openembedded-core.git/meta/recipes-connectivity, branch uninative-1.4

wpa_supplicant: Security Advisory-CVE-2016-4477

2016-09-23T13:55:25+00:00

Add CVE-2016-4477 patch for avoiding \n and \r characters in passphrase
parameters, which allows remote attackers to cause a denial of service
(daemon outage) via a crafted WPS operation.
Patches came from http://w1.fi/security/2016-1/

Signed-off-by: Zhixiong Chi 
Signed-off-by: Ross Burton

wpa_supplicant: Security Advisory-CVE-2016-4476

2016-09-23T13:55:24+00:00

Add CVE-2016-4476 patch for avoiding \n and \r characters in passphrase
parameters, which allows remote attackers to cause a denial of service
(daemon outage) via a crafted WPS operation.
Patches came from http://w1.fi/security/2016-1/

Signed-off-by: Zhixiong Chi 
Signed-off-by: Ross Burton

openssl: fix do_configure error when cwd is not in @INC

2016-09-20T14:10:37+00:00

Fixed when building on Debian-testing:
| Can't locate find.pl in @INC (@INC contains: /etc/perl /usr/local/lib/x86_64-linux-gnu/perl/5.22.2 /usr/local/share/perl/5.22.2 /usr/lib/x86_64-linux-gnu/perl5/5.22 /usr/share/perl5 /usr/lib/x86_64-linux-gnu/perl/5.22 /usr/share/perl/5.22 /usr/local/lib/site_perl /usr/lib/x86_64-linux-gnu/perl-base) at perlpath.pl line 7.

Signed-off-by: Robert Yang 
Signed-off-by: Ross Burton

openssh: fix potential signed overflow to enable compilation with -ftrapv

2016-09-20T14:10:36+00:00

Pointer arithmatic results in implementation defined signed integer
type, so that 's - src' in strlcpy and others may trigger signed overflow.
In case of compilation by gcc or clang with -ftrapv option, the overflow
would lead to program abort.

Upstream-status: Submitted [https://bugzilla.mindrot.org/show_bug.cgi?id=2608]

Signed-off-by: Yuanjie Huang 
Signed-off-by: Ross Burton

openssl: Fix MIPS64be and add MIPS64le

2016-09-15T21:56:37+00:00

MIPS64 target was being configured for linux-mips which defaults to
MIPS32. Doesn't cause any issue as far as I can see but it would be
wiser to use the correct target configuration.

Also add MIPS64le configuration which is missing.

Signed-off-by: Zubair Lutfullah Kakakhel 
Signed-off-by: Richard Purdie

ofono: RRECOMMENDS tun.ko & APN database

2016-09-05T10:55:51+00:00

- kernel-module-tun is needed so that ofono can create the
  ppp network interface

- mobile-broadband-provider-info is needed as an explicit
  dependency even though it is in DEPENDS, because it's
  just an xml database, and the DEPENDS simply allows
  ofono to figure out its location in the file system
  (using pkg-config during configure). But there is no
  shared library dependency or so for bitbake to figure
  out this runtime dependency.
  We make it a recommendation only, so that it can still
  be removed from filesystem images in case people build
  images that don't need the provider database (and e.g.
  hard-code APNs for specific use-cases)

Signed-off-by: André Draszik 
Signed-off-by: Richard Purdie

nfs-utils: control ipv6 support based on DISTRO_FEATURES

2016-09-03T22:45:44+00:00

Add PACKAGECONFIG for ipv6 and control it based
on DISTRO_FEATURES.

Signed-off-by: Jackie Huang 
Signed-off-by: Richard Purdie

libpcap: control ipv6 support based on DISTRO_FEATURES

2016-09-03T22:45:44+00:00

Add PACKAGECONFIG for ipv6 and control it based
on DISTRO_FEATURES.

Signed-off-by: Jackie Huang 
Signed-off-by: Richard Purdie

openssh: Upgrade 7.2p2 -> 7.3p1

2016-08-23T16:44:18+00:00

Remove CVE-2015-8325.patch as it's included upstream. Rebase another
patch.

Signed-off-by: Jussi Kukkonen 
Signed-off-by: Ross Burton

openssl: fix add missing dependencies building for test directory

2016-08-20T15:05:28+00:00

Regarding the last commit about missing dependencies, another issue
was found. The problem was found, while ptest has been built with some
set extra settings. It means, when ptest is going to be built,
it is necessary to rebuild dependencies for test directory too.

Signed-off-by: Andrej Valek 
Signed-off-by: Pascal Bach 
Signed-off-by: Richard Purdie