* [OE-core][scarthgap 00/11] Pull request (cover letter only)
@ 2026-03-10 23:08 Yoann Congal
0 siblings, 0 replies; 2+ messages in thread
From: Yoann Congal @ 2026-03-10 23:08 UTC (permalink / raw)
To: openembedded-core; +Cc: Paul Barker
Note: this series contains a major OpenSSL upgrade (agreed by YP TSC).
Those are the patches from the last patch review:
https://lore.kernel.org/openembedded-core/cover.1772923420.git.yoann.congal@smile.fr/T/#t
(no changes during review)
Passed a-full on autobuilder:
https://autobuilder.yoctoproject.org/valkyrie/#/builders/29/builds/3349
Ignore the warning about Centos Stream9 (its support is a work in progress)
I also did a full meta-oe build: https://autobuilder.yoctoproject.org/valkyrie/#/builders/81/builds/1342
(the warnings are unrelated to this series)
The following changes since commit a9a785d7fa0cfe2a9087dbcde0ef9f0d2a441375:
build-appliance-image: Update to scarthgap head revision (2026-02-27 17:45:15 +0000)
are available in the Git repository at:
https://git.openembedded.org/openembedded-core-contrib stable/scarthgap-next
https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/scarthgap-next
for you to fetch changes up to fd8a140eb0742bbc12a23e36c9d24378bc0f462d:
busybox: Fixes CVE-2025-60876 (2026-03-06 23:58:42 +0100)
----------------------------------------------------------------
Hugo SIMELIERE (2):
zlib: Fix CVE-2026-27171
harfbuzz: Fix CVE-2026-22693
Livin Sunny (1):
busybox: Fixes CVE-2025-60876
Paul Barker (1):
create-pull-request: Keep commit hash to be pulled in cover email
Peter Marko (3):
ffmpeg: set status for CVE-2025-10256
ffmpeg: set status for CVE-2025-12343
openssl: upgrade 3.2.6 -> 3.5.5
Shaik Moin (1):
gdk-pixbuf: Fix CVE-2025-6199
Tom Hochstein (1):
uboot-config: Fix devtool modify
Yoann Congal (2):
scripts/install-buildtools: Update to 5.0.16
README: Add scarthgap subject-prefix to git-send-email suggestion
README.OE-Core.md | 2 +-
meta/classes-recipe/uboot-config.bbclass | 2 +-
.../openssl/files/environment.d-openssl.sh | 9 ++-
...ke-history-reporting-when-test-fails.patch | 32 ++++----
...1-Configure-do-not-tweak-mips-cflags.patch | 4 +-
...sysroot-and-debug-prefix-map-from-co.patch | 26 ++++---
.../0001-extend-check_cwm-test-timeout.patch | 32 ++++++++
.../openssl/openssl/CVE-2024-41996.patch | 44 -----------
.../openssl/openssl/CVE-2025-15468.patch | 39 ----------
.../openssl/openssl/CVE-2025-69419.patch | 61 ---------------
.../{openssl_3.2.6.bb => openssl_3.5.5.bb} | 75 ++++++++++++-------
.../busybox/busybox/CVE-2025-60876.patch | 42 +++++++++++
meta/recipes-core/busybox/busybox_1.36.1.bb | 1 +
.../zlib/zlib/CVE-2026-27171.patch | 63 ++++++++++++++++
meta/recipes-core/zlib/zlib_1.3.1.bb | 1 +
.../gdk-pixbuf/gdk-pixbuf/CVE-2025-6199.patch | 36 +++++++++
.../gdk-pixbuf/gdk-pixbuf_2.42.12.bb | 1 +
.../harfbuzz/files/CVE-2026-22693.patch | 33 ++++++++
.../harfbuzz/harfbuzz_8.3.0.bb | 4 +-
.../recipes-multimedia/ffmpeg/ffmpeg_6.1.4.bb | 2 +-
scripts/create-pull-request | 2 +-
scripts/install-buildtools | 4 +-
22 files changed, 305 insertions(+), 210 deletions(-)
create mode 100644 meta/recipes-connectivity/openssl/openssl/0001-extend-check_cwm-test-timeout.patch
delete mode 100644 meta/recipes-connectivity/openssl/openssl/CVE-2024-41996.patch
delete mode 100644 meta/recipes-connectivity/openssl/openssl/CVE-2025-15468.patch
delete mode 100644 meta/recipes-connectivity/openssl/openssl/CVE-2025-69419.patch
rename meta/recipes-connectivity/openssl/{openssl_3.2.6.bb => openssl_3.5.5.bb} (76%)
create mode 100644 meta/recipes-core/busybox/busybox/CVE-2025-60876.patch
create mode 100644 meta/recipes-core/zlib/zlib/CVE-2026-27171.patch
create mode 100644 meta/recipes-gnome/gdk-pixbuf/gdk-pixbuf/CVE-2025-6199.patch
create mode 100644 meta/recipes-graphics/harfbuzz/files/CVE-2026-22693.patch
^ permalink raw reply [flat|nested] 2+ messages in thread* [OE-core][scarthgap 00/11] Pull request (cover letter only)
@ 2026-08-28 8:41 Yoann Congal
0 siblings, 0 replies; 2+ messages in thread
From: Yoann Congal @ 2026-08-28 8:41 UTC (permalink / raw)
To: openembedded-core; +Cc: Paul Barker, Richard Purdie
Those are the patches from the last patch review:
https://lore.kernel.org/all/cover.1787652331.git.yoann.congal@smile.fr/
(No changes)
Passed a-full on autobuilder:
https://autobuilder.yoctoproject.org/valkyrie/?#/builders/29/builds/4569
The following changes since commit 70dc15941dd33270a92d1001174efb3093e79bdf:
build-appliance-image: Update to scarthgap head revision (2026-08-24 14:28:47 +0100)
are available in the Git repository at:
https://git.openembedded.org/openembedded-core-contrib stable/scarthgap-next
https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/scarthgap-next
for you to fetch changes up to b7007d82eec734bab6760ae325645ae5b199e384:
rpcbind: Fix CVE-2026-16277 (2026-08-25 07:01:14 +0200)
----------------------------------------------------------------
Adarsh Jagadish Kamini (1):
libssh2: fix CVE-2026-58050
Deepak Rathore (2):
nghttp2: set status for CVE-2026-58055
glib-2.0: fix CVE-2026-58015
Etienne Cordonnier (1):
curl: fix CVE-2025-10148 backport for websockets on 8.7.1
Jaipaul Cheernam (4):
binutils: fix CVE-2025-1147
binutils: fix CVE-2025-8224
binutils: fix CVE-2026-15003
binutils: fix CVE-2026-18220
Peter Marko (1):
bison: patch CVE-2026-56389
Ross Burton (1):
bitbake.conf: add TMPDIR to GIT_CEILING_DIRECTORIES
Vijay Anusuri (1):
rpcbind: Fix CVE-2026-16277
meta/conf/bitbake.conf | 6 +-
.../glib-2.0/glib-2.0/CVE-2026-58015_p1.patch | 97 +++++
.../glib-2.0/glib-2.0/CVE-2026-58015_p2.patch | 55 +++
.../glib-2.0/glib-2.0/CVE-2026-58015_p3.patch | 198 +++++++++
.../glib-2.0/glib-2.0/CVE-2026-58015_p4.patch | 222 ++++++++++
meta/recipes-core/glib-2.0/glib-2.0_2.78.6.bb | 4 +
meta/recipes-core/glib-2.0/glib.inc | 2 +-
.../binutils/binutils-2.42.inc | 4 +
.../binutils/binutils/CVE-2025-1147.patch | 110 +++++
.../binutils/binutils/CVE-2025-8224.patch | 54 +++
.../binutils/binutils/CVE-2026-15003.patch | 400 ++++++++++++++++++
.../binutils/binutils/CVE-2026-18220.patch | 65 +++
.../bison/bison/CVE-2026-56389.patch | 56 +++
meta/recipes-devtools/bison/bison_3.8.2.bb | 1 +
.../rpcbind/rpcbind/CVE-2026-16277.patch | 34 ++
.../recipes-extended/rpcbind/rpcbind_1.2.6.bb | 1 +
.../curl/curl/CVE-2025-10148.patch | 24 +-
.../libssh2/libssh2/CVE-2026-58050.patch | 45 ++
.../recipes-support/libssh2/libssh2_1.11.1.bb | 1 +
.../recipes-support/nghttp2/nghttp2_1.61.0.bb | 2 +
20 files changed, 1367 insertions(+), 14 deletions(-)
create mode 100644 meta/recipes-core/glib-2.0/glib-2.0/CVE-2026-58015_p1.patch
create mode 100644 meta/recipes-core/glib-2.0/glib-2.0/CVE-2026-58015_p2.patch
create mode 100644 meta/recipes-core/glib-2.0/glib-2.0/CVE-2026-58015_p3.patch
create mode 100644 meta/recipes-core/glib-2.0/glib-2.0/CVE-2026-58015_p4.patch
create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2025-1147.patch
create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2025-8224.patch
create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2026-15003.patch
create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2026-18220.patch
create mode 100644 meta/recipes-devtools/bison/bison/CVE-2026-56389.patch
create mode 100644 meta/recipes-extended/rpcbind/rpcbind/CVE-2026-16277.patch
create mode 100644 meta/recipes-support/libssh2/libssh2/CVE-2026-58050.patch
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2026-08-28 8:41 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-03-10 23:08 [OE-core][scarthgap 00/11] Pull request (cover letter only) Yoann Congal
-- strict thread matches above, loose matches on Subject: below --
2026-08-28 8:41 Yoann Congal
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.