ver 1.24:
Fix issue with handshake and missing rekeying support.
Fix issue with BSS ranking and zero signal strength.
Fix issue with setting OWE IE length correctly.
ver 1.23:
Fix issue with handling handshake offloading.
Fix issue with at_console and D-Bus policy.
ver 1.22:
Fix issue with handling periodic scanning.
Fix issue with handling scanning completion.
Fix issue with handling scanning for OWE auto-connect.
Add support for additional DPP features.
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
0001-Prepare-for-CVE-2021-30004.patch.patch
CVE-2019-16275.patch
CVE-2019-5061.patch
CVE-2021-0326.patch
CVE-2021-27803.patch
CVE-2021-30004.patch
removed since they're included in 2.10
License-Update: year updated to 2022.
Changelog:
=========
* SAE changes
- improved protection against side channel attacks
[https://w1.fi/security/2022-1/]
- added option send SAE Confirm immediately (sae_config_immediate=1)
after SAE Commit
- added support for the hash-to-element mechanism (sae_pwe=1 or
sae_pwe=2)
- fixed PMKSA caching with OKC
- added support for SAE-PK
* EAP-pwd changes
- improved protection against side channel attacks
[https://w1.fi/security/2022-1/]
* fixed WPS UPnP SUBSCRIBE handling of invalid operations
[https://w1.fi/security/2020-1/]
* fixed PMF disconnection protection bypass
[https://w1.fi/security/2019-7/]
* added support for using OpenSSL 3.0
* fixed various issues in experimental support for EAP-TEAP server
* added configuration (max_auth_rounds, max_auth_rounds_short) to
increase the maximum number of EAP message exchanges (mainly to
support cases with very large certificates) for the EAP server
* added support for DPP release 2 (Wi-Fi Device Provisioning Protocol)
* extended HE (IEEE 802.11ax) support, including 6 GHz support
* removed obsolete IAPP functionality
* fixed EAP-FAST server with TLS GCM/CCM ciphers
* dropped support for libnl 1.1
* added support for nl80211 control port for EAPOL frame TX/RX
* fixed OWE key derivation with groups 20 and 21; this breaks backwards
compatibility for these groups while the default group 19 remains
backwards compatible; owe_ptk_workaround=1 can be used to enabled a
a workaround for the group 20/21 backwards compatibility
* added support for Beacon protection
* added support for Extended Key ID for pairwise keys
* removed WEP support from the default build (CONFIG_WEP=y can be used
to enable it, if really needed)
* added a build option to remove TKIP support (CONFIG_NO_TKIP=y)
* added support for Transition Disable mechanism to allow the AP to
automatically disable transition mode to improve security
* added support for PASN
* added EAP-TLS server support for TLS 1.3 (disabled by default for now)
* a large number of other fixes, cleanup, and extensions
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The Python bindings for gammu have been moved into a separate package
python-gammu.
Send patch upstream to replace distutils.version.StrictVersion with
packaging.version.parse and .Version
Signed-off-by: Tim Orling <tim.orling@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Changelog:
=========
Fix issue with handling disconnect events issued by AP.
Add experimental support for DPP feature.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Under some configuration, CMake may pick up the existence of python
from the native recipe sysroot and use that when linking for target,
resulting in the following error:
ld: .../recipe-sysroot-native/usr/lib/libpython3.10.so: error adding
symbols: file in wrong format
Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
0001-netconfig-Use-s6_addr-instead-of-__in6_u.__u6_addr8.patch
removed since it is included in 1.19
ver 1.19:
Fix issue with handling OCV if offloading is supported.
Fix issue with handling SA Query on channel switch event.
Fix issue with starting FT-over-DS actions after roaming.
Add support for OWE transition networks.
Add support for extended key IDs.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The use of intltool was removed in the 1.8.0 release, back in 2018.
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This patch updates SRC_URIs using git to include branch=master if no branch is set
and also to use protocol=https for github urls as generated by the conversion script
in OE-Core.
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
- Add support for Access Point FILS IP Address Assignment IE.
- Add support for P2P GO-side 4-way handshake IP allocation.
- Add support for forcing SAE group 19 if BSS requires it.
- Fix issue with handling faulty SAE duplicate commits.
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Fixes in OE-Core added some pkgconfig dependencies back and this flagged
that the .pc file was in ${PN}, not ${PN}-dev. Fix that.
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Fixes
configure: error: The pkg-config script could not be found or is too old. Make sure it
is in your PATH or set the PKG_CONFIG environment variable to the full
path to pkg-config.
Signed-off-by: Khem Raj <raj.khem@gmail.com>
CVE-2021-37750:
The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before
1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in
kdc/do_tgs_req.c via a FAST inner body that lacks a server field.
References:
https://nvd.nist.gov/vuln/detail/CVE-2021-37750
Patches from:
d775c95af7
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Fixed:
Fix MSYS libzmq discovery (#510)
Fix handshake event don't need DRAFT API in libzmq v4.3.0 and above (#509)
Use chrono duration for poll default timeout (#497)
context_t close no longer uses deprecated function (#490)
Fix for potential memory leak in monitor_t::check_event (#482)
Fix if constexpr warnings on MSVC (#460)
Fix conversion warnings (#459)
Deprecate confusing connected() function (#458)
Added:
Add all draft socket types up to libzmq 4.3.4 (#488)
Add support for socket_ref to multipart_t ctor/send/recv (#487, #470)
Expose zmq::fd_t (#452)
Add poller_t::size function (#451)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
CVE-2021-36222:
ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC)
in MIT Kerberos 5 (aka krb5) before 1.18.4 and 1.19.x before 1.19.2
allows remote attackers to cause a NULL pointer dereference and daemon
crash. This occurs because a return value is not properly managed in a
certain situation.
References:
https://nvd.nist.gov/vuln/detail/CVE-2021-36222
Patches from:
fc98f520ca
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Remove -f*-prefix-map from LDFLAGS in krb5-config to fix reproducibility
issue.
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
- Fix issue with sending additional and vendor IEs
- Fix issue with IE ordering for 802.11-2020 support
- Fix issue with frequency update on channel switch events
- Fix issue with drivers and handling of IF_OPER_UP setting
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
License-Update: Added new sections for new files
Configuration changes:
- BUILD_EXAMPLES - does not exist anymore
- WITH_SHARED_LIB -> BUILD_SHARED_LIBS, WITH_STATIC_LIB are not to be
allowed together
- WITH_AS3=OFF - adobe action script 3 not available
Added new options (disabled by default):
- javascript, nodejs
Signed-off-by: Andrej Valek <andrej.valek@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This is the result of automated script (0.9.1) conversion:
oe-core/scripts/contrib/convert-overrides.py .
converting the metadata to use ":" as the override character instead of "_".
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Update the library to the 4.2.1 stable release.
This commit includes following changes:
8a580b59 v4.2.1
e90f005a vhost: listen: protect listen port transfer between
041baf93 mbedtls: sessions: clean session on bail path
4038a7d4 windows: align plat insert socket POLLIN handling to linux
a310e16f socks5: cast for mingw3 nonposix recv args
439651fa openssl: manage _GNU_SOURCE better
c042ba8c mqtt: handle NULL mqtt publish metadata
04761c4b event libs: glib: use glib.h specifically
599d318a mqtt: coverity: help coverity see we wont have an mqtt role wsi without mqtt member allocated
bae99f63 tls: add option to serialize ssl handshake
ff1b8ed0 tls: fix inbalanced tls restrict borrow/return calls
ad3901d0 raw-proxy: fix role bind flag
4bc8b1a4 extpoll: clean up test server for Wconversion in extpoll parts
eeea000c dns: handle EAI_NONAME as fatal
9e5acc05 minimal: hcmulti: modernize startup to use OPERATIONAL
55533f96 netlink: hold in COLDPLUG until we actually have some routing table contents
fa1a7040 sspc: close: differentiate between ss and sspc at final wsi close
3f0fef17 gcc: gcc8 only recognizes fallthu
e319b15b minimal: ws client spam: modernize with pvo and cancel service after interrupted
ea4d8008 service: fix casts for EXTERNAL_POLL
aea9d0ce tls-sessions: remove no stash warning
10c1b882 ss: check destroy null policy
e4aa3ece ss: check serialize null policy
4141a68f ss: avoid null ss policy on req tx len
de8185db ss: avoid null ss policy on req tx
526310df ss: h1: log dereferences NULL
7a283eba minimal: htt-client: send user agent and accept
3d13468e ctest: do not reuse ctest-ssp path
e3da2a3b android: getnameinfo uses nonstandard size_t
8398ef79 getifaddrs: casts for android
02ae95fa non-windows: explicit cast vaarg to mode_t
7c3c179e win32: client: just do WIN32 check
4c8195df windows: only conceal mode_t on windows
0ba8df6e threadpool: disassociate wsi on close
94c50618 tls: mbedtls: fix cast for dump helper
d896d401 freertos: check for forcing each time around service loop
cd87bc1c cmake: tls: use CHECK_SYMBOL_EXISTS
da17f018 plugin: post: check unexpected write after protocol unbind
1c935dff clean: else became a NOP
896a2e09 strexp: handle NULL better
aa090fc2 cygwin: include in unix type socket init
58a34cb0 examples: embedded: keep loop running on WROVER
85f772f2 OSX: Fixed can't find clock_gettime
014aa77e core-net: Remove unused variable
e1ef2301 ss: h2: handle zero length COLON_PATH for metadata
0557e919 sspc: handle nonexistent metadata cleanly
07bef6b8 coverity: ntp from blob: handle blob missing
2f9ed48d coverity: report problem in hpack_dynamic_size() to parent
d155970b coverity: h->cwsi must be valid if we are handling rx on it
2d97e343 ss: split out blob into own minimal example
c3dd4d05 ss: sspc: handle destroy for client_connect and request_tx
Signed-off-by: Luan Rafael Carneiro <luan.rafael@ossystems.com.br>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
- Add support for FT-over-DS procedure with multiple BSS.
- Add support for estimation of VHT RX data rate.
- Add support for exporting Daemon information.
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
CMAKE_DISABLE_FIND_PACKAGE_<pkg> disables detection and would achieve
same but ON/OFF seems easier to understand
Signed-off-by: Khem Raj <raj.khem@gmail.com>
configs directory from source is shipped in linuxptp-configs package
and includes some example configuration files for the applications.
Signed-off-by: Peter Bergin <peter@berginkonsult.se>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Before this patch just a few of the produced binaries were installed.
This patch use install from linuxptp's makefile to install all binaries
and man pages. man pages are packaged in linuxptp-doc.
Signed-off-by: Peter Bergin <peter@berginkonsult.se>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
