From patchwork Sat Mar 18 19:59:44 2023 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: akuster808 X-Patchwork-Id: 21181 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 08F5BC74A5B for ; Sat, 18 Mar 2023 19:59:56 +0000 (UTC) Received: from mail-qv1-f46.google.com (mail-qv1-f46.google.com [209.85.219.46]) by mx.groups.io with SMTP id smtpd.web11.3803.1679169594720196122 for ; Sat, 18 Mar 2023 12:59:54 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20210112 header.b=ZZWL5ziv; spf=pass (domain: gmail.com, ip: 209.85.219.46, mailfrom: akuster808@gmail.com) Received: by mail-qv1-f46.google.com with SMTP id op8so5505758qvb.11 for ; Sat, 18 Mar 2023 12:59:54 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; t=1679169593; h=content-transfer-encoding:mime-version:message-id:date:subject:to :from:from:to:cc:subject:date:message-id:reply-to; bh=RDR+wAtKf32tyMEIuPHj2pYqeObyU+RmiOPd8osKAok=; b=ZZWL5zivjqZGeOoIHTZNDlAGgYWhl9FaV/ytEu20IjCvWaHdwYdQBrsAMO3dGrZFtE inGWwwaKVmx0iCNyOvesmWTqxIYb40DZqjFpzclrMp38Uucofivbx4TEjpO/F6JOrdih I2YHpp6bjh3XFwN5clo5FRzGZzXSlskGK6JFmm2WsAvh54UG+W+IlhG7lBPzyOtJlWI9 eqpPvqwNTuNxQRunBEjSlNBxhDFW7rCNOGYxINgmKBmUKW/fwRCD8KMfBkuNAJxtX+tB 5MOQ1b0ZWgQ5+uueAy0fILXlNCfb1QHO8N3gqk67L5ugyDuuHR+t9Uy+fqYNZ+2DVB/b wzrg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; t=1679169593; h=content-transfer-encoding:mime-version:message-id:date:subject:to :from:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=RDR+wAtKf32tyMEIuPHj2pYqeObyU+RmiOPd8osKAok=; b=U9h7c3Z1NdyOgbCLaRETheTdm6aunyzCIjjiGUGM3aOgpv7fepcpzNr4vWcruI1PoW aCeZeXUE40zeo/sEp3FeOrLURdZPUid3TPvXEJtSIWg+hbZGNOMM6eYDXf7G3l04Xigd 2NniqFb4OwrqeJO+jWSzyaWwNY+NhFnwqsyVjL1QKiEnwg1VwuFBCtiw37IpQbHH6wUS aouJemyD8uTmSvMN+2Q2nj1MxN7+vV6kD0VZ5uk2lZK9RmyGCiVTNRZauk4ZJNTz1+ns DKF8JbcBtNSfcYvbRXEyijtkATDbvwjusB52+Pu8afcHxMGZaQI1ne68AadXNWWTu6sp 319A== X-Gm-Message-State: AO0yUKVZw6iqH10j51Y+z0WYF5AJ/tka8QvQpPjS1g6MpH9r7Pg0MWvu LO5aJ/jQDL0jSwuZk3D4DYs2kOpajwY= X-Google-Smtp-Source: AK7set+l9pwGVI/fmYGDBMInHvYeBwNpF99xBoYEpWAtVibwU8nFdMcA7+4mHYog4I6sybaeGtchJA== X-Received: by 2002:a05:6214:2622:b0:5b8:1f61:a20 with SMTP id gv2-20020a056214262200b005b81f610a20mr13978601qvb.35.1679169593629; Sat, 18 Mar 2023 12:59:53 -0700 (PDT) Received: from keaua.attlocal.net ([2600:1700:9190:ba10:18:2153:2b6:e915]) by smtp.gmail.com with ESMTPSA id r80-20020a374453000000b007465ee178a3sm2765473qka.96.2023.03.18.12.59.53 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sat, 18 Mar 2023 12:59:53 -0700 (PDT) From: Armin Kuster To: yocto@lists.yoctoproject.org Subject: [meta-security][PATCH 1/9] python3-fail2ban: update to 1.0.2 Date: Sat, 18 Mar 2023 15:59:44 -0400 Message-Id: <20230318195952.538375-1-akuster808@gmail.com> X-Mailer: git-send-email 2.25.1 MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Sat, 18 Mar 2023 19:59:56 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto/message/59453 Signed-off-by: Armin Kuster --- ...n3-fail2ban_0.11.2.bb => python3-fail2ban_1.0.2.bb} | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) rename dynamic-layers/meta-python/recipes-security/fail2ban/{python3-fail2ban_0.11.2.bb => python3-fail2ban_1.0.2.bb} (90%) diff --git a/dynamic-layers/meta-python/recipes-security/fail2ban/python3-fail2ban_0.11.2.bb b/dynamic-layers/meta-python/recipes-security/fail2ban/python3-fail2ban_1.0.2.bb similarity index 90% rename from dynamic-layers/meta-python/recipes-security/fail2ban/python3-fail2ban_0.11.2.bb rename to dynamic-layers/meta-python/recipes-security/fail2ban/python3-fail2ban_1.0.2.bb index 1f55267..9379494 100644 --- a/dynamic-layers/meta-python/recipes-security/fail2ban/python3-fail2ban_0.11.2.bb +++ b/dynamic-layers/meta-python/recipes-security/fail2ban/python3-fail2ban_1.0.2.bb @@ -11,11 +11,11 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=ecabc31e90311da843753ba772885d9f" DEPENDS = "python3-native" -SRCREV ="4fe4ac8dde6ba14841da598ec37f8c6911fe0f64" -SRC_URI = " git://github.com/fail2ban/fail2ban.git;branch=0.11;protocol=https \ - file://initd \ - file://run-ptest \ -" +SRCREV = "e1d3006b0330e9777705a7baafe3989d442ed120" +SRC_URI = "git://github.com/fail2ban/fail2ban.git;branch=master;protocol=https \ + file://initd \ + file://run-ptest \ + " UPSTREAM_CHECK_GITTAGREGEX = "(?P\d+(\.\d+)+)" From patchwork Sat Mar 18 19:59:45 2023 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: akuster808 X-Patchwork-Id: 21182 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 0AAC7C7618E for ; Sat, 18 Mar 2023 19:59:56 +0000 (UTC) Received: from mail-qv1-f43.google.com (mail-qv1-f43.google.com [209.85.219.43]) by mx.groups.io with SMTP id smtpd.web11.3804.1679169595374383544 for ; Sat, 18 Mar 2023 12:59:55 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20210112 header.b=PgjzcUu/; spf=pass (domain: gmail.com, ip: 209.85.219.43, mailfrom: akuster808@gmail.com) Received: by mail-qv1-f43.google.com with SMTP id m6so5549534qvq.0 for ; Sat, 18 Mar 2023 12:59:55 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; t=1679169594; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=i63wNs9KhhP6vSm7A36AlewhesumTfBEvfh6iShbfOE=; b=PgjzcUu/R34XF9Fxl4henDZOAP6kngNpt2PaRn2AsE6aAwf1XNKcyLxK6zMyNyFSTh S5JIpTNiV5q8+q0GMf8N977HCNdPptBM9KF2Za1udoVYp+lWqLtAQ34EsAUv2C2aeKpZ qRPz7BOY3c9tF+Mj7lBhfCWNDyZIX2V3YyBpFW+InSGIERmyk6lvwQ9v2CZbDf6Uj+Y0 KwH/AGZXNwshhI9KiB75bGukpeWFyJXEKrNbgzeEL4oAB/740RwF7m+6V7HiMxdmoWZo lHyRfYwrx0CmZUtbaCckPGjG/Z9wDjdLDtTFVEkxDwyEKm+PWfybwpDvPwT44162TQNz gi0w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; t=1679169594; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=i63wNs9KhhP6vSm7A36AlewhesumTfBEvfh6iShbfOE=; b=pieFktLmbmgNSUZhSqI5t3E5py36nrS6nSqx6SeWcOyAAHU/TsbQa4ZkSVRAfpaw7U 8vtvt4XfBWBjGdo/h/eccg/UqMt3uYrk9zf7uQKnngbE+hzADlfnZ0JllcLGLQLApFYp f3lXQqeFd18qHhS1PfFm4WPzbEcBkWNF9d6kSOk5cROryN50reO3UOpsCKaQTdFnBcqX /Op8KZr5EkPrKjtHbRSY9XnxBQpK+jxTAO7khvlMttkdlRzFCvNgoxNU0fvEDW7P+5Qs uSAzEE2T6hgBVEoDCVlrEwkpCTG8oUoetxr68TtZXmVTKfBSnQVokkhDIVEChmdRxnwz JOSQ== X-Gm-Message-State: AO0yUKVybLzXtCXT1YOm1tFAqN61v0cUQTFLQ71UeN6gZRtQCFoAti2N hiNazNFj+H/qpVrUQ/YJxp22uUpmy8Q= X-Google-Smtp-Source: AK7set8xIiMawS8VN1wPHwBaVYVTafioRDA1abIecZgBjI6qVPyrsiFcxWDBKHqNxSPxLtBPPsxjtg== X-Received: by 2002:ad4:4ea3:0:b0:5ad:9d3f:b05e with SMTP id ed3-20020ad44ea3000000b005ad9d3fb05emr26514749qvb.47.1679169594314; Sat, 18 Mar 2023 12:59:54 -0700 (PDT) Received: from keaua.attlocal.net ([2600:1700:9190:ba10:18:2153:2b6:e915]) by smtp.gmail.com with ESMTPSA id r80-20020a374453000000b007465ee178a3sm2765473qka.96.2023.03.18.12.59.53 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sat, 18 Mar 2023 12:59:53 -0700 (PDT) From: Armin Kuster To: yocto@lists.yoctoproject.org Subject: [meta-security][PATCH 2/9] python3-privacyidea: update to 3.8.1 Date: Sat, 18 Mar 2023 15:59:45 -0400 Message-Id: <20230318195952.538375-2-akuster808@gmail.com> X-Mailer: git-send-email 2.25.1 In-Reply-To: <20230318195952.538375-1-akuster808@gmail.com> References: <20230318195952.538375-1-akuster808@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Sat, 18 Mar 2023 19:59:56 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto/message/59454 Signed-off-by: Armin Kuster --- ...ython3-privacyidea_3.7.4.bb => python3-privacyidea_3.8.1.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename dynamic-layers/meta-python/recipes-security/mfa/{python3-privacyidea_3.7.4.bb => python3-privacyidea_3.8.1.bb} (96%) diff --git a/dynamic-layers/meta-python/recipes-security/mfa/python3-privacyidea_3.7.4.bb b/dynamic-layers/meta-python/recipes-security/mfa/python3-privacyidea_3.8.1.bb similarity index 96% rename from dynamic-layers/meta-python/recipes-security/mfa/python3-privacyidea_3.7.4.bb rename to dynamic-layers/meta-python/recipes-security/mfa/python3-privacyidea_3.8.1.bb index b6a0e06..8bb88f1 100644 --- a/dynamic-layers/meta-python/recipes-security/mfa/python3-privacyidea_3.7.4.bb +++ b/dynamic-layers/meta-python/recipes-security/mfa/python3-privacyidea_3.8.1.bb @@ -6,7 +6,7 @@ LICENSE = "AGPL-3.0-only" LIC_FILES_CHKSUM = "file://LICENSE;md5=c0acfa7a8a03b718abee9135bc1a1c55" PYPI_PACKAGE = "privacyIDEA" -SRC_URI[sha256sum] = "187b6aa61f8b27e1972512123c8295ea6d2501b3d90d975d4603e753f146b50c" +SRC_URI[sha256sum] = "e0dae763575c6300ccaebe6dcc8d3f119cb3e25c11302b1e78a96a12e8ab2b38" inherit pypi setuptools3 From patchwork Sat Mar 18 19:59:46 2023 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: akuster808 X-Patchwork-Id: 21184 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 0B66BC7619A for ; Sat, 18 Mar 2023 19:59:56 +0000 (UTC) Received: from mail-qv1-f47.google.com (mail-qv1-f47.google.com [209.85.219.47]) by mx.groups.io with SMTP id smtpd.web11.3805.1679169595864355298 for ; Sat, 18 Mar 2023 12:59:56 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20210112 header.b=CmVKstjO; spf=pass (domain: gmail.com, ip: 209.85.219.47, mailfrom: akuster808@gmail.com) Received: by mail-qv1-f47.google.com with SMTP id p93so5357655qvp.1 for ; Sat, 18 Mar 2023 12:59:55 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; t=1679169595; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=TuN3sfzH8ivLEyod0fieiE1ju9glx0UBuqWX+aMUXjs=; b=CmVKstjOP8Ckc8lgMOHAtXZgIMTYhIQjZBjXhJ44wDDcXTWHa484AH5pHIvLOTcMmw vxuPwOJKeDxE2aOVHo3IQToz+Cs6LZQD4Fw+Mn2KqGqiiN+4c+agPex/fSLdyS7pwfcS PjdbE5YJnQHcIAb3YZyOluvrU0WfBAd+42Z+J/+ZXw1QNN0QrMeiHhhbtL1TjoqbSeX3 FcAm8Do/v9+7wP503WNsEcwF1qsWV5XRyO3dpLMU1n6+aeetOesZpcOxAarVT7VVyU5a WxIVvx5B+VGC/3ztuvn3IkWbFubedcr/CPBBAM+yZZ7j3CqZOsQxWQn8CtmdCmbcgg9C xIIA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; t=1679169595; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=TuN3sfzH8ivLEyod0fieiE1ju9glx0UBuqWX+aMUXjs=; b=i3nvHwhCLVHGbvo3RQ4kZfZaW7LwKdbw8HtxDB7svh51MYx9xv+N3kq1r+inj3L9S4 wjj8Ew+a/pE0wqir/N4nDjlrS0bk5wm7/AYY/+WxThp9K6mSxLW4MmB1whZP82BeqVn7 QJZr3/qBQ0fOp4mZv8oqYkFORRrWrcSnBLYX2SkuEbCpnfvQ7lYE53rFSTeDuUOw0Xs5 QprC6Q9vxeIv/7GFmdqx3RfI9YZxPAQfPYef9BVwDT3HIA0q6PkCaR5hFQ12OB27G8Hs ASwvh4zI1+EhBRkkqcWQpXTR9mvl46Fj3BQxQWrGs04ri3SXQ/8uTi4OBuGgur3HMBgr sonA== X-Gm-Message-State: AO0yUKWg1qWcmHDzj17QXRhogrjbjrBzAMkmgyaB6WOwadvblBxB7yBW iKx3XSKuM/s5R/GB9F+wIWEuwWH+R08= X-Google-Smtp-Source: AK7set+jkc+pLX1MYL0WSqL9lCnqr/Cv2SkNvsdPzfAusbXTQFYktPManMZ8RI2JkNqJNRCrj9cCyQ== X-Received: by 2002:a05:6214:d46:b0:5ae:f42:ec94 with SMTP id 6-20020a0562140d4600b005ae0f42ec94mr21863312qvr.33.1679169594885; Sat, 18 Mar 2023 12:59:54 -0700 (PDT) Received: from keaua.attlocal.net ([2600:1700:9190:ba10:18:2153:2b6:e915]) by smtp.gmail.com with ESMTPSA id r80-20020a374453000000b007465ee178a3sm2765473qka.96.2023.03.18.12.59.54 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sat, 18 Mar 2023 12:59:54 -0700 (PDT) From: Armin Kuster To: yocto@lists.yoctoproject.org Subject: [meta-security][PATCH 3/9] libhtp: update to 0.5.42 Date: Sat, 18 Mar 2023 15:59:46 -0400 Message-Id: <20230318195952.538375-3-akuster808@gmail.com> X-Mailer: git-send-email 2.25.1 In-Reply-To: <20230318195952.538375-1-akuster808@gmail.com> References: <20230318195952.538375-1-akuster808@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Sat, 18 Mar 2023 19:59:56 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto/message/59455 Signed-off-by: Armin Kuster --- recipes-ids/suricata/{libhtp_0.5.40.bb => libhtp_0.5.42.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename recipes-ids/suricata/{libhtp_0.5.40.bb => libhtp_0.5.42.bb} (91%) diff --git a/recipes-ids/suricata/libhtp_0.5.40.bb b/recipes-ids/suricata/libhtp_0.5.42.bb similarity index 91% rename from recipes-ids/suricata/libhtp_0.5.40.bb rename to recipes-ids/suricata/libhtp_0.5.42.bb index 08e285e..e2866c8 100644 --- a/recipes-ids/suricata/libhtp_0.5.40.bb +++ b/recipes-ids/suricata/libhtp_0.5.42.bb @@ -5,7 +5,7 @@ require suricata.inc LIC_FILES_CHKSUM = "file://LICENSE;beginline=1;endline=2;md5=596ab7963a1a0e5198e5a1c4aa621843" SRC_URI = "git://github.com/OISF/libhtp.git;protocol=https;branch=0.5.x" -SRCREV = "1733478f7fd09e936fea2e024f1d228d40741df2" +SRCREV = "b14f81bfddbc7206ea713177fcf1e1090257dcd2" DEPENDS = "zlib" From patchwork Sat Mar 18 19:59:47 2023 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: akuster808 X-Patchwork-Id: 21183 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 1C49BC76195 for ; Sat, 18 Mar 2023 19:59:57 +0000 (UTC) Received: from mail-qv1-f52.google.com (mail-qv1-f52.google.com [209.85.219.52]) by mx.groups.io with SMTP id smtpd.web11.3806.1679169596417067608 for ; Sat, 18 Mar 2023 12:59:56 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20210112 header.b=Yhk26U6g; spf=pass (domain: gmail.com, ip: 209.85.219.52, mailfrom: akuster808@gmail.com) Received: by mail-qv1-f52.google.com with SMTP id o44so2609200qvo.4 for ; Sat, 18 Mar 2023 12:59:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; t=1679169595; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=EVh1IkIV6qz3T6UaLE4e8ZoQ+rdtG6Q6Ol+iuL5Er00=; b=Yhk26U6gelKUUdpvmt0MwwEjlV55lmIDSMrp4s5pysO1IDtFSjJuBpeydgJtIoVi5z 6DuL67y0KZi8gXLAJ3KO5pfzajZmD3iob8gINW8R7OLuJLqKL0f9GxKv8nDVsDhV4R+F 0LctD6OVoaURqQuDEn8NE+e0P3kGzgmGWWmV/O5wqVN1iej56n16aotU8zoPw2D3eovI WzH5ligbCvdDE1B8x6cqSsUUir5h7bGLlcYyVweejotoD6/YxMKa3WdDEIzntU4BPstY nFeNqhAI+CHBPM1Gc1+lhSx4ezrXqLWUMjm9u6qNBxx+07yEbs5NeGLQAFys2R6XrcHf 0IxA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; t=1679169595; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=EVh1IkIV6qz3T6UaLE4e8ZoQ+rdtG6Q6Ol+iuL5Er00=; b=ajplfZJzrtKFPZSKpOLCSjggxlGFitsuWh+fFVpTw/ng86lcYvHUQLsuPWnL1Uf/+I Wp/rl4uPnB6rxvpp4h6ju3VVBBwsXnhW6fu2vvXc6Ak7ukdKMo1xlLRhZElxif2M8osA HXq1SQ46eQT2sRlH9t9QcCxuOHnKLJzOq2od0a0EjweBhp4/TucfdBrD65XW5CSKtYDR Q+ECqVAub6AZuUNU7bxbcylnvQs+V4Dz3G2yjoYRbYAaEMJ+xc/tCSwZvVxK5+XSqGwy ITqvchpbowNv5YBGWgdD/MNWdbvVJr3Od1UVSSKuXbhOCeEfzVseVT1lixf17zMTJvbr QBCw== X-Gm-Message-State: AO0yUKXdomAB2lnGhXgo6m7tHjhT3vVWsO6OpXptPugqmlq1AGKjX03f Dz2/zWmCnMf6F52C956fHXGU+wS7fVI= X-Google-Smtp-Source: AK7set8hoQF3TZM+HQnDa0Xe0M4C1HZPRQUa4XN99C93g+41HepjTGDaJ3lSz2Ndz1FrNStBzofyDg== X-Received: by 2002:ad4:5ae3:0:b0:56f:fb19:1650 with SMTP id c3-20020ad45ae3000000b0056ffb191650mr50504325qvh.2.1679169595479; Sat, 18 Mar 2023 12:59:55 -0700 (PDT) Received: from keaua.attlocal.net ([2600:1700:9190:ba10:18:2153:2b6:e915]) by smtp.gmail.com with ESMTPSA id r80-20020a374453000000b007465ee178a3sm2765473qka.96.2023.03.18.12.59.55 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sat, 18 Mar 2023 12:59:55 -0700 (PDT) From: Armin Kuster To: yocto@lists.yoctoproject.org Subject: [meta-security][PATCH 4/9] lkrg-modules: update to 0.9.6 Date: Sat, 18 Mar 2023 15:59:47 -0400 Message-Id: <20230318195952.538375-4-akuster808@gmail.com> X-Mailer: git-send-email 2.25.1 In-Reply-To: <20230318195952.538375-1-akuster808@gmail.com> References: <20230318195952.538375-1-akuster808@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Sat, 18 Mar 2023 19:59:57 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto/message/59456 Signed-off-by: Armin Kuster --- .../lkrg/{lkrg-module_0.9.5.bb => lkrg-module_0.9.6.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename recipes-kernel/lkrg/{lkrg-module_0.9.5.bb => lkrg-module_0.9.6.bb} (95%) diff --git a/recipes-kernel/lkrg/lkrg-module_0.9.5.bb b/recipes-kernel/lkrg/lkrg-module_0.9.6.bb similarity index 95% rename from recipes-kernel/lkrg/lkrg-module_0.9.5.bb rename to recipes-kernel/lkrg/lkrg-module_0.9.6.bb index fa46cb6..421d924 100644 --- a/recipes-kernel/lkrg/lkrg-module_0.9.5.bb +++ b/recipes-kernel/lkrg/lkrg-module_0.9.6.bb @@ -11,7 +11,7 @@ DEPENDS = "virtual/kernel elfutils" SRC_URI = "git://github.com/lkrg-org/lkrg.git;protocol=https;branch=main" -SRCREV = "c58cb52145b8e8ccc6bd19079f5c835933281cdc" +SRCREV = "2481b3e2dd04eac945c31f99058b0aeee73c3a71" S = "${WORKDIR}/git" From patchwork Sat Mar 18 19:59:48 2023 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: akuster808 X-Patchwork-Id: 21189 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id C88F8C76195 for ; Sat, 18 Mar 2023 20:00:06 +0000 (UTC) Received: from mail-qt1-f175.google.com (mail-qt1-f175.google.com [209.85.160.175]) by mx.groups.io with SMTP id smtpd.web10.3962.1679169597057063315 for ; Sat, 18 Mar 2023 12:59:57 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20210112 header.b=afpj/Irw; spf=pass (domain: gmail.com, ip: 209.85.160.175, mailfrom: akuster808@gmail.com) Received: by mail-qt1-f175.google.com with SMTP id h19so9176595qtn.1 for ; Sat, 18 Mar 2023 12:59:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; t=1679169596; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=jj2Y90a6qHeo3/DRnbgrqvLj2HGzxvk27HGV/oRU90U=; b=afpj/Irwtae1UnhYOGbb13DaK23KfqpUr3DhZRPaAGQsC6GL7ugDOFHpD2wL3+DlGZ T6au9DVdGeVimTafouGIQSDu1OW8wH2CfAfR3TKfRwR+I42+3Hv11yiZVtzPQEWT1jgg 3/OfoUIrtl/1mqQdy4ZXrabwiQywaLgTuCkzxd+62QLml0Xlfh6qhaSyECpQ7mN+u6aj PCh0YmwaMDdTl8SS2cpx/C7K5lLmYDjoAGQgYyDOCw/FOWmxyB8TxeaIIXm6LgkjZB7I 1EOedw7BMGbJh5AsLYysKXaL65GLDnADk3Aj+XDVsGOPrDu2xzKOyUJWoKBBtPVsO0cE w87g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; t=1679169596; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=jj2Y90a6qHeo3/DRnbgrqvLj2HGzxvk27HGV/oRU90U=; b=4Jj2yWx+mybnuu7sASVjFlB1Nn3UZRah/FwVOntSRmFo7ip30ycw7YF+PHqUSqfnEf Ht3Qq9y7gB0g/92P7+lkFk6dvR4QbU6/e2PeKqwvvD+a8aVSUL6XlQr6p4kd3PYm3uoI 4dXZ1nQQQWtsTK9Y7Wxm1cgdVjZAy3wdSOnxmtHJjxu9e/pzx5IoXDqmstvo+4fr/68H ARoYiXtka1Y58w1OCmGudKIwEJsM2gKzhwApUa1fXCuvyWUW0WXT8CBbjlymXqveUiBM GvYheORIeoeU6ZFxoahA4rxnwaRosyKlh/4bZPdDYNMACFhqLNqyJiP2fKX4v/5eZtOV p2/g== X-Gm-Message-State: AO0yUKUUlT9bCcXkdzMhAXQG4QMLtJ7S834q/FHGlSpVwTzT9E5Cey2R 5CuLUxcf5NZr0ieW+qJUDsud3BSMrQ4= X-Google-Smtp-Source: AK7set8TfL+3ASD5LFcOFU7xA7QuEZhe3Ua6M/icM4a1R14JlUw3U31FF2bdkQND6/8IJf2O8iunmA== X-Received: by 2002:ac8:5ad0:0:b0:3bf:ba80:b91b with SMTP id d16-20020ac85ad0000000b003bfba80b91bmr20860230qtd.1.1679169595974; Sat, 18 Mar 2023 12:59:55 -0700 (PDT) Received: from keaua.attlocal.net ([2600:1700:9190:ba10:18:2153:2b6:e915]) by smtp.gmail.com with ESMTPSA id r80-20020a374453000000b007465ee178a3sm2765473qka.96.2023.03.18.12.59.55 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sat, 18 Mar 2023 12:59:55 -0700 (PDT) From: Armin Kuster To: yocto@lists.yoctoproject.org Subject: [meta-security][PATCH 5/9] chkrootkit: update to 0.57 Date: Sat, 18 Mar 2023 15:59:48 -0400 Message-Id: <20230318195952.538375-5-akuster808@gmail.com> X-Mailer: git-send-email 2.25.1 In-Reply-To: <20230318195952.538375-1-akuster808@gmail.com> References: <20230318195952.538375-1-akuster808@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Sat, 18 Mar 2023 20:00:06 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto/message/59457 Signed-off-by: Armin Kuster --- .../rootkits/{chkrootkit_0.55.bb => chkrootkit_0.57.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename recipes-scanners/rootkits/{chkrootkit_0.55.bb => chkrootkit_0.57.bb} (94%) diff --git a/recipes-scanners/rootkits/chkrootkit_0.55.bb b/recipes-scanners/rootkits/chkrootkit_0.57.bb similarity index 94% rename from recipes-scanners/rootkits/chkrootkit_0.55.bb rename to recipes-scanners/rootkits/chkrootkit_0.57.bb index fe0e989..d35f5f6 100644 --- a/recipes-scanners/rootkits/chkrootkit_0.55.bb +++ b/recipes-scanners/rootkits/chkrootkit_0.57.bb @@ -7,7 +7,7 @@ LIC_FILES_CHKSUM = "file://COPYRIGHT;md5=fdbe53788f7081c63387d8087273f5ff" SRC_URI = "http://archive.ubuntu.com/ubuntu/pool/universe/c/${BPN}/${BPN}_${PV}.orig.tar.gz \ file://musl_fix.patch" -SRC_URI[sha256sum] = "a81c0286ec449313f953701202a00e81b204fc2cf43e278585a11c12a5e0258b" +SRC_URI[sha256sum] = "06d1faee151aa3e3c0f91ac807ca92e60b75ed1c18268ccef2c45117156d253c" inherit autotools-brokensep From patchwork Sat Mar 18 19:59:49 2023 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: akuster808 X-Patchwork-Id: 21188 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id D7E19C761AF for ; Sat, 18 Mar 2023 20:00:06 +0000 (UTC) Received: from mail-qv1-f47.google.com (mail-qv1-f47.google.com [209.85.219.47]) by mx.groups.io with SMTP id smtpd.web10.3963.1679169597620882144 for ; Sat, 18 Mar 2023 12:59:57 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20210112 header.b=lhyqKZ39; spf=pass (domain: gmail.com, ip: 209.85.219.47, mailfrom: akuster808@gmail.com) Received: by mail-qv1-f47.google.com with SMTP id x8so5513028qvr.9 for ; Sat, 18 Mar 2023 12:59:57 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; t=1679169596; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=uXG3iW7Lj7MlKNIS4wCTtELFpqDgWbe9I/1hkmpgO1w=; b=lhyqKZ398O/zNxmH2nPSrkltXxRffjLQDTn/+8zUshRu/nCd7W5AQgQ8IHjZmMBrjR //+YXzC2BDRq/Tm219FoUXwe+ZhKNRvdBCjKQIS4EBdMUhUOSiPwCPv5hHUmKDkCTqQk y9mlkLJyQAwQamPp3SFpat3u8/7OGxQZ0wWHE4mpwIx+X1jZl48Y8gE+lQX0Cv1oCW9p /dbnJ/N9Z8PJ/PHwQcsfIVjWrzejKcDqR48P9U4ydS8QRxem7BV/h4fx7wK52DRiMAZA XJQ9v+metKGf+gwI7i5tqjl9KdhxsRFeiXioi7yakrXGzelLHaOer6ZgIA0coEaQC2GG ahuA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; t=1679169596; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=uXG3iW7Lj7MlKNIS4wCTtELFpqDgWbe9I/1hkmpgO1w=; b=dI6c+g0e4djbOoWqfPZv1vZzNteTsuDIXaIZgP6GEYdqbAzM1TtakJcPEHMEYk9tF6 Z8ORV94IVWCZxJXe4aEof3NF1uzvM9AaIFhGgKzNDAEr0l8H3B2gAcWoC97WcIPuc45B 1CBtoyCbRGLD5NqGjDpbsdOkeoksSn44PFPDEWYuQlB5PepIGIC7d8yTwlK9IIGhg5Bh rFJbDi1OYll8yXEfRTBfgh/us0qxo7YmC+5DzGrMmkY7pPpe4uKvsk8v7slWnKHqml6Y 66LDHqPoA2ollX+IrXV16zvSx2aP6tn+DANoDsKXTugm47RX6uWQq2ZkFVbCBBmoh04Y foeg== X-Gm-Message-State: AO0yUKX73HxsGmi4vhS/CnlW21gwWxO2Hmc8b7LgJGMZzIdGRLwpX6sq DDgqse9Wnv2kdmmx9z3gwNJg0IFLDdE= X-Google-Smtp-Source: AK7set/4shDWBtv04x6lSzeYHD9WOsbBPxz2SNH+gRNOflyoXzXvxs1z9C6lNQqZN/Ty/UlYpvuFfg== X-Received: by 2002:ad4:5c6f:0:b0:577:522d:5d11 with SMTP id i15-20020ad45c6f000000b00577522d5d11mr47637957qvh.8.1679169596589; Sat, 18 Mar 2023 12:59:56 -0700 (PDT) Received: from keaua.attlocal.net ([2600:1700:9190:ba10:18:2153:2b6:e915]) by smtp.gmail.com with ESMTPSA id r80-20020a374453000000b007465ee178a3sm2765473qka.96.2023.03.18.12.59.56 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sat, 18 Mar 2023 12:59:56 -0700 (PDT) From: Armin Kuster To: yocto@lists.yoctoproject.org Subject: [meta-security][PATCH 6/9] chipsec: update to 1.10.3 Date: Sat, 18 Mar 2023 15:59:49 -0400 Message-Id: <20230318195952.538375-6-akuster808@gmail.com> X-Mailer: git-send-email 2.25.1 In-Reply-To: <20230318195952.538375-1-akuster808@gmail.com> References: <20230318195952.538375-1-akuster808@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Sat, 18 Mar 2023 20:00:06 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto/message/59459 Signed-off-by: Armin Kuster --- .../chipsec/{chipsec_1.9.1.bb => chipsec_1.10.3.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename recipes-security/chipsec/{chipsec_1.9.1.bb => chipsec_1.10.3.bb} (94%) diff --git a/recipes-security/chipsec/chipsec_1.9.1.bb b/recipes-security/chipsec/chipsec_1.10.3.bb similarity index 94% rename from recipes-security/chipsec/chipsec_1.9.1.bb rename to recipes-security/chipsec/chipsec_1.10.3.bb index 9fbdaa7..b6dc944 100644 --- a/recipes-security/chipsec/chipsec_1.9.1.bb +++ b/recipes-security/chipsec/chipsec_1.10.3.bb @@ -10,7 +10,7 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=bc2d1f9b427be5fb63f6af9da56f7c5d" DEPENDS = "virtual/kernel nasm-native" SRC_URI = "git://github.com/chipsec/chipsec.git;branch=main;protocol=https" -SRCREV = "d8c2a606bf440c32196c6289a7a458f3ae3107cc" +SRCREV = "094ce48082844788789e05b5f4e840ebec0e661d" S = "${WORKDIR}/git" From patchwork Sat Mar 18 19:59:50 2023 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: akuster808 X-Patchwork-Id: 21187 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id C8832C7618E for ; Sat, 18 Mar 2023 20:00:06 +0000 (UTC) Received: from mail-qv1-f47.google.com (mail-qv1-f47.google.com [209.85.219.47]) by mx.groups.io with SMTP id smtpd.web11.3805.1679169595864355298 for ; Sat, 18 Mar 2023 12:59:57 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20210112 header.b=XIpxeLah; spf=pass (domain: gmail.com, ip: 209.85.219.47, mailfrom: akuster808@gmail.com) Received: by mail-qv1-f47.google.com with SMTP id p93so5357680qvp.1 for ; Sat, 18 Mar 2023 12:59:57 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; t=1679169597; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=zGOnB+kTMBVQ7JNCcmuHnkiw+wpUKPvBTbqOdDL7Qzk=; b=XIpxeLahVbEGZqatSNwMiIHMdSNZBHTiDyRs85aY57KlfYAG90sCdiam3zP9rMPij5 bBTkOUTyj0H/+t9qQKXQQsTvkPs07gmHCMG99SFSmYXMH/6jfIkzenGGw7Uv736gI4lo UEYoTr3S+e8OQLLQxjJ67cMQxAgb30RdgNrtEbg3udqcHfYMgMo3Usfw6uycTkCqSqTt S6IK8M3GhtwVnj8f2elKUFGv1bB5cQCmGh01obc89s4MagWxcNLI1PoptJKQfhu6P6rj K9JpqHGJvCK62fS5fgg6Fly3s+Q0h2hCsyeAt/1nvqJsmTT0uc3xO26vMUL9Gvdp4MBu /SZw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; t=1679169597; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=zGOnB+kTMBVQ7JNCcmuHnkiw+wpUKPvBTbqOdDL7Qzk=; b=Ezp9BuIe82PW/DfWvcCnezfN01GuaQOdJIh0SLuQrJ8ttrsX6A5qPtbskg2v6zyt+H Ox1ee87JM5dgikWbg3PdGtcg196TlrJm4qgDMNPISoof6F9sDKzTAA+YoewepyIWaK/s qFssjJWl3tmpbhVuBSkRTTJIGbwe7S64sgyOtdulfCl1UhcGcMHE9kbRFC7BC96MTBRi W30nIZ/s57HnCp2WR41RrhMH0Ron/HlaBZzi5Uhn4PbbfZLXjCoI72ZggOQ0WoNFoTyE 7o2O1bG5mkQXUcUonASHK9GoawtUUd1ZezDRVU4B7cclDol2IvthBEz0eZ9r3v5r1hNz ZCnw== X-Gm-Message-State: AO0yUKUMCJfBx7Q93o0nFZhyAYtGhPRv64MLNNc460tQDT4vjrpfh/96 vy5hYImNl8in5jMy9EETUzQNMt7LZTw= X-Google-Smtp-Source: AK7set8teIR7qc57q/6kwRrHqfgaeB8HlLQnx3xQeEdi9wppqxh+E7pzRPR82Gdh1IFf3WzwU7VtNw== X-Received: by 2002:a05:6214:5005:b0:571:f87:a665 with SMTP id jo5-20020a056214500500b005710f87a665mr47358270qvb.35.1679169596941; Sat, 18 Mar 2023 12:59:56 -0700 (PDT) Received: from keaua.attlocal.net ([2600:1700:9190:ba10:18:2153:2b6:e915]) by smtp.gmail.com with ESMTPSA id r80-20020a374453000000b007465ee178a3sm2765473qka.96.2023.03.18.12.59.56 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sat, 18 Mar 2023 12:59:56 -0700 (PDT) From: Armin Kuster To: yocto@lists.yoctoproject.org Subject: [meta-security][PATCH 7/9] fscrypt: update to 1.1.0 Date: Sat, 18 Mar 2023 15:59:50 -0400 Message-Id: <20230318195952.538375-7-akuster808@gmail.com> X-Mailer: git-send-email 2.25.1 In-Reply-To: <20230318195952.538375-1-akuster808@gmail.com> References: <20230318195952.538375-1-akuster808@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Sat, 18 Mar 2023 20:00:06 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto/message/59458 Signed-off-by: Armin Kuster --- recipes-security/fscrypt/{fscrypt_1.0.0.bb => fscrypt_1.1.0.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename recipes-security/fscrypt/{fscrypt_1.0.0.bb => fscrypt_1.1.0.bb} (96%) diff --git a/recipes-security/fscrypt/fscrypt_1.0.0.bb b/recipes-security/fscrypt/fscrypt_1.1.0.bb similarity index 96% rename from recipes-security/fscrypt/fscrypt_1.0.0.bb rename to recipes-security/fscrypt/fscrypt_1.1.0.bb index 8147fe6..ea9593b 100644 --- a/recipes-security/fscrypt/fscrypt_1.0.0.bb +++ b/recipes-security/fscrypt/fscrypt_1.1.0.bb @@ -11,7 +11,7 @@ LIC_FILES_CHKSUM = "file://src/${GO_IMPORT}/LICENSE;md5=3b83ef96387f14655fc854dd # fscrypt depends on go and libpam DEPENDS += "go-native libpam" -SRCREV = "92b1e9a8670ccd3916a7d24a06cab1e4c9815bc4" +SRCREV = "7c80c73c084ce9ea49a03b814dac7a82fd7b4c23" SRC_URI = "git://github.com/google/fscrypt.git;branch=master;protocol=https" GO_IMPORT = "import" From patchwork Sat Mar 18 19:59:51 2023 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: akuster808 X-Patchwork-Id: 21186 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id D792CC761A6 for ; Sat, 18 Mar 2023 20:00:06 +0000 (UTC) Received: from mail-qv1-f43.google.com (mail-qv1-f43.google.com [209.85.219.43]) by mx.groups.io with SMTP id smtpd.web11.3804.1679169595374383544 for ; Sat, 18 Mar 2023 12:59:58 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20210112 header.b=imqGDjT2; spf=pass (domain: gmail.com, ip: 209.85.219.43, mailfrom: akuster808@gmail.com) Received: by mail-qv1-f43.google.com with SMTP id m6so5549576qvq.0 for ; Sat, 18 Mar 2023 12:59:57 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; t=1679169597; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=2CsX3xo5RX/yLjq/AOCaWPnFypIVf6Ggf0fjkKj9T2A=; b=imqGDjT2laZIsWTKPODi9X0ZcOyOCIYJFtOIn8GFzfAnEfuC/I/fAEmND0ZqxG5EDe HUpOQ9evbhOxE3WgMxZ1Bve2p+OTKbpi5ejOzvMcB529NHuC97RDYQ7q5QvKEtnALkUK tyra2pm6H+vyiYnst4j/TCNNzCeOfBZ9VGZerk5/9X/PkDqM8yg/dBTEkQ2HxHIPRUXd sZciwU8HnfQZ2Rx2hIQZafmtVGVcg5+OE5ovaqNfYSOBrrBemdgNgfYn4NPZVdu40Sk0 Y4tcmIomfztNCqjMPQsGkn72KlQDFxigyEWLbzgZEwWRxoGXPeOATmUPSNUFZ/QFQ2Vf E1Ig== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; t=1679169597; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=2CsX3xo5RX/yLjq/AOCaWPnFypIVf6Ggf0fjkKj9T2A=; b=pvqX3ublhYdHDbGp2ZSSjCLT/Y2/31Up+zEbS5OjXnCbofUE2E/8arI0xDwt4KlZ9U hIzexiO+BD1xVUole1xckhUjUJgFg2AafhmFpuxqYu2Xxf+EO7tWmTO/ZbmY3Z8+6vwI ee+QETj2qRKU2s50vkBKKAcGURgs6c6iBV59rBxmP0hPZl+WejCWH1b02UXj49C2T5db AieCywll0CDr0hvb/qfweNlsyaGHgLyBbTmkUd0m5tsLprdtQAUpZjNJ5SO6Wuy+Pct9 ZHfFytRG3a3GR/h7iqOY80GaKEzpn/SP0c7kBb++YFydd6Snz7b/V5Ido0Wq/lvLwhNM AT9w== X-Gm-Message-State: AO0yUKWP4nBhZJ0gDbZQEsmbmhRHwubE/SjpZMT/CbQ2y379aOuCCb0K 9weZ3Gfvz/JuAFgmadiiKjTMNg8Nr/s= X-Google-Smtp-Source: AK7set8HWn80sdu7pm+tRYykTWh4S2y2+34WFuZ8xStPMHN+WMftTmGAMDLQ7k6LjgNlEz6ZTPg00A== X-Received: by 2002:a05:6214:c88:b0:5a9:c758:ba0e with SMTP id r8-20020a0562140c8800b005a9c758ba0emr37451968qvr.16.1679169597458; Sat, 18 Mar 2023 12:59:57 -0700 (PDT) Received: from keaua.attlocal.net ([2600:1700:9190:ba10:18:2153:2b6:e915]) by smtp.gmail.com with ESMTPSA id r80-20020a374453000000b007465ee178a3sm2765473qka.96.2023.03.18.12.59.57 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sat, 18 Mar 2023 12:59:57 -0700 (PDT) From: Armin Kuster To: yocto@lists.yoctoproject.org Subject: [meta-security][PATCH 8/9] libmspack: update to 1.11 Date: Sat, 18 Mar 2023 15:59:51 -0400 Message-Id: <20230318195952.538375-8-akuster808@gmail.com> X-Mailer: git-send-email 2.25.1 In-Reply-To: <20230318195952.538375-1-akuster808@gmail.com> References: <20230318195952.538375-1-akuster808@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Sat, 18 Mar 2023 20:00:06 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto/message/59460 Signed-off-by: Armin Kuster --- .../libmspack/{libmspack_1.9.1.bb => libmspack_1.11.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename recipes-security/libmspack/{libmspack_1.9.1.bb => libmspack_1.11.bb} (88%) diff --git a/recipes-security/libmspack/libmspack_1.9.1.bb b/recipes-security/libmspack/libmspack_1.11.bb similarity index 88% rename from recipes-security/libmspack/libmspack_1.9.1.bb rename to recipes-security/libmspack/libmspack_1.11.bb index 1b91f46..59df84b 100644 --- a/recipes-security/libmspack/libmspack_1.9.1.bb +++ b/recipes-security/libmspack/libmspack_1.11.bb @@ -6,7 +6,7 @@ DEPENDS = "" LIC_FILES_CHKSUM = "file://COPYING.LIB;beginline=1;endline=2;md5=5b1fd1f66ef926b3c8a5bb00a72a28dd" -SRCREV = "63d3faf90423a4a6c174539a7d32111a840adadc" +SRCREV = "305907723a4e7ab2018e58040059ffb5e77db837" SRC_URI = "git://github.com/kyz/libmspack.git;branch=master;protocol=https" inherit autotools From patchwork Sat Mar 18 19:59:52 2023 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: akuster808 X-Patchwork-Id: 21185 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id D749DC74A5B for ; Sat, 18 Mar 2023 20:00:06 +0000 (UTC) Received: from mail-qt1-f177.google.com (mail-qt1-f177.google.com [209.85.160.177]) by mx.groups.io with SMTP id smtpd.web11.3807.1679169599122410709 for ; Sat, 18 Mar 2023 12:59:59 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20210112 header.b=SR4mbtBE; spf=pass (domain: gmail.com, ip: 209.85.160.177, mailfrom: akuster808@gmail.com) Received: by mail-qt1-f177.google.com with SMTP id c18so9166053qte.5 for ; Sat, 18 Mar 2023 12:59:59 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; t=1679169598; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=FSsNb953aUW4LxU9nJvV4Y52eGzk6ELfmu9x8WCMbE4=; b=SR4mbtBEGbhZmDDevKmiKyT/8vZBj72Pt3vxgizDmgXhBSdgKxVOoHcf5v5tMRjW14 H6EzHqleMXyjFKUItjUEy8ijAxLoJXj2b7MUCUNa55oZJkoqcFsUrbPRtG7J25j/H1fJ FrIUyq/t6INXYILvOlDka2c2K1hYmrHMTwhwvbiiIRevuLM5+4WZ++bWKb/oVRlle5yR TNHtWVCZpiR8R05+SaLjcu3Tm2VvcaIapEnXXdnbat7cWhwg1MCpgBIxK3iCarNzq5MC 0toVr64K8HKhdLx+K0AZkwZUXMdNM5pNHVx1Grsez/BPkfy7MkYzm8LzhGf5/x7jJTNh kCzw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; t=1679169598; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=FSsNb953aUW4LxU9nJvV4Y52eGzk6ELfmu9x8WCMbE4=; b=SZG0tnWio1/kqkHZsst0roQ2wzE5r8KsWTDRINJs81/0sWRlonCZ58zs31Hxut5Bcy Jtn5aD9QYYK+uSndvnjMrqRS2o4VdVmd5GvaHU3Q0t+DFWUBXikBkHBF0X+VK/vQobKN w7cd26cN09CLMRwmG5imB2mwNpvmkygv/PRlMrI/+v8U9gJGWdQN2yVUl16JXqWl2KeQ PaSe/X/czPpoo2wNSZQE9VXLSqw0clSIirDVxHDIi688RRwk6Qrv3aQLb0atO8M2vNAc 3oqw2t8Wfw4vyf2xE+DJT14xWnhs6qiQ5THhSzpvr+ktsYAgTlsqUUnn+Q/ktRrUtMIc 2A5A== X-Gm-Message-State: AO0yUKXPlnLg2IHacjlbD6q2l276m8itsJuisvdxfFQXP6Beh1FlDuah 6oAohAeqZvjlIqPP4oxq9MKgUzAg670= X-Google-Smtp-Source: AK7set+CDO1TnUnjoh0fz5iu7Z+6dmjdusQHcM03fbp7o+xIel5q9b3VY/TQ9Mi2AsKnzcm958sCDQ== X-Received: by 2002:a05:622a:1b8a:b0:3b0:b9a4:a20f with SMTP id bp10-20020a05622a1b8a00b003b0b9a4a20fmr19281462qtb.4.1679169598100; Sat, 18 Mar 2023 12:59:58 -0700 (PDT) Received: from keaua.attlocal.net ([2600:1700:9190:ba10:18:2153:2b6:e915]) by smtp.gmail.com with ESMTPSA id r80-20020a374453000000b007465ee178a3sm2765473qka.96.2023.03.18.12.59.57 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sat, 18 Mar 2023 12:59:57 -0700 (PDT) From: Armin Kuster To: yocto@lists.yoctoproject.org Subject: [meta-security][PATCH 9/9] firejail: update 0.9.72 Date: Sat, 18 Mar 2023 15:59:52 -0400 Message-Id: <20230318195952.538375-9-akuster808@gmail.com> X-Mailer: git-send-email 2.25.1 In-Reply-To: <20230318195952.538375-1-akuster808@gmail.com> References: <20230318195952.538375-1-akuster808@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Sat, 18 Mar 2023 20:00:06 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto/message/59461 refresh patch Signed-off-by: Armin Kuster --- .../exclude_seccomp_util_compiles.patch | 20 +++++++++---------- ...{firejail_0.9.70.bb => firejail_0.9.72.bb} | 3 ++- 2 files changed, 12 insertions(+), 11 deletions(-) rename recipes-security/Firejail/{firejail_0.9.70.bb => firejail_0.9.72.bb} (96%) diff --git a/recipes-security/Firejail/firejail/exclude_seccomp_util_compiles.patch b/recipes-security/Firejail/firejail/exclude_seccomp_util_compiles.patch index a32720a..7e70692 100644 --- a/recipes-security/Firejail/firejail/exclude_seccomp_util_compiles.patch +++ b/recipes-security/Firejail/firejail/exclude_seccomp_util_compiles.patch @@ -5,28 +5,28 @@ There are some files that need to run to generate the appropriate files we are currently doing this on the target. Signed-off-by: Armin Kuster -Index: git/Makefile.in +Index: git/Makefile =================================================================== ---- git.orig/Makefile.in -+++ git/Makefile.in -@@ -34,7 +34,6 @@ MYDIRS = src/lib $(MAN_SRC) $(COMPLETION +--- git.orig/Makefile ++++ git/Makefile +@@ -18,7 +18,6 @@ MYDIRS = src/lib $(MAN_SRC) $(COMPLETION MYLIBS = src/libpostexecseccomp/libpostexecseccomp.so src/libtrace/libtrace.so src/libtracelog/libtracelog.so COMPLETIONS = src/zsh_completion/_firejail src/bash_completion/firejail.bash_completion MANPAGES = firejail.1 firemon.1 firecfg.1 firejail-profile.5 firejail-login.5 firejail-users.5 jailcheck.1 -SECCOMP_FILTERS = seccomp seccomp.debug seccomp.32 seccomp.block_secondary seccomp.mdwx seccomp.mdwx.32 ALL_ITEMS = $(APPS) $(SBOX_APPS) $(SBOX_APPS_NON_DUMPABLE) $(MYLIBS) - .PHONY: all_items $(ALL_ITEMS) -@@ -52,7 +51,7 @@ $(MANPAGES): src/man + .PHONY: all +@@ -43,7 +42,7 @@ $(MANPAGES): src/man config.mk man: $(MANPAGES) -filters: $(SECCOMP_FILTERS) $(SBOX_APPS_NON_DUMPABLE) -+filters: $(SBOX_APPS_NON_DUMPABLE) ++filters: $(SBOX_APPS_NON_DUMPABLE) seccomp: src/fseccomp/fseccomp src/fsec-optimize/fsec-optimize src/fseccomp/fseccomp default seccomp src/fsec-optimize/fsec-optimize seccomp -@@ -81,7 +80,6 @@ clean: +@@ -72,7 +71,6 @@ clean: done $(MAKE) -C test clean rm -f $(MANPAGES) $(MANPAGES:%=%.gz) firejail*.rpm @@ -34,12 +34,12 @@ Index: git/Makefile.in rm -f test/utils/index.html* rm -f test/utils/wget-log rm -f test/utils/firejail-test-file* -@@ -119,7 +117,7 @@ endif +@@ -110,7 +108,7 @@ endif # libraries and plugins install -m 0755 -d $(DESTDIR)$(libdir)/firejail install -m 0755 -t $(DESTDIR)$(libdir)/firejail src/firecfg/firejail-welcome.sh - install -m 0644 -t $(DESTDIR)$(libdir)/firejail $(MYLIBS) $(SECCOMP_FILTERS) -+ install -m 0644 -t $(DESTDIR)$(libdir)/firejail $(MYLIBS) ++ install -m 0644 -t $(DESTDIR)$(libdir)/firejail $(MYLIBS) install -m 0755 -t $(DESTDIR)$(libdir)/firejail $(SBOX_APPS) install -m 0755 -t $(DESTDIR)$(libdir)/firejail src/profstats/profstats # plugins w/o read permission (non-dumpable) diff --git a/recipes-security/Firejail/firejail_0.9.70.bb b/recipes-security/Firejail/firejail_0.9.72.bb similarity index 96% rename from recipes-security/Firejail/firejail_0.9.70.bb rename to recipes-security/Firejail/firejail_0.9.72.bb index 35f7b07..12a3105 100644 --- a/recipes-security/Firejail/firejail_0.9.70.bb +++ b/recipes-security/Firejail/firejail_0.9.72.bb @@ -9,7 +9,7 @@ seccomp-bpf and Linux capabilities." LIC_FILES_CHKSUM = "file://COPYING;md5=b234ee4d69f5fce4486a80fdaf4a4263" LICENSE = "GPL-2.0-only" -SRCREV = "b4b08d21cd95725c9d55dfdb6987fcc6d7893247" +SRCREV = "2551bc71f14052344666f3ca2ad67f5b798020b9" SRC_URI = "git://github.com/netblue30/firejail.git;protocol=https;branch=master \ file://exclude_seccomp_util_compiles.patch \ " @@ -46,6 +46,7 @@ PACKAGES:append = " ${PN}-vim ${PN}-zsh" FILES:${PN}-vim = "${datadir}/vim/" FILES:${PN}-zsh = "${datadir}/zsh/" +FILES:${PN}-dev = "${datadir}/gtksourceview-5/" pkg_postinst_ontarget:${PN} () { ${libdir}/${BPN}/fseccomp default ${libdir}/${BPN}/seccomp