v2.4.0

Added

• [scripts/imx] Add setup script for i.MX BSP's
• [vigiles/manifest] Scrape patches for CVE info and send in manifest.
• [vigiles/bbclass] Add kernel config auto-detection

Changed

• [config/whitelist] Make sure we don't overwrite local.conf settings.
• [vigiles/tsmeta] Clean up src dictionary creation with oe library routines.
• [vigiles] Update Readme.
• [vigiles/bbclass] Sort patches and patched_cves in manifest.
• [vigiles] Bump manifest version.

Fixed

• [vigiles/class] Add fixup to normalize u-boot cve_product name.
• [vigiles/bbclass] Minor fixups for do_vigiles_{image,check}

v2.3.0

Added

• [tsmeta] Add debugging hook
• [vigiles] Export proxies before running check.

Changed

• [tsmeta] Add variables to collect for image metadata
• [tsmeta] Re-factor + improve tsmeta_pn_list()

Fixed

• [vigiles] Re-fixup dependencies so we catch all images for a target

v2.2.0

Changed

• [tsmeta] Also include patches ending in .diff

Fixed

• [tsmeta] Fixup parsing for (> 1) instance of '://' in URIs.

v2.1.0

Changed

• [vigiles] Backfill pn metadata with virtual/{bootloader,kernel,libc}

v2.0.1

Fixed

• [tsmeta] 3 bug fixes

v2.0.0

Added

• [vigiles] Add task-based Yocto CVE Scanner

Changed

• [vigiles] Update README and file preamble in vigiles files.
• [vigiles] Minor updates for release

Fixed

• [vigiles] README fixup.
• [vigiles] Fix CVSSv2 -> CVSSv3 typos

v1.16.0

Added

• Bump LAYERSERIES_COMPAT to 'thud'
• checkcves: Add -k option to upload kernel config with manifest

Changed

• Update README for kernel config filter section and maintainers
• manifest: expand DISTRO_VERSION

v1.15.0

Added

• Add whitelist of recipes and CVEs to manifest
• Print whitelisted recipes / CVE IDs in checkcves results

Changed

• include version without git revs even when cve_product isnt set

v1.14.0

Added

• checkcves: Print summary of results

v1.13.0

Added

• manifest: Include all files from SRC_URI that look like patches
• Add SRCREV to manifest when there is one
• checkcves: report patches available in meta-timesys-security in results
• layer.conf: Set LAYERSERIES_COMPAT_timesys to sumo