From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 11674D2ECF7 for ; Tue, 20 Jan 2026 11:24:34 +0000 (UTC) Received: from mail-wr1-f54.google.com (mail-wr1-f54.google.com [209.85.221.54]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.4235.1768908266528841701 for ; Tue, 20 Jan 2026 03:24:26 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=Hzf6ICPH; spf=pass (domain: smile.fr, ip: 209.85.221.54, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f54.google.com with SMTP id ffacd0b85a97d-432d2670932so4146347f8f.2 for ; Tue, 20 Jan 2026 03:24:26 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1768908265; x=1769513065; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:message-id:date:subject:to :from:from:to:cc:subject:date:message-id:reply-to; bh=uvTeS4IBu3E810BxGkQIh1ZV0NvP01hXBoJPTR8YhAA=; b=Hzf6ICPHxmSZiwAKJnkoUuLpdN+qGkgaootrJoXudrZGcgC5IHKyvqjFbGO+has0zW u9PVkQVuwwAWuAUbRbmJ/tyM8hgiwNjBvDh/X3K1IYYTPfLM8HdUPg5eWGswY5pIh4+S rNMN1x2/7Hrj3MMoiXrXQXWnrp5VdVxNqNwlo= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1768908265; x=1769513065; h=content-transfer-encoding:mime-version:message-id:date:subject:to :from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=uvTeS4IBu3E810BxGkQIh1ZV0NvP01hXBoJPTR8YhAA=; b=UeKxldtJen45gb24oedHRjsEtDDoepQmOeGSx1GS8O8axr7PG48rhBqOnNP8ZHzD/R VJ2wzAMBAyvbe/qg6e3GDVm2/2rlYJAbEAt2WDDy/1VSS1BTN0eQ4xIWMzYyqOLvmMtZ 3jo8Vkb0xJhv0W+n6heGqIIlnWPo6AN9QBpCQlMi0lLH45zTmBv2HHqQieD9ir0Vz1/v dvVJA70jI4DcdNn8EWFrhzqgn93tc6UbSI/bdRFPNIDCfmRP8iZpAzuC7otS6baB0Cow 4k/8tkcWwOb5BCbaM205LxLCYDER0tcmbJoarrdujqhFfgBfI8h5R5YuJwbwrK7+gRtz StNw== X-Gm-Message-State: AOJu0Yx+NqXjrk4RyJGRoVGkkfYpYMi6RcWgBknSs97Fa2+PxnygPRVR WWOP7JWXA+Ylpmy3TJB9muPxmJA/T7P1KT1qa7ZOobs6TWuwL4zx0SAETX7baUCcGcmCa1F0bhe B5vCH X-Gm-Gg: AZuq6aI7EoBNlF0bhBIEEIAqnwX7BapcwNasw5FO+yUhBaYOVcgJG0WHhDGwRgT+03i aIaAGgGqq9ofeyOnUIVgOBosNiFw6CgmdH9mXcq3A5712I2f/rjJQHIDCJo4pDb4pLg2k0iB82K nS3+IJc/LoBtUnbd62Cr04byGqpFj37+WHHK22JjDAp25uaeQpChfUawxHcRG1fzm/af9VG01B8 FbmkBFqsG83rFgCJKJITnE4mIojggYf4GTJ8dst6rm657rqyUUtCJcbEC2xq9PPvzvS4reT0Oey FKLYy1wGgTglaitbkFtkanYfuyo/W6wwx+AOKYJMWLpV8YFu/XWhC3x2Nak8l5lTXD3avSXO2j3 5mXbFetP7U5Ajj25rY4yrrS8B4Hv8WoItKJqskY346PjrrLMszPHxlchL9tVLIY7DOqGSJlfhcn 5o9DvXF/lsw91iT3mJDPTlfO/CF2I2z2v4N69KCWEeBt9hBHARp5rvdzvUNd5Bvv46z8HXGVhUM Smhgh31gH7Ox3mhEuL+yA== X-Received: by 2002:a05:6000:2483:b0:431:5ac:1fc with SMTP id ffacd0b85a97d-43569998b49mr18250459f8f.14.1768908264569; Tue, 20 Jan 2026 03:24:24 -0800 (PST) Received: from FRSMI25-LASER.idf.intranet (static-css-ccs-204145.business.bouyguestelecom.com. [176.157.204.145]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-43569921df9sm29558435f8f.3.2026.01.20.03.24.24 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 20 Jan 2026 03:24:24 -0800 (PST) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][whinlatter 00/15] Patch review Date: Tue, 20 Jan 2026 12:23:45 +0100 Message-ID: X-Mailer: git-send-email 2.47.3 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Tue, 20 Jan 2026 11:24:34 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/229660 Please review this set of changes for whinlatter and have comments back by end of day Thursday, January 22. This whinlatter patch review request is aimed at getting kirkstone 4.0.33 built on monday: * Ensuring fixes in kirkstone have their equivalent in more recent stable branches. * pseudo upgrade to fix 16117 – AB-INT: do_package: Error executing a python function in exec_func_python() autogenerated https://bugzilla.yoctoproject.org/show_bug.cgi?id=16117 * ffmpeg patches to fix 16000 – AB-INT: ffmpeg build failing https://bugzilla.yoctoproject.org/show_bug.cgi?id=16000 Passed a-full on autobuilder: https://autobuilder.yoctoproject.org/valkyrie/#/builders/29/builds/3092 The following changes since commit dd10706cfafb5574b7cf316fca2300d166ef71b0: build-appliance-image: Update to whinlatter head revisions (2026-01-12 10:58:53 +0000) are available in the Git repository at: https://git.openembedded.org/openembedded-core-contrib stable/whinlatter-nut https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/whinlatter-nut for you to fetch changes up to e7891f39ae90d1c23bfcb59af0064591513a671d: libarchive: upgrade 3.8.4 -> 3.8.5 (2026-01-19 23:29:16 +0100) ---------------------------------------------------------------- Alexander Kanavin (3): libpng: upgrade 1.6.52 -> 1.6.53 ffmpeg: add a (possible) build race fix ffmpeg: fix a build race, hopefully for real this time Paul Barker (1): selftest: devtool: Set PATH when running pseudo Peter Marko (9): util-linux: patch CVE-2025-14104 gnupg: patch CVE-2025-68973 curl: patch CVE-2025-13034 curl: patch CVE-2025-14017 curl: patch CVE-2025-14524 curl: patch CVE-2025-14819 curl: patch CVE-2025-15079 curl: patch CVE-2025-15224 libarchive: upgrade 3.8.4 -> 3.8.5 Richard Purdie (2): pseudo: Update to pull in openat2 and efault return code changes pseudo: Update to pull in 'makewrappers: Fix EFAULT implementation' meta/lib/oeqa/selftest/cases/devtool.py | 5 +- meta/recipes-core/util-linux/util-linux.inc | 2 + .../util-linux/CVE-2025-14104-01.patch | 33 +++++ .../util-linux/CVE-2025-14104-02.patch | 28 +++++ meta/recipes-devtools/pseudo/pseudo_git.bb | 2 +- ...ibarchive_3.8.4.bb => libarchive_3.8.5.bb} | 2 +- ...k-Consolidate-pattern-rules-for-comp.patch | 106 ++++++++++++++++ ...s-Fix-double-build-by-disabling-.d-f.patch | 78 ++++++++++++ ...ak-ensure-target-directories-are-cre.patch | 43 +++++++ meta/recipes-multimedia/ffmpeg/ffmpeg_8.0.bb | 6 +- .../{libpng_1.6.52.bb => libpng_1.6.53.bb} | 2 +- .../curl/curl/CVE-2025-13034.patch | 37 ++++++ .../curl/curl/CVE-2025-14017.patch | 116 ++++++++++++++++++ .../curl/curl/CVE-2025-14524.patch | 40 ++++++ .../curl/curl/CVE-2025-14819.patch | 73 +++++++++++ .../curl/curl/CVE-2025-15079.patch | 32 +++++ .../curl/curl/CVE-2025-15224.patch | 31 +++++ meta/recipes-support/curl/curl_8.17.0.bb | 6 + .../gnupg/gnupg/CVE-2025-68973.patch | 108 ++++++++++++++++ meta/recipes-support/gnupg/gnupg_2.5.11.bb | 1 + 20 files changed, 745 insertions(+), 6 deletions(-) create mode 100644 meta/recipes-core/util-linux/util-linux/CVE-2025-14104-01.patch create mode 100644 meta/recipes-core/util-linux/util-linux/CVE-2025-14104-02.patch rename meta/recipes-extended/libarchive/{libarchive_3.8.4.bb => libarchive_3.8.5.bb} (96%) create mode 100644 meta/recipes-multimedia/ffmpeg/ffmpeg/0001-ffbuild-commonmak-Consolidate-pattern-rules-for-comp.patch create mode 100644 meta/recipes-multimedia/ffmpeg/ffmpeg/0001-fftools-resources-Fix-double-build-by-disabling-.d-f.patch create mode 100644 meta/recipes-multimedia/ffmpeg/ffmpeg/0002-ffbuild-common.mak-ensure-target-directories-are-cre.patch rename meta/recipes-multimedia/libpng/{libpng_1.6.52.bb => libpng_1.6.53.bb} (97%) create mode 100644 meta/recipes-support/curl/curl/CVE-2025-13034.patch create mode 100644 meta/recipes-support/curl/curl/CVE-2025-14017.patch create mode 100644 meta/recipes-support/curl/curl/CVE-2025-14524.patch create mode 100644 meta/recipes-support/curl/curl/CVE-2025-14819.patch create mode 100644 meta/recipes-support/curl/curl/CVE-2025-15079.patch create mode 100644 meta/recipes-support/curl/curl/CVE-2025-15224.patch create mode 100644 meta/recipes-support/gnupg/gnupg/CVE-2025-68973.patch