Praveen Kumar 9b99800fe7 connman :fix CVE-2025-32743 ...

In ConnMan through 1.44, the lookup string in ns_resolv in dnsproxy.c
can be NULL or an empty string when the TC (Truncated) bit is set in
a DNS response. This allows attackers to cause a denial of service
(application crash) or possibly execute arbitrary code, because those
lookup values lead to incorrect length calculations and incorrect
memcpy operations.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-32743

Upstream-patch:
https://git.kernel.org/pub/scm/network/connman/connman.git/commit/?id=d90b911f6760959bdf1393c39fe8d1118315490f

(From OE-Core rev: ece0fb01bf28fa114f0a6e479491b4b6f565c80c)

Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>

2025-05-14 06:38:21 -07:00

..

avahi

avahi: fix CVE-2024-52616

2025-01-24 07:49:28 -08:00

bind

bind: Upgrade 9.18.28 -> 9.18.33

2025-03-04 08:46:02 -08:00

bluez5

bluez5: Fix CVE-2023-27349 CVE-2023-50229 & CVE-2023-50230

2024-05-16 05:22:09 -07:00

connman

connman :fix CVE-2025-32743

2025-05-14 06:38:21 -07:00

dhcpcd

dhcpcd: use git instead of tarballs

2023-05-30 04:11:15 -10:00

inetutils

inetutils: Backport fix for CVE-2023-40303

2023-09-08 16:09:41 -10:00

iproute2

iproute2: upgrade 5.16.0 -> 5.17.0

2022-03-29 15:59:29 +01:00

iw

iw: Fix LICENSE

2024-09-16 06:09:56 -07:00

kea

kea: submit patch upstream

2022-11-24 15:30:01 +00:00

libnss-mdns

meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers

2022-02-20 16:45:25 +00:00

libpcap

libpcap: Security fix for CVE-2023-7256 & CVE-2024-8006

2024-09-27 05:57:34 -07:00

libuv

libuv: fix CVE-2024-24806

2024-02-28 03:32:09 -10:00

mobile-broadband-provider-info

mobile-broadband-provider-info: upgrade 20221107 -> 20230416

2023-07-01 08:37:24 -10:00

neard

neard: Switch SRC_URI to git repo

2022-05-04 13:07:34 +01:00

nfs-utils

meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers

2022-02-20 16:45:25 +00:00

ofono

ofono: patch CVE-2024-7537

2025-04-11 08:36:02 -07:00

openssh

openssh: Fix CVE-2025-26465

2025-03-13 08:50:03 -07:00

openssl

openssl: upgrade 3.0.15 -> 3.0.16

2025-02-15 06:04:44 -08:00

ppp

ppp: patch CVE-2024-58250

2025-05-02 08:12:41 -07:00

ppp-dialin

Convert to new override syntax

2021-08-02 15:44:10 +01:00

resolvconf

resolvconf: make it work

2022-12-07 15:02:45 +00:00

socat

socat: patch CVE-2024-54661

2025-01-24 07:49:28 -08:00

ssh-pregen-hostkeys

ssh-pregen-hostkeys: Add a recipe with pregenerated ssh host keys

2020-09-23 20:54:04 +01:00

wpa-supplicant

wpa-supplicant: Patch security advisory 2024-2

2024-10-07 05:43:22 -07:00