From: Yoann Congal <yoann.congal@smile.fr>
To: openembedded-core@lists.openembedded.org
Subject: [OE-core][wrynose 00/40] Patch review
Date: Sat, 5 Sep 2026 22:44:01 +0200 [thread overview]
Message-ID: <cover.1788629392.git.yoann.congal@smile.fr> (raw)
Hello,
This is a series dedicated to unblock a number of patches on scarthgap.
Please review this set of changes for wrynose and have comments back by
end of day Tuesday, September 8.
Passed a-full on autobuilder:
https://autobuilder.yoctoproject.org/valkyrie/?#/builders/29/builds/4666
Some builds failed due to failed access to our infrastructure (Michael
Halstead is looking into it)
* "Compare AB workers and SANITY_TESTED_DISTROS" failed but succeeded in
a previous run (with no change related to this)
* qemuarm64-armhost retried in https://autobuilder.yoctoproject.org/valkyrie/?#/builders/8/builds/4608
* qemux86 retried in https://autobuilder.yoctoproject.org/valkyrie/?#/builders/30/builds/4563
* qemuarmv5 retried in https://autobuilder.yoctoproject.org/valkyrie/?#/builders/80/builds/4409
* oe-selftest-armhost: Bitbake Selftest failed but that particular
bitbake commit succeeded in https://autobuilder.yoctoproject.org/valkyrie/?#/builders/23/builds/4798
The following changes since commit 00c66f1d38a234f7738c2eb8fafa41b4f057a865:
pseudo: 1.9.10 -> 1.9.11 (2026-08-28 17:24:32 +0200)
are available in the Git repository at:
https://git.openembedded.org/openembedded-core-contrib stable/wrynose-nut
https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/wrynose-nut
for you to fetch changes up to 31def396136be047e10c507a50264aad52ba6b0f:
scripts/install-buildtools: Update to 6.0.3 (2026-09-04 16:21:55 +0200)
----------------------------------------------------------------
Abhishek Bachiphale (1):
perl: fix CVE-2026-42496 and CVE-2026-42497
Darsh Kelaiya (4):
python3-git: fix CVE-2026-42284
python3-git: fix CVE-2026-42215
python3-git: fix CVE-2026-44243
python3-git: fix CVE-2026-44244
Deepak Rathore (2):
python3-cryptography: backport stray file install fix
qemu: guard RESOLVE_CACHED strace flag
Devansh Patel (1):
apt: mark CVE-2011-3374 as fixed-version
Esa Jaaskela (1):
volatile-binds: order systemd-timesyncd after /var/lib
Hetvi Thakar (2):
python3-idna: Fix CVE-2026-45409
libssh2: Fix CVE-2026-58051
Jaipaul Cheernam (3):
expat: set CVE_STATUS for CVE-2026-72522
util-linux: Fix CVE-2026-3184
python3: upgrade 3.14.6 -> 3.14.7
Jakub Szczudlo (Nokia) (2):
gnutls: fix for CVE-2026-42011
gnutls: fix CVE-2026-42010
Peter Marko (5):
alsa-lib: patch CVE-2026-56109
libevent: set status for CVE-2026-63380
go: upgrade 1.26.5 -> 1.26.6
util-linux: set status for CVE-2026-13595
go: upgrade 1.26.6 -> 1.26.7
Richard Purdie (2):
python3-mako: upgrade 1.3.10 -> 1.3.12
python3-click: upgrade 8.3.1 -> 8.3.3
Ross Burton (1):
libevent: upgrade 2.1.12 -> 2.1.13
Sowmya Sathram (1):
binutils: stable 2.46 branch updates
Tafil Avdyli (2):
python3: add missing pyc files to core
python3: fix stringold cache files
Tim Orling (9):
python3-babel: fix CVE_PRODUCT
python3-pycryptodome: fix CVE_PRODUCT
python3-dbusmock: fix CVE_PRODUCT
python3-wheel: fix CVE_PRODUCT
python3-click: fix CVE_PRODUCT
python3-attrs: fix CVE_PRODUCT
python3-numpy: fix CVE_PRODUCT
python3-pycryptodomex: fix CVE_PRODUCT
python3-git: fix CVE_PRODUCT
Vijay Anusuri (3):
libxfont2: Fix CVE-2026-56001
libxfont2: Fix CVE-2026-56002
libxfont2: Fix CVE-2026-56003
Yoann Congal (1):
scripts/install-buildtools: Update to 6.0.3
meta/recipes-core/expat/expat_2.7.5.bb | 3 +
meta/recipes-core/util-linux/util-linux.inc | 3 +
.../util-linux/util-linux/CVE-2026-3184.patch | 61 ++++++++
.../volatile-binds/volatile-binds.bb | 9 +-
meta/recipes-devtools/apt/apt_3.0.3.bb | 3 +
.../binutils/binutils-2.46.inc | 2 +-
.../go/{go-1.26.5.inc => go-1.26.7.inc} | 2 +-
...e_1.26.5.bb => go-binary-native_1.26.7.bb} | 6 +-
..._1.26.5.bb => go-cross-canadian_1.26.7.bb} | 0
...{go-cross_1.26.5.bb => go-cross_1.26.7.bb} | 0
...osssdk_1.26.5.bb => go-crosssdk_1.26.7.bb} | 0
...runtime_1.26.5.bb => go-runtime_1.26.7.bb} | 0
.../go/{go_1.26.5.bb => go_1.26.7.bb} | 0
.../perl/files/CVE-2026-42496.patch | 99 ++++++++++++
meta/recipes-devtools/perl/perl_5.42.0.bb | 1 +
.../python/python3-attrs_25.4.0.bb | 2 +
.../python/python3-babel_2.18.0.bb | 2 +
...-click_8.3.1.bb => python3-click_8.3.3.bb} | 4 +-
.../python/python3-cryptography.bb | 1 +
...lling-stray-files-into-site-packages.patch | 55 +++++++
.../python/python3-dbusmock_0.38.1.bb | 2 +
.../python3-git/CVE-2026-42215_p1.patch | 60 ++++++++
.../python3-git/CVE-2026-42215_p2.patch | 45 ++++++
.../python/python3-git/CVE-2026-42284.patch | 36 +++++
.../python3-git/CVE-2026-44243_p1.patch | 134 +++++++++++++++++
.../python3-git/CVE-2026-44243_p2.patch | 83 +++++++++++
.../python3-git/CVE-2026-44244_p1.patch | 102 +++++++++++++
.../python3-git/CVE-2026-44244_p2.patch | 28 ++++
.../python/python3-git_3.1.43.bb | 10 ++
.../python3-idna/CVE-2026-45409_p1.patch | 75 ++++++++++
.../python3-idna/CVE-2026-45409_p2.patch | 48 ++++++
.../python3-idna/CVE-2026-45409_p3.patch | 72 +++++++++
.../python/python3-idna_3.11.bb | 4 +
...-mako_1.3.10.bb => python3-mako_1.3.12.bb} | 2 +-
.../python/python3-numpy_2.4.3.bb | 2 +
.../python/python3-pycryptodome_3.23.0.bb | 1 +
.../python/python3-pycryptodomex_3.23.0.bb | 2 +
.../python/python3-wheel_0.46.3.bb | 2 +
...shebang-overflow-on-python-config.py.patch | 6 +-
...e-stdin-I-O-errors-same-way-as-maste.patch | 4 +-
...-use-prefix-value-from-build-configu.patch | 7 +-
...-qemu-wrapper-when-gathering-profile.patch | 9 +-
...est_sysconfig-for-posix_user-purelib.patch | 4 +-
.../0001-prefer-valid-entrypoints.patch | 2 +-
...g.py-use-platlibdir-also-for-purelib.patch | 4 +-
...le.py-correct-the-test-output-format.patch | 6 +-
.../python/python3/CVE-2026-11940.patch | 67 ---------
.../python/python3/CVE-2026-11972.patch | 61 --------
.../python/python3/makerace.patch | 6 +-
.../python/python3/python3-manifest.json | 11 +-
.../python/python3/valid-dists.patch | 2 +-
.../{python3_3.14.6.bb => python3_3.14.7.bb} | 7 +-
meta/recipes-devtools/qemu/qemu.inc | 1 +
...-if-RESOLVE_CACHED-flag-is-defined-b.patch | 38 +++++
.../xorg-lib/libxfont2/CVE-2026-56001.patch | 75 ++++++++++
.../xorg-lib/libxfont2/CVE-2026-56002.patch | 138 +++++++++++++++++
.../xorg-lib/libxfont2/CVE-2026-56003.patch | 114 ++++++++++++++
.../xorg-lib/libxfont2_2.0.7.bb | 5 +
.../alsa/alsa-lib/CVE-2026-56109.patch | 33 ++++
.../alsa/alsa-lib_1.2.15.3.bb | 1 +
.../gnutls/gnutls/CVE-2026-42010.patch | 41 +++++
.../gnutls/gnutls/CVE-2026-42011_p1.patch | 43 ++++++
.../gnutls/gnutls/CVE-2026-42011_p2.patch | 141 ++++++++++++++++++
meta/recipes-support/gnutls/gnutls_3.8.12.bb | 3 +
....c-patch-out-tests-that-require-a-wo.patch | 8 +-
...ncrease-default-timeval-tolerance-50.patch | 10 +-
...-monotonic_prc_fallback-as-retriable.patch | 11 +-
...ts-are-marked-failed-only-when-all-a.patch | 9 +-
.../libevent/Makefile-missing-test-dir.patch | 14 +-
...{libevent_2.1.12.bb => libevent_2.1.13.bb} | 4 +-
.../libssh2/libssh2/CVE-2026-58051.patch | 34 +++++
.../recipes-support/libssh2/libssh2_1.11.1.bb | 1 +
scripts/install-buildtools | 4 +-
73 files changed, 1679 insertions(+), 206 deletions(-)
create mode 100644 meta/recipes-core/util-linux/util-linux/CVE-2026-3184.patch
rename meta/recipes-devtools/go/{go-1.26.5.inc => go-1.26.7.inc} (90%)
rename meta/recipes-devtools/go/{go-binary-native_1.26.5.bb => go-binary-native_1.26.7.bb} (80%)
rename meta/recipes-devtools/go/{go-cross-canadian_1.26.5.bb => go-cross-canadian_1.26.7.bb} (100%)
rename meta/recipes-devtools/go/{go-cross_1.26.5.bb => go-cross_1.26.7.bb} (100%)
rename meta/recipes-devtools/go/{go-crosssdk_1.26.5.bb => go-crosssdk_1.26.7.bb} (100%)
rename meta/recipes-devtools/go/{go-runtime_1.26.5.bb => go-runtime_1.26.7.bb} (100%)
rename meta/recipes-devtools/go/{go_1.26.5.bb => go_1.26.7.bb} (100%)
create mode 100644 meta/recipes-devtools/perl/files/CVE-2026-42496.patch
rename meta/recipes-devtools/python/{python3-click_8.3.1.bb => python3-click_8.3.3.bb} (87%)
create mode 100644 meta/recipes-devtools/python/python3-cryptography/0002-Fix-installing-stray-files-into-site-packages.patch
create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-42215_p1.patch
create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-42215_p2.patch
create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-42284.patch
create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-44243_p1.patch
create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-44243_p2.patch
create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-44244_p1.patch
create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-44244_p2.patch
create mode 100644 meta/recipes-devtools/python/python3-idna/CVE-2026-45409_p1.patch
create mode 100644 meta/recipes-devtools/python/python3-idna/CVE-2026-45409_p2.patch
create mode 100644 meta/recipes-devtools/python/python3-idna/CVE-2026-45409_p3.patch
rename meta/recipes-devtools/python/{python3-mako_1.3.10.bb => python3-mako_1.3.12.bb} (88%)
delete mode 100644 meta/recipes-devtools/python/python3/CVE-2026-11940.patch
delete mode 100644 meta/recipes-devtools/python/python3/CVE-2026-11972.patch
rename meta/recipes-devtools/python/{python3_3.14.6.bb => python3_3.14.7.bb} (98%)
create mode 100644 meta/recipes-devtools/qemu/qemu/0012-linux-user-Check-if-RESOLVE_CACHED-flag-is-defined-b.patch
create mode 100644 meta/recipes-graphics/xorg-lib/libxfont2/CVE-2026-56001.patch
create mode 100644 meta/recipes-graphics/xorg-lib/libxfont2/CVE-2026-56002.patch
create mode 100644 meta/recipes-graphics/xorg-lib/libxfont2/CVE-2026-56003.patch
create mode 100644 meta/recipes-multimedia/alsa/alsa-lib/CVE-2026-56109.patch
create mode 100644 meta/recipes-support/gnutls/gnutls/CVE-2026-42010.patch
create mode 100644 meta/recipes-support/gnutls/gnutls/CVE-2026-42011_p1.patch
create mode 100644 meta/recipes-support/gnutls/gnutls/CVE-2026-42011_p2.patch
rename meta/recipes-support/libevent/{libevent_2.1.12.bb => libevent_2.1.13.bb} (92%)
create mode 100644 meta/recipes-support/libssh2/libssh2/CVE-2026-58051.patch
next reply other threads:[~2026-09-05 20:45 UTC|newest]
Thread overview: 41+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-09-05 20:44 Yoann Congal [this message]
2026-09-05 20:44 ` [OE-core][wrynose 01/40] apt: mark CVE-2011-3374 as fixed-version Yoann Congal
2026-09-05 20:44 ` [OE-core][wrynose 02/40] expat: set CVE_STATUS for CVE-2026-72522 Yoann Congal
2026-09-05 20:44 ` [OE-core][wrynose 03/40] python3-git: fix CVE-2026-42284 Yoann Congal
2026-09-05 20:44 ` [OE-core][wrynose 04/40] python3-git: fix CVE-2026-42215 Yoann Congal
2026-09-05 20:44 ` [OE-core][wrynose 05/40] python3-git: fix CVE-2026-44243 Yoann Congal
2026-09-05 20:44 ` [OE-core][wrynose 06/40] python3-git: fix CVE-2026-44244 Yoann Congal
2026-09-05 20:44 ` [OE-core][wrynose 07/40] python3-babel: fix CVE_PRODUCT Yoann Congal
2026-09-05 20:44 ` [OE-core][wrynose 08/40] python3-pycryptodome: " Yoann Congal
2026-09-05 20:44 ` [OE-core][wrynose 09/40] python3-dbusmock: " Yoann Congal
2026-09-05 20:44 ` [OE-core][wrynose 10/40] python3-wheel: " Yoann Congal
2026-09-05 20:44 ` [OE-core][wrynose 11/40] python3-click: " Yoann Congal
2026-09-05 20:44 ` [OE-core][wrynose 12/40] python3-attrs: " Yoann Congal
2026-09-05 20:44 ` [OE-core][wrynose 13/40] python3-numpy: " Yoann Congal
2026-09-05 20:44 ` [OE-core][wrynose 14/40] python3-pycryptodomex: " Yoann Congal
2026-09-05 20:44 ` [OE-core][wrynose 15/40] python3-mako: upgrade 1.3.10 -> 1.3.12 Yoann Congal
2026-09-05 20:44 ` [OE-core][wrynose 16/40] gnutls: fix for CVE-2026-42011 Yoann Congal
2026-09-05 20:44 ` [OE-core][wrynose 17/40] gnutls: fix CVE-2026-42010 Yoann Congal
2026-09-05 20:44 ` [OE-core][wrynose 18/40] alsa-lib: patch CVE-2026-56109 Yoann Congal
2026-09-05 20:44 ` [OE-core][wrynose 19/40] libevent: upgrade 2.1.12 -> 2.1.13 Yoann Congal
2026-09-05 20:44 ` [OE-core][wrynose 20/40] libevent: set status for CVE-2026-63380 Yoann Congal
2026-09-05 20:44 ` [OE-core][wrynose 21/40] libxfont2: Fix CVE-2026-56001 Yoann Congal
2026-09-05 20:44 ` [OE-core][wrynose 22/40] libxfont2: Fix CVE-2026-56002 Yoann Congal
2026-09-05 20:44 ` [OE-core][wrynose 23/40] libxfont2: Fix CVE-2026-56003 Yoann Congal
2026-09-05 20:44 ` [OE-core][wrynose 24/40] util-linux: Fix CVE-2026-3184 Yoann Congal
2026-09-05 20:44 ` [OE-core][wrynose 25/40] python3: upgrade 3.14.6 -> 3.14.7 Yoann Congal
2026-09-05 20:44 ` [OE-core][wrynose 26/40] volatile-binds: order systemd-timesyncd after /var/lib Yoann Congal
2026-09-05 20:44 ` [OE-core][wrynose 27/40] go: upgrade 1.26.5 -> 1.26.6 Yoann Congal
2026-09-05 20:44 ` [OE-core][wrynose 28/40] python3: add missing pyc files to core Yoann Congal
2026-09-05 20:44 ` [OE-core][wrynose 29/40] python3: fix stringold cache files Yoann Congal
2026-09-05 20:44 ` [OE-core][wrynose 30/40] python3-git: fix CVE_PRODUCT Yoann Congal
2026-09-05 20:44 ` [OE-core][wrynose 31/40] binutils: stable 2.46 branch updates Yoann Congal
2026-09-05 20:44 ` [OE-core][wrynose 32/40] python3-click: upgrade 8.3.1 -> 8.3.3 Yoann Congal
2026-09-05 20:44 ` [OE-core][wrynose 33/40] python3-idna: Fix CVE-2026-45409 Yoann Congal
2026-09-05 20:44 ` [OE-core][wrynose 34/40] perl: fix CVE-2026-42496 and CVE-2026-42497 Yoann Congal
2026-09-05 20:44 ` [OE-core][wrynose 35/40] libssh2: Fix CVE-2026-58051 Yoann Congal
2026-09-05 20:44 ` [OE-core][wrynose 36/40] python3-cryptography: backport stray file install fix Yoann Congal
2026-09-05 20:44 ` [OE-core][wrynose 37/40] qemu: guard RESOLVE_CACHED strace flag Yoann Congal
2026-09-05 20:44 ` [OE-core][wrynose 38/40] util-linux: set status for CVE-2026-13595 Yoann Congal
2026-09-05 20:44 ` [OE-core][wrynose 39/40] go: upgrade 1.26.6 -> 1.26.7 Yoann Congal
2026-09-05 20:44 ` [OE-core][wrynose 40/40] scripts/install-buildtools: Update to 6.0.3 Yoann Congal
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=cover.1788629392.git.yoann.congal@smile.fr \
--to=yoann.congal@smile.fr \
--cc=openembedded-core@lists.openembedded.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.