From patchwork Wed Sep 17 20:42:48 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Scott Murray X-Patchwork-Id: 70416 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 6BDDDCAC5A0 for ; Wed, 17 Sep 2025 20:43:15 +0000 (UTC) Received: from mail-qk1-f174.google.com (mail-qk1-f174.google.com [209.85.222.174]) by mx.groups.io with SMTP id smtpd.web11.34463.1758141786738853674 for ; Wed, 17 Sep 2025 13:43:06 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@konsulko.com header.s=google header.b=ukrK4PHk; spf=pass (domain: konsulko.com, ip: 209.85.222.174, mailfrom: scott.murray@konsulko.com) Received: by mail-qk1-f174.google.com with SMTP id af79cd13be357-811dc3fdc11so16407285a.2 for ; Wed, 17 Sep 2025 13:43:06 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=konsulko.com; s=google; t=1758141785; x=1758746585; darn=lists.yoctoproject.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to; bh=XlylyJYBSYgRSr0PCbRGfviMC8g/FKhtYmLJXp0p9JE=; b=ukrK4PHkoygvrEaVBy9dKkCB/u7S0AKO63GdXmiXOZ/pu5Xo88xN7TxOKwTcnDiA4Y 6n8E+acTLgDQnHMhKVjL/fsNjWxi1OmRSfprq+4YfDTfs0P9Xow5GKOvmDf89T281SCl U4ZVPauv0DYtD0sagwIgWzvu0mX4CMF1/W6yc= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1758141785; x=1758746585; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=XlylyJYBSYgRSr0PCbRGfviMC8g/FKhtYmLJXp0p9JE=; b=fTOhkI4fK2ESLvuFz1mNkQZ7yQqkXdUbyO6gwtzfbOtSeKkAOkJ4Wtn6gTYk1MXLqe 4p3tzDHNqhANzVPT+iBkwNcIb6fC717MBJXtZxGfavUGzhWcAjzEcaUZgdWuLwUt52sf vPyjJ8pP5q1eL6OYzOaBvw3qYgOMbuqkF6r79gevgM6k9+dfB/a0RY4hvirNCeX5NYa9 bdcDhqqMlU3l4j+DaM3DmWIOeqJrAkVMsZJkkQ82P5dHrWA4Whb951CJj36cJ2Ea/A7i hYPUwsqNRNKxOoK1aKnZyX6vOA+Ulb8ZX9Sj0y57E48rvRkA7KSm4hD3TamGVVIj4gI9 2Hog== X-Gm-Message-State: AOJu0YxXG++F1nYd0Kb6zeaMYwfSSaOLo0XZi4MTAAx/7qvrVwjN8j5M JgSBcjOnpKRBq7/bKVt+gpoD9Y+L/rRAStyDxU4Y4jqPsHnoQbk5vl1FHhs4XM7gX1iIMA0JzsP 7iJR5 X-Gm-Gg: ASbGncvN2Zsot5Kslr1W2qfzlRoPdHbrFdGMLkqz9GNiGvs8nryqsSchj1Jakn5nesf S+cvvSqgpNHAJUhAQst3P+dzrXHlZz2Qa+i0okLytoK1Cl2TwtZITs72kYJ3xY5FN7966htgL9r ZrEfJyEqaXDbmf7l1f97Kch8RoKKC/w9y0HqrSxmZVhI0NB8fDa8Br6GgJBdXIlo4PQbWtvb5fT 8hWCgXzqode7QLnvDvssd70+EUkCKAyG7FeHRMBEBzMvMdygR14j6iW3r5oberqWpsp6kni8yp7 d+2SlFcnMYRd3WrHMJ8D6oHkqRQqx9qXDRx57x2/VPBAEqzphdAiPoUvtY020ZTAaXkPec3Ik37 e3eyb5NCDYQhgw75Eo01xEQYzIQ56qwIQkcS6ERUzA9jxpv5bYRH6i+D1adzbWv7sBOp6wsf+ss y2NWEro2zDDxWS8w9y X-Google-Smtp-Source: AGHT+IEibNu7gDkUpocTR+dWifltXHqXkltjrXsSASAo6Kw7EQrYqRw5iktu6D405sgxk7rxEox4uw== X-Received: by 2002:a05:620a:c4c:b0:800:fbd9:b3d1 with SMTP id af79cd13be357-8311334b7edmr455655985a.73.1758141785072; Wed, 17 Sep 2025 13:43:05 -0700 (PDT) Received: from ghidorah.spiteful.org (107-179-213-3.cpe.teksavvy.com. [107.179.213.3]) by smtp.gmail.com with ESMTPSA id af79cd13be357-836260ccccasm42991385a.10.2025.09.17.13.43.03 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 17 Sep 2025 13:43:03 -0700 (PDT) From: Scott Murray To: yocto-patches@lists.yoctoproject.org Cc: Marta Rybczynska Subject: [meta-security][PATCH 1/5] lib-perl: add a HOMEPAGE. Use CPAN_MIRROR Date: Wed, 17 Sep 2025 16:42:48 -0400 Message-ID: <883a74b29fd864d5dd8563fc439c7e3dba72483d.1758138771.git.scott.murray@konsulko.com> X-Mailer: git-send-email 2.50.1 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 17 Sep 2025 20:43:15 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto-patches/message/2208 From: "J. S." Signed-off-by: Jason Schonberg --- recipes-perl/perl/lib-perl_0.63.bb | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/recipes-perl/perl/lib-perl_0.63.bb b/recipes-perl/perl/lib-perl_0.63.bb index 6fc44e4..f0d6832 100644 --- a/recipes-perl/perl/lib-perl_0.63.bb +++ b/recipes-perl/perl/lib-perl_0.63.bb @@ -4,6 +4,7 @@ directories to Perl's search path so that later 'use' or 'require' statements \ will find modules which are not located in the default search path." SECTION = "libs" +HOMEPAGE = "https://metacpan.org/dist/lib" LICENSE = "Artistic-1.0 | GPL-1.0-or-later" PR = "r0" @@ -11,7 +12,7 @@ LIC_FILES_CHKSUM = "file://README;beginline=26;endline=30;md5=94b119f1a7b8d611ef DEPENDS += "perl" -SRC_URI = "http://www.cpan.org/authors/id/S/SM/SMUELLER/lib-${PV}.tar.gz" +SRC_URI = "${CPAN_MIRROR}/authors/id/S/SM/SMUELLER/lib-${PV}.tar.gz" SRC_URI[md5sum] = "8607ac4e0d9d43585ec28312f52df67c" SRC_URI[sha256sum] = "72f63db9220098e834d7a38231626bd0c9b802c1ec54a628e2df35f3818e5a00" From patchwork Wed Sep 17 20:42:49 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Scott Murray X-Patchwork-Id: 70417 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 67153CAC59A for ; Wed, 17 Sep 2025 20:43:15 +0000 (UTC) Received: from mail-qk1-f171.google.com (mail-qk1-f171.google.com [209.85.222.171]) by mx.groups.io with SMTP id smtpd.web11.34464.1758141788709910476 for ; Wed, 17 Sep 2025 13:43:08 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@konsulko.com header.s=google header.b=Dgvwr9IH; spf=pass (domain: konsulko.com, ip: 209.85.222.171, mailfrom: scott.murray@konsulko.com) Received: by mail-qk1-f171.google.com with SMTP id af79cd13be357-8250869d5d8so30418985a.2 for ; Wed, 17 Sep 2025 13:43:08 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=konsulko.com; s=google; t=1758141787; x=1758746587; darn=lists.yoctoproject.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to; bh=fVKwWfiu9fU6IEzC3bBsAStzu17JfkeqIWBwIK6lLWg=; b=Dgvwr9IHqrFgqGzk6f89zTL4jD6KJGSlvzpjQAL2ZP20RFXHa0xjp4uoeUrpm3rNKW dUyxw0oT3qbVlbP1WjfvfxyDwJAY438k2ufvNvlODsvx3RgCIF5xKcLx9Vh3QIKDz942 s5BexYu9i+jIFc3UHKwU2cz0+3sjRl5WQXHsw= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1758141787; x=1758746587; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=fVKwWfiu9fU6IEzC3bBsAStzu17JfkeqIWBwIK6lLWg=; b=rVYV8HH0f3E9Sxyl5TEbXqoiLSRM/NmkbpclH/LIvLNBnACh+ChHlBS4nxpbHGxGwW iqNsQgaCTvPE7W4q6viPVPXM3eCyv1MfcbgsG05rWBT7+amCa5uQxuRwjDWxpQ/D8Opn U3kqBlywhAAvNU0E4U2tU2PQEFp4hvXGx77VOhZj5sinC7H9vomVIfPFJSzI+KWNXE+I DgzLcR2fL16wt/vn62O9cW3OdDa+wEgZlVcphO9Y0Pum4ZvAo4PwrRR3bN4tctv5Tbhf E2yasC76GxTKmejLzZRhdqUeB8S6KT4Jh8m5CJJyKbBxwJi7DxsHVKndT/kcNupIGnjB HUwQ== X-Gm-Message-State: AOJu0Yy9yiHUzZqyDfTEAuosoMhmvc31u+Q+IAh/juY00tnxI1JHjGZT VY8UBHfONj3Ra2ItNxzxLrs2pKfFd1SJdK3kJrR7qYNQHOsDZDYI6ZxeYbPVjPiVzgfHw4aDt5H DbaEr X-Gm-Gg: ASbGncvR1qGjnNESkpCyklrGo0VGx+28EZIzqNCgaNR5NxvA/KspWbBDglZHaQxC3Pv 3+VxDyyVj0MPRYYFSQPQ3wfoiA60RKJ7yE0dqREtVfj2RJQ2LvHWUEOJBee1A4Bdjd+tYdEl90B EKcIXvSAcJhzVVWMsqrSS7pOu/SFtq6CIC//JB1GsiM6jzX1DtsBGbjLggrF+lWLcriBY9vPJ5v Gd/0/NBP92JaKldymNc4yeSrdnprStpE37JStYjoNxObb+dsxPEc02X8qc8I76bPNu8OQfnypKm FDRrvMxW718Ntub04yI0ptql+ug+LVraTcsPebB1vOdEoDJ6oqgLf2hMsNBx/bNd8vJQxpWWgAY jOa9T5qi4/UkAbIIH/COOoun+Eyc2UuShN+FKPIyuL+E/RHo79WYokBXaPF8NPYoT5JYJ/R+xA1 MafpPOs42h X-Google-Smtp-Source: AGHT+IH/mUj1HR40kp8mcszhPdpZnEBEmeCuaAQcrzjLO20AF368Aq6rfVIuLbrbe5dwsmsknkI9vg== X-Received: by 2002:a05:620a:318c:b0:827:5809:3a4a with SMTP id af79cd13be357-831143a2fafmr356297185a.52.1758141786835; Wed, 17 Sep 2025 13:43:06 -0700 (PDT) Received: from ghidorah.spiteful.org (107-179-213-3.cpe.teksavvy.com. [107.179.213.3]) by smtp.gmail.com with ESMTPSA id af79cd13be357-836260ccccasm42991385a.10.2025.09.17.13.43.05 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 17 Sep 2025 13:43:05 -0700 (PDT) From: Scott Murray To: yocto-patches@lists.yoctoproject.org Cc: Marta Rybczynska Subject: [meta-security][PATCH 2/5] suricata: install classification, reference configs Date: Wed, 17 Sep 2025 16:42:49 -0400 Message-ID: <9a49fcbd05e46cafb0a2300a035a9528242bd4b2.1758138771.git.scott.murray@konsulko.com> X-Mailer: git-send-email 2.50.1 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 17 Sep 2025 20:43:15 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto-patches/message/2209 From: Clayton Casciato suricata.yaml references these configs Resolve: -- could not open: "/etc/suricata/classification.config": No such file or directory -- please check the "classification-file" option in your suricata.yaml file Signed-off-by: Clayton Casciato --- recipes-ids/suricata/suricata_7.0.0.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/recipes-ids/suricata/suricata_7.0.0.bb b/recipes-ids/suricata/suricata_7.0.0.bb index f2df09e..f02d343 100644 --- a/recipes-ids/suricata/suricata_7.0.0.bb +++ b/recipes-ids/suricata/suricata_7.0.0.bb @@ -105,6 +105,8 @@ do_install () { install -d ${D}${sysconfdir}/suricata ${D}${sysconfdir}/default/volatiles install -m 0644 ${UNPACKDIR}/volatiles.03_suricata ${D}${sysconfdir}/default/volatiles/03_suricata + install -m 0644 ${S}/etc/classification.config ${D}${sysconfdir}/suricata + install -m 0644 ${S}/etc/reference.config ${D}${sysconfdir}/suricata install -m 0644 ${S}/threshold.config ${D}${sysconfdir}/suricata install -m 0644 ${S}/suricata.yaml ${D}${sysconfdir}/suricata From patchwork Wed Sep 17 20:42:50 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Scott Murray X-Patchwork-Id: 70418 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 6B111CAC598 for ; Wed, 17 Sep 2025 20:43:15 +0000 (UTC) Received: from mail-qt1-f180.google.com (mail-qt1-f180.google.com [209.85.160.180]) by mx.groups.io with SMTP id smtpd.web10.34519.1758141791052038173 for ; Wed, 17 Sep 2025 13:43:11 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@konsulko.com header.s=google header.b=UWvcsB+3; spf=pass (domain: konsulko.com, ip: 209.85.160.180, mailfrom: scott.murray@konsulko.com) Received: by mail-qt1-f180.google.com with SMTP id d75a77b69052e-4b7a8c428c3so2354881cf.0 for ; Wed, 17 Sep 2025 13:43:10 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=konsulko.com; s=google; t=1758141789; x=1758746589; darn=lists.yoctoproject.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to; bh=IJeLCiaB69fesYzKV0qDENaMLTaCLIaex/1U2GMVkYc=; b=UWvcsB+3KsvPOeKvNpdvJDu6qFA54/KpvDnOvjLLfELAzCcD8PMi5qFKGSHl3hGfH3 UR1u9Rw5ovsMqJCRjJFwhiH2K4lpb/FbG0Qr6R36ieXubdvBPKCLoEe/cSlGwCT4H/Ht o1PyWhQxlYDqWoB2buULWgRi50NV+yFXBVrCU= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1758141789; x=1758746589; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=IJeLCiaB69fesYzKV0qDENaMLTaCLIaex/1U2GMVkYc=; b=SujuiJO+DfRaqrA5ZyP2YrATcT0TGxFnzNuKyJUIP8x16KAF4oCn9ceyi4hq9JRxMv 6e3DvfBhqwkCf/rr3moIy6KoV5Q8wryz01W/30OFv043btHgANlyJ9W0834vL1DQZLNq qTuaNBWWS8t8sqhXy4WrdzfI4NIZgxAexJaelSmO896dmDR1sorhKKGoamc5FaJaW1dF BLMAuHwoalPVgTcu7t+AWQvPnK7RxhcrrMd7SPBLCye3HglOfSFG0K8wGPOJfc8bu/eR dJp7yITYEKElwajRYWJR34jZGinhYT0hzLx3y8I0xR9CPnYUsAtttOZiqlBn/zp0pzmW D3og== X-Gm-Message-State: AOJu0YyCmwYCiET1NFk52qUKk9pmQ5xggLN4wCzt9HmK/eyjGdPbjv8A tLB8AqZ1ngJhuGDBIW1ptXD4AfjEMEs9Dl+FS8vPdbNLzKVWKcZipc5Nr8huveqBhbvnJQ2DHzV 6FJUm X-Gm-Gg: ASbGncuA3UFYASzYg6am8Pm8zWaz8yE2Yv4B8NXFgs5dl2H+1JJ9iohDn/Qim0cOd/h T0aw7CZoKyVMBy5LLD9owYTs6rBKsJ1L8OQrNW8U5RO2SybGrLlNZGjixcsm+QLxISqH6/xkLmV iLs9Xqqu/+o7MSEoDE0XfqMZFcjD8SghMdD/EaVF3i28ondvKhvmdvu7LjbbVz7brqyoVk/QNSL bB7DdTKhJKj2a07Yh/AlWFWBdiS1QHWQYVqRBbaOjAK3A7DCGdvZIA11b2gqySHvyV/4L5sfXfg UjhNxoxzCug/6ZySp4rukvYPozm6vf7sb3a6EY/Y/iHxMBPwNE6DN0SGEn2mTkfL4we24Ha3t/k sJs5DUmgSMSrkPuXeDvYxph04FLL2uYYBD+kb1MAw9UXyHfliW7kLQtkJQqevIb05BmCkLPxh6g == X-Google-Smtp-Source: AGHT+IHXjZ5Qm7BTCfnxUthTrTFInMqcrlJIBCCYiMMn6q/1wnuijUCAyO+KzvnlenoDbIJwi8CL9Q== X-Received: by 2002:a05:622a:4c19:b0:4b4:8e38:8f96 with SMTP id d75a77b69052e-4ba6d054ceemr39533871cf.83.1758141788710; Wed, 17 Sep 2025 13:43:08 -0700 (PDT) Received: from ghidorah.spiteful.org (107-179-213-3.cpe.teksavvy.com. [107.179.213.3]) by smtp.gmail.com with ESMTPSA id af79cd13be357-836260ccccasm42991385a.10.2025.09.17.13.43.07 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 17 Sep 2025 13:43:07 -0700 (PDT) From: Scott Murray To: yocto-patches@lists.yoctoproject.org Cc: Marta Rybczynska Subject: [meta-security][PATCH 3/5] tpm2-tss-engine: remove libgcrypt dependency Date: Wed, 17 Sep 2025 16:42:50 -0400 Message-ID: X-Mailer: git-send-email 2.50.1 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 17 Sep 2025 20:43:15 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto-patches/message/2210 From: Patrick Wicki There is no hint of libgcrypt in the upstream code and distro packages like Debian and Fedora do not have this dependency either. Signed-off-by: Patrick Wicki --- meta-tpm/recipes-tpm2/tpm2-tss-engine/tpm2-tss-engine_1.2.0.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-tpm/recipes-tpm2/tpm2-tss-engine/tpm2-tss-engine_1.2.0.bb b/meta-tpm/recipes-tpm2/tpm2-tss-engine/tpm2-tss-engine_1.2.0.bb index af9dec8..6bc44ef 100644 --- a/meta-tpm/recipes-tpm2/tpm2-tss-engine/tpm2-tss-engine_1.2.0.bb +++ b/meta-tpm/recipes-tpm2/tpm2-tss-engine/tpm2-tss-engine_1.2.0.bb @@ -6,7 +6,7 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=7b3ab643b9ce041de515d1ed092a36d4" SECTION = "security/tpm" -DEPENDS = "autoconf-archive-native bash-completion libtss2 libgcrypt openssl" +DEPENDS = "autoconf-archive-native bash-completion libtss2 openssl" SRC_URI = "https://github.com/tpm2-software/${BPN}/releases/download/${PV}/${BPN}-${PV}.tar.gz \ file://0001-Configure-Allow-disabling-of-digest-sign-operations.patch \ From patchwork Wed Sep 17 20:42:51 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Scott Murray X-Patchwork-Id: 70419 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 67EAECAC59F for ; Wed, 17 Sep 2025 20:43:25 +0000 (UTC) Received: from mail-qt1-f173.google.com (mail-qt1-f173.google.com [209.85.160.173]) by mx.groups.io with SMTP id smtpd.web11.34469.1758141795262815066 for ; Wed, 17 Sep 2025 13:43:15 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@konsulko.com header.s=google header.b=qFcmvuj5; spf=pass (domain: konsulko.com, ip: 209.85.160.173, mailfrom: scott.murray@konsulko.com) Received: by mail-qt1-f173.google.com with SMTP id d75a77b69052e-4b7b3202dceso2591561cf.3 for ; Wed, 17 Sep 2025 13:43:15 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=konsulko.com; s=google; t=1758141793; x=1758746593; darn=lists.yoctoproject.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to; bh=++mq9rd63s+l6GaTu7iSEMAyPCja/YyeyZ+MyRmdTnI=; b=qFcmvuj56sF0Ed70SeRrASAWREqLqc0/QejxxNMB/+I7og8Im9WKvWeSMAEFXDiRw3 /Q+RmIvZhpUXV+4rJQeDUfTd//NnSbffZ0u5Oc2mn2G7xW9E4cdpyJSx+VMjDRZBBoGI XnySvZgGyQhnovRgA1rBUPYafKCJ3/dDFknTQ= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1758141793; x=1758746593; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=++mq9rd63s+l6GaTu7iSEMAyPCja/YyeyZ+MyRmdTnI=; b=MB2SzppgX7rVSId5gDwGA67xmjTjYBpo4zfiomqRsEaCbW7RQ52tpOWZiRxZwD6tzG vbon+hrUY5v6RzcKbwFfK8VyrexhXyhQoxstd3vvdgAgx5xcBmNupY5Wtnm/MOapCWzg zwESz8KDTI8BP/zPVigsJz7/Py3ga1xYzaPgxVSRhJdS4/zbHPJcaSUch7XaFTOCrugp Woi+gCG/M1csoT1pBDgIKa2UKJxWNL+Wey4A+lO73J6NoQo7YVHVdHSeELHjktAFO+7Q hrzFI1PQsa24AE2sVSabQ6+XNKj03Y1d2L0qFfQ3aFQQzJpgrbJkZ8icNDuAfhY5gjEl mMKQ== X-Gm-Message-State: AOJu0YxgN11oRRRv2ayljzjoqOaXnefP0/KIHQ6jxFjyaKyvUKNxmIjp vCRCVIvtCH2f+sv0QV4MzGG7gJ4KE55JH635m/r6uRK9KKGDkBnYc3o/jaK2psKPb6oIGC0Oz4e Ditt8 X-Gm-Gg: ASbGnctNlzIcas6aM1JQWKTeEV/BYVMJN5niDWzy38FutH6jWo0tzP9q66jsDwrtXVC Y+dgKHrJDpgT8GvmFCbWDlqXCoLOHkpD3oq9ocMlz+pFtRfPf+K+kZMgI8dM5R0MI5Twoss4Q/c XM/2IlHvuKamp9+gNjmafhGNv7zhFFJxZCItkYIW8dIBuyNd20ceBjaGN225iSequgCKuojBFri Sil8CRbEINazaEZXLd1A715oIWlwQlfPYWuENEduXBi4hU5WWM5n4xLhkaF2jrXNtpaei1aeoej U+waXd0GPPmkd40tKCxZdapQSTgm34H2qTfUNdDa/Rjyy5HPtft9f2nu9nrkekdV5/s/iG6bYDz 2zCjybw2M58RKby6WQIpa2uthwoAnq4l34TPPArvZpKuyW4wS0K4sy9E09IM1ciVecJ0cB4XvGE Lw3mBng3NtGUzFKbor X-Google-Smtp-Source: AGHT+IHjAZ68ZVE9b2IduLzDzTGCh9XKAks6dwhCBmrP7GWS6ylBOtjKxSgOONM6c9R2bzFgr+wo4w== X-Received: by 2002:ac8:5acf:0:b0:4b5:146b:4f23 with SMTP id d75a77b69052e-4ba6cc7b534mr39021111cf.72.1758141792780; Wed, 17 Sep 2025 13:43:12 -0700 (PDT) Received: from ghidorah.spiteful.org (107-179-213-3.cpe.teksavvy.com. [107.179.213.3]) by smtp.gmail.com with ESMTPSA id af79cd13be357-836260ccccasm42991385a.10.2025.09.17.13.43.08 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 17 Sep 2025 13:43:09 -0700 (PDT) From: Scott Murray To: yocto-patches@lists.yoctoproject.org Cc: Marta Rybczynska Subject: [meta-security][PATCH 4/5] lynis: homepage update Date: Wed, 17 Sep 2025 16:42:51 -0400 Message-ID: X-Mailer: git-send-email 2.50.1 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 17 Sep 2025 20:43:25 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto-patches/message/2211 From: Michael Opdenacker Signed-off-by: Michael Opdenacker --- recipes-compliance/lynis/lynis_3.1.4.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/recipes-compliance/lynis/lynis_3.1.4.bb b/recipes-compliance/lynis/lynis_3.1.4.bb index 4059662..3546a9e 100644 --- a/recipes-compliance/lynis/lynis_3.1.4.bb +++ b/recipes-compliance/lynis/lynis_3.1.4.bb @@ -2,7 +2,7 @@ # Released under the MIT license (see COPYING.MIT for the terms) SUMMARY = "Lynis is a free and open source security and auditing tool." -HOMEDIR = "https://cisofy.com/" +HOMEDIR = "https://cisofy.com/lynis/" LICENSE = "GPL-3.0-only" LIC_FILES_CHKSUM = "file://LICENSE;md5=3edd6782854304fd11da4975ab9799c1" From patchwork Wed Sep 17 20:42:52 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Scott Murray X-Patchwork-Id: 70420 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 67EEDCAC598 for ; Wed, 17 Sep 2025 20:43:25 +0000 (UTC) Received: from mail-qk1-f180.google.com (mail-qk1-f180.google.com [209.85.222.180]) by mx.groups.io with SMTP id smtpd.web10.34522.1758141797735578865 for ; Wed, 17 Sep 2025 13:43:17 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@konsulko.com header.s=google header.b=HWfBlIJp; spf=pass (domain: konsulko.com, ip: 209.85.222.180, mailfrom: scott.murray@konsulko.com) Received: by mail-qk1-f180.google.com with SMTP id af79cd13be357-829243c1164so28795285a.1 for ; Wed, 17 Sep 2025 13:43:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=konsulko.com; s=google; t=1758141796; x=1758746596; darn=lists.yoctoproject.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to; bh=D5TudJo8Ter3kwWQymie3WEeK6glWLF73/yzFchji48=; b=HWfBlIJpxURsqfaRQ8V09AhQxwlmj+K7WeqIc8VeXgVW65i2Ly9V9OFrOxYeuH0bPf J7oUBhvgAfiSqVE1tD0zns/sjuZAqQcmu89jPHY7pMEAOdkg15F4zCcCyE1WIbhhekF0 LDfN3mNnDPxbLfToe6LsZIXl7QuT2rZNRRvKo= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1758141796; x=1758746596; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=D5TudJo8Ter3kwWQymie3WEeK6glWLF73/yzFchji48=; b=fZW0TBprQ9EeR3PijA7oEK6umkyN+7x7keiXy5VGgsRod5z5XMNMwqNHrMcaXpdeea LB7mdjpZszQN2iDlc8fZsZpgI1WDQ3bOcrWuMokHbWUqhlzRoxeukUb8N96TYD5GIC4B DTF5ou00/BPU++wb0x9nYJyIjb6Ycd2ByX26Rl1acSUQzh3Ig38MHw1rkj1XGXbe9mPZ Ey3hGxKd/9tRvizy7L+LS2wIn4NQFt1DFuR02LIlUzNMOxa4liiFJ1G4O54UlbcFey3G DtOcThKMwOvrLrMxVS+cNYPT8+5Y7vMXUSBSspWgCgzRR9WMdCFz53Cz1II5ghpsJ6Te l+xA== X-Gm-Message-State: AOJu0YxFu68C1R9ywcqf1pwe/wSko0MwA8JKLk/yvOYUpy6HjxaiITqo vxdDDWzaCCXVmjN1h5dLNfqfF0Ai0fg6Cadu44n1aoL8jj/ILG4xiX9oWGr/Djloskj1EW2hNWm 1CotE X-Gm-Gg: ASbGncsBaohU0RuGXC9xwNKyc+RcM4b/QBagfiDC7ixz2Y7HAJJJjCIr7d/K9xK2rJT Oa8J1nBHsVln2Q8dTVT2jXyIIrasxRbetGKy6WdCgV+Y175F4J0LS25FHl9gE07LBOZQ57WOx1K pTxpojFgub198cLj+BHREk99D89HT1NHwHYtdx4AR1Zx66mm7UTC8fnor7aIN5n5a252R6bhiae 5rBG+++IjC6gxx3SS4m2d2jk7NPtZdb+M0BlZ2eGfkKBMlmUend1aHIMvffuT8Q8j3YYSl4VXoF bjXodSko6QJx870IKiu2ogX94w2cbyfFd7945PgdEHYTG8cukyZP+07SBH4PHP0PUU0hy9qm7TQ H8sn0Tyy9qZKd++PCbaHG3buJ8xhVVWWH5FeEf+nzStSdUO2i5Q4Kh5g2TLBoVOpFmGfRGpCCk/ M620VPxjuBvyXgCq8VWHqnQO8D6WA= X-Google-Smtp-Source: AGHT+IGWffDFsNbue3FBihY1SUHR6Kf3B2osigOHx/+eXX6TJaFFKQqiVN3zOytbJ+Av3l7wfzvhDw== X-Received: by 2002:a05:620a:470d:b0:806:e8e6:ed1 with SMTP id af79cd13be357-83110911f0cmr423326385a.40.1758141795892; Wed, 17 Sep 2025 13:43:15 -0700 (PDT) Received: from ghidorah.spiteful.org (107-179-213-3.cpe.teksavvy.com. [107.179.213.3]) by smtp.gmail.com with ESMTPSA id af79cd13be357-836260ccccasm42991385a.10.2025.09.17.13.43.12 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 17 Sep 2025 13:43:13 -0700 (PDT) From: Scott Murray To: yocto-patches@lists.yoctoproject.org Cc: Marta Rybczynska Subject: [meta-security][PATCH 5/5] lynis: update to 3.1.5 Date: Wed, 17 Sep 2025 16:42:52 -0400 Message-ID: <730ebbddc121016151a72d3e0bce61351a0ad365.1758138771.git.scott.murray@konsulko.com> X-Mailer: git-send-email 2.50.1 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 17 Sep 2025 20:43:25 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto-patches/message/2212 From: Michael Opdenacker Tested on master (whinlatter) with beaglebone-yocto New in version 3.1.5 (2025-07-29): https://cisofy.com/changelog/lynis/#315 Added: - Support for OpenWrt - Bitdefender detection on Linux - Detection of openSUSE Tumbleweed-Slowroll Changed: - Corrected detection of service manager SMF - Extended GetHostID function to allow HostID and HostID2 creation on OpenWrt - Check modules also under /usr/lib/modules.d Signed-off-by: Michael Opdenacker --- recipes-compliance/lynis/{lynis_3.1.4.bb => lynis_3.1.5.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename recipes-compliance/lynis/{lynis_3.1.4.bb => lynis_3.1.5.bb} (93%) diff --git a/recipes-compliance/lynis/lynis_3.1.4.bb b/recipes-compliance/lynis/lynis_3.1.5.bb similarity index 93% rename from recipes-compliance/lynis/lynis_3.1.4.bb rename to recipes-compliance/lynis/lynis_3.1.5.bb index 3546a9e..3d1e8b7 100644 --- a/recipes-compliance/lynis/lynis_3.1.4.bb +++ b/recipes-compliance/lynis/lynis_3.1.5.bb @@ -8,7 +8,7 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=3edd6782854304fd11da4975ab9799c1" SRC_URI = "https://downloads.cisofy.com/lynis/${BPN}-${PV}.tar.gz" -SRC_URI[sha256sum] = "c4dbcddd429624d5b2319cd3b19728e18a7885b70b8eb0a9fdd3ca5f0ae28eb6" +SRC_URI[sha256sum] = "8d2c6652ba60116a82514522b666ca77293f4bfc69f1e581028769f7ebb52ba4" #UPSTREAM_CHECK = "https://downloads.cisofy.com/lynis"