summaryrefslogtreecommitdiffstats
path: root/meta/recipes-connectivity
Commit message (Collapse)AuthorAgeFilesLines
* openssl: Upgrade 3.1.3 -> 3.1.4Peter Marko2023-11-111-1/+1
| | | | | | | | | | | | https://github.com/openssl/openssl/blob/openssl-3.1/NEWS.md#major-changes-between-openssl-313-and-openssl-314-24-oct-2023 Major changes between OpenSSL 3.1.3 and OpenSSL 3.1.4 [24 Oct 2023] * Mitigate incorrect resize handling for symmetric cipher keys and IVs. (CVE-2023-5363) (From OE-Core rev: 914f5ed4cfcc5f05fc04ec990128803a8d108fd1) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* openssl: ensure all ptest fails are caughtAlexander Kanavin2023-10-181-1/+1
| | | | | | | | | | | Piping results through sed may mask failures that sed isn't catching. (From OE-Core rev: 687989f2ee2204643157e04a976d3310018a3bb3) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 2b1b0e9e4d5011e7c2fd1b59fc277a7cfdc41194) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* openssl: parallelize testsAlexander Kanavin2023-10-181-1/+1
| | | | | | | | | | | This brings them from 15 minutes to just over 4. (From OE-Core rev: 3cd99ff32da3bb85d7ee278fec69504a12c1f715) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 9eeee78aa94aaa441da012aeb904a0f1cbcd4d91) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* avahi: handle invalid service types gracefullyRoss Burton2023-10-182-0/+30
| | | | | | | | | | | | Services which broadcast an invalid service type will cause the browse to fail. Instead of failing, replace the service type and continue. (From OE-Core rev: 273aed0462728508506a4c65d367d583a86a54c3) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit e581da6c4db21312833395e96b48e868a202f0f9) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* openssl: build and install manpages only if they are enabledAlexander Kanavin2023-10-131-2/+3
| | | | | | | | | | | This significantly speeds up the build by default. (From OE-Core rev: d6f638c6ab891a4fd9db49eeb6f9b5f2b0c3bbeb) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 2b5ee583c62dbe381cd429da14ecbba5ea32d506) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* openssl: Upgrade 3.1.2 -> 3.1.3Peter Marko2023-10-131-1/+1
| | | | | | | | | | | | https://github.com/openssl/openssl/blob/openssl-3.1/NEWS.md#major-changes-between-openssl-312-and-openssl-313-19-sep-2023 Major changes between OpenSSL 3.1.2 and OpenSSL 3.1.3 [19 Sep 2023] * Fix POLY1305 MAC implementation corrupting XMM registers on Windows (CVE-2023-4807) (From OE-Core rev: 99e40cd72c73363fd1a1094106f90092d5d79c3a) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* inetutils: remove obsolete cruft from do_configureRoss Burton2023-10-041-4/+0
| | | | | | | | | | | glob/ doesn't exist and the other files are copied by autotools.bbclass (From OE-Core rev: edfd456dee40dcd6a65545c60a6ace50aa52f65f) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit f11fac5430c1308347f673c6e1fb6c5b2c7ff9c0) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* inetutils: don't guess target pathsRoss Burton2023-10-042-40/+18
| | | | | | | | | | | | | | | | | | | | | | | | | | inetutils guesses a lot of target paths in cross builds, and warns that some of them are known to be wrong (for example, whether /proc/net/dev exists is guessed as 'no'). Add a post-configure function to check for these warnings, and pass --with-path-* as appropriate to set the paths explicitly. This means we can remove the patch which was setting PATH_PROCNET_DEV, and the autoconf cache value inetutils_cv_path_login. The downside is that these --with-path-* options are not real autoconf options, so the "unknown options" warning is emitted. Losing those is an acceptable compromise, so disable it. Musl doesn't implement utmp and has stub defines for _PATH_UTMP but not _PATH_UTMPX, so we need to set the X variants explicitly. (From OE-Core rev: 86b88aaec534c3da74de6127198c57521977bd10) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 91179f89db127063dbdf998e15d63e04d6be53f7) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* bind: update to 9.18.19Lee Chee Yang2023-09-291-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | release notes: https://downloads.isc.org/isc/bind9/9.18.19/doc/arm/html/notes.html#notes-for-bind-9-18-19 Security Fixes Previously, sending a specially crafted message over the control channel could cause the packet-parsing code to run out of available stack memory, causing named to terminate unexpectedly. This has been fixed. (CVE-2023-3341) ISC would like to thank Eric Sesterhenn from X41 D-Sec GmbH for bringing this vulnerability to our attention. [GL #4152] A flaw in the networking code handling DNS-over-TLS queries could cause named to terminate unexpectedly due to an assertion failure under significant DNS-over-TLS query load. This has been fixed. (CVE-2023-4236) ISC would like to thank Robert Story from USC/ISI Root Server Operations for bringing this vulnerability to our attention. [GL #4242] Removed Features The dnssec-must-be-secure option has been deprecated and will be removed in a future release. [GL #4263] Feature Changes If the server command is specified, nsupdate now honors the nsupdate -v option for SOA queries by sending both the UPDATE request and the initial query over TCP. [GL #1181] Bug Fixes The value of the If-Modified-Since header in the statistics channel was not being correctly validated for its length, potentially allowing an authorized user to trigger a buffer overflow. Ensuring the statistics channel is configured correctly to grant access exclusively to authorized users is essential (see the statistics-channels block definition and usage section). [GL #4124] This issue was reported independently by Eric Sesterhenn of X41 D-Sec GmbH and Cameron Whitehead. The Content-Length header in the statistics channel was lacking proper bounds checking. A negative or excessively large value could potentially trigger an integer overflow and result in an assertion failure. [GL This issue was reported by Eric Sesterhenn of X41 D-Sec GmbH. Several memory leaks caused by not clearing the OpenSSL error stack were fixed. [GL #4159] This issue was reported by Eric Sesterhenn of X41 D-Sec GmbH. The introduction of krb5-subdomain-self-rhs and ms-subdomain-self-rhs UPDATE policies accidentally caused named to return SERVFAIL responses to deletion requests for non-existent PTR and SRV records. This has been fixed. [GL #4280] The stale-refresh-time feature was mistakenly disabled when the server cache was flushed by rndc flush. This has been fixed. [GL #4278] BIND’s memory consumption has been improved by implementing dedicated jemalloc memory arenas for sending buffers. This optimization ensures that memory usage is more efficient and better manages the return of memory pages to the operating system. [GL #4038] Previously, partial writes in the TLS DNS code were not accounted for correctly, which could have led to DNS message corruption. This has been fixed. [GL #4255] Known Issues There are no new known issues with this release. See above for a list of all known issues affecting this BIND 9 branch. (From OE-Core rev: 663397edba278184a736e97aa602d3f96d2d937a) Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* bind: upgrade 9.18.17 -> 9.18.18Wang Mingyu2023-09-291-1/+1
| | | | | | | | | | | | | | | | | | Changelog: ============ Deprecate the 'dialup' and 'heartbeat-interval' options. Ignore 'max-zone-ttl' on 'dnssec-policy insecure'. Return REFUSED to GSS-API TKEY requests if GSS-API support is not configured. Mark a primary server as temporarily unreachable if the TCP connection attempt times out. Don't process detach and close netmgr events when the netmgr has been paused. (cherry-pick from commit e78ec619beea6e541b2d83a5dc845ce57ff12564) (From OE-Core rev: 3cb92c8746f589ef74e337e5866378e04a8133ef) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* inetutils: fix CVE-2023-40303Yogita Urade2023-09-043-0/+544
| | | | | | | | | | | | | | | | | GNU inetutils through 2.4 may allow privilege escalation because of unchecked return values of set*id() family functions in ftpd, rcp, rlogin, rsh, rshd, and uucpd. This is, for example, relevant if the setuid system call fails when a process is trying to drop privileges before letting an ordinary user control the activities of the process. Refernces: https://nvd.nist.gov/vuln/detail/CVE-2023-40303 (From OE-Core rev: b8e2dad0650b8a80e3d85e6d87fda1a0e2fb195f) Signed-off-by: Yogita Urade <yogita.urade@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* openssl: Upgrade 3.1.1 -> 3.1.2Peter Marko2023-08-301-1/+1
| | | | | | | | | | | | | | | | https://github.com/openssl/openssl/blob/openssl-3.1/NEWS.md#major-changes-between-openssl-311-and-openssl-312-1-aug-2023 Major changes between OpenSSL 3.1.1 and OpenSSL 3.1.2 [1 Aug 2023] * Fix excessive time spent checking DH q parameter value (CVE-2023-3817) * Fix DH_check() excessive time with over sized modulus (CVE-2023-3446) * Do not ignore empty associated data entries with AES-SIV (CVE-2023-2975) * When building with the enable-fips option and using the resulting FIPS provider, TLS 1.2 will, by default, mandate the use of an extended master secret and the Hash and HMAC DRBGs will not operate with truncated digests. (From OE-Core rev: e8b876d6514f6257eaaddb7b44489367666504ba) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit e65802383b02df6f502af859a927309d881bbb27) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* bind: upgrade to v9.18.17Sudip Mukherjee2023-08-1810-2/+2
| | | | | | | | | | | | | | | | | Changes: Update license checksum: only whitespace change. Update sha256sum for new version. Additional change: Do not use version with the foldername, which will result in less diffstat with future upgrades. (From OE-Core rev: 742833f076ae44036369b9570bb1584c62d9047b) Signed-off-by: Sudip Mukherjee <sudipm.mukherjee@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> (cherry picked from commit 1eda31b370ab4129ad149c45f1e43a44d6db9241) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* openssh: upgrade to 9.3p2Ross Burton2023-08-181-1/+1
| | | | | | | | | | | | | | | | 9795c401 (tag: V_9_3_P2) OpenSSH 9.3p2 bde3635f update version in README f673f2f3 update RPM spec versions d7790cdc disallow remote addition of FIDO/PKCS11 keys b23fe83f terminate pkcs11 process for bad libraries This includes the fix for CVE-2023-38408. (From OE-Core rev: b76fb3ee4b339cfbbb332ed239826b3efcdb6f1e) Signed-off-by: Ross Burton <ross.burton@arm.com> (cherry picked from commit 7ae89bdeaa97c8d6a0b63e92da31290548f03168) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* bind: upgrade 9.18.15 -> 9.18.16Archana Polampalli2023-08-1510-2/+2
| | | | | | | | | | | | | | | | | | Remove enable-epoll & disable-devpoll configure options no longer supported in bind-9.18.16 6b6076c882: Remove obsolete epoll/kqueue/devpoll configure options Security fixes: https://nvd.nist.gov/vuln/detail/CVE-2023-2828 https://nvd.nist.gov/vuln/detail/CVE-2023-2911 Changelog: https://github.com/isc-projects/bind9/blob/v9.18.16/CHANGES https://bind9.readthedocs.io/en/v9.18.16/notes.html#notes-for-bind-9-18-16 (From OE-Core rev: 95988d1cc871458b978fac08c0d72a978bec0490) Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* openssl: use a glob on the PERLEXTERNAL to track updates on the pathJose Quaresma2023-08-011-1/+1
| | | | | | | | | | | | | | The Text-Template was updated from 1.46 to 1.56 | ERROR: openssl-native-3.1.1-r0 do_configure: PERLEXTERNAL '/build/tmp/work/x86_64-linux/openssl-native/3.1.1-r0/openssl-3.1.1/external/perl/Text-Template-1.46/lib' not found! (From OE-Core rev: e50a2298b10107b8ee66b2efd52c9d51d7a99fa5) Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit b9a7739b01e31d0cc8358d99255e3e1b02a0a1a8) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* openssl: add PERLEXTERNAL path to test its existenceJose Quaresma2023-08-011-1/+3
| | | | | | | | | | | | | When upstream change is better to fail or removing the PERL5LIB if they are not need anymore. (From OE-Core rev: 2dda294698ea6bb797531cb4796af263fbf2f6be) Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 337ac1159644678508990927923ef8af30f34cd7) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* openssh: Remove BSD-4-clause contents completely from codebaseRiyaz Khan2023-06-302-0/+995
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Below upstream commit removed BSD-4-Clause from the LICENSE variable, Link: https://git.yoctoproject.org/poky/commit/?id=2c86f586d55d0f6b99053e3e4d14c9ee36fa8aa8 But actually if we check from the source code of the openssh for this version (8.9p1), there are some files (openbsd-compat/libressl-api-compat.c) still affected. As upstream removed this BSD-4-clause license, there are still some files has this license. Below file is affected by this BSD-4-clause contents when the below command is executed grep -rl "All advertising materials mentioning features or use of this software" *|grep -v \.1|grep -v \.5|grep -v \.8 | sort openbsd-compat/libressl-api-compat.c All advertising materials mentioning features or use of this software Reason for backporting is some of the product restrict the BSD-4-Clause usage and the purpose of this commit is to completely remove the BSD-4-Clause license from the openssh. When checked in the master branch, openssh upstream removes the bsd-4 license compeletely from this commit https://github.com/openssh/openssh-portable/commit/7280401bdd77ca54be6867a154cc01e0d72612e0 Hence Backport this commit completely to remove license of BSD-4-clause contents from code. Hunks are refreshed. (From OE-Core rev: 859f00732c3b123aa4adb911371f1d9cf02c85fb) Signed-off-by: Riyaz Khan <Riyaz.Khan@kpit.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> (cherry picked from commit d9045a7bc6d9acc137c292b60a8ce4d24f359a19) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* openssl: fix building on riscv32Dmitry Baryshkov2023-06-301-1/+1
| | | | | | | | | | | | | On riscv32 configurations OpenSSL fails to build with "undefined reference to `__atomic_foo'" kind of errors. Change OpenSSL recipe to use linux-latomic configuration instead of linux-generic32. (From OE-Core rev: 1add2c6c2a5009d6a73790e1334e7e113ac97f4d) Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit e8ce80fc6d6579554bca2eba057e65d4b12c0793) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* bind: upgrade 9.18.14 -> 9.18.15Wang Mingyu2023-06-2410-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========= [bug] Set the rndc idle read timeout back to 60 seconds, from the netmgr default of 30 seconds, in order to match the behavior of 9.16 and earlier. [GL #4046] [bug] Fix log file rotation when using absolute path as file. [GL #3991] [bug] When removing delegations in an OPTOUT range empty-non-terminal NSEC3 records generated by those delegations were not removed. [GL #4027] [bug] Reimplement the maximum and idle timeouts for incoming zone tranfers. [GL #4004] [bug] Treat ISC_R_INVALIDPROTO as a networking error in the dispatch code to avoid retrying with the same server. [GL #4005] [bug] In dispatch, honour the configured source-port selection when UDP connection fails with address in use error. Also treat ISC_R_NOPERM same as ISC_R_ADDRINUSE. [GL #3986] [test] As a workaround, include an OpenSSL header file before including cmocka.h in the unit tests, because OpenSSL 3.1.0 uses __attribute__(malloc), conflicting with a redefined malloc in cmocka.h. [GL #4000] (From OE-Core rev: b0e64d50c956d5eeb921c85818727261e04de899) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> (cherry picked from commit 9d5f8062fc2c11bd6ff98a96caa03aac3984ae9c) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* mobile-broadband-provider-info: upgrade 20221107 -> 20230416Wang Mingyu2023-06-241-2/+2
| | | | | | | | | (From OE-Core rev: 387a26b9bdd54aff6984d22693145eed0a71e932) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> (cherry picked from commit 125f72393c9b6fea02757cdc3a22696945e0f490) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* connman: fix warning by specifying runstatedir at configure timeMarc Ferland2023-06-211-0/+1
| | | | | | | | | | | | | | | | | | | Without this patch, systemd complains on startup with messages similar to: systemd-tmpfiles[128]: /etc/tmpfiles.d/connman_resolvconf.conf:1: Line references path below legacy directory /var/run/, updating /var/run/connman → /run/connman; please update the tmpfiles.d/ drop-in file accordingly. systemd-tmpfiles[172]: /etc/tmpfiles.d/connman_resolvconf.conf:1: Line references path below legacy directory /var/run/, updating /var/run/connman → /run/connman; please update the tmpfiles.d/ drop-in file accordingly. By default, connman will use "/var/run/connman" for runstatedir instead of the now recommended "/run/connman". (From OE-Core rev: 8ea652072f78cce76996ceefe3559a9c0fbc35c8) Signed-off-by: Marc Ferland <ferlandm@amotus.ca> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 8d17776765a99a4ae327797206ef2a8a735ce87b) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* inetutils: remove unused patch filesMartin Jansa2023-06-212-83/+0
| | | | | | | | | | | | * they were removed from SRC_URI in: https://git.openembedded.org/openembedded-core/commit/?id=a21e8fdf1b66961ddae5929d393daa08800bb748 (From OE-Core rev: de86594c102e04aa55208b39d63c0593ade14b7c) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit e2030f2a651920435787b4a580dd18894c1bc02c) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* openssl: upgrade 3.1.0 -> 3.1.1Tim Orling2023-06-213-236/+12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Drop CVE-2023-0464.patch (merged upstream). * Refresh 0001-Configure-do-not-tweak-mips-cflags.patch https://github.com/openssl/openssl/blob/openssl-3.1.1/NEWS.md Major changes between OpenSSL 3.1.0 and OpenSSL 3.1.1 [30 May 2023] * Mitigate for very slow OBJ_obj2txt() performance with gigantic OBJECT IDENTIFIER sub-identities. (CVE-2023-2650) * Fixed buffer overread in AES-XTS decryption on ARM 64 bit platforms (CVE-2023-1255) * Fixed documentation of X509_VERIFY_PARAM_add0_policy() (CVE-2023-0466) * Fixed handling of invalid certificate policies in leaf certificates (CVE-2023-0465) * Limited the number of nodes created in a policy tree (CVE-2023-0464) Security Advisory: https://www.openssl.org/news/secadv/20230530.txt CVE: CVE-2023-2650 CVE: CVE-2023-1255 CVE: CVE-2023-0466 CVE: CVE-2023-0465 CVE: CVE-2023-0464 (From OE-Core rev: 0b4cc6aa840aa52c3843c5292f15c028d0037bba) Signed-off-by: Tim Orling <tim.orling@konsulko.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 26ce9a5fd31c27812ce8784a398b600cc0e9aa80) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* bind: upgrade 9.18.13 -> 9.18.14Trevor Gamblin2023-06-2110-1/+1
| | | | | | | | | | | | Stable branch update (From OE-Core rev: 046e4dcebb7e098374f0d81db79bf247c81ec977) Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 43c97c6e64c554f41a3a45241a7547bce21533e7) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* meta: depend on autoconf-archive-native, not autoconf-archiveRoss Burton2023-06-141-1/+1
| | | | | | | | | | | | | | | | | | | autoconf-archive is a collection of m4 autoconf macros needed at build-time, and autoconf-archive-native is a suitable provider as there is nothing in the recipe that needs to be cross-compiled. Also if we use DEPENDS=autoconf-archive then the recipe's -dev package ends up RDEPENDing on autoconf-archive, which isn't correct. Universally change any DEPENDS on autoconf-archive to the -native form, and add any missing dependencies that were implicit before. (From OE-Core rev: be5534a8ca4a5ab7323039123e680ba1f6ede908) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> (cherry picked from commit 571132415ea7fe2d91c62948f2b6aa553eafa83d) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* avahi: fix D-Bus introspectionEero Aaltonen2023-06-141-2/+1
| | | | | | | | | | | Install and package the D-Bus introspection files. (From OE-Core rev: ec7ba3c31611ed9962b844256734a07ff4ca9152) Signed-off-by: Eero Aaltonen <eero.aaltonen@vaisala.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> (cherry picked from commit b8183ad25af3bcf23f04dd649b6ef665569fac8c) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* dhcpcd: use git instead of tarballsAlexander Kanavin2023-05-181-4/+3
| | | | | | | | | | | | | As announced here: https://roy.marples.name/downloads/dhcpcd/ (From OE-Core rev: 6578d20898f68c0cc88eda7e0f56e6f5a557f17e) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 6e317eaab45da2dea70d1485fdae93cfeea0db1d) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* recipes: Default to https git protocol where possibleRichard Purdie2023-05-181-1/+1
| | | | | | | | | | | | The recommendation from server maintainers is that the https protocol is both faster and more reliable than the dedicated git protocol at this point. Switch to it where possible. (From OE-Core rev: 8f3669f81db8a58f8ed2faef76acab3499f59619) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 139102a73d4151f4748b4a861bd4ab28dda7dab7) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* libpcap: upgrade 1.10.3 -> 1.10.4Wang Mingyu2023-05-101-1/+1
| | | | | | | | | | | | | | | | | | | | | | Summary for 1.10.4 libpcap release Source code: Fix spaces before tabs in indentation. rpcap: Fix name of launchd service. Documentation: Document use of rpcapd with systemd, launchd, inetd, and xinetd. Building and testing: Require at least pkg-config 0.17.0, as we use --static. Get rid of the remains of gnuc.h. Require at least autoconf 2.69. Update config.{guess,sub}, timestamps 2023-01-01,2023-01-21. (From OE-Core rev: cc7a3c6cb32b4a8d2677159cd106068b5f2d75e8) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> (cherry picked from commit da76bde131a7fe0833c9fd59a1ca48edaed6fa54) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* bind: upgrade 9.18.12 -> 9.18.13Wang Mingyu2023-05-1010-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========== [bug] Use two pairs of dns_db_t and dns_dbversion_t in a catalog zone structure to avoid a race between the dns__catz_update_cb() and dns_catz_dbupdate_callback() functions. [GL #3907] [bug] Make sure to revert the reconfigured zones to the previous version of the view, when the new view reconfiguration fails during the configuration of one of the configured zones. [GL #3911] [bug] Fix error path cleanup issues in dns_catz_new_zones() and dns_catz_new_zone() functions. [GL #3900] [bug] Unregister db update notify callback before detaching from the previous db inside the catz update notify callback. [GL #3777] [func Run the catalog zone update process on the offload threads. [GL #3881] [func Add shutdown signaling for catalog zones. [GL !7571] [func Add reference count tracing for dns_catz_zone_t and dns_catz_zones_t. [GL !7570] [bug] Detach 'rpzs' and 'catzs' from the previous view in configure_rpz() and configure_catz(), respectively, just after attaching it to the new view. [GL #3880] [test Don't test HMAC-MD5 when not supported by libcrypto. [GL #3871] [bug] Fix RPZ reference counting error on shutdown in dns__rpz_timer_cb(). [GL #3866] [test Test various 'islands of trust' configurations when using managed keys. [GL #3662] [bug] Building against (or running with) libuv versions 1.35.0 and 1.36.0 is now a fatal error. The rules for mixing and matching compile-time and run-time libuv versions have been tightened for libuv versions between 1.35.0 and 1.40.0. [GL #3840] [bug] dnssec-cds failed to cleanup properly. [GL #3831] [bug] Source ports configured for query-source, transfer-source, etc, were being ignored. (This feature is deprecated, but it is not yet removed, so the bug still needed fixing.) [GL #3790] (From OE-Core rev: 29010c32f0e0f00b31e32a7c275a532688ddaf9d) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> (cherry picked from commit 51ab191224aa1320d622bf79184940afa3910d60) Signed-off-by: Steve Sakoman <steve@sakoman.com>
* connman: backport fix for CVE-2023-28488Ross Burton2023-05-102-0/+64
| | | | | | | (From OE-Core rev: 6ae794bfd0db6028c79c36d2fef47471916b357c) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
* bind: don't package non-existant .la files into -staticdevRoss Burton2023-04-041-1/+0
| | | | | | | | | | If these files exist they should be packaged into PN-dev, and are with the default FILES:${PN}-dev. (From OE-Core rev: 738434bf567d25de692cd145156263eea1a5de13) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* avahi: add missing dependenciesPetr Kubizňák2023-04-031-1/+1
| | | | | | | | | | | | | When gobject-introspection feature is disabled, glib-2.0-native and gobject-introspection package dependencies are not pulled in but avahi has a hard dependency on them (do_configure fails due to missing introspection.m4 file, do_compile fails due to missing glib-mkenums). (From OE-Core rev: fea90325b180ba8d2b19704dc8911a9175527c61) Signed-off-by: Petr Kubizňák <kubiznak@2n.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh: upgrade 9.2p1 -> 9.3p1Siddharth Doshi2023-03-271-1/+1
| | | | | | | | | | | | | | | OpenSSH 9.3p1 fixes 1 HIGH level security vulnerability. Upgrade the recipe to point to 9.3p1. CVEs Fixed: 1) CVE-2023-28531 - ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints. (From OE-Core rev: ca4b4165f388a8b8bb80c120a2baef00e7e3bcac) Signed-off-by: Siddharth Doshi <sdoshi@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* OpenSSL: Security fix for CVE-2023-0464Siddharth Doshi2023-03-262-0/+227
| | | | | | | | | Upstream-Status: Backport from [https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545] (From OE-Core rev: 20ae485ef65bef2ddbffe05fd29cc7d411c38448) Signed-off-by: Siddharth Doshi <sdoshi@mvista.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssl: Fix reproducibility issueRichard Purdie2023-03-162-0/+23
| | | | | | | | | | | Fix an issue introduced in the new openssl version where an assembler file isn't generated in a reproducible way by seeding the perl random number generator consistently. It has no crypto impact, it is just used to avoid function name clashes. (From OE-Core rev: 448df3e1c02fe224d62f59a236fdcd47ea7e695f) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssl: update from 3.0.8 to 3.1.0Randy MacLeod2023-03-162-33/+1
| | | | | | | | | | | | | | | | | | | | >From the NEWS.md file: ### Major changes between OpenSSL 3.0 and OpenSSL 3.1.0 [14 Mar 2023] * SSL 3, TLS 1.0, TLS 1.1, and DTLS 1.0 only work at security level 0. * Performance enhancements and new platform support including new assembler code algorithm implementations. * Deprecated LHASH statistics functions. * FIPS 140-3 compliance changes. Drop the upstreamed afalg.patch: c425e365f4 Configure: don't try to be clever when configuring afalgeng (From OE-Core rev: 71c763ed4fbbea22a6a0b145e4e29436c7e59625) Signed-off-by: Randy MacLeod <randy.macleod@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssl: Add missing ptest dependency on openssl-binRichard Purdie2023-03-121-1/+1
| | | | | | | | | One of the openssl ptests needs the openssl binary so fails on a minimal image without this. Add the missing dependency. (From OE-Core rev: c29276b467ae10027f38cb403a2089b3558fc639) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* dhcpcd: Fix install conflict when enable multilib.Wang Mingyu2023-03-112-0/+47
| | | | | | | | | | | | | | | | | | | | | | Error: Transaction test error: file /usr/share/man/man8/dhcpcd.8 conflicts between attempted installs of dhcpcd-doc-9.4.1-r0.cortexa57 and lib32-dhcpcd-doc-9.4.1-r0.armv7ahf_neon The differences between the two files are as follows: @@ -821,7 +821,7 @@ If you always use the same options, put them here. .It Pa /usr/libexec/dhcpcd-run-hooks Bourne shell script that is run to configure or de-configure an interface. -.It Pa /usr/lib64/dhcpcd/dev +.It Pa /usr/lib/dhcpcd/dev Linux .Pa /dev management modules. (From OE-Core rev: 65ca2c4b7349a4f7dcfcc580d926a99c673deb60) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bind: upgrade 9.18.11 -> 9.18.12Alexander Kanavin2023-03-1110-1/+1
| | | | | | | | (From OE-Core rev: 67734f7574877ca6e0ec06596ff1a48303df0764) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* iproute2: upgrade 6.1.0 -> 6.2.0Alexander Kanavin2023-03-111-2/+2
| | | | | | | | | | License-Update: copyright snippet has been dropped from ip.c (From OE-Core rev: d709e2d4c5d8768b3160d63aec207fe3e2a4066d) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bluez5: refresh patches with devtoolJose Quaresma2023-02-242-12/+8
| | | | | | | | (From OE-Core rev: 665c5f217370cf28f18e818b81af07494b7acb2d) Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssl: Upgrade 3.0.7 -> 3.0.8Siddharth Doshi2023-02-202-45/+1
| | | | | | | | | | | | | | | | | | | | OpenSSL 3.0.8 fixes 1 HIGH level security vulnerability and 7 MODERATE level security vulnerability [1]. Upgrade the recipe to point to 3.0.8. CVE-2022-3996 is reported fixed in 3.0.8, so drop the patch for that as well. [1] https://www.openssl.org/news/vulnerabilities.html CVEs Fixed: https://www.openssl.org/news/secadv/20230207.txt (From OE-Core rev: 8461466f63200a0b1c9c247b70fdf5819651544c) Signed-off-by: Siddharth Doshi <sdoshi@mvista.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* dhcpcd: fix dhcpcd start failure on qemuppc64Xiangyu Chen2023-02-152-0/+35
| | | | | | | | | | Backport patch to fix dhcpcd start failed on qemuppc64. (From OE-Core rev: a31d658198566de12cdd1aad18776b8da8065787) Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh: upgrade 9.1p1 -> 9.2p1Wang Mingyu2023-02-151-1/+1
| | | | | | | | (From OE-Core rev: 845334cb22708e7a88701aa0a1bc496a67f2b5d5) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bind: upgrade 9.18.10 -> 9.18.11Alexander Kanavin2023-02-0910-2/+2
| | | | | | | | | | License-update: copyright years (From OE-Core rev: 63e8a8952c3d1b3b5c481be6bba52a3f4d65648e) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssl: fix CVE-2022-3996 double locking leads to denial of serviceVivek Kumbhar2023-02-012-0/+44
| | | | | | | (From OE-Core rev: c20b7b864dc6726a2ed4a40cf5a30661ad28c6e0) Signed-off-by: Vivek Kumbhar <vkumbhar@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ppp: backport fix for CVE-2022-4603Ross Burton2023-01-242-0/+49
| | | | | | | | (From OE-Core rev: d5d787b44b102e3a69e28948326e39f83fc1d98d) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libpcap: upgrade 1.10.2 -> 1.10.3Wang Mingyu2023-01-161-1/+1
| | | | | | | | | | | | | | | | | | | | Changelog: ============ Source code: Sort the PUBHDR variable in Makefile.in in "ls" order. Fix typo in comment in pflog.h. Remove two no-longer-present files from .gitignore. Update code and comments for handling failure to set promiscuous mode based on new information. Building and testing: install: Fixed not to install the non-public pcap-util.h header. pcap-config: add a --version flag. Makefile.in: Add some missing files in the distclean target. (From OE-Core rev: 5b651a929223d1965136bd97c22b89ca86b5b9c5) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2026-08-15 01:37:50 +0000