From patchwork Fri Nov 13 06:35:57 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: auh@yoctoproject.org X-Patchwork-Id: 103950 Received: from a27-45.smtp-out.us-west-2.amazonses.com (a27-45.smtp-out.us-west-2.amazonses.com [54.240.27.45]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.5981.1794551758331856325 for ; Thu, 12 Nov 2026 22:35:58 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@yoctoproject.org header.s=lvjh2tk576v2ro5mi6k4dt3mc6wpqbky header.b=WzYItcr/; dkim=pass header.i=@amazonses.com header.s=hsbnp7p3ensaochzwyq5wwmceodymuwv header.b=AoAT+H+q; spf=pass (domain: us-west-2.amazonses.com, ip: 54.240.27.45, mailfrom: 010101a1d39eb949-c01e0ef9-aae8-4ba3-ab7c-0236c1fd0df3-000000@us-west-2.amazonses.com) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=lvjh2tk576v2ro5mi6k4dt3mc6wpqbky; d=yoctoproject.org; t=1794551757; h=Content-Type:MIME-Version:From:To:Cc:Subject:Message-Id:Date; bh=SSmPcrFg2GO3zxMN6yQKA9w7ZnooWyACMeo+hgJpz1o=; b=WzYItcr/loZS3iDBwMqpF2zYVldyJjgPOMkdr+yzCWY+bwUDemnOXT9WJ4iBf3Ne NZ7UOydPVhUm/bkLOl0Ct7BuqTWvsc0Ysa5a4h23vHbMs93vdlSWTrYri3hj+4ORJuD w57cz62ZO/lYR4xpIGNNVSW9b3iXkndlDBMr8nRs= DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=hsbnp7p3ensaochzwyq5wwmceodymuwv; d=amazonses.com; t=1794551757; h=Content-Type:MIME-Version:From:To:Cc:Subject:Message-Id:Date:Feedback-ID; bh=SSmPcrFg2GO3zxMN6yQKA9w7ZnooWyACMeo+hgJpz1o=; b=AoAT+H+qnOjUdAg0TyaScEbqTbxnOAixlskNZvjLqZy5emkCOcDm84Du0FBWIL96 hyw4zQ4wLLRZFz+k77bSGDUilqcs7NSCzVwWjIwI9gIat3ops8rb4yKcR6uktexq9rK ts5cuMYuTVM53CgyCfe+BY/A1AVe50z6WaS/U7Ug= MIME-Version: 1.0 From: auh@yoctoproject.org To: Benjamin Robin , Benjamin Robin Cc: openembedded-core@lists.openembedded.org Subject: [AUH] sbom-cve-check-update-nvd-native,sbom-cve-check-update-cvelist-native: upgrading to 2026.11.13-010015,2026-11-13 SUCCEEDED Message-ID: <010101a1d39eb949-c01e0ef9-aae8-4ba3-ab7c-0236c1fd0df3-000000@us-west-2.amazonses.com> Date: Fri, 13 Nov 2026 06:35:57 +0000 Feedback-ID: ::1.us-west-2.9np3MYPs3fEaOBysGKSlUD4KtcmPijcmS9Az2Hwf7iQ=:AmazonSES X-SES-Outgoing: 2026.11.13-54.240.27.45 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Fri, 13 Nov 2026 06:36:09 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/250143 Hello, this email is a notification from the Auto Upgrade Helper that the automatic attempt to upgrade the recipe(s) *sbom-cve-check-update-nvd-native,sbom-cve-check-update-cvelist-native* to *2026.11.13-010015,2026-11-13* has Succeeded. Next steps: - apply the patch: git am 0001-sbom-cve-check-update-nvd-native-sbom-cve-check-upda.patch - check the changes to upstream patches and summarize them in the commit message, - compile an image that contains the package - perform some basic sanity tests - amend the patch and sign it off: git commit -s --reset-author --amend - send it to the appropriate mailing list Alternatively, if you believe the recipe should not be upgraded at this time, you can fill RECIPE_NO_UPDATE_REASON in respective recipe file so that automatic upgrades would no longer be attempted. Please review the attached files for further information and build/update failures. Any problem please file a bug at https://bugzilla.yoctoproject.org/enter_bug.cgi?product=Automated%20Update%20Handler Regards, The Upgrade Helper -- >8 -- From e5f1695b8d056e6eb4ed25f4e91bdcdd102836ef Mon Sep 17 00:00:00 2001 From: Upgrade Helper Date: Fri, 13 Nov 2026 05:33:16 +0000 Subject: [PATCH] sbom-cve-check-update-nvd-native,sbom-cve-check-update-cvelist-native: upgrade 2026.09.12-000023 -> 2026.11.13-010015,2026-09-12 -> 2026-11-13 Auto-Update: 2026-11-13T00:58:45.826180+00:00 Auto-Update: 2026-11-12T23:00:28.282052+00:00 Auto-Update: 2026-11-12T21:00:29.411224+00:00 Auto-Update: 2026-11-12T19:01:23.296174+00:00 Auto-Update: 2026-11-12T17:00:28.363371+00:00 Auto-Update: 2026-11-12T15:00:29.546198+00:00 Auto-Update: 2026-11-12T13:00:24.634681+00:00 Auto-Update: 2026-11-12T11:00:26.728228+00:00 Auto-Update: 2026-11-12T09:00:29.922196+00:00 Auto-Update: 2026-11-12T07:00:29.937307+00:00 Auto-Update: 2026-11-12T05:00:29.010904+00:00 Auto-Update: 2026-11-12T03:00:28.107761+00:00 Auto-Update: 2026-11-12T00:55:25.456047+00:00 Auto-Update: 2026-11-11T23:00:27.497664+00:00 Auto-Update: 2026-11-11T21:00:28.777845+00:00 Auto-Update: 2026-11-11T19:00:26.659541+00:00 Auto-Update: 2026-11-11T17:00:26.703070+00:00 Auto-Update: 2026-11-11T15:00:42.825806+00:00 Auto-Update: 2026-11-11T13:00:28.985807+00:00 Auto-Update: 2026-11-11T11:00:28.043182+00:00 Auto-Update: 2026-11-11T09:00:28.162629+00:00 Auto-Update: 2026-11-11T07:00:29.297294+00:00 Auto-Update: 2026-11-11T05:03:17.444867+00:00 Auto-Update: 2026-11-11T03:00:27.600432+00:00 Auto-Update: 2026-11-11T00:55:23.623952+00:00 Auto-Update: 2026-11-10T23:00:28.846418+00:00 Auto-Update: 2026-11-10T21:00:28.146764+00:00 Auto-Update: 2026-11-10T19:00:27.020694+00:00 Auto-Update: 2026-11-10T17:00:28.096992+00:00 Auto-Update: 2026-11-10T15:00:29.324171+00:00 Auto-Update: 2026-11-10T13:00:26.603040+00:00 Auto-Update: 2026-11-10T11:00:27.225781+00:00 Auto-Update: 2026-11-10T09:00:29.311702+00:00 Auto-Update: 2026-11-10T07:00:26.438888+00:00 Auto-Update: 2026-11-10T05:00:26.538392+00:00 Auto-Update: 2026-11-10T03:00:25.613793+00:00 Auto-Update: 2026-11-10T00:55:23.670178+00:00 Auto-Update: 2026-11-09T23:00:26.866229+00:00 Auto-Update: 2026-11-09T21:00:26.418389+00:00 Auto-Update: 2026-11-09T19:00:30.178015+00:00 Auto-Update: 2026-11-09T17:00:27.179951+00:00 Auto-Update: 2026-11-09T15:00:37.334169+00:00 Auto-Update: 2026-11-09T13:00:27.355456+00:00 Auto-Update: 2026-11-09T11:00:26.395862+00:00 Auto-Update: 2026-11-09T09:00:29.456182+00:00 Auto-Update: 2026-11-09T07:00:26.650013+00:00 Auto-Update: 2026-11-09T05:00:24.697040+00:00 Auto-Update: 2026-11-09T03:00:26.977387+00:00 Auto-Update: 2026-11-09T00:55:23.816904+00:00 Auto-Update: 2026-11-08T21:00:25.349913+00:00 Auto-Update: 2026-11-08T19:00:23.294827+00:00 Auto-Update: 2026-11-08T17:00:25.476310+00:00 Auto-Update: 2026-11-08T15:00:23.462428+00:00 Auto-Update: 2026-11-08T13:00:23.622881+00:00 Auto-Update: 2026-11-08T11:00:25.625007+00:00 Auto-Update: 2026-11-08T07:00:27.914074+00:00 Auto-Update: 2026-11-08T05:00:27.047388+00:00 Auto-Update: 2026-11-08T03:00:43.066337+00:00 Auto-Update: 2026-11-08T00:55:24.351583+00:00 Auto-Update: 2026-11-07T23:00:33.313517+00:00 Auto-Update: 2026-11-07T21:00:23.416223+00:00 Auto-Update: 2026-11-07T19:00:27.599482+00:00 Auto-Update: 2026-11-07T17:00:27.792199+00:00 Auto-Update: 2026-11-07T15:00:26.763457+00:00 Auto-Update: 2026-11-07T13:00:24.950418+00:00 Auto-Update: 2026-11-07T11:00:25.061480+00:00 Auto-Update: 2026-11-07T09:00:27.206225+00:00 Auto-Update: 2026-11-07T07:00:31.289615+00:00 Auto-Update: 2026-11-07T05:00:25.383869+00:00 Auto-Update: 2026-11-07T03:00:28.456752+00:00 Auto-Update: 2026-11-07T00:55:23.543601+00:00 Auto-Update: 2026-11-06T23:00:25.800712+00:00 Auto-Update: 2026-11-06T21:00:24.926278+00:00 Auto-Update: 2026-11-06T19:00:28.174011+00:00 Auto-Update: 2026-11-06T17:00:26.093018+00:00 Auto-Update: 2026-11-06T15:00:26.060246+00:00 Auto-Update: 2026-11-06T13:00:27.219209+00:00 Auto-Update: 2026-11-06T11:00:28.354706+00:00 Auto-Update: 2026-11-06T09:00:28.443409+00:00 Auto-Update: 2026-11-06T07:00:27.520830+00:00 Auto-Update: 2026-11-06T05:00:27.734653+00:00 Auto-Update: 2026-11-06T03:00:25.788294+00:00 Auto-Update: 2026-11-06T00:55:23.864288+00:00 Auto-Update: 2026-11-05T23:01:03.480821+00:00 Auto-Update: 2026-11-05T21:00:39.891204+00:00 Auto-Update: 2026-11-05T19:00:29.386557+00:00 Auto-Update: 2026-11-05T17:00:31.540967+00:00 Auto-Update: 2026-11-05T15:00:34.552331+00:00 Auto-Update: 2026-11-05T13:00:27.599343+00:00 Auto-Update: 2026-11-05T11:00:26.788278+00:00 Auto-Update: 2026-11-05T09:00:26.903035+00:00 Auto-Update: 2026-11-05T07:00:28.962141+00:00 Auto-Update: 2026-11-05T05:00:31.038551+00:00 Auto-Update: 2026-11-05T03:00:26.288810+00:00 Auto-Update: 2026-11-05T00:55:09.328867+00:00 Auto-Update: 2026-11-04T23:00:32.583953+00:00 Auto-Update: 2026-11-04T21:00:27.685035+00:00 Auto-Update: 2026-11-04T19:00:27.799767+00:00 Auto-Update: 2026-11-04T17:00:28.997910+00:00 Auto-Update: 2026-11-04T15:00:44.114926+00:00 Auto-Update: 2026-11-04T13:00:25.259385+00:00 Auto-Update: 2026-11-04T11:00:25.311295+00:00 Auto-Update: 2026-11-04T09:00:27.146477+00:00 Auto-Update: 2026-11-04T07:00:30.652740+00:00 Auto-Update: 2026-11-04T05:00:24.749459+00:00 Auto-Update: 2026-11-04T03:00:27.897208+00:00 Auto-Update: 2026-11-04T00:55:24.947142+00:00 Auto-Update: 2026-11-03T23:00:29.282030+00:00 Auto-Update: 2026-11-03T21:00:24 [Changelog truncated as it exceeds 5000 characters; the full changelog can be found in an attachment to the AUH email] 17 changes (2 new | 15 updated): - 2 new CVEs: CVE-2026-126839, CVE-2026-126982 - 15 updated CVEs: CVE-2026-0470, CVE-2026-106471, CVE-2026-107152, CVE-2026-107360, CVE-2026-107443, CVE-2026-111190, CVE-2026-111456, CVE-2026-126772, CVE-2026-28247, CVE-2026-28249, CVE-2026-40668, CVE-2026-42784, CVE-2026-48479, CVE-2026-86322, CVE-2026-90959 9 changes (1 new | 8 updated): - 1 new CVEs: CVE-2026-126792 - 8 updated CVEs: CVE-2025-0008, CVE-2025-29941, CVE-2025-48504, CVE-2026-0003, CVE-2026-0435, CVE-2026-0454, CVE-2026-0480, CVE-2026-28248 9 changes (1 new | 8 updated): - 1 new CVEs: CVE-2026-127275 - 8 updated CVEs: CVE-2024-36309, CVE-2025-0027, CVE-2025-29940, CVE-2025-52535, CVE-2025-52537, CVE-2026-123710, CVE-2026-32591, CVE-2026-40670 9 changes (1 new | 8 updated): - 1 new CVEs: CVE-2026-120868 - 8 updated CVEs: CVE-2025-54503, CVE-2025-54504, CVE-2025-54506, CVE-2025-54508, CVE-2025-62620, CVE-2025-62621, CVE-2026-110697, CVE-2026-40669 3 changes (1 new | 2 updated): - 1 new CVEs: CVE-2026-127274 - 2 updated CVEs: CVE-2026-110697, CVE-2026-123710 2 changes (0 new | 2 updated): - 0 new CVEs: - 2 updated CVEs: CVE-2026-118740, CVE-2026-18379 2 changes (0 new | 2 updated): - 0 new CVEs: - 2 updated CVEs: CVE-2026-33818, CVE-2026-42504 1 changes (1 new | 0 updated): - 1 new CVEs: CVE-2026-127273 - 0 updated CVEs: 11 changes (0 new | 11 updated): - 0 new CVEs: - 11 updated CVEs: CVE-2026-112315, CVE-2026-112316, CVE-2026-112317, CVE-2026-112318, CVE-2026-112319, CVE-2026-112320, CVE-2026-112321, CVE-2026-112322, CVE-2026-112323, CVE-2026-119079, CVE-2026-46448 12 changes (0 new | 12 updated): - 0 new CVEs: - 12 updated CVEs: CVE-2026-103963, CVE-2026-108472, CVE-2026-112315, CVE-2026-112316, CVE-2026-112317, CVE-2026-112318, CVE-2026-112319, CVE-2026-112320, CVE-2026-112321, CVE-2026-112322, CVE-2026-112323, CVE-2026-119079 1 changes (1 new | 0 updated): - 1 new CVEs: CVE-2026-128067 - 0 updated CVEs: 3 changes (3 new | 0 updated): - 3 new CVEs: CVE-2026-126367, CVE-2026-128065, CVE-2026-128066 - 0 updated CVEs: 2 changes (1 new | 1 updated): - 1 new CVEs: CVE-2026-126366 - 1 updated CVEs: CVE-2026-18963 6 changes (6 new | 0 updated): - 6 new CVEs: CVE-2026-126363, CVE-2026-126364, CVE-2026-126365, CVE-2026-92735, CVE-2026-93333, CVE-2026-93335 - 0 updated CVEs: 2 changes (2 new | 0 updated): - 2 new CVEs: CVE-2026-126361, CVE-2026-126362 - 0 updated CVEs: 5 changes (5 new | 0 updated): - 5 new CVEs: CVE-2026-126357, CVE-2026-126358, CVE-2026-126359, CVE-2026-126360, CVE-2026-127212 - 0 updated CVEs: 2 changes (2 new | 0 updated): - 2 new CVEs: CVE-2026-126355, CVE-2026-126356 - 0 updated CVEs: 8 changes (5 new | 3 updated): - 5 new CVEs: CVE-2026-126350, CVE-2026-126351, CVE-2026-126352, CVE-2026-126353, CVE-2026-126354 - 3 updated CVEs: CVE-2017-20251, CVE-2026-126641, CVE-2026-91141 2 changes (2 new | 0 updated): - 2 new CVEs: CVE-2026-126348, CVE-2026-126349 - 0 updated CVEs: 343 changes (2 new | 341 updated): - 2 new CVEs: CVE-2026-126347, CVE-2026-126823 - 341 updated CVEs: CVE-2026-102803, CVE-2026-114171, CVE-2026-116303, CVE-2026-116304, CVE-2026-116306, CVE-2026-116307, CVE-2026-116717, CVE-2026-116718, CVE-2026-116719, CVE-2026-116720, CVE-2026-116721, CVE-2026-116722, CVE-2026-116922, CVE-2026-116923, CVE-2026-116926, CVE-2026-116927, CVE-2026-116929, CVE-2026-116930, CVE-2026-116931, CVE-2026-116932, CVE-2026-116933, CVE-2026-116934, CVE-2026-116935, CVE-2026-116936, CVE-2026-116937, CVE-2026-116938, CVE-2026-116939, CVE-2026-116940, CVE-2026-116941, CVE-2026-116942, CVE-2026-116943, CVE-2026-116944, CVE-2026-116945, CVE-2026-116946, CVE-2026-116947, CVE-2026-118102, CVE-2026-118103, CVE-2026-118104, CVE-2026-118105, CVE-2026-118106, CVE-2026-118108, CVE-2026-118109, CVE-2026-118110, CVE-2026-118111, CVE-2026-118112, CVE-2026-118113, CVE-2026-118114, CVE-2026-118115, CVE-2026-118116, CVE-2026-118117, CVE-2026-118118, CVE-2026-118119, CVE-2026-118120, CVE-2026-118148, CVE-2026-118288, CVE-2026-118292, CVE-2026-118293, CVE-2026-118294, CVE-2026-118295, CVE-2026-118296, CVE-2026-118297, CVE-2026-118298, CVE-2026-118299, CVE-2026-118300, CVE-2026-118301, CVE-2026-118302, CVE-2026-118700, CVE-2026-118701, CVE-2026-118702, CVE-2026-118703, CVE-2026-118704, CVE-2026-118705, CVE-2026-118706, CVE-2026-118707, CVE-2026-118708, CVE-2026-118709, CVE-2026-118710, CVE-2026-118711, CVE-2026-118712, CVE-2026-118713, CVE-2026-118714, CVE-2026-118715, CVE-2026-118716, CVE-2026-118717, CVE-2026-118718, CVE-2026-118719, CVE-2026-118720, CVE-2026-118721, CVE-2026-118722, CVE-2026-118723, CVE-2026-118724, CVE-2026-118725, CVE-2026-118726, CVE-2026-118727, CVE-2026-118728, CVE-2026-118729, CVE-2026-118730, CVE-2026-118731, CVE-2026-118732, CVE-2026-118740, CVE-2026-1187 [Changelog truncated as it exceeds 5000 characters; the full changelog can be found in an attachment to the AUH email] --- ...12.bb => sbom-cve-check-update-cvelist-native_2026-11-13.bb} | 2 +- ...bb => sbom-cve-check-update-nvd-native_2026.11.13-010015.bb} | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) rename meta/recipes-devtools/sbom-cve-check/{sbom-cve-check-update-cvelist-native_2026-09-12.bb => sbom-cve-check-update-cvelist-native_2026-11-13.bb} (89%) rename meta/recipes-devtools/sbom-cve-check/{sbom-cve-check-update-nvd-native_2026.09.12-000023.bb => sbom-cve-check-update-nvd-native_2026.11.13-010015.bb} (89%) diff --git a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-09-12.bb b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-11-13.bb similarity index 89% rename from meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-09-12.bb rename to meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-11-13.bb index b29be0d46f..fb83d1a9ec 100644 --- a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-09-12.bb +++ b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-11-13.bb @@ -6,7 +6,7 @@ HOMEPAGE = "https://github.com/CVEProject/cvelistV5" SRC_URI = "git://github.com/CVEProject/cvelistV5.git;branch=main;protocol=https;destsuffix=;tag=${PV}_baseline" SBOM_CVE_CHECK_DB_NAME = "cvelist" -SRCREV = "9b9889cfd98306bf29b91df076c5118aae80b63f" +SRCREV = "b11ebad141cb1342d2d59e57e49d50b8dd082cf9" UPSTREAM_CHECK_GITTAGREGEX = "(?P.+)_baseline" require sbom-cve-check-update-db.inc diff --git a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.09.12-000023.bb b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.11.13-010015.bb similarity index 89% rename from meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.09.12-000023.bb rename to meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.11.13-010015.bb index 70e09050b9..855213706b 100644 --- a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.09.12-000023.bb +++ b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.11.13-010015.bb @@ -6,7 +6,7 @@ HOMEPAGE = "https://github.com/fkie-cad/nvd-json-data-feeds" SRC_URI = "git://github.com/fkie-cad/nvd-json-data-feeds.git;branch=main;protocol=https;destsuffix=;tag=v${PV}" SBOM_CVE_CHECK_DB_NAME = "nvd-fkie" -SRCREV = "82336c26ab85706ae56efaa36ef5851ab92dd32c" +SRCREV = "358d4594785645818d2c5a23cb1d9e59662f4bef" UPSTREAM_CHECK_GITTAGREGEX = "v(?P.+)" require sbom-cve-check-update-db.inc