[meta-security][PATCH 0/7] Assorted updates 04/15

Scott Murray <[email protected]>
Newsgroups org.yoctoproject.lists.yocto-patches
Message-ID <[email protected]>
This patch series rolls up the contributed patches from the past few
weeks, barring the suricata 8.04 update that will need some rework for
Lua 5.5.  These changes are queued on the master-next branch if you
would like to check them out to test yourself.  I intend to merge these
to master branch at end of day tomorrow (Eastern Time, April 16) unless
there are objections.

Note that there are the following known issues atm:
* parsec-service currently fails to build with an error in the
  cryptoki crate.  This was likely triggered by the upgrade to
  Rust 1.94.x in oe-core.
* Including python3-privacyidea in an image results in packaging
  conflicts between python3-cryptography and python3-pyrad that
  need to be addressed in those recipes in oe-core/meta-python.

I hope to get these addressed in the next week or so.

Scott


Changes:

Haiqing Bai (1):
  isic: fix RDEPNEDS typo

Khem Raj (1):
  wic: wic need to be moved to files/wic within the layer to be
    found/used

Peter Marko (2):
  libtpms: fix build with glibc 2.43
  tpm2-pkcs11: fix build failure

Yi Zhao (2):
  scap-security-guide: upgrade 0.1.78 -> 0.1.80
  openscap: upgrade 1.4.2 -> 1.4.3

Zhang Peng (1):
  meta-security: fix incorrect HOMEPAGE variable names

 .../wic}/beaglebone-yocto-verity.wks.in       |  0
 .../systemd-bootdisk-dmverity-hash.wks.in     |  0
 .../wic}/systemd-bootdisk-dmverity.wks.in     |  0
 ...ilation-error-in-TPMLIB_GetPlaintext.patch | 34 +++++++++++++++++++
 meta-tpm/recipes-tpm/libtpm/libtpms_0.10.0.bb |  4 ++-
 ...eturn-NULL-for-twist-on-auth-failure.patch | 28 +++++++++++++++
 .../tpm2-pkcs11/tpm2-pkcs11_1.9.1.bb          |  1 +
 recipes-compliance/lynis/lynis_3.1.6.bb       |  2 +-
 .../{openscap_1.4.2.bb => openscap_1.4.3.bb}  |  4 +--
 ....1.78.bb => scap-security-guide_0.1.80.bb} |  4 +--
 recipes-scanners/arpwatch/arpwatch_3.3.bb     |  2 +-
 recipes-security/glome/glome_git.bb           |  2 +-
 .../google-authenticator-libpam_1.09.bb       |  2 +-
 recipes-security/isic/isic_0.07.bb            |  2 +-
 14 files changed, 75 insertions(+), 10 deletions(-)
 rename {wic => files/wic}/beaglebone-yocto-verity.wks.in (100%)
 rename {wic => files/wic}/systemd-bootdisk-dmverity-hash.wks.in (100%)
 rename {wic => files/wic}/systemd-bootdisk-dmverity.wks.in (100%)
 create mode 100644 meta-tpm/recipes-tpm/libtpm/libtpms/0001-Fix-a-compilation-error-in-TPMLIB_GetPlaintext.patch
 create mode 100644 meta-tpm/recipes-tpm2/tpm2-pkcs11/files/0001-src-lib-tpm-return-NULL-for-twist-on-auth-failure.patch
 rename recipes-compliance/openscap/{openscap_1.4.2.bb => openscap_1.4.3.bb} (96%)
 rename recipes-compliance/scap-security-guide/{scap-security-guide_0.1.78.bb => scap-security-guide_0.1.80.bb} (93%)

-- 
2.53.0
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.