From: Yoann Congal <yoann.congal@smile.fr>
To: openembedded-core@lists.openembedded.org
Cc: Paul Barker <paul@pbarker.dev>
Subject: [OE-core][scarthgap 00/31] Pull request (cover letter only)
Date: Wed, 22 Jul 2026 19:13:43 +0200 [thread overview]
Message-ID: <cover.1784740104.git.yoann.congal@smile.fr> (raw)
Those are the patches from the last patch review:
https://lore.kernel.org/all/cover.1784567958.git.yoann.congal@smile.fr/
Removed 2 patches following review:
* bzip2: fix 'bzip2 --version > /tmp/aaa 2>&1' hang
* dropbear: Disable DSS correctly
Passed a-full on autobuilder:
https://autobuilder.yoctoproject.org/valkyrie/#/builders/29/builds/4258
* oe-selftest-armhost, oe-selftest-debian, oe-selftest-fedora failed with
#15289 – [scarthgap] AB-INT: sstatetests.SStatePrintdiff.test_gcc_runtime_vs_gcc_source failure
* oe-selftest-fedora rebuilt on isolated sstate/hashserv as
https://autobuilder.yoctoproject.org/valkyrie/?#/builders/48/builds/4164
The following changes since commit 8aca19cff468c5f15c919c973c46be58e020af46:
cve-update: Avoid NFS caching issues (2026-07-17 12:05:24 +0200)
are available in the Git repository at:
https://git.openembedded.org/openembedded-core-contrib stable/scarthgap-next
https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/scarthgap-next
for you to fetch changes up to 3217490cc554069ae53aa54cf8ad7327ce85fa10:
glibc-testsuite: Do not generate SPDX (2026-07-21 20:32:51 +0200)
----------------------------------------------------------------
Aleksandar Nikolic (1):
wic: Fix updating fstab for nvme devices
Ankur Tyagi (3):
wireless-regdb: upgrade 2026.02.04 -> 2026.03.18
wireless-regdb: upgrade 2026.03.18 -> 2026.05.30
ca-certificates: upgrade 20260223 -> 20260601
Ashishkumar Parmar (1):
bind: Upgrade 9.18.44 -> 9.18.49
Benjamin Robin (Schneider Electric) (4):
python3: fix CVE-2026-11940
python3: fix CVE-2026-11972
python3: fix CVE-2026-9669
glib-2.0: fix CVE-2026-58016
Deepak Rathore (1):
util-linux: fix CVE-2026-13595
Eric Meyers (1):
create-spdx-image-3.0: correct SSTATE_SKIP_CREATION key for
do_create_image_sbom_spdx
Harish Sadineni (1):
binutils: Add CVE-2025-69646 to "CVE:" tag
Hitendra Prajapati (1):
vim: Fix for CVE-2026-52858,CVE-2026-52859,CVE-2026-52860
Hugo SIMELIERE (Schneider Electric) (1):
libcap: Fix CVE-2026-4878
Jaipaul Cheernam (3):
glibc: stable 2.39 branch updates
bzip2: Fix CVE-2026-42250
gzip: fix CVE-2026-41992
Joshua Watt (1):
glibc-testsuite: Do not generate SPDX
Kris Gavvala (1):
python3: skiptest tracemalloc_track_race
Mathieu Dubois-Briand (1):
python3: Simplify ptest exclusion list
Peter Marko (4):
socat: patch CVE-2026-56123
vex: remove obsolete semicolon
rootfs: move tasks using image_list_installed_packages to
postuninstall
expat: patch CVE-2026-41080
Roland Kovacs (2):
binutils: fix CVE-2025-69649, and CVE-2025-69652
binutils: fix CVE-2025-69645
Ross Burton (1):
xmlto: update SRC_URI
Sudhir Dumbhare (2):
python3-urllib3: fix CVE-2026-44431
openssh: set status for CVE-2026-3497
Theo Gaige (1):
expat: patch CVE-2026-45186
Vijay Anusuri (1):
tzdata/tzcode-native: upgrade 2026b -> 2026c
.../create-spdx-image-3.0.bbclass | 2 +-
meta/classes-recipe/license_image.bbclass | 2 +-
meta/classes-recipe/nospdx.bbclass | 2 +-
meta/classes/vex.bbclass | 2 +-
.../bind/{bind_9.18.44.bb => bind_9.18.49.bb} | 2 +-
.../openssh/openssh_9.6p1.bb | 1 +
.../socat/files/CVE-2026-56123.patch | 150 ++++++
.../socat/socat_1.8.0.0.bb | 1 +
.../expat/expat/CVE-2026-41080-01.patch | 50 ++
.../expat/expat/CVE-2026-41080-02.patch | 29 ++
.../expat/expat/CVE-2026-41080-03.patch | 467 ++++++++++++++++++
.../expat/expat/CVE-2026-45186-01.patch | 70 +++
.../expat/expat/CVE-2026-45186-02.patch | 318 ++++++++++++
.../expat/expat/CVE-2026-45186-03.patch | 46 ++
.../expat/expat/CVE-2026-45186-04.patch | 32 ++
.../expat/expat/CVE-2026-45186-05.patch | 32 ++
.../expat/expat/CVE-2026-45186-06.patch | 87 ++++
.../expat/expat/CVE-2026-45186-07.patch | 52 ++
meta/recipes-core/expat/expat_2.6.4.bb | 10 +
.../glib-2.0/glib-2.0/CVE-2026-58016-1.patch | 94 ++++
.../glib-2.0/glib-2.0/CVE-2026-58016-2.patch | 98 ++++
meta/recipes-core/glib-2.0/glib-2.0_2.78.6.bb | 2 +
.../glibc/glibc-testsuite_2.39.bb | 1 +
meta/recipes-core/glibc/glibc-version.inc | 2 +-
meta/recipes-core/glibc/glibc_2.39.bb | 3 +-
meta/recipes-core/util-linux/util-linux.inc | 1 +
.../util-linux/CVE-2026-13595.patch | 157 ++++++
.../binutils/binutils-2.42.inc | 3 +
.../binutils/binutils/CVE-2025-69645.patch | 135 +++++
.../binutils/binutils/CVE-2025-69648.patch | 2 +-
.../binutils/binutils/CVE-2025-69649.patch | 44 ++
.../binutils/binutils/CVE-2025-69652.patch | 39 ++
.../python3-urllib3/CVE-2026-44431.patch | 163 ++++++
.../python/python3-urllib3_2.2.2.bb | 1 +
.../python/python3/CVE-2026-11940.patch | 66 +++
.../python/python3/CVE-2026-11972.patch | 60 +++
.../python/python3/CVE-2026-9669.patch | 96 ++++
.../python/python3_3.12.13.bb | 23 +-
meta/recipes-devtools/xmlto/xmlto_0.0.28.bb | 2 +-
.../bzip2/bzip2/CVE-2026-42250.patch | 35 ++
meta/recipes-extended/bzip2/bzip2_1.0.8.bb | 1 +
.../gzip/gzip-1.13/CVE-2026-41992.patch | 64 +++
meta/recipes-extended/gzip/gzip_1.13.bb | 1 +
meta/recipes-extended/timezone/timezone.inc | 6 +-
....02.04.bb => wireless-regdb_2026.05.30.bb} | 2 +-
...0260223.bb => ca-certificates_20260601.bb} | 4 +-
.../libcap/files/CVE-2026-4878.patch | 164 ++++++
meta/recipes-support/libcap/libcap_2.69.bb | 1 +
.../vim/files/CVE-2026-52858.patch | 167 +++++++
.../vim/files/CVE-2026-52859.patch | 274 ++++++++++
.../vim/files/CVE-2026-52860.patch | 446 +++++++++++++++++
meta/recipes-support/vim/vim.inc | 3 +
scripts/lib/wic/plugins/imager/direct.py | 6 +-
53 files changed, 3501 insertions(+), 20 deletions(-)
rename meta/recipes-connectivity/bind/{bind_9.18.44.bb => bind_9.18.49.bb} (97%)
create mode 100644 meta/recipes-connectivity/socat/files/CVE-2026-56123.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-41080-01.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-41080-02.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-41080-03.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-45186-01.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-45186-02.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-45186-03.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-45186-04.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-45186-05.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-45186-06.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-45186-07.patch
create mode 100644 meta/recipes-core/glib-2.0/glib-2.0/CVE-2026-58016-1.patch
create mode 100644 meta/recipes-core/glib-2.0/glib-2.0/CVE-2026-58016-2.patch
create mode 100644 meta/recipes-core/util-linux/util-linux/CVE-2026-13595.patch
create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2025-69645.patch
create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2025-69649.patch
create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2025-69652.patch
create mode 100644 meta/recipes-devtools/python/python3-urllib3/CVE-2026-44431.patch
create mode 100644 meta/recipes-devtools/python/python3/CVE-2026-11940.patch
create mode 100644 meta/recipes-devtools/python/python3/CVE-2026-11972.patch
create mode 100644 meta/recipes-devtools/python/python3/CVE-2026-9669.patch
create mode 100644 meta/recipes-extended/bzip2/bzip2/CVE-2026-42250.patch
create mode 100644 meta/recipes-extended/gzip/gzip-1.13/CVE-2026-41992.patch
rename meta/recipes-kernel/wireless-regdb/{wireless-regdb_2026.02.04.bb => wireless-regdb_2026.05.30.bb} (94%)
rename meta/recipes-support/ca-certificates/{ca-certificates_20260223.bb => ca-certificates_20260601.bb} (94%)
create mode 100644 meta/recipes-support/libcap/files/CVE-2026-4878.patch
create mode 100644 meta/recipes-support/vim/files/CVE-2026-52858.patch
create mode 100644 meta/recipes-support/vim/files/CVE-2026-52859.patch
create mode 100644 meta/recipes-support/vim/files/CVE-2026-52860.patch
next reply other threads:[~2026-07-22 17:14 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-07-22 17:13 Yoann Congal [this message]
-- strict thread matches above, loose matches on Subject: below --
2026-05-12 9:25 [OE-core][scarthgap 00/31] Pull request (cover letter only) Yoann Congal
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=cover.1784740104.git.yoann.congal@smile.fr \
--to=yoann.congal@smile.fr \
--cc=openembedded-core@lists.openembedded.org \
--cc=paul@pbarker.dev \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox