From patchwork Mon Nov 2 22:47:45 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Scott Murray X-Patchwork-Id: 102701 Received: from mail-wm1-f42.google.com (mail-wm1-f42.google.com [209.85.128.42]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.4368.1793659687279540128 for ; Mon, 02 Nov 2026 14:48:07 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@konsulko.com header.s=google header.b=mFzXZ122; spf=pass (domain: konsulko.com, ip: 209.85.128.42, mailfrom: scott.murray@konsulko.com) Received: by mail-wm1-f42.google.com with SMTP id 5b1f17b1804b1-4a60f9474c4so36748095e9.0 for ; Mon, 02 Nov 2026 14:48:07 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=konsulko.com; s=google; t=1793659685; x=1794264485; darn=lists.yoctoproject.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to:content-type; bh=62N4e2CYymCMwFaAsxlERSQjEIhU3OXXzyfUTcSfN3c=; b=mFzXZ122Dx6XOF7NraWSdy8crdOAlJmOA42a6EZR2rTfAD4V/M0ocd2fL+JfOUAxVS 8yW3yfKtVN/Yww4MDAmKAaA+Aqq0RILGP5LeHGDUhIThKjtCNck4FdT0jwuAYkqnQLLo RzS5ys7C5sh1Xql4LG8+pD6xKja0CrPIUC3S8= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793659685; x=1794264485; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to:content-type; bh=62N4e2CYymCMwFaAsxlERSQjEIhU3OXXzyfUTcSfN3c=; b=bnSM2iY0NrCTdIolsCsZKeoXT3dlPtKwA24UeaGRLoXA0g2D0K7/ZQ49lY2103yIXs ULz92rkdjfhevNqxBOQe2/KGqEhLNIKoz8P2G/MvLgB9aC00sS6uqBpzBckkDUPeAX9M 0JxtFHwMh/PRWuSrWZMCZ0vVLgrRZDwl6Z5aXaZ1qgtEtwJWI+2BxfB6uG11H5FbzE5z oR5kEkUFu6PkYsNV+phKhw9dcd/I19KhM/Gzn4nlLRSI4/g6KMqaer1xCfeBGV4sMniy XAoVubFTii2D7J1AfVWhHIImtTPnGesqSeBMetCirUOY9bAMN+ImdGD0w+CY3F5IU4al DhWw== X-Gm-Message-State: APuU4Z/ZhCbMdmcOp70LFdStY5G/66TpD/37LEAbd+vILx9lYs+rGANm x/KxrX5aTw9VcslH2UtrtLEhCzRt01eic6/PjgXb0WjXjrE6FbdvWnNI9VqDMkPYglUp10tqwfi XIppEnIo= X-Gm-Gg: AYBFou007INbl8km/mNlQyaFfr5ZKIH8rxjLKMuVCEhkooPq1DBT76zOF+OKNnmsDAo 1vRL1cymRe+AmNgzYoqwM0ek/d3L+as+UxLNFevh3caff6zo9UlUXKHoCUYmVKfQa7hUN4At90J fVWXK9K1OnUP+vpAnZK2tuVFA3QTJHHTyHtxAX5wM2huhdMk8DvpMxZgzCWaX8LFelhMthGbs/G Cf1S2Nt34JyreRsvLrW7cdFC2o9DKH3VfBBxT/2bn3ckY5a4DzJ4fBCsRRAeFzMd9iIRcbl6NkD 9Nw7UVf2QSkXFusyF3+Wx4fh/PoflcwE3FEnQ97VAeJn79MvWLicQQGUF2pUxwXussZhZ71Zbu6 cqQ4pcqiM6etwfpuW1evioGJq66QlojwP5hssPmRlw+lkYnpLs6KyZa3ZrHrPvFqqnkY5ZOTL91 hdlPKoOG+K1+qux7LEidmU/VYvM+yXR2kDhn1HFrFKG1YCWVRYnKLCg7VWU35l7ZqNRUE0cZtwG WfdL5umcmjpS+NMRBwtPh2NitpgXCKjGR69VRoaRTCWxO4Vs8nFaiyhtcu6k6/gJCSlWy96YqiL jWhm+ET4kCX7y8Jhc7GuDc9NYObQVKIDru9ap/JiLteNTeOWZyweBzLiWeynLFf/VrT+IX3YtE/ 63sWXkDKKa2D6JktanrLu3jE1YIhh/A== X-Received: by 2002:a05:6000:2805:b0:48b:4c8:7b07 with SMTP id ffacd0b85a97d-48e6e306d31mr18168102f8f.52.1793659685214; Mon, 02 Nov 2026 14:48:05 -0800 (PST) Return-Path: Received: from tone.k.g (lan.nucleusys.com. [92.247.61.126]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-48e71ba7168sm23770828f8f.55.2026.11.02.14.48.02 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 02 Nov 2026 14:48:03 -0800 (PST) From: Scott Murray To: yocto-patches@lists.yoctoproject.org Subject: [meta-security][PATCH 1/4] ding-libs: update to 0.7.0 Date: Tue, 3 Nov 2026 00:47:45 +0200 Message-ID: <8865b29b22110e49b6197159a67ef85ac3b12f9f.1793659376.git.scott.murray@konsulko.com> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Mon, 02 Nov 2026 22:48:12 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto-patches/message/5209 The download URL being used for a ding-libs 0.6.1 tarfile is no longer valid, so update to 0.7.0 using the actual upstream location on github. Signed-off-by: Scott Murray --- recipes-security/ding-libs/ding-libs_0.7.0.bb | 11 +++++++++++ recipes-security/libdhash/ding-libs_0.6.1.bb | 12 ------------ 2 files changed, 11 insertions(+), 12 deletions(-) create mode 100644 recipes-security/ding-libs/ding-libs_0.7.0.bb delete mode 100644 recipes-security/libdhash/ding-libs_0.6.1.bb diff --git a/recipes-security/ding-libs/ding-libs_0.7.0.bb b/recipes-security/ding-libs/ding-libs_0.7.0.bb new file mode 100644 index 0000000..ba612ab --- /dev/null +++ b/recipes-security/ding-libs/ding-libs_0.7.0.bb @@ -0,0 +1,11 @@ +SUMMARY = "'DING is not GNU' helper libraries for SSSD and FreeIPA" +HOMEPAGE = "https://github.com/SSSD/ding-libs" +SECTION = "base" +LICENSE = "GPL-3.0-or-later AND LGPL-3.0-or-later" +LIC_FILES_CHKSUM = "file://COPYING;md5=d32239bcb673463ab874e80d47fae504" + +SRC_URI = "https://github.com/SSSD/${BPN}/releases/download/${PV}/${BP}.tar.gz" + +inherit autotools pkgconfig gettext + +SRC_URI[sha256sum] = "5df2f202f892b4c1a6caf87f0056398a8288b281da9d7e65cd7637978ec20ef3" diff --git a/recipes-security/libdhash/ding-libs_0.6.1.bb b/recipes-security/libdhash/ding-libs_0.6.1.bb deleted file mode 100644 index 843850f..0000000 --- a/recipes-security/libdhash/ding-libs_0.6.1.bb +++ /dev/null @@ -1,12 +0,0 @@ -SUMMARY = "Dynamic hash table implementation" -DESCRIPTION = "Dynamic hash table implementation" -HOMEPAGE = "https://fedorahosted.org/released/ding-libs" -SECTION = "base" -LICENSE = "GPL-3.0-or-later" -LIC_FILES_CHKSUM = "file://COPYING;md5=d32239bcb673463ab874e80d47fae504" - -SRC_URI = "https://fedorahosted.org/released/${BPN}/${BP}.tar.gz" - -inherit autotools pkgconfig - -SRC_URI[sha256sum] = "a319a327deb81f2dfab9ce4a4926e80e1dac5dcfc89f4c7e548cec2645af27c1" From patchwork Mon Nov 2 22:47:46 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Scott Murray X-Patchwork-Id: 102702 Received: from mail-wm1-f45.google.com (mail-wm1-f45.google.com [209.85.128.45]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.4370.1793659688799917431 for ; Mon, 02 Nov 2026 14:48:09 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@konsulko.com header.s=google header.b=EmaFlTWk; spf=pass (domain: konsulko.com, ip: 209.85.128.45, mailfrom: scott.murray@konsulko.com) Received: by mail-wm1-f45.google.com with SMTP id 5b1f17b1804b1-4afe2d546f9so18306545e9.3 for ; Mon, 02 Nov 2026 14:48:08 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=konsulko.com; s=google; t=1793659687; x=1794264487; darn=lists.yoctoproject.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to:content-type; bh=DGJ33Sv6mrFv0EKY2paYZsuyffqNuvLNLm0BK3iNdGA=; b=EmaFlTWkMm90ltiGayqzl8A+j+PSggtM0/CYQfJkfRPbLyAvomgcWiCSTVCpVHo+NE gu7oSPvDAweV0b00s9SYWLNTI1bBqDHeFmgfhdLwbvwldGtysUdshNKOGBlGO6mQR8q9 Wt7x2NufXTj5vI8xyOGvOcwnK7MH1jQOs4T9M= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793659687; x=1794264487; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to:content-type; bh=DGJ33Sv6mrFv0EKY2paYZsuyffqNuvLNLm0BK3iNdGA=; b=oy4UTVN8ZKu8Sjy85jArSxkcSlBRuFVLrqrlZmjgVJLX0Iz/VXR12WNDhl5M71qKqz 3UbYml7BOGpFjD2yW+pSr+eePh4q5018xYoEcwIPHoPPcuSVl8wKxwl5wEmRu3SzdyvN vUtqRKXtjYHywMbB13w0Z6BT1GKhN1D/bIkGhlGTRrSc+trk6o0P2e4zooOrFjXDUtWk AzSLz8xdyo8660OrY1/q1Hh9kiQ64bgfI1vM+1ANBi6TackLdxVwspb1kmz9Dvfdp+vk GpiemPWGD/iUINJF4S80LK8CYEIfHYzqQ2DorCSj60tZvXHOpsofI3uJlvzhIwobirlj 0uPw== X-Gm-Message-State: AFq9FYI8leQyfqtriizRp+ElA4csXmLPJVJ3W9Xtor414S/n6buhcsd+ byndKZrL7bu3SC8dyEthDszUdVlAWMTS0qariDcE3I5KCNgQyIDAHIhYMP+E4b88VCDe1fJuZ4O VprR3o0c= X-Gm-Gg: AYBFou15krmTlqTEKSWAvCV6EakT+MOw8cCMDCe5jYTi7w35x2KJyKdW8YVxwsh01bv nCaSdBvE2gqmMpJSrfWXlle3Xt+7q1xma/IGm06B0co6r32dNFNMDRkt33dxjjCaWDj+f1NDT+e SIfev78LRJq6Lt03deza/I1REqd3x/wxoN4k9ZB97tCuSlEcK+mhAO+YsspZIKwybe7V92vmk+P qzScA9qz5oJ9NQH0OG+/4I8QGR/GHr6jIx0uKcPlVYaRh2taAfXOE3oAODZCZqiKIwrFg4f3CHM M3gUuFSQZCJvCxXD9uwRg+0AsJ/5BPU4qjzULteZAjWhATlVrrSLb8M7ZoxisLK+xw9gxTni7it /Njco88o3n5CAd4TLZ1Ot88nNwOo5oMOVCyqCab+ZXc83DxXmtWS2M7lKD01yQ8PCqr8i+J2t11 jlo+dJWQiragsHRa1vqaLPbNhlEFmfNnxYT+C1afSCFEqBD7wE/XWbiQmV9lbQbebza0EuhHcZH pU4Ki9JEDRnr4/OegI43TgOnWPTI7yp/PbdjCcbj9/LwB6MLzyBDWlBufTp+tbqJs0QxlvQgoU+ uf3wGuYAWL2hlL7XmP5fOw3RHwBDL3ESzPY8KpYEn7eSObprMAgDT8VQ5k1lp8pwjUwCM0Pn628 LG2G+15EkBVis7Zeojo4L8EqSsaHfFQ== X-Received: by 2002:a05:600c:3f0f:b0:4a2:1612:636e with SMTP id 5b1f17b1804b1-4ac16bc4645mr263818305e9.5.1793659687038; Mon, 02 Nov 2026 14:48:07 -0800 (PST) Return-Path: Received: from tone.k.g (lan.nucleusys.com. [92.247.61.126]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-48e71ba7168sm23770828f8f.55.2026.11.02.14.48.05 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 02 Nov 2026 14:48:05 -0800 (PST) From: Scott Murray To: yocto-patches@lists.yoctoproject.org Subject: [meta-security][PATCH 2/4] swtpm: Add missing useradd inherit Date: Tue, 3 Nov 2026 00:47:46 +0200 Message-ID: <9d9461f7fa7da22f654a1c368e31a21db537266b.1793659376.git.scott.murray@konsulko.com> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Mon, 02 Nov 2026 22:48:13 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto-patches/message/5210 The swtpm recipe has USERADD and GROUPADD definitions, but has never inherited the useradd bbclass, fix that. Reported-by: Ehsan Emami Signed-off-by: Scott Murray --- meta-tpm/recipes-tpm/swtpm/swtpm_0.10.0.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-tpm/recipes-tpm/swtpm/swtpm_0.10.0.bb b/meta-tpm/recipes-tpm/swtpm/swtpm_0.10.0.bb index 8472f02..8488d01 100644 --- a/meta-tpm/recipes-tpm/swtpm/swtpm_0.10.0.bb +++ b/meta-tpm/recipes-tpm/swtpm/swtpm_0.10.0.bb @@ -12,7 +12,7 @@ SRC_URI = "git://github.com/stefanberger/swtpm.git;branch=stable-0.10;protocol=h PE = "2" PARALLEL_MAKE = "" -inherit autotools pkgconfig perlnative +inherit autotools pkgconfig perlnative useradd TSS_USER = "tss" TSS_GROUP = "tss" From patchwork Mon Nov 2 22:47:47 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Scott Murray X-Patchwork-Id: 102703 Received: from mail-wr1-f44.google.com (mail-wr1-f44.google.com [209.85.221.44]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.4440.1793659690619097514 for ; Mon, 02 Nov 2026 14:48:10 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@konsulko.com header.s=google header.b=Io+45+iq; spf=pass (domain: konsulko.com, ip: 209.85.221.44, mailfrom: scott.murray@konsulko.com) Received: by mail-wr1-f44.google.com with SMTP id ffacd0b85a97d-48e10a70540so1963118f8f.1 for ; Mon, 02 Nov 2026 14:48:10 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=konsulko.com; s=google; t=1793659689; x=1794264489; darn=lists.yoctoproject.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to:content-type; bh=Rv1qFGPZTU5xjeLXptQVkNzLBOBWTm5zrEfl5xjrwMo=; b=Io+45+iqIzAogpn8jmzQbJyADKhhr4av4JBQjoUjGliYPS2HZ7h/tzRwNzEKh8ijHf BGQmDjS9EnznX6q7EIPLsFdqeDTDs7/vYZjJV88hQAV8IojH7kna+jZsy79oweHBe05w B+oZpYV6jiQ9gqp1/N2YohoA80kwchwQT0CBs= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793659689; x=1794264489; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to:content-type; bh=Rv1qFGPZTU5xjeLXptQVkNzLBOBWTm5zrEfl5xjrwMo=; b=LWgG40ivmt+DZJs7Rc3fyk9gEcVcCTCIvN0D9POTpRZgZ6+xgjre8uo52ijQXqPRre IVDpwJizH0ecpdF4Ydngp0NYmx6SvVc4rhNsq68g4k8gU9oeMhp1xD1zfWvmT4kcWsJ4 KaHEBv2F+au1bc7zV91+0a15uUbz79A0N5ShcmNDcgQG3XVQezBA751lb5SOgigVXjsz AXRwuiXjFdecFFOUAe3b0nVGMd0KrZUhkhw08XMNS+AOi+ljF31jPa02Ru+TZ+JHBzBu ZIb1zs0ae6OlwfAGcAtY6tEwsNIVJHu2DQWNBN54AvPZpWC8HUSFeWLJmXGoHbqHJpTI BXig== X-Gm-Message-State: APuU4Z9z+An3LnM3AnjyRt6AdPubAR9OqBmzTpTwft3SdoHmLb2R26Sg 3mqAJGGNE9TIdl3nY3Z2SMddFHc9kZm0xNszSz4LAzqeRMAVTxtVcNpub2zOHZ3iluRe6SAErmn 64W+TEj4= X-Gm-Gg: AYBFou3vyoUOGa/kMKw4WX2VY4kyOszgf5oOEGRLNJD32pWaehznM4zE4932pE5WgEa dh2hThFN6iqW22Tc7u0pR/JE8rOHiPEcHWS2RaTSojQ/DCQEXtvVbEU6KSoFhio6+mncH8qRy2E odd+xMX6U025CObyS2USFdpt1Cq+yeziH3pysPwCZcUhErLLj3QdFITwx56zXrN1gVhhsodRx9P z5p0s9OxOKAk+G4s8ozl4yD55UBvyj/QoQEmg5jxXWvGNJvsZWXL4Ht88vDKO4loqjO2V7gkSgL ftBUStDMM0oIT9xvNtK9IpUk1AVX1ZvsjfJnHPvUx4vyTn+xyYZzydF6tuyqnIy5APltEQ5gDgL G8IN9HQZtA8ncNDkswXwfqedGX0VpGKUylUkDU8sP49JW5R/hAUCLur5eKYv/FpIT66EW1c+356 yXUNnEi2POJFxWYaeDVhd7C2l9dDlZ9WHWpvOqF20EMbdyGxfJNcNaGJh4Lm7TpGsmn7dthXebL Uyiue9GWxKJhavIM4kuNBgUc+FB0Sw9YPUlQqVbj+5pP1ocR5mIx/kYjLDhlB382LKS2JQmKq4y u+JLCx/sPt1o46ICljKjcg/+FYYrUK3fNmYF0k1hg8cEcASsYqWkQOtgQwcdJ4zOrQyTTrHNQ8h lOuF24tukLjU5JOp3h+7yLORkZ1tJC7w= X-Received: by 2002:a05:6000:46da:b0:48c:43a3:6a74 with SMTP id ffacd0b85a97d-48e6e2f65c1mr18989143f8f.12.1793659688706; Mon, 02 Nov 2026 14:48:08 -0800 (PST) Return-Path: Received: from tone.k.g (lan.nucleusys.com. [92.247.61.126]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-48e71ba7168sm23770828f8f.55.2026.11.02.14.48.07 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 02 Nov 2026 14:48:07 -0800 (PST) From: Scott Murray To: yocto-patches@lists.yoctoproject.org Subject: [meta-security][PATCH 3/4] tpm2-tss: update to 4.2.0 Date: Tue, 3 Nov 2026 00:47:47 +0200 Message-ID: <70d559289d526f5243aaab79df5ae2e268738f5e.1793659376.git.scott.murray@konsulko.com> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Mon, 02 Nov 2026 22:48:13 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto-patches/message/5211 From: Leonard Anderweit Update to version 4.2.0 and rebase the patch accordingly. Also, remove the CVE_STATUS for CVE-2024-29040 because it is now properly detected as fixed. Signed-off-by: Leonard Anderweit Signed-off-by: Scott Murray --- .../tpm2-tss/tpm2-tss/fixup_hosttools.patch | 13 +++++++------ .../{tpm2-tss_4.1.3.bb => tpm2-tss_4.2.0.bb} | 4 +--- 2 files changed, 8 insertions(+), 9 deletions(-) rename meta-tpm/recipes-tpm2/tpm2-tss/{tpm2-tss_4.1.3.bb => tpm2-tss_4.2.0.bb} (94%) diff --git a/meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss/fixup_hosttools.patch b/meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss/fixup_hosttools.patch index 8822d1b..798a0c7 100644 --- a/meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss/fixup_hosttools.patch +++ b/meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss/fixup_hosttools.patch @@ -1,4 +1,4 @@ -From ab120a9642516cdfdae5c5b8a91e42e2c9898172 Mon Sep 17 00:00:00 2001 +From 8913c8c4b207ae6dfd3ae58d886e2074d53cc268 Mon Sep 17 00:00:00 2001 From: Valentin Kunin Date: Mon, 20 May 2024 21:09:27 +0000 Subject: [PATCH] revert configure: add checks for all tools used by make @@ -15,10 +15,10 @@ Signed-off-by: Valentin Kunin 1 file changed, 11 deletions(-) diff --git a/configure.ac b/configure.ac -index eb6051ea..a52c4725 100644 +index 4a1f1b022772..5a745e9c5c22 100644 --- a/configure.ac +++ b/configure.ac -@@ -663,17 +663,6 @@ AM_CONDITIONAL([SYSD_SYSUSERS], [test "x$systemd_sysusers" = "xyes" && test "x$s +@@ -658,17 +658,6 @@ AM_CONDITIONAL([SYSD_SYSUSERS], [test "x$systemd_sysusers" = "xyes" && test "x$s AC_CHECK_PROG(systemd_tmpfiles, systemd-tmpfiles, yes) AM_CONDITIONAL([SYSD_TMPFILES], [test "x$systemd_tmpfiles" = "xyes" && test "x$tmpfilesdir" != "xno"]) @@ -29,12 +29,13 @@ index eb6051ea..a52c4725 100644 - AC_CHECK_PROG(adduser, adduser, yes) - AC_CHECK_PROG(addgroup, addgroup, yes) - AS_IF([test "x$addgroup" != "xyes" && test "x$groupadd" != "xyes" ], -- [AC_MSG_ERROR([addgroup or groupadd are needed.])]) +- [AC_MSG_WARN([addgroup or groupadd are needed for install.])]) - AS_IF([test "x$adduser" != "xyes" && test "x$useradd" != "xyes" ], -- [AC_MSG_ERROR([adduser or useradd are needed.])])]) +- [AC_MSG_WARN([adduser or useradd are needed for install.])])]) - AC_SUBST([PATH]) dnl --------- Doxy Gen ----------------------- -- -2.45.0.rc1.225.g2a3ae87e7f-goog +2.43.0 + diff --git a/meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss_4.1.3.bb b/meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss_4.2.0.bb similarity index 94% rename from meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss_4.1.3.bb rename to meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss_4.2.0.bb index 30e984e..0d5b36a 100644 --- a/meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss_4.1.3.bb +++ b/meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss_4.2.0.bb @@ -11,7 +11,7 @@ SRC_URI = "https://github.com/tpm2-software/${BPN}/releases/download/${PV}/${BPN file://fixup_hosttools.patch \ " -SRC_URI[sha256sum] = "37f1580200ab78305d1fc872d89241aaee0c93cbe85bc559bf332737a60d3be8" +SRC_URI[sha256sum] = "b53f0c5c8c4ce17f05701a410ca9688f725ca380c9bc4640eacd0eadb1fea124" UPSTREAM_CHECK_URI = "https://github.com/tpm2-software/${BPN}/releases" @@ -94,5 +94,3 @@ FILES:${PN} = "\ ${sysconfdir}/sysusers.d" BBCLASSEXTEND = "native nativesdk" - -CVE_STATUS[CVE-2024-29040] = "fixed-version: Fixed since version 4.1.0" From patchwork Mon Nov 2 22:47:48 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Scott Murray X-Patchwork-Id: 102700 Received: from mail-wr1-f42.google.com (mail-wr1-f42.google.com [209.85.221.42]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.4441.1793659691885156958 for ; Mon, 02 Nov 2026 14:48:12 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@konsulko.com header.s=google header.b=sRujVjG+; spf=pass (domain: konsulko.com, ip: 209.85.221.42, mailfrom: scott.murray@konsulko.com) Received: by mail-wr1-f42.google.com with SMTP id ffacd0b85a97d-48df4f540ebso1624079f8f.3 for ; Mon, 02 Nov 2026 14:48:11 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=konsulko.com; s=google; t=1793659690; x=1794264490; darn=lists.yoctoproject.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to:content-type; bh=6oXx2Wcz1FED2rBIXkOva73MFQLINBc1rdzcsezelTY=; b=sRujVjG+IaA9Mk6DYQQ2n+pliFsmNFnr5zX5zRg5qw2274OMZu1mWYjoUp7vnp0ejd WYCD39oOVIV2mPcRNw8r1pHAh0HYe9E+JlyBzzPX00TDQqeyGInf2z5Q8ne8QEHA5S9H ZqD2scKhbnxQb9qN7vmrx8RVbC6fVYUWUc8Og= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793659690; x=1794264490; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to:content-type; bh=6oXx2Wcz1FED2rBIXkOva73MFQLINBc1rdzcsezelTY=; b=DiEgwSQXCVZazD65s5e5GyNOWg97mjCAZzoGLpRByJyfbUROCAgr1+/FJqUBtL/mIB PZHcDIpoGC1Pca+Xo8k6nJkx93omLzqkPAkLgBypdxlhs3Oqf768GSewcda51apNpU4O ObJwvp9GZi030GUdwhoBC9eBBXN4BJO3UVl7KBsgOUXxZKcK2RHLzzGyskQ3/fQ+uPc8 zEwWz2/Sk4phoRpXcJ1xhCYdQamy2v3mwG6eiGcZ1QsJp+sCYGEFzKR1iDwmdFeh7/r7 G6sfqmMRPe1IG47+GiCN0qm0SJT+cG7nF0NRwQ1wbAritdSC0FnJetT15zY5HsHY/+qQ cyug== X-Gm-Message-State: APuU4Z8Dm1JkRrKvX/gbbpDv4C5f+HuVdxfLa8iegUCtMQOZcK0g0pyg WdlrTSeAm1XOI9TxiF9OyVmcyE0zfpznGOPb1KDcw+IGz6my4MP3k2YjtKeh9q7T4eO9bKjWSxk eU6qO7SM= X-Gm-Gg: AYBFou2dUj60dpgm4aiWMSM96hkMXZCX51K85WYzWlIVWH6/qXklz+/CeYrIbWLOlgk ZOmtzULss8BW7crqGuPo0ECUVDrUHkwR+XHuy1ik6cobKbpjptlv1kUA9QMs4KstGderEm/80Ih bpq54YSIf+f139D1JBoNM1Jelh4EpAnykAMYjrot1jQCTGyIVi+USu/Gc+EwskIEQsA+qQWAbnP xJ/Hko0/M6U6iXMvbEu3DaoRmc30wB7U3f+rlmElHvtjh17Y7PwB0TMZi60oZHo+Cd65dpkfqv4 S/Vy7ODMPjbMgG1H7XflIyaD8BnmV2989f3+p4m4qH0EZIsgNwy6USg0s7Dd3n9NNq0Z1eYYlNJ NtznUnaXxcmvEvLBA9DAJQKKOC3ZTcy972ONnMEkqZQuOsJPURsw8ZHUl58BnCPm6Fxmj8UVvZG TkyzqhQ8gdHWxnwaggzLhR3VK0bejv25Js3W4Qg9eLpJg5OjeV92unkmJ2KinkCBoMXjWwXd5/u K7rZV9bdyfTsVmkUk/n6NjgPK4fSllxx8OSXT2Ul+i1Ovvpr4cImrLJOs5040PkAxknMjqi6pRg dDmrod6nV6eDdOJz3g5BTfum1RtpmOHug7yTzmmhd/8Z8IjiZ2LsLvO6othoSDPUGAheY+/6d9f JKHM3ucu4Ll4pkW0uSfSm+dGJ4qlkxITnCJriW6+2ni0uW/572gD9 X-Received: by 2002:a05:6000:400c:b0:48e:35d4:55b5 with SMTP id ffacd0b85a97d-48e6e518368mr23402719f8f.52.1793659689694; Mon, 02 Nov 2026 14:48:09 -0800 (PST) Return-Path: Received: from tone.k.g (lan.nucleusys.com. [92.247.61.126]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-48e71ba7168sm23770828f8f.55.2026.11.02.14.48.08 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 02 Nov 2026 14:48:09 -0800 (PST) From: Scott Murray To: yocto-patches@lists.yoctoproject.org Subject: [meta-security][PATCH 4/4] python3-tpm2-pytss: Upgrade 2.3.0 -> 3.0.0 Date: Tue, 3 Nov 2026 00:47:48 +0200 Message-ID: <2b1550639ec262f3f0c9a3a2708aca1a1e10fb4f.1793659376.git.scott.murray@konsulko.com> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Mon, 02 Nov 2026 22:48:12 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto-patches/message/5212 To fix build issues from the new version of python3-pycparser in oe-core, upgrade to 3.0.0. This uncovered a new pycparser related issue, so a patch has been added to fix building under OE. Changelog at: https://github.com/tpm2-software/tpm2-pytss/releases/tag/3.0.0 Signed-off-by: Scott Murray --- ...0001-Handle-CC-values-with-arguments.patch | 51 +++++++++++++++++++ ...s_2.3.0.bb => python3-tpm2-pytss_3.0.0.bb} | 5 +- 2 files changed, 54 insertions(+), 2 deletions(-) create mode 100644 meta-tpm/recipes-tpm2/tpm2-pytss/python3-tpm2-pytss/0001-Handle-CC-values-with-arguments.patch rename meta-tpm/recipes-tpm2/tpm2-pytss/{python3-tpm2-pytss_2.3.0.bb => python3-tpm2-pytss_3.0.0.bb} (80%) diff --git a/meta-tpm/recipes-tpm2/tpm2-pytss/python3-tpm2-pytss/0001-Handle-CC-values-with-arguments.patch b/meta-tpm/recipes-tpm2/tpm2-pytss/python3-tpm2-pytss/0001-Handle-CC-values-with-arguments.patch new file mode 100644 index 0000000..432c350 --- /dev/null +++ b/meta-tpm/recipes-tpm2/tpm2-pytss/python3-tpm2-pytss/0001-Handle-CC-values-with-arguments.patch @@ -0,0 +1,51 @@ +From 39f87887bcdf037fe077e04f582db927cb35d2bc Mon Sep 17 00:00:00 2001 +From: Scott Murray +Date: Thu, 29 Oct 2026 19:46:41 +0200 +Subject: [PATCH] Handle CC values with arguments + +OpenEmbedded / Yocto Project builds pass a value for CC that includes +several arguments (e.g. --sysroot). The embedded spaces in the value +break pycparser's expectation for the value of the cpp_path argument to +its API calls. To handle this, add logic to split the value of CC for +use in cpp_path and cpp_args. shlex is used to hopefully handle quoted +spaces or potentially spaces in the compiler path, but this has not +been tested. + +Upstream-Status: Pending +Signed-off-by: Scott Murray +--- + setup.py | 11 +++++++++-- + 1 file changed, 9 insertions(+), 2 deletions(-) + +diff --git a/setup.py b/setup.py +index 1216065..0160a76 100644 +--- a/setup.py ++++ b/setup.py +@@ -2,6 +2,7 @@ import site + import sys + import os + import platform ++import shlex + from setuptools import setup + from setuptools.command.build_ext import build_ext + from pkgconfig import pkgconfig +@@ -22,11 +23,17 @@ site.ENABLE_USER_SITE = "--user" in sys.argv[1:] + + + def cpp_path(): +- return os.environ.get("CC", "cc") ++ cc = os.environ.get("CC", "cc") ++ return shlex.split(cc)[0] + + + def cpp_args(args=[]): +- return ["-E"] + args ++ cc = os.environ.get("CC", "cc") ++ split = shlex.split(cc) ++ cc_args = ["-E"] ++ if len(split) > 1: ++ cc_args = split[1:] + ["-E"] ++ return cc_args + args + + + class type_generator(build_ext): diff --git a/meta-tpm/recipes-tpm2/tpm2-pytss/python3-tpm2-pytss_2.3.0.bb b/meta-tpm/recipes-tpm2/tpm2-pytss/python3-tpm2-pytss_3.0.0.bb similarity index 80% rename from meta-tpm/recipes-tpm2/tpm2-pytss/python3-tpm2-pytss_2.3.0.bb rename to meta-tpm/recipes-tpm2/tpm2-pytss/python3-tpm2-pytss_3.0.0.bb index 60de4a6..1ce8cf6 100644 --- a/meta-tpm/recipes-tpm2/tpm2-pytss/python3-tpm2-pytss_2.3.0.bb +++ b/meta-tpm/recipes-tpm2/tpm2-pytss/python3-tpm2-pytss_3.0.0.bb @@ -4,9 +4,10 @@ HOMEPAGE = "https://github.com/tpm2-software/tpm2-pytss" LICENSE = "BSD-2-Clause" LIC_FILES_CHKSUM = "file://LICENSE;md5=500b2e742befc3da00684d8a1d5fd9da" -PYPI_PACKAGE_SDIST = "tpm2-pytss" +PYPI_PACKAGE_SDIST = "tpm2_pytss" -SRC_URI[sha256sum] = "20071129379656f5f3c3bc16d364612672b147d81191fb4eb9f9ff9fbee48410" +SRC_URI += "file://0001-Handle-CC-values-with-arguments.patch" +SRC_URI[sha256sum] = "c193cf1908b482f93c4aa464132920fe3a37d4b9d802e267974ff2dfe37d4433" inherit autotools pkgconfig pypi python_setuptools_build_meta