From patchwork Wed Aug 12 06:00:07 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: auh@yoctoproject.org X-Patchwork-Id: 94998 Return-Path: Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id D7887C5CFEB for ; Wed, 12 Aug 2026 06:00:11 +0000 (UTC) Received: from a27-193.smtp-out.us-west-2.amazonses.com (a27-193.smtp-out.us-west-2.amazonses.com [54.240.27.193]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.1785.1786514408668062292 for ; Tue, 11 Aug 2026 23:00:08 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@yoctoproject.org header.s=lvjh2tk576v2ro5mi6k4dt3mc6wpqbky header.b=agk6fuKd; dkim=pass header.i=@amazonses.com header.s=hsbnp7p3ensaochzwyq5wwmceodymuwv header.b=yLBAwgoV; spf=pass (domain: us-west-2.amazonses.com, ip: 54.240.27.193, mailfrom: 0101019ff48e80c4-89336f58-0a3c-4989-8bf5-1f39a9a9a4c3-000000@us-west-2.amazonses.com) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=lvjh2tk576v2ro5mi6k4dt3mc6wpqbky; d=yoctoproject.org; t=1786514407; h=Content-Type:MIME-Version:From:To:Cc:Subject:Message-Id:Date; bh=0R9wuyIhg87W07wveNovGXdHHZgXAXUJvK/YxuhhXag=; b=agk6fuKdh7gRgYXc2MXuudg1EAbcY95A50KHS5m+uepqhSwOr/V5AL41Co/l3Qyb rhxYp9OiBmpDU918Vx9dnAkui5xow83GRldVzhWXDVZ2Uf6dBW5USKVCcB7sXq7LlGl a571ipLE0NcQtblcLX/FG9faFda717Ds68Twh1D0= DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=hsbnp7p3ensaochzwyq5wwmceodymuwv; d=amazonses.com; t=1786514407; h=Content-Type:MIME-Version:From:To:Cc:Subject:Message-Id:Date:Feedback-ID; bh=0R9wuyIhg87W07wveNovGXdHHZgXAXUJvK/YxuhhXag=; b=yLBAwgoV/1Io/X4LKi84miTOp29fAuIptWu/2qJWvWyMY1PrGuRlmhh0eNcXvWyT XYjBWMvGR1FcMpt1cUvnXgb7JFVzzTYlCYhERwEne0IdrHvzoAv6MtkUQCJcBqKiSBi /votlc6D9wUFsnCcFd4O2Bi+6nxgDjiqBtD0l9ac= MIME-Version: 1.0 From: auh@yoctoproject.org To: Benjamin Robin , Benjamin Robin Cc: openembedded-core@lists.openembedded.org Subject: [AUH] sbom-cve-check-update-cvelist-native,sbom-cve-check-update-nvd-native: upgrading to 2026-08-12,2026.08.12-000016 SUCCEEDED Message-ID: <0101019ff48e80c4-89336f58-0a3c-4989-8bf5-1f39a9a9a4c3-000000@us-west-2.amazonses.com> Date: Wed, 12 Aug 2026 06:00:07 +0000 Feedback-ID: ::1.us-west-2.9np3MYPs3fEaOBysGKSlUD4KtcmPijcmS9Az2Hwf7iQ=:AmazonSES X-SES-Outgoing: 2026.08.12-54.240.27.193 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 12 Aug 2026 06:00:11 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/243237 Hello, this email is a notification from the Auto Upgrade Helper that the automatic attempt to upgrade the recipe(s) *sbom-cve-check-update-cvelist-native,sbom-cve-check-update-nvd-native* to *2026-08-12,2026.08.12-000016* has Succeeded. Next steps: - apply the patch: git am 0001-sbom-cve-check-update-cvelist-native-sbom-cve-check-.patch - check the changes to upstream patches and summarize them in the commit message, - compile an image that contains the package - perform some basic sanity tests - amend the patch and sign it off: git commit -s --reset-author --amend - send it to the appropriate mailing list Alternatively, if you believe the recipe should not be upgraded at this time, you can fill RECIPE_NO_UPDATE_REASON in respective recipe file so that automatic upgrades would no longer be attempted. Please review the attached files for further information and build/update failures. Any problem please file a bug at https://bugzilla.yoctoproject.org/enter_bug.cgi?product=Automated%20Update%20Handler Regards, The Upgrade Helper -- >8 -- From db257e37835b79a79a228886b3041280053f43d2 Mon Sep 17 00:00:00 2001 From: Upgrade Helper Date: Wed, 12 Aug 2026 05:16:07 +0000 Subject: [PATCH] sbom-cve-check-update-cvelist-native,sbom-cve-check-update-nvd-native: upgrade 2026-08-03 -> 2026-08-12,2026.08.03-000011 -> 2026.08.12-000016 b4787db3daa 437 changes (18 new | 419 updated): - 18 new CVEs: CVE-2026-68429, CVE-2026-68430, CVE-2026-68431, CVE-2026-68432, CVE-2026-68433, CVE-2026-68434, CVE-2026-68435, CVE-2026-68436, CVE-2026-68437, CVE-2026-68438, CVE-2026-68439, CVE-2026-68440, CVE-2026-68441, CVE-2026-68442, CVE-2026-68443, CVE-2026-68444, CVE-2026-68445, CVE-2026-68446 - 419 updated CVEs: CVE-2026-40375, CVE-2026-42976, CVE-2026-47285, CVE-2026-47299, CVE-2026-49163, CVE-2026-49179, CVE-2026-50472, CVE-2026-50481, CVE-2026-50515, CVE-2026-50516, CVE-2026-54113, CVE-2026-54123, CVE-2026-54981, CVE-2026-54984, CVE-2026-56161, CVE-2026-56162, CVE-2026-56174, CVE-2026-56179, CVE-2026-57104, CVE-2026-57105, CVE-2026-58612, CVE-2026-58639, CVE-2026-58641, CVE-2026-58650, CVE-2026-58651, CVE-2026-59113, CVE-2026-59115, CVE-2026-59118, CVE-2026-59119, CVE-2026-59122, CVE-2026-59124, CVE-2026-59125, CVE-2026-59126, CVE-2026-59127, CVE-2026-59128, CVE-2026-59130, CVE-2026-59131, CVE-2026-59132, CVE-202 6-59133, CVE-2026-59134, CVE-2026-59135, CVE-2026-59136, CVE-2026-59137, CVE-2026-59138, CVE-2026-61345, CVE-2026-61346, CVE-2026-61347, CVE-2026-61348, CVE-2026-61349, CVE-2026-61350, CVE-2026-61352, CVE-2026-61353, CVE-2026-61355, CVE-2026-61356, CVE-2026-61357, CVE-2026-61358, CVE-2026-61359, CVE-2026-61360, CVE-2026-61361, CVE-2026-61363, CVE-2026-61364, CVE-2026-61365, CVE-2026-61366, CVE-2026-61367, CVE-2026-61368, CVE-2026-61918, CVE-2026-61920, CVE-2026-61921, CVE-2026-61923, CVE-2026-61924, CVE-2026-61925, CVE-2026-61926, CVE-2026-61927, CVE-2026-61928, CVE-2026-61929, CVE-2026-61930, CVE-2026-61932, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-61937, CVE-2026-61938, CVE-2026-61939, CVE-2026-62688, CVE-2026-62690, CVE-2026-62692, CVE-2026-62693, CVE-2026-62695, CVE-2026-62696, CVE-2026-62698, CVE-2026-62699, CVE-2026-62700, CVE-2026-62701, CVE-2026-62702, CVE-2026-62703, CVE-2026-62705, CVE-2026-62707, CVE-2026-62708, CVE-2026-62709, CVE-2026-62710, CVE-2026-627 11, CVE-2026-62712, CVE-2026-62713, CVE-2026-62714, CVE-2026-62715, CVE-2026-62716, CVE-2026-62717, CVE-2026-62718, CVE-2026-62719, CVE-2026-62720, CVE-2026-62721, CVE-2026-62722, CVE-2026-62723, CVE-2026-62724, CVE-2026-62725, CVE-2026-62726, CVE-2026-62728, CVE-2026-62729, CVE-2026-62730, CVE-2026-62732, CVE-2026-62733, CVE-2026-62734, CVE-2026-62735, CVE-2026-62736, CVE-2026-62737, CVE-2026-62738, CVE-2026-62739, CVE-2026-62740, CVE-2026-62741, CVE-2026-62742, CVE-2026-62743, CVE-2026-62745, CVE-2026-62746, CVE-2026-62747, CVE-2026-62748, CVE-2026-62749, CVE-2026-62750, CVE-2026-62751, CVE-2026-62752, CVE-2026-62753, CVE-2026-62754, CVE-2026-62755, CVE-2026-62757, CVE-2026-62758, CVE-2026-62761, CVE-2026-62766, CVE-2026-62768, CVE-2026-62769, CVE-2026-62770, CVE-2026-62771, CVE-2026-62772, CVE-2026-62773, CVE-2026-62774, CVE-2026-62775, CVE-2026-62776, CVE-2026-62777, CVE-2026-62778, CVE-2026-62779, CVE-2026-62780, CVE-2026-62781, CVE-2026-62782, CVE-2026-62783, CVE-2026-62784, C VE-2026- [Changelog truncated as it exceeds 3000 characters; the full changelog can be found in an attachment to the AUH email] 14c1956b2ee Auto-Update: 2026-08-11T23:55:28.707039+00:00 3eff8809bc9 Auto-Update: 2026-08-11T22:00:38.043868+00:00 e2bc41bf97f Auto-Update: 2026-08-11T20:00:49.432547+00:00 99a77e2d031 Auto-Update: 2026-08-11T18:00:53.529579+00:00 d60374f7b21 Auto-Update: 2026-08-11T16:00:33.711105+00:00 c2430cba583 Auto-Update: 2026-08-11T14:01:02.010930+00:00 c51b0f16b91 Auto-Update: 2026-08-11T12:00:27.991111+00:00 2b8a0a82042 Auto-Update: 2026-08-11T10:00:43.253397+00:00 a5abf132451 Auto-Update: 2026-08-11T08:00:29.536820+00:00 8783e58b4f6 Auto-Update: 2026-08-11T06:00:29.768627+00:00 e15a46a4767 Auto-Update: 2026-08-11T04:01:03.990592+00:00 277fd241fab Auto-Update: 2026-08-11T02:00:35.233687+00:00 f33e89486b6 Auto-Update: 2026-08-10T23:55:28.478361+00:00 3f3c98bf321 Auto-Update: 2026-08-10T22:00:28.946401+00:00 1f1c9de4699 Auto-Update: 2026-08-10T20:00:29.189909+00:00 90401c1be65 Auto-Update: 2026-08-10T18:00:33.432967+00:00 d5a51a01c4e Auto-Update: 2026-08-10T16:00:28.557673+00:00 68b4e9c36b2 Auto-Update: 2026-08-10T14:00:59.020737+00:00 c3e3712ae45 Auto-Update: 2026-08-10T12:00:27.996567+00:00 edd68e35586 Auto-Update: 2026-08-10T10:00:28.269278+00:00 b93bb7818c4 Auto-Update: 2026-08-10T08:00:28.432371+00:00 e8c0952eb97 Auto-Update: 2026-08-10T06:00:28.570181+00:00 3ad418b8fab Auto-Update: 2026-08-10T04:00:28.868021+00:00 d190c3479a6 Auto-Update: 2026-08-10T02:00:29.063899+00:00 9e6135ff884 Auto-Update: 2026-08-09T23:55:28.201592+00:00 a54d4b352b6 Auto-Update: 2026-08-09T22:00:28.774017+00:00 2222e721440 Auto-Update: 2026-08-09T20:00:28.003639+00:00 20183ba52e7 Auto-Update: 2026-08-09T18:00:29.129492+00:00 a589ae2a40f Auto-Update: 2026-08-09T16:00:28.396010+00:00 4c0eb207ab4 Auto-Update: 2026-08-09T14:00:29.031715+00:00 e36ecb8a3ab Auto-Update: 2026-08-09T12:00:28.896654+00:00 1e9614fe4a2 Auto-Update: 2026-08-09T10:00:28.021959+00:00 32e0f24fbe7 Auto-Update: 2026-08-09T08:00:28.295738+00:00 b85f0d1a56f Auto-Update: 2026-08-09T06:00:28.474082+00:00 d2b25510b2d Auto-Update: 2026-08-09T04:00:28.670284+00:00 4170e72c9ee Auto-Update: 2026-08-09T02:00:28.719685+00:00 0d66b90f428 Auto-Update: 2026-08-08T23:55:28.005470+00:00 df545959551 Auto-Update: 2026-08-08T20:00:28.573507+00:00 b1b90258bfb Auto-Update: 2026-08-08T18:00:28.794157+00:00 bd1d11ca4f0 Auto-Update: 2026-08-08T16:00:28.880178+00:00 7109f9882bc Auto-Update: 2026-08-08T14:00:29.058965+00:00 18e5e6cbd40 Auto-Update: 2026-08-08T12:00:28.151283+00:00 78025990835 Auto-Update: 2026-08-08T10:00:28.301041+00:00 b1889b63134 Auto-Update: 2026-08-08T08:00:28.470713+00:00 38035ead458 Auto-Update: 2026-08-08T06:00:28.909699+00:00 5365b557c2b Auto-Update: 2026-08-08T04:00:39.889568+00:00 886afa37bd2 Auto-Update: 2026-08-08T02:00:29.980791+00:00 ed6afb6b9d5 Auto-Update: 2026-08-07T23:55:28.133679+00:00 59fcb0e6f5e Auto-Update: 2026-08-07T22:00:28.410653+00:00 800e0951ee5 Auto-Update: 2026-08-07T20:00:28.569241+00:00 63a532b7257 Auto-Update: 2026-08-07T18:00:29.733810+00:00 0a80f9b5104 Auto-Update: 2026-08-07T16:00: [Changelog truncated as it exceeds 3000 characters; the full changelog can be found in an attachment to the AUH email] --- ...03.bb => sbom-cve-check-update-cvelist-native_2026-08-12.bb} | 2 +- ...bb => sbom-cve-check-update-nvd-native_2026.08.12-000016.bb} | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) rename meta/recipes-devtools/sbom-cve-check/{sbom-cve-check-update-cvelist-native_2026-08-03.bb => sbom-cve-check-update-cvelist-native_2026-08-12.bb} (89%) rename meta/recipes-devtools/sbom-cve-check/{sbom-cve-check-update-nvd-native_2026.08.03-000011.bb => sbom-cve-check-update-nvd-native_2026.08.12-000016.bb} (89%) diff --git a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-08-03.bb b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-08-12.bb similarity index 89% rename from meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-08-03.bb rename to meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-08-12.bb index b2a6654503..33e53d18c6 100644 --- a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-08-03.bb +++ b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-08-12.bb @@ -6,7 +6,7 @@ HOMEPAGE = "https://github.com/CVEProject/cvelistV5" SRC_URI = "git://github.com/CVEProject/cvelistV5.git;branch=main;protocol=https;destsuffix=;tag=${PV}_baseline" SBOM_CVE_CHECK_DB_NAME = "cvelist" -SRCREV = "b160e6f2915ac726b29ee0689fc920f5016abef5" +SRCREV = "b4787db3daa1ce461c063727e2ac9feb321439b5" UPSTREAM_CHECK_GITTAGREGEX = "(?P.+)_baseline" require sbom-cve-check-update-db.inc diff --git a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.08.03-000011.bb b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.08.12-000016.bb similarity index 89% rename from meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.08.03-000011.bb rename to meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.08.12-000016.bb index 7c4c0511f8..6f3332e3e2 100644 --- a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.08.03-000011.bb +++ b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.08.12-000016.bb @@ -6,7 +6,7 @@ HOMEPAGE = "https://github.com/fkie-cad/nvd-json-data-feeds" SRC_URI = "git://github.com/fkie-cad/nvd-json-data-feeds.git;branch=main;protocol=https;destsuffix=;tag=v${PV}" SBOM_CVE_CHECK_DB_NAME = "nvd-fkie" -SRCREV = "b9f52bb052695dac5cabbd58e049eaac73697161" +SRCREV = "14c1956b2eeb0d6aa27f346f1fbea4cc3f7b0121" UPSTREAM_CHECK_GITTAGREGEX = "v(?P.+)" require sbom-cve-check-update-db.inc