These changes update ca-certificates & python3-certifi for scarthgap to handle the fallout of the recent Emudhra CA certificate compromise.
These patches have already passed testing on the autobuilder, they will be merged to scarthgap outside of the usual stable review process once they have landed in blacksail & wrynose. As a consequence, the build backend for python3-certifi is changed to python_setuptools_build_meta and support for Python 3.6 (EOL since 2021-12-23) is dropped. Both of these are considered acceptable. See commit "python3-certifi: upgrade 2025.4.26 -> 2025.6.15" for details. Branch: https://git.openembedded.org/openembedded-core-contrib/log/?h=pbarker/certs-scarthgap AB Build: https://autobuilder.yoctoproject.org/valkyrie/#/builders/29/builds/4976 Signed-off-by: Paul Barker <[email protected]> --- Alexander Kanavin (1): python3-certifi: upgrade 2025.8.3 -> 2025.11.12 Leon Anavi (1): python3-certifi: Upgrade 2026.1.4 -> 2026.2.25 Paul Barker (2): ca-certificates: Disable compromised CA certificates Revert "python3-certifi: Fix CVE-2024-39689" Richard Purdie (2): python3-certifi: upgrade 2024.12.14 -> 2025.1.31 python3-certifi: upgrade 2026.2.25 -> 2026.4.22 Ross Burton (1): python3-certifi: upgrade 2026.7.22 -> 2026.10.19 Tim Orling (6): python3-certifi: upgrade 2024.2.2 -> 2024.6.2 python3-certifi: upgrade 2025.4.26 -> 2025.6.15 python3-certifi: upgrade 2025.7.9 -> 2025.8.3 python3-certifi: upgrade 2026.4.22 -> 2026.5.20 python3-certifi: upgrade 2026.5.20 -> 2026.6.17 python3-certifi: upgrade 2026.6.17 -> 2026.7.22 Wang Mingyu (6): python3-certifi: upgrade 2024.6.2 -> 2024.7.4 python3-certifi: upgrade 2024.7.4 -> 2024.8.30 python3-certifi: upgrade 2024.8.30 -> 2024.12.14 python3-certifi: upgrade 2025.1.31 -> 2025.4.26 python3-certifi: upgrade 2025.6.15 -> 2025.7.9 python3-certifi: upgrade 2025.11.12 -> 2026.1.4 .../python/python3-certifi/CVE-2024-39689.patch | 69 ---------------------- ...i_2024.2.2.bb => python3-certifi_2026.10.19.bb} | 7 +-- ...mSign-ECC-Root-CA-G3-and-Comodo-AAA-Servi.patch | 35 +++++++++++ .../ca-certificates/ca-certificates_20260816.bb | 1 + 4 files changed, 38 insertions(+), 74 deletions(-) --- base-commit: e95fc48cd797a013178c71d374810e2c08917d0f change-id: 20261023-certs-scarthgap-c5343b3616c2 Best regards, -- Paul Barker
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#248517): https://lists.openembedded.org/g/openembedded-core/message/248517 Mute This Topic: https://lists.openembedded.org/mt/121898134/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
