mbox series

[meta-security,0/7] Assorted updates 04/15

Message ID cover.1776283733.git.scott.murray@konsulko.com
Headers show
Series Assorted updates 04/15 | expand

Message

Scott Murray April 15, 2026, 8:19 p.m. UTC 
This patch series rolls up the contributed patches from the past few
weeks, barring the suricata 8.04 update that will need some rework for
Lua 5.5.  These changes are queued on the master-next branch if you
would like to check them out to test yourself.  I intend to merge these
to master branch at end of day tomorrow (Eastern Time, April 16) unless
there are objections.

Note that there are the following known issues atm:
* parsec-service currently fails to build with an error in the
  cryptoki crate.  This was likely triggered by the upgrade to
  Rust 1.94.x in oe-core.
* Including python3-privacyidea in an image results in packaging
  conflicts between python3-cryptography and python3-pyrad that
  need to be addressed in those recipes in oe-core/meta-python.

I hope to get these addressed in the next week or so.

Scott


Changes:

Haiqing Bai (1):
  isic: fix RDEPNEDS typo

Khem Raj (1):
  wic: wic need to be moved to files/wic within the layer to be
    found/used

Peter Marko (2):
  libtpms: fix build with glibc 2.43
  tpm2-pkcs11: fix build failure

Yi Zhao (2):
  scap-security-guide: upgrade 0.1.78 -> 0.1.80
  openscap: upgrade 1.4.2 -> 1.4.3

Zhang Peng (1):
  meta-security: fix incorrect HOMEPAGE variable names

 .../wic}/beaglebone-yocto-verity.wks.in       |  0
 .../systemd-bootdisk-dmverity-hash.wks.in     |  0
 .../wic}/systemd-bootdisk-dmverity.wks.in     |  0
 ...ilation-error-in-TPMLIB_GetPlaintext.patch | 34 +++++++++++++++++++
 meta-tpm/recipes-tpm/libtpm/libtpms_0.10.0.bb |  4 ++-
 ...eturn-NULL-for-twist-on-auth-failure.patch | 28 +++++++++++++++
 .../tpm2-pkcs11/tpm2-pkcs11_1.9.1.bb          |  1 +
 recipes-compliance/lynis/lynis_3.1.6.bb       |  2 +-
 .../{openscap_1.4.2.bb => openscap_1.4.3.bb}  |  4 +--
 ....1.78.bb => scap-security-guide_0.1.80.bb} |  4 +--
 recipes-scanners/arpwatch/arpwatch_3.3.bb     |  2 +-
 recipes-security/glome/glome_git.bb           |  2 +-
 .../google-authenticator-libpam_1.09.bb       |  2 +-
 recipes-security/isic/isic_0.07.bb            |  2 +-
 14 files changed, 75 insertions(+), 10 deletions(-)
 rename {wic => files/wic}/beaglebone-yocto-verity.wks.in (100%)
 rename {wic => files/wic}/systemd-bootdisk-dmverity-hash.wks.in (100%)
 rename {wic => files/wic}/systemd-bootdisk-dmverity.wks.in (100%)
 create mode 100644 meta-tpm/recipes-tpm/libtpm/libtpms/0001-Fix-a-compilation-error-in-TPMLIB_GetPlaintext.patch
 create mode 100644 meta-tpm/recipes-tpm2/tpm2-pkcs11/files/0001-src-lib-tpm-return-NULL-for-twist-on-auth-failure.patch
 rename recipes-compliance/openscap/{openscap_1.4.2.bb => openscap_1.4.3.bb} (96%)
 rename recipes-compliance/scap-security-guide/{scap-security-guide_0.1.78.bb => scap-security-guide_0.1.80.bb} (93%)