linux/poky.git/meta/recipes-connectivity, branch yocto-5.0.8

openssh: Fix CVE-2025-26466

2025-03-08T14:22:56+00:00

sshd(8) in OpenSSH versions 9.5p1 to 9.9p1 (inclusive) is vulnerable to a memory/CPU denial-of-service related to the handling of SSH2_MSG_PING packets. This condition may be mitigated using the existing PerSourcePenalties feature. Upstream-Status: Backport [https://github.com/openssh/openssh-portable/commit/6ce00f0c2ecbb9f75023dbe627ee6460bcec78c2] (From OE-Core rev: 7360f3998939e202f9611644a8bed0c3fe0c782a) Signed-off-by: Vijay Anusuri Signed-off-by: Steve Sakoman

bind: Upgrade 9.18.28 -> 9.18.33

2025-02-28T14:45:14+00:00

Includes security fixes for CVE-2024-12705 CVE-2024-11187 and other bug fixes Release Notes: https://downloads.isc.org/isc/bind9/9.18.33/doc/arm/html/notes.html#notes-for-bind-9-18-33 https://downloads.isc.org/isc/bind9/9.18.33/doc/arm/html/notes.html#notes-for-bind-9-18-32 https://downloads.isc.org/isc/bind9/9.18.33/doc/arm/html/notes.html#notes-for-bind-9-18-31 https://downloads.isc.org/isc/bind9/9.18.33/doc/arm/html/notes.html#notes-for-bind-9-18-30 https://downloads.isc.org/isc/bind9/9.18.33/doc/arm/html/notes.html#notes-for-bind-9-18-29 (From OE-Core rev: 37f07393c6977e7765ebfd948a017dab9be6a367) Signed-off-by: Vijay Anusuri Signed-off-by: Steve Sakoman

ppp: Revert lock path to /var/lock

2025-02-21T14:25:06+00:00

ppp version 2.5.0 fails to run properly if an expected /run/pppd/lock directory does not exist, which is not usually created in a yocto built OS. Backport the patch from upstream version 2.5.1 that fixes the issue by reverting back to /var/lock. The related github issue upstream was: "lock directory moved in ppp-2.5.0 #419" [1] Link: https://github.com/ppp-project/ppp/issues/419 (From OE-Core rev: 0869eb50e39c567cc1d50db4eb287f02866196cf) Signed-off-by: Johannes Schneider Signed-off-by: Steve Sakoman

openssl: upgrade 3.2.3 -> 3.2.4

2025-02-21T14:25:06+00:00

Release information: https://github.com/openssl/openssl/blob/openssl-3.2/NEWS.md#major-changes-between-openssl-323-and-openssl-324-11-feb-2025 Handles CVE-2024-12797 in addition to already patched CVEs. Refresh patches and remove CVE patches included in the new version. (From OE-Core rev: b051c16980f67541866253f0d7eb2dc39847fb83) Signed-off-by: Peter Marko Signed-off-by: Steve Sakoman

openssl: patch CVE-2024-13176

2025-02-03T14:13:13+00:00

Picked [1] per link in [2] [1] https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65 [2] https://nvd.nist.gov/vuln/detail/CVE-2024-13176 (From OE-Core rev: 7f9bb49394185fea268397db4fc7d96afae53f28) Signed-off-by: Peter Marko Signed-off-by: Steve Sakoman

Revert "bluez5: remove configuration files from install task"

2025-01-24T15:59:39+00:00

This reverts commit 49391fdcf71b32c5fd3c7b134c1d1c45cc1db388 which introduced a bluetooth regression on systems with read-only rootfs. When configuration files are missing, bluez tries to generate them which fails on a read-only rootfs. As a result bluetooth service fails to start and bluetooth is broken. Hence, configuration files need to be installed in the rootfs in a way or another. Bluez commit be0e79629 (build: ship all config files with --enable-datafiles, 2024-02-12) introduced configuration files installation in bluez version 5.73. However, scarthgap pulls in version 5.72, so it is responsible of the installation of configuration files until bluez is upgraded. Scarthgap commit 49391fdcf71b32c5fd3c7b134c1d1c45cc1db388 removed installation of configuration files too early, hence the revert. (From OE-Core rev: 54a7014a801ddbda2a7dfe1ab560a154064ad47e) Signed-off-by: Catalin Popescu Signed-off-by: Steve Sakoman

ofono: patch CVE-2023-4235

2025-01-24T15:59:38+00:00

Cherry-pick commit https://git.kernel.org/pub/scm/network/ofono/ofono.git/commit/?id=02aa0f9bad3d9e47a152fc045d0f51874d901d7e (From OE-Core rev: 5adbece7dcbb547ea44207fa1a9ddc7d56766b1b) Signed-off-by: Peter Marko Signed-off-by: Steve Sakoman

ofono: patch CVE-2023-4232

2025-01-24T15:59:38+00:00

Cherry-pick commit https://git.kernel.org/pub/scm/network/ofono/ofono.git/commit/?id=2ff2da7ac374a790f8b2a0216bcb4e3126498225 (From OE-Core rev: 476ef12ab91aada032ea0e6acc5a0044497ace25) Signed-off-by: Peter Marko Signed-off-by: Steve Sakoman

ofono: patch CVE-2024-7540, CVE-2024-7541, CVE-2024-7542

2025-01-24T15:59:38+00:00

Cherry-pick commit https://git.kernel.org/pub/scm/network/ofono/ofono.git/commit/?id=29ff6334b492504ace101be748b256e6953d2c2f (From OE-Core rev: 6f55cecbff1e5be7dda7484b8b04f7ccfbdceb1b) Signed-off-by: Peter Marko Signed-off-by: Steve Sakoman

socat: patch CVE-2024-54661

2025-01-24T15:59:38+00:00

Picked upstream commit https://repo.or.cz/socat.git/commitdiff/4ee1f31cf80019c5907876576d6dfd49368d660f Since this was the only commit in 1.8.0.2 it also contained release changes which were dropped. (From OE-Core rev: efa7a5e5a8448ae52152ee8ebbf5c51d691a34d2) Signed-off-by: Peter Marko Signed-off-by: Steve Sakoman