Please review this set of changes for wrynose and have comments back by end of day Tuesday, July 21.
Passed a-full on autobuilder: https://autobuilder.yoctoproject.org/valkyrie/#/builders/29/builds/4229 * qemux86-world and qemux86-64-ptest got impacted by 16316 – AB-INT: tar failure: got *at() syscall for unknown directory, fd 4 retried as https://autobuilder.yoctoproject.org/valkyrie/#/builders/73/builds/4062 https://autobuilder.yoctoproject.org/valkyrie/#/builders/59/builds/4182 * qemuarmv5 got impacted by 16217 – AB-INT: boot hang in qemu (amba chip errors?) retried as https://autobuilder.yoctoproject.org/valkyrie/#/builders/80/builds/3992 The following changes since commit 6f5681afb324aed2cba4e5b819ffc878f74a2bac: gnutls: fix CVE-2026-33846 (2026-07-16 20:54:12 +0200) are available in the Git repository at: https://git.openembedded.org/openembedded-core-contrib stable/wrynose-nut https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/wrynose-nut for you to fetch changes up to 551eade6c83483616ea6172336a4cf6c994ce90d: openssh: set status for CVE-2026-3497 (2026-07-18 01:31:03 +0200) ---------------------------------------------------------------- Adrian Freihofer (1): oe-selftest: fitimage: Do not expect kernel property in DTBO config subnodes Alexander Kanavin (1): wic: upgrade 0.3.0 -> 0.3.1 Deepak Rathore (1): util-linux: fix CVE-2026-13595 Gustavo Henrique Nihei (1): u-boot: re-enable RISC-V compressed (c) ISA extension Jaipaul Cheernam (2): gzip: fix CVE-2026-41992 bzip2: Fix CVE-2026-42250 Marek Vasut (2): kernel-fit-image.bbclass: Do not include kernel property in DTBO config subnodes kernel-fit-image.bbclass: Fix operation with KERNEL_DTBVENDORED = "1" Peter Marko (5): go: upgrade 1.26.4 -> 1.26.5 vex: remove obsolete semicolon rootfs: move tasks using image_list_installed_packages to postuninstall flac: fix buildpaths with doxygen enabled flac: make documentation build deterministic Ryan Eatmon (1): kernel-fit-image: Add KERNEL_DTBVENDORED support for FIT_CONF_DEFAULT_DTB Sudhir Dumbhare (1): openssh: set status for CVE-2026-3497 Vijay Anusuri (1): tzdata/tzcode-native: upgrade 2026b -> 2026c Yoann Congal (1): scripts/install-buildtools: Update to 6.0.2 meta/classes-recipe/kernel-fit-image.bbclass | 22 ++- meta/classes-recipe/license_image.bbclass | 2 +- meta/classes/vex.bbclass | 2 +- meta/lib/oe/fitimage.py | 7 +- meta/lib/oeqa/selftest/cases/fitimage.py | 4 +- meta/recipes-bsp/u-boot/u-boot_2026.01.bb | 1 + .../openssh/openssh_10.3p1.bb | 1 + meta/recipes-core/util-linux/util-linux.inc | 1 + .../util-linux/CVE-2026-13595.patch | 148 ++++++++++++++++++ .../go/{go-1.26.4.inc => go-1.26.5.inc} | 2 +- ...e_1.26.4.bb => go-binary-native_1.26.5.bb} | 6 +- ..._1.26.4.bb => go-cross-canadian_1.26.5.bb} | 0 ...{go-cross_1.26.4.bb => go-cross_1.26.5.bb} | 0 ...osssdk_1.26.4.bb => go-crosssdk_1.26.5.bb} | 0 ...runtime_1.26.4.bb => go-runtime_1.26.5.bb} | 0 .../go/{go_1.26.4.bb => go_1.26.5.bb} | 0 .../bzip2/bzip2/CVE-2026-42250.patch | 35 +++++ meta/recipes-extended/bzip2/bzip2_1.0.8.bb | 1 + .../gzip/gzip-1.14/CVE-2026-41992.patch | 64 ++++++++ meta/recipes-extended/gzip/gzip_1.14.bb | 1 + meta/recipes-extended/timezone/timezone.inc | 6 +- meta/recipes-multimedia/flac/flac_1.5.0.bb | 5 +- .../wic/{wic_0.3.0.bb => wic_0.3.1.bb} | 2 +- scripts/install-buildtools | 4 +- 24 files changed, 296 insertions(+), 18 deletions(-) create mode 100644 meta/recipes-core/util-linux/util-linux/CVE-2026-13595.patch rename meta/recipes-devtools/go/{go-1.26.4.inc => go-1.26.5.inc} (90%) rename meta/recipes-devtools/go/{go-binary-native_1.26.4.bb => go-binary-native_1.26.5.bb} (80%) rename meta/recipes-devtools/go/{go-cross-canadian_1.26.4.bb => go-cross-canadian_1.26.5.bb} (100%) rename meta/recipes-devtools/go/{go-cross_1.26.4.bb => go-cross_1.26.5.bb} (100%) rename meta/recipes-devtools/go/{go-crosssdk_1.26.4.bb => go-crosssdk_1.26.5.bb} (100%) rename meta/recipes-devtools/go/{go-runtime_1.26.4.bb => go-runtime_1.26.5.bb} (100%) rename meta/recipes-devtools/go/{go_1.26.4.bb => go_1.26.5.bb} (100%) create mode 100644 meta/recipes-extended/bzip2/bzip2/CVE-2026-42250.patch create mode 100644 meta/recipes-extended/gzip/gzip-1.14/CVE-2026-41992.patch rename meta/recipes-support/wic/{wic_0.3.0.bb => wic_0.3.1.bb} (90%)
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#241237): https://lists.openembedded.org/g/openembedded-core/message/241237 Mute This Topic: https://lists.openembedded.org/mt/120329193/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
