Mirror of git.yoctoproject.org/poky https://git.enea.com/cgit/linux/poky.git/atom?h=krogoth 2016-11-08T23:47:13+00:00 2016-11-08T23:47:13+00:00 Sona Sarmadi sona.sarmadi@enea.com 2016-11-02T09:52:11+00:00 urn:sha1:c4061a0a689fd3f4e3fb5d5dd6357dc542973d45 CVE-2016-7406 CVE-2016-7407 CVE-2016-7408 CVE-2016-7409 References: https://matt.ucc.asn.au/dropbear/CHANGES http://seclists.org/oss-sec/2016/q3/504 [YOCTO #10443] (From OE-Core rev: cca372506522c1d588f9ebc66c6051089743d2a9) Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2016-09-23T14:27:05+00:00 Sona Sarmadi sona.sarmadi@enea.com 2016-09-14T12:34:38+00:00 urn:sha1:58538b070384f7ff0a31bba3877ca09b1c790bc4 The upgrade addresses CVE-2016-3116: - Validate X11 forwarding input. Could allow bypass of authorized_keys command= restrictions, found by github.com/tintinweb. Thanks for Damien Miller for a patch. CVE-2016-3116 References: https://matt.ucc.asn.au/dropbear/CHANGES https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3116 (From OE-Core rev: 5ebac39d1d6dcf041e05002c0b8bf18bfb38e6d3) Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2016-07-27T07:33:37+00:00 Dominic Sacré dominic.sacre@gmx.de 2016-05-25T11:13:44+00:00 urn:sha1:5ddf1463d3eea17d7832f14d6280ebed827c8279 Openssh now installs the sftp-server binary as /usr/libexec/sftp-server, whereas the dropbear recipe assumes a different path. Dropbear uses the correct path by default, so it's no longer necessary to override SFTPSERVER_PATH via CFLAGS. This fixes SFTP access to systems using dropbear as the SSH server. (From OE-Core rev: df798bca330583103b2301678236cc841cc861dd) (From OE-Core rev: e9bbced4da1f13951abdd298590a3577f377866e) Signed-off-by: Dominic Sacré <dominic.sacre@gmx.de> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2015-12-12T23:42:53+00:00 Andre McCurdy armccurdy@gmail.com 2015-12-08T21:42:50+00:00 urn:sha1:fce2ee7ba31a48595adcfd6528a67324a67ee59e The CFLAGS and LD tweaks in dropbear.inc date back to 2005/2006 and whatever issue they worked around back then seems to have been fixed in the latest versions of dropbear. (From OE-Core rev: 4b17606fbca63a17cafbc285e3efe48c4c54a266) Signed-off-by: Andre McCurdy <armccurdy@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2015-12-12T23:42:53+00:00 Andre McCurdy armccurdy@gmail.com 2015-12-08T21:42:49+00:00 urn:sha1:f87063baf9c3eb8f9931d2308bc0e24ab76112f4 2015.71 - 3 December 2015 - Fix "bad buf_incrpos" when data is transferred, broke in 2015.69 - Fix crash on exit when -p address:port is used, broke in 2015.68 - Fix building with only ENABLE_CLI_REMOTETCPFWD given, patch from Konstantin Tokarev - Fix bad configure script test which didn't work with dash shell, patch from Juergen Daubert, broke in 2015.70 - Fix server race condition that could cause sessions to hang on exit, https://github.com/robotframework/SSHLibrary/issues/128 (From OE-Core rev: d0658e0e9efcf2c995e92a61af0e5300ebcdce82) Signed-off-by: Andre McCurdy <armccurdy@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2015-12-12T23:42:52+00:00 Jussi Kukkonen jussi.kukkonen@intel.com 2015-12-02T12:11:38+00:00 urn:sha1:b4db53ae66ba36b8e134de31f49a57e842439e7f Tweak a pam patch to make it apply on current source. (From OE-Core rev: 9116a9346556837328a42059bd8af02ea17d081b) Signed-off-by: Jussi Kukkonen <jussi.kukkonen@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2015-10-01T06:43:37+00:00 Alexander Kanavin alexander.kanavin@linux.intel.com 2015-09-30T12:53:18+00:00 urn:sha1:833bfd34485c7e7b567548b71e90aeff089e3c64 (From OE-Core rev: 7e13fc603aa86219bf15e355ca9ea9275308cca5) Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2015-09-01T10:44:01+00:00 Alexander Kanavin alexander.kanavin@linux.intel.com 2015-08-28T12:18:52+00:00 urn:sha1:abd9ae98a84fc64ac9cf017bf173caf2d7b5aeb4 LICENSE checksum has changed because the copyright year was changed from 2014 to 2015 in it: https://github.com/mkj/dropbear/commit/19e1afbd1ca6d306166ce74bcd6c6889f8d196f3 (From OE-Core rev: 30e791e9bb2e28119e74c22af742957fc470b2de) Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2015-06-11T22:59:15+00:00 Robert Yang liezhi.yang@windriver.com 2015-06-08T02:51:08+00:00 urn:sha1:bd418a059b5b95315dc9a47b9dfb89afe972cefa (From OE-Core rev: 6733f760f7a581e30b783e41c62d1534d0f480d5) Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2015-01-07T23:35:06+00:00 Paul Eggleton paul.eggleton@linux.intel.com 2015-01-02T10:05:39+00:00 urn:sha1:fca3bc561ceaa485bae6140aadd32c84f75d74f7 * Upgrade to upstream 2014.66; incorporates several minor bugfix releases. * LIC_FILES_CHKSUM changed because the copyright year changed; there was no change to the license text itself. (From OE-Core rev: 78f388e81cad5dfb6aea52da68f9b4523c88c5ad) Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>