From: Yoann Congal <yoann.congal@smile.fr>
To: openembedded-core@lists.openembedded.org
Subject: [OE-core][scarthgap 00/55] Patch review
Date: Sat, 31 Oct 2026 01:14:21 +0100 [thread overview]
Message-ID: <cover.1793405493.git.yoann.congal@smile.fr> (raw)
Please review this set of changes for scarthgap and have comments back by
end of day Tuesday, November 3.
Passed a-full on autobuilder:
https://autobuilder.yoctoproject.org/valkyrie/?#/builders/29/builds/5029
* qemuarm64-ptest failed with 16267 – [scarthgap] AB-INT PTEST: python3 failure (test_wrong_cert_tls13)
retried in https://autobuilder.yoctoproject.org/valkyrie/?#/builders/61/builds/4818
The following changes since commit 44b46b8ad6e461dd9289face17cbfaeca6f5d0f2:
python3-certifi: upgrade 2026.7.22 -> 2026.10.19 (2026-10-22 12:49:16 +0100)
are available in the Git repository at:
https://git.openembedded.org/openembedded-core-contrib stable/scarthgap-review
https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/scarthgap-review
for you to fetch changes up to d8d1c0ccd8b51574af64c8781aaa4cf46f1d3211:
util-linux: patch CVE-2026-53615 (2026-10-30 19:26:06 +0100)
----------------------------------------------------------------
Alexander Kanavin (1):
gstreamer1.0: disable an intermittently failing test
Ankur Tyagi (1):
tzdata/tzcode-native: upgrade 2026d -> 2026e
Benhur Tessele (1):
go: fix CVE-2026-56862
Bruce Ashfield (5):
linux-yocto/6.6: update to v6.6.156
linux-yocto/6.6: update to v6.6.157
linux-yocto/6.6: update to v6.6.159
linux-yocto/6.6: update to v6.6.160
linux-yocto/6.6: aufs: refresh to upstream aufs6.6.84
Hetvi Thakar (5):
apr-util: Fix CVE-2025-49506
apr-util: Fix CVE-2026-32327
apr-util: Mark CVE-2026-34191 not applicable
apr-util: Fix CVE-2026-34501
apr-util: Fix CVE-2026-34502
Jaipaul Cheernam (2):
python3-urllib3: Fix CVE-2026-97689
curl: fix CVE-2026-80230
Jakub Szczudlo (Nokia) (1):
libarchive: fix CVE-2026-15028
Paul Barker (1):
b4-config: Add configuration for scarthgap
Peter Marko (32):
util-linux: patch CVE-2026-53614
util-linux: patch CVE-2026-53613
util-linux: patch CVE-2026-53612
util-linux: patch CVE-2024-28085 regression
util-linux: patch CVE-2026-78408
util-linux: patch CVE-2026-78410
util-linux: patch CVE-2026-76642
expat: patch CVE-2026-102633
expat: patch CVE-2026-77214
popt: patch CVE-2026-18743
popt: patch CVE-2026-18739
glib-2.0: patch CVE-2026-15588
glib-2.0: patch CVE-2026-16118
libpng: patch CVE-2026-46675
libpcre2: update to latest release branch hash 50b3c0d7ce
glibc: patch CVE-2026-5928
glibc: patch CVE-2026-5450
glibc: patch CVE-2026-6791
glibc: patch CVE-2026-6368
glibc: patch CVE-2026-19542
glibc: patch CVE-2026-19499
glibc: patch CVE-2026-77117
glibc: patch CVE-2026-80489
glibc: add tests for CVE-2026-77117 and CVE-2026-80489.
glibc: patch CVE-2026-18374
glibc: patch CVE-2026-8674
glibc: patch CVE-2026-89092
glibc: patch CVE-2026-97399
glibc: stable 2.39 branch updates to b7a0de2c8f
dhcpcd: patch CVE-2025-70102
python3: upgrade 3.12.15 -> 3.12.16
util-linux: patch CVE-2026-53615
Richard Purdie (1):
shadow-native: Disable syslog usage
Ross Burton (1):
gstreamer: skip test_queue:test_leaky_downstream test as it's flakey
Suresh H A (1):
systemd: try AT_EMPTY_PATH for access_fd() first
Theo GAIGE (1):
python3-pyelftools: add python3-logging to RDEPENDS
Yoann Congal (2):
scripts/install-buildtools: Update to 5.0.21
linux-yocto/6.6: update CVE exclusions (6.6.160)
.b4-config | 4 +
.../dhcpcd/dhcpcd_10.0.6.bb | 1 +
.../dhcpcd/files/CVE-2025-70102.patch | 30 +
.../expat/expat/CVE-2026-102633.patch | 68 +
.../expat/expat/CVE-2026-77214.patch | 106 +
meta/recipes-core/expat/expat_2.8.3.bb | 2 +
.../glib-2.0/glib-2.0/CVE-2026-15588.patch | 267 +
.../glib-2.0/glib-2.0/CVE-2026-16118.patch | 48 +
meta/recipes-core/glib-2.0/glib-2.0_2.78.6.bb | 2 +
meta/recipes-core/glibc/glibc-version.inc | 2 +-
.../glibc/glibc/0031-CVE-2026-5928.patch | 112 +
.../glibc/glibc/0032-CVE-2026-5450.patch | 133 +
.../glibc/glibc/0033-CVE-2026-6791.patch | 364 +
.../glibc/glibc/0034-CVE-2026-6368.patch | 577 ++
.../glibc/glibc/0035-CVE-2026-19542.patch | 99 +
.../glibc/glibc/0036-CVE-2026-19499.patch | 100 +
.../glibc/glibc/0037-CVE-2026-77117.patch | 32 +
.../glibc/glibc/0038-CVE-2026-80489.patch | 32 +
.../0039-CVE-2026-77117-CVE-2026-80489.patch | 172 +
.../glibc/glibc/0040-CVE-2026-18374-01.patch | 53 +
.../glibc/glibc/0041-CVE-2026-18374-02.patch | 103 +
.../glibc/glibc/0042-CVE-2026-8674.patch | 118 +
.../glibc/glibc/0047-CVE-2026-89092.patch | 245 +
.../glibc/glibc/0048-CVE-2026-97399.patch | 128 +
meta/recipes-core/glibc/glibc_2.39.bb | 14 +
...ry-AT_EMPTY_PATH-for-access_fd-first.patch | 34 +
meta/recipes-core/systemd/systemd_255.22.bb | 1 +
meta/recipes-core/util-linux/util-linux.inc | 15 +
...ib-fileutils-add-ul_open_no_symlinks.patch | 98 +
...dd-ul_openat_resolve-openat2-wrapper.patch | 85 +
...x-RESOLVE_NO_SYMLINKS-fallback-value.patch | 71 +
...x-unused-parameter-warnings-without-.patch | 64 +
..._open_tree-helper-for-safe-tree-open.patch | 85 +
.../util-linux/CVE-2024-28085-0003.patch | 77 +
.../util-linux/CVE-2026-53612.patch | 92 +
.../util-linux/CVE-2026-53613.patch | 192 +
.../util-linux/CVE-2026-53614.patch | 83 +
.../util-linux/CVE-2026-53615.patch | 109 +
.../util-linux/CVE-2026-76642.patch | 136 +
.../util-linux/CVE-2026-78408.patch | 98 +
.../util-linux/CVE-2026-78410-01.patch | 94 +
.../util-linux/CVE-2026-78410-02.patch | 96 +
.../util-linux/CVE-2026-78410-03.patch | 115 +
meta/recipes-devtools/go/go-1.22.12.inc | 1 +
.../go/go/CVE-2026-56862.patch | 98 +
.../python/python3-pyelftools_0.30.bb | 2 +-
.../python3-urllib3/CVE-2026-97689.patch | 251 +
.../python/python3-urllib3_2.2.2.bb | 14 +-
...shebang-overflow-on-python-config.py.patch | 2 +-
...-qemu-wrapper-when-gathering-profile.patch | 2 +-
...e-treat-overflow-in-UID-GID-as-failu.patch | 2 +-
...pes.test_find-skip-without-tools-sdk.patch | 2 +-
.../python/python3/makerace.patch | 2 +-
...{python3_3.12.15.bb => python3_3.12.16.bb} | 2 +-
.../libarchive/CVE-2026-15028.patch | 41 +
.../libarchive/libarchive_3.7.9.bb | 1 +
.../shadow/files/disable_syslog.patch | 22 +
meta/recipes-extended/shadow/shadow.inc | 1 +
meta/recipes-extended/timezone/timezone.inc | 6 +-
.../linux/cve-exclusion_6.6.inc | 7716 +++++++++++++++--
.../linux/linux-yocto-rt_6.6.bb | 6 +-
.../linux/linux-yocto-tiny_6.6.bb | 6 +-
meta/recipes-kernel/linux/linux-yocto_6.6.bb | 28 +-
.../gstreamer/gstreamer1.0/run-ptest | 7 +
.../libpng/files/CVE-2026-46675.patch | 115 +
.../libpng/libpng_1.6.42.bb | 1 +
.../apr/apr-util/CVE-2025-49506.patch | 310 +
.../apr-util/CVE-2026-32327-dependent.patch | 34 +
.../apr/apr-util/CVE-2026-32327.patch | 2162 +++++
.../apr/apr-util/CVE-2026-34501.patch | 128 +
.../apr/apr-util/CVE-2026-34502_p1.patch | 106 +
.../apr/apr-util/CVE-2026-34502_p2.patch | 38 +
meta/recipes-support/apr/apr-util_1.6.3.bb | 8 +
.../curl/curl/CVE-2026-80230.patch | 63 +
meta/recipes-support/curl/curl_8.7.1.bb | 70 +-
.../recipes-support/libpcre/libpcre2_10.43.bb | 20 +-
.../popt/popt/CVE-2026-18739.patch | 92 +
.../popt/popt/CVE-2026-18743.patch | 97 +
meta/recipes-support/popt/popt_1.19.bb | 3 +
scripts/install-buildtools | 4 +-
80 files changed, 14838 insertions(+), 982 deletions(-)
create mode 100644 .b4-config
create mode 100644 meta/recipes-connectivity/dhcpcd/files/CVE-2025-70102.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-102633.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-77214.patch
create mode 100644 meta/recipes-core/glib-2.0/glib-2.0/CVE-2026-15588.patch
create mode 100644 meta/recipes-core/glib-2.0/glib-2.0/CVE-2026-16118.patch
create mode 100644 meta/recipes-core/glibc/glibc/0031-CVE-2026-5928.patch
create mode 100644 meta/recipes-core/glibc/glibc/0032-CVE-2026-5450.patch
create mode 100644 meta/recipes-core/glibc/glibc/0033-CVE-2026-6791.patch
create mode 100644 meta/recipes-core/glibc/glibc/0034-CVE-2026-6368.patch
create mode 100644 meta/recipes-core/glibc/glibc/0035-CVE-2026-19542.patch
create mode 100644 meta/recipes-core/glibc/glibc/0036-CVE-2026-19499.patch
create mode 100644 meta/recipes-core/glibc/glibc/0037-CVE-2026-77117.patch
create mode 100644 meta/recipes-core/glibc/glibc/0038-CVE-2026-80489.patch
create mode 100644 meta/recipes-core/glibc/glibc/0039-CVE-2026-77117-CVE-2026-80489.patch
create mode 100644 meta/recipes-core/glibc/glibc/0040-CVE-2026-18374-01.patch
create mode 100644 meta/recipes-core/glibc/glibc/0041-CVE-2026-18374-02.patch
create mode 100644 meta/recipes-core/glibc/glibc/0042-CVE-2026-8674.patch
create mode 100644 meta/recipes-core/glibc/glibc/0047-CVE-2026-89092.patch
create mode 100644 meta/recipes-core/glibc/glibc/0048-CVE-2026-97399.patch
create mode 100644 meta/recipes-core/systemd/systemd/0024-fs-util-try-AT_EMPTY_PATH-for-access_fd-first.patch
create mode 100644 meta/recipes-core/util-linux/util-linux/0001-lib-fileutils-add-ul_open_no_symlinks.patch
create mode 100644 meta/recipes-core/util-linux/util-linux/0001-lib-fileutils-add-ul_openat_resolve-openat2-wrapper.patch
create mode 100644 meta/recipes-core/util-linux/util-linux/0001-lib-fileutils-fix-RESOLVE_NO_SYMLINKS-fallback-value.patch
create mode 100644 meta/recipes-core/util-linux/util-linux/0001-lib-fileutils-fix-unused-parameter-warnings-without-.patch
create mode 100644 meta/recipes-core/util-linux/util-linux/0001-libmount-add-mnt_open_tree-helper-for-safe-tree-open.patch
create mode 100644 meta/recipes-core/util-linux/util-linux/CVE-2024-28085-0003.patch
create mode 100644 meta/recipes-core/util-linux/util-linux/CVE-2026-53612.patch
create mode 100644 meta/recipes-core/util-linux/util-linux/CVE-2026-53613.patch
create mode 100644 meta/recipes-core/util-linux/util-linux/CVE-2026-53614.patch
create mode 100644 meta/recipes-core/util-linux/util-linux/CVE-2026-53615.patch
create mode 100644 meta/recipes-core/util-linux/util-linux/CVE-2026-76642.patch
create mode 100644 meta/recipes-core/util-linux/util-linux/CVE-2026-78408.patch
create mode 100644 meta/recipes-core/util-linux/util-linux/CVE-2026-78410-01.patch
create mode 100644 meta/recipes-core/util-linux/util-linux/CVE-2026-78410-02.patch
create mode 100644 meta/recipes-core/util-linux/util-linux/CVE-2026-78410-03.patch
create mode 100644 meta/recipes-devtools/go/go/CVE-2026-56862.patch
create mode 100644 meta/recipes-devtools/python/python3-urllib3/CVE-2026-97689.patch
rename meta/recipes-devtools/python/{python3_3.12.15.bb => python3_3.12.16.bb} (99%)
create mode 100644 meta/recipes-extended/libarchive/libarchive/CVE-2026-15028.patch
create mode 100644 meta/recipes-extended/shadow/files/disable_syslog.patch
create mode 100644 meta/recipes-multimedia/libpng/files/CVE-2026-46675.patch
create mode 100644 meta/recipes-support/apr/apr-util/CVE-2025-49506.patch
create mode 100644 meta/recipes-support/apr/apr-util/CVE-2026-32327-dependent.patch
create mode 100644 meta/recipes-support/apr/apr-util/CVE-2026-32327.patch
create mode 100644 meta/recipes-support/apr/apr-util/CVE-2026-34501.patch
create mode 100644 meta/recipes-support/apr/apr-util/CVE-2026-34502_p1.patch
create mode 100644 meta/recipes-support/apr/apr-util/CVE-2026-34502_p2.patch
create mode 100644 meta/recipes-support/curl/curl/CVE-2026-80230.patch
create mode 100644 meta/recipes-support/popt/popt/CVE-2026-18739.patch
create mode 100644 meta/recipes-support/popt/popt/CVE-2026-18743.patch
next reply other threads:[~2026-10-31 0:15 UTC|newest]
Thread overview: 57+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-10-31 0:14 Yoann Congal [this message]
2026-10-31 0:14 ` [OE-core][scarthgap 01/55] scripts/install-buildtools: Update to 5.0.21 Yoann Congal
2026-10-31 0:14 ` [OE-core][scarthgap 02/55] util-linux: patch CVE-2026-53614 Yoann Congal
2026-10-31 0:14 ` [OE-core][scarthgap 03/55] util-linux: patch CVE-2026-53613 Yoann Congal
2026-10-31 0:14 ` [OE-core][scarthgap 04/55] util-linux: patch CVE-2026-53612 Yoann Congal
2026-10-31 0:14 ` [OE-core][scarthgap 05/55] util-linux: patch CVE-2024-28085 regression Yoann Congal
2026-10-31 0:14 ` [OE-core][scarthgap 06/55] util-linux: patch CVE-2026-78408 Yoann Congal
2026-10-31 0:14 ` [OE-core][scarthgap 07/55] util-linux: patch CVE-2026-78410 Yoann Congal
2026-10-31 0:14 ` [OE-core][scarthgap 08/55] util-linux: patch CVE-2026-76642 Yoann Congal
2026-10-31 0:14 ` [OE-core][scarthgap 09/55] tzdata/tzcode-native: upgrade 2026d -> 2026e Yoann Congal
2026-10-31 0:14 ` [OE-core][scarthgap 10/55] expat: patch CVE-2026-102633 Yoann Congal
2026-10-31 0:14 ` [OE-core][scarthgap 11/55] expat: patch CVE-2026-77214 Yoann Congal
2026-10-31 0:14 ` [OE-core][scarthgap 12/55] popt: patch CVE-2026-18743 Yoann Congal
2026-10-31 0:14 ` [OE-core][scarthgap 13/55] popt: patch CVE-2026-18739 Yoann Congal
2026-10-31 0:14 ` [OE-core][scarthgap 14/55] glib-2.0: patch CVE-2026-15588 Yoann Congal
2026-10-31 0:14 ` [OE-core][scarthgap 15/55] glib-2.0: patch CVE-2026-16118 Yoann Congal
2026-10-31 0:14 ` [OE-core][scarthgap 16/55] libpng: patch CVE-2026-46675 Yoann Congal
2026-10-31 0:14 ` [OE-core][scarthgap 17/55] go: fix CVE-2026-56862 Yoann Congal
2026-10-31 0:14 ` [OE-core][scarthgap 18/55] libpcre2: update to latest release branch hash 50b3c0d7ce Yoann Congal
2026-10-31 0:14 ` [OE-core][scarthgap 19/55] python3-urllib3: Fix CVE-2026-97689 Yoann Congal
2026-10-31 0:14 ` [OE-core][scarthgap 20/55] python3-pyelftools: add python3-logging to RDEPENDS Yoann Congal
2026-10-31 0:14 ` [OE-core][scarthgap 21/55] glibc: patch CVE-2026-5928 Yoann Congal
2026-10-31 0:14 ` [OE-core][scarthgap 22/55] glibc: patch CVE-2026-5450 Yoann Congal
2026-10-31 0:14 ` [OE-core][scarthgap 23/55] glibc: patch CVE-2026-6791 Yoann Congal
2026-10-31 0:14 ` [OE-core][scarthgap 24/55] glibc: patch CVE-2026-6368 Yoann Congal
2026-10-31 0:14 ` [OE-core][scarthgap 25/55] glibc: patch CVE-2026-19542 Yoann Congal
2026-10-31 0:14 ` [OE-core][scarthgap 26/55] glibc: patch CVE-2026-19499 Yoann Congal
2026-10-31 0:14 ` [OE-core][scarthgap 27/55] glibc: patch CVE-2026-77117 Yoann Congal
2026-10-31 0:14 ` [OE-core][scarthgap 28/55] glibc: patch CVE-2026-80489 Yoann Congal
2026-10-31 0:14 ` [OE-core][scarthgap 29/55] glibc: add tests for CVE-2026-77117 and CVE-2026-80489 Yoann Congal
2026-10-31 0:14 ` [OE-core][scarthgap 30/55] glibc: patch CVE-2026-18374 Yoann Congal
2026-10-31 0:14 ` [OE-core][scarthgap 31/55] glibc: patch CVE-2026-8674 Yoann Congal
2026-10-31 0:14 ` [OE-core][scarthgap 32/55] glibc: patch CVE-2026-89092 Yoann Congal
2026-10-31 0:14 ` [OE-core][scarthgap 33/55] glibc: patch CVE-2026-97399 Yoann Congal
2026-10-31 0:14 ` [OE-core][scarthgap 34/55] glibc: stable 2.39 branch updates to b7a0de2c8f Yoann Congal
2026-10-31 0:14 ` [OE-core][scarthgap 35/55] b4-config: Add configuration for scarthgap Yoann Congal
2026-10-31 0:14 ` [OE-core][scarthgap 36/55] dhcpcd: patch CVE-2025-70102 Yoann Congal
2026-10-31 0:14 ` [OE-core][scarthgap 37/55] python3: upgrade 3.12.15 -> 3.12.16 Yoann Congal
2026-10-31 0:14 ` [OE-core][scarthgap 38/55] shadow-native: Disable syslog usage Yoann Congal
2026-10-31 0:15 ` [OE-core][scarthgap 39/55] gstreamer1.0: disable an intermittently failing test Yoann Congal
2026-10-31 0:15 ` [OE-core][scarthgap 40/55] gstreamer: skip test_queue:test_leaky_downstream test as it's flakey Yoann Congal
2026-10-31 0:15 ` [OE-core][scarthgap 41/55] linux-yocto/6.6: update to v6.6.156 Yoann Congal
2026-10-31 0:15 ` [OE-core][scarthgap 42/55] linux-yocto/6.6: update to v6.6.157 Yoann Congal
2026-10-31 0:15 ` [OE-core][scarthgap 43/55] linux-yocto/6.6: update to v6.6.159 Yoann Congal
2026-10-31 0:15 ` [OE-core][scarthgap 44/55] linux-yocto/6.6: update to v6.6.160 Yoann Congal
2026-10-31 0:15 ` [OE-core][scarthgap 45/55] linux-yocto/6.6: aufs: refresh to upstream aufs6.6.84 Yoann Congal
2026-10-31 0:15 ` [OE-core][scarthgap 46/55] linux-yocto/6.6: update CVE exclusions (6.6.160) Yoann Congal
2026-10-31 0:15 ` [OE-core][scarthgap 47/55] curl: fix CVE-2026-80230 Yoann Congal
2026-10-31 0:15 ` [OE-core][scarthgap 48/55] libarchive: fix CVE-2026-15028 Yoann Congal
2026-10-31 0:15 ` [OE-core][scarthgap 49/55] systemd: try AT_EMPTY_PATH for access_fd() first Yoann Congal
2026-10-31 0:15 ` [OE-core][scarthgap 50/55] apr-util: Fix CVE-2025-49506 Yoann Congal
2026-10-31 0:15 ` [OE-core][scarthgap 51/55] apr-util: Fix CVE-2026-32327 Yoann Congal
2026-10-31 0:15 ` [OE-core][scarthgap 52/55] apr-util: Mark CVE-2026-34191 not applicable Yoann Congal
2026-10-31 0:15 ` [OE-core][scarthgap 53/55] apr-util: Fix CVE-2026-34501 Yoann Congal
2026-10-31 0:15 ` [OE-core][scarthgap 54/55] apr-util: Fix CVE-2026-34502 Yoann Congal
2026-10-31 0:15 ` [OE-core][scarthgap 55/55] util-linux: patch CVE-2026-53615 Yoann Congal
-- strict thread matches above, loose matches on Subject: below --
2026-10-15 5:02 [OE-core][scarthgap 00/55] Patch review Yoann Congal
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=cover.1793405493.git.yoann.congal@smile.fr \
--to=yoann.congal@smile.fr \
--cc=openembedded-core@lists.openembedded.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox