From patchwork Wed May 13 20:00:05 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: "Benjamin Robin (Schneider Electric)" X-Patchwork-Id: 88076 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id E91CACD37AC for ; Wed, 13 May 2026 20:00:17 +0000 (UTC) Received: from smtpout-03.galae.net (smtpout-03.galae.net [185.246.85.4]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.6160.1778702416533020619 for ; Wed, 13 May 2026 13:00:16 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@bootlin.com header.s=dkim header.b=PZdV9NPG; spf=pass (domain: bootlin.com, ip: 185.246.85.4, mailfrom: benjamin.robin@bootlin.com) Received: from smtpout-01.galae.net (smtpout-01.galae.net [212.83.139.233]) by smtpout-03.galae.net (Postfix) with ESMTPS id BF0C54E42C89; Wed, 13 May 2026 20:00:14 +0000 (UTC) Received: from mail.galae.net (mail.galae.net [212.83.136.155]) by smtpout-01.galae.net (Postfix) with ESMTPS id 8AE2C5FE21; Wed, 13 May 2026 20:00:14 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) by localhost (Mailerdaemon) with ESMTPSA id DDE9F11AF8C47; Wed, 13 May 2026 22:00:12 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=bootlin.com; s=dkim; t=1778702413; h=from:subject:date:message-id:to:cc:mime-version:content-type: content-transfer-encoding:in-reply-to:references; bh=sjBGDoKEJlgya235T6OSoEwv4wlXjCovwyVvIRadiyU=; b=PZdV9NPG6U8u5KiNbDlNtkbfbnw+63IgvlhU6xvfsCCTKxcYu/+2IjlltKs34tjNfNdDbo Jl5iCf4LbzKtv9B0y/CSjmw7mkM3D3or6z7DQGMU9B/YfCDyUBvJIDdQ1+V08IU43exAF1 8yeUwhQpONy19lbc3UY8uX8EdtBvKmdarHyglBokoIjHqWO/QwEXd0lcea4u1VXSdENmVJ fM9LCavwvdM9stDcnBpx6bO1uXvbztcad+cD7dKZkruyy0nhePcUrOBKbXjk+zMkOEtP8q 5zQJpR5L6skm/RlnB1QI0arJPObYsDFcGx5Xf1EYfjfYp7UN6FZzBMWEf796Pg== From: "Benjamin Robin (Schneider Electric)" Date: Wed, 13 May 2026 22:00:05 +0200 Subject: [wrynose][PATCH v2 1/3] python3-sbom-cve-check: Update to version 1.3.1 MIME-Version: 1.0 Message-Id: <20260513-update-sbom-cve-check-wrynose-v2-1-94d0e353dc6c@bootlin.com> References: <20260513-update-sbom-cve-check-wrynose-v2-0-94d0e353dc6c@bootlin.com> In-Reply-To: <20260513-update-sbom-cve-check-wrynose-v2-0-94d0e353dc6c@bootlin.com> To: openembedded-core@lists.openembedded.org Cc: richard.purdie@linuxfoundation.org, ross.burton@arm.com, olivier.benjamin@bootlin.com, antonin.godard@bootlin.com, mathieu.dubois-briand@bootlin.com, thomas.petazzoni@bootlin.com, pascal.eberhard@se.com, wahid.essid@se.com, "Benjamin Robin (Schneider Electric)" X-Mailer: b4 0.15.2 X-Last-TLS-Session-Version: TLSv1.3 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 13 May 2026 20:00:17 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/237007 For details on this new release which fixes various bugs, see: https://github.com/bootlin/sbom-cve-check/releases/tag/v1.3.1 Also, update the LICENSE, which is now GPL-2.0-or-later instead of GPL-2.0-only, to be compatible with the licence dependencies. (cherry picked from commit f8bdcebd01a16adb4e5d5a89c6b47c5f0af1f5a4) Signed-off-by: Benjamin Robin (Schneider Electric) --- ...ython3-sbom-cve-check_1.3.0.bb => python3-sbom-cve-check_1.3.1.bb} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.0.bb b/meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.1.bb similarity index 76% rename from meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.0.bb rename to meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.1.bb index 96fc167ecbc3..8120848a667d 100644 --- a/meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.0.bb +++ b/meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.1.bb @@ -1,11 +1,11 @@ SUMMARY = "Lightweight SBOM CVE analysis tool" HOMEPAGE = "https://github.com/bootlin/sbom-cve-check" SECTION = "devel/python" -LICENSE = "GPL-2.0-only" +LICENSE = "GPL-2.0-or-later" LIC_FILES_CHKSUM = "file://LICENSE;md5=570a9b3749dd0463a1778803b12a6dce" PYPI_PACKAGE = "sbom_cve_check" -SRC_URI[sha256sum] = "dad6f9df848f6dd7b69922baef0ec187b66ad0847fe0cf62614529e27203e842" +SRC_URI[sha256sum] = "675828b2f02f11620b7a229853a24d09264bf41161be5fbb80a92456f46a14e0" inherit pypi python_hatchling From patchwork Wed May 13 20:00:06 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: "Benjamin Robin (Schneider Electric)" X-Patchwork-Id: 88077 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id B2BFBCD4F21 for ; Wed, 13 May 2026 20:00:27 +0000 (UTC) Received: from smtpout-02.galae.net (smtpout-02.galae.net [185.246.84.56]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.6044.1778702417629749450 for ; Wed, 13 May 2026 13:00:18 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@bootlin.com header.s=dkim header.b=eQxAGYk9; spf=pass (domain: bootlin.com, ip: 185.246.84.56, mailfrom: benjamin.robin@bootlin.com) Received: from smtpout-01.galae.net (smtpout-01.galae.net [212.83.139.233]) by smtpout-02.galae.net (Postfix) with ESMTPS id 0DB0D1A35A4; Wed, 13 May 2026 20:00:16 +0000 (UTC) Received: from mail.galae.net (mail.galae.net [212.83.136.155]) by smtpout-01.galae.net (Postfix) with ESMTPS id D81275FE21; Wed, 13 May 2026 20:00:15 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) by localhost (Mailerdaemon) with ESMTPSA id 2A74411AF9038; Wed, 13 May 2026 22:00:14 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=bootlin.com; s=dkim; t=1778702415; h=from:subject:date:message-id:to:cc:mime-version:content-type: content-transfer-encoding:in-reply-to:references; bh=tKRqQ48aEF4OVYVke4WgXDhig8eZcTtMxHlW6Qh2K+4=; b=eQxAGYk9fRAZ68SxAzASlCtRGUxM91FGI6JglwN08Cm3FKsmcNtBtgj3OxaUPzpyA5dQCs sA62PaQ3lXJwZ8DUOfANxQdePqhshZBrT4X6kHFoJGr7N95k2Y9G0cn1Wa8IhhRLTwiQel 47IBpcexodzOXWWWCNNSvdtxUnoka8Ud9Vjcu4fJM7994N4lP4Tp7RKV5y1PHuDF3YbNJl nvihJ+hbEPYQX7OaTvKAYHqVh3Zi9N7+oERw2WAH6eXif47tlZ4Y+yBC2JlaH/uVeDTUZ/ nr42WKhieayVx/Kzg2Y9A+65IdA8On3CMP+WltWGFbn+5EmZt7EKtNq584Nn5w== From: "Benjamin Robin (Schneider Electric)" Date: Wed, 13 May 2026 22:00:06 +0200 Subject: [wrynose][PATCH v2 2/3] sbom-cve-check-update-cvelist-native: Update source revision MIME-Version: 1.0 Message-Id: <20260513-update-sbom-cve-check-wrynose-v2-2-94d0e353dc6c@bootlin.com> References: <20260513-update-sbom-cve-check-wrynose-v2-0-94d0e353dc6c@bootlin.com> In-Reply-To: <20260513-update-sbom-cve-check-wrynose-v2-0-94d0e353dc6c@bootlin.com> To: openembedded-core@lists.openembedded.org Cc: richard.purdie@linuxfoundation.org, ross.burton@arm.com, olivier.benjamin@bootlin.com, antonin.godard@bootlin.com, mathieu.dubois-briand@bootlin.com, thomas.petazzoni@bootlin.com, pascal.eberhard@se.com, wahid.essid@se.com, "Benjamin Robin (Schneider Electric)" X-Mailer: b4 0.15.2 X-Last-TLS-Session-Version: TLSv1.3 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 13 May 2026 20:00:27 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/237008 Update source revision to cve_2026-05-07_1300Z (cherry picked from commit 30b1f91d2a8cb1df5d4a65d2b55a3d26ff76937f) Signed-off-by: Benjamin Robin (Schneider Electric) --- .../sbom-cve-check/sbom-cve-check-update-cvelist-native.bb | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native.bb b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native.bb index 338712216590..3763e7f21f7a 100644 --- a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native.bb +++ b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native.bb @@ -6,7 +6,7 @@ HOMEPAGE = "https://github.com/CVEProject/cvelistV5" SRC_URI = "git://github.com/CVEProject/cvelistV5.git;branch=main;protocol=https;destsuffix=" SBOM_CVE_CHECK_DB_NAME = "cvelist" -# 2026-03-19_baseline -SRCREV = "ada54ee3cc8380820aa45e4996910bdc9dcb94e7" +# cve_2026-05-07_1300Z +SRCREV = "dd0e93c75034d0167498174c886a56729edc44de" require sbom-cve-check-update-db.inc From patchwork Wed May 13 20:00:07 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: "Benjamin Robin (Schneider Electric)" X-Patchwork-Id: 88078 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id C4D70CD4F25 for ; Wed, 13 May 2026 20:00:27 +0000 (UTC) Received: from smtpout-03.galae.net (smtpout-03.galae.net [185.246.85.4]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.6163.1778702419112788508 for ; Wed, 13 May 2026 13:00:19 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@bootlin.com header.s=dkim header.b=lBfCa3og; spf=pass (domain: bootlin.com, ip: 185.246.85.4, mailfrom: benjamin.robin@bootlin.com) Received: from smtpout-01.galae.net (smtpout-01.galae.net [212.83.139.233]) by smtpout-03.galae.net (Postfix) with ESMTPS id 531E54E42C78; Wed, 13 May 2026 20:00:17 +0000 (UTC) Received: from mail.galae.net (mail.galae.net [212.83.136.155]) by smtpout-01.galae.net (Postfix) with ESMTPS id 1E8EB5FE21; Wed, 13 May 2026 20:00:17 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) by localhost (Mailerdaemon) with ESMTPSA id 6DCE111AF903E; Wed, 13 May 2026 22:00:15 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=bootlin.com; s=dkim; t=1778702416; h=from:subject:date:message-id:to:cc:mime-version:content-type: content-transfer-encoding:in-reply-to:references; bh=VJtwNLTqiAKwi8CRSViuUEDSw/d9kp4UDI+cwE0u04w=; b=lBfCa3ogyWh90deP6zONovAZOQ4UrNTIYIZ/5RAA2mP+hGB0qfSq4fOURVblmCbRKcdBbl 5FFEqXDDloH79iNMZS3haWF4gOxgGoRAs1c+DD8xdcXjkbDR/m+cMb4Ni9C30pSH4OuQTZ 30bt2Z/EFpSoENx/W8z+BV/29ZI1ImHYAKce2pK0/pe0gl7CotQeSjKgxYl7kjrNmYqMY1 hmjPYDTyruwnmcyoZr4LuqCqZRig5/kUaIlHk75BHxliqiboZrtD6L3+NPOjQQdRaDg46T zvkkRP7PnlJOdfSacYmYeQRV6MJh1Vto763e2g2jz6WhvexIjlWxitm4ZyvMWQ== From: "Benjamin Robin (Schneider Electric)" Date: Wed, 13 May 2026 22:00:07 +0200 Subject: [wrynose][PATCH v2 3/3] sbom-cve-check-update-nvd-native: Update source revision MIME-Version: 1.0 Message-Id: <20260513-update-sbom-cve-check-wrynose-v2-3-94d0e353dc6c@bootlin.com> References: <20260513-update-sbom-cve-check-wrynose-v2-0-94d0e353dc6c@bootlin.com> In-Reply-To: <20260513-update-sbom-cve-check-wrynose-v2-0-94d0e353dc6c@bootlin.com> To: openembedded-core@lists.openembedded.org Cc: richard.purdie@linuxfoundation.org, ross.burton@arm.com, olivier.benjamin@bootlin.com, antonin.godard@bootlin.com, mathieu.dubois-briand@bootlin.com, thomas.petazzoni@bootlin.com, pascal.eberhard@se.com, wahid.essid@se.com, "Benjamin Robin (Schneider Electric)" X-Mailer: b4 0.15.2 X-Last-TLS-Session-Version: TLSv1.3 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 13 May 2026 20:00:27 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/237009 Update source revision to v2026.05.07-000006 (cherry picked from commit 3724b93538d3acbec9f48d4c524b51d166071708) Signed-off-by: Benjamin Robin (Schneider Electric) --- .../sbom-cve-check/sbom-cve-check-update-nvd-native.bb | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native.bb b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native.bb index c868ba09c18d..26a14e6eb169 100644 --- a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native.bb +++ b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native.bb @@ -6,7 +6,7 @@ HOMEPAGE = "https://github.com/fkie-cad/nvd-json-data-feeds" SRC_URI = "git://github.com/fkie-cad/nvd-json-data-feeds.git;branch=main;protocol=https;destsuffix=" SBOM_CVE_CHECK_DB_NAME = "nvd-fkie" -# v2026.03.19-010002 -SRCREV = "49f8bbe1b0b0884e16bdc37ab68db997085570a7" +# v2026.05.07-000006 +SRCREV = "72d8841c8ad9083ebf6723063f275444ea0d76f9" require sbom-cve-check-update-db.inc