[meta-security,08/18] libtpms: set CVE_PRODUCT

Message ID	20241220140441.271395-9-mikko.rapeli@linaro.org
State	New
Headers	show Return-Path: <mikko.rapeli@linaro.org> ip: 209.85.208.171, mailfrom: mikko.rapeli@linaro.org) From: Mikko Rapeli <mikko.rapeli@linaro.org> To: yocto-patches@lists.yoctoproject.org Cc: Mikko Rapeli <mikko.rapeli@linaro.org> Subject: [meta-security][PATCH 08/18] libtpms: set CVE_PRODUCT Date: Fri, 20 Dec 2024 16:04:31 +0200 Message-ID: <20241220140441.271395-9-mikko.rapeli@linaro.org> In-Reply-To: <20241220140441.271395-1-mikko.rapeli@linaro.org> References: <20241220140441.271395-1-mikko.rapeli@linaro.org> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	various updates \| expand [meta-security,00/18] various updates [meta-security,01/18] kas-security-base.yml: replace debug-tweaks [meta-security,02/18] kas-security-alt.yml: fix systemd config [meta-security,03/18] chkrootkit: change download from Ubuntu to Debian [meta-security,04/18] apparmor: update from 3.1.3 to 4.0.3 [meta-security,05/18] oeqa runtime clamav.py: use curl if ping fails [meta-security,06/18] libtpm: update from 0.9.6 to 0.10.0 [meta-security,07/18] libtpm: rename to libtpms [meta-security,08/18] libtpms: set CVE_PRODUCT [meta-security,09/18] swtpm: update from 0.8.2 to 0.10.0 [meta-security,10/18] tpm2-tools: add dependency to efivar [meta-security,11/18] u-boot: enable TPM support via "tpm2" in MACHINE_FEATURES [meta-security,12/18] systemd: enable TPM support [meta-security,13/18] systemd-boot: enable TPM support via "tpm2" in DISTRO_FEATURES [meta-security,14/18] harden.conf: exapand debug-tweaks [meta-security,15/18] linux-yocto: enable ecryptfs [meta-security,16/18] ecryptfs-utils: depend on ecryptfs kernel module [meta-security,17/18] oeqa runtime clamav.py: skip test_freshclam_download with systemd [meta-security,18/18] oeqa runtime ima.py: skip without "integrity" in DISTRO_FEATURES

Message ID

20241220140441.271395-9-mikko.rapeli@linaro.org

State

New

Headers

From: Mikko Rapeli <mikko.rapeli@linaro.org>
To: yocto-patches@lists.yoctoproject.org
Cc: Mikko Rapeli <mikko.rapeli@linaro.org>
Subject: [meta-security][PATCH 08/18] libtpms: set CVE_PRODUCT
Date: Fri, 20 Dec 2024 16:04:31 +0200
Message-ID: <20241220140441.271395-9-mikko.rapeli@linaro.org>
In-Reply-To: <20241220140441.271395-1-mikko.rapeli@linaro.org>
References: <20241220140441.271395-1-mikko.rapeli@linaro.org>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit

Series

various updates | expand

Commit Message

Mikko Rapeli Dec. 20, 2024, 2:04 p.m. UTC

Using vendor "libtpms_project" and product "libtpms"
as in https://nvd.nist.gov/vuln/detail/CVE-2021-3446

Matches CVEs better when analyzing with cve_check.bbclass.

Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org>
---
 meta-tpm/recipes-tpm/libtpm/libtpms_0.10.0.bb | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/meta-tpm/recipes-tpm/libtpm/libtpms_0.10.0.bb b/meta-tpm/recipes-tpm/libtpm/libtpms_0.10.0.bb
index a2c3a14..55a4c01 100644
--- a/meta-tpm/recipes-tpm/libtpm/libtpms_0.10.0.bb
+++ b/meta-tpm/recipes-tpm/libtpm/libtpms_0.10.0.bb
@@ -14,3 +14,5 @@  PACKAGECONFIG ?= "openssl"
 PACKAGECONFIG[openssl] = "--with-openssl, --without-openssl, openssl"
 
 BBCLASSEXTEND = "native nativesdk"
+
+CVE_PRODUCT = "libtpms_project:libtpms"

[meta-security,08/18] libtpms: set CVE_PRODUCT

Commit Message

Patch