Openembedded Core Discussions
 help / color / mirror / Atom feed
* [OE-core][scarthgap 00/13] Patch review
@ 2026-09-11 22:14 Yoann Congal
  2026-09-11 22:14 ` [OE-core][scarthgap 01/13] linux-yocto/6.6: update CVE exclusions (6.6.151) Yoann Congal
                   ` (13 more replies)
  0 siblings, 14 replies; 17+ messages in thread
From: Yoann Congal @ 2026-09-11 22:14 UTC (permalink / raw)
  To: openembedded-core

Please review this set of changes for scarthgap and have comments back by
end of day Tuesday, September 15.

Passed a-full on autobuilder:
https://autobuilder.yoctoproject.org/valkyrie/?#/builders/29/builds/4718
* oe-selftest-fedora fails with 16415 – AB-INT: github infrastructure issues
  I still need to backport fixes from master to wrynose, and then,
  scarthgap.
* qemuarm64-ptest failed with 16267 – [scarthgap] AB-INT PTEST: python3 failure (test_wrong_cert_tls13)
  retried in https://autobuilder.yoctoproject.org/valkyrie/?#/builders/61/builds/4516
Note: this build was not rebased on the latest build-appliance update.


The following changes since commit bb166ac536daa43602ce8962cd3eb137783b8dc9:

  build-appliance-image: Update to scarthgap head revision (2026-09-11 14:32:15 +0100)

are available in the Git repository at:

  https://git.openembedded.org/openembedded-core-contrib stable/scarthgap-nut
  https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/scarthgap-nut

for you to fetch changes up to e85367ebf673225c69694ee63679ea7620c4b420:

  u-boot, u-boot-tools: Fix CVE-2026-46728 (2026-09-11 17:32:37 +0200)

----------------------------------------------------------------

Daniel Turull (1):
  libarchive: mark CVE-2026-14164 as fixed-version

Darsh Kelaiya (1):
  python3-lxml: fix CVE-2026-41066

Deepak Rathore (2):
  binutils: fix CVE-2026-3441 and CVE-2026-3442
  binutils: fix CVE-2026-4647

Devansh Patel (1):
  u-boot: share CVE_PRODUCT with u-boot-tools

Gyorgy Sarvari (1):
  python3-py: set CVE_PRODUCT

Hetvi Thakar (4):
  python3-pip: Fix CVE-2026-8643
  go: Fix CVE-2026-33814
  go: Fix CVE-2026-39823
  u-boot, u-boot-tools: Fix CVE-2026-46728

Peter Marko (1):
  openssl: upgrade 3.5.7 -> 3.5.8

Vijay Anusuri (1):
  p11-kit: Fix CVE-2026-18938

Yoann Congal (1):
  linux-yocto/6.6: update CVE exclusions (6.6.151)

 .../u-boot/files/CVE-2026-46728.patch         |  379 ++
 meta/recipes-bsp/u-boot/u-boot-common.inc     |    2 +
 .../u-boot/u-boot-tools_2024.01.bb            |    2 +
 meta/recipes-bsp/u-boot/u-boot.inc            |    2 -
 meta/recipes-bsp/u-boot/u-boot_2024.01.bb     |    1 +
 .../{openssl_3.5.7.bb => openssl_3.5.8.bb}    |    2 +-
 .../binutils/binutils-2.42.inc                |    2 +
 .../CVE-2026-3441_CVE-2026-3442.patch         |   51 +
 .../binutils/binutils/CVE-2026-4647.patch     |  228 +
 meta/recipes-devtools/go/go-1.22.12.inc       |    2 +
 .../go/go/CVE-2026-33814.patch                |   44 +
 .../go/go/CVE-2026-39823.patch                |  100 +
 .../python/python3-lxml/CVE-2026-41066.patch  |  262 +
 .../python/python3-lxml_5.0.2.bb              |    4 +-
 .../CVE-2026-8643-regression_p1.patch         |   34 +
 .../CVE-2026-8643-regression_p2.patch         |   69 +
 .../python/python3-pip/CVE-2026-8643.patch    |   79 +
 .../python/python3-pip_24.0.bb                |    3 +
 .../python/python3-py_1.11.0.bb               |    2 +
 .../libarchive/libarchive_3.7.9.bb            |    5 +
 .../linux/cve-exclusion_6.6.inc               | 4540 ++++++++++++++++-
 .../p11-kit/files/CVE-2026-18938.patch        |   52 +
 .../recipes-support/p11-kit/p11-kit_0.25.3.bb |    1 +
 23 files changed, 5787 insertions(+), 79 deletions(-)
 create mode 100644 meta/recipes-bsp/u-boot/files/CVE-2026-46728.patch
 rename meta/recipes-connectivity/openssl/{openssl_3.5.7.bb => openssl_3.5.8.bb} (99%)
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2026-3441_CVE-2026-3442.patch
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2026-4647.patch
 create mode 100644 meta/recipes-devtools/go/go/CVE-2026-33814.patch
 create mode 100644 meta/recipes-devtools/go/go/CVE-2026-39823.patch
 create mode 100644 meta/recipes-devtools/python/python3-lxml/CVE-2026-41066.patch
 create mode 100644 meta/recipes-devtools/python/python3-pip/CVE-2026-8643-regression_p1.patch
 create mode 100644 meta/recipes-devtools/python/python3-pip/CVE-2026-8643-regression_p2.patch
 create mode 100644 meta/recipes-devtools/python/python3-pip/CVE-2026-8643.patch
 create mode 100644 meta/recipes-support/p11-kit/files/CVE-2026-18938.patch



^ permalink raw reply	[flat|nested] 17+ messages in thread
* [OE-core][scarthgap 00/13] Patch review
@ 2025-02-08 14:04 Steve Sakoman
  0 siblings, 0 replies; 17+ messages in thread
From: Steve Sakoman @ 2025-02-08 14:04 UTC (permalink / raw)
  To: openembedded-core

Please review this set of changes for scarthgap and have comments back by
end of day Tuesday, February 11

Passed a-full on autobuilder:

https://autobuilder.yoctoproject.org/valkyrie/#/builders/29/builds/977

The following changes since commit 37835788d0772568f3551532eacbf810a4a6e47b:

  uboot-config: fix devtool modify with kernel-fitimage (2025-01-29 08:19:33 -0800)

are available in the Git repository at:

  https://git.openembedded.org/openembedded-core-contrib stable/scarthgap-nut
  https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/scarthgap-nut

Alexander Kanavin (2):
  pkg-config-native: pick additional search paths from
    $EXTRA_NATIVE_PKGCONFIG_PATH
  selftest/rust: correctly form the PATH environment variable

Deepesh Varatharajan (1):
  binutils: stable 2.42 branch update

Esben Haabendal (2):
  files: Amend overlayfs unit descriptions with path information
  files: overlayfs-create-dirs: Improve mount unit dependency

Harish Sadineni (3):
  rust: fix for rust multilib sdk configuration
  rust: remove redundant cargo config file
  oeqa/sdk/context: fix for gtk3 test failure during do_testsdk

Jiaying Song (1):
  binutils: File name too long causing failure to open temporary head
    file in dlltool

Pedro Ferreira (1):
  rust-common.bbclass: soft assignment for RUSTLIB path

Peter Marko (1):
  glibc: stable 2.39 branch updates

Ross Burton (1):
  oeqa/selftest/rust: skip on all MIPS platforms

Wang Mingyu (1):
  gnupg: upgrade 2.4.4 -> 2.4.5

 meta/classes-recipe/rust-common.bbclass       |   2 +-
 meta/files/overlayfs-create-dirs.service.in   |   5 +-
 meta/files/overlayfs-unit.mount.in            |   2 +-
 meta/lib/oeqa/sdk/context.py                  |  12 +-
 meta/lib/oeqa/selftest/cases/rust.py          |  13 +-
 meta/recipes-core/glibc/glibc-version.inc     |   2 +-
 meta/recipes-core/glibc/glibc_2.39.bb         |   2 +-
 .../binutils/binutils-2.42.inc                |   3 +-
 .../0017-dlltool-file-name-too-long.patch     | 208 ++++++++++++++++++
 .../pkgconf/pkgconf/pkg-config-native.in      |   2 +-
 .../pkgconfig/pkgconfig/pkg-config-native.in  |   2 +-
 meta/recipes-devtools/rust/cargo_1.75.0.bb    |  13 ++
 .../rust/rust-cross-canadian.inc              |  24 +-
 meta/recipes-devtools/rust/rust_1.75.0.bb     |  12 +
 .../gnupg/{gnupg_2.4.4.bb => gnupg_2.4.5.bb}  |   2 +-
 15 files changed, 257 insertions(+), 47 deletions(-)
 create mode 100644 meta/recipes-devtools/binutils/binutils/0017-dlltool-file-name-too-long.patch
 rename meta/recipes-support/gnupg/{gnupg_2.4.4.bb => gnupg_2.4.5.bb} (97%)

-- 
2.43.0



^ permalink raw reply	[flat|nested] 17+ messages in thread
end of thread, other threads:[~2026-09-13 14:23 UTC | newest]

Thread overview: 17+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-09-11 22:14 [OE-core][scarthgap 00/13] Patch review Yoann Congal
2026-09-11 22:14 ` [OE-core][scarthgap 01/13] linux-yocto/6.6: update CVE exclusions (6.6.151) Yoann Congal
2026-09-11 22:14 ` [OE-core][scarthgap 02/13] p11-kit: Fix CVE-2026-18938 Yoann Congal
2026-09-11 22:14 ` [OE-core][scarthgap 03/13] openssl: upgrade 3.5.7 -> 3.5.8 Yoann Congal
2026-09-11 22:14 ` [OE-core][scarthgap 04/13] python3-pip: Fix CVE-2026-8643 Yoann Congal
2026-09-11 22:14 ` [OE-core][scarthgap 05/13] go: Fix CVE-2026-33814 Yoann Congal
2026-09-11 22:15 ` [OE-core][scarthgap 06/13] go: Fix CVE-2026-39823 Yoann Congal
2026-09-11 22:15 ` [OE-core][scarthgap 07/13] binutils: fix CVE-2026-3441 and CVE-2026-3442 Yoann Congal
2026-09-11 22:15 ` [OE-core][scarthgap 08/13] binutils: fix CVE-2026-4647 Yoann Congal
2026-09-11 22:15 ` [OE-core][scarthgap 09/13] python3-py: set CVE_PRODUCT Yoann Congal
2026-09-11 22:15 ` [OE-core][scarthgap 10/13] python3-lxml: fix CVE-2026-41066 Yoann Congal
2026-09-11 22:15 ` [OE-core][scarthgap 11/13] libarchive: mark CVE-2026-14164 as fixed-version Yoann Congal
2026-09-11 22:15 ` [OE-core][scarthgap 12/13] u-boot: share CVE_PRODUCT with u-boot-tools Yoann Congal
2026-09-11 22:15 ` [OE-core][scarthgap 13/13] u-boot, u-boot-tools: Fix CVE-2026-46728 Yoann Congal
2026-09-13  0:12 ` [OE-core][scarthgap 00/13] Patch review Ankur Tyagi
2026-09-13 14:22   ` Yoann Congal
  -- strict thread matches above, loose matches on Subject: below --
2025-02-08 14:04 Steve Sakoman

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox