mbox series

[meta-security,00/15] Assorted updates 08/26

Message ID cover.1787777775.git.scott.murray@konsulko.com
Headers show
Series Assorted updates 08/26 | expand

Message

Scott Murray Aug. 26, 2026, 8:57 p.m. UTC 
My apologies for being slow in getting this out, this patch series rolls
up the contributed patches from the past few months along with some
other fixes from myself.  These changes are queued on the master-next
branch if you would like to check them out to test yourself.  I intend
to merge these to master branch Friday evening (EDT, August 28) unless
there are objections.  I should have the relevant backports to wrynose
and scarthgap out for early next week.

Scott


Bin Cao (1):
  samhain: fix server startup failure on systemd-based systems

Esa Jaaskela (1):
  aide: Fix unstable install task hash

Gaël PORTAY (3):
  dm-verity: remove unused variable
  wic: document the meta-intel dependency in the dm-verity hash example
  docs: update path of wic files

Krupal Ka Patel (1):
  tpm2-tools: fix PACKAGECONFIG typo

Peter Marko (2):
  tpm2-tools: set status for CVE-2017-7524 and CVE-2024-29039
  tpm2-tss: set status for CVE-2024-29040

Sandeep J (1):
  README: fix broken URLs in meta-integrity and ccs-tools

Scott Murray (4):
  aide: Fix compilation with nettle 4.x
  suricata: handle oe_cargo_build removal
  meta-integrity: Fix ima-evm-utils LICENSE
  meta-tpm: Fix SUMMARY/HOMEPAGE in affected recipes

Shreejit C (1):
  meta-tpm: Add missing recipe metadata (HOMEPAGE/SUMMARY)

Wang Mingyu (1):
  fix LICENSE variable syntax to suppress QA warning

 classes/aide-db-init.bbclass                  | 11 +++-
 classes/dm-verity-img.bbclass                 |  1 -
 docs/dm-verity-systemd-x86-64.txt             |  6 +--
 docs/dm-verity.txt                            |  2 +-
 .../wic/systemd-bootdisk-dmverity-hash.wks.in |  1 +
 meta-integrity/README.md                      |  4 +-
 .../ima-evm-utils/ima-evm-utils_1.5.bb        |  2 +-
 .../recipes-core/images/security-tpm-image.bb |  2 +-
 .../images/security-tpm2-image.bb             |  2 +-
 .../packagegroup/packagegroup-security-tpm.bb |  2 +-
 .../packagegroup-security-tpm2.bb             |  1 +
 meta-tpm/recipes-tpm/libtpm/libtpms_0.10.0.bb |  1 +
 meta-tpm/recipes-tpm/swtpm/swtpm_0.10.0.bb    |  1 +
 .../openssl-tpm-engine_0.5.0.bb               |  2 +-
 .../tpm-tools/tpm-tools_1.3.9.2.bb            |  1 +
 .../tpm2-abrmd/tpm2-abrmd_3.0.0.bb            |  1 +
 .../tpm2-openssl/tpm2-openssl_1.3.0.bb        |  1 +
 .../tpm2-pkcs11/tpm2-pkcs11_1.9.2.bb          |  1 +
 .../tpm2-pytss/python3-tpm2-pytss_2.3.0.bb    |  1 +
 .../recipes-tpm2/tpm2-tools/tpm2-tools_5.7.bb |  6 ++-
 .../tpm2-tss-engine/tpm2-tss-engine_1.2.0.bb  |  1 +
 .../recipes-tpm2/tpm2-tss/tpm2-tss_4.1.3.bb   |  3 ++
 .../0002-Support-build-with-nettle-4.patch    | 53 +++++++++++++++++++
 recipes-ids/aide/aide_0.19.3.bb               | 14 ++---
 recipes-ids/crowdsec/crowdsec-licenses.inc    |  2 +-
 recipes-ids/crowdsec/crowdsec_1.7.7.bb        |  2 +-
 ...-set-SetLockfilePath-to-run-yule.pid.patch | 41 ++++++++++++++
 recipes-ids/samhain/files/samhain-client.init |  3 +-
 recipes-ids/samhain/files/samhain-server.init |  3 +-
 recipes-ids/samhain/samhain.inc               |  1 +
 recipes-ids/suricata/suricata_8.0.4.bb        | 11 ++--
 recipes-mac/AppArmor/apparmor_4.0.3.bb        |  2 +-
 recipes-mac/ccs-tools/README                  |  2 +-
 recipes-perl/perl/lib-perl_0.63.bb            |  2 +-
 recipes-perl/perl/libwhisker2-perl_2.5.bb     |  2 +-
 recipes-scanners/clamav/clamav_1.4.4.bb       |  4 +-
 recipes-security/libgssglue/libgssglue_0.9.bb |  2 +-
 37 files changed, 159 insertions(+), 38 deletions(-)
 create mode 100644 recipes-ids/aide/aide/0002-Support-build-with-nettle-4.patch
 create mode 100644 recipes-ids/samhain/files/0013-yulerc-set-SetLockfilePath-to-run-yule.pid.patch