Peter Marko
104fe45d36
inetutils: patch CVE-2026-28372
...
Pick patch according to [1] (equivalent to patch from [2]).
This CVE is needed if util-linux >= 2.40 is used which is not the case
in Yocto kirkstone, however it's always possible that users update
packages in their layers.
[1] https://security-tracker.debian.org/tracker/CVE-2026-28372
[2] https://nvd.nist.gov/vuln/detail/CVE-2026-28372
(From OE-Core rev: 46bceb9c66068f6aa9489ef6a7f1a8eafca690a9)
Signed-off-by: Peter Marko <peter.marko@siemens.com >
Signed-off-by: Fabien Thomas <fabien.thomas@smile.fr >
Signed-off-by: Yoann Congal <yoann.congal@smile.fr >
Signed-off-by: Paul Barker <paul@pbarker.dev >
2026-03-20 09:55:32 +00:00
Peter Marko
9a24d18f40
inetutils: patch CVE-2026-24061
...
Pick patches per [1].
[1] https://security-tracker.debian.org/tracker/CVE-2026-24061
(From OE-Core rev: 042f02ff7072e9cf4b02a335d1d3186d68ba669b)
Signed-off-by: Peter Marko <peter.marko@siemens.com >
Signed-off-by: Yoann Congal <yoann.congal@smile.fr >
Signed-off-by: Paul Barker <paul@pbarker.dev >
2026-02-27 15:54:01 +00:00
Vijay Anusuri
a56109b944
inetutils: Backport fix for CVE-2023-40303
...
Upstream-commit: https://git.savannah.gnu.org/cgit/inetutils.git/commit/?id=e4e65c03f4c11292a3e40ef72ca3f194c8bffdd6
& https://git.savannah.gnu.org/cgit/inetutils.git/commit/?id=9122999252c7e21eb7774de11d539748e7bdf46d
(From OE-Core rev: 2d2fc8e2b0eaa20f6bf8cfc0d1acd908f3dac2ec)
Signed-off-by: Vijay Anusuri <vanusuri@mvista.com >
Signed-off-by: Steve Sakoman <steve@sakoman.com >
2023-09-08 16:09:41 -10:00
Teoh Jay Shen
b7925d6994
inetutils: fix CVE-2022-39028 - remote DoS vulnerability in inetutils-telnetd
...
(From OE-Core rev: 12740b58ce1f700ff271a9891a92de6e04e325f2)
Signed-off-by: Teoh Jay Shen <jay.shen.teoh@intel.com >
Signed-off-by: Steve Sakoman <steve@sakoman.com >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2022-09-28 08:02:10 +01:00
Richard Purdie
b0130fcf91
meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers
...
An automated conversion using scripts/contrib/convert-spdx-licenses.py to
convert to use the standard SPDX license identifiers. Two recipes in meta-selftest
were not converted as they're that way specifically for testing. A change in
linux-firmware was also skipped and may need a more manual tweak.
(From OE-Core rev: ceda3238cdbf1beb216ae9ddb242470d5dfc25e0)
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2022-02-20 16:45:25 +00:00
Alexandre Belloni
9ccf0f47a9
inetutils: drop CVE-2021-40491 patch
...
This CVE is already fixed in inetutils 2.2
(From OE-Core rev: d0c64bd9aef5fa4bf60cac922b1d5e43652f7919)
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2021-10-11 18:41:37 +01:00
Alexander Kanavin
2d4bdfdff6
inetutils: update 2.1 -> 2.2
...
(From OE-Core rev: c5095396909e6b1450ba2020472b5eb7d14a4751)
Signed-off-by: Alexander Kanavin <alex@linutronix.de >
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org >
2021-10-11 18:41:37 +01:00