From patchwork Sat Aug 8 10:51:37 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Peter Marko X-Patchwork-Id: 94786 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id A9D65C5AC67 for ; Sat, 8 Aug 2026 10:52:20 +0000 (UTC) Received: from mta-65-227.siemens.flowmailer.net (mta-65-227.siemens.flowmailer.net [185.136.65.227]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.3552.1786186332120819974 for ; Sat, 08 Aug 2026 03:52:14 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=peter.marko@siemens.com header.s=fm1 header.b=P7Z90D9j; spf=pass (domain: rts-flowmailer.siemens.com, ip: 185.136.65.227, mailfrom: fm-256628-20260808105213c5169f4f6c00020777-k2q5xx@rts-flowmailer.siemens.com) Received: by mta-65-227.siemens.flowmailer.net with ESMTPSA id 20260808105213c5169f4f6c00020777 for ; Sat, 08 Aug 2026 12:52:13 +0200 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; s=fm1; d=siemens.com; i=peter.marko@siemens.com; h=Date:From:Subject:To:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding:Cc:References:In-Reply-To; bh=MMicT5poJGpFqHjGdeWmghDGZq4CydCUUx2H50d5NFU=; b=P7Z90D9jYT2Ir3lauJImmRlwga/wncIbBea83HSoNYPCO5mi8fYXyQsfnvWZDB5sqNA+Hk cHv8bVJnZqYZasjM5f/CxqUcpm114CpI0+2xbxAjLb9+Q535pf136lBiYC5Sq6GJXV9GYlhM kIxpFmxS1LVgkCCnZ8qVIHTX64NhsKupL4PtXAnWlQnp1RQeZ6d3vbCMyZi0595p4iucPiad QAqUI+sgnRY+gtKukNGlQvY4IYibQpUZvNN9zmqGBMmEdBuhF3cio93JuhbTLlGCTT0jLEH8 FT+/tZwtrQLhRCcMcLYdMbGSDKwsQV8PiQ9ZOeHxq2SicenkBPSGMGwg==; From: Peter Marko To: openembedded-core@lists.openembedded.org Cc: peter.marko@siemens.com Subject: [wrynose][RFC PATCH 01/11] sbom-cve-check-update-nvd-native: upgrade 2026.05.07-000006 -> 2026.06.09-000006 Date: Sat, 8 Aug 2026 12:51:37 +0200 Message-ID: <20260808105147.42294-2-peter.marko@siemens.com> In-Reply-To: <20260808105147.42294-1-peter.marko@siemens.com> References: <20260808105147.42294-1-peter.marko@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-256628:519-21489:flowmailer List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Sat, 08 Aug 2026 10:52:20 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/243038 From: Wang Mingyu Signed-off-by: Wang Mingyu Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie (From OE-Core rev: d33c73535229b5066901faedaaaca0aa6bbd99bf) Signed-off-by: Peter Marko --- ...bb => sbom-cve-check-update-nvd-native_2026.06.09-000006.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-devtools/sbom-cve-check/{sbom-cve-check-update-nvd-native_2026.05.07-000006.bb => sbom-cve-check-update-nvd-native_2026.06.09-000006.bb} (89%) diff --git a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.05.07-000006.bb b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.06.09-000006.bb similarity index 89% rename from meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.05.07-000006.bb rename to meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.06.09-000006.bb index 02446e30ce..2917c89e62 100644 --- a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.05.07-000006.bb +++ b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.06.09-000006.bb @@ -6,7 +6,7 @@ HOMEPAGE = "https://github.com/fkie-cad/nvd-json-data-feeds" SRC_URI = "git://github.com/fkie-cad/nvd-json-data-feeds.git;branch=main;protocol=https;destsuffix=" SBOM_CVE_CHECK_DB_NAME = "nvd-fkie" -SRCREV = "72d8841c8ad9083ebf6723063f275444ea0d76f9" +SRCREV = "7ff4a0622bfdf5313c79635951112d2a45bbe9fd" UPSTREAM_CHECK_GITTAGREGEX = "v(?P.+)" require sbom-cve-check-update-db.inc From patchwork Sat Aug 8 10:51:38 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Peter Marko X-Patchwork-Id: 94785 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 9D7D7C5AD2C for ; Sat, 8 Aug 2026 10:52:20 +0000 (UTC) Received: from mta-64-225.siemens.flowmailer.net (mta-64-225.siemens.flowmailer.net [185.136.64.225]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.3506.1786186338640748508 for ; Sat, 08 Aug 2026 03:52:20 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=peter.marko@siemens.com header.s=fm1 header.b=Or1f3/on; spf=pass (domain: rts-flowmailer.siemens.com, ip: 185.136.64.225, mailfrom: fm-256628-20260808105216f1735ea5b100020748-z0hs_d@rts-flowmailer.siemens.com) Received: by mta-64-225.siemens.flowmailer.net with ESMTPSA id 20260808105216f1735ea5b100020748 for ; Sat, 08 Aug 2026 12:52:16 +0200 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; s=fm1; d=siemens.com; i=peter.marko@siemens.com; h=Date:From:Subject:To:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding:Cc:References:In-Reply-To; bh=Y/+d51I/5OWxZFbjqRtJZWle8u1ANlNOzyKjt2fuL3s=; b=Or1f3/on9yhKWplwHOHWq7qOLdAIajuepuRBEThqAnOfqFzXy8VcNuQIgO0KMmJgm6cXFB StL7arUU7dr51UjZlnBlbdxfkCkk4M+E/54A3NZqJqbDMiJ3t2kGC3pmxFQJwjYvJy1X0YnG IR7b/rXPK+0rEjfwub70leSF7ttyrJxM96W6SxmFPPKb7Um3VCyRccKWIiyg3L7CGqlLzCC+ J1Ia14sBojAND2TDK1wZOLbEB8bK9aB4LchK+JRAiy4+hI7dpjqCDlj5NeAi/qB4QuaZSzcU KmAei/gsDol4INWCT83c6idLQt35Z4f77Z02nllS7b0CjA4xPHiB1eFA==; From: Peter Marko To: openembedded-core@lists.openembedded.org Cc: peter.marko@siemens.com Subject: [wrynose][RFC PATCH 02/11] python3-shacl2code: upgrade 1.0.1 -> 1.1.0 Date: Sat, 8 Aug 2026 12:51:38 +0200 Message-ID: <20260808105147.42294-3-peter.marko@siemens.com> In-Reply-To: <20260808105147.42294-1-peter.marko@siemens.com> References: <20260808105147.42294-1-peter.marko@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-256628:519-21489:flowmailer List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Sat, 08 Aug 2026 10:52:20 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/243039 From: Alexander Kanavin Add a patch to python3-spdx-python-model to support this release. Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie (From OE-Core rev: f6557000abc90b0c3b7ca5b4560849e64425c853) Signed-off-by: Peter Marko --- ...e_1.0.1.bb => python3-shacl2code_1.1.0.bb} | 2 +- ...pdate-shacl2code-to-1.1.0-and-add-ke.patch | 41 +++++++++++++++++++ .../python/python3-spdx-python-model_0.0.5.bb | 10 ++--- 3 files changed, 47 insertions(+), 6 deletions(-) rename meta/recipes-devtools/python/{python3-shacl2code_1.0.1.bb => python3-shacl2code_1.1.0.bb} (81%) create mode 100644 meta/recipes-devtools/python/python3-spdx-python-model/0001-pyproject.toml-Update-shacl2code-to-1.1.0-and-add-ke.patch diff --git a/meta/recipes-devtools/python/python3-shacl2code_1.0.1.bb b/meta/recipes-devtools/python/python3-shacl2code_1.1.0.bb similarity index 81% rename from meta/recipes-devtools/python/python3-shacl2code_1.0.1.bb rename to meta/recipes-devtools/python/python3-shacl2code_1.1.0.bb index 904940926f..a9c8bec84f 100644 --- a/meta/recipes-devtools/python/python3-shacl2code_1.0.1.bb +++ b/meta/recipes-devtools/python/python3-shacl2code_1.1.0.bb @@ -5,7 +5,7 @@ LICENSE = "MIT" LIC_FILES_CHKSUM = "file://LICENSE;md5=0582f358628f299f29c23bf5fb2f73c9" PYPI_PACKAGE = "shacl2code" -SRC_URI[sha256sum] = "c856822b40c330452b8b31e94a658ad4595a5ef03cdb75ea432ea9c73d0cf7d9" +SRC_URI[sha256sum] = "0f3a243c6482a0f95c5a793288d304908506b51b82dc6133de22be477cd75c24" inherit pypi python_hatchling diff --git a/meta/recipes-devtools/python/python3-spdx-python-model/0001-pyproject.toml-Update-shacl2code-to-1.1.0-and-add-ke.patch b/meta/recipes-devtools/python/python3-spdx-python-model/0001-pyproject.toml-Update-shacl2code-to-1.1.0-and-add-ke.patch new file mode 100644 index 0000000000..d9dc0a03c8 --- /dev/null +++ b/meta/recipes-devtools/python/python3-spdx-python-model/0001-pyproject.toml-Update-shacl2code-to-1.1.0-and-add-ke.patch @@ -0,0 +1,41 @@ +From b623473f634aebeb30028cc746fb7a3da4fb2ce3 Mon Sep 17 00:00:00 2001 +From: Arthit Suriyawongkul +Date: Sat, 6 Jun 2026 02:44:48 +0100 +Subject: [PATCH] pyproject.toml: Update shacl2code to 1.1.0 and add keywords + (#35) + +Signed-off-by: Arthit Suriyawongkul +Upstream-Status: Backport [https://github.com/spdx/spdx-python-model/commit/2d7b71a7c8e6270a1c8795cdeb4f3dcd9393b3a9] +Signed-off-by: Alexander Kanavin +--- + pyproject.toml | 10 +++++++++- + 1 file changed, 9 insertions(+), 1 deletion(-) + +diff --git a/pyproject.toml b/pyproject.toml +index c8b3e56..df011e8 100644 +--- a/pyproject.toml ++++ b/pyproject.toml +@@ -8,6 +8,14 @@ authors = [ + {name = "Joshua Watt", email = "JPEWhacker@gmail.com"}, + ] + readme = "README.md" ++keywords = [ ++ "spdx", ++ "sbom", ++ "spdx3", ++ "software-bill-of-materials", ++ "shacl2code", ++ "bindings", ++] + classifiers = [ + "Development Status :: 4 - Beta", + "Intended Audience :: Developers", +@@ -36,7 +44,7 @@ Issues = "https://github.com/spdx/spdx-python-model/issues" + requires = [ + "hatchling >= 1.27.0", + "hatch-build-scripts >= 0.0.4", +- "shacl2code == 1.0.1", ++ "shacl2code == 1.1.0", + ] + build-backend = "hatchling.build" + diff --git a/meta/recipes-devtools/python/python3-spdx-python-model_0.0.5.bb b/meta/recipes-devtools/python/python3-spdx-python-model_0.0.5.bb index c77bdffada..19d9bb815b 100644 --- a/meta/recipes-devtools/python/python3-spdx-python-model_0.0.5.bb +++ b/meta/recipes-devtools/python/python3-spdx-python-model_0.0.5.bb @@ -7,11 +7,11 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=86d3f3a95c324c9479bd8986968f4327" PYPI_PACKAGE = "spdx_python_model" SRC_URI[sha256sum] = "4bcf7c6e5e2e8f0b787ed4eb8fb519e2ed776e820cb6d9eb93e44e98eb92ca2d" -SRC_URI += " \ - https://spdx.org/rdf/3.0.1/spdx-context.jsonld;name=spdx1 \ - https://spdx.org/rdf/3.0.1/spdx-json-serialize-annotations.ttl;name=spdx2 \ - https://spdx.org/rdf/3.0.1/spdx-model.ttl;name=spdx3 \ -" +SRC_URI += "https://spdx.org/rdf/3.0.1/spdx-context.jsonld;name=spdx1 \ + https://spdx.org/rdf/3.0.1/spdx-json-serialize-annotations.ttl;name=spdx2 \ + https://spdx.org/rdf/3.0.1/spdx-model.ttl;name=spdx3 \ + file://0001-pyproject.toml-Update-shacl2code-to-1.1.0-and-add-ke.patch \ + " SRC_URI[spdx1.sha256sum] = "c72b0928f094c83e5c127784edb1ebca2af74a104fcacc007c332b23cbc788bd" SRC_URI[spdx2.sha256sum] = "c6a54b51230eb2bf3b31302546af201f303e0b7931c1db404d7f5b72b6f863e6" From patchwork Sat Aug 8 10:51:39 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Peter Marko X-Patchwork-Id: 94787 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id B2F16C5AD2B for ; Sat, 8 Aug 2026 10:52:30 +0000 (UTC) Received: from mta-65-225.siemens.flowmailer.net (mta-65-225.siemens.flowmailer.net [185.136.65.225]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.3554.1786186345725298605 for ; Sat, 08 Aug 2026 03:52:26 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=peter.marko@siemens.com header.s=fm1 header.b=Cw8pJOAi; spf=pass (domain: rts-flowmailer.siemens.com, ip: 185.136.65.225, mailfrom: fm-256628-20260808105223444f6d8d7d000207d4-woas4s@rts-flowmailer.siemens.com) Received: by mta-65-225.siemens.flowmailer.net with ESMTPSA id 20260808105223444f6d8d7d000207d4 for ; Sat, 08 Aug 2026 12:52:23 +0200 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; s=fm1; d=siemens.com; i=peter.marko@siemens.com; h=Date:From:Subject:To:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding:Cc:References:In-Reply-To; bh=kupDkW8pwkpO0fspUm6YP0/NIxUGHqOhG1AjC8ooRCQ=; b=Cw8pJOAiT6mt9jK800hBBINqVO74PJcKqfeiNa0NE+SovcxaycQR5UjGp+ZHrM//kOTF1D uWT1/zd21EBOTOlghhIcXaUsb0RqdjK2IB1np7/5KABYmCo9Sz6z7PlzdkgXZjo501H2Ic++ TE1cyDiT+H5YETnTD4CNUsMFkAaOZVM/7IkoLmNlbW779gKR8pSVVZanr2Pbgd9yvi0m5JmA smqXNA4147PXOrssrY5dzvpon+AyrFbQPJQv2pOdhHnY07NQgT83MIL82TzHmzK5b3/aa0/g c0otjx3JP1Jxg/1MesNZiqLd2ZvtZjihA/2Klye2BgDC5CNzzx3sg/MA==; From: Peter Marko To: openembedded-core@lists.openembedded.org Cc: peter.marko@siemens.com Subject: [wrynose][RFC PATCH 03/11] python3-spdx-python-model: update from version 0.0.5 to 0.0.6 Date: Sat, 8 Aug 2026 12:51:39 +0200 Message-ID: <20260808105147.42294-4-peter.marko@siemens.com> In-Reply-To: <20260808105147.42294-1-peter.marko@siemens.com> References: <20260808105147.42294-1-peter.marko@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-256628:519-21489:flowmailer List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Sat, 08 Aug 2026 10:52:30 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/243040 From: "Benjamin Robin (Schneider Electric)" Drop the patch which should no longer be necessary. This is a partial revert of f6557000abc90b0c3b7ca5b4560849e64425c853 Signed-off-by: Benjamin Robin (Schneider Electric) Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie (From OE-Core rev: 9b5c92cd6b8ef8a56ebc3815120fd4af5872173c) Signed-off-by: Peter Marko --- ...pdate-shacl2code-to-1.1.0-and-add-ke.patch | 41 ------------------- ....bb => python3-spdx-python-model_0.0.6.bb} | 12 +++--- 2 files changed, 6 insertions(+), 47 deletions(-) delete mode 100644 meta/recipes-devtools/python/python3-spdx-python-model/0001-pyproject.toml-Update-shacl2code-to-1.1.0-and-add-ke.patch rename meta/recipes-devtools/python/{python3-spdx-python-model_0.0.5.bb => python3-spdx-python-model_0.0.6.bb} (72%) diff --git a/meta/recipes-devtools/python/python3-spdx-python-model/0001-pyproject.toml-Update-shacl2code-to-1.1.0-and-add-ke.patch b/meta/recipes-devtools/python/python3-spdx-python-model/0001-pyproject.toml-Update-shacl2code-to-1.1.0-and-add-ke.patch deleted file mode 100644 index d9dc0a03c8..0000000000 --- a/meta/recipes-devtools/python/python3-spdx-python-model/0001-pyproject.toml-Update-shacl2code-to-1.1.0-and-add-ke.patch +++ /dev/null @@ -1,41 +0,0 @@ -From b623473f634aebeb30028cc746fb7a3da4fb2ce3 Mon Sep 17 00:00:00 2001 -From: Arthit Suriyawongkul -Date: Sat, 6 Jun 2026 02:44:48 +0100 -Subject: [PATCH] pyproject.toml: Update shacl2code to 1.1.0 and add keywords - (#35) - -Signed-off-by: Arthit Suriyawongkul -Upstream-Status: Backport [https://github.com/spdx/spdx-python-model/commit/2d7b71a7c8e6270a1c8795cdeb4f3dcd9393b3a9] -Signed-off-by: Alexander Kanavin ---- - pyproject.toml | 10 +++++++++- - 1 file changed, 9 insertions(+), 1 deletion(-) - -diff --git a/pyproject.toml b/pyproject.toml -index c8b3e56..df011e8 100644 ---- a/pyproject.toml -+++ b/pyproject.toml -@@ -8,6 +8,14 @@ authors = [ - {name = "Joshua Watt", email = "JPEWhacker@gmail.com"}, - ] - readme = "README.md" -+keywords = [ -+ "spdx", -+ "sbom", -+ "spdx3", -+ "software-bill-of-materials", -+ "shacl2code", -+ "bindings", -+] - classifiers = [ - "Development Status :: 4 - Beta", - "Intended Audience :: Developers", -@@ -36,7 +44,7 @@ Issues = "https://github.com/spdx/spdx-python-model/issues" - requires = [ - "hatchling >= 1.27.0", - "hatch-build-scripts >= 0.0.4", -- "shacl2code == 1.0.1", -+ "shacl2code == 1.1.0", - ] - build-backend = "hatchling.build" - diff --git a/meta/recipes-devtools/python/python3-spdx-python-model_0.0.5.bb b/meta/recipes-devtools/python/python3-spdx-python-model_0.0.6.bb similarity index 72% rename from meta/recipes-devtools/python/python3-spdx-python-model_0.0.5.bb rename to meta/recipes-devtools/python/python3-spdx-python-model_0.0.6.bb index 19d9bb815b..def12b2049 100644 --- a/meta/recipes-devtools/python/python3-spdx-python-model_0.0.5.bb +++ b/meta/recipes-devtools/python/python3-spdx-python-model_0.0.6.bb @@ -5,13 +5,13 @@ LICENSE = "Apache-2.0" LIC_FILES_CHKSUM = "file://LICENSE;md5=86d3f3a95c324c9479bd8986968f4327" PYPI_PACKAGE = "spdx_python_model" -SRC_URI[sha256sum] = "4bcf7c6e5e2e8f0b787ed4eb8fb519e2ed776e820cb6d9eb93e44e98eb92ca2d" +SRC_URI[sha256sum] = "f1938eb08d08218278122849bba123b8993a0171e9b4f5ea6af7aeb71f3204d7" -SRC_URI += "https://spdx.org/rdf/3.0.1/spdx-context.jsonld;name=spdx1 \ - https://spdx.org/rdf/3.0.1/spdx-json-serialize-annotations.ttl;name=spdx2 \ - https://spdx.org/rdf/3.0.1/spdx-model.ttl;name=spdx3 \ - file://0001-pyproject.toml-Update-shacl2code-to-1.1.0-and-add-ke.patch \ - " +SRC_URI += " \ + https://spdx.org/rdf/3.0.1/spdx-context.jsonld;name=spdx1 \ + https://spdx.org/rdf/3.0.1/spdx-json-serialize-annotations.ttl;name=spdx2 \ + https://spdx.org/rdf/3.0.1/spdx-model.ttl;name=spdx3 \ +" SRC_URI[spdx1.sha256sum] = "c72b0928f094c83e5c127784edb1ebca2af74a104fcacc007c332b23cbc788bd" SRC_URI[spdx2.sha256sum] = "c6a54b51230eb2bf3b31302546af201f303e0b7931c1db404d7f5b72b6f863e6" From patchwork Sat Aug 8 10:51:40 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Peter Marko X-Patchwork-Id: 94788 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id A8CA3C5AC67 for ; Sat, 8 Aug 2026 10:52:40 +0000 (UTC) Received: from mta-64-227.siemens.flowmailer.net (mta-64-227.siemens.flowmailer.net [185.136.64.227]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.3511.1786186352635124929 for ; Sat, 08 Aug 2026 03:52:32 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=peter.marko@siemens.com header.s=fm1 header.b=iYjlcBZs; spf=pass (domain: rts-flowmailer.siemens.com, ip: 185.136.64.227, mailfrom: fm-256628-20260808105230086ce5bbc70002078e-22nery@rts-flowmailer.siemens.com) Received: by mta-64-227.siemens.flowmailer.net with ESMTPSA id 20260808105230086ce5bbc70002078e for ; Sat, 08 Aug 2026 12:52:30 +0200 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; s=fm1; d=siemens.com; i=peter.marko@siemens.com; h=Date:From:Subject:To:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding:Cc:References:In-Reply-To; bh=8LFYYHV7vSnHx9SlA4EwBB1t3zsXESBHqUgh5VkPiWY=; b=iYjlcBZsdhtD+4OV/sxiW0mSTd7wqPx9/uMFHRQtrls9HGjTsD5PE+h1apGXPT1oCb9/bW AzXj9xeK9/n1s/AVpgxrHDOCVjuxwchrHTF4didaX/yXPE4UQ19gsUfwzZs0DC5JBdmdnm2c S4lP7xnuBzgw3+Nr7Q2olPlSTAjOmEho3itLyryByZlDMNktjNTWF/VKImibB+4IK3kjE+00 Ex4da1Z7kjt7AGbtzSTJxhFxCreJFW0NUpyAxnV9ietXPVlfyJzPehfH4ejwG9XJgrUn/PXf PQAz7h3wM/FNZlxRYSURoj7GdSSGKJssKSd7Nx2sPYEYbJAU5LF9tk8Q==; From: Peter Marko To: openembedded-core@lists.openembedded.org Cc: peter.marko@siemens.com Subject: [wrynose][RFC PATCH 04/11] python3-sbom-cve-check: update to version 1.3.2 Date: Sat, 8 Aug 2026 12:51:40 +0200 Message-ID: <20260808105147.42294-5-peter.marko@siemens.com> In-Reply-To: <20260808105147.42294-1-peter.marko@siemens.com> References: <20260808105147.42294-1-peter.marko@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-256628:519-21489:flowmailer List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Sat, 08 Aug 2026 10:52:40 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/243041 From: "Benjamin Robin (Schneider Electric)" For details on this new release, see: https://github.com/bootlin/sbom-cve-check/releases/tag/v1.3.2 Signed-off-by: Benjamin Robin (Schneider Electric) Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie (From OE-Core rev: cd6313d94ac221dc37c30ffec8c83b6c8d1deeff) Signed-off-by: Peter Marko --- ...-sbom-cve-check_1.3.1.bb => python3-sbom-cve-check_1.3.2.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-devtools/sbom-cve-check/{python3-sbom-cve-check_1.3.1.bb => python3-sbom-cve-check_1.3.2.bb} (82%) diff --git a/meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.1.bb b/meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.2.bb similarity index 82% rename from meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.1.bb rename to meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.2.bb index 8120848a66..f14901e300 100644 --- a/meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.1.bb +++ b/meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.2.bb @@ -5,7 +5,7 @@ LICENSE = "GPL-2.0-or-later" LIC_FILES_CHKSUM = "file://LICENSE;md5=570a9b3749dd0463a1778803b12a6dce" PYPI_PACKAGE = "sbom_cve_check" -SRC_URI[sha256sum] = "675828b2f02f11620b7a229853a24d09264bf41161be5fbb80a92456f46a14e0" +SRC_URI[sha256sum] = "0a7f07a0c6ce45d40adc6d311ddc25c4466f59bafcbce149b6fb3663791a5d89" inherit pypi python_hatchling From patchwork Sat Aug 8 10:51:41 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Peter Marko X-Patchwork-Id: 94789 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id C0DF9C5AD2C for ; Sat, 8 Aug 2026 10:52:40 +0000 (UTC) Received: from mta-65-225.siemens.flowmailer.net (mta-65-225.siemens.flowmailer.net [185.136.65.225]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.3556.1786186357655113862 for ; Sat, 08 Aug 2026 03:52:37 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=peter.marko@siemens.com header.s=fm1 header.b=YDsLGH+r; spf=pass (domain: rts-flowmailer.siemens.com, ip: 185.136.65.225, mailfrom: fm-256628-202608081052352272e26164000207e8-6gr_ci@rts-flowmailer.siemens.com) Received: by mta-65-225.siemens.flowmailer.net with ESMTPSA id 202608081052352272e26164000207e8 for ; Sat, 08 Aug 2026 12:52:36 +0200 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; s=fm1; d=siemens.com; i=peter.marko@siemens.com; h=Date:From:Subject:To:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding:Cc:References:In-Reply-To; bh=TEYQK8pLDLa+qL6iVoNntljLT7kaimhEqUEzjC39L7g=; b=YDsLGH+rkNanZaYhAkBr5+DQxCT+x8omTRLy+yst+HVkSvaEBC92VXFq210Jytz6LvwTdc pe2pqQtSx1g+KqTyk69yf0lrM+on7N7RKRC0jNHhSKci940gplxD68s5OQY3ndDZ+UAbEpGU TXfMcA5hHvo9LZt7rVNB79s86jwJdsROqYbCg1bxA62ASbyMlvsCFd8gSfXlBZJ5jYic5FYC biikaHP3Og3CfCgOw8elEOLD1MmqAzAbX3XIx8STb6GiBK8zbp3cvY+d/I5K3CXBCN4VmQW+ 3SDqlaKihgrj039C3eVC2OV8MFdNOpdukNaLYSKYgeeReIIs6x4dCcdw==; From: Peter Marko To: openembedded-core@lists.openembedded.org Cc: peter.marko@siemens.com Subject: [wrynose][RFC PATCH 05/11] sbom-cve-check-update-cvelist-native: update to version 2026-06-24 Date: Sat, 8 Aug 2026 12:51:41 +0200 Message-ID: <20260808105147.42294-6-peter.marko@siemens.com> In-Reply-To: <20260808105147.42294-1-peter.marko@siemens.com> References: <20260808105147.42294-1-peter.marko@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-256628:519-21489:flowmailer List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Sat, 08 Aug 2026 10:52:40 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/243042 From: "Benjamin Robin (Schneider Electric)" Update cvelistV5 to the CVE database from 2026-06-24. Signed-off-by: Benjamin Robin (Schneider Electric) Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie (From OE-Core rev: f7a706321eb783ad43d8d9666ea3536024cb5be8) Signed-off-by: Peter Marko --- ...07.bb => sbom-cve-check-update-cvelist-native_2026-06-24.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-devtools/sbom-cve-check/{sbom-cve-check-update-cvelist-native_2026-05-07.bb => sbom-cve-check-update-cvelist-native_2026-06-24.bb} (89%) diff --git a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-05-07.bb b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-06-24.bb similarity index 89% rename from meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-05-07.bb rename to meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-06-24.bb index 7670172c40..ca192bc9cf 100644 --- a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-05-07.bb +++ b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-06-24.bb @@ -6,7 +6,7 @@ HOMEPAGE = "https://github.com/CVEProject/cvelistV5" SRC_URI = "git://github.com/CVEProject/cvelistV5.git;branch=main;protocol=https;destsuffix=" SBOM_CVE_CHECK_DB_NAME = "cvelist" -SRCREV = "dd0e93c75034d0167498174c886a56729edc44de" +SRCREV = "966bddf787997b471325e065cae82702a60c64ff" UPSTREAM_CHECK_GITTAGREGEX = "(?P.+)_baseline" require sbom-cve-check-update-db.inc From patchwork Sat Aug 8 10:51:42 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Peter Marko X-Patchwork-Id: 94791 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id B768AC5AC67 for ; Sat, 8 Aug 2026 10:52:50 +0000 (UTC) Received: from mta-64-225.siemens.flowmailer.net (mta-64-225.siemens.flowmailer.net [185.136.64.225]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.3557.1786186362414032632 for ; Sat, 08 Aug 2026 03:52:42 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=peter.marko@siemens.com header.s=fm1 header.b=XpUbvdZD; spf=pass (domain: rts-flowmailer.siemens.com, ip: 185.136.64.225, mailfrom: fm-256628-20260808105240896ccce88b0002074b-q1e2qo@rts-flowmailer.siemens.com) Received: by mta-64-225.siemens.flowmailer.net with ESMTPSA id 20260808105240896ccce88b0002074b for ; Sat, 08 Aug 2026 12:52:40 +0200 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; s=fm1; d=siemens.com; i=peter.marko@siemens.com; h=Date:From:Subject:To:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding:Cc:References:In-Reply-To; bh=1MFUPl+BusL8mVli2oBO1LpS6EckVsBMvM4LWIQ+H5s=; b=XpUbvdZDAA6sb7avttiokrt5TT2pXbm5VVcDsioid3b0kdIihlhYNDmrli+CuHabc3YeWx RTD2tJ5yOhikb3+J1b4r9p8DvvM2CmBEv641/47cLd+/HrgD5EEM41REWfhD9F8U/XoB4Gvf rPmuXZX5QAjy9EiteZhw1PFeIZ2EB0k3O4Yvi5MQ5VwfevwyGhsWmL5t32ps3o65ddYeYU1x RdHVZzkDaYxKjKVtlbR3odvoKHFXU8dq+G3WkPlpipU9hSQPQITY0zeshlUyot3Fd98/1LwR 0CqfpH+RRI8+EEaYHt7m8+bLdfaK5byjnU5HblD/sZ/h+AjxCJ9XNmzg==; From: Peter Marko To: openembedded-core@lists.openembedded.org Cc: peter.marko@siemens.com Subject: [wrynose][RFC PATCH 06/11] sbom-cve-check-update-nvd-native: update to version 2026.06.24-000003 Date: Sat, 8 Aug 2026 12:51:42 +0200 Message-ID: <20260808105147.42294-7-peter.marko@siemens.com> In-Reply-To: <20260808105147.42294-1-peter.marko@siemens.com> References: <20260808105147.42294-1-peter.marko@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-256628:519-21489:flowmailer List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Sat, 08 Aug 2026 10:52:50 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/243043 From: "Benjamin Robin (Schneider Electric)" Update fkie-cad/nvd-json-data-feeds to the CVE database from 2026-06-24. Signed-off-by: Benjamin Robin (Schneider Electric) Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie (From OE-Core rev: fba290297e9bbc8c6c4086e7784ece5d06dbd26d) Signed-off-by: Peter Marko --- ...bb => sbom-cve-check-update-nvd-native_2026.06.24-000003.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-devtools/sbom-cve-check/{sbom-cve-check-update-nvd-native_2026.06.09-000006.bb => sbom-cve-check-update-nvd-native_2026.06.24-000003.bb} (89%) diff --git a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.06.09-000006.bb b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.06.24-000003.bb similarity index 89% rename from meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.06.09-000006.bb rename to meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.06.24-000003.bb index 2917c89e62..73d9e77692 100644 --- a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.06.09-000006.bb +++ b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.06.24-000003.bb @@ -6,7 +6,7 @@ HOMEPAGE = "https://github.com/fkie-cad/nvd-json-data-feeds" SRC_URI = "git://github.com/fkie-cad/nvd-json-data-feeds.git;branch=main;protocol=https;destsuffix=" SBOM_CVE_CHECK_DB_NAME = "nvd-fkie" -SRCREV = "7ff4a0622bfdf5313c79635951112d2a45bbe9fd" +SRCREV = "11e62eba27133a54836b7a081d05ff96f72d879b" UPSTREAM_CHECK_GITTAGREGEX = "v(?P.+)" require sbom-cve-check-update-db.inc From patchwork Sat Aug 8 10:51:43 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Peter Marko X-Patchwork-Id: 94790 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id C77CCC5AD2C for ; Sat, 8 Aug 2026 10:52:50 +0000 (UTC) Received: from mta-64-225.siemens.flowmailer.net (mta-64-225.siemens.flowmailer.net [185.136.64.225]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.3558.1786186367402154285 for ; Sat, 08 Aug 2026 03:52:47 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=peter.marko@siemens.com header.s=fm1 header.b=Hx1YQXiH; spf=pass (domain: rts-flowmailer.siemens.com, ip: 185.136.64.225, mailfrom: fm-256628-20260808105245755828bc8700020784-abhrqy@rts-flowmailer.siemens.com) Received: by mta-64-225.siemens.flowmailer.net with ESMTPSA id 20260808105245755828bc8700020784 for ; Sat, 08 Aug 2026 12:52:45 +0200 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; s=fm1; d=siemens.com; i=peter.marko@siemens.com; h=Date:From:Subject:To:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding:Cc:References:In-Reply-To; bh=AXPof1TBBys/6mCx2GEdIyyYyV804MwxgSH+cJLE7fk=; b=Hx1YQXiH3l8zCKPV7rdCRThnuxl4rj455Nh1+65vY+JA048CiEtoq/uq2V2jJ6B1Pg5TxI 4o5aBN468J6u/E/rZW+LD/gAHepnQQOMkkQkBgN9LTzN7iNCapON8PVpF/5XIDHWQnvRep2/ 87PRWSK7IOQ9a5YayI+Oedi2BQ7jHhjTiq0TqTH6vBMpd7CHjrO6UZ99iG0H/tpKPWs3Trlj mN8U/C4fF0VfoFsnOVPB9SmR5WAV1ef6OB04N1XK580pyI+L0VZmEJLG+0wzq0olBAK2hCeF bevXqZEIWuQ/lmZggEclUtABwmko0iDi6YgJrt0B4/hI/9mxDfPnxxaA==; From: Peter Marko To: openembedded-core@lists.openembedded.org Cc: peter.marko@siemens.com Subject: [wrynose][RFC PATCH 07/11] sbom-cve-check-update-cvelist-native: -> 2026-07-23 Date: Sat, 8 Aug 2026 12:51:43 +0200 Message-ID: <20260808105147.42294-8-peter.marko@siemens.com> In-Reply-To: <20260808105147.42294-1-peter.marko@siemens.com> References: <20260808105147.42294-1-peter.marko@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-256628:519-21489:flowmailer List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Sat, 08 Aug 2026 10:52:50 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/243044 From: Tim Orling The diff is quite large, but a partial comparison can be seen: https://github.com/CVEProject/cvelistV5/compare/2026-06-24_baseline..2026-07-23_baseline Signed-off-by: Tim Orling Signed-off-by: Richard Purdie (From OE-Core rev: 1323691ceab2a338c4d5b9c15624b8d22c472e7f) Signed-off-by: Peter Marko --- ...24.bb => sbom-cve-check-update-cvelist-native_2026-07-23.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-devtools/sbom-cve-check/{sbom-cve-check-update-cvelist-native_2026-06-24.bb => sbom-cve-check-update-cvelist-native_2026-07-23.bb} (89%) diff --git a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-06-24.bb b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-07-23.bb similarity index 89% rename from meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-06-24.bb rename to meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-07-23.bb index ca192bc9cf..0e664d89e0 100644 --- a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-06-24.bb +++ b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-07-23.bb @@ -6,7 +6,7 @@ HOMEPAGE = "https://github.com/CVEProject/cvelistV5" SRC_URI = "git://github.com/CVEProject/cvelistV5.git;branch=main;protocol=https;destsuffix=" SBOM_CVE_CHECK_DB_NAME = "cvelist" -SRCREV = "966bddf787997b471325e065cae82702a60c64ff" +SRCREV = "7a274ec07043f54c07d0a3b5c7fc89ba5793f023" UPSTREAM_CHECK_GITTAGREGEX = "(?P.+)_baseline" require sbom-cve-check-update-db.inc From patchwork Sat Aug 8 10:51:44 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Peter Marko X-Patchwork-Id: 94793 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id B6615C5AD2B for ; Sat, 8 Aug 2026 10:53:00 +0000 (UTC) Received: from mta-65-227.siemens.flowmailer.net (mta-65-227.siemens.flowmailer.net [185.136.65.227]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.3561.1786186372085302705 for ; Sat, 08 Aug 2026 03:52:52 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=peter.marko@siemens.com header.s=fm1 header.b=iRCfKjZy; spf=pass (domain: rts-flowmailer.siemens.com, ip: 185.136.65.227, mailfrom: fm-256628-20260808105250eeccc4e4f7000207e0-08hsgy@rts-flowmailer.siemens.com) Received: by mta-65-227.siemens.flowmailer.net with ESMTPSA id 20260808105250eeccc4e4f7000207e0 for ; Sat, 08 Aug 2026 12:52:50 +0200 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; s=fm1; d=siemens.com; i=peter.marko@siemens.com; h=Date:From:Subject:To:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding:Cc:References:In-Reply-To; bh=I2ZXNgJyn++dcT83JGBFjMDQcWAkNTyCR0mKhHr2x4M=; b=iRCfKjZyyPyYdKiGdVq8H9mJMy6JRzFbtbXQSUzwf53/a3GEKQUKte5nDerVoGy5QJ8AK7 6y0KcJJezdD496TOkiv+MrT4faml31MPzD0VjtdhKU2Xeal9xgK2lpHbb89N0nExGJ60dff3 KfXizznEUWQ7R/3uydeMAmyGv8wtlCnawD9WgPJzOrbJ1Wva7GwiDfhZGGnRIv/4X2DcXPrx oJQWmWmIUxb+in9/mqtIxGTEKNJM+gAsFrsqlWBU8UIFhOWNy1rUEN+2vWefOqyZKSeA8/GH NJrdotriU7RPGhawRjCbfjfUQeQIZUBBY1sFKMLkkRE50PpwIJIHZfFg==; From: Peter Marko To: openembedded-core@lists.openembedded.org Cc: peter.marko@siemens.com Subject: [wrynose][RFC PATCH 08/11] sbom-cve-check-update-nvd-native: -> 2026.07.23-000007 Date: Sat, 8 Aug 2026 12:51:44 +0200 Message-ID: <20260808105147.42294-9-peter.marko@siemens.com> In-Reply-To: <20260808105147.42294-1-peter.marko@siemens.com> References: <20260808105147.42294-1-peter.marko@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-256628:519-21489:flowmailer List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Sat, 08 Aug 2026 10:53:00 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/243045 From: Tim Orling The diff is quite large, but a partial comparison can be seen: https://github.com/fkie-cad/nvd-json-data-feeds/compare/v2026.06.24-000003..v2026.07.23-000007 Signed-off-by: Tim Orling Signed-off-by: Richard Purdie (From OE-Core rev: 9d89b3b802bab144afa30e03b0411ae58232ef11) Signed-off-by: Peter Marko --- ...bb => sbom-cve-check-update-nvd-native_2026.07.23-000007.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-devtools/sbom-cve-check/{sbom-cve-check-update-nvd-native_2026.06.24-000003.bb => sbom-cve-check-update-nvd-native_2026.07.23-000007.bb} (89%) diff --git a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.06.24-000003.bb b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.07.23-000007.bb similarity index 89% rename from meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.06.24-000003.bb rename to meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.07.23-000007.bb index 73d9e77692..cf35b16923 100644 --- a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.06.24-000003.bb +++ b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.07.23-000007.bb @@ -6,7 +6,7 @@ HOMEPAGE = "https://github.com/fkie-cad/nvd-json-data-feeds" SRC_URI = "git://github.com/fkie-cad/nvd-json-data-feeds.git;branch=main;protocol=https;destsuffix=" SBOM_CVE_CHECK_DB_NAME = "nvd-fkie" -SRCREV = "11e62eba27133a54836b7a081d05ff96f72d879b" +SRCREV = "64a0cea215628d780438fba8bfe0f3300db1b702" UPSTREAM_CHECK_GITTAGREGEX = "v(?P.+)" require sbom-cve-check-update-db.inc From patchwork Sat Aug 8 10:51:45 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Peter Marko X-Patchwork-Id: 94794 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id CDA22C5AC67 for ; Sat, 8 Aug 2026 10:53:00 +0000 (UTC) Received: from mta-64-228.siemens.flowmailer.net (mta-64-228.siemens.flowmailer.net [185.136.64.228]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.3564.1786186376997860754 for ; Sat, 08 Aug 2026 03:52:57 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=peter.marko@siemens.com header.s=fm1 header.b=Jh4iLRcD; spf=pass (domain: rts-flowmailer.siemens.com, ip: 185.136.64.228, mailfrom: fm-256628-20260808105254ab70f38ae30002077d-hilfzi@rts-flowmailer.siemens.com) Received: by mta-64-228.siemens.flowmailer.net with ESMTPSA id 20260808105254ab70f38ae30002077d for ; Sat, 08 Aug 2026 12:52:54 +0200 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; s=fm1; d=siemens.com; i=peter.marko@siemens.com; h=Date:From:Subject:To:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding:Cc:References:In-Reply-To; bh=qFGuPa9w4L1Jk/x8ne53Gkhv2Q3nUGGJJHcVFTVAHLM=; b=Jh4iLRcDpgjGaUEUAkyhuTmDazj4lSfGKV8tvE/nARGxhADFvR3OWYuPLqksXqLAmdxeRn gOXw+Y8qqvS4iINJuM6tJsJbYZgGWg8e5vlWg+Y4RVeP5mXsU78WFXQrwtr3HlBvsugbSOBV vvIKbeGO1fMvmhoFhorhqfGcSiYFTEsvwoxOeILgONb23RFTbL16nk9epbU+dnsN8j0R8iYq 33gBYXuo4xejO03DVUx1ODEK/QIOJL0wnOkHEPHpXPKzKmyTt27RjDCbmDvJrgh9343lrZKQ rLfOv7fUuEDoHJ+KLqkmlcJKqhCWovFMXkqJKIzYaLWX0onpjNHpXExw==; From: Peter Marko To: openembedded-core@lists.openembedded.org Cc: peter.marko@siemens.com Subject: [wrynose][RFC PATCH 09/11] python3-sbom-cve-check: update to version 1.3.3 Date: Sat, 8 Aug 2026 12:51:45 +0200 Message-ID: <20260808105147.42294-10-peter.marko@siemens.com> In-Reply-To: <20260808105147.42294-1-peter.marko@siemens.com> References: <20260808105147.42294-1-peter.marko@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-256628:519-21489:flowmailer List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Sat, 08 Aug 2026 10:53:00 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/243046 From: Benjamin Robin For details on this new release, see: https://github.com/bootlin/sbom-cve-check/releases/tag/v1.3.3 Signed-off-by: Benjamin Robin (Schneider Electric) Signed-off-by: Richard Purdie (From OE-Core rev: 7feb4e30ba17a4b0eb37a1c6dde671d4491bd35d) Signed-off-by: Peter Marko --- ...-sbom-cve-check_1.3.2.bb => python3-sbom-cve-check_1.3.3.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-devtools/sbom-cve-check/{python3-sbom-cve-check_1.3.2.bb => python3-sbom-cve-check_1.3.3.bb} (82%) diff --git a/meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.2.bb b/meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.3.bb similarity index 82% rename from meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.2.bb rename to meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.3.bb index f14901e300..2aca100569 100644 --- a/meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.2.bb +++ b/meta/recipes-devtools/sbom-cve-check/python3-sbom-cve-check_1.3.3.bb @@ -5,7 +5,7 @@ LICENSE = "GPL-2.0-or-later" LIC_FILES_CHKSUM = "file://LICENSE;md5=570a9b3749dd0463a1778803b12a6dce" PYPI_PACKAGE = "sbom_cve_check" -SRC_URI[sha256sum] = "0a7f07a0c6ce45d40adc6d311ddc25c4466f59bafcbce149b6fb3663791a5d89" +SRC_URI[sha256sum] = "8b766be1ae92b4eceaa2f694dd4724e310886c6436f44267a6bbc6a7b81ab8b9" inherit pypi python_hatchling From patchwork Sat Aug 8 10:51:46 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Peter Marko X-Patchwork-Id: 94792 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id B9F61C5AD2C for ; Sat, 8 Aug 2026 10:53:00 +0000 (UTC) Received: from mta-64-228.siemens.flowmailer.net (mta-64-228.siemens.flowmailer.net [185.136.64.228]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.3564.1786186376997860754 for ; Sat, 08 Aug 2026 03:52:59 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=peter.marko@siemens.com header.s=fm1 header.b=i0hP1T06; spf=pass (domain: rts-flowmailer.siemens.com, ip: 185.136.64.228, mailfrom: fm-256628-202608081052585dc2a53acf000207c1-rqktdk@rts-flowmailer.siemens.com) Received: by mta-64-228.siemens.flowmailer.net with ESMTPSA id 202608081052585dc2a53acf000207c1 for ; Sat, 08 Aug 2026 12:52:58 +0200 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; s=fm1; d=siemens.com; i=peter.marko@siemens.com; h=Date:From:Subject:To:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding:Cc:References:In-Reply-To; bh=6AgxFYG2xBjL19ULedwm3cvmVbs/Jr8K04BarnXkn8I=; b=i0hP1T067Euzu1HusJ6M7Swg5eG3zHGTbZ/KbNcbCIhdCZvafBwncNLhgkfYUNcNt5eRex 3sU5drh8e+moChiDmgax2A3zI0fgDZSzGUxePJMfXwj/9B5EPOu2Exg1g5JkwG47DnHdawo4 /em0GLT3mAsEhoJgcnITdKqMvisCFi9o5XJTU/zQakwWXt/18PeHP4IMnUmM0+z39QnowLdU iUhho4IwsP6juAPzoO+YCdFPYpz2qzzlgz46cGK7NPxyUoenkGkPVbfDo0K4adS4p9vfHhAG rNrN6DaMMr3R5jfWrxO9Ogldncgf5Gl3fbP417a9eULqNeMj8uJKD2fw==; From: Peter Marko To: openembedded-core@lists.openembedded.org Cc: peter.marko@siemens.com Subject: [wrynose][RFC PATCH 10/11] sbom-cve-check-update-cvelist-native: update to version 2026-08-03 Date: Sat, 8 Aug 2026 12:51:46 +0200 Message-ID: <20260808105147.42294-11-peter.marko@siemens.com> In-Reply-To: <20260808105147.42294-1-peter.marko@siemens.com> References: <20260808105147.42294-1-peter.marko@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-256628:519-21489:flowmailer List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Sat, 08 Aug 2026 10:53:00 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/243047 From: Benjamin Robin Update cvelistV5 to the CVE database from 2026-08-03. Signed-off-by: Benjamin Robin (Schneider Electric) Signed-off-by: Richard Purdie (From OE-Core rev: 25e68deb8178f7021605a39fa85acea04a375372) Signed-off-by: Peter Marko --- ...23.bb => sbom-cve-check-update-cvelist-native_2026-08-03.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-devtools/sbom-cve-check/{sbom-cve-check-update-cvelist-native_2026-07-23.bb => sbom-cve-check-update-cvelist-native_2026-08-03.bb} (89%) diff --git a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-07-23.bb b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-08-03.bb similarity index 89% rename from meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-07-23.bb rename to meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-08-03.bb index 0e664d89e0..aa21b06953 100644 --- a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-07-23.bb +++ b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-08-03.bb @@ -6,7 +6,7 @@ HOMEPAGE = "https://github.com/CVEProject/cvelistV5" SRC_URI = "git://github.com/CVEProject/cvelistV5.git;branch=main;protocol=https;destsuffix=" SBOM_CVE_CHECK_DB_NAME = "cvelist" -SRCREV = "7a274ec07043f54c07d0a3b5c7fc89ba5793f023" +SRCREV = "b160e6f2915ac726b29ee0689fc920f5016abef5" UPSTREAM_CHECK_GITTAGREGEX = "(?P.+)_baseline" require sbom-cve-check-update-db.inc From patchwork Sat Aug 8 10:51:47 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Peter Marko X-Patchwork-Id: 94795 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id CF863C5AD2B for ; Sat, 8 Aug 2026 10:53:10 +0000 (UTC) Received: from mta-64-228.siemens.flowmailer.net (mta-64-228.siemens.flowmailer.net [185.136.64.228]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.3514.1786186384076201563 for ; Sat, 08 Aug 2026 03:53:04 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=peter.marko@siemens.com header.s=fm1 header.b=FAqUZls4; spf=pass (domain: rts-flowmailer.siemens.com, ip: 185.136.64.228, mailfrom: fm-256628-2026080810530274201791e9000207f1-0cpora@rts-flowmailer.siemens.com) Received: by mta-64-228.siemens.flowmailer.net with ESMTPSA id 2026080810530274201791e9000207f1 for ; Sat, 08 Aug 2026 12:53:02 +0200 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; s=fm1; d=siemens.com; i=peter.marko@siemens.com; h=Date:From:Subject:To:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding:Cc:References:In-Reply-To; bh=q0UK9ZcaptuDIZEDGiegcgo3etoQWiQP+LaUe0tnzPQ=; b=FAqUZls4a7eYZg7IhT7pfNgI95cpKgnKnrrcWElg7c5reDZkWZkzySHBRLmfPKlJHO3k6C a3r5mM4lnzm1CVeN2w445hmFl2EdCv1dMpsS7YM6yML58d7qINFwa57vNtoJvwuj6Wavw6fj Y50cv9bjJX5rlObZNY7CKITS3D3frIu51dmJMZFNDndZNVWW2jpXYClu4CkaD2cZOJOi+lts 4h4+2mWZCsuLsMP7gTDQZU7tNnth3OoY6M2Jqk7xa6dsKwumriyIucXNK4oBgaiSFU6G0umk 1FUlJQdoegj+H6TFADB0ZO/PkaD0t7NMVE+kjmmG6aC3x++gR/XRVW1g==; From: Peter Marko To: openembedded-core@lists.openembedded.org Cc: peter.marko@siemens.com Subject: [wrynose][RFC PATCH 11/11] sbom-cve-check-update-nvd-native: update to version 2026.08.03-000011 Date: Sat, 8 Aug 2026 12:51:47 +0200 Message-ID: <20260808105147.42294-12-peter.marko@siemens.com> In-Reply-To: <20260808105147.42294-1-peter.marko@siemens.com> References: <20260808105147.42294-1-peter.marko@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-256628:519-21489:flowmailer List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Sat, 08 Aug 2026 10:53:10 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/243048 From: Benjamin Robin Update fkie-cad/nvd-json-data-feeds to the CVE database from 2026.08.03. Signed-off-by: Benjamin Robin (Schneider Electric) Signed-off-by: Richard Purdie (From OE-Core rev: 5928cf1985d65b5dc7a909df596d7ff91533fccd) Signed-off-by: Peter Marko --- ...bb => sbom-cve-check-update-nvd-native_2026.08.03-000011.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-devtools/sbom-cve-check/{sbom-cve-check-update-nvd-native_2026.07.23-000007.bb => sbom-cve-check-update-nvd-native_2026.08.03-000011.bb} (89%) diff --git a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.07.23-000007.bb b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.08.03-000011.bb similarity index 89% rename from meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.07.23-000007.bb rename to meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.08.03-000011.bb index cf35b16923..720b5ded0a 100644 --- a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.07.23-000007.bb +++ b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.08.03-000011.bb @@ -6,7 +6,7 @@ HOMEPAGE = "https://github.com/fkie-cad/nvd-json-data-feeds" SRC_URI = "git://github.com/fkie-cad/nvd-json-data-feeds.git;branch=main;protocol=https;destsuffix=" SBOM_CVE_CHECK_DB_NAME = "nvd-fkie" -SRCREV = "64a0cea215628d780438fba8bfe0f3300db1b702" +SRCREV = "b9f52bb052695dac5cabbd58e049eaac73697161" UPSTREAM_CHECK_GITTAGREGEX = "v(?P.+)" require sbom-cve-check-update-db.inc