linux/poky.git/meta/recipes-connectivity, branch yocto-3.4.3

libpcap: Disable DPDK explicitly

2022-02-24T11:12:39+00:00

libpcap looks for DPDK in the same way it looks for DAG. This can poison the build even if it doesn't find anything. Explicitly disable dpdk. (From OE-Core rev: 61fe2321426af41cc36f3fdbdf9774edae398933) Signed-off-by: Sean Anderson Signed-off-by: Richard Purdie (cherry picked from commit be5442f065da40b41d3cd60793341e22654f2681) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

socat: update SRC_URI

2022-01-31T21:55:57+00:00

The orginal one is unaccessible now. (From OE-Core rev: 0014b0d5d1fe503387ecbcc078916830a8e6c307) Signed-off-by: Mingli Yu Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

openssl: Add reproducibility fix

2022-01-12T22:03:31+00:00

When the date rolled from one year to another, it highlighted a reproducibility issue in openssl. Patch a workaround for this to avoid autobuilder failures. Help submitting upstream welcome. (From OE-Core rev: 8666c89f44e5cebbba66019f3a85edc9176b922a) Signed-off-by: Richard Purdie (cherry picked from commit f8281e290737dba16a46d7ae937c66b3266e0fe8) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

bind: fix CVE-2021-25219

2021-12-17T10:02:39+00:00

Backport patches to fix CVE-2021-25219. (From OE-Core rev: 918660a2d4bc89a763a5934765ff6a1647709fcc) (From OE-Core rev: 6dda02aa752c618f2adb0b1372e93b48a0a09a17) Signed-off-by: Mingli Yu Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie (cherry picked from commit 729693f0c250aec7dfdb91a9bb4dd5420c7efbee) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

openssh: fix CVE-2021-41617

2021-12-17T10:02:39+00:00

(From OE-Core rev: 37edef7d39c829b8d01a0471e612d62d6388fb7e) Signed-off-by: Changqing Li Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

wpa-supplicant: Match package override to PACKAGES for pkg_postinst

2021-11-21T11:41:39+00:00

In PACKAGES, ${PN} is used so it makes sense for the pkg_postinst variable override to match that else it causes user confusion. [YOCTO #14616] (From OE-Core rev: 2e0bbd8edcdcc892e593848e618a9a00f6dac05f) Signed-off-by: Richard Purdie (cherry picked from commit ae9094d45bbfff377bd542939e12a8451a4959b6) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

avahi: update CVE id fixed by local-ping.patch

2021-11-21T11:41:39+00:00

CVE-2021-36217 is treated as a duplicate of CVE-2021-3502. Update the local-ping.patch to mark it resolve both. (From OE-Core rev: efb82a8e56c9af7846b391a031511ab60d12ced4) Signed-off-by: Chen Qi Signed-off-by: Richard Purdie (cherry picked from commit 4d75d6c39f1faeb38191b55f1fa9311b63fcfb29) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

recipes: Update github.com urls to use https

2021-11-15T11:56:17+00:00

Github has announced there will be no more git:// fetching from their servers: https://github.blog/2021-09-01-improving-git-protocol-security-github/#no-more-unauthenticated-git and they're about to start having brownout periods to encourage people to update. This runs the conversion script over OE-Core to update our urls to use https instead of git. (From OE-Core rev: 8b83eddda83327d25247bb9b61a049b0a8698a45) Signed-off-by: Richard Purdie (cherry picked from commit b37b61e9a1e448a34957db9ae39285d21352552e) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

meta: Add explict branch to git SRC_URIs

2021-11-15T11:56:17+00:00

There is uncertainty about the default branch name in git going forward. To try and cover the different possible outcomes, add branch names to all git:// and gitsm:// SRC_URI entries. This update was made with the script added to contrib in this patch which aims to help others convert other layers. (From OE-Core rev: 37b4f66fa23979cbfe82679a74ce21b11fc61557) Signed-off-by: Richard Purdie (cherry picked from commit b51c405faf6f8c0365f7533bfaf470d79152a463) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

inetutils: fix CVE-2021-40491

2021-09-26T11:05:03+00:00

CVE-2021-40491: The ftp client in GNU Inetutils before 2.2 does not validate addresses returned by PASV/LSPV responses to make sure they match the server address. This is similar to CVE-2020-8284 for curl. References: https://nvd.nist.gov/vuln/detail/CVE-2021-40491 Patch from: https://git.savannah.gnu.org/cgit/inetutils.git/commit/?id=58cb043b190fd04effdaea7c9403416b436e50dd (From OE-Core rev: 1b857807f1cf8fee3175f8479a0c7cb1850bd9a9) Signed-off-by: Yi Zhao Signed-off-by: Richard Purdie