yocto@lists.yoctoproject.org

[meta-security][PATCH] parsec-service: update from 1.1.0 to 1.2.0-rc1

Anton, Can you Ack/Nack this patch? -armin

By Armin Kuster · #59501 ·

[meta-security][dunfell][PATCH] sssd: CVE-2022-4254 libsss_certmap fails to sanitise certificate data used in LDAP filters

merged.

By Armin Kuster · #59500 ·

[meta-parsec][PATCH 2/2] meta-parsec: bump BBFILE_PRIORITY to the right tpm2-tss is included

Parsec-service does not support tpm2-tss 4 so us the older release 3.2.x Signed-off-by: Armin Kuster <akuster808@...> --- meta-parsec/conf/layer.conf | 2 +- 1 file changed, 1 insertion(+), 1 del

By Armin Kuster · #59471 ·

[meta-parsec][PATCH 1/2] tpm2-tss: restore version 3.2.x to meta-parsec

parsec-service does not support 4.x so keep older version for now too This fixes parsec-service build Error: thread 'main' panicked at 'Unsupported TSS version: 4', Signed-off-by: Armin Kuster <akuste

By Armin Kuster · #59470 ·

[meta-security][PATCH 3/4] krill: update 0.12.3

refresh patch Signed-off-by: Armin Kuster <akuster808@...> --- .../krill/files/panic_workaround.patch | 4 +- recipes-security/krill/krill.inc | 247 ++++++++++-------- .../krill/{krill_0.9.6.bb =

By Armin Kuster · #59466 ·

[meta-security][PATCH 4/4] cryptmout: update to 6.2.0

Change LIC_FILES_CHKSUM to use COPYING Signed-off-by: Armin Kuster <akuster808@...> --- .../cryptmount/{cryptmount_6.0.bb => cryptmount_6.2.0.bb} | 8 +++----- 1 file changed, 3 insertions(+), 5

By Armin Kuster · #59465 ·

[meta-security][PATCH 2/4] apparmor: update to 3.1.3

drop debian patch as the file was dropped upstream. Signed-off-by: Armin Kuster <akuster808@...> --- .../{apparmor_3.0.7.bb => apparmor_3.1.3.bb} | 7 +-- ...pparmor.debian-add-missing-functions.

By Armin Kuster · #59464 ·

[meta-security][PATCH 1/4] suricata: update to 6.0.10

fixup another python file to use py3 Signed-off-by: Armin Kuster <akuster808@...> --- recipes-ids/suricata/{suricata_6.0.6.bb => suricata_6.0.10.bb} | 3 ++- 1 file changed, 2 insertions(+), 1 de

By Armin Kuster · #59463 ·

[meta-security][PATCH 9/9] firejail: update 0.9.72

refresh patch Signed-off-by: Armin Kuster <akuster808@...> --- .../exclude_seccomp_util_compiles.patch | 20 +++++++++---------- ...{firejail_0.9.70.bb => firejail_0.9.72.bb} | 3 ++- 2 files chan

By Armin Kuster · #59461 ·

[meta-security][PATCH 8/9] libmspack: update to 1.11

Signed-off-by: Armin Kuster <akuster808@...> --- .../libmspack/{libmspack_1.9.1.bb => libmspack_1.11.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename recipes-security/libmspack/{l

By Armin Kuster · #59460 ·

[meta-security][PATCH 6/9] chipsec: update to 1.10.3

Signed-off-by: Armin Kuster <akuster808@...> --- .../chipsec/{chipsec_1.9.1.bb => chipsec_1.10.3.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename recipes-security/chipsec/{chipsec

By Armin Kuster · #59459 ·

[meta-security][PATCH 7/9] fscrypt: update to 1.1.0

Signed-off-by: Armin Kuster <akuster808@...> --- recipes-security/fscrypt/{fscrypt_1.0.0.bb => fscrypt_1.1.0.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename recipes-security/fscr

By Armin Kuster · #59458 ·

[meta-security][PATCH 5/9] chkrootkit: update to 0.57

Signed-off-by: Armin Kuster <akuster808@...> --- .../rootkits/{chkrootkit_0.55.bb => chkrootkit_0.57.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename recipes-scanners/rootkits/{ch

By Armin Kuster · #59457 ·

[meta-security][PATCH 4/9] lkrg-modules: update to 0.9.6

Signed-off-by: Armin Kuster <akuster808@...> --- .../lkrg/{lkrg-module_0.9.5.bb => lkrg-module_0.9.6.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename recipes-kernel/lkrg/{lkrg-mod

By Armin Kuster · #59456 ·

[meta-security][PATCH 3/9] libhtp: update to 0.5.42

Signed-off-by: Armin Kuster <akuster808@...> --- recipes-ids/suricata/{libhtp_0.5.40.bb => libhtp_0.5.42.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename recipes-ids/suricata/{lib

By Armin Kuster · #59455 ·

[meta-security][PATCH 2/9] python3-privacyidea: update to 3.8.1

Signed-off-by: Armin Kuster <akuster808@...> --- ...ython3-privacyidea_3.7.4.bb => python3-privacyidea_3.8.1.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename dynamic-layers/meta-p

By Armin Kuster · #59454 ·

[meta-security][PATCH 1/9] python3-fail2ban: update to 1.0.2

Signed-off-by: Armin Kuster <akuster808@...> --- ...n3-fail2ban_0.11.2.bb => python3-fail2ban_1.0.2.bb} | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) rename dynamic-layers/meta

By Armin Kuster · #59453 ·

[meta-security-compliance][PATCH 2/2] openscap git: add DEFAULT_PREFERENCE

This recipe is not maintained and will be dropped by the next LTS if nothing changes. Signed-off-by: Armin Kuster <akuster808@...> --- .../recipes-openscap/openscap/openscap_git.bb | 2 ++ 1 file

By Armin Kuster · #59446 ·

[meta-security-compliance][PATCH 1/2] openscap: update to 1.3.7

remove DEFAULT_PREFERENCE -1 The git version is unmaintained Signed-off-by: Armin Kuster <akuster808@...> --- .../openscap/{openscap_1.3.6.bb => openscap_1.3.7.bb} | 4 +--- 1 file changed, 1 ins

By Armin Kuster · #59445 ·

[meta-security][PATCH] libmhash: fix multilib header conflict - mutils/mhash_config.h

Thanks. It will be in my next round of builds. -armin

By Armin Kuster · #59439 ·