From patchwork Thu May 7 16:30:17 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: "Benjamin Robin (Schneider Electric)" X-Patchwork-Id: 87630 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 7326CCD3447 for ; Thu, 7 May 2026 16:30:36 +0000 (UTC) Received: from smtpout-02.galae.net (smtpout-02.galae.net [185.246.84.56]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.152.1778171426068101324 for ; Thu, 07 May 2026 09:30:26 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@bootlin.com header.s=dkim header.b=zZaiic29; spf=pass (domain: bootlin.com, ip: 185.246.84.56, mailfrom: benjamin.robin@bootlin.com) Received: from smtpout-01.galae.net (smtpout-01.galae.net [212.83.139.233]) by smtpout-02.galae.net (Postfix) with ESMTPS id 7FEA71A3556; Thu, 7 May 2026 16:30:24 +0000 (UTC) Received: from mail.galae.net (mail.galae.net [212.83.136.155]) by smtpout-01.galae.net (Postfix) with ESMTPS id 4E5D7605CF; Thu, 7 May 2026 16:30:24 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) by localhost (Mailerdaemon) with ESMTPSA id 52EB8108194E1; Thu, 7 May 2026 18:30:21 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=bootlin.com; s=dkim; t=1778171422; h=from:subject:date:message-id:to:cc:mime-version:content-type: content-transfer-encoding:in-reply-to:references; bh=vrErO1Y0K1UFb96k0LiFlIHeKhVu31FLB4AQkTSV/yU=; b=zZaiic29JHLK7MfAMWY3V8evUpIlNyjRumH/lazXs1dXnPMyYrJV5pAt5iALIsSY0ckiC+ 4XBQnkMfrRtxOQEMOIrKMZ63VjdEmNWzBo5sZ6NpafSCQPKkoQMZgGo6GNYDBbjCT5Wdcz B64hiAwqNGsRiEZ3ldXbcKpFFjx8E0nk7PhzV6UZxGIjbr7mfexNVfmodb6qhlvxZdLl1y mUp7+Q63PkjqYefCAN6a5TfFOpE1IkZe6J11QPG2uoS+/N6mDxxW0XL8a3owc/4o4T42fd p+dXNxfdRVY2Y+WYDzUtnqYzcoFUUdJo31DQdKrukFIlHE5MlA8R06rJIvmWGA== From: "Benjamin Robin (Schneider Electric)" Date: Thu, 07 May 2026 18:30:17 +0200 Subject: [PATCH 1/3] python3-sbom-cve-check: Update to version 1.3.1 MIME-Version: 1.0 Message-Id: <20260507-update-sbom-cve-check-v1-1-3c398db78f5f@bootlin.com> References: <20260507-update-sbom-cve-check-v1-0-3c398db78f5f@bootlin.com> In-Reply-To: <20260507-update-sbom-cve-check-v1-0-3c398db78f5f@bootlin.com> To: openembedded-core@lists.openembedded.org Cc: richard.purdie@linuxfoundation.org, peter.marko@siemens.com, ross.burton@arm.com, jpewhacker@gmail.com, olivier.benjamin@bootlin.com, antonin.godard@bootlin.com, mathieu.dubois-briand@bootlin.com, thomas.petazzoni@bootlin.com, pascal.eberhard@se.com, wahid.essid@se.com, "Benjamin Robin (Schneider Electric)" X-Mailer: b4 0.15.2 X-Last-TLS-Session-Version: TLSv1.3 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Thu, 07 May 2026 16:30:36 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236601 For details on this new release which fixes various bugs, see: https://github.com/bootlin/sbom-cve-check/releases/tag/v1.3.1 Also, update the LICENSE, which is now GPL-2.0-or-later instead of GPL-2.0-only, to be compatible with the licence dependencies. Signed-off-by: Benjamin Robin (Schneider Electric) --- ...ython3-sbom-cve-check_1.3.0.bb => python3-sbom-cve-check_1.3.1.bb} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.0.bb b/meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.1.bb similarity index 76% rename from meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.0.bb rename to meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.1.bb index 96fc167ecbc3..8120848a667d 100644 --- a/meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.0.bb +++ b/meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.1.bb @@ -1,11 +1,11 @@ SUMMARY = "Lightweight SBOM CVE analysis tool" HOMEPAGE = "https://github.com/bootlin/sbom-cve-check" SECTION = "devel/python" -LICENSE = "GPL-2.0-only" +LICENSE = "GPL-2.0-or-later" LIC_FILES_CHKSUM = "file://LICENSE;md5=570a9b3749dd0463a1778803b12a6dce" PYPI_PACKAGE = "sbom_cve_check" -SRC_URI[sha256sum] = "dad6f9df848f6dd7b69922baef0ec187b66ad0847fe0cf62614529e27203e842" +SRC_URI[sha256sum] = "675828b2f02f11620b7a229853a24d09264bf41161be5fbb80a92456f46a14e0" inherit pypi python_hatchling From patchwork Thu May 7 16:30:18 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: "Benjamin Robin (Schneider Electric)" X-Patchwork-Id: 87628 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 6E88ECD343F for ; Thu, 7 May 2026 16:30:36 +0000 (UTC) Received: from smtpout-03.galae.net (smtpout-03.galae.net [185.246.85.4]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.154.1778171428237601827 for ; Thu, 07 May 2026 09:30:28 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@bootlin.com header.s=dkim header.b=LoQkwaOG; spf=pass (domain: bootlin.com, ip: 185.246.85.4, mailfrom: benjamin.robin@bootlin.com) Received: from smtpout-01.galae.net (smtpout-01.galae.net [212.83.139.233]) by smtpout-03.galae.net (Postfix) with ESMTPS id 648AD4E42C33; Thu, 7 May 2026 16:30:26 +0000 (UTC) Received: from mail.galae.net (mail.galae.net [212.83.136.155]) by smtpout-01.galae.net (Postfix) with ESMTPS id 3008B605CF; Thu, 7 May 2026 16:30:26 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) by localhost (Mailerdaemon) with ESMTPSA id 81DD5108194E4; Thu, 7 May 2026 18:30:23 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=bootlin.com; s=dkim; t=1778171424; h=from:subject:date:message-id:to:cc:mime-version:content-type: content-transfer-encoding:in-reply-to:references; bh=XXZGDV68p96Yr0Y/kCr8p3SSPVyk/EudlrYYpLK6FPs=; b=LoQkwaOGEdGeVWjuhss4WFUQFa7Vb5j6YbSQgnu/dNm7i2SbZ9XaeGkCESImJuEx65olzh ao3tIBGiQY8dYmZDx/PFowavLtBMxcIunIFab/nNZLB04eQRINIVIDj8qstElwJbejGAt3 PPdVaiVS2QMNjgQup3hJtQ1sE8Ci/bOkHIMFbEINR+BZimzeoVK/yQL6KF2db8qQxS/1L3 eyEooSIHLrgGm8VFdFkx25h9OHoAItrxxJR9nvcul3YXD7SpbAhZ5tTNIsV0JsFDEPw0gL ILVF/NB70AWPNMAjiRZk1WvnqihJHVT99k2tmyLR1m7ArnOEz1j4gGJDSvENtQ== From: "Benjamin Robin (Schneider Electric)" Date: Thu, 07 May 2026 18:30:18 +0200 Subject: [PATCH 2/3] sbom-cve-check-update-cvelist-native: Update source revision MIME-Version: 1.0 Message-Id: <20260507-update-sbom-cve-check-v1-2-3c398db78f5f@bootlin.com> References: <20260507-update-sbom-cve-check-v1-0-3c398db78f5f@bootlin.com> In-Reply-To: <20260507-update-sbom-cve-check-v1-0-3c398db78f5f@bootlin.com> To: openembedded-core@lists.openembedded.org Cc: richard.purdie@linuxfoundation.org, peter.marko@siemens.com, ross.burton@arm.com, jpewhacker@gmail.com, olivier.benjamin@bootlin.com, antonin.godard@bootlin.com, mathieu.dubois-briand@bootlin.com, thomas.petazzoni@bootlin.com, pascal.eberhard@se.com, wahid.essid@se.com, "Benjamin Robin (Schneider Electric)" X-Mailer: b4 0.15.2 X-Last-TLS-Session-Version: TLSv1.3 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Thu, 07 May 2026 16:30:36 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236602 Update source revision to cve_2026-05-07_1300Z Signed-off-by: Benjamin Robin (Schneider Electric) --- .../sbom-cve-check/sbom-cve-check-update-cvelist-native.bb | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native.bb b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native.bb index 338712216590..3763e7f21f7a 100644 --- a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native.bb +++ b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native.bb @@ -6,7 +6,7 @@ HOMEPAGE = "https://github.com/CVEProject/cvelistV5" SRC_URI = "git://github.com/CVEProject/cvelistV5.git;branch=main;protocol=https;destsuffix=" SBOM_CVE_CHECK_DB_NAME = "cvelist" -# 2026-03-19_baseline -SRCREV = "ada54ee3cc8380820aa45e4996910bdc9dcb94e7" +# cve_2026-05-07_1300Z +SRCREV = "dd0e93c75034d0167498174c886a56729edc44de" require sbom-cve-check-update-db.inc From patchwork Thu May 7 16:30:19 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: "Benjamin Robin (Schneider Electric)" X-Patchwork-Id: 87629 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 443F6CD3442 for ; Thu, 7 May 2026 16:30:36 +0000 (UTC) Received: from smtpout-04.galae.net (smtpout-04.galae.net [185.171.202.116]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.156.1778171429714743071 for ; Thu, 07 May 2026 09:30:30 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@bootlin.com header.s=dkim header.b=Jyk0OByB; spf=pass (domain: bootlin.com, ip: 185.171.202.116, mailfrom: benjamin.robin@bootlin.com) Received: from smtpout-01.galae.net (smtpout-01.galae.net [212.83.139.233]) by smtpout-04.galae.net (Postfix) with ESMTPS id 21F49C5DC60; Thu, 7 May 2026 16:31:15 +0000 (UTC) Received: from mail.galae.net (mail.galae.net [212.83.136.155]) by smtpout-01.galae.net (Postfix) with ESMTPS id 59123605CF; Thu, 7 May 2026 16:30:27 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) by localhost (Mailerdaemon) with ESMTPSA id A44571081949C; Thu, 7 May 2026 18:30:25 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=bootlin.com; s=dkim; t=1778171426; h=from:subject:date:message-id:to:cc:mime-version:content-type: content-transfer-encoding:in-reply-to:references; bh=DMzy4mIOIjUy+gnIC5r3P+KHqKrv7gkBJpgCLzRRG6Q=; b=Jyk0OByBSgxB9OvBllMJ7emlin0QS7HoqSjqtcD9JRj4EAoWOYaPgyhL8NSVahCLaGW7Ap a+RIsxsrYYfbyhDANkRnZgSy0ZBicCTG3glbqnd9iR+C+TiAcVwurSvAm9hcZY0kqghobk UG5qjaEeEbm/+1+KYvx2RTdYNsjvfgZwKbFkx0Ebdg/7la914XQf6eQfoiy5hS+8HsVQzs qPBusYc1f+eCsAHc40XR8zXB17UET49GVBavdIR3EW+MVHuOJxwQ4BvsQFPBoUCvSmyVze +irq3oNbTf0Nnl6Ltx4fjEWaNucG0xO33b+3NCtKwisJUeYt6AmFzd35ML+rxg== From: "Benjamin Robin (Schneider Electric)" Date: Thu, 07 May 2026 18:30:19 +0200 Subject: [PATCH 3/3] sbom-cve-check-update-nvd-native: Update source revision MIME-Version: 1.0 Message-Id: <20260507-update-sbom-cve-check-v1-3-3c398db78f5f@bootlin.com> References: <20260507-update-sbom-cve-check-v1-0-3c398db78f5f@bootlin.com> In-Reply-To: <20260507-update-sbom-cve-check-v1-0-3c398db78f5f@bootlin.com> To: openembedded-core@lists.openembedded.org Cc: richard.purdie@linuxfoundation.org, peter.marko@siemens.com, ross.burton@arm.com, jpewhacker@gmail.com, olivier.benjamin@bootlin.com, antonin.godard@bootlin.com, mathieu.dubois-briand@bootlin.com, thomas.petazzoni@bootlin.com, pascal.eberhard@se.com, wahid.essid@se.com, "Benjamin Robin (Schneider Electric)" X-Mailer: b4 0.15.2 X-Last-TLS-Session-Version: TLSv1.3 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Thu, 07 May 2026 16:30:36 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/236603 Update source revision to v2026.05.07-000006 Signed-off-by: Benjamin Robin (Schneider Electric)