Bump to the latest stable release, which includes a fix for a
FIT image verification bypass, see:
https://github.com/barebox/barebox/security/advisories/GHSA-jhvm-7xq8-rvgm

Release: https://github.com/barebox/barebox/releases/tag/v2026.04.2

Signed-off-by: Lucas Stach <[email protected]>
---
 meta/recipes-bsp/barebox/barebox-common.inc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/meta/recipes-bsp/barebox/barebox-common.inc 
b/meta/recipes-bsp/barebox/barebox-common.inc
index f736ca68e02f..db7fb25e264d 100644
--- a/meta/recipes-bsp/barebox/barebox-common.inc
+++ b/meta/recipes-bsp/barebox/barebox-common.inc
@@ -3,6 +3,6 @@ SECTION = "bootloaders"
 
 LIC_FILES_CHKSUM = "file://COPYING;md5=f5125d13e000b9ca1f0d3364286c4192"
 
-PV = "2026.04.0"
+PV = "2026.04.2"
 SRC_URI = "https://barebox.org/download/barebox-${PV}.tar.bz2";
-SRC_URI[sha256sum] = 
"07fd3e3440c23e27d0094432f67827887fcc0e37d5fe24dc257c39b97c4294a0"
+SRC_URI[sha256sum] = 
"aa575d3ca4e7a8abe6b9796d0ff1d1ace43f86e34c627cc055ddb0a7ebd9dbe2"
-- 
2.47.3

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#247134): 
https://lists.openembedded.org/g/openembedded-core/message/247134
Mute This Topic: https://lists.openembedded.org/mt/121551031/21656
Group Owner: [email protected]
Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub 
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to