From patchwork Fri Dec 15 01:35:06 2023 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: akuster808 X-Patchwork-Id: 36306 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 4E5D7C4332F for ; Fri, 15 Dec 2023 01:35:14 +0000 (UTC) Received: from mail-yw1-f171.google.com (mail-yw1-f171.google.com [209.85.128.171]) by mx.groups.io with SMTP id smtpd.web11.49984.1702604111225814460 for ; Thu, 14 Dec 2023 17:35:11 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20230601 header.b=LN6FgHiP; spf=pass (domain: gmail.com, ip: 209.85.128.171, mailfrom: akuster808@gmail.com) Received: by mail-yw1-f171.google.com with SMTP id 00721157ae682-5df49931b4eso1596847b3.0 for ; Thu, 14 Dec 2023 17:35:11 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1702604110; x=1703208910; darn=lists.yoctoproject.org; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc:subject:date:message-id:reply-to; bh=fxkOXCEEHk2og5Fxg/Pw4b2SYBNohGC2FBZhND57Yew=; b=LN6FgHiPUqmxcwNz/LSVBWb2SS45fHABOC3IK8DNnW52rusMZQ2y7c9HD03NS0NsiA FS0/ODpasm8zk78K3H3u9768Kw/DtygHB7mQHIQefBcPoyyZMvwnUlI/mFPGS/TqE229 NuVGkJ1EJH/Nb3qnvsYiqJfP4wxGjBGH7nrggxn/Tskp7aAWv8yynIj8+gMCdAJ7eghY oh79nyfiS+sB/MqH5ZH6hc6oWIk3C7bAqIVha0uwBYRk7exeCOGmkKorq4xjUjAGv6B3 knA+O3vyYp8krEq9aqK4sm6XNKrmg/BaKVpXc/cZUvWqmIHWIIrEnXZj34EzXd/cLBCg fCHg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1702604110; x=1703208910; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=fxkOXCEEHk2og5Fxg/Pw4b2SYBNohGC2FBZhND57Yew=; b=bu+5UB/5TunxZuJg8reCAbzdQok2M/OKehqj4n56hLOW1zTTPmdE6bzHTeCLkNpRUB IdTrIC1zE4ZL4/P5XEw5g+mJNkRjSqq2fXgI4ZmZOuE1V/6RPUmlBfh331qecSp60UEu DPviW3oyxq2KvYGEd595SvOxRLqQbs8z9UxNQ/kO2SmW9HmUisOm44OJ72X2jKHZZ5SB PKLqM2DEjce8xH9deKMK9qQFNRu9XUSyYNpEaaDoHOiUkD5YBt2u4AXJiy0bkw2WtJhY sbMGDZaiU4kbSyKIVPCH97Ur/OsudeKi4Nfjk5oGgZRNlc2i5FGIfbtHpcAh84Qf7M4h P8PQ== X-Gm-Message-State: AOJu0YwTpoy1KrEPcNSem0rIerPwE6+Yi0MHMo4EtBYD0lySCJEbNo5m Zm5tKfoMLfcudKSBjgGPoleBE6IJmX5sEQ== X-Google-Smtp-Source: AGHT+IEwOt/vlG06eolIJCzMKBqoBaaSSB89cj9cMkXGkNw1WxzsJAaZuRuukTn+x0Nkt2qfRFzg5A== X-Received: by 2002:a81:7156:0:b0:5d8:e267:78e5 with SMTP id m83-20020a817156000000b005d8e26778e5mr9372573ywc.61.1702604110118; Thu, 14 Dec 2023 17:35:10 -0800 (PST) Received: from keaua.attlocal.net ([2600:1700:9190:ba10:9770:3d29:ab6:9b6b]) by smtp.gmail.com with ESMTPSA id m9-20020a81d249000000b005d72c7c1241sm5895879ywl.112.2023.12.14.17.35.09 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 14 Dec 2023 17:35:09 -0800 (PST) From: Armin Kuster To: yocto@lists.yoctoproject.org Cc: Dawid Dabrowski Subject: [meta-security][PATCH 1/3] libhoth recipe update Date: Thu, 14 Dec 2023 20:35:06 -0500 Message-Id: <20231215013508.4166843-1-akuster808@gmail.com> X-Mailer: git-send-email 2.34.1 MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 15 Dec 2023 01:35:14 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto/message/61898 From: Dawid Dabrowski Changelog: Dawid Dabrowski Add support for payload update protocol for generic Titan images. Nick Nooney Add BUILD rules to support using libhoth with external tools. Yoan Andreev Add spi passthrough enable and disable commands. Add arm_coordinated_reset. Signed-off-by: Armin Kuster --- meta-tpm/recipes-tpm1/hoth/libhoth_git.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-tpm/recipes-tpm1/hoth/libhoth_git.bb b/meta-tpm/recipes-tpm1/hoth/libhoth_git.bb index 5c7305c..7ba64f5 100644 --- a/meta-tpm/recipes-tpm1/hoth/libhoth_git.bb +++ b/meta-tpm/recipes-tpm1/hoth/libhoth_git.bb @@ -7,7 +7,7 @@ LICENSE = "Apache-2.0" LIC_FILES_CHKSUM = "file://LICENSE;md5=3b83ef96387f14655fc854ddc3c6bd57" SRC_URI = "git://github.com/google/libhoth;protocol=https;branch=main" -SRCREV = "0e3eec6937d35c602ce497444eda05f3c465b5a8" +SRCREV = "e520f8fa637589324ec56d34f26a48a8162a250c" DEPENDS += "libusb1" From patchwork Fri Dec 15 01:35:07 2023 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: akuster808 X-Patchwork-Id: 36307 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 501CEC3DA6E for ; Fri, 15 Dec 2023 01:35:14 +0000 (UTC) Received: from mail-yb1-f181.google.com (mail-yb1-f181.google.com [209.85.219.181]) by mx.groups.io with SMTP id smtpd.web10.49765.1702604112164450820 for ; Thu, 14 Dec 2023 17:35:12 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20230601 header.b=KXJ/+y6s; spf=pass (domain: gmail.com, ip: 209.85.219.181, mailfrom: akuster808@gmail.com) Received: by mail-yb1-f181.google.com with SMTP id 3f1490d57ef6-d9caf5cc948so113187276.0 for ; Thu, 14 Dec 2023 17:35:12 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1702604111; x=1703208911; darn=lists.yoctoproject.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=ht6FNWl4l6mdSNaV/N+QXO7soN4QzkWp2NYC3Ov6Los=; b=KXJ/+y6saFSPcmP+j0VC+v8jPSHdqY/YqbpOSRFXxyQVlp0kbkvne8DVpmYl14JFtY +ZXuHjImExpbp/f4favW5gyTcWIT5zigWe+jTJFMTtYUuuhFYHB15f2RcRK3pplurGgt 1L4fdhskI2/dScu85QV6x9RlEPbu1v/pmbQ6+1ZYSbIpuwTciSoXx3EBKq2mZn1padPN oeI7gDe/pSK7p+JVx8j4FSMziIUKSkyhljB1fApnz7gcJ5qTtF3GKdTR1Puyk5uEUzF8 Ho/DizbAx7fDhqTsr2tqZ8uXNmNfsfdLGMLRIOtNumQtX/ty0ZWj9oKdtZcPZ5SdS0ar IZvQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1702604111; x=1703208911; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=ht6FNWl4l6mdSNaV/N+QXO7soN4QzkWp2NYC3Ov6Los=; b=MdodwykR0NShazpODXN5s4e5jdPUQDDijENKtnDGfXjwJ+nLVCHuaW2uLjSNFor5MN ngDK1UmieM3c2T29rHiRmZuwfEIb3Cz0ZTr/HpRardgJ+6toXgvDzpT0O+rxIQt+pfKW g/iC+hh0ERaoYXO+CUOsmh03xGu1W2W0ewwDD6I38xiWTj4tUOcvuCjHia7ky/FKUcnr VxcQbRp86RYRcN+fUwFtU0kRGvqRjx2XKhLduQAGL8Fm7sECbGRM4WZJjheQr55qfCEi SmXR0P1HrRr4tfyWAk9cLyGutQ3Z9SmlnphCxxQYvNRQXOha0YYvIi464Ugj1x9t/zgd s4Nw== X-Gm-Message-State: AOJu0YwWEHPTBwyVRCrVyaB/1BpWRelnEOxnm+umh2dvJfm+VCv3Y7Xi 7FS2mWGSFRv9+dLedS6by9kxi2uWJ4/3Iw== X-Google-Smtp-Source: AGHT+IEYEyr0eqP4+5fwnToewmO3aMcb1sFhU6cHhxaG3pXsEYCEv5GqZp8U56e48oWNlrfUOpSaxw== X-Received: by 2002:a0d:f486:0:b0:5d7:1940:7d85 with SMTP id d128-20020a0df486000000b005d719407d85mr8502053ywf.92.1702604111100; Thu, 14 Dec 2023 17:35:11 -0800 (PST) Received: from keaua.attlocal.net ([2600:1700:9190:ba10:9770:3d29:ab6:9b6b]) by smtp.gmail.com with ESMTPSA id m9-20020a81d249000000b005d72c7c1241sm5895879ywl.112.2023.12.14.17.35.10 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 14 Dec 2023 17:35:10 -0800 (PST) From: Armin Kuster To: yocto@lists.yoctoproject.org Subject: [meta-security][PATCH 2/3] python3-privacyidea: Update to 3.9.1 Date: Thu, 14 Dec 2023 20:35:07 -0500 Message-Id: <20231215013508.4166843-2-akuster808@gmail.com> X-Mailer: git-send-email 2.34.1 In-Reply-To: <20231215013508.4166843-1-akuster808@gmail.com> References: <20231215013508.4166843-1-akuster808@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 15 Dec 2023 01:35:14 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto/message/61899 Signed-off-by: Armin Kuster --- ...{python3-privacyidea_3.9.bb => python3-privacyidea_3.9.1.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename dynamic-layers/meta-python/recipes-security/mfa/{python3-privacyidea_3.9.bb => python3-privacyidea_3.9.1.bb} (96%) diff --git a/dynamic-layers/meta-python/recipes-security/mfa/python3-privacyidea_3.9.bb b/dynamic-layers/meta-python/recipes-security/mfa/python3-privacyidea_3.9.1.bb similarity index 96% rename from dynamic-layers/meta-python/recipes-security/mfa/python3-privacyidea_3.9.bb rename to dynamic-layers/meta-python/recipes-security/mfa/python3-privacyidea_3.9.1.bb index 2f0ac3a..8268345 100644 --- a/dynamic-layers/meta-python/recipes-security/mfa/python3-privacyidea_3.9.bb +++ b/dynamic-layers/meta-python/recipes-security/mfa/python3-privacyidea_3.9.1.bb @@ -6,7 +6,7 @@ LICENSE = "AGPL-3.0-only" LIC_FILES_CHKSUM = "file://LICENSE;md5=c0acfa7a8a03b718abee9135bc1a1c55" PYPI_PACKAGE = "privacyIDEA" -SRC_URI[sha256sum] = "1dce02789ee0a639c5518ab95e254823ca1b47aeb1aae754ec11c70d4248f38e" +SRC_URI[sha256sum] = "7c70feb44980a3fd7501457777a1ec30e73541e54d3b31f2b9b5ab6cd73cff4f" inherit pypi setuptools3 From patchwork Fri Dec 15 01:35:08 2023 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: akuster808 X-Patchwork-Id: 36308 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 5E991C4167D for ; Fri, 15 Dec 2023 01:35:14 +0000 (UTC) Received: from mail-yw1-f174.google.com (mail-yw1-f174.google.com [209.85.128.174]) by mx.groups.io with SMTP id smtpd.web11.49985.1702604113084673194 for ; Thu, 14 Dec 2023 17:35:13 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20230601 header.b=Za2L8sc7; spf=pass (domain: gmail.com, ip: 209.85.128.174, mailfrom: akuster808@gmail.com) Received: by mail-yw1-f174.google.com with SMTP id 00721157ae682-5d7a47d06eeso1412677b3.1 for ; Thu, 14 Dec 2023 17:35:12 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1702604112; x=1703208912; darn=lists.yoctoproject.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=/YrnQUru5mRatPSy6sKmu0tX3glE5YV9eTcI2PR9hYw=; b=Za2L8sc7v/XLPt7gw3qbT4PTp6qj608nN1BEq2m7MPMB7FQMxjw+fAxcR8mmPE35nj TUGQyqj8NqRXJpGZMo4+MQ2ilHnv4v71hlI6Tun0OppQBuagZJOVXX/4V07Pa632EN8p kVrgXNwsxndaiViiTuXNvGPoucNYpcvLvOJH6EiqkbBgZDzfIm3H8oXxJ1cn9s7TNDIn UEO4TM2XzDt8CVeiFXHcLveup138N3co2bfLyo2bwYQ4pDReHCtcj+YRDuY7Ds0M2Q64 OhVK8sbPnwOGsW7LUYzh5zip6pUp6ogZ0bV2rDVwQLN9mO5HfZRJflWEWjAmB1LZ3BwQ HGBQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1702604112; x=1703208912; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=/YrnQUru5mRatPSy6sKmu0tX3glE5YV9eTcI2PR9hYw=; b=GBkxNYm3PH17IPa4ZDw+GczUcB83oISLdNzp5ayhX3/5ryUnsZtpv+8OwiwSN2IMco uOjq4282posXWS+CHmz/0pyvJm/F/uqJYwNBel5JdnAqOxek0BOG70dPgBwAANLukVIY UVEbxUCEyoY2SZULBMPtdGWQfQWoADmYinkyN53YLcJ4SKbQYzCKEn6Fuj57zWCZtTeU 8wzDrWv0vlJJJVaxdYI1prRC0/WRSFOdEgYzqey3paPDJLXKJ9RQJKdHm/JUT9GrLzkv R/9HCo+BGIN8o8vJZ6acAy/3VWEa27OfqWDNnNcyelMV0D14DWLzvxv1lEl9osM0/yl+ 1jdA== X-Gm-Message-State: AOJu0YxObko3Du3bZWlCpyeNi8YrbuRq2ll7PK1FCe5NISbJ3IEjulQW cQtXoi5z/uWtswJVHydz+jk82whXn2GqZA== X-Google-Smtp-Source: AGHT+IFOA0T1vj1lBum8CItvoK+dMYZ0GOVy2MNG0jdIg0i1WigMUEqmwux0TLq5C3iaq3qPtjjWuw== X-Received: by 2002:a0d:d9cc:0:b0:5e3:3bcc:c344 with SMTP id b195-20020a0dd9cc000000b005e33bccc344mr2495673ywe.33.1702604112030; Thu, 14 Dec 2023 17:35:12 -0800 (PST) Received: from keaua.attlocal.net ([2600:1700:9190:ba10:9770:3d29:ab6:9b6b]) by smtp.gmail.com with ESMTPSA id m9-20020a81d249000000b005d72c7c1241sm5895879ywl.112.2023.12.14.17.35.11 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 14 Dec 2023 17:35:11 -0800 (PST) From: Armin Kuster To: yocto@lists.yoctoproject.org Subject: [meta-security][PATCH 3/3] lynis: Update SRC_URI to improve updater Date: Thu, 14 Dec 2023 20:35:08 -0500 Message-Id: <20231215013508.4166843-3-akuster808@gmail.com> X-Mailer: git-send-email 2.34.1 In-Reply-To: <20231215013508.4166843-1-akuster808@gmail.com> References: <20231215013508.4166843-1-akuster808@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 15 Dec 2023 01:35:14 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto/message/61900 Signed-off-by: Armin Kuster --- recipes-compliance/lynis/lynis_3.0.9.bb | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/recipes-compliance/lynis/lynis_3.0.9.bb b/recipes-compliance/lynis/lynis_3.0.9.bb index 8c796c0..5b5864c 100644 --- a/recipes-compliance/lynis/lynis_3.0.9.bb +++ b/recipes-compliance/lynis/lynis_3.0.9.bb @@ -6,12 +6,14 @@ HOMEDIR = "https://cisofy.com/" LICENSE = "GPL-3.0-only" LIC_FILES_CHKSUM = "file://LICENSE;md5=3edd6782854304fd11da4975ab9799c1" -SRC_URI = "https://cisofy.com/files/${BPN}-${PV}.tar.gz \ +SRC_URI = "https://downloads.cisofy.com/lynis/${BPN}-${PV}.tar.gz \ file://0001-osdetection-add-OpenEmbedded-and-Poky.patch \ " SRC_URI[sha256sum] = "f394df7d20391fb76e975ae88f3eba1da05ac9c4945e2c7f709326e185e17025" +#UPSTREAM_CHECK = "https://downloads.cisofy.com/lynis" + S = "${WORKDIR}/${BPN}" inherit autotools-brokensep