linux/meta-security.git/meta-tpm, branch mickledore

tpm2-tss: correct CVE product

2023-03-26T20:02:15+00:00

Currently CVE-2023-22745 does not show up in kirkstone CVE report. This fixes that. Products from yocto's CVE check NVD database: sqlite> select * from products where product like "tpm2%"; CVE-2017-7524|tpm2-tools_project|tpm2.0-tools|||1.1.0|<= CVE-2020-24455|tpm2_software_stack_project|tpm2_software_stack|||2.4.3|< CVE-2020-24455|tpm2_software_stack_project|tpm2_software_stack|3.0.0|>=|3.0.1|< CVE-2021-3565|tpm2-tools_project|tpm2-tools|5.1|>=|5.1.1|< CVE-2021-3565|tpm2-tools_project|tpm2-tools|||4.3.2|< CVE-2023-22745|tpm2_software_stack_project|tpm2_software_stack|||4.0.0|<= Signed-off-by: Peter Marko Signed-off-by: Armin Kuster

meta-tpm/layer: lower the priority from 10 to 6

2023-03-20T20:27:24+00:00

The priority change on sumo version without any description. Since then is very hard to add in other layers a new version of any recipe on this layer with such priority so these patch reverts the priority back to 6. Signed-off-by: Jose Quaresma Signed-off-by: Armin Kuster

tpm2-abrmd: upgrade 2.4.1 -> 3.0.0

2023-02-22T20:22:36+00:00

Changelog: https://github.com/tpm2-software/tpm2-abrmd/blob/3.0.0/CHANGELOG.md Signed-off-by: Petr Gotthard Signed-off-by: Armin Kuster

tpm2-pkcs11: upgrade 1.8.0 -> 1.9.0

2023-02-22T20:22:36+00:00

Changelog: https://github.com/tpm2-software/tpm2-pkcs11/blob/1.9.0/CHANGELOG.md Signed-off-by: Petr Gotthard Signed-off-by: Armin Kuster

tpm2-tools: upgrade 5.3 -> 5.5

2023-02-22T20:22:36+00:00

Changelog: https://github.com/tpm2-software/tpm2-tools/blob/5.5/docs/CHANGELOG.md Signed-off-by: Petr Gotthard Signed-off-by: Armin Kuster

tpm2-tss: upgrade 3.2.0 -> 4.0.1

2023-02-22T20:22:36+00:00

Changelog: https://github.com/tpm2-software/tpm2-tss/blob/4.0.1/CHANGELOG.md Signed-off-by: Petr Gotthard Signed-off-by: Armin Kuster

linux-yocto: drop version from bbappends

2023-02-06T12:32:41+00:00

These bbappends apply to multiple kernel versions so no need to make them version dependent. Fixes recipe parsing when using meta-security master branch on kirkstone. In our custom layer we set layer compatibility for kirkstone and I understand why meta-security upstream would not want to do that: LAYERSERIES_COMPAT_security-layer += 'kirkstone' LAYERSERIES_COMPAT_parsec-layer += 'kirkstone' LAYERSERIES_COMPAT_tpm-layer += 'kirkstone' While I work towards supporting also yocto master branch and newer releases than kirkstone, I would appreciate if I would not have to branch off layers over minor details like this. Signed-off-by: Mikko Rapeli Signed-off-by: Armin Kuster

meta-tpm: bump linux-yocto to 6.x kernel

2023-01-28T15:17:03+00:00

Signed-off-by: Armin Kuster

layer.conf: update LAYERSERIES_COMPAT for mickledore

2023-01-04T15:32:16+00:00

* oe-core switched to mickedore in: https://git.openembedded.org/openembedded-core/commit/?id=57239d66b933c4313cf331d35d13ec2d0661c38f Signed-off-by: Martin Jansa Signed-off-by: Armin Kuster

tpm2-tools: update to 5.3

2022-11-19T19:01:41+00:00