diff --git a/core/systemd/PKGBUILD b/core/systemd/PKGBUILD
index eb5cab14a..5272b0231 100644
--- a/core/systemd/PKGBUILD
+++ b/core/systemd/PKGBUILD
@@ -13,7 +13,7 @@ pkgname=('systemd' 'systemd-libs' 'systemd-resolvconf' 'systemd-sysvcompat')
 _tag='91ea8d825553fc1ecfc19448be24a4da56b13d00' # git rev-parse v${_tag_name}
 _tag_name=249.4
 pkgver="${_tag_name/-/}"
-pkgrel=1
+pkgrel=2
 arch=('x86_64')
 url='https://www.github.com/systemd/systemd'
 makedepends=('acl' 'cryptsetup' 'docbook-xsl' 'gperf' 'lz4' 'xz' 'pam' 'libelf'
@@ -71,6 +71,10 @@ sha512sums=('SKIP'
             '825b9dd0167c072ba62cabe0677e7cd20f2b4b850328022540f122689d8b25315005fa98ce867cf6e7460b2b26df16b88bb3b5c9ebf721746dce4e2271af7b97')
 
 _backports=(
+  # explicitly close FIDO2 devices
+  'b6aa89b0a399992c8ea762e6ec4f30cff90618f2'
+  # tpm-util: fix TPM parameter handling
+  'd2bf22fb8d8ad8a2c137f30ecd1fb49aaf50f57f'
 )
 
 _reverts=(