ross Burton Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie

wpa-supplicant: patch CVE-2025-24912

2025-11-03T17:40:41+00:00

Pick patches as listed in NVD CVE report. Note that Debian lists one of the patches as introducing the vulnerability. This is against what the original report [1] says. Also the commit messages provide hints that the first patch fixes this issue and second is fixing problem with the first patch. [1] https://jvn.jp/en/jp/JVN19358384/ (From OE-Core rev: 2eed0deab456df4ef8876afe0710c9c89b41d45f) Signed-off-by: Peter Marko Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie

openssh: Upgrade 10.0p1 -> 10.1p1

2025-10-30T11:06:28+00:00

Changelog: https://www.openssh.org/txt/release-10.1 RP: There are some changes to confg options and new warnings but those warnings would only trigger on older openssh before 9.0 (April 2022). (From OE-Core rev: 251a2997b432bfba98a94e58a557c06d9c3d416d) Signed-off-by: Archana Polampalli Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie

bind: upgrade 9.20.13 -> 9.20.15

2025-10-30T11:06:28+00:00

This upgrade fixes CVE-2025-8677,CVE-2025-40778 and CVE-2025-40780. Changelog ========== https://downloads.isc.org/isc/bind9/9.20.15/doc/arm/html/changelog.html (From OE-Core rev: 3de3d7864e34407384d5a8b34d9e1c01839f6595) Signed-off-by: Praveen Kumar Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie

avahi: fix CVE-2024-52615

2025-10-30T11:06:28+00:00

CVE-2024-52615: A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected. Reference: [https://nvd.nist.gov/vuln/detail/CVE-2024-52615] [https://github.com/avahi/avahi/security/advisories/GHSA-x6vp-f33h-h32g] Upstream patches: [https://github.com/avahi/avahi/commit/4e2e1ea0908d7e6ad7f38ae04fdcdf2411f8b942] (Cherry pick from commit: ec22ec26b3f40ed5e0d84d60c29d8c315cf72e23) (From OE-Core rev: 97d60090dbe96dca423af47c8d55cc53e172fb4c) Signed-off-by: Zhang Peng Signed-off-by: Steve Sakoman Signed-off-by: Zhang Peng Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie

avahi: fix CVE-2024-52616

2025-10-30T11:06:28+00:00

CVE-2024-52616: A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs. Reference: [https://nvd.nist.gov/vuln/detail/CVE-2024-52616] [https://github.com/avahi/avahi/security/advisories/GHSA-r9j3-vjjh-p8vm] Upstream patches: [https://github.com/avahi/avahi/commit/f8710bdc8b29ee1176fe3bfaeabebbda1b7a79f7] (Cherry pick from commit 28de3f131b17dc4165df927060ee51f0de3ada90) (From OE-Core rev: 3d36874e2beb64ca2a089a2be942cbbbbe1fff79) Signed-off-by: Zhang Peng Signed-off-by: Steve Sakoman Signed-off-by: Zhang Peng Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie

kea: fix installation umask to 0022 of meson.

2025-10-27T11:37:43+00:00

The default installation umask is 0027 for Kea-built artifacts. And it caused package conflicts as following: Error: Transaction test error: file /usr/lib/pkgconfig conflicts between attempted installs of kea-dev-3.0.1-r0.x86_64_v3 and btrfs-tools-dev-6.16-r0.x86_64_v3 file /usr/lib/pkgconfig conflicts between attempted installs of libgcrypt-dev-1.11.2-r0.x86_64_v3 and kea-dev-3.0.1-r0.x86_64_v3 I submitted an issue to the upstream and found upstream alreadly known this issue. https://gitlab.isc.org/isc-projects/kea/-/issues/4171 https://gitlab.isc.org/isc-projects/kea/-/issues/3993 Then I follow the method in the SPEC file of upstream to fix this problem in Yocto. https://gitlab.isc.org/isc-projects/kea-packaging/-/blob/master/rpm/kea.spec?ref_type=heads meson setup build \ --buildtype release \ --install-umask 0022 \ --bindir %{_bindir} \ (From OE-Core rev: 0294c265a1f662e2b68b3a462da113cfa835485b) Signed-off-by: Liu Yiding Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

kea: fix EXTRA_OE config to EXTRA_OEMESON

2025-10-27T11:37:43+00:00

After kea has been upgrade to 3.0.1,the build system changed to meson,but the config of build system is still be EXTRA_OECONF. So this commit fix it. (From OE-Core rev: df3f4196693ae82bddebe134f3af0db92e5d5712) Signed-off-by: Liu Yiding Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Ross Burton Signed-off-by: Richard Purdie