RE: [yocto-patches] [meta-security][PATCH 00/13] Assorted updates 05/24

On Sun, 24 May 2026, Marko, Peter wrote:

> Hello,
>
> Could you also pick following patch to both master-next and wrynose-next?
> May 5 - https://lists.yoctoproject.org/g/yocto-patches/message/3915 - [meta-security][PATCH] tpm2-pkcs11: upgrade 1.9.1 -> 1.9.2

Thanks for catching this, I did miss pulling it into my patch queue.  I
have added it now, and will push it with the rest if the wrynose CI run
looks good (which I expect it will).

Thanks,

Scott


> -----Original Message-----
> From: [email protected] <[email protected]> On Behalf Of Scott Murray via lists.yoctoproject.org
> Sent: Sunday, May 24, 2026 2:15 PM
> To: [email protected]
> Subject: [yocto-patches] [meta-security][PATCH 00/13] Assorted updates 05/24
>
> My apologies for the delay in getting this out, this patch series rolls
> up the contributed patches from the past few weeks.  These changes are
> queued on the master-next branch if you would like to check them out to
> test yourself.  I intend to merge these to master branch Tuesday evening
> (CEST, May 26) unless there are objections.
>
> Note that there is one known issue with latest meta-oe that has blocked
> getting clean CI runs that likely will impact anyone using the dm-verity
> bbclass.  The root cause seems to be a new packaging conflict between
> lvm2 and libdevmapper after the recent upgrade in meta-oe, but I have not
> had time to try to dig into it and come up with a clean fix.  I plan to
> look at that if time permits while I am at Embedded Recipes this coming
> week.
>
> Scott
>
>
> Changes:
>
> Anton Antonov (2):
>   parsec-service: Update Parsec service version.
>   meta-parsec: Do not run Parsec CI jobs on 32bit platforms.
>
> Bin Cao (1):
>   samhain: upgrade 4.5.2 -> 4.5.3
>
> Li Zhou (3):
>   firejail: fix COMPATIBLE_MACHINE setting
>   layer.conf: correct WARN_QA
>   aide-base.bbclass: correct STAGING_AIDE_DIR
>
> Peter Marko (1):
>   tpm2-tools: make efivar optional
>
> Ross Burton (3):
>   parsec-service: assign PACKAGECONFIG in one line
>   parsec-service: do group membership modifications in useradd
>   parsec-service: update TS group name
>
> Yi Zhao (1):
>   arpwatch: fix typos
>
> jason.lau (2):
>   google-authenticator-libpam: update 1.0.9 -> 1.11
>   aide: fix pkg_postinst_ontarget shell script
>
>  .gitlab-ci.yml                                |  12 -
>  classes/aide-base.bbclass                     |   2 +-
>  kas/qemuarm-parsec.yml                        |   6 -
>  kas/qemux86-parsec.yml                        |   6 -
>  ...Fix-unnecessary-qualifications-error.patch |  50 -
>  .../parsec-service/parsec-service-crates.inc  | 868 ++++++++++--------
>  ...rvice_1.4.1.bb => parsec-service_1.5.0.bb} |  30 +-
>  meta-tpm/conf/layer.conf                      |   2 +-
>  .../recipes-tpm2/tpm2-tools/tpm2-tools_5.7.bb |   5 +-
>  recipes-ids/aide/aide_0.19.3.bb               |   4 +-
>  recipes-ids/samhain/samhain.inc               |   4 +-
>  recipes-scanners/arpwatch/arpwatch_3.3.bb     |   8 +-
>  recipes-security/Firejail/firejail_0.9.72.bb  |   5 +-
>  ...bb => google-authenticator-libpam_1.11.bb} |   4 +-
>  14 files changed, 533 insertions(+), 473 deletions(-)
>  delete mode 100644 kas/qemuarm-parsec.yml
>  delete mode 100644 kas/qemux86-parsec.yml
>  delete mode 100644 meta-parsec/recipes-parsec/parsec-service/files/0002-Fix-unnecessary-qualifications-error.patch
>  rename meta-parsec/recipes-parsec/parsec-service/{parsec-service_1.4.1.bb => parsec-service_1.5.0.bb} (78%)
>  rename recipes-security/google-authenticator-libpam/{google-authenticator-libpam_1.09.bb => google-authenticator-libpam_1.11.bb} (85%)
>
>