linux/poky.git/meta/recipes-connectivity, branch yocto-3.3.4

openssh: fix CVE-2021-41617

2021-11-03T11:19:04+00:00

(From OE-Core rev: b2c329641f91630ecbb225e8cd0cdcaf461d7ef6) Signed-off-by: Changqing Li Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

bind: Exclude CVE-2019-6470 from cve-check

2021-10-07T14:10:40+00:00

Issue only affects dhcpd with recent bind versions. We don't ship dhcpd anymore so the issue doesn't affect us. (From OE-Core rev: 09898a99b42e048e7085a3df4504e887811b2349) Signed-off-by: Richard Purdie (cherry picked from commit 30106ae676124ba3c0e496a4f19c919c8418b59b) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

connman: add CVE_PRODUCT

2021-10-02T08:53:15+00:00

Upstream database uses both "connman" and "connection_manager" to report CVEs (From OE-Core rev: f0789ed2f4b49f8c63dedd770e5c78bac6cae456) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie (cherry picked from commit eadf7bb17289731be9747822e3d4084ab69cf109) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

bluez5: fix CVE-2021-0129

2021-09-17T20:31:37+00:00

Backport a fix from version 5.57 rather than doing an uprev, since there appear to be some minor functional changes between our current version and that version, despite the changelog only listing fixes. (From OE-Core rev: be18e566413efef12dc2488ab186f397d1dacda9) Signed-off-by: Trevor Gamblin Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

bluez5: fix CVE-2021-3658

2021-09-09T09:19:42+00:00

Backporting upstream fix since the uprev from 5.60 -> 5.61 does include some minor functionality changes. (From OE-Core rev: 0559cba2b46883e2d0178d611b164814a989df37) Signed-off-by: Trevor Gamblin Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

openssl: upgrade from 1.1.1k to 1.1.1l

2021-09-01T15:28:04+00:00

Includes fixes for: CVE: CVE-2021-3711 CVE: CVE-2021-3712 as described by: https://www.openssl.org/news/secadv/20210824.txt Ptest results on qemux86-64 with kvm: All tests successful. Files=158, Tests=2532, 93 wallclock secs \ ( 1.31 usr 0.14 sys + 73.43 cusr 12.65 csys = 87.53 CPU) Result: PASS DURATION: 93 (From OE-Core rev: 9b39e14809da170634ef99e611d26e6b5497e793) Signed-off-by: Randy MacLeod Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

avahi: fix CVE-2021-36217, crash on pinging '.local'

2021-08-06T08:59:14+00:00

(From OE-Core rev: d4ff12cfd00c23ce39834b29fea89247f70f64ab) Signed-off-by: Ross Burton Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie (cherry picked from commit 638beadad098e9ee4e743be8f59f5a7f11373aff) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

openssh: Remove temporary keys before generating new ones

2021-07-20T18:05:45+00:00

Key generation may wait for user input, due to the existence of temporary keys resulting from power interruption in the first boot. This prevents users from login via ssh. (From OE-Core rev: dceba60f817c61d36868a2def642fc4164ff53ab) Signed-off-by: Asfak Rahman Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie (cherry picked from commit 3196249a6917a32491be56e70bbf26d3b9818e0e) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

avahi: apply fix for CVE-2021-3468

2021-06-26T14:24:08+00:00

This patch isn't yet upstream but it has been submitted and other distros are shipping it. (From OE-Core rev: e18f7db2c7159da2d82dc6557edead8bb40ac09f) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked from commit ea33a4a2df4600a55b268e9d57e7396c30f3d123) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

bind: upgrade 9.16.15 -> 9.16.16

2021-06-03T15:31:02+00:00

(From OE-Core rev: 5e1a46f08284e0c54f42f999e3a1c0a403943810) Signed-off-by: Trevor Gamblin Signed-off-by: Richard Purdie