From: Yoann Congal <yoann.congal@smile.fr>
To: openembedded-core@lists.openembedded.org
Cc: Paul Barker <paul@pbarker.dev>
Subject: [OE-core][wrynose 00/28] Pull request (cover letter only)
Date: Wed, 30 Sep 2026 10:11:41 +0200 [thread overview]
Message-ID: <cover.1790754758.git.yoann.congal@smile.fr> (raw)
Those are the patches from the last patch review:
https://lore.kernel.org/all/cover.1790494949.git.yoann.congal@smile.fr/
Passed a-full on autobuilder:
https://autobuilder.yoctoproject.org/valkyrie/?#/builders/29/builds/4811
The following changes since commit cc4695f65beb6e5069fbecc16475fa5a27c768e9:
mesa: align x86 mesa config with LLVM graphics (2026-09-24 12:36:03 +0200)
are available in the Git repository at:
https://git.openembedded.org/openembedded-core-contrib stable/wrynose-next
https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/wrynose-next
for you to fetch changes up to 40993b0c42411caa5df71a75739b569fdffe981f:
linux-yocto/6.18: fix kernel reproducibility issues (2026-09-26 23:10:37 +0200)
----------------------------------------------------------------
Adrian Freihofer (1):
bitbake.conf: pseudo add rootfs-dbg to PSEUDO_INCLUDE_PATHS
Ankur Tyagi (3):
ffmpeg: mark CVE-2026-52295, CVE-2026-52296 and CVE-2026-52297 fixed
libxfont2: patch CVE-2026-59679
libxfont2: patch CVE-2026-44950
Benjamin Robin (3):
sbom-cve-check-update-db: Exclude recipes from rm_work
python3-sbom-cve-check: update to version 1.3.4
python3-sbom-cve-check: update to version 1.3.5
Bhavesh R Maheshwari (3):
ffmpeg: Fix for CVE-2026-66037
ffmpeg: Fix for CVE-2026-66038
ffmpeg: Fix for CVE-2026-66039
Bruce Ashfield (4):
linux-yocto/6.18: rt: update to v6.18.37-rt6
linux-yocto/6.18: update to v6.18.50
linux-yocto/6.18: update to v6.18.52
linux-yocto/6.18: fix kernel reproducibility issues
Daniel Dragomir (1):
toolchain-scripts: fix kernel host tool builds broken in the SDK
Devansh Patel (1):
vim: Fix CVE-2026-28417 hostname regression
Jonas Juffinger (1):
kernel-fit-image: Don't add hash node when signing is enabled
Peter Marko (2):
go: upgrade 1.26.7 -> 1.26.8
fmt: update branch name to main
Richard Purdie (4):
dhcpcd: upgrade 10.3.1 -> 10.3.2
sbom-cve-check-update-{nvd-native,cvelist-native}: upgrade 2026.08.25
-> 2026.09.12
sstate: Update mtime/atime for sig/siginfo files in
sstate_checkhashes()
sstate: Update unpack touch code to be consistent
Roopa Kalmath (1):
qemu: fix CVE-2026-48914
Tim Orling (1):
at-spi2-core: RDEPENDS on gsettings-desktop-schemas
Wang Mingyu (1):
sbom-cve-check-update-nvd-native,sbom-cve-check-update-cvelist-native:
upgrade 2026.08.03-000011 -> 2026.08.25-000009
Xiuzhuo Shang (1):
bluez5: restrict delta=0 RSSI to proximity filters
Yoann Congal (1):
cpio: fix "CVE:" marker in CVE-2026-66484.patch
meta/classes-global/sstate.bbclass | 16 +--
meta/classes-recipe/toolchain-scripts.bbclass | 2 +
meta/conf/bitbake.conf | 2 +-
meta/lib/oe/fitimage.py | 2 +-
meta/lib/oeqa/selftest/cases/fitimage.py | 8 +-
meta/recipes-connectivity/bluez5/bluez5.inc | 1 +
...ct-delta-0-RSSI-to-proximity-filters.patch | 86 ++++++++++++++++
.../{dhcpcd_10.3.1.bb => dhcpcd_10.3.2.bb} | 2 +-
...mprove-the-sitation-of-working-with-.patch | 2 +-
...-conflict-error-when-enable-multilib.patch | 4 +-
...e-INCLUDEDIR-to-prevent-build-issues.patch | 4 +-
meta/recipes-devtools/fmt/fmt_12.1.0.bb | 2 +-
.../go/{go-1.26.7.inc => go-1.26.8.inc} | 2 +-
...e_1.26.7.bb => go-binary-native_1.26.8.bb} | 6 +-
..._1.26.7.bb => go-cross-canadian_1.26.8.bb} | 0
...{go-cross_1.26.7.bb => go-cross_1.26.8.bb} | 0
...osssdk_1.26.7.bb => go-crosssdk_1.26.8.bb} | 0
...runtime_1.26.7.bb => go-runtime_1.26.8.bb} | 0
.../go/{go_1.26.7.bb => go_1.26.8.bb} | 0
meta/recipes-devtools/qemu/qemu.inc | 1 +
.../qemu/qemu/CVE-2026-48914.patch | 60 +++++++++++
...3.3.bb => python3-sbom-cve-check_1.3.5.bb} | 2 +-
...check-update-cvelist-native_2026-09-12.bb} | 2 +-
.../sbom-cve-check-update-db.inc | 1 +
...ck-update-nvd-native_2026.09.12-000023.bb} | 2 +-
.../cpio/files/CVE-2026-66484.patch | 2 +-
.../xorg-lib/libxfont2/CVE-2026-44950.patch | 99 +++++++++++++++++++
.../xorg-lib/libxfont2/CVE-2026-59679.patch | 93 +++++++++++++++++
.../xorg-lib/libxfont2_2.0.7.bb | 2 +
.../linux/linux-yocto-rt_6.18.bb | 6 +-
.../linux/linux-yocto-tiny_6.18.bb | 6 +-
meta/recipes-kernel/linux/linux-yocto_6.18.bb | 24 ++---
.../ffmpeg/ffmpeg/CVE-2026-66037.patch | 39 ++++++++
.../ffmpeg/ffmpeg/CVE-2026-66038.patch | 50 ++++++++++
.../ffmpeg/ffmpeg/CVE-2026-66039.patch | 38 +++++++
.../recipes-multimedia/ffmpeg/ffmpeg_8.0.3.bb | 6 ++
.../atk/at-spi2-core_2.60.0.bb | 2 +
.../vim/files/CVE-2026-28417-regression.patch | 65 ++++++++++++
meta/recipes-support/vim/vim.inc | 1 +
39 files changed, 596 insertions(+), 44 deletions(-)
create mode 100644 meta/recipes-connectivity/bluez5/bluez5/0001-adapter-restrict-delta-0-RSSI-to-proximity-filters.patch
rename meta/recipes-connectivity/dhcpcd/{dhcpcd_10.3.1.bb => dhcpcd_10.3.2.bb} (97%)
rename meta/recipes-devtools/go/{go-1.26.7.inc => go-1.26.8.inc} (90%)
rename meta/recipes-devtools/go/{go-binary-native_1.26.7.bb => go-binary-native_1.26.8.bb} (80%)
rename meta/recipes-devtools/go/{go-cross-canadian_1.26.7.bb => go-cross-canadian_1.26.8.bb} (100%)
rename meta/recipes-devtools/go/{go-cross_1.26.7.bb => go-cross_1.26.8.bb} (100%)
rename meta/recipes-devtools/go/{go-crosssdk_1.26.7.bb => go-crosssdk_1.26.8.bb} (100%)
rename meta/recipes-devtools/go/{go-runtime_1.26.7.bb => go-runtime_1.26.8.bb} (100%)
rename meta/recipes-devtools/go/{go_1.26.7.bb => go_1.26.8.bb} (100%)
create mode 100644 meta/recipes-devtools/qemu/qemu/CVE-2026-48914.patch
rename meta/recipes-devtools/sbom-cve-check/{python3-sbom-cve-check_1.3.3.bb => python3-sbom-cve-check_1.3.5.bb} (82%)
rename meta/recipes-devtools/sbom-cve-check/{sbom-cve-check-update-cvelist-native_2026-08-03.bb => sbom-cve-check-update-cvelist-native_2026-09-12.bb} (89%)
rename meta/recipes-devtools/sbom-cve-check/{sbom-cve-check-update-nvd-native_2026.08.03-000011.bb => sbom-cve-check-update-nvd-native_2026.09.12-000023.bb} (89%)
create mode 100644 meta/recipes-graphics/xorg-lib/libxfont2/CVE-2026-44950.patch
create mode 100644 meta/recipes-graphics/xorg-lib/libxfont2/CVE-2026-59679.patch
create mode 100644 meta/recipes-multimedia/ffmpeg/ffmpeg/CVE-2026-66037.patch
create mode 100644 meta/recipes-multimedia/ffmpeg/ffmpeg/CVE-2026-66038.patch
create mode 100644 meta/recipes-multimedia/ffmpeg/ffmpeg/CVE-2026-66039.patch
create mode 100644 meta/recipes-support/vim/files/CVE-2026-28417-regression.patch
next reply other threads:[~2026-09-30 8:12 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-09-30 8:11 Yoann Congal [this message]
-- strict thread matches above, loose matches on Subject: below --
2026-05-21 15:46 [OE-core][wrynose 00/28] Pull request (cover letter only) Yoann Congal
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=cover.1790754758.git.yoann.congal@smile.fr \
--to=yoann.congal@smile.fr \
--cc=openembedded-core@lists.openembedded.org \
--cc=paul@pbarker.dev \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox