[meta-security][PATCH 1/9] python3-fail2ban: update to 1.0.2

[meta-security][PATCH 1/9] python3-fail2ban: update to 1.0.2

[Armin Kuster]

Signed-off-by: Armin Kuster <akuster808@gmail.com>
---
 ...n3-fail2ban_0.11.2.bb => python3-fail2ban_1.0.2.bb} | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)
 rename dynamic-layers/meta-python/recipes-security/fail2ban/{python3-fail2ban_0.11.2.bb => python3-fail2ban_1.0.2.bb} (90%)

diff --git a/dynamic-layers/meta-python/recipes-security/fail2ban/python3-fail2ban_0.11.2.bb b/dynamic-layers/meta-python/recipes-security/fail2ban/python3-fail2ban_1.0.2.bb
similarity index 90%
rename from dynamic-layers/meta-python/recipes-security/fail2ban/python3-fail2ban_0.11.2.bb
rename to dynamic-layers/meta-python/recipes-security/fail2ban/python3-fail2ban_1.0.2.bb
index 1f55267..9379494 100644
--- a/dynamic-layers/meta-python/recipes-security/fail2ban/python3-fail2ban_0.11.2.bb
+++ b/dynamic-layers/meta-python/recipes-security/fail2ban/python3-fail2ban_1.0.2.bb
@@ -11,11 +11,11 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=ecabc31e90311da843753ba772885d9f"
 
 DEPENDS = "python3-native"
 
-SRCREV ="4fe4ac8dde6ba14841da598ec37f8c6911fe0f64"
-SRC_URI = " git://github.com/fail2ban/fail2ban.git;branch=0.11;protocol=https \
-        file://initd \
-        file://run-ptest \
-"
+SRCREV = "e1d3006b0330e9777705a7baafe3989d442ed120"
+SRC_URI = "git://github.com/fail2ban/fail2ban.git;branch=master;protocol=https \
+           file://initd \
+           file://run-ptest \
+           "
 
 UPSTREAM_CHECK_GITTAGREGEX = "(?P<pver>\d+(\.\d+)+)"
 
-- 
2.25.1

[meta-security][PATCH 2/9] python3-privacyidea: update to 3.8.1

[Armin Kuster]

Signed-off-by: Armin Kuster <akuster808@gmail.com>
---
 ...ython3-privacyidea_3.7.4.bb => python3-privacyidea_3.8.1.bb} | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename dynamic-layers/meta-python/recipes-security/mfa/{python3-privacyidea_3.7.4.bb => python3-privacyidea_3.8.1.bb} (96%)

diff --git a/dynamic-layers/meta-python/recipes-security/mfa/python3-privacyidea_3.7.4.bb b/dynamic-layers/meta-python/recipes-security/mfa/python3-privacyidea_3.8.1.bb
similarity index 96%
rename from dynamic-layers/meta-python/recipes-security/mfa/python3-privacyidea_3.7.4.bb
rename to dynamic-layers/meta-python/recipes-security/mfa/python3-privacyidea_3.8.1.bb
index b6a0e06..8bb88f1 100644
--- a/dynamic-layers/meta-python/recipes-security/mfa/python3-privacyidea_3.7.4.bb
+++ b/dynamic-layers/meta-python/recipes-security/mfa/python3-privacyidea_3.8.1.bb
@@ -6,7 +6,7 @@ LICENSE = "AGPL-3.0-only"
 LIC_FILES_CHKSUM = "file://LICENSE;md5=c0acfa7a8a03b718abee9135bc1a1c55"
 
 PYPI_PACKAGE = "privacyIDEA"
-SRC_URI[sha256sum] = "187b6aa61f8b27e1972512123c8295ea6d2501b3d90d975d4603e753f146b50c"
+SRC_URI[sha256sum] = "e0dae763575c6300ccaebe6dcc8d3f119cb3e25c11302b1e78a96a12e8ab2b38"
 
 inherit pypi setuptools3
 
-- 
2.25.1

[meta-security][PATCH 3/9] libhtp: update to 0.5.42

[Armin Kuster]

Signed-off-by: Armin Kuster <akuster808@gmail.com>
---
 recipes-ids/suricata/{libhtp_0.5.40.bb => libhtp_0.5.42.bb} | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename recipes-ids/suricata/{libhtp_0.5.40.bb => libhtp_0.5.42.bb} (91%)

diff --git a/recipes-ids/suricata/libhtp_0.5.40.bb b/recipes-ids/suricata/libhtp_0.5.42.bb
similarity index 91%
rename from recipes-ids/suricata/libhtp_0.5.40.bb
rename to recipes-ids/suricata/libhtp_0.5.42.bb
index 08e285e..e2866c8 100644
--- a/recipes-ids/suricata/libhtp_0.5.40.bb
+++ b/recipes-ids/suricata/libhtp_0.5.42.bb
@@ -5,7 +5,7 @@ require suricata.inc
 LIC_FILES_CHKSUM = "file://LICENSE;beginline=1;endline=2;md5=596ab7963a1a0e5198e5a1c4aa621843"
 
 SRC_URI = "git://github.com/OISF/libhtp.git;protocol=https;branch=0.5.x"
-SRCREV = "1733478f7fd09e936fea2e024f1d228d40741df2"
+SRCREV = "b14f81bfddbc7206ea713177fcf1e1090257dcd2"
 
 DEPENDS = "zlib"
 
-- 
2.25.1

[meta-security][PATCH 4/9] lkrg-modules: update to 0.9.6

[Armin Kuster]

Signed-off-by: Armin Kuster <akuster808@gmail.com>
---
 .../lkrg/{lkrg-module_0.9.5.bb => lkrg-module_0.9.6.bb}         | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename recipes-kernel/lkrg/{lkrg-module_0.9.5.bb => lkrg-module_0.9.6.bb} (95%)

diff --git a/recipes-kernel/lkrg/lkrg-module_0.9.5.bb b/recipes-kernel/lkrg/lkrg-module_0.9.6.bb
similarity index 95%
rename from recipes-kernel/lkrg/lkrg-module_0.9.5.bb
rename to recipes-kernel/lkrg/lkrg-module_0.9.6.bb
index fa46cb6..421d924 100644
--- a/recipes-kernel/lkrg/lkrg-module_0.9.5.bb
+++ b/recipes-kernel/lkrg/lkrg-module_0.9.6.bb
@@ -11,7 +11,7 @@ DEPENDS = "virtual/kernel elfutils"
 
 SRC_URI = "git://github.com/lkrg-org/lkrg.git;protocol=https;branch=main"
 
-SRCREV = "c58cb52145b8e8ccc6bd19079f5c835933281cdc"
+SRCREV = "2481b3e2dd04eac945c31f99058b0aeee73c3a71"
 
 S = "${WORKDIR}/git"
 
-- 
2.25.1

[meta-security][PATCH 5/9] chkrootkit: update to 0.57

[Armin Kuster]

Signed-off-by: Armin Kuster <akuster808@gmail.com>
---
 .../rootkits/{chkrootkit_0.55.bb => chkrootkit_0.57.bb}         | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename recipes-scanners/rootkits/{chkrootkit_0.55.bb => chkrootkit_0.57.bb} (94%)

diff --git a/recipes-scanners/rootkits/chkrootkit_0.55.bb b/recipes-scanners/rootkits/chkrootkit_0.57.bb
similarity index 94%
rename from recipes-scanners/rootkits/chkrootkit_0.55.bb
rename to recipes-scanners/rootkits/chkrootkit_0.57.bb
index fe0e989..d35f5f6 100644
--- a/recipes-scanners/rootkits/chkrootkit_0.55.bb
+++ b/recipes-scanners/rootkits/chkrootkit_0.57.bb
@@ -7,7 +7,7 @@ LIC_FILES_CHKSUM = "file://COPYRIGHT;md5=fdbe53788f7081c63387d8087273f5ff"
 
 SRC_URI = "http://archive.ubuntu.com/ubuntu/pool/universe/c/${BPN}/${BPN}_${PV}.orig.tar.gz \
            file://musl_fix.patch"
-SRC_URI[sha256sum] = "a81c0286ec449313f953701202a00e81b204fc2cf43e278585a11c12a5e0258b"
+SRC_URI[sha256sum] = "06d1faee151aa3e3c0f91ac807ca92e60b75ed1c18268ccef2c45117156d253c"
 
 inherit autotools-brokensep
 
-- 
2.25.1

[meta-security][PATCH 6/9] chipsec: update to 1.10.3

[Armin Kuster]

Signed-off-by: Armin Kuster <akuster808@gmail.com>
---
 .../chipsec/{chipsec_1.9.1.bb => chipsec_1.10.3.bb}             | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename recipes-security/chipsec/{chipsec_1.9.1.bb => chipsec_1.10.3.bb} (94%)

diff --git a/recipes-security/chipsec/chipsec_1.9.1.bb b/recipes-security/chipsec/chipsec_1.10.3.bb
similarity index 94%
rename from recipes-security/chipsec/chipsec_1.9.1.bb
rename to recipes-security/chipsec/chipsec_1.10.3.bb
index 9fbdaa7..b6dc944 100644
--- a/recipes-security/chipsec/chipsec_1.9.1.bb
+++ b/recipes-security/chipsec/chipsec_1.10.3.bb
@@ -10,7 +10,7 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=bc2d1f9b427be5fb63f6af9da56f7c5d"
 DEPENDS = "virtual/kernel nasm-native"
 
 SRC_URI = "git://github.com/chipsec/chipsec.git;branch=main;protocol=https"
-SRCREV = "d8c2a606bf440c32196c6289a7a458f3ae3107cc"
+SRCREV = "094ce48082844788789e05b5f4e840ebec0e661d"
 
 S = "${WORKDIR}/git"
 
-- 
2.25.1

[meta-security][PATCH 7/9] fscrypt: update to 1.1.0

[Armin Kuster]

Signed-off-by: Armin Kuster <akuster808@gmail.com>
---
 recipes-security/fscrypt/{fscrypt_1.0.0.bb => fscrypt_1.1.0.bb} | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename recipes-security/fscrypt/{fscrypt_1.0.0.bb => fscrypt_1.1.0.bb} (96%)

diff --git a/recipes-security/fscrypt/fscrypt_1.0.0.bb b/recipes-security/fscrypt/fscrypt_1.1.0.bb
similarity index 96%
rename from recipes-security/fscrypt/fscrypt_1.0.0.bb
rename to recipes-security/fscrypt/fscrypt_1.1.0.bb
index 8147fe6..ea9593b 100644
--- a/recipes-security/fscrypt/fscrypt_1.0.0.bb
+++ b/recipes-security/fscrypt/fscrypt_1.1.0.bb
@@ -11,7 +11,7 @@ LIC_FILES_CHKSUM = "file://src/${GO_IMPORT}/LICENSE;md5=3b83ef96387f14655fc854dd
 # fscrypt depends on go and libpam
 DEPENDS += "go-native libpam"
 
-SRCREV = "92b1e9a8670ccd3916a7d24a06cab1e4c9815bc4"
+SRCREV = "7c80c73c084ce9ea49a03b814dac7a82fd7b4c23"
 SRC_URI = "git://github.com/google/fscrypt.git;branch=master;protocol=https"
 
 GO_IMPORT = "import"
-- 
2.25.1

[meta-security][PATCH 8/9] libmspack: update to 1.11

[Armin Kuster]

Signed-off-by: Armin Kuster <akuster808@gmail.com>
---
 .../libmspack/{libmspack_1.9.1.bb => libmspack_1.11.bb}         | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename recipes-security/libmspack/{libmspack_1.9.1.bb => libmspack_1.11.bb} (88%)

diff --git a/recipes-security/libmspack/libmspack_1.9.1.bb b/recipes-security/libmspack/libmspack_1.11.bb
similarity index 88%
rename from recipes-security/libmspack/libmspack_1.9.1.bb
rename to recipes-security/libmspack/libmspack_1.11.bb
index 1b91f46..59df84b 100644
--- a/recipes-security/libmspack/libmspack_1.9.1.bb
+++ b/recipes-security/libmspack/libmspack_1.11.bb
@@ -6,7 +6,7 @@ DEPENDS = ""
 
 LIC_FILES_CHKSUM = "file://COPYING.LIB;beginline=1;endline=2;md5=5b1fd1f66ef926b3c8a5bb00a72a28dd"
 
-SRCREV = "63d3faf90423a4a6c174539a7d32111a840adadc"
+SRCREV = "305907723a4e7ab2018e58040059ffb5e77db837"
 SRC_URI = "git://github.com/kyz/libmspack.git;branch=master;protocol=https"
 
 inherit autotools
-- 
2.25.1

[meta-security][PATCH 9/9] firejail: update 0.9.72

[Armin Kuster]

refresh patch

Signed-off-by: Armin Kuster <akuster808@gmail.com>
---
 .../exclude_seccomp_util_compiles.patch       | 20 +++++++++----------
 ...{firejail_0.9.70.bb => firejail_0.9.72.bb} |  3 ++-
 2 files changed, 12 insertions(+), 11 deletions(-)
 rename recipes-security/Firejail/{firejail_0.9.70.bb => firejail_0.9.72.bb} (96%)

diff --git a/recipes-security/Firejail/firejail/exclude_seccomp_util_compiles.patch b/recipes-security/Firejail/firejail/exclude_seccomp_util_compiles.patch
index a32720a..7e70692 100644
--- a/recipes-security/Firejail/firejail/exclude_seccomp_util_compiles.patch
+++ b/recipes-security/Firejail/firejail/exclude_seccomp_util_compiles.patch
@@ -5,28 +5,28 @@ There are some files that need to run to generate the appropriate files
 we are currently doing this on the target. 
 Signed-off-by: Armin Kuster <akuster808@gmail.com>
 
-Index: git/Makefile.in
+Index: git/Makefile
 ===================================================================
---- git.orig/Makefile.in
-+++ git/Makefile.in
-@@ -34,7 +34,6 @@ MYDIRS = src/lib $(MAN_SRC) $(COMPLETION
+--- git.orig/Makefile
++++ git/Makefile
+@@ -18,7 +18,6 @@ MYDIRS = src/lib $(MAN_SRC) $(COMPLETION
  MYLIBS = src/libpostexecseccomp/libpostexecseccomp.so src/libtrace/libtrace.so src/libtracelog/libtracelog.so
  COMPLETIONS = src/zsh_completion/_firejail src/bash_completion/firejail.bash_completion
  MANPAGES = firejail.1 firemon.1 firecfg.1 firejail-profile.5 firejail-login.5 firejail-users.5 jailcheck.1
 -SECCOMP_FILTERS = seccomp seccomp.debug seccomp.32 seccomp.block_secondary seccomp.mdwx seccomp.mdwx.32
  ALL_ITEMS = $(APPS) $(SBOX_APPS) $(SBOX_APPS_NON_DUMPABLE) $(MYLIBS)
  
- .PHONY: all_items $(ALL_ITEMS)
-@@ -52,7 +51,7 @@ $(MANPAGES): src/man
+ .PHONY: all
+@@ -43,7 +42,7 @@ $(MANPAGES): src/man config.mk
  
  man: $(MANPAGES)
  
 -filters: $(SECCOMP_FILTERS) $(SBOX_APPS_NON_DUMPABLE)
-+filters: $(SBOX_APPS_NON_DUMPABLE)
++filters:  $(SBOX_APPS_NON_DUMPABLE)
  seccomp: src/fseccomp/fseccomp src/fsec-optimize/fsec-optimize
  	src/fseccomp/fseccomp default seccomp
  	src/fsec-optimize/fsec-optimize seccomp
-@@ -81,7 +80,6 @@ clean:
+@@ -72,7 +71,6 @@ clean:
  	done
  	$(MAKE) -C test clean
  	rm -f $(MANPAGES) $(MANPAGES:%=%.gz) firejail*.rpm
@@ -34,12 +34,12 @@ Index: git/Makefile.in
  	rm -f test/utils/index.html*
  	rm -f test/utils/wget-log
  	rm -f test/utils/firejail-test-file*
-@@ -119,7 +117,7 @@ endif
+@@ -110,7 +108,7 @@ endif
  	# libraries and plugins
  	install -m 0755 -d $(DESTDIR)$(libdir)/firejail
  	install -m 0755 -t $(DESTDIR)$(libdir)/firejail src/firecfg/firejail-welcome.sh
 -	install -m 0644 -t $(DESTDIR)$(libdir)/firejail $(MYLIBS) $(SECCOMP_FILTERS)
-+	install -m 0644 -t $(DESTDIR)$(libdir)/firejail $(MYLIBS) 
++	install -m 0644 -t $(DESTDIR)$(libdir)/firejail $(MYLIBS)
  	install -m 0755 -t $(DESTDIR)$(libdir)/firejail $(SBOX_APPS)
  	install -m 0755 -t $(DESTDIR)$(libdir)/firejail src/profstats/profstats
  	# plugins w/o read permission (non-dumpable)
diff --git a/recipes-security/Firejail/firejail_0.9.70.bb b/recipes-security/Firejail/firejail_0.9.72.bb
similarity index 96%
rename from recipes-security/Firejail/firejail_0.9.70.bb
rename to recipes-security/Firejail/firejail_0.9.72.bb
index 35f7b07..12a3105 100644
--- a/recipes-security/Firejail/firejail_0.9.70.bb
+++ b/recipes-security/Firejail/firejail_0.9.72.bb
@@ -9,7 +9,7 @@ seccomp-bpf and Linux capabilities."
 LIC_FILES_CHKSUM = "file://COPYING;md5=b234ee4d69f5fce4486a80fdaf4a4263"
 LICENSE = "GPL-2.0-only"
 
-SRCREV = "b4b08d21cd95725c9d55dfdb6987fcc6d7893247"
+SRCREV = "2551bc71f14052344666f3ca2ad67f5b798020b9"
 SRC_URI = "git://github.com/netblue30/firejail.git;protocol=https;branch=master \
            file://exclude_seccomp_util_compiles.patch \
            "
@@ -46,6 +46,7 @@ PACKAGES:append = " ${PN}-vim ${PN}-zsh"
 
 FILES:${PN}-vim = "${datadir}/vim/"
 FILES:${PN}-zsh = "${datadir}/zsh/"
+FILES:${PN}-dev = "${datadir}/gtksourceview-5/"
 
 pkg_postinst_ontarget:${PN} () {
     ${libdir}/${BPN}/fseccomp default ${libdir}/${BPN}/seccomp
-- 
2.25.1