linux/poky.git/meta/recipes-connectivity, branch yocto-3.3.2

openssh: Remove temporary keys before generating new ones

2021-07-20T18:05:45+00:00

Key generation may wait for user input, due to the existence of temporary keys resulting from power interruption in the first boot. This prevents users from login via ssh. (From OE-Core rev: dceba60f817c61d36868a2def642fc4164ff53ab) Signed-off-by: Asfak Rahman Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie (cherry picked from commit 3196249a6917a32491be56e70bbf26d3b9818e0e) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

avahi: apply fix for CVE-2021-3468

2021-06-26T14:24:08+00:00

This patch isn't yet upstream but it has been submitted and other distros are shipping it. (From OE-Core rev: e18f7db2c7159da2d82dc6557edead8bb40ac09f) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked from commit ea33a4a2df4600a55b268e9d57e7396c30f3d123) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

bind: upgrade 9.16.15 -> 9.16.16

2021-06-03T15:31:02+00:00

(From OE-Core rev: 5e1a46f08284e0c54f42f999e3a1c0a403943810) Signed-off-by: Trevor Gamblin Signed-off-by: Richard Purdie

bind: upgrade 9.16.13 -> 9.16.15

2021-06-03T15:31:02+00:00

(From OE-Core rev: bceca3c36eade64c87a88d70eecd45ae1cb5aae9) Signed-off-by: Richard Purdie

bind: upgrade 9.16.12 -> 9.16.13

2021-06-03T15:31:02+00:00

(From OE-Core rev: 342cdbc0671cbf8a41984784db7d986086b64977) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

avahi: Exclude CVE-2021-26720 from cve-check

2021-05-22T09:01:03+00:00

Issue only affects Debian and SUSE. (From OE-Core rev: 37ff24c9ba0634e7b69dd9c2219b8fd8b2315de6) Signed-off-by: Richard Purdie

bluez: Exclude CVE-2020-12352 CVE-2020-24490 from cve-check

2021-05-22T09:01:03+00:00

These CVEs are fixed with kernel changes and don't affect the bluez recipe. (From OE-Core rev: 21b6975cc6c785aa3bf7f7d4ea2400e11f1800bd) Signed-off-by: Richard Purdie

openssh: Exclude CVE-2008-3844 from cve-check

2021-05-22T09:01:02+00:00

CVE only applies to some distributed RHEL binaries so irrelavent to us. (From OE-Core rev: 416230b7236c391e89d0d7941b2d34b6234f993c) Signed-off-by: Richard Purdie

openssh: Exclude CVE-2007-2768 from cve-check

2021-05-22T09:01:02+00:00

We don't build/use the OPIE PAM module, exclude the CVE from this recipe. (From OE-Core rev: a7aba0f1226411f44f316cdced6b2b47621d1d3f) Signed-off-by: Richard Purdie

wpa-supplicant: fix CVE-2021-30004

2021-04-30T13:37:25+00:00

In wpa_supplicant and hostapd 2.9, forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c. References: https://nvd.nist.gov/vuln/detail/CVE-2021-30004 Upstream patches: https://w1.fi/cgit/hostap/commit/?id=a0541334a6394f8237a4393b7372693cd7e96f15 (From OE-Core rev: decf95ad84a38b86e4e9f86a78f76535f4f22d4f) Signed-off-by: Stefan Ghinea Signed-off-by: Richard Purdie (cherry picked from commit b32b671bf430b36a5547f8d822dbb760d6be47f7) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie