From patchwork Thu Aug 13 15:21:51 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Fabien Thomas X-Patchwork-Id: 95094 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 95028C5CFEB for ; Thu, 13 Aug 2026 15:22:33 +0000 (UTC) Received: from mail-wr1-f52.google.com (mail-wr1-f52.google.com [209.85.221.52]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.21784.1786634543541640861 for ; Thu, 13 Aug 2026 08:22:23 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=xu9KO4tT; spf=pass (domain: smile.fr, ip: 209.85.221.52, mailfrom: fabien.thomas@smile.fr) Received: by mail-wr1-f52.google.com with SMTP id ffacd0b85a97d-47f93b2fe4cso502965f8f.0 for ; Thu, 13 Aug 2026 08:22:23 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1786634542; x=1787239342; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to:content-type; bh=xiDj5rjAGvS/ZsPre8YsIb92mZ/JO86A+0F0UBTmouI=; b=xu9KO4tTUZTguZQnFEkUWZ4BwULk2oQU95qho/P6+KfhHKij8M3xaVj2Owi93hc8RL +gH+yc+pli254vlp0ZDv/P9P2aWtfsG6nvc7M5P2ETDEkrjYeqWQAgp8xOBTdXkCDDoo 35nyt1qIWH+5DZHdH/Eovln1lTSAxU/vK341I= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1786634542; x=1787239342; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to:content-type; bh=xiDj5rjAGvS/ZsPre8YsIb92mZ/JO86A+0F0UBTmouI=; b=TCnLLuLDPYJ2ebdNnfmyVUVesCCnpVdlVX/HPn0XdlgeYOUEa8AcX4sFqyw0Y0NWjI JZdmVQpGfbHANWiYrNDzblsZNUxUgddrR/peOxfetx7OwIz3eNsNRMY1saMO2fXWuHnt yMzw+BDXxFpwmZ/PDX7xceqz55+VMThvvD2bC8CKvTOUgG8Fk0nc1W1xMNO+Tixkkzzc ptfgekygFniPC6UhNftNOq14PxKYQat8TXw4Bpvms7KvZM7A1mNDRvWTuZQiwWdFbpri PKlfrMlnNMLoVZ3t3K7MkW2GS2zItnEdpwrKJVf0efGoYN1wHF4eZ9649hFguG/FS4pS F9jg== X-Gm-Message-State: AOJu0YzdNMm+Iv/laPgVQZl3QR2EFNjgMZehjQqHKXxn9ZyJ23rYZeM2 1NCc+wwfNIQmzepmZ/SIXqxaq6y1lyndE168mO6R8bAtiSxDIyc880cLib8gXydRXOx9WiGoX3U /FQkajKV8zQ== X-Gm-Gg: AR+sD139d6lIA90xz1wYGsX1CU4e97a2urrBNv5eAwG5rxG+0s48FKQ/VBh/9ucWffZ m757Vc+xWIzdYnbMwA7f+qtQw2SR8pP8d5eikAxQ05VQChIIUx6N6gWjlV+atSt6DFIHZ/FYAbA /54jrhdoY+kUe9X1qxFUUVBCc/syAUXYxI37PoA4jUsU2N7hLHlOXu1WdarPLrmPz1vj9wQBc5b xCCAnQvSBN5BsEZGNiZ97At2clWLYTcZjAwkxWarB6JspjWs6R89ArLSQ54lBXbkjw7Pm2SjCj7 73VVz6Mv+k80ssHCgWE+riPGViCCwYBfr5BhC/uzXmecMu4Vm8d4T+ON6+h3KLH/oATV2xYyZPm n+PfEVX37JdTRQToNDJN1CqGK5gfydBMTnQn5ptaMtfW6hTzWO+Rf54x7cRBKP4+UI5WnBWpmux cgvzvelwf/nl4vYXADIF1EaxJlXuMmucaI9XzP8GzYwXDtckaJe/U9S3R2eGQchTg0+ZaREn9k/ h5pOl6WCvMqz6VGFDcvnK+A/UgaDAUK3DjOK5FvRJDf730aqf41I5f3c5oMF/l5WWyc5vRNSzzX SNenEx7Y+3tUCDieZRSuOgwwe9Drl9Zrj8OD4sn0 X-Received: by 2002:a5d:64cb:0:b0:481:51b5:7503 with SMTP id ffacd0b85a97d-48159cbfa53mr10909283f8f.7.1786634541755; Thu, 13 Aug 2026 08:22:21 -0700 (PDT) Received: from FRSMI25-GIGUE (static-css-ccs-204145.business.bouyguestelecom.com. [176.157.204.145]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4815f21a068sm110450f8f.12.2026.08.13.08.22.21 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 13 Aug 2026 08:22:21 -0700 (PDT) From: Fabien Thomas To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 01/17] selftest: uboot: remove duplicated KVM presence test Date: Thu, 13 Aug 2026 17:21:51 +0200 Message-ID: <19e2414c7ec6e95fe36d13f0b2a83a273c0141b0.1786633048.git.fabien.thomas@smile.fr> X-Mailer: git-send-email 2.55.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Thu, 13 Aug 2026 15:22:33 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/243358 From: Yoann Congal test_boot_uboot_kvm_to_full_target test, needs a working KVM. It checked it with the kvm-ok tool but that tool is not documented as a requirement. Also, the check is also done by runqemu called later in the test. Remove it from the test and let runqemu have the responsibility of checking for KVM. Note that the KVM check now happens *after* the image build instead of before it. Signed-off-by: Yoann Congal Signed-off-by: Richard Purdie (cherry picked from commit 6a91494f29a1f9da28280bc93771714c4545da46) Signed-off-by: Fabien Thomas --- meta/lib/oeqa/selftest/cases/uboot.py | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/meta/lib/oeqa/selftest/cases/uboot.py b/meta/lib/oeqa/selftest/cases/uboot.py index 2e4530fddd..847fa205a1 100644 --- a/meta/lib/oeqa/selftest/cases/uboot.py +++ b/meta/lib/oeqa/selftest/cases/uboot.py @@ -9,7 +9,7 @@ import os import textwrap from oeqa.selftest.case import OESelftestTestCase -from oeqa.utils.commands import bitbake, runqemu, get_bb_var, get_bb_vars, runCmd +from oeqa.utils.commands import bitbake, runqemu, get_bb_var, get_bb_vars from oeqa.core.decorator.data import skipIfNotArch, skipIfNotBuildArch from oeqa.core.decorator import OETestTag @@ -51,11 +51,9 @@ QEMU_USE_KVM = "False" def test_boot_uboot_kvm_to_full_target(self): """ Tests building u-boot and booting it with QEMU and KVM. - Requires working KVM on build host. See "kvm-ok" output. + Requires working KVM on build host. """ - runCmd("kvm-ok") - image = "core-image-minimal" vars = get_bb_vars(['HOST_ARCH', 'BUILD_ARCH'], image) host_arch = vars['HOST_ARCH'] From patchwork Thu Aug 13 15:21:52 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Fabien Thomas X-Patchwork-Id: 95104 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 26206C5DF6D for ; Thu, 13 Aug 2026 15:22:34 +0000 (UTC) Received: from mail-wr1-f54.google.com (mail-wr1-f54.google.com [209.85.221.54]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.21785.1786634545066047827 for ; Thu, 13 Aug 2026 08:22:25 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=bcn17SDE; spf=pass (domain: smile.fr, ip: 209.85.221.54, mailfrom: fabien.thomas@smile.fr) Received: by mail-wr1-f54.google.com with SMTP id ffacd0b85a97d-47f71156e1aso403206f8f.3 for ; Thu, 13 Aug 2026 08:22:24 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1786634543; x=1787239343; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to:content-type; bh=Cj/PBLo4eHtJwjsHzKWIcs3jeW5+VxLwnie4cwnwJKc=; b=bcn17SDEi8RvqXiTC32QAvpxx9Iw4GH1M9oeUfkY9ups5lnWziQMYbqgnFJYaxkjtI /eyC19VWA1PqGDM239QEkmB8ouR1gpsfcLPXwa9S8lQ22ugPnTjciAZybH1I2/FUoxUg W1ePRw7Jhf+cm4Igzt36POoh6P/YvUIBsNicQ= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1786634543; x=1787239343; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to:content-type; bh=Cj/PBLo4eHtJwjsHzKWIcs3jeW5+VxLwnie4cwnwJKc=; b=PFGvpQ9FHg6tLiXmKUZPCI0gA5I8WxnBULNf7L7r20HqlLqby0IV+Ikd+4fY8764Nl PvjbCF7rzXGyspWxRREX26xbuCb/uJNo/llWKGCHwszjtZRyvbkXO3h09N8h5yF5XKkQ gup7aVD4JjDBivb2yT0zRPJs8xD91eF21rjg/QvOcihT5RU1kZ/dewRXCkeQGcbKTKO+ Qyfwlkfi9qiAi5jEkl8HjEM2rptM22YqHH9Egs/tzYrSOCJ7RSEJLDbGp6reOXHuR+kQ XMqm5WiqczmyMPjeZ4YiuPggO/zVragmtIhtHKbLnSeHfEHeA+q43zEAPRvrsh00Nxae 4gGA== X-Gm-Message-State: AOJu0YwNP0yB8Dcql26Yjxrm8lNzzK1ZtI6A6tvbIwVI6+ojH2EVe1tQ Os3kDKFFiJVoTq61K7dMq0by8PYRSnPjZYPVvd8kfE1wAdCofW3fYsVZQ2u4AmZlc1KC/UAFRGo TpSWftvb3jA== X-Gm-Gg: AR+sD12n3nk7yg2jiYHdaps54MNnZigIYse3kBuPtogdzJyOLNEu9xOiAAvD3mKxJMj Y7H89378F7yVa7UL89Y0c0zCwwgque3un8zI+s9DMPjvFZF/mYasW3XpEdjEj1N9dgtrzKshaNJ T3eJo7hOyl5lkahQIDaRxPzKghx+s7reuPxYq+jmJxefRFOhgftrVbsLRzhbXfmBRWlEYo4jCGq eHKFlvgSzGV3uD8nZDWjuSoZwX1mqAtsL8Zey9h8jZrdW6WgE0P6OjgGXiaHZsdoEgH0AftUA6i rl4c3ZUBdqS/Fgr6vZ7z6aWjT6FuYCUujap9Kht9kGXTzJmkhqoqbqC7p1r+EYp9vbrFt+syWpQ /CrQcCmoNFZ750k+E8TiSxbgo6qawzKwM1XSfOivVvpOQGYc9Rxj1jMvDozA+sAX8EmZAxxeChW 0njjKBgFB7o08ORITbDUGASR0TOtbcVZE/XRMNa7K85r7Z8WR+46OgrBm5ZIb832djK/8Q2INga SuN0oP+V5n9HoB0B8ES6hxFbKMAi4P2ipglV7XdvFEJFHVxY/orNgJdejd6PlEPKOJbdEjZ+VKw sXLBAT9Y6zs2gc4+eqYfYXDVYyo7zPdkq3xSYT0p X-Received: by 2002:a5d:58f1:0:b0:47f:8b9e:f44e with SMTP id ffacd0b85a97d-48159eb6d7fmr7862642f8f.12.1786634543103; Thu, 13 Aug 2026 08:22:23 -0700 (PDT) Received: from FRSMI25-GIGUE (static-css-ccs-204145.business.bouyguestelecom.com. [176.157.204.145]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4815f21a068sm110450f8f.12.2026.08.13.08.22.22 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 13 Aug 2026 08:22:22 -0700 (PDT) From: Fabien Thomas To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 02/17] bind: upgrade 9.20.23 -> 9.20.26 Date: Thu, 13 Aug 2026 17:21:52 +0200 Message-ID: X-Mailer: git-send-email 2.55.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Thu, 13 Aug 2026 15:22:34 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/243359 From: Jaipaul Cheernam Changelog: https://ftp.isc.org/isc/bind9/9.20.26/doc/arm/html/notes.html This upgrade fixes the following CVEs: - [CVE-2026-11331] Fix handling of rpz CNAME expansion that returns name too long. Previously, if the expansion of a wildcard CNAME RPZ policy resulted in a name that exceeded the length limit, a self referential CNAME and the original address record were returned, allowing the policy to be bypassed. - [CVE-2026-11721] Invalid signed wildcard records were being accepted. Signed wildcard responses in which the Labels field in the RRSIG record was less than the number of labels in the Signer Name field were being incorrectly accepted. - [CVE-2026-13321] Fix DNSSEC validation bypass via out-of-zone NSEC Next Field. A malicious zone with out-of-zone NSEC next owner names can cause a DNSSEC validating resolver to cache such record and generate negative answers for any zone that is covered by the range. - [CVE-2026-10723] Correct verification of NSEC3 signer name. BIND 9 accepted child-zone NSEC3 records where the first label equals the hash of the parent zone as valid parent-zone closest encloser proofs. - [CVE-2026-12617] Do not assert for some specific CNAME and DNAME queries. A bug in the resolver's handling of certain cached DNAME and CNAME responses could cause named to trigger an assertion failure and exit. - [CVE-2026-10822] Malformed DNSKEY records could trigger an assertion. Previously, dns_name_fromwire() did not honor the record boundary when reading names from the wire, allowing malformed records to be accepted when they should not have been. Signed-off-by: Jaipaul Cheernam Signed-off-by: Fabien Thomas --- .../bind/bind/0001-avoid-start-failure-with-bind-user.patch | 2 +- .../0001-m4-Backport-ax_prog_cc_for_build.m4-macros.patch | 2 +- ...01-named-lwresd-V-and-start-log-hide-build-options.patch | 4 ++-- ...nd-ensure-searching-for-json-headers-searches-sysr.patch | 6 +++--- meta/recipes-connectivity/bind/bind/conf.patch | 2 +- .../bind/bind/init.d-add-support-for-read-only-rootfs.patch | 2 +- .../bind/bind/make-etc-initd-bind-stop-work.patch | 2 +- .../bind/{bind_9.20.23.bb => bind_9.20.26.bb} | 2 +- 8 files changed, 11 insertions(+), 11 deletions(-) rename meta/recipes-connectivity/bind/{bind_9.20.23.bb => bind_9.20.26.bb} (97%) diff --git a/meta/recipes-connectivity/bind/bind/0001-avoid-start-failure-with-bind-user.patch b/meta/recipes-connectivity/bind/bind/0001-avoid-start-failure-with-bind-user.patch index 4fa377a594..7ed4c5fd2f 100644 --- a/meta/recipes-connectivity/bind/bind/0001-avoid-start-failure-with-bind-user.patch +++ b/meta/recipes-connectivity/bind/bind/0001-avoid-start-failure-with-bind-user.patch @@ -1,4 +1,4 @@ -From 2a3ff2a026c55dc67655baf28e0f4175232ee0ff Mon Sep 17 00:00:00 2001 +From a67ac281cd86d8d9ca27e64a5944deb5578e5087 Mon Sep 17 00:00:00 2001 From: Chen Qi Date: Mon, 15 Oct 2018 16:55:09 +0800 Subject: [PATCH] avoid start failure with bind user diff --git a/meta/recipes-connectivity/bind/bind/0001-m4-Backport-ax_prog_cc_for_build.m4-macros.patch b/meta/recipes-connectivity/bind/bind/0001-m4-Backport-ax_prog_cc_for_build.m4-macros.patch index 7279a73e87..da4cdef696 100644 --- a/meta/recipes-connectivity/bind/bind/0001-m4-Backport-ax_prog_cc_for_build.m4-macros.patch +++ b/meta/recipes-connectivity/bind/bind/0001-m4-Backport-ax_prog_cc_for_build.m4-macros.patch @@ -1,4 +1,4 @@ -From 77f8fafab0cc91c3ad8fbf1382b1d0f2d2cd99a6 Mon Sep 17 00:00:00 2001 +From 16608520c9d946223404165732eacd79b59de471 Mon Sep 17 00:00:00 2001 From: Khem Raj Date: Fri, 10 Apr 2026 23:33:49 +0000 Subject: [PATCH] m4: Backport ax_prog_cc_for_build.m4 macros diff --git a/meta/recipes-connectivity/bind/bind/0001-named-lwresd-V-and-start-log-hide-build-options.patch b/meta/recipes-connectivity/bind/bind/0001-named-lwresd-V-and-start-log-hide-build-options.patch index 369185ad86..07acce9cba 100644 --- a/meta/recipes-connectivity/bind/bind/0001-named-lwresd-V-and-start-log-hide-build-options.patch +++ b/meta/recipes-connectivity/bind/bind/0001-named-lwresd-V-and-start-log-hide-build-options.patch @@ -1,4 +1,4 @@ -From 49ca7b5432dd6c24541bbde21bca5043cd0c000b Mon Sep 17 00:00:00 2001 +From d925183807ae182cf332124ff5a617d257e184f9 Mon Sep 17 00:00:00 2001 From: Hongxu Jia Date: Mon, 27 Aug 2018 21:24:20 +0800 Subject: [PATCH] `named/lwresd -V' and start log hide build options @@ -20,7 +20,7 @@ Signed-off-by: Armin Kuster 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/configure.ac b/configure.ac -index c3852ec..3b7a446 100644 +index af020f0..f461229 100644 --- a/configure.ac +++ b/configure.ac @@ -35,7 +35,7 @@ AC_DEFINE([PACKAGE_VERSION_EXTRA], ["][bind_VERSION_EXTRA]["], [BIND 9 Extra par diff --git a/meta/recipes-connectivity/bind/bind/bind-ensure-searching-for-json-headers-searches-sysr.patch b/meta/recipes-connectivity/bind/bind/bind-ensure-searching-for-json-headers-searches-sysr.patch index 4a066294f0..4e90e97271 100644 --- a/meta/recipes-connectivity/bind/bind/bind-ensure-searching-for-json-headers-searches-sysr.patch +++ b/meta/recipes-connectivity/bind/bind/bind-ensure-searching-for-json-headers-searches-sysr.patch @@ -1,4 +1,4 @@ -From fa165cb4a9dfeb72f0db787decd527e3d587cd4e Mon Sep 17 00:00:00 2001 +From af229781e60d6779c76d5a61d26a4597b2a42f6c Mon Sep 17 00:00:00 2001 From: Paul Gortmaker Date: Tue, 9 Jun 2015 11:22:00 -0400 Subject: [PATCH] bind: ensure searching for json headers searches sysroot @@ -32,10 +32,10 @@ Signed-off-by: Paul Gortmaker 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/configure.ac b/configure.ac -index c6a10f6..c3852ec 100644 +index f47ce7b..af020f0 100644 --- a/configure.ac +++ b/configure.ac -@@ -865,7 +865,7 @@ AS_CASE([$with_lmdb], +@@ -872,7 +872,7 @@ AS_CASE([$with_lmdb], [no],[], [auto|yes], [PKG_CHECK_MODULES([LMDB], [lmdb], [ac_lib_lmdb_found=yes], diff --git a/meta/recipes-connectivity/bind/bind/conf.patch b/meta/recipes-connectivity/bind/bind/conf.patch index ec22fe84c4..3425742d1b 100644 --- a/meta/recipes-connectivity/bind/bind/conf.patch +++ b/meta/recipes-connectivity/bind/bind/conf.patch @@ -1,4 +1,4 @@ -From 4b9f6f6735340d558d9c9fba9c84d7f99d3cbde2 Mon Sep 17 00:00:00 2001 +From bde3a4cb010f459a9ef92817c7e6e6e2d871794a Mon Sep 17 00:00:00 2001 From: Qing He Date: Tue, 30 Nov 2010 13:35:42 +0800 Subject: [PATCH] bind: add new recipe diff --git a/meta/recipes-connectivity/bind/bind/init.d-add-support-for-read-only-rootfs.patch b/meta/recipes-connectivity/bind/bind/init.d-add-support-for-read-only-rootfs.patch index fd96d46448..9b55afb5d3 100644 --- a/meta/recipes-connectivity/bind/bind/init.d-add-support-for-read-only-rootfs.patch +++ b/meta/recipes-connectivity/bind/bind/init.d-add-support-for-read-only-rootfs.patch @@ -1,4 +1,4 @@ -From 19933be78902d90014f177b5633dd15984bc1bc9 Mon Sep 17 00:00:00 2001 +From 8876e722beda701a0de021360ff381347120c6ff Mon Sep 17 00:00:00 2001 From: Chen Qi Date: Thu, 27 Mar 2014 02:34:41 +0000 Subject: [PATCH] init.d: add support for read-only rootfs diff --git a/meta/recipes-connectivity/bind/bind/make-etc-initd-bind-stop-work.patch b/meta/recipes-connectivity/bind/bind/make-etc-initd-bind-stop-work.patch index 155cc5a110..33d5d34f15 100644 --- a/meta/recipes-connectivity/bind/bind/make-etc-initd-bind-stop-work.patch +++ b/meta/recipes-connectivity/bind/bind/make-etc-initd-bind-stop-work.patch @@ -1,4 +1,4 @@ -From e429899c34ea8a4f85de428e22ee49c453281e82 Mon Sep 17 00:00:00 2001 +From 26c988eee9d2eae7c7dec8c529176352017b2ce1 Mon Sep 17 00:00:00 2001 From: Roy Li Date: Thu, 15 Nov 2012 02:27:54 +0000 Subject: [PATCH] bind: make "/etc/init.d/bind stop" work diff --git a/meta/recipes-connectivity/bind/bind_9.20.23.bb b/meta/recipes-connectivity/bind/bind_9.20.26.bb similarity index 97% rename from meta/recipes-connectivity/bind/bind_9.20.23.bb rename to meta/recipes-connectivity/bind/bind_9.20.26.bb index ebc4422b67..fe2ae3f002 100644 --- a/meta/recipes-connectivity/bind/bind_9.20.23.bb +++ b/meta/recipes-connectivity/bind/bind_9.20.26.bb @@ -21,7 +21,7 @@ SRC_URI = "https://ftp.isc.org/isc/bind9/${PV}/${BPN}-${PV}.tar.xz \ file://0001-m4-Backport-ax_prog_cc_for_build.m4-macros.patch \ " -SRC_URI[sha256sum] = "5d4475aed3f9e500ef554b2b14d972bdb83d33de214a9b3be92918ea46908371" +SRC_URI[sha256sum] = "55248def0f870c4c46b3de72978ea972615131516663188a4564dca1d20bf350" UPSTREAM_CHECK_URI = "https://ftp.isc.org/isc/bind9/" # follow the ESV versions divisible by 2 From patchwork Thu Aug 13 15:21:53 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Fabien Thomas X-Patchwork-Id: 95102 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 5444CC5DF70 for ; Thu, 13 Aug 2026 15:22:34 +0000 (UTC) Received: from mail-wr1-f52.google.com (mail-wr1-f52.google.com [209.85.221.52]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.21611.1786634545907526658 for ; Thu, 13 Aug 2026 08:22:26 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=nGp4N/W3; spf=pass (domain: smile.fr, ip: 209.85.221.52, mailfrom: fabien.thomas@smile.fr) Received: by mail-wr1-f52.google.com with SMTP id ffacd0b85a97d-47f3b39f2a1so2086236f8f.2 for ; Thu, 13 Aug 2026 08:22:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1786634544; x=1787239344; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to:content-type; bh=jWcupkKXEk1DDuBsNoKcen203SZmkMyjR8KKJICYHyk=; b=nGp4N/W3FVMRO0zPxiHeBgnVdrT7csk9PRIBsQ5dBuQbl4IKLGw7H4nN7DjiOov+st jYUyd68M5KqKRfEoWE2Ecf4jVV4vEbm3kG45pxNMF98iYJ+Wb/LHEwQAeLMpCVt8OT1r qYYWUO8qO25N69v1/keLMy5ikt19InHg2hoZQ= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1786634544; x=1787239344; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to:content-type; bh=jWcupkKXEk1DDuBsNoKcen203SZmkMyjR8KKJICYHyk=; b=riTBIv93tNALhQBWtW7+R58m05LCMv/7AYGrXE87QXxdcwRQyXNvve7XDNIIxwwopc UvcIc2iB3gbsBd038MytA4jNMSCMa2Ip9Set3MKTYZCzBl1fEOq00sc8RJi8j7h5dcFz P4UVhF0frcKrJtSfa6ryjISTJIdbDgPvVqpAQPwT4lp+vWDs3ABjRw1xdZxDr21aWlkv mgNTq7mDDzvfXZUu33zE8z9VIAqSUrsqwltQAnIupINBOzqrMOIwielP99TE7QpmYIC5 O/mdFp79gLavpINR0l+3cXHATOMmvDaLC72LXegBpySz661qCHkBa57cy8es8T522/62 IQRw== X-Gm-Message-State: AOJu0Yxmg4va+w+5pqFmjAzjlgRIV04HzYMyvC/lZ0k9gF4ug56TZ2dh /WIycLH0kLJdHEX7CfblqVafU3bN5Qnrm4E7z6Du3UbNEKD6cPVWbkC46SWTShgOvDEeZ8v2MAX kiMs09Pe/IQ== X-Gm-Gg: AR+sD11sJvOD8V5mwmHeiJGQmXgjV97PVy4+7y2Fr9SW2Lj8xwsZmZ5Dd1f0+TwBSUn YTOf/Iw9WkisRaeWLnzxDFcex4LJjnrRnKfaYkgIWK1EK4Fhr9ayWSz5OVCerFN+YxSIc4kHbCP Ji4tdCt1xiWmTBasTzCXjvkxCe5CJp4dVJDwvwx+UEvo8DKG9a/5TXjHrE6gGt5wGXsGYY1v1Hh 69nzikR9Qq/H5VCIDXz5PWQLQy1OllwqcYWHBFPb1LuL/7PSmBLPEJ2a+Gsl8swUek1XMPp9+V6 9FEZXUlTn+Q0u5J8hUkUASYAqFRCx+vfmB8s6apwCTYnov8N525z7VF02VC23QdXlI4WgQgD0eL derSBQqg+eSoRy6082y2ML5X78rzzpPR9PmI5gczeIE+H1e9OD/VObGVRSdoyPDOKDrAVF1WvVo ZFkqxqKppzZRvvduSjs3Rg6T8YdJcD4Temt2o9kt5JLYOlix2SuMK66BIWwBB9mlfmPcyJU2uz+ 1JuiJud/6pc0FCrWVIfox+VFpHiBXc/ucvcsjQYtlrffSqZ4jMxgIAmCJM1VpGGvq/OjNCuWK51 Dl5UeQzAOlPdpAy6APR66/TTDLitGqAV5+uVBUez X-Received: by 2002:a05:6000:98f:b0:481:511c:8d45 with SMTP id ffacd0b85a97d-48159ffd2aemr10111564f8f.20.1786634543927; Thu, 13 Aug 2026 08:22:23 -0700 (PDT) Received: from FRSMI25-GIGUE (static-css-ccs-204145.business.bouyguestelecom.com. [176.157.204.145]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4815f21a068sm110450f8f.12.2026.08.13.08.22.23 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 13 Aug 2026 08:22:23 -0700 (PDT) From: Fabien Thomas To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 03/17] libarchive: fix CVE-2026-14164 Date: Thu, 13 Aug 2026 17:21:53 +0200 Message-ID: <444439890165ed1ceb7dbf68655d320c554e6acd.1786633048.git.fabien.thomas@smile.fr> X-Mailer: git-send-email 2.55.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Thu, 13 Aug 2026 15:22:34 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/243360 From: Daniel Turull Backport patch to fix CVE-2026-14164. References: https://nvd.nist.gov/vuln/detail/CVE-2026-14164 Upstream fix: https://github.com/libarchive/libarchive/commit/f774f03b40cb109348e5c6d52b59c864e3cfa8e8 Tested with ptest: Before: PASSED: 5, FAILED: 0, SKIPPED: 0 After: PASSED: 5, FAILED: 0, SKIPPED: 0 Signed-off-by: Daniel Turull Signed-off-by: Fabien Thomas --- .../libarchive/CVE-2026-14164.patch | 53 +++++++++++++++++++ .../libarchive/libarchive_3.8.7.bb | 1 + 2 files changed, 54 insertions(+) create mode 100644 meta/recipes-extended/libarchive/libarchive/CVE-2026-14164.patch diff --git a/meta/recipes-extended/libarchive/libarchive/CVE-2026-14164.patch b/meta/recipes-extended/libarchive/libarchive/CVE-2026-14164.patch new file mode 100644 index 0000000000..b734fc448f --- /dev/null +++ b/meta/recipes-extended/libarchive/libarchive/CVE-2026-14164.patch @@ -0,0 +1,53 @@ +From edbac77e8e544286fe7581bc398781c949ee5a22 Mon Sep 17 00:00:00 2001 +From: "Dustin L. Howett" +Date: Sun, 24 May 2026 12:43:00 -0500 +Subject: [PATCH] Merge pull request #3071 from stoeckmann/rar5_doublefree + +rar5: Avoid dangling pointers in init_unpack +(cherry picked from commit 42453cf16255800726b4efedab25138639ceef20) + +Conflicts Resolved: + +libarchive/archive_read_support_format_rar5.c (1 conflict): +- The stable branch's init_unpack() already unconditionally NULLs + rar->cstate.window_buf and rar->cstate.filtered_buf right after free() + (the core CVE fix), but still retained the redundant else-branch that + re-NULLed them when window_size <= 0. Removed that dead else-branch to + match the upstream fix, and omitted upstream's added + `if(...== NULL) return ARCHIVE_FATAL;` calloc failure checks, since + init_unpack() is void-returning in this stable version and predates + that hardening. + +Assisted-by: kiro:claude-sonnet-5 + +Changes from upstream commit f774f03b40cb: + - libarchive/archive_read_support_format_rar5.c: adapted from upstream + +CVE: CVE-2026-14164 +Upstream-Status: Backport [https://github.com/libarchive/libarchive/commit/f774f03b40cb109348e5c6d52b59c864e3cfa8e8] + +Signed-off-by: Daniel Turull +--- + libarchive/archive_read_support_format_rar5.c | 6 +++--- + 1 file changed, 3 insertions(+), 3 deletions(-) + +diff --git a/libarchive/archive_read_support_format_rar5.c b/libarchive/archive_read_support_format_rar5.c +index 63dd97b3..271aa0cb 100644 +--- a/libarchive/archive_read_support_format_rar5.c ++++ b/libarchive/archive_read_support_format_rar5.c +@@ -2568,12 +2568,12 @@ static void init_unpack(struct rar5* rar) { + free(rar->cstate.window_buf); + free(rar->cstate.filtered_buf); + ++ rar->cstate.window_buf = NULL; ++ rar->cstate.filtered_buf = NULL; ++ + if(rar->cstate.window_size > 0) { + rar->cstate.window_buf = calloc(1, rar->cstate.window_size); + rar->cstate.filtered_buf = calloc(1, rar->cstate.window_size); +- } else { +- rar->cstate.window_buf = NULL; +- rar->cstate.filtered_buf = NULL; + } + + clear_data_ready_stack(rar); diff --git a/meta/recipes-extended/libarchive/libarchive_3.8.7.bb b/meta/recipes-extended/libarchive/libarchive_3.8.7.bb index e8c3a3bfe3..ecb13a6772 100644 --- a/meta/recipes-extended/libarchive/libarchive_3.8.7.bb +++ b/meta/recipes-extended/libarchive/libarchive_3.8.7.bb @@ -31,6 +31,7 @@ EXTRA_OECONF += "--enable-largefile --without-iconv" SRC_URI = "https://libarchive.org/downloads/libarchive-${PV}.tar.gz \ file://run-ptest \ + file://CVE-2026-14164.patch \ " UPSTREAM_CHECK_URI = "https://www.libarchive.org/" From patchwork Thu Aug 13 15:21:54 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Fabien Thomas X-Patchwork-Id: 95101 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 5F800C5DF6E for ; Thu, 13 Aug 2026 15:22:34 +0000 (UTC) Received: from mail-wr1-f52.google.com (mail-wr1-f52.google.com [209.85.221.52]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.21612.1786634546686571393 for ; Thu, 13 Aug 2026 08:22:26 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=J3VpPN8j; spf=pass (domain: smile.fr, ip: 209.85.221.52, mailfrom: fabien.thomas@smile.fr) Received: by mail-wr1-f52.google.com with SMTP id ffacd0b85a97d-47f96c5b722so1239621f8f.0 for ; Thu, 13 Aug 2026 08:22:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1786634545; x=1787239345; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to:content-type; bh=F15afBGJ2QP9GGqsAiijYxD3U75XQL7vcqfFaYY9vW4=; b=J3VpPN8jzhpUpR3TiNJFJ4kjfoKUOLzpPBwlhbDV2/4c1dd+VPAZWsqTs7olrazfSO kwrB7gMNbgOXERtnEfakkLXEds3HkjRSRU8yl2zRXSM3wknA+vuQRzjTMHxb2Uy3dNHf Kz3+CcLYw2SYIFxvFSNNFcX4DQ5xfrT6TCRCQ= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1786634545; x=1787239345; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to:content-type; bh=F15afBGJ2QP9GGqsAiijYxD3U75XQL7vcqfFaYY9vW4=; b=MDnIj0DpXSRWGXHK4c526HGhQ1yTnRZkpZvZBnmBVntJRD9/6cOx5zYvD8ZqVcqDEV PNpQe+RokpKUFqqMgSWEkYHB+VhJdZUxDUDQoZXq7eNpdpEeSxof5M3G0/DCHYzmAjrT jbGSWN4WXh5V7ML8XMsI/MFvRZSINBrfeVEsb77TTReJNEBaLjKVfrgdBtOOB9FezNuF +YZ38JSTW4LqKuZ9YUhHiPEusyoZS3dG832puGRkm7WuvjMtd95FQfNrvBaKnCaNlO6V hBUm6nRI3dJ+nEKNuq6htn78xRHqsld8v7ibq0B7JZjzxtWz4aX9Kk0p1+RP7BI/3BJW Tohw== X-Gm-Message-State: AOJu0YyHPibh1M9FNe2F/e/XPvV5GyMTmlyMDc4+S7YOXYRwjUi6RgZz UNo3dV3K3eWv7w+jPZ3dSNkHZs6ObczrH+fQ/Xy3XZ6irirGZoaGS7RYYM7/GVHM9bvRm7Af2id 0pCzdcrAqZQ== X-Gm-Gg: AR+sD13Soe+gAynt+MpSVAgwaLRkxpO9HMtvNhQyJyCadQx9y2ki0twNXZ5hoHZaPlE q7+/rs0YTzo7qZVBZrqFrYiUcJr58itz6YNPRl4ug0AaS50GR9ro37N18HgzraflDTve8B0CUbE 3eXm7foae2ulAuPS22bIcv3GvbWeUz86MfHITlbJz2S4iee2c1eVrT10ig6IG0bOXJ7hr/oOQTI Q+r2D0Fj0cqRjgKbJnl5x6nBZd2NXBsK+3uTQQJQWiZR0LH20zGj/mIB883qKzADiQOQui+Rx3n r/61004vKVt8vkp9GuNyH/zqpJ7L/CBO0qRNKuGMygzktAPhc538Jud4yWqWaMZUzAS/CRkxKl3 NLanQFMw+bnMU3zsKeIz1tj7qE9gSuKgiVWDtpyB2Hdb6PDDRWUK659zFnvFByZiLPGUXHxgipp zLspcEoZYZe9il5TACt078Iw0DuheoigQQ7CSiv6DCOgMDCYvESw+4sOsuVVUgGDupiCtpRxmc4 1C4MUvimfwnQTZX6wCEUr03bMBi66pUd+dFVNPU94iGb/DPOLAPfZL0NKHpoNwbEz9xaHUaEl+y JOkr+bbySiHbtB64Vxzu395ArIhdWHt8jmsxq+SAqamFs8XXVEI5 X-Received: by 2002:a05:6000:61a:b0:47f:f20d:8d4f with SMTP id ffacd0b85a97d-48159eea130mr10351099f8f.18.1786634544898; Thu, 13 Aug 2026 08:22:24 -0700 (PDT) Received: from FRSMI25-GIGUE (static-css-ccs-204145.business.bouyguestelecom.com. [176.157.204.145]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4815f21a068sm110450f8f.12.2026.08.13.08.22.24 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 13 Aug 2026 08:22:24 -0700 (PDT) From: Fabien Thomas To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 04/17] python3-pyopenssl: set CVE_PRODUCT Date: Thu, 13 Aug 2026 17:21:54 +0200 Message-ID: <9d4253c4fecdf17354779ca0ff198a0129d63ae4.1786633048.git.fabien.thomas@smile.fr> X-Mailer: git-send-email 2.55.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Thu, 13 Aug 2026 15:22:34 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/243361 From: "mark.yang" The pypi class default python:pyopenssl matches nothing in the CVE databases, which have used four vendor spellings for pyOpenSSL over the years: * CVE-2013-4314 (jean-paul_calderone:pyopenssl) * CVE-2018-1000807 (pyopenssl:pyopenssl) * CVE-2018-1000808 (pyopenssl_project:pyopenssl) * CVE-2026-27448, CVE-2026-27459 (pyca:pyopenssl in the CNA records, pyopenssl:pyopenssl in the NVD CPEs) Set all four vendor:product pairs. All five CVEs are fixed before 26.3.0 (the two 2026 ones in 26.0.0), so they resolve as not affected. Signed-off-by: mark.yang Signed-off-by: Richard Purdie (cherry picked from commit ba3d752e577004f871fe7f4235e2625410140a08) Signed-off-by: Himanshu Jadon Signed-off-by: Fabien Thomas --- meta/recipes-devtools/python/python3-pyopenssl_26.0.0.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/recipes-devtools/python/python3-pyopenssl_26.0.0.bb b/meta/recipes-devtools/python/python3-pyopenssl_26.0.0.bb index ca2ee93d29..43977d75b9 100644 --- a/meta/recipes-devtools/python/python3-pyopenssl_26.0.0.bb +++ b/meta/recipes-devtools/python/python3-pyopenssl_26.0.0.bb @@ -18,4 +18,6 @@ RDEPENDS:${PN}:class-target = " \ " RDEPENDS:${PN}-tests = "${PN}" +CVE_PRODUCT = "jean-paul_calderone:pyopenssl pyca:pyopenssl pyopenssl:pyopenssl pyopenssl_project:pyopenssl" + BBCLASSEXTEND = "native nativesdk" From patchwork Thu Aug 13 15:21:55 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Fabien Thomas X-Patchwork-Id: 95098 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id A26F7C5DF67 for ; Thu, 13 Aug 2026 15:22:33 +0000 (UTC) Received: from mail-wr1-f50.google.com (mail-wr1-f50.google.com [209.85.221.50]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.21613.1786634547559735767 for ; Thu, 13 Aug 2026 08:22:27 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=Ub9H7jF5; spf=pass (domain: smile.fr, ip: 209.85.221.50, mailfrom: fabien.thomas@smile.fr) Received: by mail-wr1-f50.google.com with SMTP id ffacd0b85a97d-4799b3f7c83so611881f8f.2 for ; Thu, 13 Aug 2026 08:22:27 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1786634546; x=1787239346; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to:content-type; bh=pgKs2uifWMqCkFgbp25F3ek3PtUWIPKnOPbbEDeiPNg=; b=Ub9H7jF5EYOkXjSx3opdf2Oz3eG6tzyB3NjFjU+/TVHuvEA+7DDPPX/eiCgYqCX98o 7JfviwQomS2D6LZnj8/KUQucr0utAUFcPGV9+aFte+LN3tXl/XA3yqDmFIG/9+bu27JQ pdfhhjX6n6cHCvxmwmYA0YMmnxBa83B0G2lB0= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1786634546; x=1787239346; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to:content-type; bh=pgKs2uifWMqCkFgbp25F3ek3PtUWIPKnOPbbEDeiPNg=; b=TSwhYyg3LjsyE7OysincoyFrU7+MAZp/KdS4/jW5uLXw+wQJt5z/Gdmm897QqFgib6 ldH+Mn5ujgPbYAlUoBemRlkR7XRYQBfmdYOsU9VSr2GLKO8p2k6utwxei0GfHw4/aKrV VtFIk8VRpqoNWLQCYOW/j7LNx4cFkF6bSuHYv3SNWGUWg4abcxTiGOwKPaeYFbAt5edX gg9KITo85DaCISjceKKdg+EiEq/QTAKPtFU0LTJQTSZVuswYc8wXWJikYFJYeYGEkF1k pIPf81G+V8tLorB9qrWlRUBli2D+IJ7+DNGAmos1E3hwD9eprPuEhBxRCKjtxzyI7mXL rlqA== X-Gm-Message-State: AOJu0YyQ/1DHmOjtwh36Gci+qtrL9SorKLNAAwGUVujh81w2AXTnLUP2 cyHaYkuR6+B7wT1hEBQjnJSpSnO2zHl72qRXd9/PpTJO3un2wxprD8ceIvtn+8ts+rOW1u1wRh8 WWdshYTp2gg== X-Gm-Gg: AR+sD12+mCdpqL72GyLiDxucbDZta6l9hU1yVbfd3VMD//JiO31gG/8kPzHZ6D0jArf BzpfDLsCwmsWSBmIOu5WtKiUzARnktGWojKySmvH8/tRuQ+mhO/431uT9cWS2bNzQnGl07pJjCt LR8cmyGN1+zO5LWWQ5ysVtThZP7ACm4qXIQOh49piYGsfGNQNv5pG8NveEqHkSODM9CeAWSWdKs +OIqzbJL5jNsBKvUrQA0K9KaOFHfUOhGUvMVQDeuK8AUJ3QdOIPvDpudtWd/er1MH/8BVp6bc1J xcwQbCSoXt4Io18Wxt06PkA9g+SANQlEcR8F7xAYqu/rTwaTZOJJ/YYIfIbO8moxaYsv/JEwKC2 py8E7KMtvKhZ9/yUIjXygbQELjVYDnHm+SZjdjpokUYhe88JC49e+vslAXridVJa4+KfGVEtaDm pvxFdpADcUTxgGqf1NiqjkGDKIWcVUkpIiAH4JCfWD8YyRZj/I42DTZC0HqniEpAOrvGiXXTAn5 76IlrctrQmHGZY4Br+4jQJCcTSBszofrc4CMh3XgXI91ojBTIno7hXSBgX+XjY8WDVyygA0Zjgq ywK2acPdL1j8YeED5hPI3VuJDsy+D1XsR9QaBfu3eWly5eF1kI4= X-Received: by 2002:adf:ed10:0:b0:47f:93b4:2def with SMTP id ffacd0b85a97d-4815a045f04mr7903726f8f.28.1786634545652; Thu, 13 Aug 2026 08:22:25 -0700 (PDT) Received: from FRSMI25-GIGUE (static-css-ccs-204145.business.bouyguestelecom.com. [176.157.204.145]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4815f21a068sm110450f8f.12.2026.08.13.08.22.25 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 13 Aug 2026 08:22:25 -0700 (PDT) From: Fabien Thomas To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 05/17] python3-pyyaml: set CVE_PRODUCT Date: Thu, 13 Aug 2026 17:21:55 +0200 Message-ID: X-Mailer: git-send-email 2.55.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Thu, 13 Aug 2026 15:22:33 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/243362 From: "mark.yang" The pypi class default python:pyyaml vendor prefix matches nothing, so PyYAML CVEs are not evaluated at all. The databases use two vendor spellings: pyyaml in the NVD CPEs, and "Red Hat" (with a space, not expressible as a vendor:product pair) in CVE-2020-1747's CNA record. Use the bare product name to cover both. All four existing CVEs (CVE-2017-18342, CVE-2019-20477, CVE-2020-1747, CVE-2020-14343) are fixed by 5.4, so they resolve as not affected at 6.0.3. Signed-off-by: mark.yang Signed-off-by: Richard Purdie (cherry picked from commit 89a0ba3c2da2a7755bafb28afbf75dc7112e2549) Signed-off-by: Himanshu Jadon Signed-off-by: Fabien Thomas --- meta/recipes-devtools/python/python3-pyyaml_6.0.3.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/recipes-devtools/python/python3-pyyaml_6.0.3.bb b/meta/recipes-devtools/python/python3-pyyaml_6.0.3.bb index 7e2b088ca5..849e2c9cc8 100644 --- a/meta/recipes-devtools/python/python3-pyyaml_6.0.3.bb +++ b/meta/recipes-devtools/python/python3-pyyaml_6.0.3.bb @@ -21,4 +21,6 @@ RDEPENDS:${PN} += "\ python3-netclient \ " +CVE_PRODUCT = "pyyaml" + BBCLASSEXTEND = "native nativesdk" From patchwork Thu Aug 13 15:21:56 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Fabien Thomas X-Patchwork-Id: 95096 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id BD257C5DF69 for ; Thu, 13 Aug 2026 15:22:33 +0000 (UTC) Received: from mail-wm1-f43.google.com (mail-wm1-f43.google.com [209.85.128.43]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.21615.1786634548597485775 for ; Thu, 13 Aug 2026 08:22:28 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=rW6ILy/d; spf=pass (domain: smile.fr, ip: 209.85.128.43, mailfrom: fabien.thomas@smile.fr) Received: by mail-wm1-f43.google.com with SMTP id 5b1f17b1804b1-4994c49f588so10690335e9.0 for ; Thu, 13 Aug 2026 08:22:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1786634547; x=1787239347; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to:content-type; bh=b+lEHtEV6PTO9pYYyJfBmZxhfMHzpqEvcpu0Ng0VDJE=; b=rW6ILy/dM2fXc51MceFx7HifQEIfN/ianf7LKV7OgJtzDIpmdfD9Y5/oWdc/hhumO4 LqqDJ21cv/n2aiIPTfybvo/WVCJmAtA3JzXI1oZ++1p9BRZrlIvZuXe6S9GkAnF95M/q socDHO3ZMZRURIqIuR+m3ACoSeaV1kxHQ90f0= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1786634547; x=1787239347; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to:content-type; bh=b+lEHtEV6PTO9pYYyJfBmZxhfMHzpqEvcpu0Ng0VDJE=; b=BWB6IHqC1vlXKbnFZqAlvuNIUhFQ3PI71CCXl7u7ZkPsoWhytJVAZ/ix+yC5KHtlyD N+tDCr2eOF9sG6TXnmWv8/19DIv9k0oy1AeWNtr/dda+8dKkXpQmssEr2Yd7Xj3Kae2z uJwC9D/VIpl6KOKTLFw4CrMHmL3vh9FpCzo0wQuRwIHpYmTZ5MYfJHRDaMlblspwz6fk x+Kxfz5lCQQSTw9MeUdAi8Zp4ODODOKjo2RJcNCGXjgmd7kE8kLIsKiQ8OJzumPJu35d da4zjz4pvrY5hBkfaYgv6NmTSCErokdthqY2mNXG8SLx7EC1T6JnSeVd7wchOa/l5z7z B24Q== X-Gm-Message-State: AOJu0YwBT0vIJ2o/AAwC2bxXTssSB3Q93hSy6U6h1HTZUwTbcOeeUZnM qJeFQlBB3iNw1Z+Bw6XhBxFl2CqnITUQcnNg1eSqV+NmGC+onmg30FYyPovxWDiDKzVq4i+/95k vRo2W6pn0qQ== X-Gm-Gg: AR+sD12cw3HerOu8QHz5szYyHZxsS17HRKC4de6EEt6ifRywpOtOz48CISDTVDVNVBL dPe0Rjn7mfbyZjqC5b8gpw4UR60pSg9cS6tai35/dajkFslAuI+NnnK9XpaNbUm5E2wRvLzic49 5ga2P09YIs8T64+FyI1Mh+We2I3lRTkuw5rGHKgIMFGARurU1qdOFdFWBCMxcPSAiAR3PEICd3A mR+Fy4vgLn8rtO+r7t2Orc6K23neIlDU/9m+1tmg9uVvXtEAXTK/8r/q9F31h0j0l1RGtu5clbM 02khqJaIfi1zMkUqbsy0lPtIs3KGJQg25EXbILH1/vk4NOdnmfXS3fyCDMDLkqCCxqMUIRv0YoY rajcBEQ04m46Gure8fFpWkKca46n0jpU6krL4sNEPssif7jkQLb7dlLVg4PCTS8jTe6J6jIVsyv Nb9f9FBhqaNToHL0K4V7bweg2bOGsogC5kitTV0/1N5MHIX8YWdG7Cuog8fjJngDJ0WZ4iUDUcG LNdYIZVej4739pqHp7u7ZrKLApmak8JkA8/4xolAmtGZqAq1ZnD4odZxj4C6Veh16Kuu6k6pDvc J9FDEGLiMJYuKLMHoYGX1E80RswBtVLoA3DRirWU X-Received: by 2002:a05:600c:231a:b0:495:58fe:88e5 with SMTP id 5b1f17b1804b1-4998215464cmr70229795e9.2.1786634546836; Thu, 13 Aug 2026 08:22:26 -0700 (PDT) Received: from FRSMI25-GIGUE (static-css-ccs-204145.business.bouyguestelecom.com. [176.157.204.145]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4815f21a068sm110450f8f.12.2026.08.13.08.22.26 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 13 Aug 2026 08:22:26 -0700 (PDT) From: Fabien Thomas To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 06/17] python3-xmltodict: set CVE_PRODUCT Date: Thu, 13 Aug 2026 17:21:56 +0200 Message-ID: <197a3a9b94a14865fe34645ee7ca8251ba500124.1786633048.git.fabien.thomas@smile.fr> X-Mailer: git-send-email 2.55.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Thu, 13 Aug 2026 15:22:33 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/243363 From: "mark.yang" The CVE databases track xmltodict as xmltodict:xmltodict, so the default python:xmltodict vendor prefix never matches and its CVEs are not evaluated at all. Use the exact vendor:product pair. The only existing CVE (CVE-2025-9375, disputed by upstream) affects 0.14.2 before 0.15.1, so it resolves as not affected at 1.0.4. Signed-off-by: mark.yang Signed-off-by: Richard Purdie (cherry picked from commit 2229426b729adf85780c23d38c85fc3cf090f6ba) Signed-off-by: Himanshu Jadon Signed-off-by: Fabien Thomas --- meta/recipes-devtools/python/python3-xmltodict_1.0.4.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/recipes-devtools/python/python3-xmltodict_1.0.4.bb b/meta/recipes-devtools/python/python3-xmltodict_1.0.4.bb index e622c00dae..04632de099 100644 --- a/meta/recipes-devtools/python/python3-xmltodict_1.0.4.bb +++ b/meta/recipes-devtools/python/python3-xmltodict_1.0.4.bb @@ -7,6 +7,8 @@ SRC_URI[sha256sum] = "6d94c9f834dd9e44514162799d344d815a3a4faec913717a9ecbfa5be1 PYPI_PACKAGE = "xmltodict" +CVE_PRODUCT = "xmltodict:xmltodict" + BBCLASSEXTEND = "native nativesdk" inherit pypi python_setuptools_build_meta ptest-python-pytest From patchwork Thu Aug 13 15:21:57 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Fabien Thomas X-Patchwork-Id: 95097 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id E1ED7C5B572 for ; Thu, 13 Aug 2026 15:22:33 +0000 (UTC) Received: from mail-wr1-f42.google.com (mail-wr1-f42.google.com [209.85.221.42]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.21787.1786634549692475349 for ; Thu, 13 Aug 2026 08:22:29 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=IoYltndv; spf=pass (domain: smile.fr, ip: 209.85.221.42, mailfrom: fabien.thomas@smile.fr) Received: by mail-wr1-f42.google.com with SMTP id ffacd0b85a97d-47f59f25ec4so912186f8f.2 for ; Thu, 13 Aug 2026 08:22:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1786634548; x=1787239348; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to:content-type; bh=UB5Pur79hQfzK7YDWe0et3T6YYOBlHReF0O5fw3/OY8=; b=IoYltndvcfC9b1/Dq1TqNIhNqMqqTlW4Y4AepoTnsMjy2aQqdPQXpHNy/rDcC9XnF2 WyARnaR+UF3EAJL5VrNBdD8XJDX4mHmAJ70zXBZZDguXvyEZ8XBh8j8i7Si8Z5d+O72i aBAZ3vXXtj0A5vBjQIxFwRLtcwWPH2vNUF/JI= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1786634548; x=1787239348; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to:content-type; bh=UB5Pur79hQfzK7YDWe0et3T6YYOBlHReF0O5fw3/OY8=; b=E8h5hUrdRYW/c7k64ng1M8m1Y9NmdMRudSWWCf7Qsjor/m5eH60Gz9ZS4e/UJsF6Kr eLVixLk+IjOLXkcQBoE9ai0Bli9mKcf52ZtM67q5/Tm9z2Y/qyZYaUsXY/KgAimdq/5g sqNErLzmHS3tyCOe4n7vaUMEBvUnX9jBNo3zI0NeU0k/Sdci29Hj/zA7DxWthuuqg8jE Ql12aqsmd/3+xlYOAlwAW6luLybLHPH3HZgqhSyUcWZMy88a/AvFYAE+rmO2/DK50ubE TC+phmnX6UVlYZevdKUh5RhVxJLo4ynH5rLm7TRKL0HFP7ei1C7Y7wq+3xew+yDri0qb eUVg== X-Gm-Message-State: AOJu0YwJY/B1feNaBUOtYnl43ZUlM9zTe5UFbOevC+sFb/6VqY5O/fLM dtnGIcwdlJHcuEAfCFVlnxzH2huUideITs755R9TnZf349lzm3TPZHEQDOhrQ/m7eCzGDtugTk5 xSq/fLQs2SA== X-Gm-Gg: AR+sD10EBR2bj9HSE6ylwwS6MZe8WRQBKGSYzGBD88KbIiDKMDAgf6g6gerqI2m+ZH7 KJlcz/KI5CPDF58yOkn3rHF+cIL0xT+e3Wc8L1QnVoHvCCBtFaL3uq4k3ISY5wMVimGGHbAfWn0 ukbS7JzUqcSsLEx+nFn9q8rcKxd8RYraACglY1tAHSJIKolA9iju3EKlDZ6T1OKKtk9UwOJDJy/ Rvp6h9XKbM4HDVes9neDyhik6Udvq5A3KUoK7PR8aN4AitDqMbdvX/WMhuC6lQrIHjOyFgixQY/ J/nBx/nufL2AgvPu1BGxilt7r/ERHKVJTKhY8wg4rjqpTzVPdF4K6e4UAH5Y9XH6YfUGYPNVSRS 9Gy7TPOUFMm46NaJjWRFNzrpaQLWYaAGFKPK5It6r95jV5y5fmh7sm9rVlJ8/RWabEQj8Ve/qpi QZue9wZyMmPozd58hCwaDuZ3oLWdLiYzYrJtKIwN4p+hbvGBAT01D0hZJ96TYfhrDxkzJjLDtEZ ZZcv0+U+djGIFvCEYxnVastwE87fOxCvEeVxwO5fCDJu0eR9C8wix2+8R4cPJ/uyEfB8Gahc2+n qVXdaJAHygQ4+ChBYVne8rIEbNTwQKjKnYgFu2QqTrs9kkEdsfrLazUzseitPfw= X-Received: by 2002:a05:6000:61a:b0:480:d9:ee6d with SMTP id ffacd0b85a97d-48159eea176mr10359901f8f.19.1786634547811; Thu, 13 Aug 2026 08:22:27 -0700 (PDT) Received: from FRSMI25-GIGUE (static-css-ccs-204145.business.bouyguestelecom.com. [176.157.204.145]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4815f21a068sm110450f8f.12.2026.08.13.08.22.27 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 13 Aug 2026 08:22:27 -0700 (PDT) From: Fabien Thomas To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 07/17] python3-certifi: set CVE_PRODUCT Date: Thu, 13 Aug 2026 17:21:57 +0200 Message-ID: <6d00f679f22dd61a5414369ac21db016fe31d495.1786633048.git.fabien.thomas@smile.fr> X-Mailer: git-send-email 2.55.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Thu, 13 Aug 2026 15:22:33 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/243364 From: "mark.yang" NVD tracks certifi as certifi:certifi, so the default python:certifi vendor prefix never matches and its CVEs are not evaluated at all. Use the exact vendor:product pair. All three existing CVEs (CVE-2022-23491, CVE-2023-37920, CVE-2024-39689) are fixed before 2024.7.4. The wrynose recipe version is 2026.2.25, so it is outside the affected ranges and these CVEs resolve as not affected. Signed-off-by: mark.yang Signed-off-by: Richard Purdie (cherry picked from commit 26c49743ec431a3cc39803664eec8851be75756e) Signed-off-by: Himanshu Jadon Signed-off-by: Fabien Thomas --- meta/recipes-devtools/python/python3-certifi_2026.2.25.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/recipes-devtools/python/python3-certifi_2026.2.25.bb b/meta/recipes-devtools/python/python3-certifi_2026.2.25.bb index 7034f7a6f1..0425f3544f 100644 --- a/meta/recipes-devtools/python/python3-certifi_2026.2.25.bb +++ b/meta/recipes-devtools/python/python3-certifi_2026.2.25.bb @@ -11,6 +11,8 @@ SRC_URI[sha256sum] = "e887ab5cee78ea814d3472169153c2d12cd43b14bd03329a39a9c6e2e8 inherit pypi python_setuptools_build_meta +CVE_PRODUCT = "certifi:certifi" + BBCLASSEXTEND = "native nativesdk" RDEPENDS:${PN} += "python3-io" From patchwork Thu Aug 13 15:21:58 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Fabien Thomas X-Patchwork-Id: 95099 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 06957C5DF6A for ; Thu, 13 Aug 2026 15:22:34 +0000 (UTC) Received: from mail-wr1-f42.google.com (mail-wr1-f42.google.com [209.85.221.42]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.21788.1786634550544689392 for ; Thu, 13 Aug 2026 08:22:30 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=MSUhseeR; spf=pass (domain: smile.fr, ip: 209.85.221.42, mailfrom: fabien.thomas@smile.fr) Received: by mail-wr1-f42.google.com with SMTP id ffacd0b85a97d-4815b8781c7so352695f8f.0 for ; Thu, 13 Aug 2026 08:22:30 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1786634549; x=1787239349; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to:content-type; bh=PlLRZ0kArsFcdivnjDjJ8A90Z5BwwHet1IJDF8SAvis=; b=MSUhseeRC1OdHNGq9m1sJjEbCuYc8hHPLDz9wp3NqtwARSNxcct2rI2LCT8mwpV4jc zyPLLRN2YcqK011qOGK4a5qwL/pxvjEzTtXJXEcP5qXbgVpUvHUKKS7nU2CHw4KCbVAe pRhlEO2QjEBHd8nDLGcRL/RShNiaxHrbUqPrU= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1786634549; x=1787239349; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to:content-type; bh=PlLRZ0kArsFcdivnjDjJ8A90Z5BwwHet1IJDF8SAvis=; b=X+xtGqhiI3zBU/9P9SI1ALz6rLokxEWj3oVglA+qs/GF+zObA3FaLOKj3wVL0KlNc0 uLSwCQWOkfkCw/xA4Fr/low9e1vo95G2Dp1kH60n29ecJrlJ8+TC7BG7WtMFO2vN04Z2 N4fLBfGBh/TL0F0ZjxTJxIQ4e/B69oAxUDcfhf/WCOB9mPbhK9+StYavEaK0pS6NN5Mo apbGvo/luWUHOSfCKwfKRnfPl/EeAklAJlU/OA2OrRXbUsLPviFbUe/ktNQbhDsF4Lyq /oIPQuVTolU3u0T8ePvK5OQi91IDFlIt+dW8CYk+/xFrbcZrSkqgRzf3OqjUl27O8hbI 8D9Q== X-Gm-Message-State: AOJu0Yyr8+PQYEictP7mdiLQzOlz1jeonEuKkZt2ufMw16m642VOwJeP oD5jALvgpnJHdQu46BWwVaXN7obD9FzpnTgXvw7gi2JoiujKuRp9AeBbzn4yuUOeq1rTcxUYmE1 hG+hAf7D7MQ== X-Gm-Gg: AR+sD12e7HGnV0W7GHJdgfzxw+U/GnzCZzoV6tMTgM8/oZFp9vhmF0LP58VprjZKffZ wcc1NLVUCtF1+TRia3V0qz4VrVHJIjacOG7rihyNLgKqDpFXeEbRzUe90XBDyXlHYTaqjZ4i4eF t26JFCzxtsZ9PzNcKbdBce4XWKrncMmvVOrZSLyKwAE7ZP9xepnReOyfu9/FW4URp7KC8U7RNsF loH/8YQJ76Iby8oLovxMRU5CtYRKWmtDHD2WKWFuMW3/i/IxivpY6aTDtqz05gTy8up8XfGJKJZ TXA+UQC6moadQzEOd8k2GVDOb3dbuyPoPyVgOHt0O5YO2Ppy8PXObS5llvZLZtuqajCULXNxTz7 PpZrleGcKe8uiHltsYTFO9H8I4/dmlmIZQzQ7zU2WPPlqLoYaB8i1qxqrrE8vC55q3gU+ImMhEp GR7dupRgA1YMHeVivA+jcAdvrK35efivOsIB/L6x670AmQE3/9F+m5IXYY6ZlA/u7Nmvphtu783 AuO4FQYk2hFS6rs3y/zfUEEQXOOJ/u4dNu/A2MXzezNCFVqu7XQKG9FvEY3zKrnlJmIXiIHFKiY FWcRR9aM45fqVLI7Bg0fdnIW+eeXtOtcKnMMreD0 X-Received: by 2002:a05:6000:41ea:b0:47f:eca7:ad1a with SMTP id ffacd0b85a97d-48159cbd2ecmr11718082f8f.1.1786634548762; Thu, 13 Aug 2026 08:22:28 -0700 (PDT) Received: from FRSMI25-GIGUE (static-css-ccs-204145.business.bouyguestelecom.com. [176.157.204.145]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4815f21a068sm110450f8f.12.2026.08.13.08.22.28 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 13 Aug 2026 08:22:28 -0700 (PDT) From: Fabien Thomas To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 08/17] python3-idna: set CVE_PRODUCT Date: Thu, 13 Aug 2026 17:21:58 +0200 Message-ID: <4a4f4851bc2bbd9b45485de05d47c9ac72bba1db.1786633048.git.fabien.thomas@smile.fr> X-Mailer: git-send-email 2.55.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Thu, 13 Aug 2026 15:22:34 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/243365 From: "mark.yang" The pypi class default python:idna matches nothing in the CVE databases, which track the Python idna CVEs as: * CVE-2024-3651 (kjd:internationalized_domain_names_in_applications) [1] * CVE-2026-45409 (kjd:idna in the CNA record, same NVD CPE as above) Set both vendor:product pairs. For wrynose, python3-idna is 3.11. CVE-2024-3651 is fixed before 3.7, so it does not apply here. CVE-2026-45409 affects idna versions before 3.15, so this metadata change will expose that CVE as applicable/unpatched for wrynose. The bare product name is not an option here: it would also match "servo:idna", the Rust idna crate (e.g. CVE-2024-12224). [1] https://nvd.nist.gov/vuln/detail/CVE-2024-3651 Signed-off-by: mark.yang Signed-off-by: Richard Purdie (cherry picked from commit 48428c0fe22d8ecbfa53efffb28173d4d37539e6) Signed-off-by: Himanshu Jadon Signed-off-by: Fabien Thomas --- meta/recipes-devtools/python/python3-idna_3.11.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/recipes-devtools/python/python3-idna_3.11.bb b/meta/recipes-devtools/python/python3-idna_3.11.bb index de4595c1d4..eb87572934 100644 --- a/meta/recipes-devtools/python/python3-idna_3.11.bb +++ b/meta/recipes-devtools/python/python3-idna_3.11.bb @@ -10,4 +10,6 @@ inherit pypi python_flit_core ptest-python-pytest RDEPENDS:${PN} += "python3-codecs" RDEPENDS:${PN}-ptest += "python3-unittest-automake-output" +CVE_PRODUCT = "kjd:idna kjd:internationalized_domain_names_in_applications" + BBCLASSEXTEND = "native nativesdk" From patchwork Thu Aug 13 15:21:59 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Fabien Thomas X-Patchwork-Id: 95100 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 1A1FBC5DF6B for ; Thu, 13 Aug 2026 15:22:34 +0000 (UTC) Received: from mail-wr1-f52.google.com (mail-wr1-f52.google.com [209.85.221.52]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.21789.1786634551436978718 for ; Thu, 13 Aug 2026 08:22:31 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=nPszeMNs; spf=pass (domain: smile.fr, ip: 209.85.221.52, mailfrom: fabien.thomas@smile.fr) Received: by mail-wr1-f52.google.com with SMTP id ffacd0b85a97d-47f703a9e5dso1092306f8f.0 for ; Thu, 13 Aug 2026 08:22:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1786634550; x=1787239350; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to:content-type; bh=k+Mx1FARql4uRwbb1fGQ//IEa7I3JeXKBcc2LccMuno=; b=nPszeMNsuxa+uhQWECud9DScy6M3Y7P+vGyrWjDdQMNv8LJ9NaLbf8hh9pMKO/ycPa ScFu6FthSBRp3XX3ahEkNvt+dTlWmKDZpvEflCc8LZZP2MPp1P+r5c+c7VKfxj/EYDoH wVVCdv9cIU+4gC2nQaNlKeriYEa8JzB9zM8ZY= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1786634550; x=1787239350; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to:content-type; bh=k+Mx1FARql4uRwbb1fGQ//IEa7I3JeXKBcc2LccMuno=; b=mmFfKkcPn0DW0Fel7JSO1k2zNlriG/TDA5t65ytGnBxWHzQwEPuXWdQJqiJltQnd+S Ro93ID9DVXz467LgBfqYBV2FQo/YGiJU3OqPyHH7X2+UP3uQ+b3NIggZR8vWnbUFgYmP P5OF6oli+HmpcwCntIkLLHc3eBHIgNqAU9lemBJNCSpSlN/RNxYTdMCTIG9jIVmkPEOw 2YM55rJ8JxnAsj8vKK1BAW6p4xpaH7kI67E+7A7U3UlfUEhGmISKWSf0drBfyaTDH1u+ IVaT77tiUh2RA50g16/6fUrPTrTDMp6Y7hbVZvWZTI5j0vC9gx5b3l0WQBIUvfiYvjq3 1uow== X-Gm-Message-State: AOJu0YxKHxrQV494TgblUxim4nf1WRqIGTEk4nHm74RMSGeySjBrg9/e mP0pkYOVvHh1YbazkfGxUwJJGeSGoS3GGodMCP+/mOKBL6p1BMkzLW31i+55fmLoSON82ZOnPQ2 YT4XsaU+RBw== X-Gm-Gg: AR+sD13QVDSdqPjZSLd7V/tuywGSiuP2LzzLKoadFZ+u57CRNZTqFgdGN6e7wVZfE7a 7m6r2Unrvh1s96qN86OIqPb7GZqw2lZvDKIIf3qPJtCvdxDQ4S+UHLuqIcMgteuZ5lpOTGSgnyl 0wRd40qfdT6+WaDJYuNM+EGXmKccFxQbSThPHDDjGy5xvzMi2dvlLgr1s2WzcqUt49IZWAkGrBJ aHA5Vk3MW/QlwnkH86Go4bgJS6Kk9JIBhlqkb0MwJq1U+S7BeSN4CxdUoe1esfmZRcRerjOmQ6C WWPainwoAo4dThQdL9mwXC0ET1MqNJSb/fZJDlDjrByj6LpySrOdyreBAyJX7fp0UjRmr90MLX2 SK5vJbDq+CCw8tdrlgoPGd1Lu9hpgtZA0UmzquAcd9u9XAkJdQrIB94FOEmZnZa20I2nBa8TLf2 881ojfYrvmnEuCoo/ueYo3BG1lsvEkaaJdZUKF54NLcpO+1EtKK2sfauN34FgN+8X2wcl9B1ZsU BWvddz0SqOdQ/9XLscatHjW/tY9VPtKPdtl/s85SFrH3h4HclFMonx3Tr3Yv0moCCOawrZYyinW XErjVXGQeoKkiIcGC8WSkOz/xrt1eZWROMJkg9EO X-Received: by 2002:adf:fdce:0:b0:47f:9750:26cc with SMTP id ffacd0b85a97d-48159ff10c6mr7227658f8f.23.1786634549532; Thu, 13 Aug 2026 08:22:29 -0700 (PDT) Received: from FRSMI25-GIGUE (static-css-ccs-204145.business.bouyguestelecom.com. [176.157.204.145]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4815f21a068sm110450f8f.12.2026.08.13.08.22.28 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 13 Aug 2026 08:22:29 -0700 (PDT) From: Fabien Thomas To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 09/17] cpan_build: disable .packlist and html doc Date: Thu, 13 Aug 2026 17:21:59 +0200 Message-ID: <6b415937b4263c69f085c0faea426660f59b0d69.1786633048.git.fabien.thomas@smile.fr> X-Mailer: git-send-email 2.55.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Thu, 13 Aug 2026 15:22:34 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/243366 From: Wes Malone Currently, Makefile.PL-built Perl recipes (cpan.bbclass) exclude .packlist files with NO_PACKLIST=1, but Build.PL recipes (cpan_build.bbclass) do not. This now results in a QA error due to the TMPDIR paths included in the .packlist file. ERROR: x do_package_qa: QA Issue: File [...]/.packlist in package x contains reference to TMPDIR [buildpaths] A similar error is produced by generated html doc. Here we add the corresponding Build.PL arg to disable packlists and html doc. Signed-off-by: Wes Malone Signed-off-by: Fabien Thomas --- meta/classes-recipe/cpan_build.bbclass | 7 +++++++ meta/recipes-devtools/perl/libmodule-build-perl_0.4234.bb | 2 -- 2 files changed, 7 insertions(+), 2 deletions(-) diff --git a/meta/classes-recipe/cpan_build.bbclass b/meta/classes-recipe/cpan_build.bbclass index 026859b6c7..03289dc21c 100644 --- a/meta/classes-recipe/cpan_build.bbclass +++ b/meta/classes-recipe/cpan_build.bbclass @@ -25,6 +25,13 @@ cpan_build_do_configure () { fi perl Build.PL --installdirs vendor --destdir ${D} \ + --create_packlist=0 \ + --config installhtml1dir= \ + --config installhtml3dir= \ + --config installsitehtml1dir= \ + --config installsitehtml3dir= \ + --config installvendorhtml1dir= \ + --config installvendorhtml3dir= \ ${EXTRA_CPAN_BUILD_FLAGS} # Build.PLs can exit with success without generating a diff --git a/meta/recipes-devtools/perl/libmodule-build-perl_0.4234.bb b/meta/recipes-devtools/perl/libmodule-build-perl_0.4234.bb index b27a8c15e6..0f992dea6d 100644 --- a/meta/recipes-devtools/perl/libmodule-build-perl_0.4234.bb +++ b/meta/recipes-devtools/perl/libmodule-build-perl_0.4234.bb @@ -32,8 +32,6 @@ do_patch_module_build () { do_patch[postfuncs] += "do_patch_module_build" -EXTRA_CPAN_BUILD_FLAGS = "--create_packlist=0" - do_install:prepend () { # We do not have a recipe for libpod-parser-perl which is for # documentation (and is deprecated in favor of Pod::Simple) From patchwork Thu Aug 13 15:22:00 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Fabien Thomas X-Patchwork-Id: 95095 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 95089C5DF64 for ; Thu, 13 Aug 2026 15:22:33 +0000 (UTC) Received: from mail-wr1-f48.google.com (mail-wr1-f48.google.com [209.85.221.48]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.21616.1786634552286149514 for ; Thu, 13 Aug 2026 08:22:32 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=iyfP98Tr; spf=pass (domain: smile.fr, ip: 209.85.221.48, mailfrom: fabien.thomas@smile.fr) Received: by mail-wr1-f48.google.com with SMTP id ffacd0b85a97d-47f84023916so1981634f8f.3 for ; Thu, 13 Aug 2026 08:22:32 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1786634550; x=1787239350; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to:content-type; bh=jirj9i/9CbzsOpJD809WUiqTW2/NP6bHVcmn37Ce83I=; b=iyfP98TraHDNHGQBWizO/2jAx/0MvndMWYpQ9hlwE66Nl01rGK0oMM0rinUV0r+Bas CPGpggb3qOpIDqHU7cwMA0sJT6YHThX3UVyLUM+x5ZH5tCMhl1D81KkbrhJw24c6xOQD o9IWIG6E5b3pScqX4dN4hZXxdV4T5no4iD2Zs= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1786634550; x=1787239350; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to:content-type; bh=jirj9i/9CbzsOpJD809WUiqTW2/NP6bHVcmn37Ce83I=; b=eLp14VhRbes2H0fu/7YCT4Sr2G5VMcxlkfpaXomcPISG0z6nR8xnOxQkVQE/QTMZ22 QZ3R3kSnPTfDHBN92K3QwXeM+gNt2CIglN2Nv0/AWNdKabo5Rvq9nWmVjlm0Q2g39gRU 7KZ/iF3c9l3PXo/19QJaTzz+uzdVPTKqMbTkRo7ps6E8eJThNnfKLqCTYOKCzFx9BmuD WVUvZ0O3GsnDBf4QYcV8UNfKPRDYCm6lRy3GP8Fjs+hjfwWmi0MOsF43mG/5RHyDm2qv dDqTu4auY833qdzeGYXMu1sINxrdFGr2z4ZtPIAEdWdgiLQmoXUQhTIkk2KKVdyzKn5b /Xfw== X-Gm-Message-State: AOJu0YwP96WKUlLP0J6qc4fg6F5+1pCa2PWNrXyACJ/Vhko0frl6o7cU xPkbi4RpjCaTOYNuZIGfOC/uGiuBoko0TVAoI4nv5Hs7tsuPFpX5JPkziSNa8mkcCtaNVlraHNI DK9GIT+KfGA== X-Gm-Gg: AR+sD13gq9MIphADu40i+DmXtSW1nHHFeod1NjW3EzV/Hd2g6DSkzDIskEoqz+qPlde kmqw2EzawjwMpx/XkA6/bghSpqxDDiLP4V8Ul6HNMtKMMANiEQlAWYpJvrKOlj+y1aKODxzOYsY iMfdNZTQuQZaysHsJl3EPRaRDwTeAGRLqr05BAyP9DPb0XP8KALMMINyDaxruuEC5rcKnyolJtG UA2dggw37rR1R74vFizQltHbneUSYBYRTgGpadNRyoqRNoXPdQzpRIJ/y5ZRkERiG1Vckbxv4Ig N/ABwRDJ0L1f6P5tbe1Q/GCT5ff0dzzeUzHeUZcsmPQdll8U70egfwd+FhEtjR/qnD4itULnBbq uBBE0dxXkDSuCcr9RAFQ5ZVT5f2vDBt4tDYP7zsOelKYx9fiDDG/HRFoIGXSzJrVo2OmE072+W3 3Q9MUc7x5IpUnxXw2zltGsHYLUYhUcpQNv+8e59uSyE3Tb92KYeGrfNzsn4nVaq8gEG74rOLLle RmU6qTJVcBR84riTcJLqzTvmcV61YaUkDXCLuJSW+7Z0jOblB1FKdF4yK86qgp5mMskSwOPV0kc wG3eIuJqTTRUv30oCewaD3ulZCebTAz/cXemdZC+ZTPX3aDHauA= X-Received: by 2002:a5d:4152:0:b0:481:4f7a:f685 with SMTP id ffacd0b85a97d-4815a0128afmr8807464f8f.29.1786634550242; Thu, 13 Aug 2026 08:22:30 -0700 (PDT) Received: from FRSMI25-GIGUE (static-css-ccs-204145.business.bouyguestelecom.com. [176.157.204.145]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4815f21a068sm110450f8f.12.2026.08.13.08.22.29 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 13 Aug 2026 08:22:29 -0700 (PDT) From: Fabien Thomas To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 10/17] glibc: CVE-2026-5358 add CVE_STATUS Date: Thu, 13 Aug 2026 17:22:00 +0200 Message-ID: <75d7aa9f43395c673a5a41511cee34c5bb62d199.1786633048.git.fabien.thomas@smile.fr> X-Mailer: git-send-email 2.55.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Thu, 13 Aug 2026 15:22:33 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/243367 From: Adarsh Jagadish Kamini CVE-2026-5358 has been marked rejected. https://sourceware.org/bugzilla/show_bug.cgi?id=34067#c6 https://inbox.sourceware.org/libc-alpha/20260421164416.4031726-1-carlos@redhat.com/T/#mf76c27025e603294611196b90e428769c9fc5a4e Add CVE-2026-5358 to CVE_STATUS_RECIPE group as the CVE is disputed by upstream glibc maintainers. Signed-off-by: Adarsh Jagadish Kamini Signed-off-by: Fabien Thomas --- meta/recipes-core/glibc/glibc_2.43.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-core/glibc/glibc_2.43.bb b/meta/recipes-core/glibc/glibc_2.43.bb index b84c55ca17..a856554782 100644 --- a/meta/recipes-core/glibc/glibc_2.43.bb +++ b/meta/recipes-core/glibc/glibc_2.43.bb @@ -5,7 +5,7 @@ require glibc-version.inc # glibc https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-1010023 # glibc https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-1010024 CVE_STATUS_GROUPS = "CVE_STATUS_RECIPE" -CVE_STATUS_RECIPE = "CVE-2019-1010022 CVE-2019-1010023 CVE-2019-1010024" +CVE_STATUS_RECIPE = "CVE-2019-1010022 CVE-2019-1010023 CVE-2019-1010024 CVE-2026-5358" CVE_STATUS_RECIPE[status] = "disputed: \ Upstream glibc maintainers dispute there is any issue and have no plans to address it further. \ this is being treated as a non-security bug and no real threat." From patchwork Thu Aug 13 15:22:01 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Fabien Thomas X-Patchwork-Id: 95103 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 7CDB0C5DF72 for ; Thu, 13 Aug 2026 15:22:34 +0000 (UTC) Received: from mail-wr1-f44.google.com (mail-wr1-f44.google.com [209.85.221.44]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.21791.1786634553218863325 for ; Thu, 13 Aug 2026 08:22:33 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=RKQJhGoD; spf=pass (domain: smile.fr, ip: 209.85.221.44, mailfrom: fabien.thomas@smile.fr) Received: by mail-wr1-f44.google.com with SMTP id ffacd0b85a97d-471eeac43bfso745758f8f.3 for ; Thu, 13 Aug 2026 08:22:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1786634551; x=1787239351; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to:content-type; bh=Qa9sWjyMw7CMGDiE8hKMOjIZ7QQoMrbpb5S2oA4dS9U=; b=RKQJhGoDLMIWr0x+hyGDKR2Nl/6s9aoX7fPIRs7OydgRnqxr58tzdcyN1s6SQMxaVz fJIB+JJGQKkOE+9jTjL+PCEIe0cbyyx6QsCjK9ehxkCDz0ZdioyjxH7Cq7wh6qk8scku 6Robbr5nFGhNuxKE1hBYf6bJ5YbVznr7EhSq8= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1786634551; x=1787239351; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to:content-type; bh=Qa9sWjyMw7CMGDiE8hKMOjIZ7QQoMrbpb5S2oA4dS9U=; b=dnjkz6oQx+5x6fTUQVngM4kJRA8ofqekwI9+1i4TIjn9Usk8Cgxp3dg3dKU090Swj3 vU8ABcA+mDTQpXtU0V1RR0GqFnoPQi8WNg2lzj2rj9TybMjwGqrKxs98MQzz9Jffvk7O uffjvEbBovz6ICx20iWaIAoHn6bAkASJL0X+7cMyjxChxAdLiubA/FADG48QMgzzo9Kf safovPxqEV/T62hRcOyfMqyc4/KLre7uv/b9xcr2H3z4XA/XJiqRrRzdF9UQ6H1dFToC OyF2OkIlTjoTyEvLEvt7q/rMFwrJ7Y9tQPeRs7ySKFVwOW+0dbYOyIM3CQob8gTHqUrF Y/yw== X-Gm-Message-State: AOJu0YyKvhn+hg4t6wvIXE4wqRUkWXBgTlQVuD5PcxSbfFPFIuWT6xot pv6hALcuJpKBynou0ZNMjaIMcTtfTpGcRkKtFqcueBzJryMGefHyI37O/dXIRwGvPiXih1I8X/o YiP6nbn18PA== X-Gm-Gg: AR+sD10gBGW/1DI0fU7WqTNXpSa2ZCalKf3WWfE9ko2X3d9LmJOYRJ6RqR4vErn85ru 9RyKNEcO6wyK72bE0A6/IapAaJSUo6jI3RpWtBFdvyevk6YCnh3jXT4zMppEFrVZmwvgJDO0iZN xtkCzPqiEyFnMkxtlQNshq03BnJV7hG6j9yiIzDIXrxpIM98AfPiidfIxSmvVLaIy9nWCazL3b/ qyS/3EwZxzTSF4CWqr9VaZTq3Lj1iiHXbOVxzFA0TCIK3sIsKtf8HljHHr9EJjl8JuYpououyZ+ P4JC60NiRRRSxdFeBIEkBejAm8HmgR/8DAXJOlkgmBBe1zcTLO5gTlt1DzvTZiFqlxYRXO9Aukz VrVEv5unz5Vf9Iwa8cUmvjPM1vS/pLsNfjQHo3Pi3saf8lpOkTZ7zfgN/iGFi2Gv1ne/ZKzUD7M EhPHkpDnU9N1HzAxMTbh/ty22SJQ7QNn/9Uh4Gnde8WkH4qxXtVIF4gWeqPz2DFQNxpZiDkDlsG s/JiDGxswgRHsyzgakBinxbNUvFsUmF5HtNx7Sn0yEFj6lk2fVkYnsGTC+2bib7MtRH8GtcTOW9 M09Q0Qxls1lLqIa4VLhiIbt4t57B/ie5QkaRZKRq X-Received: by 2002:a05:6000:1a85:b0:481:57d6:c0f6 with SMTP id ffacd0b85a97d-48159fe4ec8mr9844720f8f.12.1786634551442; Thu, 13 Aug 2026 08:22:31 -0700 (PDT) Received: from FRSMI25-GIGUE (static-css-ccs-204145.business.bouyguestelecom.com. [176.157.204.145]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4815f21a068sm110450f8f.12.2026.08.13.08.22.30 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 13 Aug 2026 08:22:31 -0700 (PDT) From: Fabien Thomas To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 11/17] gstreamer1.0: set status for CVE-2026-5056 Date: Thu, 13 Aug 2026 17:22:01 +0200 Message-ID: <6a77d34c65fe362269a8f4179685f121208230c5.1786633048.git.fabien.thomas@smile.fr> X-Mailer: git-send-email 2.55.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Thu, 13 Aug 2026 15:22:34 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/243368 From: Peter Marko Per [1] this is fixed in 1.28.2. cvelistV5 has just hash in version so creates false positive. [1] https://security-tracker.debian.org/tracker/CVE-2026-5056 Signed-off-by: Peter Marko Signed-off-by: Fabien Thomas --- meta/recipes-multimedia/gstreamer/gstreamer1.0_1.28.2.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0_1.28.2.bb b/meta/recipes-multimedia/gstreamer/gstreamer1.0_1.28.2.bb index b727783746..4e51418c98 100644 --- a/meta/recipes-multimedia/gstreamer/gstreamer1.0_1.28.2.bb +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0_1.28.2.bb @@ -71,4 +71,6 @@ RDEPENDS:${PN}-ptest:append:libc-glibc = " glibc-gconv-iso8859-5" CVE_PRODUCT = "gstreamer" +CVE_STATUS[CVE-2026-5056] = "cpe-stable-backport: Fixed since 1.28.2" + PTEST_BUILD_HOST_FILES = "" From patchwork Thu Aug 13 15:22:02 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Fabien Thomas X-Patchwork-Id: 95105 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 7147DC5B572 for ; Thu, 13 Aug 2026 15:22:44 +0000 (UTC) Received: from mail-wr1-f44.google.com (mail-wr1-f44.google.com [209.85.221.44]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.21619.1786634554279240712 for ; Thu, 13 Aug 2026 08:22:34 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=HaYJUr7w; spf=pass (domain: smile.fr, ip: 209.85.221.44, mailfrom: fabien.thomas@smile.fr) Received: by mail-wr1-f44.google.com with SMTP id ffacd0b85a97d-47f3b39f2a1so2086443f8f.2 for ; Thu, 13 Aug 2026 08:22:34 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1786634552; x=1787239352; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to:content-type; bh=m1aEXbAOYqbzHB3zWWEW5zSDoDHcrutmZMBC1Y0LS+A=; b=HaYJUr7wxHwcCHjeUI8BNJbYnimH7eyYvTSBtVyxEOKcoCdKccYDF2eacrKUrInjGN WF7chgb/+9x48Um7Dfz8RsxQcrNDHxQtZhQgnSsuCNFme9CW4ohf5pw4z4SaH2auAjf/ zL990B5Q0MakvJHLuqqngU366lnC5fMDQ8OBE= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1786634552; x=1787239352; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to:content-type; bh=m1aEXbAOYqbzHB3zWWEW5zSDoDHcrutmZMBC1Y0LS+A=; b=FyOmJRAKnFURieKsw9J0I/Pwbns7EEkG1BhZ7CcH19tJNr1RE67L/4HufJbf8xIhNL 0o+K+hyTmWnbrJ1zQA98BZLCQysFFtHymHSuuSJvwqkbS0XgtNI/A/ML8qEVwpn9NmE9 LCXCG6S/bGbCc767xiq3xsZItdE1p3UgGhX31sdG0xHLsOoj9headvyiX1sjm/4VaU0V TNFry3uOsevXGO1yuGB+RRktgI+GQyICpoJcCgj6kQvbzjl02M3zzoJ653lOUa+oTmPY 4k7Vu/DrEkKbnHTXOHVEag+KQx0VbYgmLoS7MSmrdHLku+8xMDekBl5UV+45M72GD1gy 5D8g== X-Gm-Message-State: AOJu0YzA1AVDrmnNEvh9g6XmMIK/SvBcewcIkS8lb6xwqjwDw2u1ZTVP mz0JjjGRRADsAeDQ8bwX990jypkV7gS9F+X7/aJMKgo+pPUVxGcBrxNCfkkzMaX2jYSWA+5oDDG o/5xU5ulZBg== X-Gm-Gg: AR+sD12LaE4GjzmposgaF6dklpXB1L3deMZm63FuFeXNJcDVIybWP1vWRYqSVRY8Ylw zU4UAy3c8J2kOJZYI4AOiW5/FZ/39dYp0oX0WG/ciCgNejZ/AzTGMgd1QfOoqGcnLxtEmwYJYlV eCIcI1SuY7Sx6OyQ2yrVjZJGIGF2bi2SnpboeX5dGM9kDG6IGr5uyhCSnou0oMUvckjbD4F5t3g XvW217QRmJOaMoaL8IObIeWqIN9d34oSnDNHww2ObQ3iWkcFE2g90fBPHwzgkIdUvuZw+sJrTc7 05IwT7KcpSpkQSQm+g1P8EtKBRTioWBOTjjTuXqTlBkuI6RaEo8okZOHSl5LarVyG2njgwasdiK j6JpHMUc5SFz83cejG0QREGqczF32wjy3EQkZTtTJAW827zGv2FiFEmLxsbAzfU8qhaWwhAx+ot OsEL1jb2ppKNQQBpMzfY9TlOoetYh1ZWcBnDaQJOUv6h7yo0nLekZUB/JzRz0/UNlTEUs8whbhi H+k1Gryoeru3SyOPihTtqRzkYDuaeCnUaMY46JNTFK4mi3qiO3rXm0KynTVNlxb8DSAnGaNys3y /Mga9XTsQ3kPbOZQl5973f9kPPyR6eFh9vHyR3t2 X-Received: by 2002:a5d:59c8:0:b0:47f:c648:e265 with SMTP id ffacd0b85a97d-48159fe3e16mr9651984f8f.17.1786634552476; Thu, 13 Aug 2026 08:22:32 -0700 (PDT) Received: from FRSMI25-GIGUE (static-css-ccs-204145.business.bouyguestelecom.com. [176.157.204.145]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4815f21a068sm110450f8f.12.2026.08.13.08.22.31 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 13 Aug 2026 08:22:32 -0700 (PDT) From: Fabien Thomas To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 12/17] python3-pip: set CVE_PRODUCT Date: Thu, 13 Aug 2026 17:22:02 +0200 Message-ID: X-Mailer: git-send-email 2.55.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Thu, 13 Aug 2026 15:22:44 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/243369 From: Himanshu Jadon CVE_PRODUCT is not set for python3-pip, so cve-check can miss or misreport pip CVEs. CVE-2026-8643 is reported in NVD with pypa:pip. Add CVE_PRODUCT to match the NVD product name and report this CVE correctly. Signed-off-by: Himanshu Jadon Signed-off-by: Richard Purdie (cherry picked from commit a486abd4889ad03e1a8ddd5311595f3ece7d61b6) Signed-off-by: Himanshu Jadon Signed-off-by: Fabien Thomas --- meta/recipes-devtools/python/python3-pip_26.0.1.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/recipes-devtools/python/python3-pip_26.0.1.bb b/meta/recipes-devtools/python/python3-pip_26.0.1.bb index 28af8f7ec7..9640bc926a 100644 --- a/meta/recipes-devtools/python/python3-pip_26.0.1.bb +++ b/meta/recipes-devtools/python/python3-pip_26.0.1.bb @@ -28,6 +28,8 @@ SRC_URI += "file://no_shebang_mangling.patch" SRC_URI[sha256sum] = "c4037d8a277c89b320abe636d59f91e6d0922d08a05b60e85e53b296613346d8" +CVE_PRODUCT = "pypa:pip" + do_install:append(){ # pip vendors distlib which ships Windows launcher templates (*.exe). # Keep them only when building for a Windows (mingw) host. From patchwork Thu Aug 13 15:22:03 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Fabien Thomas X-Patchwork-Id: 95107 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id B27CFC5DF69 for ; Thu, 13 Aug 2026 15:22:44 +0000 (UTC) Received: from mail-wm1-f51.google.com (mail-wm1-f51.google.com [209.85.128.51]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.21792.1786634555235031411 for ; Thu, 13 Aug 2026 08:22:35 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=xLghuj2W; spf=pass (domain: smile.fr, ip: 209.85.128.51, mailfrom: fabien.thomas@smile.fr) Received: by mail-wm1-f51.google.com with SMTP id 5b1f17b1804b1-49553515a8bso777955e9.1 for ; Thu, 13 Aug 2026 08:22:35 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1786634553; x=1787239353; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to:content-type; bh=c6I3XGRRg3Pxs3kmwq4xt/9CTLVJ5n5a77Y+poY60J0=; b=xLghuj2W03t64S3+R/oUgwzEDWJPIDSGcU2SSgRyodyf4y8nTFYirzFEK2tcp4KqcX 2YgB5PzhYhBXL8EUJi6R3F6NAsqlIG/9iO2VvxTjesEXt96xuj2BZ7SuXgl4+EHGc1Un M/el9MB03O6eZZeuDe5k++Tu3z2RZztChF7Ww= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1786634553; x=1787239353; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to:content-type; bh=c6I3XGRRg3Pxs3kmwq4xt/9CTLVJ5n5a77Y+poY60J0=; b=p2XUENWTszhP9Xae8hxeE8QTZzlK3RFvHFFzGAlYg/oeHV9Xk4hc1ag+8XKyd/X+xZ kO5lWTyeaGGWFEhbzbGztlytX8Vm3kMsEM9ixjnU9im0+wa577luNcDeFAaKhOBsNVM3 UwJfk4JF3K0NHQJ4wei9k+o0P/P+W8oBO9ef9hhOZjEFEh6cJZd9SWF2rxhFsTlSRD4m bJ9+O3G9pUKY7rw1teaHYi6TUyLYjc7ImQNALIqVLbuYTaXloDO++YLZFr2sIqDpR48V LOcype9U+cyXkpt7eb2o/xfA9eEGhnvDwAldKKP2y6b/QT0z7fSsXAeAIhZGulXk1snK Suow== X-Gm-Message-State: AOJu0YwIMSRlFVv5zp9Rb1/Q5CDcBwHATLz8ftyyQ2sn8A74/nuuYinq k6NiZP6QBVqrZwGvyEa5Otd/N+UF/ZXieNHnHd92J5zKESqfpa3354HKDilsHff59km+5B/pUhy 25DFdC6Ksbw== X-Gm-Gg: AR+sD13HgOPrxoRnaJwST52wlEUQH1qhF+HklSBO2xyggX8GyvceCz/OZWnwJU7kf2m hauFAsk11dJvwjJe/jeOsVK3CIgawwu9ifxd1A0Z78tKlM/q9dMKZMbD27tx1DxG63YwJmPkkNE /ItTeQwef2O+LL5Xf1rJv4xzDIvBlcMyj6RJPwGG9t29VnZ3S+x+cW/f0Nf/XZWWDt9dQlqh/6z aa9Zioe9yBN1aIvCMBJlxpGtUDurZGwNfSsrgzonBXYBqbHbRvBBBUmnFu5F/s6qW1weLVQ64kJ cobSoiW57iFzsUpRdUNvDduD0jwxQHceG7xVtKBmOzkmXj9yfeaL63BFaodF7HuixNBmQzy3pHY qKGTT9gLeHzWhMW2+08oKLrrSz/PItsCPaLY0xqocux5cQX+oBYHMF2/bJFgSWSX2hbKQRrnJeM NIuWEM3Uu7TMKHtd3KvYr0GbBxkLNJQ/hCRU+IB7Gy/YCGgMpCBTFTzZQY/91dWyo6U4QSpzASp moiQwHWSPPrlw/XOYWDAon1d9U0k7skhS8zseZo0tQsIOA8yM2sEwVEQd7zIyG+bTsdX8wg2etz Zfdx4S6LWPeIusSPusD5y+j9ivy2c7zRDtDKM2hu X-Received: by 2002:a05:600c:310e:b0:499:51f0:a9b2 with SMTP id 5b1f17b1804b1-499821881d3mr73461195e9.1.1786634553363; Thu, 13 Aug 2026 08:22:33 -0700 (PDT) Received: from FRSMI25-GIGUE (static-css-ccs-204145.business.bouyguestelecom.com. [176.157.204.145]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4815f21a068sm110450f8f.12.2026.08.13.08.22.32 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 13 Aug 2026 08:22:32 -0700 (PDT) From: Fabien Thomas To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 13/17] oe-selftest: fitimage: Do not expect kernel property in DTBO config subnodes Date: Thu, 13 Aug 2026 17:22:03 +0200 Message-ID: <065350703218edb0c8f511db92c9fbc0c5cc9369.1786633048.git.fabien.thomas@smile.fr> X-Mailer: git-send-email 2.55.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Thu, 13 Aug 2026 15:22:44 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/243370 From: Adrian Freihofer A DTBO overlay together with only a kernel cannot form a bootable result, so DTBO configuration subnodes should not include the kernel property. Update _get_req_its_fields() accordingly: skip appending 'kernel = "kernel-1"' for .dtbo files, aligning it with _get_req_sections() which already handles this correctly. Signed-off-by: Adrian Freihofer Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked from commit 85e0408a81bdca0411a8625061e5e343c05f92d9) Signed-off-by: Yoann Congal --- meta/lib/oeqa/selftest/cases/fitimage.py | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/meta/lib/oeqa/selftest/cases/fitimage.py b/meta/lib/oeqa/selftest/cases/fitimage.py index 3541c07520..e8435fb43c 100644 --- a/meta/lib/oeqa/selftest/cases/fitimage.py +++ b/meta/lib/oeqa/selftest/cases/fitimage.py @@ -659,7 +659,9 @@ class KernelFitImageBase(FitImageTestCase): dtb_files, dtb_symlinks = FitImageTestCase._get_dtb_files(bb_vars) if dtb_files: for dtb in dtb_files: - its_field_check.append('kernel = "kernel-1";') + # DTBO overlay configs do not include a kernel property + if not dtb.endswith('.dtbo'): + its_field_check.append('kernel = "kernel-1";') its_field_check.append('fdt = "fdt-%s";' % dtb) for dtb in dtb_symlinks: its_field_check.append('kernel = "kernel-1";') From patchwork Thu Aug 13 15:22:04 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Fabien Thomas X-Patchwork-Id: 95108 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id BF8DDC5DF6A for ; Thu, 13 Aug 2026 15:22:44 +0000 (UTC) Received: from mail-wr1-f52.google.com (mail-wr1-f52.google.com [209.85.221.52]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.21795.1786634556052833065 for ; Thu, 13 Aug 2026 08:22:36 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=LgUQ5ONr; spf=pass (domain: smile.fr, ip: 209.85.221.52, mailfrom: fabien.thomas@smile.fr) Received: by mail-wr1-f52.google.com with SMTP id ffacd0b85a97d-47f7854678cso1624868f8f.1 for ; Thu, 13 Aug 2026 08:22:35 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1786634554; x=1787239354; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to:content-type; bh=tbwRddNu+1++cOsEyl6sov0CGhuGFkxG8BDZS5bZYUg=; b=LgUQ5ONrdtr/f489LFqMgcYe/YcWfJrsPzBPxvduL0kU+NpafXB6DHb6nZ+El0/3oj G+inMTHLx7yHTBnhda7kmfst1gaFlRcr50wNX8Au5VCPK+gM6INKyqi/ZbxDkALCI1VD bI1W8VD+UGdN4r/5pu9bVsafUlxYEC3YaOzeU= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1786634554; x=1787239354; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to:content-type; bh=tbwRddNu+1++cOsEyl6sov0CGhuGFkxG8BDZS5bZYUg=; b=sr2lJ1zm2ptCFauXE5xxv938tHOq+en7Y4X69Sd49lgZIcCrqLQYo6Hk51UocttD4O Aq54wfkDSuLyWZxNDq2XWHCZleMLPJ69JXkJHw62hD/hqfaSnhpXYPZVAcCXmi/MSR9+ KLS9vaIc5EAHrZAixPRSwCl5p2aXzbVv8Y7g7VyFJFCPl1JL61r7f2mFpOkw02rkiY1W eRdlfnb4HAwZx0bbZeLz6J4MdTbfgwNg4XoAcZCRbAtSVJEzMQLHwKrB9FjA63e9aFPb 2zoy3/T1RI+eb92oD64ni42eZzNnYu2msWfPmyyFHqR6RHC3HfcGMzXjTJc1fH80M78d PuKA== X-Gm-Message-State: AOJu0Yx5tSMVrZKImRlDq9evU7sLhVkLOGB/lkGrDSwF3eC0zdL1z2Wk 4UrdC/ev/USo651iG29uIXNbBE/fcEEZRbtThwkx463H/EGi7JRkIJqCcm4YMce4rAh6cY0PXYh aiYoJSs9yww== X-Gm-Gg: AR+sD13nnPtbOt09xaBXzwXIU+yGTXkWTz5d7wYOJAUSP9zh0SFyEWJjBZAfrQ0WoTf SB7xSdaVDRyFU/FAw2k4Ex0on5qN7GDIQyOZVx3zW0RzmTkyeyeNZANrKYHxfOazA7qfFQThOqo CTv5yB518/E1agAjeonWGBgU/F8kQYESChrholzDZmGuHnMtQ5BnU/xa/Es/5uPwoEfzPFU2nAi 2AtMfofezPrimMv0lZL6bdyeq2p2LhurvRp8VWMLlc6yprkgrcspw5TdOlN0P9cghmixnYIHjSj LpTCQxpWUq4iQL2yWeUNsiRM785XOvqZPn4t0DhIRx0lc5GTSTYC39wbIglbhLw6h6SSPXN20SU uAN9gJVdrgGuC9uuSGTDKAe+nKRqQI0O7qvu8La9H2rMyFJyCU8r89t+r8AwYKOgIl0bhMWhzNf c9XRqGeUbFWbXOP9MycrgHv98wJGhbar/4mYjVHImwmyXvmv7ehLNDQWjq+Nwc/SupOL6cfV4j+ +QQHhe1GqchqfgpLQdUGXn79Q1qxUt/rJFW2PI3llvyKXsk4nXXKHxILqnx/Y/Qa5A41g4AuCUQ EzZH5MMcHcG/d4Kn8w38vpbbg2eqACM8UD8X6gMt X-Received: by 2002:a05:6000:22c5:b0:47f:c648:e280 with SMTP id ffacd0b85a97d-48159fe3f7bmr9036115f8f.18.1786634554223; Thu, 13 Aug 2026 08:22:34 -0700 (PDT) Received: from FRSMI25-GIGUE (static-css-ccs-204145.business.bouyguestelecom.com. [176.157.204.145]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4815f21a068sm110450f8f.12.2026.08.13.08.22.33 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 13 Aug 2026 08:22:33 -0700 (PDT) From: Fabien Thomas To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 14/17] kernel-fit-image.bbclass: Do not include kernel property in DTBO config subnodes Date: Thu, 13 Aug 2026 17:22:04 +0200 Message-ID: <327d2793ad520e41554d6afdffa881d1806d9619.1786633048.git.fabien.thomas@smile.fr> X-Mailer: git-send-email 2.55.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Thu, 13 Aug 2026 15:22:44 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/243371 From: Marek Vasut The OE 5.0 implementation of fitImage generation did not include the kernel property in DTBO configuration node subnodes, while the current OE 6.0 implementation does. The previous implementation was correct, because kernel together with only a DTBO overlay can not form bootable result. The kernel property should only be part of the configuration subnode which includes both kernel and DTB. Fix this. Fixes: 05d0c7342d76 ("kernel-fit-image.bbclass: add a new FIT image implementation") Signed-off-by: Marek Vasut Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked from commit 06ed34005957a6afb88270603df5e545941546b0) Signed-off-by: Yoann Congal --- meta/lib/oe/fitimage.py | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/meta/lib/oe/fitimage.py b/meta/lib/oe/fitimage.py index 881d0eae0a..d7e21171ab 100644 --- a/meta/lib/oe/fitimage.py +++ b/meta/lib/oe/fitimage.py @@ -425,8 +425,13 @@ class ItsNodeRootKernel(ItsNode): opt_props = {} conf_desc = [] sign_entries = [] + include_kernel = 1 - if self._kernel: + # DTBO configuration sections do not include kernel property + if dtb and os.path.splitext(dtb.name)[1] == ".dtbo": + include_kernel = 0 + + if self._kernel and include_kernel: conf_desc.append("Linux kernel") opt_props["kernel"] = self._kernel.name if self._sign_enable: From patchwork Thu Aug 13 15:22:05 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Fabien Thomas X-Patchwork-Id: 95109 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id D4F08C5DF67 for ; Thu, 13 Aug 2026 15:22:44 +0000 (UTC) Received: from mail-wr1-f51.google.com (mail-wr1-f51.google.com [209.85.221.51]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.21621.1786634557066563205 for ; Thu, 13 Aug 2026 08:22:37 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=0Dl5obdo; spf=pass (domain: smile.fr, ip: 209.85.221.51, mailfrom: fabien.thomas@smile.fr) Received: by mail-wr1-f51.google.com with SMTP id ffacd0b85a97d-47f703a9d05so1568263f8f.0 for ; Thu, 13 Aug 2026 08:22:36 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1786634555; x=1787239355; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to:content-type; bh=PnjXWgKuyINB6iWMQFf7SpFbBIxTD0IjEWmMCEkIjpo=; b=0Dl5obdoUfhmHhcxq67VYIqpwsXdKddWF7zjVzrluFH8dWN+XvRdLIvKDX10SAhVAX uDnDGifgzq0hbw0oPTNpVN4fMYHO4TO4PRGlRfCA7vxfHCHDeVZb9edwPdD9ZjYNgDs2 2j9/xJ+kXJUTydJTYcUyQMHRNY8V+qvgqvTwg= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1786634555; x=1787239355; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to:content-type; bh=PnjXWgKuyINB6iWMQFf7SpFbBIxTD0IjEWmMCEkIjpo=; b=T6W9eknFuYseyJablIHo74VC0gOrscB6+wk4O8fy1IsAfc2ybCSo/XtCA5fJl4Ir+r 1Trfha0tleS407X1HLe6pNBQ4hQcwi7d24z7QwG9ji+a37DipvjHltlN7/wSvVxAJaKp LrT0FnUb/x5/iPNvKlpjOvK5PplRnY0n0H/59HhmxYWWQkiTN55FArcx7fi0iTyG+q+9 +Oa6AxYVtuWmMGxEn7VHA2Pwxg3ZAPoUwqgzAedNCwXzXebEA+3RF+mQrQ4OzSaob6Mp zHIIa+2uY6cP/pWo+w0HYQNGkI5eG935tKnR84DHPyocQy98n57Ss8z9H+E1TSxgA/+Y HcAA== X-Gm-Message-State: AOJu0YzJypaHoxBbhVZ/9i70MNwKhMid/TSt/ICg1Rc9TdvR9lwz6E1c QL7Df8MiF1D9xhxlM6K4IUZ5VUIu9KOadSQAVSbQYDX/qN2dJdwcWyPZST1B4E5mBj3iqTUCiOJ omvu8VsTt1w== X-Gm-Gg: AR+sD10vLKvuVFuqITHXyi4QiY+1s43siKDpG19jXtL0XK8DR4IB9cAJC6kJ4uMzkxR i0cs8LcsQJm5cinUYIkI6Tftb0F956P+nRsS41Wp3vGL7QvF+wzVU182QShSywyBnqQ1FV5oR2l zceiVrbp1bk5nD8J/qWgXIKDhH3oeqWhciArsqTvNHiwNQwGPvwCboBqghWsX5UUD9mM34tRo+K JJZS56ZRVBBN3B+clGLux0FD2nuQ6gB/wfpv5Tgrcwe2rPZuAkfGra/7PiYSOJozN8C8vYgjwZ5 BZ7qWCuSZZD7voMJOzse3R9nu5klvn2tkEh2aqv3J77XmFfbcgPiWvYkaqNTcPr7Y5lhtBII1ZO 32Yyj3/HJDdeh69ZwuS9iuJJNYnR+TQCoSt2C8go6Hi25Ajx0SjtRfD2FmLmASu+vYrJjUeCt2Q dHY8SQm+WMkzo+y+YfVY0OaN7vLGerkz8Xa6fZQfuBOkHh+fBj78DNiU/JwZbdJGihNspjrGw01 DHvbI5EGBzPfRIHoiUY0DUowRAMySNJMoFNRtIcfQmNbRPkZ8rONPlNFjxB8aepTXMEk5pYcTow 8HJVkuAH79OjSH9XLuJVgxb2HkxoeyDPbMyHn/Ob X-Received: by 2002:a05:6000:25fc:b0:47f:9759:7f0e with SMTP id ffacd0b85a97d-48159ee41c9mr10742688f8f.7.1786634555203; Thu, 13 Aug 2026 08:22:35 -0700 (PDT) Received: from FRSMI25-GIGUE (static-css-ccs-204145.business.bouyguestelecom.com. [176.157.204.145]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4815f21a068sm110450f8f.12.2026.08.13.08.22.34 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 13 Aug 2026 08:22:34 -0700 (PDT) From: Fabien Thomas To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 15/17] kernel-fit-image.bbclass: Fix operation with KERNEL_DTBVENDORED = "1" Date: Thu, 13 Aug 2026 17:22:05 +0200 Message-ID: X-Mailer: git-send-email 2.55.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Thu, 13 Aug 2026 15:22:44 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/243372 From: Marek Vasut In the case KERNEL_DTBVENDORED = "1" , the fitImage configuration subnode names used to contain the vendor prefix in OE 5.0 , e.g.: " $ mkimage -l fitImage ... Configuration 0 (conf-freescale_imx8mn-board.dtb) ^^^^^^^^^^ ... " With OE 6.0 this is no longer the case and KERNEL_DTBVENDORED = "1" and KERNEL_DTBVENDORED = "0" behave exactly the same way: " $ mkimage -l fitImage ... Configuration 0 (conf-imx8mn-board.dtb) ... " Users depend on the correct configuration subnode names as those are used in the U-Boot "bootm" command when booting fitImages. Fix this by converting each entry in the KERNEL_DEVICETREE list into the configuration subnode name by replacing all of its path separators with underscores. Fixes: 05d0c7342d76 ("kernel-fit-image.bbclass: add a new FIT image implementation") Signed-off-by: Marek Vasut Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked from commit 4297b94c3728cd2e320d75b68c508e12ab127719) Signed-off-by: Yoann Congal --- meta/classes-recipe/kernel-fit-image.bbclass | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/meta/classes-recipe/kernel-fit-image.bbclass b/meta/classes-recipe/kernel-fit-image.bbclass index ae8f3c6688..448a88ccb1 100644 --- a/meta/classes-recipe/kernel-fit-image.bbclass +++ b/meta/classes-recipe/kernel-fit-image.bbclass @@ -94,6 +94,13 @@ python do_compile() { for dtb in kernel_devicetree.split(): # In deploy_dir the DTBs are without sub-directories also with KERNEL_DTBVENDORED = "1" dtb_name = os.path.basename(dtb) + # With vendored DTs, use the DT name as listed in KERNEL_DEVICETREE + # and replace any path separators with underscores, this behaves the + # same way as KERNEL_DTBVENDORED = "1" did in OE 5.0 and older. + if d.getVar('KERNEL_DTBVENDORED') != "1": + conf_name = dtb_name + else: + conf_name = dtb.replace('/', '_') # Skip DTB if it's also provided in EXTERNAL_KERNEL_DEVICETREE directory if external_kernel_devicetree: @@ -103,7 +110,7 @@ python do_compile() { # Copy the dtb or dtbo file into the FIT image assembly directory shutil.copyfile(os.path.join(kernel_deploydir, dtb_name), dtb_name) - root_node.fitimage_emit_section_dtb(dtb_name, dtb_name, + root_node.fitimage_emit_section_dtb(conf_name, dtb_name, d.getVar("UBOOT_DTB_LOADADDRESS"), d.getVar("UBOOT_DTBO_LOADADDRESS")) if external_kernel_devicetree: From patchwork Thu Aug 13 15:22:06 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Fabien Thomas X-Patchwork-Id: 95106 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 714BBC5CFEB for ; Thu, 13 Aug 2026 15:22:44 +0000 (UTC) Received: from mail-wr1-f50.google.com (mail-wr1-f50.google.com [209.85.221.50]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.21797.1786634558038614723 for ; Thu, 13 Aug 2026 08:22:38 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=r8cuZPcT; spf=pass (domain: smile.fr, ip: 209.85.221.50, mailfrom: fabien.thomas@smile.fr) Received: by mail-wr1-f50.google.com with SMTP id ffacd0b85a97d-472326ca506so1445161f8f.2 for ; Thu, 13 Aug 2026 08:22:37 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1786634556; x=1787239356; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to:content-type; bh=JKnPzLmNbYYd3vk9YlZgalVqAFQ2rrMccLfAYMxrjdg=; b=r8cuZPcTBjqJXw9AffLW92abyhkUlwjvKZZAxUgO6g504N++1+N+kCYva1qp1RGp/H aO2WGaFj60w2sKzm+w8FI9i+acfjyWO35+k5bJe9zA9bGYvxZQy+6ly7vX0/pL/xK71B cdDCR/adi2Y2u9ShzUfwsR0l9EX91nYsGLq60= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1786634556; x=1787239356; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to:content-type; bh=JKnPzLmNbYYd3vk9YlZgalVqAFQ2rrMccLfAYMxrjdg=; b=ArXy7Mc/rnBcIcHTI8/EONOAQDTDTFsIsBz/HdNMl6NrGAZqXUZ2745ZgzwCivrA5Y 6Td33BAgJvdt+ML+1VwaFyygmCO5XK0Pmw0YyY/HV9yQFhu8mKOffsQ+6s2OzIwkcUNn elKGcG33gg8Wenf/P25PLiyUxO2PfFbmbp1rINDFy2t6yu4ucI92PUxsypkZlzFB6yNB zGkik4rLJHRnUGaanmOTVVzZ0n3d/Cn/cKyTB3PIcdc/o1xbNGDIwEWdiyOKN1jPFI01 LWyDwA/I2K/r8zszF4zlw93rop8GYanqVvKprO/rMb5pmnMuedONfbzlmZGSKU8Jbos/ OQXA== X-Gm-Message-State: AOJu0YxjBXekdjEHnGSj9rHoL5OaF1RKt38HKFVQWgKCIl959lmpvcRP +qQ0WFyZuOI+UKI5zfe8dxZgNEzKJ94qKBlM9GWa5Z+3+2qx4P8xbIPOdqSoMGuRNLmZ3664o8x AdwZYdCLQYg== X-Gm-Gg: AR+sD11pXFJN5+sflVIibJmA7DPTBxA1wPiOBxD+YpSC2iZ8xcd0jKcHGzCDvra4X1M OuyMUOKu+/d4kT1xvkCaGkiGr2Gkp/KJiookqVXZTOpUHRguCppGWVZRWO/uc+Eivdmuqaqxie0 arOnZ9JLGslf7APxylzzC8IoJUfQjHII6Nba0LfT/LQtRkuXgytuWx5JehMSqhyOe6PL7pCzRFi EWqyaNH4aVvCVtYe4SJsPxOt5V8g28D9RKbVAjEetnuIEfL/vYAPLdQgDjzrgZx5rFivYSGXdCr BPywtlPBqe0stQ7tj3bIL+rSIoVZmQTahV/ZPRNTFgzWul7pa0Uf9sizDIuity4M3uW9VSfU00h EsWWb0tzEimYAX+9hvxhPfgOaqihVvrkRqDfYQA2GBkQtpdsN+O/E3lvzy4IvcBQiCQCTnBNqhy zHnIPVAF4HQ7CEGVIWXWLNX1FvMnwFtLnBijhIQijogAq/spP4NCwkzPTR87id36qsuziZrIEVZ Y0uDAyNo0h6EYCbRt9qPFax39400cf2+wXZFaxVp4FaEckLNnJEze1NF4UnNJBqCZDkBUmk/+qq Xn/nRNS1nuStWOk+IfilFkUDDL9ssyeMyyjb50jTW7NrLZxT3JY= X-Received: by 2002:a05:6000:29cf:b0:47f:e760:e5b9 with SMTP id ffacd0b85a97d-48159ee4b01mr7399904f8f.18.1786634556117; Thu, 13 Aug 2026 08:22:36 -0700 (PDT) Received: from FRSMI25-GIGUE (static-css-ccs-204145.business.bouyguestelecom.com. [176.157.204.145]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4815f21a068sm110450f8f.12.2026.08.13.08.22.35 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 13 Aug 2026 08:22:35 -0700 (PDT) From: Fabien Thomas To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 16/17] kernel-fit-image: Add KERNEL_DTBVENDORED support for FIT_CONF_DEFAULT_DTB Date: Thu, 13 Aug 2026 17:22:06 +0200 Message-ID: <538dc59ec4ca7a698af170f7dd1fd6b87656fe03.1786633048.git.fabien.thomas@smile.fr> X-Mailer: git-send-email 2.55.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Thu, 13 Aug 2026 15:22:44 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/243373 From: Ryan Eatmon When specifying a FIT_CONF_DEFAULT_DTB for a machine, you have to exactly align the name with what will be in the fitImage file or you will get a build error. If you also turn on KERNEL_DTBVENDORED then you must also specify the vendor directory as part of the dtb name that you want for the default, but you must manually do the same mapping that the kernel-fit-image class is doing when it generates the fit-image.its file. This patch just adds the same logic to figure out the value for the requested default dtb and eliminate the need to understand the internal mapping of the class. It should make specifying the value more intuitive. The same value that you put in the KERNEL_DEVICETREE can be used in the FIT_CONF_DEFAULT_DTB and the new code will correctly honor the KERNEL_DTBVENDORED setting. Before: KERNEL_DEVICETREE = " ti/k3-am62p5-sk.dtb \ ... \ " FIT_CONF_DEFAULT_DTB = "ti_k3-am62p5-sk.dtb" After: KERNEL_DEVICETREE = " ti/k3-am62p5-sk.dtb \ ... \ " FIT_CONF_DEFAULT_DTB = "ti/k3-am62p5-sk.dtb" Signed-off-by: Ryan Eatmon Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie (cherry picked from commit 3bceb2dabeee13c0a80ddd74ea7ae991606d6772) Signed-off-by: Yoann Congal --- meta/classes-recipe/kernel-fit-image.bbclass | 21 +++++++++++++++----- 1 file changed, 16 insertions(+), 5 deletions(-) diff --git a/meta/classes-recipe/kernel-fit-image.bbclass b/meta/classes-recipe/kernel-fit-image.bbclass index 448a88ccb1..cfe43a5a30 100644 --- a/meta/classes-recipe/kernel-fit-image.bbclass +++ b/meta/classes-recipe/kernel-fit-image.bbclass @@ -55,6 +55,13 @@ FIT_KERNEL_SIGN_ENABLE ?= "${UBOOT_SIGN_ENABLE}" FIT_KERNEL_SIGN_KEYNAME ?= "${UBOOT_SIGN_KEYNAME}" FIT_KERNEL_SIGN_KEYDIR ?= "${UBOOT_SIGN_KEYDIR}" +def apply_dtbvendored(d,dtb): + if d.getVar('KERNEL_DTBVENDORED') != "1": + mapped_name = os.path.basename(dtb) + else: + mapped_name = dtb.replace('/', '_') + return mapped_name + python do_compile() { import shutil import oe.fitimage @@ -97,10 +104,7 @@ python do_compile() { # With vendored DTs, use the DT name as listed in KERNEL_DEVICETREE # and replace any path separators with underscores, this behaves the # same way as KERNEL_DTBVENDORED = "1" did in OE 5.0 and older. - if d.getVar('KERNEL_DTBVENDORED') != "1": - conf_name = dtb_name - else: - conf_name = dtb.replace('/', '_') + conf_name = apply_dtbvendored(d, dtb) # Skip DTB if it's also provided in EXTERNAL_KERNEL_DEVICETREE directory if external_kernel_devicetree: @@ -195,8 +199,15 @@ python do_compile() { loadable_loadaddress, loadable_entrypoint) + # Figure out if we have a default dtb and if we need to honor the + # KERNEL_DTBVENDORED variable to tweak the name to match what will be + # in the fitImage. + default_dtb = d.getVar("FIT_CONF_DEFAULT_DTB") + if default_dtb: + default_dtb = apply_dtbvendored(d, default_dtb) + # Generate the configuration section - root_node.fitimage_emit_section_config(d.getVar("FIT_CONF_DEFAULT_DTB"), d.getVar("FIT_CONF_MAPPINGS")) + root_node.fitimage_emit_section_config(default_dtb, d.getVar("FIT_CONF_MAPPINGS")) # Write the its file root_node.write_its_file(itsfile) From patchwork Thu Aug 13 15:22:07 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Fabien Thomas X-Patchwork-Id: 95110 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 895F8C5DF64 for ; Thu, 13 Aug 2026 15:22:44 +0000 (UTC) Received: from mail-wm1-f42.google.com (mail-wm1-f42.google.com [209.85.128.42]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.21623.1786634559042427452 for ; Thu, 13 Aug 2026 08:22:39 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=M4c941i2; spf=pass (domain: smile.fr, ip: 209.85.128.42, mailfrom: fabien.thomas@smile.fr) Received: by mail-wm1-f42.google.com with SMTP id 5b1f17b1804b1-4998590d392so541045e9.0 for ; Thu, 13 Aug 2026 08:22:38 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1786634557; x=1787239357; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to:content-type; bh=A8AHs1ylDIbWoWM8khx49NBOGIBfL422tBGEC4AB8Cw=; b=M4c941i2BexGNLV54nyB8FXoCnVmpLgPdIyzWlsuG2tc0fqkKM4PKxjjHneEyjx1Lf YXQvazHQZBSxGqpv4Z0yIFlLPv7WNfOmUtm8j7Y2Lu9JJs/V//dOybhqntmXQBVnR1L+ g0WcOx18xHm1XPLpotvmEwd05VtXIrOmLIz18= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1786634557; x=1787239357; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to:content-type; bh=A8AHs1ylDIbWoWM8khx49NBOGIBfL422tBGEC4AB8Cw=; b=VmNKzVNVPyJjVXZClfL6z5t7Vu4TTVaGOywgYxTQ/208/Arr37FtJUUdcWRGzkeNHl VVsvEZw+e0u6TmvRTbbywxbDB4jHEbRXGzyJ5XLg9hDUJVb6xD7u59B+NntySmkJS2WM KIVjhbTliW2u0HHvYSQG6nhSTH9549Zf71uD5jXtVKaXe05XnCDZFvhbcK9oI6VKIiO/ 3qPs3ajbPhzWrK6xsIRlDRlmiNNK3xPr4NE2JZDGuYRzK++0QMFMw9uBoEQ4o2N0MeHK lBwWB1Q6txU1EU/WOHmebl7TiWoSXEbwF0AQtKL1/KeEyAAZ6Pozz5lrj+uPXXquqPvc 16Iw== X-Gm-Message-State: AOJu0YxfNmaq16tYkjDDJ3P+y2IqgnvmOntI/MB4MSpJURUPQddtflgd EpttJ0dRzWtlBtQQDuXyncuOnJMJLn1RqqiLYxt8ArylwW7gjd2KZtrEPpqJEQV5uR1lxxWW2Sr FuOth2Ew5XA== X-Gm-Gg: AR+sD13yh8pBgIsaQJQiaoOIq3R4RZSs6Eitt0y9qdJp4tGjYjv+jX0YfLz4czHIyL8 d5CLxhM6Wvv/BXSEbvbHJnn118yusp6zi9ZK2TAruAoegVRtn18nTOSPeYUJuAuTRWPsEpGb1Io Nl8M+VezTxpoH2NATpQiDNUdbCqLHN43dTxMfA6RYiuP0SJY1Tm9uJZ7oQWAhphyEhp5siCDlOR 2km4EvfppE3CTiT0+/d1MEvMDFzNSQ2EL3cL0GLbw0ApW8ZoiNPwfDdKw+lK5ChVithYm0e6Cnp RutAhvCUoR0jv0j9B42r/5/RoeTcf2YZTT5NQ5+cY++OOjb6m/AnGEoEpJMNSLusuyBMfvpWv9r X5wYcLStXrDz80llq0LwUCFlkBWEjPbOeeAcJobXaB8WnxolP/isLPTIvldCZ0dPfBiaKsVdWIQ G4yAjyF2p/S/joKx/qlLYhGpNTEvi1bTNyxx9UNUdDKA5a21umA+b8QSVd092TZLVdc263Twu7I oqPifzGk8AKrvoHGkcTN/9OYGJfR0JqmfVKsJGd1YBdNyQf4DmTLlDakJbDKaqqLYYUbtNrTJoC Lav514xmkvD2KzBuuH1x5xtm0/jAK9+ZsiiWBzix X-Received: by 2002:a05:6000:4403:b0:481:4f2a:bdb0 with SMTP id ffacd0b85a97d-48159fe3cf8mr7741603f8f.18.1786634557104; Thu, 13 Aug 2026 08:22:37 -0700 (PDT) Received: from FRSMI25-GIGUE (static-css-ccs-204145.business.bouyguestelecom.com. [176.157.204.145]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4815f21a068sm110450f8f.12.2026.08.13.08.22.36 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 13 Aug 2026 08:22:36 -0700 (PDT) From: Fabien Thomas To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 17/17] oe-selftest: fitimage: Add tests for KERNEL_DTBVENDORED Date: Thu, 13 Aug 2026 17:22:07 +0200 Message-ID: X-Mailer: git-send-email 2.55.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Thu, 13 Aug 2026 15:22:44 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/243374 From: Ryan Eatmon The recent changes to fixing KERNEL_DTBVENDORED support and then adding the same mapping for FIT_CONF_DEFAULT_DTB exposed that we were missing tests for these two cases. Signed-off-by: Ryan Eatmon Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie (cherry picked from commit de2e11e63624f86583875163e66f63ea7457c121) Signed-off-by: Marek Vasut Signed-off-by: Fabien Thomas --- meta/lib/oeqa/selftest/cases/fitimage.py | 55 +++++++++++++++++++++++- 1 file changed, 53 insertions(+), 2 deletions(-) diff --git a/meta/lib/oeqa/selftest/cases/fitimage.py b/meta/lib/oeqa/selftest/cases/fitimage.py index e8435fb43c..b35dda6674 100644 --- a/meta/lib/oeqa/selftest/cases/fitimage.py +++ b/meta/lib/oeqa/selftest/cases/fitimage.py @@ -183,6 +183,16 @@ class FitImageTestCase(OESelftestTestCase): pass return a_comment + @staticmethod + def _apply_dtbvendored(bb_vars,dtb): + """ This is (and should remain) the same logic that is in kernel-fit-image.bbclass + """ + if bb_vars.get('KERNEL_DTBVENDORED') != "1": + mapped_name = os.path.basename(dtb) + else: + mapped_name = dtb.replace('/', '_') + return mapped_name + @staticmethod def _get_dtb_files(bb_vars): """Return a list of devicetree names @@ -195,7 +205,7 @@ class FitImageTestCase(OESelftestTestCase): all_dtbs = [] dtb_symlinks = [] if kernel_devicetree: - all_dtbs += [os.path.basename(dtb) for dtb in kernel_devicetree.split()] + all_dtbs += [FitImageTestCase._apply_dtbvendored(bb_vars, dtb) for dtb in kernel_devicetree.split()] # Support only the test recipe which provides 1 devicetree and 1 devicetree overlay pref_prov_dtb = bb_vars.get('PREFERRED_PROVIDER_virtual/dtb') if pref_prov_dtb == "bbb-dtbs-as-ext": @@ -437,6 +447,7 @@ class KernelFitImageBase(FitImageTestCase): 'INITRAMFS_IMAGE', 'KERNEL_DEPLOYSUBDIR', 'KERNEL_DEVICETREE', + 'KERNEL_DTBVENDORED', 'KERNEL_FIT_LINK_NAME', 'MACHINE', 'PREFERRED_PROVIDER_virtual/dtb', @@ -653,7 +664,7 @@ class KernelFitImageBase(FitImageTestCase): fit_conf_default_dtb = bb_vars.get('FIT_CONF_DEFAULT_DTB') if fit_conf_default_dtb: fit_conf_prefix = bb_vars.get('FIT_CONF_PREFIX', "conf-") - its_field_check.append('default = "' + fit_conf_prefix + fit_conf_default_dtb + '";') + its_field_check.append('default = "' + fit_conf_prefix + self._apply_dtbvendored(bb_vars, fit_conf_default_dtb) + '";') # configuration nodes (one per DTB and also one per symlink) dtb_files, dtb_symlinks = FitImageTestCase._get_dtb_files(bb_vars) @@ -1142,6 +1153,46 @@ FIT_HASH_ALG = "sha256" self._gen_signing_key(bb_vars) self._test_fitimage(bb_vars) + def test_vendored_dtb_without_kernel_dtbvendored(self): + """ + Summary: Check if FIT image and Image Tree Source (its) are created correctly with KERNEL_DTBVENDORED turned off. + Expected: 1) its and FIT image are built successfully + 2) Dumping the FIT image indicates the devicetree overlay + """ + + config = """ +MACHINE:forcevariable = "beaglebone-yocto" +UBOOT_MACHINE = "am335x_evm_defconfig" +UBOOT_ARCH = "arm" +UBOOT_DTB_BINARY = "u-boot.dtb" +KERNEL_DTBVENDORED = "0" +""" + config = self._config_add_kernel_classes(config) + config = self._config_add_uboot_env(config) + self.write_config(config) + bb_vars = self._fit_get_bb_vars() + self._test_fitimage(bb_vars) + + def test_vendored_dtb_with_kernel_dtbvendored(self): + """ + Summary: Check if FIT image and Image Tree Source (its) are created correctly with KERNEL_DTBVENDORED turned on. + Expected: 1) its and FIT image are built successfully + 2) Dumping the FIT image indicates the devicetree overlay + """ + + config = """ +MACHINE:forcevariable = "beaglebone-yocto" +UBOOT_MACHINE = "am335x_evm_defconfig" +UBOOT_ARCH = "arm" +UBOOT_DTB_BINARY = "u-boot.dtb" +KERNEL_DTBVENDORED = "1" +""" + config = self._config_add_kernel_classes(config) + config = self._config_add_uboot_env(config) + self.write_config(config) + bb_vars = self._fit_get_bb_vars() + self._test_fitimage(bb_vars) + class FitImagePyTests(KernelFitImageBase): """Test cases for the fitimage.py module without calling bitbake"""