Re: [yocto-patches] [meta-security][PATCH 0/7] Assorted updates 04/15

On Tue, 21 Apr 2026, Jose Quaresma wrote:

> Scott Murray <[email protected]> escreveu (terça, 21/04/2026 à(s)
> 17:57):
>
> > On Mon, 20 Apr 2026, Jose Quaresma via lists.yoctoproject.org wrote:
> >
> > > Hi Scott,
> > >
> > > Scott Murray via lists.yoctoproject.org <scott.murray=
> > > [email protected]> escreveu (quarta, 15/04/2026 à(s)
> > > 21:19):
> > >
> > > > This patch series rolls up the contributed patches from the past few
> > > > weeks, barring the suricata 8.04 update that will need some rework for
> > > > Lua 5.5.  These changes are queued on the master-next branch if you
> > > > would like to check them out to test yourself.  I intend to merge these
> > > > to master branch at end of day tomorrow (Eastern Time, April 16) unless
> > > > there are objections.
> > > >
> > >
> > > Were there any objections or other restrictions?
> >
> > Sorry, no, I had forgotten to push to master before the weekend, but did
> > so yesterday morning.  I'll try to be more on the ball going forward.
> >
>
> No worries!
>
> It probably had already been integrated yesterday when I asked.
> I asked because I didn't see anything in [1], and for your information,
> it's still outdated.
>
> [1] https://git.yoctoproject.org/meta-security/

Odd, the commits seem to be there when I look, perhaps there's some behind
the scenes mirror issue?

Scott


> > > > Note that there are the following known issues atm:
> > > > * parsec-service currently fails to build with an error in the
> > > >   cryptoki crate.  This was likely triggered by the upgrade to
> > > >   Rust 1.94.x in oe-core.
> > > > * Including python3-privacyidea in an image results in packaging
> > > >   conflicts between python3-cryptography and python3-pyrad that
> > > >   need to be addressed in those recipes in oe-core/meta-python.
> > > >
> > > > I hope to get these addressed in the next week or so.
> > > >
> > > > Scott
> > > >
> > > >
> > > > Changes:
> > > >
> > > > Haiqing Bai (1):
> > > >   isic: fix RDEPNEDS typo
> > > >
> > > > Khem Raj (1):
> > > >   wic: wic need to be moved to files/wic within the layer to be
> > > >     found/used
> > > >
> > > > Peter Marko (2):
> > > >   libtpms: fix build with glibc 2.43
> > > >   tpm2-pkcs11: fix build failure
> > > >
> > > > Yi Zhao (2):
> > > >   scap-security-guide: upgrade 0.1.78 -> 0.1.80
> > > >   openscap: upgrade 1.4.2 -> 1.4.3
> > > >
> > > > Zhang Peng (1):
> > > >   meta-security: fix incorrect HOMEPAGE variable names
> > > >
> > > >  .../wic}/beaglebone-yocto-verity.wks.in       |  0
> > > >  .../systemd-bootdisk-dmverity-hash.wks.in     |  0
> > > >  .../wic}/systemd-bootdisk-dmverity.wks.in     |  0
> > > >  ...ilation-error-in-TPMLIB_GetPlaintext.patch | 34 +++++++++++++++++++
> > > >  meta-tpm/recipes-tpm/libtpm/libtpms_0.10.0.bb |  4 ++-
> > > >  ...eturn-NULL-for-twist-on-auth-failure.patch | 28 +++++++++++++++
> > > >  .../tpm2-pkcs11/tpm2-pkcs11_1.9.1.bb          |  1 +
> > > >  recipes-compliance/lynis/lynis_3.1.6.bb       |  2 +-
> > > >  .../{openscap_1.4.2.bb => openscap_1.4.3.bb}  |  4 +--
> > > >  ....1.78.bb => scap-security-guide_0.1.80.bb} |  4 +--
> > > >  recipes-scanners/arpwatch/arpwatch_3.3.bb     |  2 +-
> > > >  recipes-security/glome/glome_git.bb           |  2 +-
> > > >  .../google-authenticator-libpam_1.09.bb       |  2 +-
> > > >  recipes-security/isic/isic_0.07.bb            |  2 +-
> > > >  14 files changed, 75 insertions(+), 10 deletions(-)
> > > >  rename {wic => files/wic}/beaglebone-yocto-verity.wks.in (100%)
> > > >  rename {wic => files/wic}/systemd-bootdisk-dmverity-hash.wks.in
> > (100%)
> > > >  rename {wic => files/wic}/systemd-bootdisk-dmverity.wks.in (100%)
> > > >  create mode 100644
> > > >
> > meta-tpm/recipes-tpm/libtpm/libtpms/0001-Fix-a-compilation-error-in-TPMLIB_GetPlaintext.patch
> > > >  create mode 100644
> > > >
> > meta-tpm/recipes-tpm2/tpm2-pkcs11/files/0001-src-lib-tpm-return-NULL-for-twist-on-auth-failure.patch
> > > >  rename recipes-compliance/openscap/{openscap_1.4.2.bb =>
> > > > openscap_1.4.3.bb} (96%)
> > > >  rename recipes-compliance/scap-security-guide/{
> > > > scap-security-guide_0.1.78.bb => scap-security-guide_0.1.80.bb} (93%)
> > > >
> > > > --
> > > > 2.53.0
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > >
> > >
>
>
>
>