Mirror of git.yoctoproject.org/meta-security.git https://git.enea.com/cgit/linux/meta-security.git/atom?h=master 2025-11-12T19:17:55+00:00 2025-11-12T19:17:55+00:00 hongxu hongxu.jia@eng.windriver.com 2025-10-24T02:56:13+00:00 urn:sha1:b639be32ad038d49091ddc1ae1aaf3e2c7e5bbc5 Follow Yocto policy to add CVE tag to CVE patch Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Robert Yang <liezhi.yang@windriver.com> 2024-12-27T16:28:23+00:00 Mikko Rapeli mikko.rapeli@linaro.org 2024-12-20T14:04:39+00:00 urn:sha1:69b8567e9784a277017f1b5ea164c3e7bbebf6ea ecryptfs-utils userspace daemon fails to start if kernel module is not available on target. Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org> Signed-off-by: Armin Kuster <akuster808@gmail.com> 2024-06-17T12:25:25+00:00 Changqing Li changqing.li@windriver.com 2024-05-28T05:44:06+00:00 urn:sha1:ceb47a8a39c4cec612db63fab573124960f52a8d * WORKDIR -> UNPACKDIR transition * Switch away from S = WORKDIR Signed-off-by: Changqing Li <changqing.li@windriver.com> [Fixed up the smack changes due to prior patch] Signed-off-by: Armin Kuster <akuster808@gmail.com> 2023-06-25T19:05:28+00:00 Martin Jansa Martin.Jansa@gmail.com 2023-06-22T14:35:51+00:00 urn:sha1:df8a1eb479170277de354b73af31601eb6f583be * as reported by openembedded-core/scripts/contrib/patchreview.py -v . Malformed Signed-off-by 'Signed-Off-By:' (./recipes-mac/AppArmor/files/crosscompile_perl_bindings.patch) Malformed Signed-off-by 'Signed-Off-By:' (./recipes-mac/AppArmor/files/disable_perl_h_check.patch) Missing Upstream-Status tag (./recipes-compliance/scap-security-guide/files/0001-standard.profile-expand-checks.patch) Malformed Upstream-Status 'Malformed Upstream-Status in patch ./recipes-ids/samhain/files/samhain-not-run-ptest-on-host.patch Malformed Upstream-Status 'Malformed Upstream-Status in patch ./recipes-ids/samhain/files/samhain-pid-path.patch Malformed Upstream-Status 'Malformed Upstream-Status in patch ./recipes-ids/suricata/files/fixup.patch Malformed Upstream-Status 'Malformed Upstream-Status in patch ./recipes-scanners/clamav/files/fix2_libcurl_check.patch Malformed Upstream-Status 'Malformed Upstream-Status in patch ./recipes-security/ecryptfs-utils/files/ecryptfs-utils-CVE-2016-6224.patch Malformed Upstream-Status 'Malformed Upstream-Status in patch ./recipes-security/isic/files/configure_fix.patch Malformed Upstream-Status 'Malformed Upstream-Status in patch ./recipes-security/krill/files/panic_workaround.patch Malformed Upstream-Status 'Malformed Upstream-Status in patch ./recipes-security/opendnssec/files/libdns_conf_fix.patch Malformed Upstream-Status 'Malformed Upstream-Status in patch ./recipes-security/opendnssec/files/libxml2_conf.patch Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> 2023-06-25T19:05:28+00:00 Martin Jansa Martin.Jansa@gmail.com 2023-06-21T10:42:15+00:00 urn:sha1:ea97a23986d26f9d2b96c157964fdfdf5079ec6c There is new patch-status QA check in oe-core: https://git.openembedded.org/openembedded-core/commit/?id=76a685bfcf927593eac67157762a53259089ea8a This is temporary work around just to hide _many_ warnings from optional patch-status (if you add it to WARN_QA). This just added Upstream-Status: Pending everywhere without actually investigating what's the proper status. This is just to hide current QA warnings and to catch new .patch files being added without Upstream-Status, but the number of Pending patches is now terrible: 0 (0%) meta-parsec N/A (0%) meta-hardening 1 (100%) meta-integrity 15 (68%) meta-tpm 27 (61%) meta-security Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> 2022-08-02T20:45:26+00:00 Armin Kuster akuster808@gmail.com 2022-07-29T23:04:50+00:00 urn:sha1:522c08e98d0190bb72325e355a947b783fb77fac Signed-off-by: Armin Kuster <akuster808@gmail.com> 2022-04-02T18:21:42+00:00 Ashish Sharma asharma@mvista.com 2022-03-23T19:41:56+00:00 urn:sha1:c56ae450c93a1383a1ce800a32a6ef2c3fbbae1c WARNING: selinux-sandbox-3.3-r0 do_package_qa: QA Issue: Recipe LICENSE includes obsolete licenses GPLv2+ [obsolete-license] \ WARNING: selinux-gui-3.3-r0 do_package_qa: QA Issue: Recipe LICENSE includes obsolete licenses GPLv2+ [obsolete-license] \ WARNING: semodule-utils-3.3-r0.1 do_package_qa: QA Issue: Recipe LICENSE includes obsolete licenses GPLv2+ [obsolete-license] \ WARNING: selinux-dbus-3.3-r0 do_package_qa: QA Issue: Recipe LICENSE includes obsolete licenses GPLv2+ [obsolete-license] \ WARNING: libwhisker2-perl-2.5-r0 do_package_qa: QA Issue: Recipe LICENSE includes obsolete licenses GPL-1.0+ [obsolete-license] \ WARNING: lib-perl-0.63-r0 do_package_qa: QA Issue: Recipe LICENSE includes obsolete licenses GPL-1.0+ [obsolete-license] \ WARNING: libhtp-0.5.39-r0 do_package_qa: QA Issue: Recipe LICENSE includes obsolete licenses GPLv2 [obsolete-license] \ ... Signed-off-by: Ashish Sharma <asharma@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> 2021-08-01T15:47:08+00:00 Armin Kuster akuster808@gmail.com 2021-07-29T23:31:12+00:00 urn:sha1:11a67b861af74d59ccfd609d6d943e966ccff731 Signed-off-by: Armin Kuster <akuster808@gmail.com> 2020-10-10T23:21:48+00:00 Armin Kuster akuster808@gmail.com 2020-10-07T19:29:21+00:00 urn:sha1:b3f10d2285fa68da210c03aaecb21a739a1afd96 Signed-off-by: Armin Kuster <akuster808@gmail.com> 2020-02-02T16:38:43+00:00 Armin Kuster akuster808@gmail.com 2020-02-02T16:38:43+00:00 urn:sha1:2732ab1467cd3d4af4262b773f181022fba00778 Signed-off-by: Armin Kuster <akuster808@gmail.com>