Rather than using the RPROVIDES on libnss-mdns which comes from
avahi-libnss-mdns, RRECOMMENDS avahi-libnss-mdns directly to avoid
picking any other version.
(From OE-Core rev: 61f44f8b817738c0e220b3d461952816ef7f1449)
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta-networking has Apple's mDNSResponder which also delivers libnss-mdns
nsswitch plugin. Rename this recipe to avahi-libss-mdns and add an RPROVIDE so
that either than be chosen.
(From OE-Core rev: f9d10d6ac4b2a081d110ab58e7137aedddd960cb)
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Recipes are much more readable with whitespace around the assignment operators.
Fix various assignments in OE-Core to show this is definitely the preferred
formatting.
(From OE-Core rev: 30ea609d3357fb3de911f2f6a5e6856c151b976a)
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
oFono CUSD Stack-based Buffer Overflow Code Execution Vulnerability.
This vulnerability allows local attackers to execute arbitrary code
on affected installations of oFono. An attacker must first obtain
the ability to execute code on the target modem in order to exploit
this vulnerability.
The specific flaw exists within the parsing of responses from AT+CUSD
commands. The issue results from the lack of proper validation of the
length of user-supplied data prior to copying it to a stack-based buffer.
An attacker can leverage this vulnerability to execute code in the
context of root. Was ZDI-CAN-23195.
Reference:
https://security-tracker.debian.org/tracker/CVE-2024-7539
Upstream patch:
https://git.kernel.org/pub/scm/network/ofono/ofono.git/commit/?id=389e2344f86319265fb72ae590b470716e038fdc
(From OE-Core rev: 55aea716ca4665cf45579247dd5feec5668dd94f)
Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Since 3.0.0 openssl no longer uses characters in version suffix.
(From OE-Core rev: 80151340b0b20610030f3026e9fc71ef5970c2c5)
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Backport a kea patch to address 1.87.0 compatibility.
(From OE-Core rev: ac328183d4592ad146c41e48c2c92d1dbb53a894)
Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
License-Update: BSD items clarified to be 2-clause:
d4ec06ec58
passprompt plugin removed upstream.
Add an enable a multilink option, as the build breaks without it at the linking
step (upstream presumably didn't test that it works): https://github.com/ppp-project/ppp/issues/541
(From OE-Core rev: e6ea3ade8f3977ec93c68229d2660bbc335a80a6)
Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Whilst our default toolchain has modern kernel headers (6.12, at time of
writing), some external toolchains may use old kernel headers.
As ofono's rmnet module uses kernel defines which were added in 5.14,
add some compatibility defines in case they are not set.
(From OE-Core rev: 0313ea48a75480c2bcc6d35035f74a4dcf22f263)
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Changelog:
===========
- Fix issue with STK and buffer length checks.
- Fix issue with SMS and buffer length checks.
- Fix issue with QMI and handling RAT detection.
- Fix issue with QMI and handling call forwarding.
- Add support for handling MHI network interfaces.
(From OE-Core rev: e57e032bd504d2bc2cb1dbb6ed0182acea39e36a)
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
__NR_riscv_hwprobe is not exported in musl's hwprobe.h
this fails to build with newer kernels
Fixes
| :85:20: error: use of undeclared identifier '__NR_riscv_hwprobe'; did you mean 'riscv_hwprobe'?
| 85 | return syscall(__NR_riscv_hwprobe, pairs, pair_count, cpu_count, cpus, flags);
| | ^~~~~~~~~~~~~~~~~~
(From OE-Core rev: 5271f24643c303d0e6d3d9c12c722f5d818252fe)
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
If the users specifically asks for inetutils-hostname, it's likely they
want it to take precedence over busybox' implementation. Increase the
alternative priority for this package's version.
(From OE-Core rev: 36f718a8cd04d1098eca06fed1e83a0e6f43ab64)
Signed-off-by: Bartosz Golaszewski <bartosz.golaszewski@linaro.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Changelog:
==========
- Add support for handling QMI PIN and Lock methods.
- Add support for handling QMI WWAN interfaces.
- Add support for handling RMNet interfaces.
(From OE-Core rev: 212c449f369c8e640d637566a4a236c2f8df52a5)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
The script does not work if the connman service is already stopped.
The start-stop-daemon checks for the existence of a specified process.
If such a process exists, start-stop-daemon sends it the signal specified
by --signal, and exits with error status 0. If such a process does
not exist, start-stop-daemon exits with error status 1 (0 if --oknodo is specified).
The script uses set -e so we need to add --oknodo option to stop
(From OE-Core rev: b1c1b67166049181136d5eb68740f3bf98bf670d)
Signed-off-by: Michael Trimarchi <michael@amarulasolutions.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Dropped two patches which are now merged upstream.
Added one new patch to resolve a build error when using musl.
Changelog
* Fix issue with handling address type while pairing.
* Add support for allowing to set A2DP transport delay.
* Add support for persistent userspace HID operation.
* Add support for handling syncing to multiple BISes.
(From OE-Core rev: 52d4168f66dd3c4d68e63c8ee17d186b4bdd0e55)
Signed-off-by: Guðni Már Gilbert <gudni.m.g@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Explicitly enable pam support, otherwise it goes into
detection mode and ends up poking at build host
Turn openssl into packageconfig as well
cc1: warning: include location "/usr/include" is unsafe for cross-compilation [-Wpoison-system-directories]
conftest.c: In function 'main':
conftest.c:68:1: warning: argument 1 null where non-null expected [-Wnonnull]
68 | pam_authenticate(NULL, 0);
| ^~~~~~~~~~~~~~~~
In file included from conftest.c:63:
/usr/include/security/pam_appl.h:38:1: note: in a call to function 'pam_authenticate' declared 'nonnull'
38 | pam_authenticate(pam_handle_t *pamh, int flags);
| ^~~~~~~~~~~~~~~~
(From OE-Core rev: 9b0c69a0bac18627cc6190f64bf9cabc518e4777)
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Changelog:
==========
* win,fs: remove trailing slash in junctions
* Revert "linux: eliminate a read on eventfd per wakeup"
* win: Fix linked list logic in getaddrinfo
* win: fix compilation against Windows 24H2 SDK
* win: remap ERROR_NOACCESS and ERROR_BUFFER_OVERFLOW
* win,fs: match trailing slash presence in junctions to user input
* build: add darwin-syscalls.h to release tarball
* linux: use IORING_SETUP_NO_SQARRAY when available
* linux: use IORING_OP_FTRUNCATE when available
* win: fix pNtQueryDirectoryFile check
* win: fix WriteFile() error translation
* win,fs: uv_fs_rmdir() to return ENOENT on file
* win,pipe: ipc code does not support async read
* netbsd: fix build
* win,fs: fix bug in fs__readdir
* unix: workaround gcc bug on armv7
* unix: work around arm-linux-gnueabihf-gcc bug
* unix: fix uv_tcp_keepalive in smartOS
* unix: fix uv_getrusage ru_maxrss on solaris
(From OE-Core rev: a5a347efe3d557033f87b9978999a2b704c02fc1)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
The license on chat.c was clarified to MIT with a license identifier
so add to LICENSE as such. The ccp.c change was an email address.
(From OE-Core rev: 980c5c8b8b4354c0caa4f41f701eb3005d6c8e3f)
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This is regular release of iproute2 corresponding to the 6.11 kernel.
Most of the changes are to the man pages.
Release is smaller than usual less activity during summer vacations
The two musl build fixes have been backported from upstream.
(From OE-Core rev: 1d826f145d0704f6981f6cccb5754fc41f2f2e33)
Signed-off-by: Changhyeok Bae <changhyeok.bae@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Sometimes default permissions on filesystems can be more permissive
e.g. 0644, this can make the private key file created here to inherit
those permissions and these permissions can then cause ssh server to
not allow ssh connections due to non-secure permissions on file.
Reported-by: Jean-Michel Papy <jean-michel.papy@exail.com>
(From OE-Core rev: 5c9f456cc39ca25123249ecb32b311736bd4e1f8)
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Jörg Sommer <joerg.sommer@navimatix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Changes since version 1.48.0:
==============================
* test: fix -Wpointer-to-int-cast on 32 bits systems
* build: add alias for libuv to CMakeLists.txt
* linux: create io_uring sqpoll ring lazily
* misc: run sample CI when code changes
* linux: fix uv_available_parallelism using cgroup
* doc: fix tty example segfault
* udp,unix: fix sendmsg use-after-free
* cygwin: implement uv_resident_set_memory
* win: almost fix race detecting ESRCH in uv_kill
* test: disable env var test under win32+asan
* unix,fs: fix realpath calls that use the system allocator
* linux: fix /proc/self/stat executable name parsing
* test,ci: fix [AM]San, disable ASLR
* win: remove _alloca usage
* unix: reinstate preadv/pwritev fallback code
* linux: don't delay EPOLL_CTL_DEL operations
* doc: fix typos in ChangeLog
* unix,win: error on zero delay tcp keepalive
* win: simplify uv_once implementation
* doc: correct udp socket options documentation
* linux: don't use sendmmsg() for single datagrams
* unix: fix fd leaks in SCM_RIGHTS error path
* win: robustify uv_os_getenv() error checking
* test: use newer ASSERT_MEM_EQ macro
* unix: de-duplicate conditions for using kqueue
* darwin: simplify uv_hrtime
* mailmap: update saghul's main email address
* win: remove no longer needed define
* doc: fix some typos
* linux,darwin: make `uv_fs_copyfile` behaves like `cp -r`
* dragonfly: disable SO_REUSEPORT for UDP socket bindings
* test: remove the obsolete HAVE_KQUEUE macro
* unix: use the presence of SOCK_* instead of OS macros for socketpair
* bsd: support pipe2() on *BSD
* unix: support SO_REUSEPORT with load balancing for TCP
* doc: add entries for extended getpw
* test: fix the flaky test-tcp-reuseport
* aix,ibmi: fix compilation errors in fs_copyfile
* unix: support SO_REUSEPORT with load balancing for UDP
* tcpkeepalive: distinguish OS versions and use proper time units
* win: map ERROR_BAD_EXE_FORMAT to UV_EFTYPE
* doc: add instruction how to install with Conan
* unix,win: remove unused req parameter from macros
* build: fix android ci build
* unix,win: export wtf8 functions properly
* hurd: add includes and macro prerequisites
* hurd: stub uv_thread_setpriority()
* ci: use macOS 12 for macOS and iOS builds
* darwin: fix crash on iOS(arm64)
* Create dependabot.yml for updating github-actions
* doc: correct names of Win32 APIs in fs.rst
* ci: bump upload and download-artifact versions
* ci: bump actions/setup-python from 4 to 5
* ci: bump KyleMayes/install-llvm-action from 1 to 2
* win,error: remap ERROR_NO_DATA to EAGAIN
* test: handle zero-length udp datagram
* misc: remove splay trees macros
* test,openbsd: remove superfluous ifdef guard
* win,fs: use posix delete semantics, if supported
* win: fix env var in uv_os_homedir and uv_os_tmpdir
* fsevents: detect watched directory removal
* ci: bump actions/checkout to 4
* linux: eliminate a read on eventfd per wakeup
* test: pipe_overlong_path handle ENAMETOOLONG
* win,fs: use the new Windows fast stat API
* win,pipe: fix race with concurrent readers
* win,signal: fix data race dispatching SIGWINCH
* build: ubsan fixes
* linux: disable SQPOLL io_uring by default
* win: fix fs.c ubsan failure
* test: rmdir can return `EEXIST` or `ENOTEMPTY`
* test: check for `UV_CHANGE` or `UV_RENAME` event
* unix,fs: silence -Wunused-result warning
* linux: support abstract unix socket autobinding
* kqueue: use EVFILT_USER for async if available
* win: remove deprecated GetVersionExW call
* doc: document uv_loop_option
* doc: fix the `uv_*_set_data` series of functions
* doc: properly label enumerations and types
* doc: document specific macOS fs_event behavior
* win,pipe: restore fallback handling for blocking pipes
* unix,win: remove unused rb-tree macro parameters
* win: compute parallelism from process cpu affinity
* win: use NtQueryInformationProcess in uv_os_getppid
* win,pipe: fix missing assignment to success
* win: fix uv_available_parallelism on win32
* win,pipe: fix another missing assignment to success
* kqueue: disallow ill-suited file descriptor kinds
* unix: restore tty attributes on handle close
* test: delete test with invalid assumption
* dragonflybsd: fix compilation failure
* test: run android tests on ci
* darwin: add udp mmsg support
* unix: work around arm-linux-gnueabihf-gcc bug
* unix: expand uv_available_parallelism() to support more platforms
* doc: add known issue in armv7
(From OE-Core rev: 5ba5cee38a6fb792eb85bc479e0af80f81aa0a9a)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
NVD CVE report [1] links Ubuntu bug [2] which has a very good
description/discussion about this issue.
It applies only to distros patching wpa-supplicant to allow non-root
users (e.g. via netdev group) to load modules.
This is not the case of Yocto.
Quote:
So upstream isn't vulnerable as they only expose the dbus interface to
root. Downstreams like Ubuntu and Chromium added a patch that grants
access to the netdev group. The patch is the problem, not the upstream
code IMHO.
There is also a commit [3] associated with this CVE, however that only
provides build-time configuration to limit paths which can be accessed
but it acts only as a mitigation for distros which allow non-root users
to load crafted modules.
The patch is included in version 2.11, however NVD has this CVE
version-less, so explicit ignore is necessary.
[1] https://nvd.nist.gov/vuln/detail/CVE-2024-5290
[2] https://bugs.launchpad.net/ubuntu/+source/wpa/+bug/2067613
[3] https://w1.fi/cgit/hostap/commit/?id=c84388ee4c66bcd310db57489eac4a75fc600747
(From OE-Core rev: 6cb794d44a8624784ec0f76dca764616d81ffbf5)
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
License-Update:
include openbsd-compat/base64.c license in LICENSE
0001-Cast-to-sockaddr-in-systemd-interface.patch
removed since it's included in 9.9p1
Changelog:
http://www.openssh.com/releasenotes.html
(From OE-Core rev: 26fb4541ffb471fc5a2e2d1ad4c2f3534890fed7)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* Remove 0001-tools-locktest-Use-intmax_t-to-print-off_t.patch, upstream has
fixed it with %lld.
* Remove 0001-reexport.h-Include-unistd.h-to-compile-with-musl.patch, it builds well
with musl without this patch.
* Add libxml2 to DEPENDS to fix:
configure: error: libxml2 not found.
* Add the following 2 patches to fix build errors with musl:
0001-support-include-junction.h-Define-macros-for-musl.patch
0001-support-junction-path.c-Fix-buld-for-musl.patch
(From OE-Core rev: 5e79a26b4188f562fe349ccb4523f60ad6f9c2a0)
Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
When mesh is enabled on musl the build fails with conflicting basename
calls.
(From OE-Core rev: 2db90c6508e350d35782db973291bbf5ffdfd3a5)
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Changlog:
- Fix issue with device creation when using LTE.
- Fix issue with regulatory domain when powering up.
- Fix issue with resolving ISO3166 code from timezone data.
- Fix issue with handling DNS proxy zero termination of buffers.
- Fix issue with handling DHCP packet length in L3 mode.
- Fix issue with handling DHCP upper length checks.
- Fix issue with handling IPv6 and URL parsing.
- Fix issue with handling online check updates.
- Fix issue with handling proxy method and WISPr.
- Fix issue with handling default gateway setup.
- Add support for low-priority default routes.
(From OE-Core rev: 467d28f5d243d821722cf8dcdbb9675a2820cd4f)
Signed-off-by: Changhyeok Bae <changhyeok.bae@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
When using Arm binary toolchain, version 2.11 of wpa-supplicant is
failing to compile with the following error:
| ../src/drivers/driver_macsec_linux.c:81:29: error: field ‘offload’ has incomplete type
| 81 | enum macsec_offload offload;
| |
Backport a recent patch that corrects the issue by adding a check for
the version of kernel headers being used in compilation and disabling
that enum if too old a version is being used (or is used by the
binary toolchain).
(From OE-Core rev: 373d8d4f5316416d70eb2c0733d9838e57419ac3)
Signed-off-by: Jon Mason <jdmason@kudzu.us>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
The solution to the problem upstream was fixed by the following commit:
ca6546fe52
Now MAX_INPUT is defined for non-glibc systems such as musl.
This fix was added in BlueZ 5.67.
(From OE-Core rev: fea1bb917ebb1f99c83dbbc87a6f0ffc3627879a)
Signed-off-by: Guðni Már Gilbert <gudni.m.g@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
------C65ED3E1A5DE826CA595746785F6AF6F
To: openembedded-core@lists.openembedded.org
CC: Alban Bedel <alban.bedel@aerq.com>
Subject: [PATCH] bind: Fix build with the `httpstats` package config enabled
Date: Wed, 11 Sep 2024 08:26:47 +0200
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain
MIME-Version: 1.0
When the `httpstats` package config is enabled configure fails with
the error:
> configure: error: Specifying libxml2 installation path is not
> supported, adjust PKG_CONFIG_PATH instead
Drop the explicit path from `--with-libxml2` to solve this issue.
(From OE-Core rev: 9b076fa51f5e6fd685066fb817c47239960778e6)
Signed-off-by: Alban Bedel <alban.bedel@aerq.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* Fix issue with handling notification of scanned BISes to BASS
* Fix issue with handling checking BIS caps against peer caps.
* Fix issue with handling MGMT Set Device Flags overwrites.
* Fix issue with handling ASE notification order.
* Fix issue with handling BIG Info report events.
* Fix issue with handling PACS Server role.
* Fix issue with registering UHID_START multiple times.
* Fix issue with pairing method not setting auto-connect.
(From OE-Core rev: 77aa3ecaf6ad7fe777a10655542349a1489b7ad3)
Signed-off-by: Guðni Már Gilbert <gudni.m.g@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This will fix build with libc++ from llvm 19.x
(From OE-Core rev: e3f74aaf3e8bdc6566c6b881e71cfdd3e4eb2c3f)
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
