linux/poky.git/meta/recipes-extended/iputils, branch master-next

recipes: cleanup CVE_STATUS which are resolved now

2025-08-28T09:47:08+00:00

The don't show up in CVE metrics anymore since they were either fixed upstream or recipe version was upgraded meanwhile. * bind CVE-2019-6470: cpe got corrected in nvd db * libxml2 CVE-2023-45322: version is now higher than NVD cpe * zlib CVE-2023-45853: version is now higher than NVD cpe * gcc CVE-2021-37322: version is now higher than NVD cpe * python3 * CVE-2007-4559: version is now higher than NVD cpe * CVE-2019-18348: version is now higher than NVD cpe * CVE-2020-15523: version is now higher than NVD cpe * CVE-2022-26488: version is now higher than NVD cpe * CVE-2015-20107: version is now higher than NVD cpe * CVE-2023-36632: version is now higher than NVD cpe * rust * CVE-2024-24576: NVD has no cpe, but we have newer version as fix * CVE-2024-43402: version is now higher than NVD cpe * cups CVE-2021-25317: version is now higher than NVD cpe * ghostscript CVE-2023-38559: version is now higher than NVD cpe * libtirpc CVE-2021-46828: version is now higher than NVD cpe * unzip CVE-2008-0888: version is now higher than NVD cpe * ffmpeg CVE-2023-39018: cpe got corrected in nvd db * libxslt CVE-2022-29824: version is now higher than NVD cpe * libyaml * CVE-2024-35325: CVE is now rejected in NVD DB * CVE-2024-35326: CVE is now rejected in NVD DB * CVE-2024-35328: CVE is now rejected in NVD DB Also add comment for iputils regarding reports for FKIE/NVD2. Also remove some trailing spaces in python recipe. (From OE-Core rev: 73ee9789183aa95072af2b51ac9e08203f4e33f9) Signed-off-by: Peter Marko Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie

meta: remove consecutive blank lines

2025-06-20T11:07:27+00:00

Some of them were introduced by mass-removal of S = WORKDIR/git assignments; rather than try to fix up (or redo) just these, I've run this sed command over the whole tree: sed -i -z -E 's/([ \t\f\v\r]*\n){3,}/\n\n/g' `find . -name *.bb -o -name *.inc` The rationale is that more than one empty line is wasting vertical screen space, and does nothing for readability. (From OE-Core rev: cedc4ff7c9bcfb22a20e43e47f9759f4007a4f1a) Signed-off-by: Alexander Kanavin Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie

meta: remove S in recipes that fetch from git via setting BB_GIT_DEFAULT_DESTSUFFIX

2025-06-20T11:07:26+00:00

Removing all the S = ${WORKDIR}/git assignments works because BB_GIT_DEFAULT_DESTSUFFIX is set to match S from bitbake.conf (which itself is set to match typical tarball releases). A few recipes are setting S to a sub-directory of the git tree and need to be adjusted accordingly. bzip2 recipe is fetching a tarball and separately cloning tests; adjust the recipe to put the latter into 'bzip2-tests', instead of 'git'. devupstream.bbclass no longer needs to rewrite S, and is adjusted accordingly. Adjust scripts/lib/recipetool/append.py to not hardcode 'git' as unpack destination. Adjust kernel-yocto.bbclass to use the git unpack variable instead of hardcoding 'git' (there's also removal of repetition of string constants and a correction of workdir/unpackdir mismatch in one of the if-else branches). Ensure build-appliance-image recipe does not use 'git' as checkout directory for poky repo, but rather explicitly name it 'poky'. Ensure reproducible.py code that looks for git repositories does not hardcode 'git' but uses the destination set by BB_GIT_DEFAULT_DESTSUFFIX. Ensure recipetool does not write out unneeded S settings into newly created recipes that fetch from git. Adjust selftest to not hardcode 'git' as unpack directory. (From OE-Core rev: f80c07019ddadaf9c5fb890faabfda7920ecd15e) Signed-off-by: Alexander Kanavin Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie

iputils: Drop obsolete gnutls dependency

2025-06-09T16:43:41+00:00

To quote the maintainer, "md5 implementation was vendored in s20200821" so this dependency hasn't been needed for a while. (From OE-Core rev: bb33b4edf0f4aed3d61203b0bf428661f925b981) Signed-off-by: Richard Purdie

iputils: upgrade 20240905 -> 20250605

2025-06-09T16:43:41+00:00

Bugfix release: https://github.com/iputils/iputils/releases/tag/20250605 This also includes security release update https://github.com/iputils/iputils/releases/tag/20250602 Security release, fixes CVE-2025-47268 and CVE-2025-48964 (therefore remove backported fix CVE-2025-47268.patch (From OE-Core rev: 846b7dcb5a41ec017581913bb438d43d1d59109f) Signed-off-by: Petr Vorel Signed-off-by: Richard Purdie

iputils: Security fix for CVE-2025-47268

2025-05-19T16:35:42+00:00

CVE-2025-47268 ping in iputils through 20240905 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-47268 Patch from: https://github.com/iputils/iputils/commit/070cfacd7348386173231fb16fad4983d4e6ae40 (From OE-Core rev: a4a58d3f6cd49a54a8c271abaad8098958d4f27f) Signed-off-by: Yi Zhao Signed-off-by: Richard Purdie

iputils: upgrade 20240117 -> 20240905

2024-09-20T09:45:45+00:00

Changelog: - Allow to disable reverse DNS resolution (PTR lookup) with with environment variable IPUTILS_PING_PTR_LOOKUP=0 - Lower max allowed -s value to 65507 (IPv4) or 65527 (IPv6). That is the maximum the Linux kernel supports. - Include pre-generated man pages & HTML docs in dist tarballs. This allows to avoid libxslt, docbook, ... as a build dependencies. - require meson >= 0.44 - ping has new option -3 (From OE-Core rev: 6e950f5edd36a2ef1b1a7c46c1bb860ddce7a70f) Signed-off-by: Changhyeok Bae Signed-off-by: Richard Purdie

iputils: splitting the ping6 as a package

2024-04-23T12:40:24+00:00

The iputils merged the ping4 and ping6 command into the ping since the commit ebad35fe[1], currently, iputils ping support being called using "ping -6" or "ping6" symlinks. In oe-core, there are two packages provide ipv6 ping, inetutils and iputils, the inetutils-ping6 doesn't support "-I" option to bind the interface, that cause some of scripts(e.g. LTP test[2]) which was based on iputils-ping6 fails. If someone or a package needs iputils-ping6, they can enable it in local.conf or add it into rdepends directly. Ref: [1] https://github.com/iputils/iputils/commit/e3de851b809c7b72ccc654a72b6af61d [2] https://github.com/linux-test-project/ltp/blob/master/testcases/kernel/ \ containers/netns/netns_comm.sh#L25 (From OE-Core rev: 05107ec5e4b81315d53efef23f2a570d520ee4c7) Signed-off-by: Xiangyu Chen Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

iputils: update to 20240117

2024-01-19T00:16:42+00:00

Changelog: * ping - fix: Restore -i0 (commit: 7a51494, PR: #519, regression from 2a63b94) * localization - Updated Turkish and Indonesian - 100% translated: Chinese (Simplified), Czech, French, Georgian, German, Korean, Portuguese (Brazil), Turkish, Ukrainian - > 90% translated: Finnish, Indonesian, Japanese (From OE-Core rev: 1b604914d64986e9b13ea2a701d13a3da1e87a61) Signed-off-by: Petr Vorel Signed-off-by: Richard Purdie

iputils: upgrade 20221126 -> 20231222

2023-12-30T11:03:07+00:00

Changelog: =========== - fix: Properly fix -Wpedantic warnings - fix: Set ppoll timeout minimum to 1ms #459) - fix: Revert "ping: use random value for the identifier field" to use PID again - fix: Fix support for DSCP (Traffic Class, option -Q) - fix: Fix the errno handling for strtod - fix: Drop redundant setsockopt(IPV6_TCLASS) call - fix: Fix overflow on negative -i - fix: Fix sporadically missing DNS record on targets with multiple IP addresses - fix: Handle interval correctly in the first second after booting - fix: Fix presentation of IPv6 addresses with no reverse DNS - fix: Add missing whitespace in IPv6 output - fix: Allow to localize help - fix: Use print target when empty ai_canonname - fix: Restore the MTU probing behavior") (From OE-Core rev: 25b8aa5fcaa682dc6bc011ffbac17f19c6d9c389) Signed-off-by: Wang Mingyu Signed-off-by: Richard Purdie