mbox series

[meta-security,0/6] Assorted fixes

Message ID cover.1763064477.git.scott.murray@konsulko.com
Headers show
Series Assorted fixes | expand

Message

Scott Murray Nov. 13, 2025, 8:13 p.m. UTC 
This patch series rolls up contributed patches from the past few weeks,
as well as some other fixes.  They are queued on the master-next branch if
you would like to check them out to test yourself.  I intend to merge these
to master branch at end of day tomorrow unless there are objections.

For folks looking for scarthgap updates, I'm working up a series for that
next, hopefully will have it out early next week.

Scott


Changes:

Clayton Casciato (1):
  suricata: update to 7.0.12

Haixiao Yan (2):
  fail2ban: Adapt test output to Automake format for ptest compatibility
  fail2ban: replace fail2ban-python shebang with python3

Scott Murray (2):
  Update kas configuration for poky obsolescence
  ima-evm-utils: remove unnecessary FILESEXTRAPATHS tweak

hongxu (1):
  ecryptfs-utils: Add CVE tag for ecryptfs-utils-CVE-2016-6224.patch

 ...ao.unittest.TestRunner-for-ptest-out.patch |   43 +
 .../fail2ban/python3-fail2ban_git.bb          |   12 +-
 kas/kas-security-base.yml                     |   15 +-
 .../ima-evm-utils/ima-evm-utils_1.5.bb        |    2 -
 ...kefile-from-using-its-own-rust-steps.patch |   40 +
 .../suricata/files/CVE-2024-37151.patch       |   53 -
 .../suricata/files/CVE-2024-38534.patch       |   44 -
 .../suricata/files/CVE-2024-38535.patch       |   57 -
 .../suricata/files/CVE-2024-38535_pre.patch   |  292 ----
 .../suricata/files/CVE-2024-38536.patch       |   40 -
 recipes-ids/suricata/files/fixup.patch        |   32 -
 .../{libhtp_0.5.50.bb => libhtp_0.5.52.bb}    |    2 +-
 recipes-ids/suricata/suricata-crates.inc      | 1509 ++++++++---------
 .../{suricata_7.0.0.bb => suricata_7.0.12.bb} |    9 +-
 .../files/ecryptfs-utils-CVE-2016-6224.patch  |    1 +
 15 files changed, 847 insertions(+), 1304 deletions(-)
 create mode 100644 dynamic-layers/meta-python/recipes-security/fail2ban/files/0001-fail2ban-use-putao.unittest.TestRunner-for-ptest-out.patch
 create mode 100644 recipes-ids/suricata/files/0001-Skip-pkg-Makefile-from-using-its-own-rust-steps.patch
 delete mode 100644 recipes-ids/suricata/files/CVE-2024-37151.patch
 delete mode 100644 recipes-ids/suricata/files/CVE-2024-38534.patch
 delete mode 100644 recipes-ids/suricata/files/CVE-2024-38535.patch
 delete mode 100644 recipes-ids/suricata/files/CVE-2024-38535_pre.patch
 delete mode 100644 recipes-ids/suricata/files/CVE-2024-38536.patch
 delete mode 100644 recipes-ids/suricata/files/fixup.patch
 rename recipes-ids/suricata/{libhtp_0.5.50.bb => libhtp_0.5.52.bb} (90%)
 rename recipes-ids/suricata/{suricata_7.0.0.bb => suricata_7.0.12.bb} (95%)