* [OE-core][scarthgap 00/31] Pull request (cover letter only)
@ 2026-05-12 9:25 Yoann Congal
0 siblings, 0 replies; 2+ messages in thread
From: Yoann Congal @ 2026-05-12 9:25 UTC (permalink / raw)
To: openembedded-core; +Cc: Paul Barker
Those are the patches from the last two patch reviews:
* https://lore.kernel.org/openembedded-core/cover.1777995876.git.fabien.thomas@smile.fr/T/#u
* Already sent as pull request: https://lore.kernel.org/openembedded-core/cover.1778186461.git.yoann.congal@smile.fr/
* https://lore.kernel.org/openembedded-core/cover.1778198884.git.yoann.congal@smile.fr/T/#t
I've combined the 2 series in this pull request.
Passed a-full on autobuilder:
https://autobuilder.yoctoproject.org/valkyrie/#/builders/29/builds/3794
The following changes since commit dc2df90b1d4f71023169d492f3819326e0e6c055:
liburcu: upgrade 0.14.0 -> 0.14.2 (2026-04-24 16:06:21 +0200)
are available in the Git repository at:
https://git.openembedded.org/openembedded-core-contrib stable/scarthgap-next
https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/scarthgap-next
for you to fetch changes up to 7952d214393b6c5230ba115f63b6f6d245a728bc:
glibc: Fix recipe bug that disabled stack protector (2026-05-08 01:06:24 +0200)
----------------------------------------------------------------
Adarsh Jagadish Kamini (2):
binutils: fix CVE-2025-69647
binutils: fix CVE-2025-69648
Bruce Ashfield (3):
linux-yocto/6.6: update to v6.6.124
linux-yocto/6.6: update to v6.6.126
linux-yocto/6.6: update to v6.6.127
Changqing Li (2):
libsoup: fix CVE-2025-14523
libsoup: fix CVE-2025-32049
Fabien Thomas (1):
ghostscript: Pin to C17 std
Himanshu Jadon (1):
apt: Add CVE_PRODUCT to support product name
Hitendra Prajapati (7):
rsync: fix for CVE-2026-41035
systemd: fix for CVE-2026-40225
systemd: fix for CVE-2026-40226
libarchive: fix for CVE-2026-4426
vim: fix for CVE-2026-39881
sudo: fix for CVE-2026-35535
inetutils: fix for CVE-2026-32772
Hongxu Jia (3):
u-boot: fix CVE-2025-24857
ovmf: fix CVE-2025-2296
ovmf: fix CVE-2024-38798
Hugo SIMELIERE (3):
expat: patch CVE-2026-32776
expat: patch CVE-2026-32777
expat: patch CVE-2026-32778
Ivan Nestlerode (1):
glibc: Fix recipe bug that disabled stack protector
Jhonata Poma-Hansen (1):
dbus: gate user-session PACKAGECONFIG on systemd in DISTRO_FEATURES
Martin Jansa (1):
ghostscript: fix build with gcc-15 on host
Moritz Haase (1):
devtool: Disable gpg signing when setting up source tree repos
Peter Marko (1):
coreutils: set CVE_PRODUCT
Sudhir Dumbhare (1):
libpng: fix CVE-2026-33636
Vijay Anusuri (2):
avahi: Fix CVE-2026-34933
gdk-pixbuf: Fix CVE-2026-5201
Xiangyu Chen (1):
grub: update search parameter
meta/recipes-bsp/grub/files/cfg | 2 +-
.../u-boot/files/CVE-2025-24857.patch | 42 +
meta/recipes-bsp/u-boot/u-boot-common.inc | 4 +-
meta/recipes-connectivity/avahi/avahi_0.8.bb | 2 +
.../avahi/files/CVE-2026-34933-1.patch | 108 +++
.../avahi/files/CVE-2026-34933-2.patch | 96 +++
.../inetutils/inetutils/CVE-2026-32772.patch | 172 ++++
.../inetutils/inetutils_2.5.bb | 1 +
meta/recipes-core/coreutils/coreutils_9.4.bb | 2 +
meta/recipes-core/dbus/dbus_1.14.10.bb | 2 +-
.../expat/expat/CVE-2026-32776.patch | 91 +++
.../expat/expat/CVE-2026-32777-01.patch | 49 ++
.../expat/expat/CVE-2026-32777-02.patch | 66 ++
.../expat/expat/CVE-2026-32778-01.patch | 91 +++
.../expat/expat/CVE-2026-32778-02.patch | 61 ++
meta/recipes-core/expat/expat_2.6.4.bb | 5 +
meta/recipes-core/glibc/glibc.inc | 3 -
...mdSev-Halt-on-failed-blob-allocation.patch | 159 ++++
.../ovmf/ovmf/CVE-2024-38798.patch | 116 +++
.../ovmf/ovmf/CVE-2025-2296-1.patch | 762 ++++++++++++++++++
.../ovmf/ovmf/CVE-2025-2296-2.patch | 175 ++++
.../ovmf/ovmf/CVE-2025-2296-3.patch | 42 +
.../ovmf/ovmf/CVE-2025-2296-4.patch | 34 +
.../ovmf/ovmf/CVE-2025-2296-5.patch | 36 +
.../ovmf/ovmf/CVE-2025-2296-6.patch | 54 ++
.../ovmf/ovmf/CVE-2025-2296-7.patch | 124 +++
.../ovmf/ovmf/CVE-2025-2296-8.patch | 125 +++
.../ovmf/ovmf/CVE-2025-2296-9.patch | 108 +++
meta/recipes-core/ovmf/ovmf_git.bb | 11 +
.../systemd/systemd/CVE-2026-40225-01.patch | 131 +++
.../systemd/systemd/CVE-2026-40225-02.patch | 39 +
.../systemd/systemd/CVE-2026-40226-01.patch | 63 ++
.../systemd/systemd/CVE-2026-40226-02.patch | 39 +
meta/recipes-core/systemd/systemd_255.21.bb | 4 +
meta/recipes-devtools/apt/apt_2.6.1.bb | 3 +
.../binutils/binutils-2.42.inc | 2 +
.../binutils/binutils/CVE-2025-69647.patch | 85 ++
.../binutils/binutils/CVE-2025-69648.patch | 190 +++++
.../rsync/files/CVE-2026-41035.patch | 39 +
meta/recipes-devtools/rsync/rsync_3.2.7.bb | 1 +
...Fix-compatibility-with-C23-compilers.patch | 67 ++
.../ghostscript/ghostscript_10.05.1.bb | 3 +
.../libarchive/libarchive/CVE-2026-4426.patch | 58 ++
.../libarchive/libarchive_3.7.9.bb | 1 +
.../sudo/files/CVE-2026-35535.patch | 150 ++++
meta/recipes-extended/sudo/sudo_1.9.17p2.bb | 1 +
.../gdk-pixbuf/gdk-pixbuf/CVE-2026-5201.patch | 44 +
.../gdk-pixbuf/gdk-pixbuf_2.42.12.bb | 1 +
.../linux/linux-yocto-rt_6.6.bb | 6 +-
.../linux/linux-yocto-tiny_6.6.bb | 6 +-
meta/recipes-kernel/linux/linux-yocto_6.6.bb | 28 +-
.../libpng/files/CVE-2026-33636.patch | 99 +++
.../libpng/libpng_1.6.42.bb | 1 +
.../libsoup-3.4.4/CVE-2025-14523.patch | 715 ++++++++++++++++
.../libsoup-3.4.4/CVE-2025-32049-1.patch | 229 ++++++
.../libsoup-3.4.4/CVE-2025-32049-2.patch | 34 +
.../libsoup-3.4.4/CVE-2025-32049-3.patch | 134 +++
.../libsoup-3.4.4/CVE-2025-32049-4.patch | 292 +++++++
meta/recipes-support/libsoup/libsoup_3.4.4.bb | 5 +
.../vim/files/CVE-2026-39881.patch | 248 ++++++
meta/recipes-support/vim/vim.inc | 1 +
scripts/lib/devtool/__init__.py | 2 +-
62 files changed, 5237 insertions(+), 27 deletions(-)
create mode 100644 meta/recipes-bsp/u-boot/files/CVE-2025-24857.patch
create mode 100644 meta/recipes-connectivity/avahi/files/CVE-2026-34933-1.patch
create mode 100644 meta/recipes-connectivity/avahi/files/CVE-2026-34933-2.patch
create mode 100644 meta/recipes-connectivity/inetutils/inetutils/CVE-2026-32772.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-32776.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-32777-01.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-32777-02.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-32778-01.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-32778-02.patch
create mode 100644 meta/recipes-core/ovmf/ovmf/0001-AmdSev-Halt-on-failed-blob-allocation.patch
create mode 100644 meta/recipes-core/ovmf/ovmf/CVE-2024-38798.patch
create mode 100644 meta/recipes-core/ovmf/ovmf/CVE-2025-2296-1.patch
create mode 100644 meta/recipes-core/ovmf/ovmf/CVE-2025-2296-2.patch
create mode 100644 meta/recipes-core/ovmf/ovmf/CVE-2025-2296-3.patch
create mode 100644 meta/recipes-core/ovmf/ovmf/CVE-2025-2296-4.patch
create mode 100644 meta/recipes-core/ovmf/ovmf/CVE-2025-2296-5.patch
create mode 100644 meta/recipes-core/ovmf/ovmf/CVE-2025-2296-6.patch
create mode 100644 meta/recipes-core/ovmf/ovmf/CVE-2025-2296-7.patch
create mode 100644 meta/recipes-core/ovmf/ovmf/CVE-2025-2296-8.patch
create mode 100644 meta/recipes-core/ovmf/ovmf/CVE-2025-2296-9.patch
create mode 100644 meta/recipes-core/systemd/systemd/CVE-2026-40225-01.patch
create mode 100644 meta/recipes-core/systemd/systemd/CVE-2026-40225-02.patch
create mode 100644 meta/recipes-core/systemd/systemd/CVE-2026-40226-01.patch
create mode 100644 meta/recipes-core/systemd/systemd/CVE-2026-40226-02.patch
create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2025-69647.patch
create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2025-69648.patch
create mode 100644 meta/recipes-devtools/rsync/files/CVE-2026-41035.patch
create mode 100644 meta/recipes-extended/ghostscript/ghostscript/0001-Bug-708160-Fix-compatibility-with-C23-compilers.patch
create mode 100644 meta/recipes-extended/libarchive/libarchive/CVE-2026-4426.patch
create mode 100644 meta/recipes-extended/sudo/files/CVE-2026-35535.patch
create mode 100644 meta/recipes-gnome/gdk-pixbuf/gdk-pixbuf/CVE-2026-5201.patch
create mode 100644 meta/recipes-multimedia/libpng/files/CVE-2026-33636.patch
create mode 100644 meta/recipes-support/libsoup/libsoup-3.4.4/CVE-2025-14523.patch
create mode 100644 meta/recipes-support/libsoup/libsoup-3.4.4/CVE-2025-32049-1.patch
create mode 100644 meta/recipes-support/libsoup/libsoup-3.4.4/CVE-2025-32049-2.patch
create mode 100644 meta/recipes-support/libsoup/libsoup-3.4.4/CVE-2025-32049-3.patch
create mode 100644 meta/recipes-support/libsoup/libsoup-3.4.4/CVE-2025-32049-4.patch
create mode 100644 meta/recipes-support/vim/files/CVE-2026-39881.patch
^ permalink raw reply [flat|nested] 2+ messages in thread
* [OE-core][scarthgap 00/31] Pull request (cover letter only)
@ 2026-07-22 17:13 Yoann Congal
0 siblings, 0 replies; 2+ messages in thread
From: Yoann Congal @ 2026-07-22 17:13 UTC (permalink / raw)
To: openembedded-core; +Cc: Paul Barker
Those are the patches from the last patch review:
https://lore.kernel.org/all/cover.1784567958.git.yoann.congal@smile.fr/
Removed 2 patches following review:
* bzip2: fix 'bzip2 --version > /tmp/aaa 2>&1' hang
* dropbear: Disable DSS correctly
Passed a-full on autobuilder:
https://autobuilder.yoctoproject.org/valkyrie/#/builders/29/builds/4258
* oe-selftest-armhost, oe-selftest-debian, oe-selftest-fedora failed with
#15289 – [scarthgap] AB-INT: sstatetests.SStatePrintdiff.test_gcc_runtime_vs_gcc_source failure
* oe-selftest-fedora rebuilt on isolated sstate/hashserv as
https://autobuilder.yoctoproject.org/valkyrie/?#/builders/48/builds/4164
The following changes since commit 8aca19cff468c5f15c919c973c46be58e020af46:
cve-update: Avoid NFS caching issues (2026-07-17 12:05:24 +0200)
are available in the Git repository at:
https://git.openembedded.org/openembedded-core-contrib stable/scarthgap-next
https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/scarthgap-next
for you to fetch changes up to 3217490cc554069ae53aa54cf8ad7327ce85fa10:
glibc-testsuite: Do not generate SPDX (2026-07-21 20:32:51 +0200)
----------------------------------------------------------------
Aleksandar Nikolic (1):
wic: Fix updating fstab for nvme devices
Ankur Tyagi (3):
wireless-regdb: upgrade 2026.02.04 -> 2026.03.18
wireless-regdb: upgrade 2026.03.18 -> 2026.05.30
ca-certificates: upgrade 20260223 -> 20260601
Ashishkumar Parmar (1):
bind: Upgrade 9.18.44 -> 9.18.49
Benjamin Robin (Schneider Electric) (4):
python3: fix CVE-2026-11940
python3: fix CVE-2026-11972
python3: fix CVE-2026-9669
glib-2.0: fix CVE-2026-58016
Deepak Rathore (1):
util-linux: fix CVE-2026-13595
Eric Meyers (1):
create-spdx-image-3.0: correct SSTATE_SKIP_CREATION key for
do_create_image_sbom_spdx
Harish Sadineni (1):
binutils: Add CVE-2025-69646 to "CVE:" tag
Hitendra Prajapati (1):
vim: Fix for CVE-2026-52858,CVE-2026-52859,CVE-2026-52860
Hugo SIMELIERE (Schneider Electric) (1):
libcap: Fix CVE-2026-4878
Jaipaul Cheernam (3):
glibc: stable 2.39 branch updates
bzip2: Fix CVE-2026-42250
gzip: fix CVE-2026-41992
Joshua Watt (1):
glibc-testsuite: Do not generate SPDX
Kris Gavvala (1):
python3: skiptest tracemalloc_track_race
Mathieu Dubois-Briand (1):
python3: Simplify ptest exclusion list
Peter Marko (4):
socat: patch CVE-2026-56123
vex: remove obsolete semicolon
rootfs: move tasks using image_list_installed_packages to
postuninstall
expat: patch CVE-2026-41080
Roland Kovacs (2):
binutils: fix CVE-2025-69649, and CVE-2025-69652
binutils: fix CVE-2025-69645
Ross Burton (1):
xmlto: update SRC_URI
Sudhir Dumbhare (2):
python3-urllib3: fix CVE-2026-44431
openssh: set status for CVE-2026-3497
Theo Gaige (1):
expat: patch CVE-2026-45186
Vijay Anusuri (1):
tzdata/tzcode-native: upgrade 2026b -> 2026c
.../create-spdx-image-3.0.bbclass | 2 +-
meta/classes-recipe/license_image.bbclass | 2 +-
meta/classes-recipe/nospdx.bbclass | 2 +-
meta/classes/vex.bbclass | 2 +-
.../bind/{bind_9.18.44.bb => bind_9.18.49.bb} | 2 +-
.../openssh/openssh_9.6p1.bb | 1 +
.../socat/files/CVE-2026-56123.patch | 150 ++++++
.../socat/socat_1.8.0.0.bb | 1 +
.../expat/expat/CVE-2026-41080-01.patch | 50 ++
.../expat/expat/CVE-2026-41080-02.patch | 29 ++
.../expat/expat/CVE-2026-41080-03.patch | 467 ++++++++++++++++++
.../expat/expat/CVE-2026-45186-01.patch | 70 +++
.../expat/expat/CVE-2026-45186-02.patch | 318 ++++++++++++
.../expat/expat/CVE-2026-45186-03.patch | 46 ++
.../expat/expat/CVE-2026-45186-04.patch | 32 ++
.../expat/expat/CVE-2026-45186-05.patch | 32 ++
.../expat/expat/CVE-2026-45186-06.patch | 87 ++++
.../expat/expat/CVE-2026-45186-07.patch | 52 ++
meta/recipes-core/expat/expat_2.6.4.bb | 10 +
.../glib-2.0/glib-2.0/CVE-2026-58016-1.patch | 94 ++++
.../glib-2.0/glib-2.0/CVE-2026-58016-2.patch | 98 ++++
meta/recipes-core/glib-2.0/glib-2.0_2.78.6.bb | 2 +
.../glibc/glibc-testsuite_2.39.bb | 1 +
meta/recipes-core/glibc/glibc-version.inc | 2 +-
meta/recipes-core/glibc/glibc_2.39.bb | 3 +-
meta/recipes-core/util-linux/util-linux.inc | 1 +
.../util-linux/CVE-2026-13595.patch | 157 ++++++
.../binutils/binutils-2.42.inc | 3 +
.../binutils/binutils/CVE-2025-69645.patch | 135 +++++
.../binutils/binutils/CVE-2025-69648.patch | 2 +-
.../binutils/binutils/CVE-2025-69649.patch | 44 ++
.../binutils/binutils/CVE-2025-69652.patch | 39 ++
.../python3-urllib3/CVE-2026-44431.patch | 163 ++++++
.../python/python3-urllib3_2.2.2.bb | 1 +
.../python/python3/CVE-2026-11940.patch | 66 +++
.../python/python3/CVE-2026-11972.patch | 60 +++
.../python/python3/CVE-2026-9669.patch | 96 ++++
.../python/python3_3.12.13.bb | 23 +-
meta/recipes-devtools/xmlto/xmlto_0.0.28.bb | 2 +-
.../bzip2/bzip2/CVE-2026-42250.patch | 35 ++
meta/recipes-extended/bzip2/bzip2_1.0.8.bb | 1 +
.../gzip/gzip-1.13/CVE-2026-41992.patch | 64 +++
meta/recipes-extended/gzip/gzip_1.13.bb | 1 +
meta/recipes-extended/timezone/timezone.inc | 6 +-
....02.04.bb => wireless-regdb_2026.05.30.bb} | 2 +-
...0260223.bb => ca-certificates_20260601.bb} | 4 +-
.../libcap/files/CVE-2026-4878.patch | 164 ++++++
meta/recipes-support/libcap/libcap_2.69.bb | 1 +
.../vim/files/CVE-2026-52858.patch | 167 +++++++
.../vim/files/CVE-2026-52859.patch | 274 ++++++++++
.../vim/files/CVE-2026-52860.patch | 446 +++++++++++++++++
meta/recipes-support/vim/vim.inc | 3 +
scripts/lib/wic/plugins/imager/direct.py | 6 +-
53 files changed, 3501 insertions(+), 20 deletions(-)
rename meta/recipes-connectivity/bind/{bind_9.18.44.bb => bind_9.18.49.bb} (97%)
create mode 100644 meta/recipes-connectivity/socat/files/CVE-2026-56123.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-41080-01.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-41080-02.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-41080-03.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-45186-01.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-45186-02.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-45186-03.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-45186-04.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-45186-05.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-45186-06.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-45186-07.patch
create mode 100644 meta/recipes-core/glib-2.0/glib-2.0/CVE-2026-58016-1.patch
create mode 100644 meta/recipes-core/glib-2.0/glib-2.0/CVE-2026-58016-2.patch
create mode 100644 meta/recipes-core/util-linux/util-linux/CVE-2026-13595.patch
create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2025-69645.patch
create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2025-69649.patch
create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2025-69652.patch
create mode 100644 meta/recipes-devtools/python/python3-urllib3/CVE-2026-44431.patch
create mode 100644 meta/recipes-devtools/python/python3/CVE-2026-11940.patch
create mode 100644 meta/recipes-devtools/python/python3/CVE-2026-11972.patch
create mode 100644 meta/recipes-devtools/python/python3/CVE-2026-9669.patch
create mode 100644 meta/recipes-extended/bzip2/bzip2/CVE-2026-42250.patch
create mode 100644 meta/recipes-extended/gzip/gzip-1.13/CVE-2026-41992.patch
rename meta/recipes-kernel/wireless-regdb/{wireless-regdb_2026.02.04.bb => wireless-regdb_2026.05.30.bb} (94%)
rename meta/recipes-support/ca-certificates/{ca-certificates_20260223.bb => ca-certificates_20260601.bb} (94%)
create mode 100644 meta/recipes-support/libcap/files/CVE-2026-4878.patch
create mode 100644 meta/recipes-support/vim/files/CVE-2026-52858.patch
create mode 100644 meta/recipes-support/vim/files/CVE-2026-52859.patch
create mode 100644 meta/recipes-support/vim/files/CVE-2026-52860.patch
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2026-07-22 17:14 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-07-22 17:13 [OE-core][scarthgap 00/31] Pull request (cover letter only) Yoann Congal
-- strict thread matches above, loose matches on Subject: below --
2026-05-12 9:25 Yoann Congal
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox