openembedded-core.git/meta/recipes-connectivity, branch uninative-1.0

connman: update to version 1.32

2016-05-14T06:26:40+00:00

Removed following upstreamed/backported patches:
        a) 0001-Detect-backtrace-API-availability-before-using-it.patch
        b) 0001-iptables-Add-missing-function-item-of-xtables-to-mat.patch

Rearranged musl related patches.

Signed-off-by: Maxin B. John 
Signed-off-by: Richard Purdie

openssl: Security fix via update to 1.0.2h

2016-05-09T07:03:57+00:00

CVE-2016-2105
CVE-2016-2106
CVE-2016-2109
CVE-2016-2176

https://www.openssl.org/news/secadv/20160503.txt

fixup openssl-avoid-NULL-pointer-dereference-in-EVP_DigestInit_ex.patch

drop crypto_use_bigint_in_x86-64_perl.patch as that fix is in latest.

Signed-off-by: Armin Kuster 
Signed-off-by: Ross Burton

iproute2: upgrade to version 4.5.0

2016-05-09T07:03:56+00:00

4.4.0 -> 4.5.0

Refreshed iproute2 musl build fix patch for 4.5.0
Remove backported patch:
        iproute2-fix-building-with-musl.patch

Signed-off-by: Maxin B. John 
Signed-off-by: Ross Burton

bluez5: upgrade to 5.39

2016-05-09T07:03:55+00:00

5.37 -> 5.39

Signed-off-by: Maxin B. John 
Signed-off-by: Ross Burton

bluez5: enable out-of-tree builds

2016-04-29T06:53:58+00:00

A patch is needed to fix a race in out-of-tree builds, and the install-ptest
logic can be simplified.

Signed-off-by: Ross Burton

openssh: Security Fix CVE-2016-3115

2016-04-29T06:36:30+00:00

opehssh <= 7.2

Signed-off-by: Armin Kuster 
Signed-off-by: Richard Purdie

connman-gnome: Depend on dbus-glib-native

2016-04-29T06:34:10+00:00

This is required for dbus-binding-tool.

Signed-off-by: Jussi Kukkonen 
Signed-off-by: Ross Burton

dhcp: CVE-2016-2774

2016-04-18T15:27:45+00:00

ISC DHCP 4.1.x before 4.1-ESV-R13 and 4.2.x and 4.3.x before
4.3.4 does not restrict the number of concurrent TCP sessions,
which allows remote attackers to cause a denial of service
(INSIST assertion failure or request-processing outage)
by establishing many sessions.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2774

Signed-off-by: Catalin Enache 
Signed-off-by: Ross Burton

bind: CVE-2016-2088

2016-04-18T15:27:45+00:00

Duplicate EDNS COOKIE options in a response could trigger an
assertion failure: Fix with a backport.

bind as built with the oe-core recipe is not at risk: Only servers
which are built with DNS cookie support (--enable-sit) are vulnerable
to denial of service.

Fixes [YOCTO #9438]

Signed-off-by: Jussi Kukkonen 
Signed-off-by: Ross Burton

dhcp: Enable update-rc.d service

2016-04-15T05:57:48+00:00

do_install_append function installs init scripts but to enable this
service we need to inherit update-rc.d class and set INITSCRIPT name
and params.

Signed-off-by: Fabio Berton 
Signed-off-by: Richard Purdie