[scarthgap] SPDX3, lz4 and avahi: Patches status

[scarthgap] SPDX3, lz4 and avahi: Patches status

[Benjamin Robin]

Hello Yoann,

Today I checked the status on patchwork of all the patches that I sent.
I noticed that 3 patches, which I forgot to monitor, are currently stuck in
the following state: Awaiting Upstream.

Do you have any information about it?

meta: fix generation of kernel CONFIG_ in SPDX3
 - https://patchwork.yoctoproject.org/project/oe-core/patch/20260303-backport-fixes-scarthgap-v1-3-2dc803f921a9@bootlin.com/
 - https://lore.kernel.org/all/20260303-backport-fixes-scarthgap-v1-3-2dc803f921a9@bootlin.com/

lz4: Remove a reference to the rejected CVE-2025-62813
 - https://patchwork.yoctoproject.org/project/oe-core/patch/20260303-backport-fixes-scarthgap-v1-2-2dc803f921a9@bootlin.com/
 - https://lore.kernel.org/all/20260303-backport-fixes-scarthgap-v1-2-2dc803f921a9@bootlin.com/

avahi: Remove a reference to the rejected CVE-2021-36217
 - https://patchwork.yoctoproject.org/project/oe-core/patch/20260303-backport-fixes-scarthgap-v1-1-2dc803f921a9@bootlin.com/
 - https://lore.kernel.org/all/20260303-backport-fixes-scarthgap-v1-1-2dc803f921a9@bootlin.com/

Best regards,
-- 
Benjamin Robin, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com

Re: [scarthgap] SPDX3, lz4 and avahi: Patches status

[Yoann Congal]

On Fri May 8, 2026 at 2:57 PM CEST, Benjamin Robin wrote:
> Hello Yoann,
>
> Today I checked the status on patchwork of all the patches that I sent.
> I noticed that 3 patches, which I forgot to monitor, are currently stuck in
> the following state: Awaiting Upstream.
>
> Do you have any information about it?

Hello,

When I received them, I couldn't use these patches because they where
missing for whinlatter (This is why I use the "Awaiting Upstream" status
for).

I must admit that I have lost track of those since then, but following
this mail I've added them to my branch under review. You can expect them
in the next patch review series.

Thanks!

>
> meta: fix generation of kernel CONFIG_ in SPDX3
>  - https://patchwork.yoctoproject.org/project/oe-core/patch/20260303-backport-fixes-scarthgap-v1-3-2dc803f921a9@bootlin.com/
>  - https://lore.kernel.org/all/20260303-backport-fixes-scarthgap-v1-3-2dc803f921a9@bootlin.com/
>
> lz4: Remove a reference to the rejected CVE-2025-62813
>  - https://patchwork.yoctoproject.org/project/oe-core/patch/20260303-backport-fixes-scarthgap-v1-2-2dc803f921a9@bootlin.com/
>  - https://lore.kernel.org/all/20260303-backport-fixes-scarthgap-v1-2-2dc803f921a9@bootlin.com/
>
> avahi: Remove a reference to the rejected CVE-2021-36217
>  - https://patchwork.yoctoproject.org/project/oe-core/patch/20260303-backport-fixes-scarthgap-v1-1-2dc803f921a9@bootlin.com/
>  - https://lore.kernel.org/all/20260303-backport-fixes-scarthgap-v1-1-2dc803f921a9@bootlin.com/
>
> Best regards,


-- 
Yoann Congal
Smile ECS

Re: [scarthgap] SPDX3, lz4 and avahi: Patches status

[Benjamin Robin]

Hello Yoann,

On Monday, May 18, 2026 at 2:26 PM, Yoann Congal wrote:
> On Fri May 8, 2026 at 2:57 PM CEST, Benjamin Robin wrote:
> > Hello Yoann,
> >
> > Today I checked the status on patchwork of all the patches that I sent.
> > I noticed that 3 patches, which I forgot to monitor, are currently stuck in
> > the following state: Awaiting Upstream.
> >
> > Do you have any information about it?
> 
> Hello,
> 
> When I received them, I couldn't use these patches because they where
> missing for whinlatter (This is why I use the "Awaiting Upstream" status
> for).
> 
> I must admit that I have lost track of those since then, but following
> this mail I've added them to my branch under review. You can expect them
> in the next patch review series.

I noticed that these fixes still hadn't been merged.
Did I miss something?

> > meta: fix generation of kernel CONFIG_ in SPDX3
> >  - https://patchwork.yoctoproject.org/project/oe-core/patch/20260303-backport-fixes-scarthgap-v1-3-2dc803f921a9@bootlin.com/
> >  - https://lore.kernel.org/all/20260303-backport-fixes-scarthgap-v1-3-2dc803f921a9@bootlin.com/

This patch is only in Wrynose since the following commit was never backported
to others Yocto branches:
"kernel.bbclass: Add task to export kernel configuration to SPDX".

So this patch cannot be backported to whinlatter.

> > lz4: Remove a reference to the rejected CVE-2025-62813
> >  - https://patchwork.yoctoproject.org/project/oe-core/patch/20260303-backport-fixes-scarthgap-v1-2-2dc803f921a9@bootlin.com/
> >  - https://lore.kernel.org/all/20260303-backport-fixes-scarthgap-v1-2-2dc803f921a9@bootlin.com/

This patch is in whinlatter: 958ec6a496b4652a774e7bef58c052ebe40c704a

> > avahi: Remove a reference to the rejected CVE-2021-36217
> >  - https://patchwork.yoctoproject.org/project/oe-core/patch/20260303-backport-fixes-scarthgap-v1-1-2dc803f921a9@bootlin.com/
> >  - https://lore.kernel.org/all/20260303-backport-fixes-scarthgap-v1-1-2dc803f921a9@bootlin.com/

This patch is in whinlatter: d6d36ee66aa69440e83f037863a4e747bf9693d1


-- 
Benjamin Robin, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com