helium-3rd-party/poky
1
0
Fork 0
mirror of git://git.yoctoproject.org/poky synced 2026-09-17 00:34:20 +00:00
Code Issues Packages Projects Releases Wiki Activity
poky/meta/recipes-connectivity
History
Archana Polampalli e01d123ba1 openssh: fix CVE-2023-38408 
The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an
insufficiently trustworthy search path, leading to remote code
execution if an agent is forwarded to an attacker-controlled system.
(Code in /usr/lib is not necessarily safe for loading into ssh-agent.)
NOTE: this issue exists because of an incomplete fix for CVE-2016-10009.

References:
https://nvd.nist.gov/vuln/detail/CVE-2023-38408

Upstream patches:
892506b136
1f2731f5d7
29ef8a0486
099cdf59ce

(From OE-Core rev: 3c01159ab6a843fc922cf779b022c965d4ecd453)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-08-02 04:47:13 -10:00
..
avahi
avahi: fix D-Bus introspection
2023-05-30 04:11:15 -10:00
bind
bind : fix CVE-2023-2828 & CVE-2023-2911
2023-07-21 06:27:34 -10:00
bluez5
bluez5: Point hciattach bcm43xx firmware search path to /lib/firmware
2022-11-24 15:30:01 +00:00
connman
connman: fix warning by specifying runstatedir at configure time
2023-07-01 08:37:25 -10:00
dhcpcd
dhcpcd: use git instead of tarballs
2023-05-30 04:11:15 -10:00
inetutils
inetutils: fix CVE-2022-39028 - remote DoS vulnerability in inetutils-telnetd
2022-09-28 08:02:10 +01:00
iproute2
iproute2: upgrade 5.16.0 -> 5.17.0
2022-03-29 15:59:29 +01:00
iw
iw: upgrade 5.9 -> 5.16
2021-11-10 19:27:28 +00:00
kea
kea: submit patch upstream
2022-11-24 15:30:01 +00:00
libnss-mdns
meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers
2022-02-20 16:45:25 +00:00
libpcap
libpcap: Disable DPDK explicitly
2022-02-12 17:05:35 +00:00
libuv
libuv: fixup SRC_URI
2022-11-24 15:30:01 +00:00
mobile-broadband-provider-info
mobile-broadband-provider-info: upgrade 20221107 -> 20230416
2023-07-01 08:37:24 -10:00
neard
neard: Switch SRC_URI to git repo
2022-05-04 13:07:34 +01:00
nfs-utils
meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers
2022-02-20 16:45:25 +00:00
ofono
meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers
2022-02-20 16:45:25 +00:00
openssh
openssh: fix CVE-2023-38408
2023-08-02 04:47:13 -10:00
openssl
openssl: Upgrade 3.0.8 -> 3.0.9
2023-06-14 04:16:59 -10:00
ppp
ppp: backport fix for CVE-2022-4603
2023-02-04 23:32:20 +00:00
ppp-dialin
Convert to new override syntax
2021-08-02 15:44:10 +01:00
resolvconf
resolvconf: make it work
2022-12-07 15:02:45 +00:00
socat
socat: upgrade 1.7.4.3 -> 1.7.4.4
2022-11-24 15:30:00 +00:00
ssh-pregen-hostkeys
ssh-pregen-hostkeys: Add a recipe with pregenerated ssh host keys
2020-09-23 20:54:04 +01:00
wpa-supplicant
wpa-supplicant: update 2.9 -> 2.10
2022-02-01 07:31:18 +00:00