public inbox for openembedded-core@lists.openembedded.org
 help / color / mirror / Atom feed
* [OE-core][scarthgap][PATCH 1/3] tzdata,tzcode-native: Upgrade 2025b -> 2025c
@ 2026-03-07  6:45 ankur.tyagi85
  2026-03-07  6:45 ` [OE-core][scarthgap][PATCH 2/3] wireless-regdb: upgrade 2025.10.07 -> 2026.02.04 ankur.tyagi85
                   ` (2 more replies)
  0 siblings, 3 replies; 8+ messages in thread
From: ankur.tyagi85 @ 2026-03-07  6:45 UTC (permalink / raw)
  To: openembedded-core
  Cc: Paul Barker, Mathieu Dubois-Briand, Richard Purdie, Ankur Tyagi

From: Paul Barker <paul@pbarker.dev>

This release mostly changes code and commentary. The only changed data
are leap second table expiration and pre-1976 time in Baja California.

Full release notes:
  https://lists.iana.org/hyperkitty/list/tz-announce@iana.org/thread/TAGXKYLMAQRZRFTERQ33CEKOW7KRJVAK/

Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 452334219309793ad74abd6ff390dcb06cab929b)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
 meta/recipes-extended/timezone/timezone.inc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/meta/recipes-extended/timezone/timezone.inc b/meta/recipes-extended/timezone/timezone.inc
index f21bedf4fc..35f22d5a15 100644
--- a/meta/recipes-extended/timezone/timezone.inc
+++ b/meta/recipes-extended/timezone/timezone.inc
@@ -6,7 +6,7 @@ SECTION = "base"
 LICENSE = "PD & BSD-3-Clause"
 LIC_FILES_CHKSUM = "file://LICENSE;md5=c679c9d6b02bc2757b3eaf8f53c43fba"
 
-PV = "2025b"
+PV = "2025c"
 
 SRC_URI =" http://www.iana.org/time-zones/repository/releases/tzcode${PV}.tar.gz;name=tzcode;subdir=tz \
            http://www.iana.org/time-zones/repository/releases/tzdata${PV}.tar.gz;name=tzdata;subdir=tz \
@@ -16,5 +16,5 @@ S = "${WORKDIR}/tz"
 
 UPSTREAM_CHECK_URI = "http://www.iana.org/time-zones"
 
-SRC_URI[tzcode.sha256sum] = "05f8fedb3525ee70d49c87d3fae78a8a0dbae4fe87aa565c65cda9948ae135ec"
-SRC_URI[tzdata.sha256sum] = "11810413345fc7805017e27ea9fa4885fd74cd61b2911711ad038f5d28d71474"
+SRC_URI[tzcode.sha256sum] = "697ebe6625444aef5080f58e49d03424bbb52e08bf483d3ddb5acf10cbd15740"
+SRC_URI[tzdata.sha256sum] = "4aa79e4effee53fc4029ffe5f6ebe97937282ebcdf386d5d2da91ce84142f957"


^ permalink raw reply related	[flat|nested] 8+ messages in thread

* [OE-core][scarthgap][PATCH 2/3] wireless-regdb: upgrade 2025.10.07 -> 2026.02.04
  2026-03-07  6:45 [OE-core][scarthgap][PATCH 1/3] tzdata,tzcode-native: Upgrade 2025b -> 2025c ankur.tyagi85
@ 2026-03-07  6:45 ` ankur.tyagi85
  2026-03-07  6:45 ` [OE-core][scarthgap][PATCH 3/3] tiff: ignore CVE-2025-61143, CVE-2025-61144 and CVE-2025-61145 ankur.tyagi85
  2026-03-25  2:16 ` [OE-core][scarthgap][PATCH 1/3] tzdata,tzcode-native: Upgrade 2025b -> 2025c Vijay Anusuri
  2 siblings, 0 replies; 8+ messages in thread
From: ankur.tyagi85 @ 2026-03-07  6:45 UTC (permalink / raw)
  To: openembedded-core; +Cc: Ankur Tyagi, Mathieu Dubois-Briand, Richard Purdie

From: Ankur Tyagi <ankur.tyagi85@gmail.com>

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit f86c38b13121788fe6a654df04800d24b2b28b61)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
 ...ireless-regdb_2025.10.07.bb => wireless-regdb_2026.02.04.bb} | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-kernel/wireless-regdb/{wireless-regdb_2025.10.07.bb => wireless-regdb_2026.02.04.bb} (94%)

diff --git a/meta/recipes-kernel/wireless-regdb/wireless-regdb_2025.10.07.bb b/meta/recipes-kernel/wireless-regdb/wireless-regdb_2026.02.04.bb
similarity index 94%
rename from meta/recipes-kernel/wireless-regdb/wireless-regdb_2025.10.07.bb
rename to meta/recipes-kernel/wireless-regdb/wireless-regdb_2026.02.04.bb
index 68ae3b0464..2f7c816043 100644
--- a/meta/recipes-kernel/wireless-regdb/wireless-regdb_2025.10.07.bb
+++ b/meta/recipes-kernel/wireless-regdb/wireless-regdb_2026.02.04.bb
@@ -5,7 +5,7 @@ LICENSE = "ISC"
 LIC_FILES_CHKSUM = "file://LICENSE;md5=07c4f6dea3845b02a18dc00c8c87699c"
 
 SRC_URI = "https://www.kernel.org/pub/software/network/${BPN}/${BP}.tar.xz"
-SRC_URI[sha256sum] = "d4c872a44154604c869f5851f7d21d818d492835d370af7f58de8847973801c3"
+SRC_URI[sha256sum] = "0ff48a5cd9e9cfe8e815a24e023734919e9a3b7ad2f039243ad121cf5aabf6c6"
 
 inherit bin_package allarch
 


^ permalink raw reply related	[flat|nested] 8+ messages in thread

* [OE-core][scarthgap][PATCH 3/3] tiff: ignore CVE-2025-61143, CVE-2025-61144 and CVE-2025-61145
  2026-03-07  6:45 [OE-core][scarthgap][PATCH 1/3] tzdata,tzcode-native: Upgrade 2025b -> 2025c ankur.tyagi85
  2026-03-07  6:45 ` [OE-core][scarthgap][PATCH 2/3] wireless-regdb: upgrade 2025.10.07 -> 2026.02.04 ankur.tyagi85
@ 2026-03-07  6:45 ` ankur.tyagi85
  2026-03-18 13:42   ` Yoann Congal
  2026-03-25  2:16 ` [OE-core][scarthgap][PATCH 1/3] tzdata,tzcode-native: Upgrade 2025b -> 2025c Vijay Anusuri
  2 siblings, 1 reply; 8+ messages in thread
From: ankur.tyagi85 @ 2026-03-07  6:45 UTC (permalink / raw)
  To: openembedded-core; +Cc: Ankur Tyagi

From: Ankur Tyagi <ankur.tyagi85@gmail.com>

These CVEs are for tools which were removed in v4.6.0[1]

[1]https://gitlab.com/libtiff/libtiff/-/commit/eab89a627f0a65e9a1a47c4b30b4802c80b1ac45

Details:
https://nvd.nist.gov/vuln/detail/CVE-2025-61143
https://nvd.nist.gov/vuln/detail/CVE-2025-61144
https://nvd.nist.gov/vuln/detail/CVE-2025-61145

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
 meta/recipes-multimedia/libtiff/tiff_4.6.0.bb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/meta/recipes-multimedia/libtiff/tiff_4.6.0.bb b/meta/recipes-multimedia/libtiff/tiff_4.6.0.bb
index 777783d7cc..07540692fc 100644
--- a/meta/recipes-multimedia/libtiff/tiff_4.6.0.bb
+++ b/meta/recipes-multimedia/libtiff/tiff_4.6.0.bb
@@ -29,7 +29,7 @@ CVE_STATUS[CVE-2015-7313] = "fixed-version: Tested with check from https://secur
 CVE_STATUS[CVE-2023-3164] = "cpe-incorrect: Issue only affects the tiffcrop tool not compiled by default since 4.6.0"
 
 CVE_STATUS_GROUPS += "CVE_STATUS_REMOVED_TOOLS"
-CVE_STATUS_REMOVED_TOOLS = "CVE-2024-13978 CVE-2025-8176 CVE-2025-8177 CVE-2025-8534 CVE-2025-8851 CVE-2025-8961"
+CVE_STATUS_REMOVED_TOOLS = "CVE-2024-13978 CVE-2025-8176 CVE-2025-8177 CVE-2025-8534 CVE-2025-8851 CVE-2025-8961 CVE-2025-61143 CVE-2025-61144 CVE-2025-61145"
 CVE_STATUS_REMOVED_TOOLS[status] = "cpe-incorrect: tools affected by these CVEs are not present in this release"
 
 inherit autotools multilib_header


^ permalink raw reply related	[flat|nested] 8+ messages in thread

* Re: [OE-core][scarthgap][PATCH 3/3] tiff: ignore CVE-2025-61143, CVE-2025-61144 and CVE-2025-61145
  2026-03-07  6:45 ` [OE-core][scarthgap][PATCH 3/3] tiff: ignore CVE-2025-61143, CVE-2025-61144 and CVE-2025-61145 ankur.tyagi85
@ 2026-03-18 13:42   ` Yoann Congal
  2026-03-18 13:58     ` Marko, Peter
  0 siblings, 1 reply; 8+ messages in thread
From: Yoann Congal @ 2026-03-18 13:42 UTC (permalink / raw)
  To: ankur.tyagi85, openembedded-core

On Sat Mar 7, 2026 at 7:45 AM CET, Ankur Tyagi via lists.openembedded.org wrote:
> From: Ankur Tyagi <ankur.tyagi85@gmail.com>
>
> These CVEs are for tools which were removed in v4.6.0[1]
>
> [1]https://gitlab.com/libtiff/libtiff/-/commit/eab89a627f0a65e9a1a47c4b30b4802c80b1ac45
>
> Details:
> https://nvd.nist.gov/vuln/detail/CVE-2025-61143

This CVE: "libtiff up to v4.7.1 was discovered to contain a NULL pointer
dereference via the component libtiff/tif_open.c."

Despite tools being removed in the commit you mentionned
libtiff/tif_open.c was not touched and the patch linked by NVD apply to
files outside of "archive/" were the removed tools are...

Are you sure we can ignore this CVE?

FYI, Peter patched it on kirkstone:
[OE-core][kirkstone 07/17] tiff: patch CVE-2025-61143 - Yoann Congal
https://lore.kernel.org/openembedded-core/944f481d214bebeaf51769d77fe16cd93cbff351.1773652940.git.yoann.congal@smile.fr/

Regards,

> https://nvd.nist.gov/vuln/detail/CVE-2025-61144
> https://nvd.nist.gov/vuln/detail/CVE-2025-61145
>
> Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
> ---
>  meta/recipes-multimedia/libtiff/tiff_4.6.0.bb | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
>
> diff --git a/meta/recipes-multimedia/libtiff/tiff_4.6.0.bb b/meta/recipes-multimedia/libtiff/tiff_4.6.0.bb
> index 777783d7cc..07540692fc 100644
> --- a/meta/recipes-multimedia/libtiff/tiff_4.6.0.bb
> +++ b/meta/recipes-multimedia/libtiff/tiff_4.6.0.bb
> @@ -29,7 +29,7 @@ CVE_STATUS[CVE-2015-7313] = "fixed-version: Tested with check from https://secur
>  CVE_STATUS[CVE-2023-3164] = "cpe-incorrect: Issue only affects the tiffcrop tool not compiled by default since 4.6.0"
>  
>  CVE_STATUS_GROUPS += "CVE_STATUS_REMOVED_TOOLS"
> -CVE_STATUS_REMOVED_TOOLS = "CVE-2024-13978 CVE-2025-8176 CVE-2025-8177 CVE-2025-8534 CVE-2025-8851 CVE-2025-8961"
> +CVE_STATUS_REMOVED_TOOLS = "CVE-2024-13978 CVE-2025-8176 CVE-2025-8177 CVE-2025-8534 CVE-2025-8851 CVE-2025-8961 CVE-2025-61143 CVE-2025-61144 CVE-2025-61145"
>  CVE_STATUS_REMOVED_TOOLS[status] = "cpe-incorrect: tools affected by these CVEs are not present in this release"
>  
>  inherit autotools multilib_header


-- 
Yoann Congal
Smile ECS



^ permalink raw reply	[flat|nested] 8+ messages in thread

* RE: [OE-core][scarthgap][PATCH 3/3] tiff: ignore CVE-2025-61143, CVE-2025-61144 and CVE-2025-61145
  2026-03-18 13:42   ` Yoann Congal
@ 2026-03-18 13:58     ` Marko, Peter
  2026-03-18 14:54       ` Yoann Congal
  0 siblings, 1 reply; 8+ messages in thread
From: Marko, Peter @ 2026-03-18 13:58 UTC (permalink / raw)
  To: yoann.congal@smile.fr, ankur.tyagi85@gmail.com,
	openembedded-core@lists.openembedded.org



> -----Original Message-----
> From: openembedded-core@lists.openembedded.org <openembedded-
> core@lists.openembedded.org> On Behalf Of Yoann Congal via
> lists.openembedded.org
> Sent: Wednesday, March 18, 2026 14:42
> To: ankur.tyagi85@gmail.com; openembedded-core@lists.openembedded.org
> Subject: Re: [OE-core][scarthgap][PATCH 3/3] tiff: ignore CVE-2025-61143, CVE-
> 2025-61144 and CVE-2025-61145
> 
> On Sat Mar 7, 2026 at 7:45 AM CET, Ankur Tyagi via lists.openembedded.org
> wrote:
> > From: Ankur Tyagi <ankur.tyagi85@gmail.com>
> >
> > These CVEs are for tools which were removed in v4.6.0[1]
> >
> > [1]https://gitlab.com/libtiff/libtiff/-
> /commit/eab89a627f0a65e9a1a47c4b30b4802c80b1ac45
> >
> > Details:
> > https://nvd.nist.gov/vuln/detail/CVE-2025-61143
> 
> This CVE: "libtiff up to v4.7.1 was discovered to contain a NULL pointer
> dereference via the component libtiff/tif_open.c."
> 
> Despite tools being removed in the commit you mentionned
> libtiff/tif_open.c was not touched and the patch linked by NVD apply to
> files outside of "archive/" were the removed tools are...
> 
> Are you sure we can ignore this CVE?
> 
> FYI, Peter patched it on kirkstone:
> [OE-core][kirkstone 07/17] tiff: patch CVE-2025-61143 - Yoann Congal
> https://lore.kernel.org/openembedded-
> core/944f481d214bebeaf51769d77fe16cd93cbff351.1773652940.git.yoann.congal
> @smile.fr/
> 
> Regards,

If I remember correctly, the archived files are not included in release tarball.
We're not fetching the git repository in our recipe.

Peter

> 
> > https://nvd.nist.gov/vuln/detail/CVE-2025-61144
> > https://nvd.nist.gov/vuln/detail/CVE-2025-61145
> >
> > Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
> > ---
> >  meta/recipes-multimedia/libtiff/tiff_4.6.0.bb | 2 +-
> >  1 file changed, 1 insertion(+), 1 deletion(-)
> >
> > diff --git a/meta/recipes-multimedia/libtiff/tiff_4.6.0.bb b/meta/recipes-
> multimedia/libtiff/tiff_4.6.0.bb
> > index 777783d7cc..07540692fc 100644
> > --- a/meta/recipes-multimedia/libtiff/tiff_4.6.0.bb
> > +++ b/meta/recipes-multimedia/libtiff/tiff_4.6.0.bb
> > @@ -29,7 +29,7 @@ CVE_STATUS[CVE-2015-7313] = "fixed-version: Tested
> with check from https://secur
> >  CVE_STATUS[CVE-2023-3164] = "cpe-incorrect: Issue only affects the tiffcrop
> tool not compiled by default since 4.6.0"
> >
> >  CVE_STATUS_GROUPS += "CVE_STATUS_REMOVED_TOOLS"
> > -CVE_STATUS_REMOVED_TOOLS = "CVE-2024-13978 CVE-2025-8176 CVE-
> 2025-8177 CVE-2025-8534 CVE-2025-8851 CVE-2025-8961"
> > +CVE_STATUS_REMOVED_TOOLS = "CVE-2024-13978 CVE-2025-8176 CVE-
> 2025-8177 CVE-2025-8534 CVE-2025-8851 CVE-2025-8961 CVE-2025-61143 CVE-
> 2025-61144 CVE-2025-61145"
> >  CVE_STATUS_REMOVED_TOOLS[status] = "cpe-incorrect: tools affected by
> these CVEs are not present in this release"
> >
> >  inherit autotools multilib_header
> 
> 
> --
> Yoann Congal
> Smile ECS


^ permalink raw reply	[flat|nested] 8+ messages in thread

* Re: [OE-core][scarthgap][PATCH 3/3] tiff: ignore CVE-2025-61143, CVE-2025-61144 and CVE-2025-61145
  2026-03-18 13:58     ` Marko, Peter
@ 2026-03-18 14:54       ` Yoann Congal
  0 siblings, 0 replies; 8+ messages in thread
From: Yoann Congal @ 2026-03-18 14:54 UTC (permalink / raw)
  To: Marko, Peter, ankur.tyagi85@gmail.com,
	openembedded-core@lists.openembedded.org

On Wed Mar 18, 2026 at 2:58 PM CET, Peter Marko wrote:
>
>
>> -----Original Message-----
>> From: openembedded-core@lists.openembedded.org <openembedded-
>> core@lists.openembedded.org> On Behalf Of Yoann Congal via
>> lists.openembedded.org
>> Sent: Wednesday, March 18, 2026 14:42
>> To: ankur.tyagi85@gmail.com; openembedded-core@lists.openembedded.org
>> Subject: Re: [OE-core][scarthgap][PATCH 3/3] tiff: ignore CVE-2025-61143, CVE-
>> 2025-61144 and CVE-2025-61145
>> 
>> On Sat Mar 7, 2026 at 7:45 AM CET, Ankur Tyagi via lists.openembedded.org
>> wrote:
>> > From: Ankur Tyagi <ankur.tyagi85@gmail.com>
>> >
>> > These CVEs are for tools which were removed in v4.6.0[1]
>> >
>> > [1]https://gitlab.com/libtiff/libtiff/-
>> /commit/eab89a627f0a65e9a1a47c4b30b4802c80b1ac45
>> >
>> > Details:
>> > https://nvd.nist.gov/vuln/detail/CVE-2025-61143
>> 
>> This CVE: "libtiff up to v4.7.1 was discovered to contain a NULL pointer
>> dereference via the component libtiff/tif_open.c."
>> 
>> Despite tools being removed in the commit you mentionned
>> libtiff/tif_open.c was not touched and the patch linked by NVD apply to
>> files outside of "archive/" were the removed tools are...
>> 
>> Are you sure we can ignore this CVE?
>> 
>> FYI, Peter patched it on kirkstone:
>> [OE-core][kirkstone 07/17] tiff: patch CVE-2025-61143 - Yoann Congal
>> https://lore.kernel.org/openembedded-
>> core/944f481d214bebeaf51769d77fe16cd93cbff351.1773652940.git.yoann.congal
>> @smile.fr/
>> 
>> Regards,
>
> If I remember correctly, the archived files are not included in release tarball.
> We're not fetching the git repository in our recipe.

Indeed, we don't have tools/tiffcrop.c nor tools/tiffdither.c (the files
patched by the NVD linked merge request) in our sources. So the added
CVE_STATUS looks correct.

Thanks Peter.

I will take this with a note for clarification.

>
> Peter
>
>> 
>> > https://nvd.nist.gov/vuln/detail/CVE-2025-61144
>> > https://nvd.nist.gov/vuln/detail/CVE-2025-61145
>> >
>> > Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
>> > ---
>> >  meta/recipes-multimedia/libtiff/tiff_4.6.0.bb | 2 +-
>> >  1 file changed, 1 insertion(+), 1 deletion(-)
>> >
>> > diff --git a/meta/recipes-multimedia/libtiff/tiff_4.6.0.bb b/meta/recipes-
>> multimedia/libtiff/tiff_4.6.0.bb
>> > index 777783d7cc..07540692fc 100644
>> > --- a/meta/recipes-multimedia/libtiff/tiff_4.6.0.bb
>> > +++ b/meta/recipes-multimedia/libtiff/tiff_4.6.0.bb
>> > @@ -29,7 +29,7 @@ CVE_STATUS[CVE-2015-7313] = "fixed-version: Tested
>> with check from https://secur
>> >  CVE_STATUS[CVE-2023-3164] = "cpe-incorrect: Issue only affects the tiffcrop
>> tool not compiled by default since 4.6.0"
>> >
>> >  CVE_STATUS_GROUPS += "CVE_STATUS_REMOVED_TOOLS"
>> > -CVE_STATUS_REMOVED_TOOLS = "CVE-2024-13978 CVE-2025-8176 CVE-
>> 2025-8177 CVE-2025-8534 CVE-2025-8851 CVE-2025-8961"
>> > +CVE_STATUS_REMOVED_TOOLS = "CVE-2024-13978 CVE-2025-8176 CVE-
>> 2025-8177 CVE-2025-8534 CVE-2025-8851 CVE-2025-8961 CVE-2025-61143 CVE-
>> 2025-61144 CVE-2025-61145"
>> >  CVE_STATUS_REMOVED_TOOLS[status] = "cpe-incorrect: tools affected by
>> these CVEs are not present in this release"
>> >
>> >  inherit autotools multilib_header
>> 
>> 
>> --
>> Yoann Congal
>> Smile ECS


-- 
Yoann Congal
Smile ECS



^ permalink raw reply	[flat|nested] 8+ messages in thread

* Re: [OE-core][scarthgap][PATCH 1/3] tzdata,tzcode-native: Upgrade 2025b -> 2025c
  2026-03-07  6:45 [OE-core][scarthgap][PATCH 1/3] tzdata,tzcode-native: Upgrade 2025b -> 2025c ankur.tyagi85
  2026-03-07  6:45 ` [OE-core][scarthgap][PATCH 2/3] wireless-regdb: upgrade 2025.10.07 -> 2026.02.04 ankur.tyagi85
  2026-03-07  6:45 ` [OE-core][scarthgap][PATCH 3/3] tiff: ignore CVE-2025-61143, CVE-2025-61144 and CVE-2025-61145 ankur.tyagi85
@ 2026-03-25  2:16 ` Vijay Anusuri
  2026-03-25  9:27   ` Yoann Congal
  2 siblings, 1 reply; 8+ messages in thread
From: Vijay Anusuri @ 2026-03-25  2:16 UTC (permalink / raw)
  To: openembedded-core, Yoann Congal
  Cc: Paul Barker, Mathieu Dubois-Briand, Richard Purdie, ankur.tyagi85

[-- Attachment #1: Type: text/plain, Size: 2593 bytes --]

Hi Team,

Any update on this ?

Thanks & Regards,
Vijay

On Sat, Mar 7, 2026 at 12:15 PM Ankur Tyagi via lists.openembedded.org
<ankur.tyagi85=gmail.com@lists.openembedded.org> wrote:

> From: Paul Barker <paul@pbarker.dev>
>
> This release mostly changes code and commentary. The only changed data
> are leap second table expiration and pre-1976 time in Baja California.
>
> Full release notes:
>
> https://lists.iana.org/hyperkitty/list/tz-announce@iana.org/thread/TAGXKYLMAQRZRFTERQ33CEKOW7KRJVAK/
>
> Signed-off-by: Paul Barker <paul@pbarker.dev>
> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
> (cherry picked from commit 452334219309793ad74abd6ff390dcb06cab929b)
> Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
> ---
>  meta/recipes-extended/timezone/timezone.inc | 6 +++---
>  1 file changed, 3 insertions(+), 3 deletions(-)
>
> diff --git a/meta/recipes-extended/timezone/timezone.inc
> b/meta/recipes-extended/timezone/timezone.inc
> index f21bedf4fc..35f22d5a15 100644
> --- a/meta/recipes-extended/timezone/timezone.inc
> +++ b/meta/recipes-extended/timezone/timezone.inc
> @@ -6,7 +6,7 @@ SECTION = "base"
>  LICENSE = "PD & BSD-3-Clause"
>  LIC_FILES_CHKSUM = "file://LICENSE;md5=c679c9d6b02bc2757b3eaf8f53c43fba"
>
> -PV = "2025b"
> +PV = "2025c"
>
>  SRC_URI ="
> http://www.iana.org/time-zones/repository/releases/tzcode${PV}.tar.gz;name=tzcode;subdir=tz
> \
>
> http://www.iana.org/time-zones/repository/releases/tzdata${PV}.tar.gz;name=tzdata;subdir=tz
> \
> @@ -16,5 +16,5 @@ S = "${WORKDIR}/tz"
>
>  UPSTREAM_CHECK_URI = "http://www.iana.org/time-zones"
>
> -SRC_URI[tzcode.sha256sum] =
> "05f8fedb3525ee70d49c87d3fae78a8a0dbae4fe87aa565c65cda9948ae135ec"
> -SRC_URI[tzdata.sha256sum] =
> "11810413345fc7805017e27ea9fa4885fd74cd61b2911711ad038f5d28d71474"
> +SRC_URI[tzcode.sha256sum] =
> "697ebe6625444aef5080f58e49d03424bbb52e08bf483d3ddb5acf10cbd15740"
> +SRC_URI[tzdata.sha256sum] =
> "4aa79e4effee53fc4029ffe5f6ebe97937282ebcdf386d5d2da91ce84142f957"
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#232604):
> https://lists.openembedded.org/g/openembedded-core/message/232604
> Mute This Topic: https://lists.openembedded.org/mt/118185146/7301997
> Group Owner: openembedded-core+owner@lists.openembedded.org
> Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [
> vanusuri@mvista.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>
>

[-- Attachment #2: Type: text/html, Size: 4516 bytes --]

^ permalink raw reply	[flat|nested] 8+ messages in thread

* Re: [OE-core][scarthgap][PATCH 1/3] tzdata,tzcode-native: Upgrade 2025b -> 2025c
  2026-03-25  2:16 ` [OE-core][scarthgap][PATCH 1/3] tzdata,tzcode-native: Upgrade 2025b -> 2025c Vijay Anusuri
@ 2026-03-25  9:27   ` Yoann Congal
  0 siblings, 0 replies; 8+ messages in thread
From: Yoann Congal @ 2026-03-25  9:27 UTC (permalink / raw)
  To: Vijay Anusuri, openembedded-core
  Cc: Paul Barker, Mathieu Dubois-Briand, Richard Purdie, ankur.tyagi85

On Wed Mar 25, 2026 at 3:16 AM CET, Vijay Anusuri wrote:
> Hi Team,
>
> Any update on this ?

Hello Vijay,

I took 2/3 and 3/3 in this series and they should merge shortly.

For this tzdata,tzcode-native upgrade, I'm looking into it because the
changes in tzcode-native are not trivial and should be carefully
evaluated. My current thinking is that we need to split tzcode-native
and tzdata but this is not easy because, right now, they each need each
other to build.

I've started to look at what other distros are doing: For example,
Debian uses the tzcode vendored in GNU libc[0].

It early for me in my thinking about how to handle this, I'm open to
ideas/patches!

[0]: https://elixir.bootlin.com/glibc/glibc-2.43.9000/source/timezone

Regards,

>
> Thanks & Regards,
> Vijay
>
> On Sat, Mar 7, 2026 at 12:15 PM Ankur Tyagi via lists.openembedded.org
> <ankur.tyagi85=gmail.com@lists.openembedded.org> wrote:
>
>> From: Paul Barker <paul@pbarker.dev>
>>
>> This release mostly changes code and commentary. The only changed data
>> are leap second table expiration and pre-1976 time in Baja California.
>>
>> Full release notes:
>>
>> https://lists.iana.org/hyperkitty/list/tz-announce@iana.org/thread/TAGXKYLMAQRZRFTERQ33CEKOW7KRJVAK/
>>
>> Signed-off-by: Paul Barker <paul@pbarker.dev>
>> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
>> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
>> (cherry picked from commit 452334219309793ad74abd6ff390dcb06cab929b)
>> Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
>> ---
>>  meta/recipes-extended/timezone/timezone.inc | 6 +++---
>>  1 file changed, 3 insertions(+), 3 deletions(-)
>>
>> diff --git a/meta/recipes-extended/timezone/timezone.inc
>> b/meta/recipes-extended/timezone/timezone.inc
>> index f21bedf4fc..35f22d5a15 100644
>> --- a/meta/recipes-extended/timezone/timezone.inc
>> +++ b/meta/recipes-extended/timezone/timezone.inc
>> @@ -6,7 +6,7 @@ SECTION = "base"
>>  LICENSE = "PD & BSD-3-Clause"
>>  LIC_FILES_CHKSUM = "file://LICENSE;md5=c679c9d6b02bc2757b3eaf8f53c43fba"
>>
>> -PV = "2025b"
>> +PV = "2025c"
>>
>>  SRC_URI ="
>> http://www.iana.org/time-zones/repository/releases/tzcode${PV}.tar.gz;name=tzcode;subdir=tz
>> \
>>
>> http://www.iana.org/time-zones/repository/releases/tzdata${PV}.tar.gz;name=tzdata;subdir=tz
>> \
>> @@ -16,5 +16,5 @@ S = "${WORKDIR}/tz"
>>
>>  UPSTREAM_CHECK_URI = "http://www.iana.org/time-zones"
>>
>> -SRC_URI[tzcode.sha256sum] =
>> "05f8fedb3525ee70d49c87d3fae78a8a0dbae4fe87aa565c65cda9948ae135ec"
>> -SRC_URI[tzdata.sha256sum] =
>> "11810413345fc7805017e27ea9fa4885fd74cd61b2911711ad038f5d28d71474"
>> +SRC_URI[tzcode.sha256sum] =
>> "697ebe6625444aef5080f58e49d03424bbb52e08bf483d3ddb5acf10cbd15740"
>> +SRC_URI[tzdata.sha256sum] =
>> "4aa79e4effee53fc4029ffe5f6ebe97937282ebcdf386d5d2da91ce84142f957"
>>
>> -=-=-=-=-=-=-=-=-=-=-=-
>> Links: You receive all messages sent to this group.
>> View/Reply Online (#232604):
>> https://lists.openembedded.org/g/openembedded-core/message/232604
>> Mute This Topic: https://lists.openembedded.org/mt/118185146/7301997
>> Group Owner: openembedded-core+owner@lists.openembedded.org
>> Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [
>> vanusuri@mvista.com]
>> -=-=-=-=-=-=-=-=-=-=-=-
>>
>>


-- 
Yoann Congal
Smile ECS



^ permalink raw reply	[flat|nested] 8+ messages in thread

end of thread, other threads:[~2026-03-25  9:27 UTC | newest]

Thread overview: 8+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-03-07  6:45 [OE-core][scarthgap][PATCH 1/3] tzdata,tzcode-native: Upgrade 2025b -> 2025c ankur.tyagi85
2026-03-07  6:45 ` [OE-core][scarthgap][PATCH 2/3] wireless-regdb: upgrade 2025.10.07 -> 2026.02.04 ankur.tyagi85
2026-03-07  6:45 ` [OE-core][scarthgap][PATCH 3/3] tiff: ignore CVE-2025-61143, CVE-2025-61144 and CVE-2025-61145 ankur.tyagi85
2026-03-18 13:42   ` Yoann Congal
2026-03-18 13:58     ` Marko, Peter
2026-03-18 14:54       ` Yoann Congal
2026-03-25  2:16 ` [OE-core][scarthgap][PATCH 1/3] tzdata,tzcode-native: Upgrade 2025b -> 2025c Vijay Anusuri
2026-03-25  9:27   ` Yoann Congal

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox