All of lore.kernel.org
 help / color / mirror / Atom feed
From: Scott Murray <scott.murray@konsulko.com>
To: yocto-patches@lists.yoctoproject.org
Cc: Marta Rybczynska <rybczynska@gmail.com>
Subject: [meta-security][PATCH 0/8] Assorted updates 12/22
Date: Mon, 22 Dec 2025 11:51:48 -0500	[thread overview]
Message-ID: <cover.1766420960.git.scott.murray@konsulko.com> (raw)

This patch series rolls up the contributed patches from the past few weeks,
a bump of suricata to 7.0.13 that I worked up, and after a bit of rework
to get it passing CI the contributed update of clamav to 1.4.3.  Note that
I had to disable building clamav on all 32-bit platforms due to what appears
to be an upstream limitation/bug.  If you need it on a 32-bit platform,
I'm open to carrying a patch, but a fix would ideally come via working with
upstream.

These changes are queued on the master-next branch if you would like to
check them out to test yourself.  I intend to merge these to master branch
at end of day tomorrow (Eastern Time, Dec. 23rd) unless there are objections.
I also plan to create the whinlatter branch at the same time to get that
going.  For scarthgap branch, I plan to look into backports of newer suricata
and clamav in the next week, but we'll have to see how that goes with older
Rust.

Scott


Changes:

Clayton Casciato (1):
  suricata: drop deprecated nss, nspr PACKAGECONFIGs

Hemant Jadhav (1):
  clamav: Add recipe for version 1.4.3

Scott Murray (2):
  suricata: update to 7.0.13
  scap-security-guide: update branch

Yi Zhao (3):
  libmhash: add UPSTREAM_CHECK_URI
  sssd: inherit github-releases class
  scap-security-guide: add UPSTREAM_CHECK_GITTAGREGEX

hongxu (1):
  openscap: switch to libpcre2

 .../recipes-security/sssd/sssd_2.10.2.bb      |    4 +-
 recipes-compliance/openscap/openscap_1.4.2.bb |    4 +-
 .../scap-security-guide_0.1.78.bb             |    3 +-
 .../packagegroup-core-security.bb             |    6 +-
 recipes-ids/suricata/suricata-crates.inc      | 1437 +++++++++--------
 ...{suricata_7.0.12.bb => suricata_7.0.13.bb} |    6 +-
 recipes-scanners/clamav/clamav-crates.inc     |  286 ++++
 recipes-scanners/clamav/clamav-git-crates.inc |    9 +
 recipes-scanners/clamav/clamav_0.104.4.bb     |  156 --
 recipes-scanners/clamav/clamav_1.4.3.bb       |  236 +++
 .../clamav/files/headers_fixup.patch          |   58 -
 .../clamav/files/oe_cmake_fixup.patch         |   39 -
 recipes-scanners/clamav/files/tmpfiles.clamav |    1 +
 .../clamav/files/volatiles.03_clamav          |    1 +
 recipes-security/libmhash/libmhash_0.9.9.9.bb |    2 +
 15 files changed, 1279 insertions(+), 969 deletions(-)
 rename recipes-ids/suricata/{suricata_7.0.12.bb => suricata_7.0.13.bb} (94%)
 create mode 100644 recipes-scanners/clamav/clamav-crates.inc
 create mode 100644 recipes-scanners/clamav/clamav-git-crates.inc
 delete mode 100644 recipes-scanners/clamav/clamav_0.104.4.bb
 create mode 100644 recipes-scanners/clamav/clamav_1.4.3.bb
 delete mode 100644 recipes-scanners/clamav/files/headers_fixup.patch
 delete mode 100644 recipes-scanners/clamav/files/oe_cmake_fixup.patch

-- 
2.51.0



             reply	other threads:[~2025-12-22 16:52 UTC|newest]

Thread overview: 9+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2025-12-22 16:51 Scott Murray [this message]
2025-12-22 16:51 ` [meta-security][PATCH 1/8] suricata: update to 7.0.13 Scott Murray
2025-12-22 16:51 ` [meta-security][PATCH 2/8] clamav: Add recipe for version 1.4.3 Scott Murray
2025-12-22 16:51 ` [meta-security][PATCH 3/8] libmhash: add UPSTREAM_CHECK_URI Scott Murray
2025-12-22 16:51 ` [meta-security][PATCH 4/8] sssd: inherit github-releases class Scott Murray
2025-12-22 16:51 ` [meta-security][PATCH 5/8] scap-security-guide: add UPSTREAM_CHECK_GITTAGREGEX Scott Murray
2025-12-22 16:51 ` [meta-security][PATCH 6/8] scap-security-guide: update branch Scott Murray
2025-12-22 16:51 ` [meta-security][PATCH 7/8] openscap: switch to libpcre2 Scott Murray
2025-12-22 16:51 ` [meta-security][PATCH 8/8] suricata: drop deprecated nss, nspr PACKAGECONFIGs Scott Murray

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=cover.1766420960.git.scott.murray@konsulko.com \
    --to=scott.murray@konsulko.com \
    --cc=rybczynska@gmail.com \
    --cc=yocto-patches@lists.yoctoproject.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.