From patchwork Fri Nov 21 14:21:15 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Scott Murray X-Patchwork-Id: 75170 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id D0704CFC282 for ; Fri, 21 Nov 2025 14:21:46 +0000 (UTC) Received: from mail-qk1-f170.google.com (mail-qk1-f170.google.com [209.85.222.170]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.12352.1763734897730927908 for ; Fri, 21 Nov 2025 06:21:37 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@konsulko.com header.s=google header.b=hYS6rZls; spf=pass (domain: konsulko.com, ip: 209.85.222.170, mailfrom: scott.murray@konsulko.com) Received: by mail-qk1-f170.google.com with SMTP id af79cd13be357-8b1f2fbaed7so165368085a.2 for ; Fri, 21 Nov 2025 06:21:37 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=konsulko.com; s=google; t=1763734896; x=1764339696; darn=lists.yoctoproject.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=EBn6EmjY1m7kR32rMDQaENNdi6XsTRzw7Sv5Q0KmMB0=; b=hYS6rZlsGrjml7bJag1ApLOZC2GfqF7M3bcXcxJmstiQF0+ZAAWdR1UN6KMN0PPBGA 7FX/1kdLm53ct7n6H4Tzm8XFH9lcx9TxXSeSArKEiGxPDWfq21YRgp73JyTYEzX3QWVB zjWv9gonl4lTkHnZ1hc8JMUcMXP+RnngVxbV0= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1763734896; x=1764339696; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=EBn6EmjY1m7kR32rMDQaENNdi6XsTRzw7Sv5Q0KmMB0=; b=LrD+QSf5MKwkBoI5HA1ESjHoUKEU3yxI3WQ0BqwkS116v2qG2uCtNfsUOHlOkbZ0yK NTlFaqMYB9EC8d1nsBrsNfQ+E2k4SPiQHdrzB++s4NqrU1t1uvOCcTQn5gDvbQtiCaHU 2EjP85zkt68i9+YQBVbmLhc8OVdDQxyPKW9WXk75K+eHbKqwi542XBnX9/edtCvTfsah Rb0Hw1OOKD7HX/AFiUK9dLAPbdDs2bnYJ+437rrsKPsaMpGhozR8S5gRDvGLJ21FLItR 72rnw5i3JbRF4zfbQAjVY+5ivdy6O7ALUWaao2zDKC8WRUtc2j37gACQNsvd2VoBjX+o w6HQ== X-Gm-Message-State: AOJu0YzBombhNDjlNmIe20Db+rGjWFqk5CyyBCBHBsMBIuk1zIeWT2yR f/Y5i/pTZMghIxcUMw7X7so7t1z65T1+PcCsMJkLaRbsuuEV7ziKUC2Q4bZhWLRe/PHZOxtUoGr 3IPuK X-Gm-Gg: ASbGncupX9paEWVu3LFExu3Dsrn6lnNasCrI7ADSJ7i6wEdUipfGfsnEjySNrGzEJK0 cO6/8L6hKswBnCDSwwuAVXjZqiV6skymnB1WjgL8ZDixsSw6xcoBLwMjzSZvOKPFFJ/dTJnwexM OEPs6I8EluD397t440BoaNWMZQUiJRtLgvi+yvhY+l1jlLrrU9G2V+ZBYj/ktIoJusUi2C3XBoZ HQOkumgeDFe/8ZnaglZaRX/+zjh+Mk0qeAljczz8ZBU/1GWGG2hHzLfc7qBURORTRZIEYWdPNGt qo8tMitXRcI4rOxl26Kqb2boouwxZ1Wt/gsOdvlCMPWd/Nf2pd7Bid8dpUzikXqL2bIzDtJk05q a9Pk0Z05KFSj3z0uEVziNtDe/7TOtUI/HLC+6QB1tPmBTLS80ny+FOKxKUChYkEDzs4EWqxYdXt OdfmYn/dZWd3rYDfhm9Jrc7vLpcZNU+LHb6NZh0AfEEMif646qPfGYhatQdASEb+Y= X-Google-Smtp-Source: AGHT+IGlZ7va52Spgm8oV8UtbGitku5AazE6RUt1o1fTZIC3iXmdUdT7EcUaJtyIjJJnCUc+tXmYlQ== X-Received: by 2002:a05:620a:701a:b0:8b2:1568:82ce with SMTP id af79cd13be357-8b33d4680b0mr252576485a.37.1763734896252; Fri, 21 Nov 2025 06:21:36 -0800 (PST) Received: from ghidorah.spiteful.org (107-179-213-3.cpe.teksavvy.com. [107.179.213.3]) by smtp.gmail.com with ESMTPSA id af79cd13be357-8b3295db58fsm374815785a.37.2025.11.21.06.21.35 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 21 Nov 2025 06:21:35 -0800 (PST) From: Scott Murray To: yocto-patches@lists.yoctoproject.org Subject: [meta-security][PATCH 1/6] openscap: upgrade 1.4.1 -> 1.4.2 Date: Fri, 21 Nov 2025 09:21:15 -0500 Message-ID: <15d2fac0bb51590b1276737a9804c634c1a4b417.1763734538.git.scott.murray@konsulko.com> X-Mailer: git-send-email 2.51.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 21 Nov 2025 14:21:46 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto-patches/message/2645 From: Yi Zhao ChangeLog: https://github.com/OpenSCAP/openscap/releases/tag/1.4.2 Disable building on musl as scap-security-guide already does. Signed-off-by: Yi Zhao Signed-off-by: Scott Murray --- .../openscap/{openscap_1.4.1.bb => openscap_1.4.2.bb} | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) rename recipes-compliance/openscap/{openscap_1.4.1.bb => openscap_1.4.2.bb} (97%) diff --git a/recipes-compliance/openscap/openscap_1.4.1.bb b/recipes-compliance/openscap/openscap_1.4.2.bb similarity index 97% rename from recipes-compliance/openscap/openscap_1.4.1.bb rename to recipes-compliance/openscap/openscap_1.4.2.bb index 3e5f00a..f1eb647 100644 --- a/recipes-compliance/openscap/openscap_1.4.1.bb +++ b/recipes-compliance/openscap/openscap_1.4.2.bb @@ -13,7 +13,9 @@ SRC_URI = "git://github.com/OpenSCAP/openscap.git;branch=main;protocol=https \ file://0001-CMakeLists.txt-fix-installation-directory-for-system.patch \ " -SRCREV = "23a8ea3de3c4fd6017db4067675a81287177166e" +SRCREV = "e9b2a41f5796f5ead3d1e2d9df1fb06818a569ac" + +COMPATIBLE_HOST:libc-musl = "null" inherit cmake pkgconfig python3native python3targetconfig perlnative systemd From patchwork Fri Nov 21 14:21:16 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Scott Murray X-Patchwork-Id: 75169 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id D5331CFC287 for ; Fri, 21 Nov 2025 14:21:46 +0000 (UTC) Received: from mail-qk1-f177.google.com (mail-qk1-f177.google.com [209.85.222.177]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.12353.1763734898344751785 for ; Fri, 21 Nov 2025 06:21:38 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@konsulko.com header.s=google header.b=Nd1ajZ3q; spf=pass (domain: konsulko.com, ip: 209.85.222.177, mailfrom: scott.murray@konsulko.com) Received: by mail-qk1-f177.google.com with SMTP id af79cd13be357-8b2148ca40eso279272385a.1 for ; Fri, 21 Nov 2025 06:21:38 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=konsulko.com; s=google; t=1763734897; x=1764339697; darn=lists.yoctoproject.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=RtWHk+s3CFqQFj2hc+MdLVnGFiuxJi916CbHen6WkuM=; b=Nd1ajZ3qCaeCmeR8jZBhplNZIBP0TxjWdUNm6f5bE+VD/8xLGq39Omk82udEvd1B+2 hZJTCaW4T1pqjxeWVMvRANyhnuuzgHMfLxAdzhN0U8GLsnCSRYh++Tf/FgjTGsYvtSaO 3z9smIuwkTQoWULUWoO05z79dYI3zNYx5CPeU= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1763734897; x=1764339697; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=RtWHk+s3CFqQFj2hc+MdLVnGFiuxJi916CbHen6WkuM=; b=CJ44tx/Fh3DUU6gkNWQLJXUUrH0Ye/Kf3cLn7upA5EyHDTMourMQ2fY+N2OAEhle9L w4MCtyamXRURl4y1dcBF6/BQDP7pPjtDFOkDzKflmhECFbpsmnjG4iXyUHg0hci1N4bi XCJ3FCBAKkB8phyUv7HNXt0ujWq928Mmf+JvWeGnWHu9hBgtDB6Vd8yJLIKqJGWGGqsg xhHrl/iOi1zEp9TsbWk7/PUNcOrCyn7a6wtEnSdbVgQlRd2yODmxFpqtR+4DaUgtM2x4 egFUJ8kn36+mUW8dYIczeBSccgq/H/IpmL1MBWQE6y+LU5PDBaRkcp2mf0VPEnS9gw8f bKtw== X-Gm-Message-State: AOJu0YxStpQCwYcuH95JjoZsEURAWh9HYkVoFuRudLJPWg28JwLxqqQT uNJiTKYoraEC7bgO7BzJfUwgkN9erQPqlhENNOrf5L49OVX3HJAF+rUCi3j95N68KAZWInSxRVM /AfLw X-Gm-Gg: ASbGncsLJswWYE1SQURUZXbm894VjCSssNY+nChjL513KJ50QoU375L8EXWTYNGeje7 6XlBKYagN11b1CJ/8IVRiPN0xMdUxeJxtvpLFGpBA0FI1pQDM5mI0OsyFIXMyQd00c1OM3wgKLb /mCV076E0a5Z/vHfZGbBuMwzt4CaH05TxkAiurT2VWg2F2VkBgrxLNAvBvTtk/cQgis86GMdtT5 ooVV2sKXXEie3q0+QzdBXvgC2m9DwdJzGnCwbg6DCd0V572I7VGd6H513tprt4lFrOcHxDuxDmd 3ni5+u4cdEd1t5Q28OTdGz2LUXiGNmx1pa447dvAWDi4BJtIcJZKXWl68Pq+6w/6koBf9NBPYxe /omYAU6AGJz4WnFmajkMRJx9t4jEcPvOrlZefhMxmGIUsfIRx0BId643Ac/L5IT6oe3x+J6y8dl lopx2gTIbIhisyoHBne8CH9u5KJi/jz5IWjXwk9FLOJNzoKlJOedfVlG2RUkLu5A8= X-Google-Smtp-Source: AGHT+IEMa+dPhcmbBuCU8sFKftGivwVBGLrd6lfSULXFM+lmznHGbRoZgadh49t2MCwxEvNz696y/A== X-Received: by 2002:a05:620a:444b:b0:89f:19e:46fa with SMTP id af79cd13be357-8b33d1f9394mr219526585a.20.1763734896980; Fri, 21 Nov 2025 06:21:36 -0800 (PST) Received: from ghidorah.spiteful.org (107-179-213-3.cpe.teksavvy.com. [107.179.213.3]) by smtp.gmail.com with ESMTPSA id af79cd13be357-8b3295db58fsm374815785a.37.2025.11.21.06.21.36 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 21 Nov 2025 06:21:36 -0800 (PST) From: Scott Murray To: yocto-patches@lists.yoctoproject.org Subject: [meta-security][PATCH 2/6] scap-security-guide: upgrade 0.1.77 -> 0.1.78 Date: Fri, 21 Nov 2025 09:21:16 -0500 Message-ID: <37b9e32763e15986790c6bbfa447a25d1b5f5f23.1763734538.git.scott.murray@konsulko.com> X-Mailer: git-send-email 2.51.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 21 Nov 2025 14:21:46 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto-patches/message/2646 From: Yi Zhao ChangeLog: https://github.com/ComplianceAsCode/content/releases/tag/v0.1.78 Signed-off-by: Yi Zhao Signed-off-by: Scott Murray --- ...p-security-guide_0.1.77.bb => scap-security-guide_0.1.78.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename recipes-compliance/scap-security-guide/{scap-security-guide_0.1.77.bb => scap-security-guide_0.1.78.bb} (96%) diff --git a/recipes-compliance/scap-security-guide/scap-security-guide_0.1.77.bb b/recipes-compliance/scap-security-guide/scap-security-guide_0.1.78.bb similarity index 96% rename from recipes-compliance/scap-security-guide/scap-security-guide_0.1.77.bb rename to recipes-compliance/scap-security-guide/scap-security-guide_0.1.78.bb index cdd22a5..8489218 100644 --- a/recipes-compliance/scap-security-guide/scap-security-guide_0.1.77.bb +++ b/recipes-compliance/scap-security-guide/scap-security-guide_0.1.78.bb @@ -6,7 +6,7 @@ HOME_URL = "https://www.open-scap.org/security-policies/scap-security-guide/" LIC_FILES_CHKSUM = "file://LICENSE;md5=9bfa86579213cb4c6adaffface6b2820" LICENSE = "BSD-3-Clause" -SRCREV = "c1e1ba121d32b3c319b0e25ee2993b62386e5857" +SRCREV = "f7d794851971087db77d4be8eeb716944a1aae21" SRC_URI = "git://github.com/ComplianceAsCode/content.git;nobranch=1;protocol=https \ file://run_eval.sh \ " From patchwork Fri Nov 21 14:21:17 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Scott Murray X-Patchwork-Id: 75171 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id DEBF9CFC28B for ; Fri, 21 Nov 2025 14:21:46 +0000 (UTC) Received: from mail-qk1-f179.google.com (mail-qk1-f179.google.com [209.85.222.179]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.12354.1763734899334835404 for ; Fri, 21 Nov 2025 06:21:39 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@konsulko.com header.s=google header.b=jKMwA4I8; spf=pass (domain: konsulko.com, ip: 209.85.222.179, mailfrom: scott.murray@konsulko.com) Received: by mail-qk1-f179.google.com with SMTP id af79cd13be357-8b23b6d9f11so198082485a.3 for ; Fri, 21 Nov 2025 06:21:39 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=konsulko.com; s=google; t=1763734898; x=1764339698; darn=lists.yoctoproject.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=YAe1n76s9q0EyS8Z/T7bkn9WuApOznG1EzoExZL/Uac=; b=jKMwA4I8PEv9cSew3jqszhhP62grN4n1XPwg7Bky8g5wi08p/uZ1fTWKB9PWXFlpT9 FTaOplPZXSdU4NNpZv/eDY0pGwOaNOFQ4B7HwDuTNSGY9AOZxC04q7qznLUXOkLW681S XqcbpMM8kAyVSvVMwv04d1hWTkY3IIf5b//po= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1763734898; x=1764339698; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=YAe1n76s9q0EyS8Z/T7bkn9WuApOznG1EzoExZL/Uac=; b=LtRSSsqOrdlB8CVcB8N9FIscGFe4finigdxAm7OcB3mCFllaK0UlGeULTHeSevQiHV T4uXqkVIKWJb25xZuYkx0qsBLk2Nn3tG9uqWGiMYX9GB9iXueIyriYROESazFj2xnY0/ FCid5oTzw/ISDwRCwWNirqTLTW3hYnG/JlPOvgHoQhwDhTSRDevyePfVQEHcIpA2dRvo Za4xtm8LCvV6EROnDl35Qe9IjQ5C3N4sPQzgmGVc5x3R4/GZPaESS0jjdmpOx15oQh6z OcJbbsvmTqrFo0TF4/rglIQML7MslXyMGUAw6IB6FbAFunEy6Abe+cwmD5lattMC3iIZ u07g== X-Gm-Message-State: AOJu0Yy+4HN+M8e0RJTVC+EtSrf2wA14qdd5Cjvi5RkBm4ijl3k1YER6 jaVpTGU0m+E03TotB6kg5uTYONklTamJ7nwa56hwcv+tCfrFKAJflABOUH4Ejsk9laKYpuv1h6j /1ZFM X-Gm-Gg: ASbGncsMHcLSgwF4VVQi8niKX2m62EsZpLzDkjQ34a6p/qyCkodLmdT/npRP2rIArri mnyUPLjmDroG9rjOtLEdUcsiiwkJpq9cyPOpCrRfqyciDC558lgxCwEq9+G+xDzcNrL2Fm6X84w uMkmV9PCJTybKGdGan2mssAffUKUjVyHp9RcB21M9kj5Hf1qtLlCLIZvEpf1H4AfA6Id6TTTgft vXSjxpdcz1A2tDw+/Y29CPhGFdJHblIe+3avn+hAvhgaTQtUtxghOgqY+wCJnkZiPbBJSnxy5iL SN3xPytMCiafgEazFQoRhsAjf2EIp/vC2mjRuDBzqGAQtSjG51APV0u8sbcAwofkLuEtk4GciyU 6D1d2xXvzY9O0GEY1SjHJ0P8bPNwd0seKdUdDa8EawOJRw+aFS8wNvotVO4QxH+KxZKPAh3Bd5i 1lHmTNUkZ7MBSSCeSRznvpILde1UIwY8Byv8NxlE0ZJ4b2n44wsTiMfOit/+rUOVNULa9KhEs31 g== X-Google-Smtp-Source: AGHT+IHgLhL8UJ621b95RrVe8VFEdD9x8XM8uVnmd3c8ajZXhkY3Qc2PSOrrkelXK851hL+4ktR4gA== X-Received: by 2002:a05:620a:29c1:b0:89f:5f63:68eb with SMTP id af79cd13be357-8b33d1b2967mr255281885a.13.1763734898045; Fri, 21 Nov 2025 06:21:38 -0800 (PST) Received: from ghidorah.spiteful.org (107-179-213-3.cpe.teksavvy.com. [107.179.213.3]) by smtp.gmail.com with ESMTPSA id af79cd13be357-8b3295db58fsm374815785a.37.2025.11.21.06.21.37 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 21 Nov 2025 06:21:37 -0800 (PST) From: Scott Murray To: yocto-patches@lists.yoctoproject.org Subject: [meta-security][PATCH 3/6] libgssglue: update HOMEPAGE Date: Fri, 21 Nov 2025 09:21:17 -0500 Message-ID: <3b67d414b350301088b2c982e6963b867ca93370.1763734538.git.scott.murray@konsulko.com> X-Mailer: git-send-email 2.51.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 21 Nov 2025 14:21:46 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto-patches/message/2647 From: Yi Zhao The original homepage is outdated. Signed-off-by: Yi Zhao Signed-off-by: Scott Murray --- recipes-security/libgssglue/libgssglue_0.9.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/recipes-security/libgssglue/libgssglue_0.9.bb b/recipes-security/libgssglue/libgssglue_0.9.bb index 532227a..3bc37cd 100644 --- a/recipes-security/libgssglue/libgssglue_0.9.bb +++ b/recipes-security/libgssglue/libgssglue_0.9.bb @@ -5,7 +5,7 @@ mechanisms itself; instead it calls gssapi routines in other libraries, \ depending on the mechanism. \ " -HOMEPAGE = "http://www.citi.umich.edu/projects/nfsv4/linux/" +HOMEPAGE = "https://gitlab.com/gsasl/libgssglue" SECTION = "libs" LICENSE = "BSD-3-Clause | HPND" From patchwork Fri Nov 21 14:21:18 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Scott Murray X-Patchwork-Id: 75168 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id DE935CFC28A for ; Fri, 21 Nov 2025 14:21:46 +0000 (UTC) Received: from mail-qk1-f172.google.com (mail-qk1-f172.google.com [209.85.222.172]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.12355.1763734900479965345 for ; Fri, 21 Nov 2025 06:21:40 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@konsulko.com header.s=google header.b=BJGbvbf4; spf=pass (domain: konsulko.com, ip: 209.85.222.172, mailfrom: scott.murray@konsulko.com) Received: by mail-qk1-f172.google.com with SMTP id af79cd13be357-8b2d6df99c5so329703585a.1 for ; Fri, 21 Nov 2025 06:21:40 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=konsulko.com; s=google; t=1763734899; x=1764339699; darn=lists.yoctoproject.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=jZSWx7XX9Lz8BNYwwPnsWa11WEO6WkI51tpN3nGM1aQ=; b=BJGbvbf4bbDJE3cEd7HhxWXFZk/BitNiLVS4trk91x2uONBWi7wTVCSLhM8hPnkQcX LBrESymvtqPYUGhmc68QOd4TBtQowvOWNpRrgUcluDBcamX0Oep0bSFyRUX4oR4V/K2q NOZoWGUoX/xWozp++zjI8oBmHmaU+9CdBThGY= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1763734899; x=1764339699; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=jZSWx7XX9Lz8BNYwwPnsWa11WEO6WkI51tpN3nGM1aQ=; b=LxNtKEkYiXrK9VGll+Qjt5xcEtLUoQ01mU5GsqmY4UOmT7M3+u97zHUw9iTSwaRV4i YbE0qjwkwAFBZj7/AyoC3SeLCJjGm6fRz0n2c50Z3Hfl+ZISAOA58BXG0uMKfht2uD29 t23keTkRA+APlcq8owhdrQqY3Zs8lszBS6QKBP2pxHrXi2p5atpUWPZVjWbosXqILauF 8PbouiWX+9QLGyzAZT+AvKuoG1og8OQHx7j3HdyEHK86k1yRBFRjF8ZsRUG5ADMslV3r Mbyn4TH7kuHaEOn7EqYxJPgNkXRbLDdXVj3b8RqUYhhTG1N8UR2OdpYI9m91fb5locZE 2JoQ== X-Gm-Message-State: AOJu0YwSHYwuJVRu95v7+0AU+e3fLuvmiZEOa/j5Gg7w7QtXaADQcgl7 K7mFtl1NE9VzqYTV6jm8I7IoayLT54dED9+KGPPG19PHhug6QUtInATWjBgRWfcnU7+oT8wPZcc sjyQM X-Gm-Gg: ASbGnct5gdeHXl/IWI/RguRCJolO1zKWrLAo8ikV5wXtATsky/HxUIRLs023ScXfk/p wLDoZC4oRfofdEhPjeNKazeUwt9UE3WQzgvJ/HusTm5samh+qoNeh7neVa2k+gD3C6u7T5u5lTS 0c568UnF00yKv9i+JD2D9zfTBm2Vppooz8DG0t0eYtK3Hh0rbU1bKe6W5wVDKPNp14L3y30wWRf 1Ffu0lHZEJrQCIovHL1cjgdVrRVECdagvyFOzbZ2lEjjKq5TKk8YANYaroXCk7D2fUESHbW1Scp UwhXwdXCjAATVkZXsX0RhRMWzBpp1HpsleqMgEW3q4Tg/x405eAXc0tqlwOBB29+mp/lFj2MWqq zfpZgdwUsdbRlk4fdyclzg+X1QAXrzuslY3hARdwpqIbaZcY0x+3T7JWU5aJaSJyna7xMaWMm3j ptiWsfNrF077fzPrb6tAne5GohNBz/FUai0d9P7kXoG67/JkDz1LENpo55TZ9G1Ug= X-Google-Smtp-Source: AGHT+IE7wevm313jH+lwJiADp9HlOpr7zPVsaVpugEAH9tMyrfwcyaVRlhCZM6aSdz1yjj9b+RCSJw== X-Received: by 2002:a05:620a:4151:b0:8b2:e669:9888 with SMTP id af79cd13be357-8b32ab885e6mr807782985a.3.1763734898940; Fri, 21 Nov 2025 06:21:38 -0800 (PST) Received: from ghidorah.spiteful.org (107-179-213-3.cpe.teksavvy.com. [107.179.213.3]) by smtp.gmail.com with ESMTPSA id af79cd13be357-8b3295db58fsm374815785a.37.2025.11.21.06.21.38 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 21 Nov 2025 06:21:38 -0800 (PST) From: Scott Murray To: yocto-patches@lists.yoctoproject.org Subject: [meta-security][PATCH 4/6] openscap: fixes Date: Fri, 21 Nov 2025 09:21:18 -0500 Message-ID: <3b0ee6a7b6dc0df85b237ada0a292905f13553c7.1763734538.git.scott.murray@konsulko.com> X-Mailer: git-send-email 2.51.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 21 Nov 2025 14:21:46 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto-patches/message/2648 From: Louis Rannou Fixes: - typo in the RDEPENDS class-target override ('-' instead of ':') - typo SUMARRY -> SUMMARY Signed-off-by: Louis Rannou Signed-off-by: Scott Murray --- recipes-compliance/openscap/openscap_1.4.2.bb | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/recipes-compliance/openscap/openscap_1.4.2.bb b/recipes-compliance/openscap/openscap_1.4.2.bb index f1eb647..da1dbbb 100644 --- a/recipes-compliance/openscap/openscap_1.4.2.bb +++ b/recipes-compliance/openscap/openscap_1.4.2.bb @@ -1,7 +1,7 @@ # Copyright (C) 2017 - 2023 Armin Kuster # Released under the MIT license (see COPYING.MIT for the terms) -SUMARRY = "NIST Certified SCAP 1.2 toolkit" +SUMMARY = "NIST Certified SCAP 1.2 toolkit" HOME_URL = "https://www.open-scap.org/tools/openscap-base/" LIC_FILES_CHKSUM = "file://COPYING;md5=fbc093901857fcd118f065f900982c24" LICENSE = "LGPL-2.1-only" @@ -66,5 +66,5 @@ FILES:${PN} += "${PYTHON_SITEPACKAGES_DIR}" RDEPENDS:${PN} = "libxml2 python3-core libgcc bash" -RDEPENDS:${PN}-class-target = "libxml2 python3-core libgcc bash os-release" +RDEPENDS:${PN}:class-target = "libxml2 python3-core libgcc bash os-release" BBCLASSEXTEND = "native" From patchwork Fri Nov 21 14:21:19 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Scott Murray X-Patchwork-Id: 75172 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id EB022CFC28D for ; Fri, 21 Nov 2025 14:21:46 +0000 (UTC) Received: from mail-qk1-f181.google.com (mail-qk1-f181.google.com [209.85.222.181]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.12417.1763734901848096696 for ; Fri, 21 Nov 2025 06:21:42 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@konsulko.com header.s=google header.b=QR5iHAqw; spf=pass (domain: konsulko.com, ip: 209.85.222.181, mailfrom: scott.murray@konsulko.com) Received: by mail-qk1-f181.google.com with SMTP id af79cd13be357-8b28f983333so200567885a.3 for ; Fri, 21 Nov 2025 06:21:41 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=konsulko.com; s=google; t=1763734900; x=1764339700; darn=lists.yoctoproject.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=DzfI47SUGQHv3ZpELw+NUMMpo9Vc/aWTPLyEO3xbYZk=; b=QR5iHAqwzogholgmkXwp/v4d9Za5wexlieAaMJaqcLrmF37/lblzmmBw4oRDt22pjB ZG0FLw3jnKTyPMQ+80Vl2syH6lvxTU7WNU/Q5NRrTnjmCtm/Yz3mYKASIVUIfFccrCf+ EqL3ipAhwyhCQSCJYT1VhxGeiWNEVjIO2gpoc= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1763734900; x=1764339700; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=DzfI47SUGQHv3ZpELw+NUMMpo9Vc/aWTPLyEO3xbYZk=; b=A9LDOC3l//b+p6uU0r0bTZ7bipjzX4TJidUgU59Yoxk5BUK5Utrho0tMM1lhS4TlwA iC7mHBoKa7xWqmEfBjAdLvRPsao4SUHwz36XXLZYhD/JO5nKbbSfOAA1J0nsGcCgJbcK qCW8+AuRDY8JZxbUkA27ccMlFTbNV5a+eeXu2pDku1pmeWDW+wVZa7T43u87xgyXAFCL NreYa5oSEWUR64c4Q3G1dAXmghzHf3WS90U9uzQs9NrlGvOKMMix8CdZx6LTfrP1Oy5f yAA/eimOAD3OjtzYPVPaGwJM8V9jmAY66DlIPLkc2IfBQBGIbhsoce6MKafTDIgRq0dw Ujyg== X-Gm-Message-State: AOJu0Yy/+J7SiC1Sgv6BnGCmnlKGTKJmDJ63Pip6HHdfpbWAn301gPtW nvNjHB8CyUxmTjmWqDt8+GBx9hPFpU61CgI0arZJfgYCbcLlwXJ+tfGLimmN5906AI6WQMmybig 2Bjjs X-Gm-Gg: ASbGncu3TXZRIi/a1HvomtADXlgz8vBWpol1fQJd9+PavS5KTpmtGq/URWRYQudf3ff xBxMtabGnejrMIZvUZyln/GsjeemdriO/69jzL/FRBP6FrUHhl+f57fm4/SIir1255UcyJeaAvu VmVH2Z58h+obP8cxHn6M0X4Q3hRlUAQKprurDOxO9LGZDTsgK6d4Q+3Vwiy7qGqtC6nuJda4knz KnLxOUm6/k97+Vlh5vDhdfBpCnV8uDEbVnZHHaiVHL5LJpL4T9GeHT4cAcMV0W5EDYJebf7B1IC BPPisO6AXO7bPJ48EXjtzxSoHtLlmqDf2ZumHmugjpfwJuQlJ8ScsUWorDmmTU7E24FxG2dCe94 8JVuag+FNZJ4irfrTuNxpTYc8kEC48pjnhff9L4AYdTuKkWoluWBOVOTWZxGkluPi2LA2ltB9BU F4L3AORnU+1S6XsvXKPLbVep/P1v/fgNQ/Sy0nblobGnHxeQ+fhDKFZSMsWhNrW/8= X-Google-Smtp-Source: AGHT+IGdLELo45lAMw9ZlY5DLMQBSlL5jQaBbCyUKnVoWfk+KuxBZ3ECdu7+HRBKKfWqwDWc0bs5tA== X-Received: by 2002:a05:620a:2a10:b0:80e:3af7:7a0c with SMTP id af79cd13be357-8b33d274bf9mr234685285a.43.1763734900202; Fri, 21 Nov 2025 06:21:40 -0800 (PST) Received: from ghidorah.spiteful.org (107-179-213-3.cpe.teksavvy.com. [107.179.213.3]) by smtp.gmail.com with ESMTPSA id af79cd13be357-8b3295db58fsm374815785a.37.2025.11.21.06.21.39 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 21 Nov 2025 06:21:39 -0800 (PST) From: Scott Murray To: yocto-patches@lists.yoctoproject.org Subject: [meta-security][PATCH 5/6] oeqa: openscap test Date: Fri, 21 Nov 2025 09:21:19 -0500 Message-ID: X-Mailer: git-send-email 2.51.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 21 Nov 2025 14:21:46 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto-patches/message/2649 From: Louis Rannou Add basic openscap test. This looks for an existing profile and run a basic scan. Openscap scans return 1 in case of failure, 0 in case of success and 2 when a vulnerability has been found. As this does not aim to check openscap reports, 2 is considered as a successful test. Signed-off-by: Louis Rannou (added to test image) Signed-off-by: Scott Murray --- lib/oeqa/runtime/cases/openscap.py | 48 ++++++++++++++++++++++ recipes-core/images/security-test-image.bb | 2 +- 2 files changed, 49 insertions(+), 1 deletion(-) create mode 100644 lib/oeqa/runtime/cases/openscap.py diff --git a/lib/oeqa/runtime/cases/openscap.py b/lib/oeqa/runtime/cases/openscap.py new file mode 100644 index 0000000..7012b6b --- /dev/null +++ b/lib/oeqa/runtime/cases/openscap.py @@ -0,0 +1,48 @@ +# SPDX-License-Identifier: MIT +# + +from oeqa.runtime.case import OERuntimeTestCase +from oeqa.core.decorator.depends import OETestDepends +from oeqa.runtime.decorator.package import OEHasPackage + + +class OpenscapTest(OERuntimeTestCase): + + @OEHasPackage(["openscap"]) + @OETestDepends(["ssh.SSHTest.test_ssh"]) + def test_openscap_basic(self): + status, output = self.target.run("oscap -V") + msg = ( + "`oscap -V` command does not work as expected. " + "Status and output:%s and %s" % (status, output) + ) + self.assertEqual(status, 0, msg=msg) + + @OEHasPackage(["openscap"]) + @OEHasPackage(["scap-security-guide"]) + @OETestDepends(["ssh.SSHTest.test_ssh"]) + def test_openscap_scan(self): + SCAP_SOURCE = "/usr/share/xml/scap/ssg/content/ssg-openembedded-xccdf.xml" + CPE_DICT = "/usr/share/xml/scap/ssg/content/ssg-openembedded-cpe-dictionary.xml" + + cmd = "oscap info --profiles %s" % SCAP_SOURCE + status, output = self.target.run(cmd) + msg = ( + "oscap info` command does not work as expected.\n" + "Command: %s\n" % cmd + "Status and output:%s and %s" % (status, output) + ) + self.assertEqual(status, 0, msg=msg) + + for p in output.split("\n"): + profile = p.split(":")[0] + cmd = "oscap xccdf eval --cpe %s --profile %s %s" % ( + CPE_DICT, + profile, + SCAP_SOURCE, + ) + status, output = self.target.run(cmd) + msg = ( + "`oscap xccdf eval` does not work as expected.\n" + "Command: %s\n" % cmd + "Status and output:%s and %s" % (status, output) + ) + self.assertNotEqual(status, 1, msg=msg) diff --git a/recipes-core/images/security-test-image.bb b/recipes-core/images/security-test-image.bb index 81f69dd..e7e354e 100644 --- a/recipes-core/images/security-test-image.bb +++ b/recipes-core/images/security-test-image.bb @@ -12,7 +12,7 @@ IMAGE_INSTALL:append = "\ ${@bb.utils.contains("BBFILE_COLLECTIONS", "integrity", "packagegroup-ima-evm-utils","", d)} \ " -TEST_SUITES = "ssh ping apparmor clamav samhain sssd checksec smack suricata aide firejail" +TEST_SUITES = "ssh ping apparmor clamav openscap samhain sssd checksec smack suricata aide firejail" TEST_SUITES:append = " parsec tpm2 swtpm ima" INSTALL_CLAMAV_CVD = "1" From patchwork Fri Nov 21 14:21:20 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Scott Murray X-Patchwork-Id: 75167 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id BB815CFC279 for ; Fri, 21 Nov 2025 14:21:46 +0000 (UTC) Received: from mail-qk1-f182.google.com (mail-qk1-f182.google.com [209.85.222.182]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.12419.1763734902387864212 for ; Fri, 21 Nov 2025 06:21:42 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@konsulko.com header.s=google header.b=GgIJKjUz; spf=pass (domain: konsulko.com, ip: 209.85.222.182, mailfrom: scott.murray@konsulko.com) Received: by mail-qk1-f182.google.com with SMTP id af79cd13be357-8b29ff9d18cso202768185a.3 for ; Fri, 21 Nov 2025 06:21:42 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=konsulko.com; s=google; t=1763734901; x=1764339701; darn=lists.yoctoproject.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=Tvj9SdEPTVAHjiY5kMNb4gprxmv9eMJMsqrlwMTp63g=; b=GgIJKjUzjUq04X5h86RjX2DDFllUBzXERhIzhLZ0cNsaawMXny+iM0WtUaicPXAhzH S7Z+clS9+xaJ1lZOtMvIXxL6eseYZbB3poWBVhHyTq1STxjvEuod5b8Y7fVQCaBdo9L6 P2IDc09hI8qenOeOLO0TDKBm+QelZ7J9pKVgw= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1763734901; x=1764339701; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=Tvj9SdEPTVAHjiY5kMNb4gprxmv9eMJMsqrlwMTp63g=; b=vF8xFh5ahE9SXYRd/+/BlwH821P07q/mxJuJ7gfKdeqwSIfwhZNtQfF/8gB1aD/QEa UKYUh8HskZLs2yO8yDchVD7q7yKXL6uvTuRIKX2St9FRg9X8GgcEfRbgzjrPlQp904Qo npHHxqw7ioez51A6zNMgmwDkW2Cjx0jz5UKlzUFAAVv2xTAYg2KRhN/BR0glH1XV9Ygg aC2/M83TAZQSq2omA0njUZwp+vKYnXL0vTtXpVaoTBKrQ4sc26DKcx9z96LUtV7gYvQ+ lpswbWPNdoFhkwaRsdEj/02xKHY++C3NHmEPPEUVttVfRfwF5wQMEzyfg8Tk6DABpC1O jepQ== X-Gm-Message-State: AOJu0Yx/iVYmk3mXmaDdGMT0wm7nxaGlLSZ6eG1nbi5qbmABtUVYBnA+ kK30V2N1y3vbdaS7oyPv3phryNtFBvqrT80G3jdSX2WKCRvUNu1eEL+fM2yl26nAM+LSVbHr7UQ HWQ86 X-Gm-Gg: ASbGnctJqVNYL6Ca9eDhCpsyn7OUjHCR/RvL/DS/32KTVRVoOIctLvOpIKHE7RpRYmP 0yao+H8XK8aJ9Hnbz1msETnDF+M9VaUBqiDoZYdIa7tBZP3AUmSvFlas/HobtcK8yDh3qKgIZqI Cmm8ldxZI3jm2FPH5H72o78p/UhA3ESDuNGIs7Jo0jUrKR3VhQ9+LTd7o5O/Ba6e/v6ulSXjdW1 QV2o6BzWmL/ebDz3R2OAYCDBpoV9ElLoQ/XESCvaazKFCkOsNR5DpvwBiJZP1uxKI92BSvlRv9X oNUozPG/zdd299gIcgtOpnqMecQBqxLbNI7YA/qwJQgJ70YkFZwjGta+ZR6mb6PsYg2MPWM4wNe Tj4Gp+SvO6wfir1jDgiU8+SXVDFj2Z7nYrsKb6SbHcQnCrZVRHuZrYsXwG17yL3hOioGk22Wlba fX30X+Khj5fUcTyh4BJV7Yw4kM6cc+rTXt4K0cPNxd3LGdjHbJNRwpjttGF2hseIA= X-Google-Smtp-Source: AGHT+IE2016yM1CFKFGl6Bp/aWGSVcE+4NIUlQ//QRH9q7r0kXmTX5lRHpu3R8b9VeRNt17Pj48pfg== X-Received: by 2002:a05:620a:8e84:b0:8b2:ed93:c96a with SMTP id af79cd13be357-8b33d269bdemr178966385a.50.1763734900950; Fri, 21 Nov 2025 06:21:40 -0800 (PST) Received: from ghidorah.spiteful.org (107-179-213-3.cpe.teksavvy.com. [107.179.213.3]) by smtp.gmail.com with ESMTPSA id af79cd13be357-8b3295db58fsm374815785a.37.2025.11.21.06.21.40 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 21 Nov 2025 06:21:40 -0800 (PST) From: Scott Murray To: yocto-patches@lists.yoctoproject.org Subject: [meta-security][PATCH 6/6] libgssglue: add UPSTREAM_CHECK_GITTAGREGEX Date: Fri, 21 Nov 2025 09:21:20 -0500 Message-ID: X-Mailer: git-send-email 2.51.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 21 Nov 2025 14:21:46 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto-patches/message/2650 From: Yi Zhao Add UPSTREAM_CHECK_GITTAGREGEX to check the correct latest stable verison. Before the patch: $ devtool latest-version libgssglue INFO: Current version: 0.9 INFO: Latest version: 011 INFO: Latest version's commit: af30789052a8cc5f86b5b0c8fd4758c7ba1505ff After the patch: $ devtool latest-version libgssglue INFO: Current version: 0.9 INFO: Latest version: 0.9 INFO: Latest version's commit: ada76bdaec665f70505f0b3aefe871b873e7c4b6 Signed-off-by: Yi Zhao Signed-off-by: Scott Murray --- recipes-security/libgssglue/libgssglue_0.9.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/recipes-security/libgssglue/libgssglue_0.9.bb b/recipes-security/libgssglue/libgssglue_0.9.bb index 3bc37cd..0952ed1 100644 --- a/recipes-security/libgssglue/libgssglue_0.9.bb +++ b/recipes-security/libgssglue/libgssglue_0.9.bb @@ -26,6 +26,8 @@ SRC_URI = "git://gitlab.com/gsasl/libgssglue.git;protocol=https;branch=master \ " SRCREV = "ada76bdaec665f70505f0b3aefe871b873e7c4b6" +UPSTREAM_CHECK_GITTAGREGEX = "libgssglue-(?P\d+(\.\d+)+)" + inherit autotools-brokensep ptest do_configure:prepend() {