From patchwork Mon Jan 26 06:21:26 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Anuj Mittal X-Patchwork-Id: 79625 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 0BC8BC88E50 for ; Mon, 26 Jan 2026 06:21:44 +0000 (UTC) Received: from mx0a-0031df01.pphosted.com (mx0a-0031df01.pphosted.com [205.220.168.131]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.13951.1769408503015000111 for ; Sun, 25 Jan 2026 22:21:43 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@qualcomm.com header.s=qcppdkim1 header.b=f34VBord; dkim=pass header.i=@oss.qualcomm.com header.s=google header.b=FjwWXBgP; spf=permerror, err=parse error for token &{10 18 %{ir}.%{v}.%{d}.spf.has.pphosted.com}: invalid domain name (domain: oss.qualcomm.com, ip: 205.220.168.131, mailfrom: anuj.mittal@oss.qualcomm.com) Received: from pps.filterd (m0279863.ppops.net [127.0.0.1]) by mx0a-0031df01.pphosted.com (8.18.1.11/8.18.1.11) with ESMTP id 60PKpm5c389525 for ; Mon, 26 Jan 2026 06:21:42 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=qualcomm.com; h= content-transfer-encoding:date:from:message-id:mime-version :subject:to; s=qcppdkim1; bh=l/Xfk7prf7B+9VhIcHNJn0iQJ/wfPCrdFCY ZpJfUcgM=; b=f34VBordU1VoDi9nA8wI4zsXhxZhcYmMW5p7Mk3DtpuWno1f3v/ 8hgpeSV/3mspO8A2aUxTR2rgx0ujLrhTweHkjkAqvS8obdhubOukKVf11WV2YFOn Kov87xvcw+kJyVh5EzAzoo5EiJAudeiUO+ShOq5efElZlJzqf8JBkKQAA/DqBifl YC5KuHMKfrpL8WC+wAzFZtyszc8zEujGYw2iFhs8adhY2bQ5JJ18SpnrWTnjGL/L DT63IwEYr7DkpBV6lhfMI8nsWo3Fm209P4Q9dEooV+KeHb7NhbgT8Ei9MUfCk7uA IKZnBeh2U6hjNcMYSoPSiro7/13cd3G7sFQ== Received: from mail-pl1-f198.google.com (mail-pl1-f198.google.com [209.85.214.198]) by mx0a-0031df01.pphosted.com (PPS) with ESMTPS id 4bvq6uujpq-1 (version=TLSv1.3 cipher=TLS_AES_128_GCM_SHA256 bits=128 verify=NOT) for ; Mon, 26 Jan 2026 06:21:42 +0000 (GMT) Received: by mail-pl1-f198.google.com with SMTP id d9443c01a7336-2a77040ede0so39042815ad.2 for ; Sun, 25 Jan 2026 22:21:42 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=oss.qualcomm.com; s=google; t=1769408502; x=1770013302; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:message-id:date:subject:to :from:from:to:cc:subject:date:message-id:reply-to; bh=l/Xfk7prf7B+9VhIcHNJn0iQJ/wfPCrdFCYZpJfUcgM=; b=FjwWXBgPkpovvWIolgJegpcBN1xBmmg9oNy172n4869fPnYefIqLm4eis04R7R18Az bheUzlx4OKIEgaRYqLh9UjNWT6cKlEDKZw7fyQ27TaxuMR3gSwwjYFJq001NlWVv23mv datNR8cqF9NP/oyO/UW+UZCMVT7S8N0YWa11fgYPdv5Fe8PoE6Z9N82Xmc/qYqPI7BKU PMuGy080KxhgVekNShODGMM6TnCBkL2KyevYZC99T7K+5Rj50iKYxk89VdDMLcnJ68DA GLMV52wlc7gesencdbwvrcebK9jNQGG/9hZzFsTdJoeDndonviJGn4td/W2s1wcextBF t9kA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1769408502; x=1770013302; h=content-transfer-encoding:mime-version:message-id:date:subject:to :from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=l/Xfk7prf7B+9VhIcHNJn0iQJ/wfPCrdFCYZpJfUcgM=; b=Uf3muxISt2wtbwiZDYbbt2pOBq6PiVRdeQa2DW0N+p22MDPUxkJbqsvz3uEm7KyM4F +7VUDGqi3HGXvvjEpN0k0hOFnH5T7+l8OeoxSFQ88EurByamSKRG7TtpvrX4DTnGsnf3 vrHrnEVrZjku+6EtrlreMxIGeqGKNIXrIKbu2FkoyWtIhSvfva8lplREhreRaETMTqXG iSs/niTcHMr8Q0x36ZuizSKO9IYeBWrMO59RyWW0psheuGhdm1fUbDIPq/fDuG5/kpYc r1sHAYD9euef1INsHaXYrcn+Ye+/R5F6PHov3KxicNel80Y/WTUWTMx6P+POsj4Z/CiK QVJw== X-Gm-Message-State: AOJu0YwAZZXv8/umXPnFdbsdg8p2k576yHpdlDLhCXGlQ0lvRJaoxf4u 4tebKFoIVOGJa1AOG3lQ2+z1zNb7Tn3+S0K6TXtPDi2aha/vaTS0KXfwV7WaqrcgAJ1fEbsAcmE eJGiyYu2LU6gTz+8GczUNDDPWvpj9rcJmr20iCHusHCrHGz1VMyUlsSAaJjuxmAmmBusUmTBg2S nmkQ5jFJhq5yfuhk2l/sA= X-Gm-Gg: AZuq6aLdB87EDvs9jihcNZVbe5slv+qIemQejI2LbLJMletCZ8UvngT15+dMdzJiab7 WtA3/la9Ahw1xf0sGply45bmZJDsJzsZssDqTLMW6K2uY/PqInia26w+hWYtrsL9fz46EhifTIf LXkLP9lgTAwX727coyVaaE/mOIkFb/i1NKXKQD4k76Fr5yGBVgnROBMbnZnxM+tU7w8xgDXoW3h Zmjinx3Tmsu2SsJKTCWMTw/sXK8JGS2jzlu6eyST3Ug4qdwcU6bbY1w95lqF3ODpsaoXU4xsdER nd8MCdWO2TqStdWOPKL3U3OvKMHIUeZkRT/o4gpVrSBMbakjfeZNjY+kWnyC8nCu6XcGdp7Fia3 7ZcfRU/g+JE9S7w6f8/F6vTLkHhWORhAnd0R2SZHe X-Received: by 2002:a17:903:3bc8:b0:2a0:c884:7f09 with SMTP id d9443c01a7336-2a8452bc66dmr30215425ad.38.1769408501823; Sun, 25 Jan 2026 22:21:41 -0800 (PST) X-Received: by 2002:a17:903:3bc8:b0:2a0:c884:7f09 with SMTP id d9443c01a7336-2a8452bc66dmr30215345ad.38.1769408501306; Sun, 25 Jan 2026 22:21:41 -0800 (PST) Received: from hu-anujmitt-hyd.qualcomm.com ([202.46.23.25]) by smtp.gmail.com with ESMTPSA id d9443c01a7336-2a802dcfaf7sm81079675ad.34.2026.01.25.22.21.40 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sun, 25 Jan 2026 22:21:41 -0800 (PST) From: Anuj Mittal To: openembedded-devel@lists.openembedded.org Subject: [scarthgap][meta-oe][PATCH 1/3] acpitool: update SRC_URI Date: Mon, 26 Jan 2026 11:51:26 +0530 Message-ID: <20260126062128.1437811-1-anuj.mittal@oss.qualcomm.com> X-Mailer: git-send-email 2.52.0 MIME-Version: 1.0 X-Proofpoint-Spam-Details-Enc: AW1haW4tMjYwMTI2MDA1MyBTYWx0ZWRfX0x9OAR5hqD18 IQtJlIQYlsd5qcfX7YXDFIxTqaGkCqvlzazfeFa0CPeZFwCugL4z1/JMsxrqA20gMTG/QF/sw5s tURV0IcSTfmySDv0zt89MUXRRLlX2eyZVQmFwuQU97iIM2cvWjYBSVY5MZwi+9SPQCIq1ZhNv7E iibOPdEpSHCZdXsh2c6P6ChnOSfFSh+e0tcp54bhuDsXGiLG03T1/C+BbicKmI0KuW5PrVMva7q PW4PWpZ82QXf3zQdSHahNcZ2MduwYPjg4IIaL7XPvs/lU8jViohfR2odl4v1O+1X5TBJC2PVEy7 PAbheAuR1uGEwiOUTdlOx0xM4qa18/g8v65NoXg5fI7Hgv3XRjWATZ+yP4Y8a7awZhJ/sbOuBxU q63U+fnyFFdy2n1JrGtxsxccAV8q1ZKu1iBIGIN2Hr0va/a3+W2GMj+y70IFXrAftTVg6SPiT+/ vZzd4rEUplOB7GvL82A== X-Authority-Analysis: v=2.4 cv=UqRu9uwB c=1 sm=1 tr=0 ts=697707f6 cx=c_pps a=MTSHoo12Qbhz2p7MsH1ifg==:117 a=ZePRamnt/+rB5gQjfz0u9A==:17 a=vUbySO9Y5rIA:10 a=s4-Qcg_JpJYA:10 a=VkNPw1HP01LnGYTKEx00:22 a=kKFFB-AYAAAA:8 a=FP58Ms26AAAA:8 a=pGLkceISAAAA:8 a=EUspDBNiAAAA:8 a=nYOUHvbjhWZdPxHcN5gA:9 a=GvdueXVYPmCkWapjIL-Q:22 a=j-b7SdXk6dxKsCe-uVBN:22 X-Proofpoint-ORIG-GUID: 4JKYMTVT0kevXaBYuYVQK1D5-fECxPbN X-Proofpoint-GUID: 4JKYMTVT0kevXaBYuYVQK1D5-fECxPbN X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1121,Hydra:6.1.20,FMLib:17.12.100.49 definitions=2026-01-26_02,2026-01-22_02,2025-10-01_01 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 priorityscore=1501 impostorscore=0 suspectscore=0 spamscore=0 lowpriorityscore=0 phishscore=0 adultscore=0 malwarescore=0 bulkscore=0 clxscore=1015 classifier=typeunknown authscore=0 authtc= authcc= route=outbound adjust=0 reason=mlx scancount=1 engine=8.22.0-2601150000 definitions=main-2601260053 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 26 Jan 2026 06:21:44 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/123855 From: Gyorgy Sarvari The old SRC_URI stopped working (its certificate expired), and the recipe defaulted to OE mirrors. Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj (cherry picked from commit 0b2deaab02251a61fedbb15bda3b908147c717cc) Signed-off-by: Anuj Mittal --- meta-oe/recipes-bsp/acpitool/acpitool_0.5.1.bb | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/meta-oe/recipes-bsp/acpitool/acpitool_0.5.1.bb b/meta-oe/recipes-bsp/acpitool/acpitool_0.5.1.bb index b392581ecb..60620f0cea 100644 --- a/meta-oe/recipes-bsp/acpitool/acpitool_0.5.1.bb +++ b/meta-oe/recipes-bsp/acpitool/acpitool_0.5.1.bb @@ -4,8 +4,7 @@ HOMEPAGE = "http://freeunix.dyndns.org:8088/site2/acpitool.shtml" LICENSE = "GPL-2.0-only" LIC_FILES_CHKSUM = "file://COPYING;md5=94d55d512a9ba36caa9b7df079bae19f" -SRC_URI = "http://nchc.dl.sourceforge.net/project/${BPN}/${BPN}/${PV}/${BP}.tar.bz2 \ - " +SRC_URI = "${SOURCEFORGE_MIRROR}/${BPN}/${BPN}/${PV}/${BP}.tar.bz2" inherit autotools From patchwork Mon Jan 26 06:21:27 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Anuj Mittal X-Patchwork-Id: 79626 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id DAEE0C88E58 for ; Mon, 26 Jan 2026 06:21:53 +0000 (UTC) Received: from mx0a-0031df01.pphosted.com (mx0a-0031df01.pphosted.com [205.220.168.131]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.13952.1769408504421265316 for ; Sun, 25 Jan 2026 22:21:44 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@qualcomm.com header.s=qcppdkim1 header.b=ELVcE2i9; dkim=pass header.i=@oss.qualcomm.com header.s=google header.b=AgqSCYDT; spf=permerror, err=parse error for token &{10 18 %{ir}.%{v}.%{d}.spf.has.pphosted.com}: invalid domain name (domain: oss.qualcomm.com, ip: 205.220.168.131, mailfrom: anuj.mittal@oss.qualcomm.com) Received: from pps.filterd (m0279863.ppops.net [127.0.0.1]) by mx0a-0031df01.pphosted.com (8.18.1.11/8.18.1.11) with ESMTP id 60PNGbfk674191 for ; Mon, 26 Jan 2026 06:21:44 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=qualcomm.com; h= content-transfer-encoding:date:from:in-reply-to:message-id :mime-version:references:subject:to; s=qcppdkim1; bh=CmBQh67z7Aa RFdR4shYNl2Jj2XoHiJcjguAVjwERA9w=; b=ELVcE2i9GfCMtH3vRNwGAA56ufp 6Qf8G51PxOpqjd4c+6r9HZiUYvXvkoBWlBEaCiXs0erF/jONoooz67Sf+p06znuj 1D/VxYxmvXVROdO4nq9b5TYXmILFG6tf9oWWME2KkROpXan0XCF7eoOwhi8DQ51Q CNHGTj8azFDsoOrEEJ+Lv85vONF7Jb5Yq13vfKKRc0wupUvb8s9yR1IogQHElxan Xff8omYcUJj241izXD3Zyh/6CbJnI9DYkXO6JGEXK/JG2v60sRGb6MovC1VR2u+L kYUSF08uEfQ9WnD//xs6eyuovAZQgJSy4t5gxDvnUJmdm9aStDMTyBKSPSA== Received: from mail-pl1-f198.google.com (mail-pl1-f198.google.com [209.85.214.198]) by mx0a-0031df01.pphosted.com (PPS) with ESMTPS id 4bvq6uujpr-1 (version=TLSv1.3 cipher=TLS_AES_128_GCM_SHA256 bits=128 verify=NOT) for ; Mon, 26 Jan 2026 06:21:43 +0000 (GMT) Received: by mail-pl1-f198.google.com with SMTP id d9443c01a7336-2a76f2d7744so37878675ad.3 for ; Sun, 25 Jan 2026 22:21:43 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=oss.qualcomm.com; s=google; t=1769408503; x=1770013303; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=CmBQh67z7AaRFdR4shYNl2Jj2XoHiJcjguAVjwERA9w=; b=AgqSCYDTyoutzK9Ie7IC/f1yRKs+WAYbCsCxtxUJnmZv5o7l3JIuTfg/5bkiScShNG Z1ANeEVxJMZmNIN1FgVx4okVOGQXLLX9OQaDgrnjkvWMVKKtZlhpZQ59QyFrBzyX5VlN qNFgyydFgdbCiaGMKyHQy/ic2Pj3n3qi/x+OAeM13JdFuOBWxMF9XUy0MC3JRZ/S1m+1 7zisjOdkoG5nNWlwvt6EkcbIXOG0VBAmudPaoHO8TXl7j4cTWEoDhMgBi1kM6QbBKuFx RSdX28FlVX5r6thJ9l8KjVd+fPc4z5QqbPoyX5+um4vvesnkwhES8qbjn7A6Hwx+GQfc 7eKA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1769408503; x=1770013303; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=CmBQh67z7AaRFdR4shYNl2Jj2XoHiJcjguAVjwERA9w=; b=p9KeZ8PcszbdMZTRPrthfM6X4118IwQNKqVgGzwuGOdcH0hWIdmnSr/rHGwaMrBsBm CQSGzINfQGjXLnwvpv3x6PGvOmXLtFodU7ANVkROE4UtI/7gTQiNUVAyPAoqq0oy/030 q62wyDVK6898QlAUDs8iV/esBEi3qhb/W88Qd07zWm3tUBE1TCXvLwgyi+woLCEmmDSu TyH1bVjBkVX7lm5dAxjs9MMLKV7psTL3uVbFO6fwMc/A6YD8uQREYMZuLZ+aM0gWgCR8 M8kuFnQ4PbQSuSkBNU1++cBLuxAF52QVZutWqzCG/GmkizHQ6AmRd2FAMmr+HiVBLIYf fnjw== X-Gm-Message-State: AOJu0Ywgzf4/9lelSDDNcbsp6xtyBtJN6Iu8Kc8i9nKwe8226AsftLri dP8ZiL5DzFIAqPakEoK8XMGe7MrX7XJwVBvOVyJBHO2g15aT08jlr357xO+vYYQEtqmHEu/xZU3 6Q3SyoXhiwoAyReNBgoPN8AkB2Df11M4cW6c8tt71iUvk2TS/TVaBAIsmAxbWHtsx84pydFveEz s5zuovrJys6PTqCE85CcQ= X-Gm-Gg: AZuq6aLttaEnT24hvk+U3KTm5X78YFuWf5qpQuehOWsqHKUGf4Eq7++fleBUwYrrH+e C7OS7sIFUN/qTIoBVtrvlH9F85QfX83XqyRv9Ntn+WJvvXEfZHSZO0bw4/sCLK0WTebpPhzxEEI QTA/+U5MHIHxSdErzOnsBuByGHBdjRnWr8MmNSjm5NENP86aRzMEW3YHaXayvgvMOxXAK2lxTiR J3g2GJ1T/eo2ai3INsHhYtOfusHikU8t2WCZ+WdLK+MzhpfzSqzX13xwdxkU3wGrWl2oEtIY+Gh Bz4tKPrTfhWUOozxf2KWnrvBkWRhCBhMRSdf/TGwYRv2mNg4WAQWYXhvCYnnN0Aqk4Dljp9VLjP VFR3pNGR1pAsdUgoImhEYCtasXatCPxRHbfGfSN7O X-Received: by 2002:a17:902:e852:b0:29f:1bf:6424 with SMTP id d9443c01a7336-2a8452220e7mr32704755ad.18.1769408503273; Sun, 25 Jan 2026 22:21:43 -0800 (PST) X-Received: by 2002:a17:902:e852:b0:29f:1bf:6424 with SMTP id d9443c01a7336-2a8452220e7mr32704475ad.18.1769408502707; Sun, 25 Jan 2026 22:21:42 -0800 (PST) Received: from hu-anujmitt-hyd.qualcomm.com ([202.46.23.25]) by smtp.gmail.com with ESMTPSA id d9443c01a7336-2a802dcfaf7sm81079675ad.34.2026.01.25.22.21.41 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sun, 25 Jan 2026 22:21:42 -0800 (PST) From: Anuj Mittal To: openembedded-devel@lists.openembedded.org Subject: [scarthgap][meta-oe][PATCH 2/3] xerces-c: set CVE_PRODUCT Date: Mon, 26 Jan 2026 11:51:27 +0530 Message-ID: <20260126062128.1437811-2-anuj.mittal@oss.qualcomm.com> X-Mailer: git-send-email 2.52.0 In-Reply-To: <20260126062128.1437811-1-anuj.mittal@oss.qualcomm.com> References: <20260126062128.1437811-1-anuj.mittal@oss.qualcomm.com> MIME-Version: 1.0 X-Proofpoint-Spam-Details-Enc: AW1haW4tMjYwMTI2MDA1MyBTYWx0ZWRfX0xy8kXu1e9uO Lu924u5dVa+7uQH8VqNRE0jH6A60hcAGGML85MYXuxJ25LbWP3gcpsTNuycd5eoizQBUMgIXtjj 1AHeqZmzArgDQZ7u8pctO0tEbnm4wE6Gf2vm/s/F9clnFJoH63fCYhe+8Xzo7KgHkfbOJBTnC19 TCbTfmmFCMI4gi2yixjvwXHqhUGYliLS6yIy3/wfVqi+4plyjTh1hIO/XhTGFdozO6dGEtLVonH FmK4tQaliuo782J2o/AAZpfdgtrK1/Ivlb2VM9+p4uqOWv3PZ9IMMILiO9NnsMjt/oqr5qqLG7D GVPRc8TH2yVhx0w5pnzCz/RXSzR7kMbz8y4GZ3F9p2NX7S3TyPc7g8wwBCuxKO1bHMdX0vCmBsU AJkmnnYRIbGrAkTQI2JnblJxvvGvqSsUT9pSpfuALHz9UiXO/m1nhRLoMetfub1VQNflLTRBhgB sq8gCkaukURjtyqLUVw== X-Authority-Analysis: v=2.4 cv=UqRu9uwB c=1 sm=1 tr=0 ts=697707f7 cx=c_pps a=MTSHoo12Qbhz2p7MsH1ifg==:117 a=ZePRamnt/+rB5gQjfz0u9A==:17 a=vUbySO9Y5rIA:10 a=s4-Qcg_JpJYA:10 a=VkNPw1HP01LnGYTKEx00:22 a=mV9VRH-2AAAA:8 a=pGLkceISAAAA:8 a=EUspDBNiAAAA:8 a=-JFkXgELngGTTkriKoIA:9 a=GvdueXVYPmCkWapjIL-Q:22 X-Proofpoint-ORIG-GUID: YZtjFjNRehQFCBqolfFU2BJVVBcbOI01 X-Proofpoint-GUID: YZtjFjNRehQFCBqolfFU2BJVVBcbOI01 X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1121,Hydra:6.1.20,FMLib:17.12.100.49 definitions=2026-01-26_02,2026-01-22_02,2025-10-01_01 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 priorityscore=1501 impostorscore=0 suspectscore=0 spamscore=0 lowpriorityscore=0 phishscore=0 adultscore=0 malwarescore=0 bulkscore=0 clxscore=1015 classifier=typeunknown authscore=0 authtc= authcc= route=outbound adjust=0 reason=mlx scancount=1 engine=8.22.0-2601150000 definitions=main-2601260053 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 26 Jan 2026 06:21:53 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/123856 From: Gyorgy Sarvari The related CVEs are tracked with "xerces-c\+\+" (sic). See CVE db query: sqlite> select vendor, product, count(*) from PRODUCTs where product like '%xerces%' group by 1, 2; apache|xerces-c\+\+|29 apache|xerces-j|2 apache|xerces2_java|3 redhat|xerces|3 Set CVE_PRODUCT accordingly. Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj (cherry picked from commit 29a272744a314564035ec4a337704eb6d31e879e) Signed-off-by: Anuj Mittal --- meta-oe/recipes-devtools/xerces-c/xerces-c_3.2.5.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta-oe/recipes-devtools/xerces-c/xerces-c_3.2.5.bb b/meta-oe/recipes-devtools/xerces-c/xerces-c_3.2.5.bb index 9fd7e8fbab..e6c08f488f 100644 --- a/meta-oe/recipes-devtools/xerces-c/xerces-c_3.2.5.bb +++ b/meta-oe/recipes-devtools/xerces-c/xerces-c_3.2.5.bb @@ -9,6 +9,8 @@ SECTION = "libs" LICENSE = "Apache-2.0" LIC_FILES_CHKSUM = "file://LICENSE;md5=3b83ef96387f14655fc854ddc3c6bd57" +CVE_PRODUCT = "xerces-c\+\+" + SRC_URI = "http://archive.apache.org/dist/xerces/c/3/sources/${BP}.tar.bz2 \ file://0001-aclocal.m4-don-t-use-full-path-of-with_curl-in-xerce.patch \ " From patchwork Mon Jan 26 06:21:28 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Anuj Mittal X-Patchwork-Id: 79627 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id D82FEC88E50 for ; Mon, 26 Jan 2026 06:21:53 +0000 (UTC) Received: from mx0a-0031df01.pphosted.com (mx0a-0031df01.pphosted.com [205.220.168.131]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.13953.1769408505726412650 for ; Sun, 25 Jan 2026 22:21:45 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@qualcomm.com header.s=qcppdkim1 header.b=cXiN5eKS; dkim=pass header.i=@oss.qualcomm.com header.s=google header.b=LffInjzp; spf=permerror, err=parse error for token &{10 18 %{ir}.%{v}.%{d}.spf.has.pphosted.com}: invalid domain name (domain: oss.qualcomm.com, ip: 205.220.168.131, mailfrom: anuj.mittal@oss.qualcomm.com) Received: from pps.filterd (m0279862.ppops.net [127.0.0.1]) by mx0a-0031df01.pphosted.com (8.18.1.11/8.18.1.11) with ESMTP id 60PLiNdS1021885 for ; Mon, 26 Jan 2026 06:21:45 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=qualcomm.com; h= content-transfer-encoding:date:from:in-reply-to:message-id :mime-version:references:subject:to; s=qcppdkim1; bh=WrEc46Uqmgl DsunCbx11XTubRFwjgN9qq+vM6OUbJ9U=; b=cXiN5eKSL5u1uFisDTnfCVvtYnq WEMzLNaxDjU3RvnMktmrD5LS44vR6y/FyoZxD64hZh3vZ8wd037tUS/3JGtwPqVG TPkMW3mIimzAuuh9fY9vroY3iiOoLEsONdkoVm96lmCSpElx0m59FwWDCLzA4rCO uBOD4gmYVQz8iIwbb34M1UtKqUysFuGsM1yWMt/9b1rcweFF37MSUPGq6HjeORUX J/wzW8l0MjeT8wTccy3A64prKlybvZ/+d1qAtwieX8ZbgYyGEVXPtcZY/gBmNPUc eez2RbRW3encvMCheKhfxLUPnkTM+BiYlCFHE+TCYMOWL4dlIimiYGbbBTg== Received: from mail-pl1-f197.google.com (mail-pl1-f197.google.com [209.85.214.197]) by mx0a-0031df01.pphosted.com (PPS) with ESMTPS id 4bvwtyb2ps-1 (version=TLSv1.3 cipher=TLS_AES_128_GCM_SHA256 bits=128 verify=NOT) for ; Mon, 26 Jan 2026 06:21:45 +0000 (GMT) Received: by mail-pl1-f197.google.com with SMTP id d9443c01a7336-2a76f2d7744so37879035ad.3 for ; Sun, 25 Jan 2026 22:21:45 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=oss.qualcomm.com; s=google; t=1769408505; x=1770013305; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=WrEc46UqmglDsunCbx11XTubRFwjgN9qq+vM6OUbJ9U=; b=LffInjzpCvK6dhWnO8TnGZ02KB4ngNVUs8CYSim4xNYFU+LKNgR1nbg+/YlLXpebSo /FMRGM3zD8DQexnkb1L5EL6FqFrwueIJxs6xEezYJG7OSJrkZkweKHDTWeSAI7MXgf9k qyaLGQtZWQ8mYJZyF+kBtzKb78G3/7BeIjt0/p6SXC2GQtj8OCssDJFWTheU/4EioRUc SiV4C+J3uqSiYKMD4Ju39yM9zJRuPKDHaOzTLxOL2v/D6FqlV3Op1634y1SmS6yzQwbQ UTJAKo7UItzDtwvjSVRBbRt3iLyWFP0YwvYXbCqdNtWYqsw95dneHt+vDU3jeD9T/byk fDjQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1769408505; x=1770013305; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=WrEc46UqmglDsunCbx11XTubRFwjgN9qq+vM6OUbJ9U=; b=tTF+uMlP70nR6IVnby5trWGL5vQgP765NcwS96vEpS8qAMNGK7m3HpbTv0Hu8iAU0h UUMfh4jZV+ZLPQITpHCatifGQ5ZV1sRRPRT5VIbBEPW2XlvnvwpbHpudtdkqDeZbMOzV 2iGWFZe4X8s18FLXxY6Dwj8o6gj15L3s86J6uityMaV+Vet6G4Wtg2WRjQOA6aq37ASn VdSqe4yz6D/yNi6ar8ri2Z+wuq8Fmt/tnwt5yBaBrKvvZBQrd3Y/hwu7znTKW0Vdx5E8 WxxlhixwOcWAZObZ5yG4e6bmvWDZFfLjlWI+i76EGeeXnIza6stf0L+83cXEG+1zsy3f eHTg== X-Gm-Message-State: AOJu0Ywp7ALQDlPmRieB/ayyr8f7xRH70T/Jzqm6ejDooLBp8qzPkmiz dNnppx5TTNegnJh+NgxJaYoJ/AK+0/tGh1Wt8QSh4p1ckb+Jo8sKKyd6NWMbad6PJ1/j8H/3Npb j+TRWwpOhEu6GvYXKdKnc6LOyTdYMzyTjCJOkL+rpCyma5Sn9xHtQ0IslKvcEblD1pWh0Q/kJJX 7tvvAvD+/+7WoIYdu9jNg= X-Gm-Gg: AZuq6aJ0nKA5pqPve4hz9TiDI3uyLFWHC/EzFwsykDQMa4asmtmnCMMtG9I47qQOzpO xg+L35dCX54t9TlPZY7fjLxBEAcpK93RCN9tuwYbv1uhZk8eqgtDu19q8Jb4Ce7lSkzk6I8mVlW ErKb2Vx4DR7V63Dd/NW3Jpwe8rghiwvaaBPkyrKKxMqpObjE1rdM0/uaozljccuWhOpwJoLK6tI JltWX80z0A2klEV7q8tJml3QZwKoKOYTSAsesdgngXn7jE0J5tQdaSGzH6xwAH6PQhT6qYpouAm hkSL37pa4RXOhD63sE+F1leveK7BDGNZKjbErsUVglUGhSOLtxduArbtviZKeYDHzXs2KdgnKzQ se9jtR9RnwnaHutAsoSjLR4z+NGhI3JUrc8IKE9e8 X-Received: by 2002:a17:902:e547:b0:2a0:d4e3:7181 with SMTP id d9443c01a7336-2a8452ec3demr37860565ad.49.1769408504583; Sun, 25 Jan 2026 22:21:44 -0800 (PST) X-Received: by 2002:a17:902:e547:b0:2a0:d4e3:7181 with SMTP id d9443c01a7336-2a8452ec3demr37860345ad.49.1769408504092; Sun, 25 Jan 2026 22:21:44 -0800 (PST) Received: from hu-anujmitt-hyd.qualcomm.com ([202.46.23.25]) by smtp.gmail.com with ESMTPSA id d9443c01a7336-2a802dcfaf7sm81079675ad.34.2026.01.25.22.21.43 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sun, 25 Jan 2026 22:21:43 -0800 (PST) From: Anuj Mittal To: openembedded-devel@lists.openembedded.org Subject: [scarthgap][meta-gnome][PATCH 3/3] gnome-keyring: set CVE_PRODUCT Date: Mon, 26 Jan 2026 11:51:28 +0530 Message-ID: <20260126062128.1437811-3-anuj.mittal@oss.qualcomm.com> X-Mailer: git-send-email 2.52.0 In-Reply-To: <20260126062128.1437811-1-anuj.mittal@oss.qualcomm.com> References: <20260126062128.1437811-1-anuj.mittal@oss.qualcomm.com> MIME-Version: 1.0 X-Proofpoint-GUID: MOzaXG1e2bsNbE7FyNq_ARnR_Ueya7Bn X-Authority-Analysis: v=2.4 cv=BteQAIX5 c=1 sm=1 tr=0 ts=697707f9 cx=c_pps a=cmESyDAEBpBGqyK7t0alAg==:117 a=ZePRamnt/+rB5gQjfz0u9A==:17 a=vUbySO9Y5rIA:10 a=s4-Qcg_JpJYA:10 a=VkNPw1HP01LnGYTKEx00:22 a=pGLkceISAAAA:8 a=EUspDBNiAAAA:8 a=mX2GSK45Nza8xnEDcj0A:9 a=1OuFwYUASf3TG4hYMiVC:22 X-Proofpoint-ORIG-GUID: MOzaXG1e2bsNbE7FyNq_ARnR_Ueya7Bn X-Proofpoint-Spam-Details-Enc: AW1haW4tMjYwMTI2MDA1MyBTYWx0ZWRfX0SvwbYHCjp3H bOvoc0B+0LFEAOI9GFcdIT2fbdNTvLXYyBVUrJDDL8VQzVAMAUKKyjVqSQ9l06AbAjZpd6gqcCq vJu2Uf5ReXyYdxxADjhGqp3ADqw/j4B9iJKQQzUVTf7Tve87cQQNqizN5QXmlBfkWt8Ki2ITXIP k5KA1/t4QDHi2M40YZ5mvZj7oOOORRUhH/vcv1/DRQERg7VMf8APEMHGfDKwaeZkVU9BdwI9f6c DwITNn9SwWKfy+4V7B9KlcaGJXl/GN2ycn1Alv0o51i4cH1dRUmqHxBs5qYei6V/dWcP+6HrOyK TQlJ+pKpuvLEHS/eOHFPJZHKRT/DPkBb2N/ofQRHZv/tbv/jNPggvk5cRXKBRRvdQaBh4GaPjKg XFTqqS6fTU7Ben6RDf4z7jmz79Wlo0M+9n+SebZwgia4eOwwTMfMp2VNOV2UUtNLeZNqj0uGMuL PgyNSfdEBYe2pnlnYGg== X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1121,Hydra:6.1.20,FMLib:17.12.100.49 definitions=2026-01-26_02,2026-01-22_02,2025-10-01_01 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 impostorscore=0 priorityscore=1501 suspectscore=0 clxscore=1015 phishscore=0 lowpriorityscore=0 adultscore=0 spamscore=0 bulkscore=0 malwarescore=0 classifier=typeunknown authscore=0 authtc= authcc= route=outbound adjust=0 reason=mlx scancount=1 engine=8.22.0-2601150000 definitions=main-2601260053 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 26 Jan 2026 06:21:53 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/123857 From: Gyorgy Sarvari The underscores and hyphens in the product name are used randomly in the CVE database: sqlite> select * from PRODUCTs where vendor = 'gnome' and product like '%keyr%'; CVE-2012-3466|gnome|gnome-keyring|3.4.0|=|| CVE-2012-3466|gnome|gnome-keyring|3.4.1|=|| CVE-2012-6111|gnome|gnome_keyring|3.2|=|| CVE-2012-6111|gnome|gnome_keyring|3.4|=|| CVE-2018-19358|gnome|gnome-keyring|||3.28.2|<= CVE-2018-20781|gnome|gnome_keyring|||3.27.2|< Set CVE_PRODUCT so that both versions are matched. Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj (cherry picked from commit 4fdeb484c27282c85f7606bfce5e4158a860affa) Signed-off-by: Anuj Mittal --- meta-gnome/recipes-gnome/gnome-keyring/gnome-keyring_46.1.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta-gnome/recipes-gnome/gnome-keyring/gnome-keyring_46.1.bb b/meta-gnome/recipes-gnome/gnome-keyring/gnome-keyring_46.1.bb index 8df3710e6a..41f1f164ed 100644 --- a/meta-gnome/recipes-gnome/gnome-keyring/gnome-keyring_46.1.bb +++ b/meta-gnome/recipes-gnome/gnome-keyring/gnome-keyring_46.1.bb @@ -9,6 +9,8 @@ LIC_FILES_CHKSUM = " \ file://COPYING.LIB;md5=4fbd65380cdd255951079008b364516c \ " +CVE_PRODUCT = "gnome-keyring gnome_keyring" + DEPENDS = " \ glib-2.0-native \ gtk+3 \