RE: [yocto-patches] [meta-security][PATCH 00/13] Assorted updates 05/24

Hello,

Could you also pick following patch to both master-next and wrynose-next?
May 5 - https://lists.yoctoproject.org/g/yocto-patches/message/3915 - [meta-security][PATCH] tpm2-pkcs11: upgrade 1.9.1 -> 1.9.2

Peter

-----Original Message-----
From: [email protected] <[email protected]> On Behalf Of Scott Murray via lists.yoctoproject.org
Sent: Sunday, May 24, 2026 2:15 PM
To: [email protected]
Subject: [yocto-patches] [meta-security][PATCH 00/13] Assorted updates 05/24

My apologies for the delay in getting this out, this patch series rolls
up the contributed patches from the past few weeks.  These changes are
queued on the master-next branch if you would like to check them out to
test yourself.  I intend to merge these to master branch Tuesday evening
(CEST, May 26) unless there are objections.

Note that there is one known issue with latest meta-oe that has blocked
getting clean CI runs that likely will impact anyone using the dm-verity
bbclass.  The root cause seems to be a new packaging conflict between
lvm2 and libdevmapper after the recent upgrade in meta-oe, but I have not
had time to try to dig into it and come up with a clean fix.  I plan to
look at that if time permits while I am at Embedded Recipes this coming
week.

Scott


Changes:

Anton Antonov (2):
  parsec-service: Update Parsec service version.
  meta-parsec: Do not run Parsec CI jobs on 32bit platforms.

Bin Cao (1):
  samhain: upgrade 4.5.2 -> 4.5.3

Li Zhou (3):
  firejail: fix COMPATIBLE_MACHINE setting
  layer.conf: correct WARN_QA
  aide-base.bbclass: correct STAGING_AIDE_DIR

Peter Marko (1):
  tpm2-tools: make efivar optional

Ross Burton (3):
  parsec-service: assign PACKAGECONFIG in one line
  parsec-service: do group membership modifications in useradd
  parsec-service: update TS group name

Yi Zhao (1):
  arpwatch: fix typos

jason.lau (2):
  google-authenticator-libpam: update 1.0.9 -> 1.11
  aide: fix pkg_postinst_ontarget shell script

 .gitlab-ci.yml                                |  12 -
 classes/aide-base.bbclass                     |   2 +-
 kas/qemuarm-parsec.yml                        |   6 -
 kas/qemux86-parsec.yml                        |   6 -
 ...Fix-unnecessary-qualifications-error.patch |  50 -
 .../parsec-service/parsec-service-crates.inc  | 868 ++++++++++--------
 ...rvice_1.4.1.bb => parsec-service_1.5.0.bb} |  30 +-
 meta-tpm/conf/layer.conf                      |   2 +-
 .../recipes-tpm2/tpm2-tools/tpm2-tools_5.7.bb |   5 +-
 recipes-ids/aide/aide_0.19.3.bb               |   4 +-
 recipes-ids/samhain/samhain.inc               |   4 +-
 recipes-scanners/arpwatch/arpwatch_3.3.bb     |   8 +-
 recipes-security/Firejail/firejail_0.9.72.bb  |   5 +-
 ...bb => google-authenticator-libpam_1.11.bb} |   4 +-
 14 files changed, 533 insertions(+), 473 deletions(-)
 delete mode 100644 kas/qemuarm-parsec.yml
 delete mode 100644 kas/qemux86-parsec.yml
 delete mode 100644 meta-parsec/recipes-parsec/parsec-service/files/0002-Fix-unnecessary-qualifications-error.patch
 rename meta-parsec/recipes-parsec/parsec-service/{parsec-service_1.4.1.bb => parsec-service_1.5.0.bb} (78%)
 rename recipes-security/google-authenticator-libpam/{google-authenticator-libpam_1.09.bb => google-authenticator-libpam_1.11.bb} (85%)

-- 
2.53.0



-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#4006): https://lists.yoctoproject.org/g/yocto-patches/message/4006
Mute This Topic: https://lists.yoctoproject.org/mt/119465712/4454441
Group Owner: [email protected]
Unsubscribe: https://lists.yoctoproject.org/g/yocto-patches/leave/13703729/4454441/683413657/xyzzy [[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-