diff options
author | Patrick Williams <patrick@stwcx.xyz> | 2021-12-14 02:05:19 +0300 |
---|---|---|
committer | Patrick Williams <patrick@stwcx.xyz> | 2021-12-14 02:54:57 +0300 |
commit | 89e2f5ce97de5668f541afea23027dc76b3157ac (patch) | |
tree | 69f87e2f5e4d4daad86748d968032e0a4618806d /meta-security/meta-security-compliance/recipes-openscap/scap-security-guide | |
parent | 5422fe603bd670fc3a94c03f9f119d5aaeca13c3 (diff) | |
download | openbmc-89e2f5ce97de5668f541afea23027dc76b3157ac.tar.xz |
subtree updates
meta-raspberrypi: 9eb4879cf4..1584bddcf3:
Alexandru Costache (3):
conf/machine: Add Pi Zero 2 Wifi 64bit yocto machine
linux-firmware-rpidistro: Package bcm43436 and bcm43436s firmware
linux-raspberrypi: Bump to 5.10.78
Andrei Gherzan (11):
raspberrypi-firmware: Bump to 20211007
linux-raspberrypi: Bump 5.10 to 5.10.76
linux-raspberrypi: Drop 5.4
README.md: Fix docs and minor tweaks
docs: Bump copyright year
README.md: Fix sponsor table
README.md: Fix sponsor table take two
docs: Fix RtD build
docs: Add module dependency/requirement for RtD
docs: Advertise raspberrypi0-2w-64 supported machine
Update references to Yocto mailing list
Khem Raj (1):
linux-firmware-rpidistro: Use bullseye branch
Marcel Hamer (1):
recipes: Update SRC_URI protocols for github
Zygmunt Krynicki (1):
rpi-config: warn on config.txt lines exceeding 80 bytes
poky: 80f2b56ad8..f286eefb27:
Ahmed Hossam (1):
go.bbclass: Allow adding parameters to go ldflags
Alejandro Hernandez Samaniego (1):
baremetal-image: Fix do_image dependencies
Alexander Kanavin (11):
lttng-tools: replace ad hoc ptest fixup with upstream fixes
ca-certificates: update 20210119 -> 20211016
ovmf: update 202105 -> 202108
linux-firmware: upgrade 20210818 -> 20210919
wireless-regdb: upgrade 2021.07.14 -> 2021.08.28
waffle: convert to git, website is down
stress-ng: convert to git, website is down
tzdata: upgrade 2021a -> 2021d
tzdata: update 2021d -> 2021e
linux-firmware: upgrade 20210919 -> 20211027
libpcre/libpcre2: correct SRC_URI
Alexandre Belloni (1):
oeqa/selftest/sstatetests: fix typo ware -> were
Andrei Gherzan (1):
qemu: Define libnfs PACKAGECONFIG
Andrej Valek (1):
busybox: 1.34.0 -> 1.34.1
Andres Beltran (3):
buildhistory: Fix package output files for SDKs
create-spdx: Set the Organization field via a variable
create-spdx: Fix key errors in do_create_runtime_spdx
Anuj Mittal (2):
glibc-version.inc: remove branch= from GLIBC_GIT_URI
poky.conf: bump version for 3.4.1 honister release
Bruce Ashfield (23):
linux-yocto/5.14: scripts/gcc-plugins: consistently use HOSTCC
linux-yocto/5.14: update to v5.14.8
linux-yocto/5.14: bsp/qemuarm*-gfx: use virtio graphics
linux-yocto/5.10: update to v5.10.69
linux-yocto/5.10: update to v5.10.70
linux-yocto/5.14: update to v5.14.9
kernel-yocto: don't apply config metadata patches twice
linux-yocto/5.14: revert: scripts/gcc-plugins: consistently use HOSTCC
linux-yocto/5.10: update to v5.10.73
linux-yocto/5.14: update to v5.14.12
linux-yocto/5.14: update to v5.14.13
linux-yocto/5.10: update to v5.10.74
linux-yocto/5.14: common-pc: enable CONFIG_ATA_PIIX as built-in
linux-yocto/5.14: update to v5.14.14
linux-yocto/5.10: update to v5.10.75
linux-yocto/5.14: update to v5.14.15
linux-yocto/5.10: update to v5.10.76
linux-yocto-rt/5.10: update to -rt54
strace: fix build against 5.15 kernel/kernel-headers
linux-yocto/5.14: update to v5.14.16
linux-yocto/5.10: update to v5.10.77
linux-yocto/5.14: update to v5.14.17
linux-yocto/5.10: update to v5.10.78
Changqing Li (1):
lttng-ust: fix do_compile failure for arm32 with DEBUG_BUILD enabled
Chen Qi (4):
bitbake: tests/fetch.py: fix premirror test cases
bitbake: tests/fetch.py: add test case to ensure downloadfilename is used for premirror
bitbake: fetch2: fix downloadfilename issue with premirror
avahi: update CVE id fixed by local-ping.patch
Claus Stovgaard (1):
cups: Fix missing installation of cups sysv init scripts
Daiane Angolini (2):
machine/qemuarm*: Fix UBOOT_MACHINE value
ref-manual: Update how to set a useradd password
Fred Liu (1):
glibc: Drop libcidn package
Hsia-Jun(Randy) Li (1):
meson: install native file in sdk
Jon Mason (9):
oeqa/manual: Fix no longer valid URLs
bitbake: bitbake:toaster:test: Update SSTATE URL
yocto-bsp/poky: replace http with https for URLs
bitbake: bitbake: replace http with https for URLs
documentation: update sources mirror URL
documentation: replace http with https for URLs
documentation: use YOCTO_DL_URL
dev-manual: remove errant /
scripts/lib/wic/help.py: Update Fedora Kickstart URLs
Jose Quaresma (16):
gstreamer1.0-plugins-base: 1.18.4 -> 1.18.5
gstreamer1.0-plugins-good: 1.18.4 -> 1.18.5
gstreamer1.0-plugins-bad: 1.18.4 -> 1.18.5
gstreamer1.0-plugins-ugly: 1.18.4 -> 1.18.5
gstreamer1.0-rtsp-server: 1.18.4 -> 1.18.5
gstreamer1.0-libav: 1.18.4 -> 1.18.5
gstreamer1.0-vaapi: 1.18.4 -> 1.18.5
gstreamer1.0-omx: 1.18.4 -> 1.18.5
gstreamer1.0-python: 1.18.4 -> 1.18.5
gst-devtools: 1.18.4 -> 1.18.5
gst-examples: 1.18.4 -> 1.18.5
gstreamer1.0: 1.18.4 -> 1.18.5
patch.bbclass: when the patch fails show more info on the fatal error
sstate: fix touching files inside pseudo
bitbake: cooker: check if upstream hash equivalence server is available
sstate: another fix for touching files inside pseudo
Joshua Watt (4):
bitbake: async: Close sync client event loop
bitbake: hashserv: Add tests for diverging reports
bitbake: hashserv: Fix diverging report race condition
classes/populate_sdk_base: Add setscene tasks
Kai Kang (3):
squashfs-tools: fix CVE-2021-41072
squashfs-tools: follow-up fix for CVE-2021-41072
convert-srcuri.py: use regex to check space in SRC_URI
Khem Raj (2):
mesa: Enable svga for x86 only
kernel-devsrc: Add vdso.lds and other build files for riscv64 as well
Kiran Surendran (1):
ffmpeg: fix CVE-2021-38114
Konrad Weihmann (1):
libical: fix append in DEPENDS
Manuel Leonhardt (2):
sstate: Account for reserved characters when shortening sstate filenames
dpkg: Install dkpg-perl scripts to versioned perl directory
Michael Opdenacker (21):
manuals: font fixes
ref-manual: document DEBUG_PREFIX_MAP
manuals: replace "apt-get" by "apt"
Makefile: allow epub and latexpdf outputs to use diagrams from SVG sources
conf.py: use PNG first in EPUB output
overview-manual: SVG diagram for the git workflow
docs: add "make all" to build old types of docs (html, epub, pdf) at once
manuals: introduce 'yocto_sstate' extlink
overview-manual: simplify expression
dev-manual: correct NO_GENERIC_LICENSE section title
dev-manual: warn about license compliance issues when static libraries are used
ref-manual: document BUILD_REPRODUCIBLE_BINARIES
ref-manual: document "reproducible_build" class and SOURCE_DATE_EPOCH
test-manual: how to enable reproducible builds
ref-manual: document TOOLCHAIN_HOST_TASK_ESDK
releases.rst: fix release number for 3.3.3
docs: poky.yaml: updates for 3.4
ref-manual: update system requirements
manuals: releases.rst: move gatesgarth to outdated releases section
updates for release 3.3.4
documentation: conf.py: fix version of bitbake objects.inv
Oleksandr Kravchuk (1):
python3: update to 3.9.7
Pablo Saavedra Rodi?o (1):
mesa: upgrade 21.2.1 -> 21.2.4
Paul Eggleton (7):
migration-3.4: tweak overrides change section
ref-manual: remove meta class
poky.yaml: add lz4 and zstd to essential host packages
migration-3.4: add additional migration info
migration: tweak introduction section
poky.yaml: fix lz4 package name for older Ubuntu versions
migration-3.4: add some extra packaging notes
Peter Kjellerstedt (5):
meson.bblcass: Remove empty egg-info directories before running meson
qemu.inc: Remove empty egg-info directories before running meson
libx11: Update LICENSE to better reflect reality
libx11-compose-data: Update LICENSE to better reflect reality
insane.bbclass: Add a check for directories that are expected to be empty
Quentin Schulz (1):
conf: update for release 3.4
Ralph Siemsen (1):
tar: filter CVEs using vendor name
Randy Li (1):
meson: move lang args to the right section
Richard Purdie (54):
sstatesig: Only apply group/other permissions to pseudo files
rpm: Deterministically set vendor macro entry
abi_version/sstate: Bump to fix rpm corruption issues
multilib: Avoid sysroot race issues when multilib enabled
bitbake: knotty/uihelper: Show setscene task progress in summary output
bitbake: bitbake-worker: Handle pseudo shutdown in Ctrl+C case
poky.conf: Update tested distros list with recent changes
bitbake: hashserv: Improve behaviour for better determinism/sstate reuse
poky.conf: Bump version for 3.4 honister release
build-appliance-image: Update to honister head revision
bitbake: bitbake: Bump to version 1.52.0
build-appliance-image: Update to honister head revision
bitbake: test/fetch: Update urls to match upstream branch name changes
bitbake: fetch2/perforce: Fix typo
bitbake: tests/runqueue: Ensure hashserv exits before deleting files
bitbake: bitbake-worker: Add debug when unpickle fails
libxml2: Use python3targetconfig to fix reproducibility issue
libnewt: Use python3targetconfig to fix reproducibility issue
linux-yocto-dev: Ensure DEPENDS matches recent 5.14 kernel changes
oeqa: Update cleanup code to wait for hashserv exit
bootchart2: Don't compile python modules
bitbake: fetch/git: Handle github dropping git:// support
bitbake: parse/ast: Show errors for append/prepend/remove operators combined with +=/.=
bitbake: Revert "parse/ast: Show errors for append/prepend/remove operators combined with +=/.="
staging: Fix autoconf-native rebuild failure
bitbake: fetch/wget: Add timeout for checkstatus calls (30s)
bitbake: tests/fetch: Update github urls
bitbake: fetch: Handle mirror user/password replacements correctly
bitbake: tests/fetch: Update pcre.org address after github changes
bitbake: runqueue: Fix runall option task deletion ordering issue
bitbake: runqueue: Fix runall option handling
opkg: Fix poor operator combination choice
linunistring: Add missing gperf-native dependency
pseudo: Add fcntl64 wrapper
meta: Add explict branch to git SRC_URIs
meta/scripts: Manual git url branch additions
scripts/convert-srcuri: Update SRC_URI conversion script to handle github url changes
recipes: Update github.com urls to use https
go-helloworld/glide: Fix urls
bitbake.conf: Fix corruption of GNOME mirror url
bitbake: cooker: Handle parse threads disappearing to avoid hangs
bitbake: cooker: Remove debug code, oops :(
bitbake: cooker: Handle parsing results queue race
bitbake: cooker: Fix task-depends.dot for multiconfig targets
mirrors: Add uninative mirror on kernel.org
scripts/oe-package-browser: Fix after overrides change
scripts/oe-package-browser: Handle no packages being built
wpa-supplicant: Match package override to PACKAGES for pkg_postinst
uninative: Add version to uninative tarball name
mirrors: Add kernel.org sources mirror for downloads.yoctoproject.org
bitbake: utils: Handle lockfile filenames that are too long for filesystems
bitbake: fetch2: Fix url remap issue and add testcase
glibc: Backport fix for CVE-2021-43396
build-appliance-image: Update to honister head revision
Robert Yang (1):
bitbake: data_smart.py: Skip old override syntax checking for anonymous functions
Ross Burton (11):
bitbake: tests/utils: mark a regex as a raw string
bitbake: tests/fetch: prefix the FetcherTest temporary directory
bitbake: fetch2: clarify the command-no-found error message
bitbake: fetch2/gitsm: remove the 'nugget' SRCREV caching
linux-yocto: add libmpc-native to DEPENDS
curl: fix CVE-2021-22945 through -22947
testimage: fix unclosed testdata file
strace: show test suite log on failure
meson: set objcopy in the cross and native toolchain files
vim: fix CVE-2021-3796, CVE-2021-3872, and CVE-2021-3875
vim: add patch number to CVE-2021-3778 patch
Sakib Sajal (1):
go: upgrade 1.16.7 -> 1.16.8
Saul Wold (5):
spdx.py: Add annotation to relationship
create-spdx: add create_annotation function
create-spdx: cross recipes are native also
create_spdx: ensure is_work_shared() is unique
create-spdx: Protect against None from LICENSE_PATH
Stefan Herbrechtsmeier (3):
bitbake: fetch2: npm: Support npm archives with missing search directory mode
bitbake: fetch2: npm: Create config npmrc in environment instantiation
bitbake: fetch2: npmsw: Add support for local tarball and link sources
Teoh Jay Shen (1):
oeqa/runtime/parselogs: modified drm error in common errors list
Tim Orling (2):
ptest-runner: install -collect-system-data script
python3-setuptools: _distutils/sysconfig fix
Tom Hochstein (3):
wayland: Fix wayland-tools packaging
nativesdk-packagegroup-sdk-host.bb: Update host tools for wayland
bitbake.conf: Use wayland distro feature for native builds
Yureka (1):
systemd: add missing include for musl
meta-openembedded: 23dc4f060f..f632403d18:
Alexander Thoma (1):
keyutils: fix install path
Armin Kuster (4):
README: updated Maintainers list for Honister
Apache: Several CVE fixes
recipes: Update SRC_URI branch and protocols
recipes: remove tabs and spaces in SRC_URI
Ivan Maidanski (1):
bdwgc: upgrade 8.0.4 -> 8.0.6
Jeremy Puhlman (1):
ifenslave: switch from master to main
Khem Raj (5):
gattlib: Upgrade to latest
packagegroup-meta-oe: Add lv-drivers and lvgl
python3-behave: Switch to using github src_uri
mtr: Explicitly use branch= in SRC_URI
python3-kivy: Use branch parameter in SRC_URI
LiweiSong (1):
Revert "chipsec: platform security assessment framework"
Martin Jansa (2):
pahole: use MACHINE_ARCH
sdbus-c++: don't fetch googletest during do_configure
Matthias Schiffer (1):
byacc: switch to official HTTPS mirror
Nandor Han (1):
libiio: depend on avahi only when network backed is used
Peter Bergin (3):
pipewire: remove manpages class
pipewire: also handle pipewire-media-session in systemd class
pipewire: rework PACKAGECONFIG for systemd service files
Philippe Coval (2):
lvgl: Add recipe for Lightweight Graphics Library
lv-drivers: Add recipe for lvgl lib
Richard Purdie (1):
gattlib: Place pkgconfig file in correct package
Roland Hieber (1):
rapidjson: override hard-coded lib install dir
Trevor Gamblin (1):
python3-posix-ipc: Add recipe for version 1.0.5
Vyacheslav Yurkov (2):
grpc: fix cross-compilation of grpc applications
grpc: fix cross-compilation of grpc applications
Yi Zhao (3):
samba: upgrade 4.14.7 -> 4.14.8
strongswan: upgrade 5.9.3 -> 5.9.4
libssh: use https instead of git in SRC_URI
wangmy (3):
openvpn: upgrade 2.5.3 -> 2.5.4
redis: upgrade 6.2.5 -> 6.2.6
span-lite: upgrade 0.10.1 -> 0.10.3
zangrc (6):
python3-ipython: upgrade 7.27.0 -> 7.28.0
python3-jdatetime: upgrade 3.6.2 -> 3.6.4
python3-openpyxl: upgrade 3.0.8 -> 3.0.9
python3-transitions: upgrade 0.8.9 -> 0.8.10
networkmanager-openvpn: upgrade 1.8.14 -> 1.8.16
ser2net: upgrade 4.3.3 -> 4.3.4
meta-security: a85fbe980e..fb77606aef:
Armin Kuster (3):
python3-fail2ban: fix build failure and cleanup
recipes: Update SRC_URI branch and protocols
kas/kas-security-base.yml: update to honister
Kai Kang (1):
sssd: re-package to fix QA issues
Kristian Klausen (1):
swtpm: update to 0.6.1
Liwei Song (1):
recipes-security/chipsec: platform security assessment framework
Signed-off-by: Patrick Williams <patrick@stwcx.xyz>
Change-Id: I1a7b65bb81dfafe55aac661a8d7006acafba8e98
Diffstat (limited to 'meta-security/meta-security-compliance/recipes-openscap/scap-security-guide')
2 files changed, 2 insertions, 2 deletions
diff --git a/meta-security/meta-security-compliance/recipes-openscap/scap-security-guide/scap-security-guide_0.1.44.bb b/meta-security/meta-security-compliance/recipes-openscap/scap-security-guide/scap-security-guide_0.1.44.bb index d80ecd7edb..ecf136d1ba 100644 --- a/meta-security/meta-security-compliance/recipes-openscap/scap-security-guide/scap-security-guide_0.1.44.bb +++ b/meta-security/meta-security-compliance/recipes-openscap/scap-security-guide/scap-security-guide_0.1.44.bb @@ -1,7 +1,7 @@ SUMARRY = "SCAP content for various platforms, upstream version" SRCREV = "8cb2d0f351faff5440742258782281164953b0a6" -SRC_URI = "git://github.com/ComplianceAsCode/content.git" +SRC_URI = "git://github.com/ComplianceAsCode/content.git;branch=master;protocol=https" DEFAULT_PREFERENCE = "-1" diff --git a/meta-security/meta-security-compliance/recipes-openscap/scap-security-guide/scap-security-guide_git.bb b/meta-security/meta-security-compliance/recipes-openscap/scap-security-guide/scap-security-guide_git.bb index 0617c56e72..ddde5ccee3 100644 --- a/meta-security/meta-security-compliance/recipes-openscap/scap-security-guide/scap-security-guide_git.bb +++ b/meta-security/meta-security-compliance/recipes-openscap/scap-security-guide/scap-security-guide_git.bb @@ -1,7 +1,7 @@ SUMARRY = "SCAP content for various platforms, OE changes" SRCREV = "5fdfdcb2e95afbd86ace555beca5d20cbf1043ed" -SRC_URI = "git://github.com/akuster/scap-security-guide.git;branch=oe-0.1.44; \ +SRC_URI = "git://github.com/akuster/scap-security-guide.git;branch=oe-0.1.44;;protocol=https \ file://0001-Fix-XML-parsing-of-the-remediation-functions-file.patch \ file://0002-Fixed-the-broken-fix-when-greedy-regex-ate-the-whole.patch \ file://0001-fix-deprecated-instance-of-element.getchildren.patch \ |