All of lore.kernel.org
 help / color / mirror / Atom feed
From: Scott Murray <scott.murray@konsulko.com>
To: yocto-patches@lists.yoctoproject.org
Subject: [meta-security][PATCH 0/7] Assorted updates 04/15
Date: Wed, 15 Apr 2026 16:19:20 -0400	[thread overview]
Message-ID: <cover.1776283733.git.scott.murray@konsulko.com> (raw)

This patch series rolls up the contributed patches from the past few
weeks, barring the suricata 8.04 update that will need some rework for
Lua 5.5.  These changes are queued on the master-next branch if you
would like to check them out to test yourself.  I intend to merge these
to master branch at end of day tomorrow (Eastern Time, April 16) unless
there are objections.

Note that there are the following known issues atm:
* parsec-service currently fails to build with an error in the
  cryptoki crate.  This was likely triggered by the upgrade to
  Rust 1.94.x in oe-core.
* Including python3-privacyidea in an image results in packaging
  conflicts between python3-cryptography and python3-pyrad that
  need to be addressed in those recipes in oe-core/meta-python.

I hope to get these addressed in the next week or so.

Scott


Changes:

Haiqing Bai (1):
  isic: fix RDEPNEDS typo

Khem Raj (1):
  wic: wic need to be moved to files/wic within the layer to be
    found/used

Peter Marko (2):
  libtpms: fix build with glibc 2.43
  tpm2-pkcs11: fix build failure

Yi Zhao (2):
  scap-security-guide: upgrade 0.1.78 -> 0.1.80
  openscap: upgrade 1.4.2 -> 1.4.3

Zhang Peng (1):
  meta-security: fix incorrect HOMEPAGE variable names

 .../wic}/beaglebone-yocto-verity.wks.in       |  0
 .../systemd-bootdisk-dmverity-hash.wks.in     |  0
 .../wic}/systemd-bootdisk-dmverity.wks.in     |  0
 ...ilation-error-in-TPMLIB_GetPlaintext.patch | 34 +++++++++++++++++++
 meta-tpm/recipes-tpm/libtpm/libtpms_0.10.0.bb |  4 ++-
 ...eturn-NULL-for-twist-on-auth-failure.patch | 28 +++++++++++++++
 .../tpm2-pkcs11/tpm2-pkcs11_1.9.1.bb          |  1 +
 recipes-compliance/lynis/lynis_3.1.6.bb       |  2 +-
 .../{openscap_1.4.2.bb => openscap_1.4.3.bb}  |  4 +--
 ....1.78.bb => scap-security-guide_0.1.80.bb} |  4 +--
 recipes-scanners/arpwatch/arpwatch_3.3.bb     |  2 +-
 recipes-security/glome/glome_git.bb           |  2 +-
 .../google-authenticator-libpam_1.09.bb       |  2 +-
 recipes-security/isic/isic_0.07.bb            |  2 +-
 14 files changed, 75 insertions(+), 10 deletions(-)
 rename {wic => files/wic}/beaglebone-yocto-verity.wks.in (100%)
 rename {wic => files/wic}/systemd-bootdisk-dmverity-hash.wks.in (100%)
 rename {wic => files/wic}/systemd-bootdisk-dmverity.wks.in (100%)
 create mode 100644 meta-tpm/recipes-tpm/libtpm/libtpms/0001-Fix-a-compilation-error-in-TPMLIB_GetPlaintext.patch
 create mode 100644 meta-tpm/recipes-tpm2/tpm2-pkcs11/files/0001-src-lib-tpm-return-NULL-for-twist-on-auth-failure.patch
 rename recipes-compliance/openscap/{openscap_1.4.2.bb => openscap_1.4.3.bb} (96%)
 rename recipes-compliance/scap-security-guide/{scap-security-guide_0.1.78.bb => scap-security-guide_0.1.80.bb} (93%)

-- 
2.53.0



             reply	other threads:[~2026-04-15 20:19 UTC|newest]

Thread overview: 12+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2026-04-15 20:19 Scott Murray [this message]
2026-04-15 20:19 ` [meta-security][PATCH 1/7] libtpms: fix build with glibc 2.43 Scott Murray
2026-04-15 20:19 ` [meta-security][PATCH 2/7] scap-security-guide: upgrade 0.1.78 -> 0.1.80 Scott Murray
2026-04-15 20:19 ` [meta-security][PATCH 3/7] openscap: upgrade 1.4.2 -> 1.4.3 Scott Murray
2026-04-15 20:19 ` [meta-security][PATCH 4/7] wic: wic need to be moved to files/wic within the layer to be found/used Scott Murray
2026-04-15 20:19 ` [meta-security][PATCH 5/7] tpm2-pkcs11: fix build failure Scott Murray
2026-04-15 20:19 ` [meta-security][PATCH 6/7] meta-security: fix incorrect HOMEPAGE variable names Scott Murray
2026-04-15 20:19 ` [meta-security][PATCH 7/7] isic: fix RDEPNEDS typo Scott Murray
2026-04-20 10:17 ` [yocto-patches] [meta-security][PATCH 0/7] Assorted updates 04/15 Jose Quaresma
2026-04-21 16:57   ` Scott Murray
2026-04-21 18:08     ` Jose Quaresma
2026-04-21 18:30       ` Scott Murray

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=cover.1776283733.git.scott.murray@konsulko.com \
    --to=scott.murray@konsulko.com \
    --cc=yocto-patches@lists.yoctoproject.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.