linux/meta-security.git/meta-tpm, branch master-next

tpm2-pkcs11: upgrade 1.9.1 -> 1.9.2

2026-05-25T14:11:19+00:00

This contains fix for building native recipe with security flags enabled: * https://github.com/tpm2-software/tpm2-pkcs11/commit/be97b21ae641303ce83a8fbb54002701c1aede31 Signed-off-by: Peter Marko Signed-off-by: Scott Murray

tpm2-tools: make efivar optional

2026-05-17T14:44:55+00:00

Previous commit made this a hard dependency because it's autodetected. Instead of that, make it configurable so it can be disabled (roughtly equivalent to behavior before that commit). Signed-off-by: Peter Marko Signed-off-by: Scott Murray

layer.conf: correct WARN_QA

2026-05-17T14:44:55+00:00

Fix the typo "tmp-layer" in "WARN_QA:append". The right name for this layer in OVERRIDES is layer-tpm-layer by checking "bitbake -e | grep ^OVERRIDES=". Signed-off-by: Li Zhou Signed-off-by: Scott Murray

tpm2-pkcs11: fix build failure

2026-04-14T21:18:23+00:00

Use patch submitted upstream to fix build error: | src/lib/tpm.c: In function ‘tpm_unseal’: | src/lib/tpm.c:1040:16: error: incompatible types when returning type ‘_Bool’ but ‘twist’ {aka ‘const char *’} was expected | 1040 | return false; | | ^~~~~ Signed-off-by: Peter Marko Signed-off-by: Scott Murray

libtpms: fix build with glibc 2.43

2026-04-14T19:43:53+00:00

Backport patch stable-0.10 branch (not tagged yet). Signed-off-by: Peter Marko Signed-off-by: Scott Murray

layer.conf: Update to wrynose (6.0) release

2026-03-22T14:24:23+00:00

Update LAYERSERIES_COMPAT in all layer.conf files with the exception of meta-parsec to wrynose. For meta-parsec, added wrynose to the list of supported versions. Signed-off-by: Marta Rybczynska

python3-tpm2-pytss: BBCLASSEXTEND native and nativesdk

2026-03-04T10:12:48+00:00

Commit cd729862f68152bc76db02cd4a93ca12a9424f88 added native/nativesdk possibility to tpm2-pkcs11. After 784ca4b6584101e971b2d5d76ec7b716ad1301b5 which added rdepends on python3-tpm2-pytss, there are errors like: Missing or unbuildable dependency chain was: ['', 'swtpm-native', 'tpm2-pkcs11-tools-native', 'python3-tpm2-pytss-native'] Signed-off-by: Peter Marko Signed-off-by: Scott Murray

meta-tpm: Small maintainers fix

2025-10-08T15:34:14+00:00

To avoid confusion, remove stray aircrack-ng entry as it is actually in the main layer and not meta-tpm. Signed-off-by: Scott Murray

tpm2-tss-engine: remove libgcrypt dependency

2025-09-10T22:08:38+00:00

There is no hint of libgcrypt in the upstream code and distro packages like Debian and Fedora do not have this dependency either. Signed-off-by: Patrick Wicki

libhoth: update to latest

2025-07-04T16:41:20+00:00

Update libhoth SRCREV to its latest commit, and add patches to fix gcc 15 and build dependency issues. Since the last update was so long ago, the changelog is longer than seems reasonable to include here, please refer to: https://github.com/google/libhoth/commits/main/?since=2024-01-16&until=2025-07-03 Signed-off-by: Scott Murray