diff mbox series

[wrynose,33/60] barebox: upgrade 2026.04.0 -> 2026.04.2

Message ID	2d1c214b939574f131f6ae728951b6d1fda5bf07.1791707817.git.yoann.congal@smile.fr
State	New
Headers	show Return-Path: <yoann.congal@smile.fr> ip: 209.85.221.54, mailfrom: yoann.congal@smile.fr) From: Yoann Congal <yoann.congal@smile.fr> To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 33/60] barebox: upgrade 2026.04.0 -> 2026.04.2 Date: Sun, 11 Oct 2026 10:40:06 +0200 Message-ID: <2d1c214b939574f131f6ae728951b6d1fda5bf07.1791707817.git.yoann.congal@smile.fr> In-Reply-To: <cover.1791707817.git.yoann.congal@smile.fr> References: <cover.1791707817.git.yoann.congal@smile.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	[wrynose,01/60] glibc: set status for CVE-2011-0536 and CVE-2025-0577 \| expand [wrynose,01/60] glibc: set status for CVE-2011-0536 and CVE-2025-0577 [wrynose,02/60] gnutls: set status for CVE-2023-0361 [wrynose,03/60] libarchive: set status for CVE-2026-4424 [wrynose,04/60] nfs-utils: set status for CVE-2025-12801 [wrynose,05/60] openssl: set status for CVE-2015-3216 [wrynose,06/60] ovmf: set status of CVE-2017-5731 and CVE-2019-14584 [wrynose,07/60] ppp: set status for CVE-2020-15704 [wrynose,08/60] pulseaudio: set status for CVE-2020-15710 and CVE-2020-16123 [wrynose,09/60] tzcode/tzdata: fix upstream version check [wrynose,10/60] tzdata/tzcode-native: upgrade 2026c -> 2026d [wrynose,11/60] bind: upgrade 9.20.26 -> 9.20.27 [wrynose,12/60] bind: upgrade 9.20.27 -> 9.20.29 [wrynose,13/60] graphene: set status for CVE-2026-81281 [wrynose,14/60] openssh: set status for CVE-2026-55655 [wrynose,15/60] openssh: set status for CVE-2026-55654 [wrynose,16/60] xserver-xorg: set status for CVE-2026-55999 and CVE-2026-56000 [wrynose,17/60] openssh: fix CVE-2026-73283 [wrynose,18/60] openssh: fix CVE-2026-73282 [wrynose,19/60] openssh: fix CVE-2026-73281 [wrynose,20/60] vim: set CVE_STATUS for CVE-2026-51400 [wrynose,21/60] vim: set CVE_STATUS for CVE-2026-51401 [wrynose,22/60] gnutls: fix CVE-2026-42012 [wrynose,23/60] gnutls: fix CVE-2026-42013 [wrynose,24/60] gnutls: fix CVE-2026-42014 [wrynose,25/60] gnutls: fix CVE-2026-42015 [wrynose,26/60] gnutls: fix CVE-2026-5260 [wrynose,27/60] openssl: upgrade 3.5.8 -> 3.5.9 [wrynose,28/60] glibc: stable 2.43 branch updates to 9cda6fc96ab [wrynose,29/60] glibc: stable 2.43 branch updates to 562cd7badd [wrynose,30/60] glibc: set status for CVE-2026-86805 and CVE-2026-95818 [wrynose,31/60] devtool: standard: fix update-recipe/finish --initial-rev override [wrynose,32/60] oeqa/selftest/devtool: cover update-recipe --initial-rev [wrynose,33/60] barebox: upgrade 2026.04.0 -> 2026.04.2 [wrynose,34/60] python3-click: depend on python3-shell for shlex [wrynose,35/60] libpng: upgrade 1.6.56 -> 1.6.58 [wrynose,36/60] libpng: upgrade 1.6.58 -> 1.6.59 [wrynose,37/60] util-linux(-uuid): upgrade 2.41.5 -> 2.41.6 [wrynose,38/60] qemuriscv.inc: default to fw_dynamic.elf as QEMU BIOS [wrynose,39/60] libsolv: patch CVE-2026-48863 [wrynose,40/60] expat: patch CVE-2026-66046 and CVE-2026-76641 [wrynose,41/60] expat: patch CVE-2026-76956 [wrynose,42/60] expat: patch CVE-2026-76957 [wrynose,43/60] expat: patch CVE-2026-93990 [wrynose,44/60] ffmpeg: Fix for CVE-2026-66036 [wrynose,45/60] ffmpeg: Fix for CVE-2026-66041 [wrynose,46/60] systemd: fix mDNS hostname changes [wrynose,47/60] gstreamer: skip test_queue:test_leaky_downstream test as it's flakey [wrynose,48/60] libaio: update SRC_URI [wrynose,49/60] alsa-lib: patch CVE-2026-90781 [wrynose,50/60] weston: fix VNC backend build with aml 1.0 [wrynose,51/60] go: upgrade 1.26.8 -> 1.26.9 [wrynose,52/60] wget: fix CVE-2026-15146 [wrynose,53/60] libpcre2: patch CVE-2026-89162 [wrynose,54/60] libpcre2: patch CVE-2026-89161 [wrynose,55/60] libpcre2: patch CVE-2026-89156 [wrynose,56/60] libpcre2: patch CVE-2026-89157 [wrynose,57/60] libpcre2: patch CVE-2026-89160 [wrynose,58/60] libpcre2: patch CVE-2026-89158 [wrynose,59/60] libpcre2: patch CVE-2026-86145 [wrynose,60/60] libpcre2: patch CVE-2026-103111

Commit Message

Yoann Congal Oct. 11, 2026, 8:40 a.m. UTC

From: Lucas Stach <l.stach@pengutronix.de>

Bump to the latest stable release, which includes a fix for a
FIT image verification bypass, see:
https://github.com/barebox/barebox/security/advisories/GHSA-jhvm-7xq8-rvgm

Release: https://github.com/barebox/barebox/releases/tag/v2026.04.2

Signed-off-by: Lucas Stach <l.stach@pengutronix.de>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
---
 meta/recipes-bsp/barebox/barebox-common.inc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff mbox series

Patch

diff --git a/meta/recipes-bsp/barebox/barebox-common.inc b/meta/recipes-bsp/barebox/barebox-common.inc
index f736ca68e02..db7fb25e264 100644
--- a/meta/recipes-bsp/barebox/barebox-common.inc
+++ b/meta/recipes-bsp/barebox/barebox-common.inc
@@ -3,6 +3,6 @@  SECTION = "bootloaders"
 
 LIC_FILES_CHKSUM = "file://COPYING;md5=f5125d13e000b9ca1f0d3364286c4192"
 
-PV = "2026.04.0"
+PV = "2026.04.2"
 SRC_URI = "https://barebox.org/download/barebox-${PV}.tar.bz2"
-SRC_URI[sha256sum] = "07fd3e3440c23e27d0094432f67827887fcc0e37d5fe24dc257c39b97c4294a0"
+SRC_URI[sha256sum] = "aa575d3ca4e7a8abe6b9796d0ff1d1ace43f86e34c627cc055ddb0a7ebd9dbe2"