OpenBMC Distribution (mirror) https://git.radix-linux.su/BMC/OpenBmc/openbmc.git/atom?h=master 2026-04-24T20:49:06+00:00 2026-04-24T20:49:06+00:00 Patrick Williams patrick@stwcx.xyz 2026-04-24T02:55:58+00:00 urn:sha1:85f73dcdee490d929107d5696575954a0adfe897 Ahmad Fatoum (1): barebox: upgrade 2026.03.1 -> 2026.04.0 Alexander Kanavin (1): libjpeg-turbo: exclude x.y.9z versions from upstream check Antonin Godard (1): sbom-cve-check-common: print warnings on unpatched CVEs BELHADJ SALEM Talel (1): image_types: catch exception if no CONVERSION_CMD is defined Benjamin Robin (1): python3-sbom-cve-check: Update to version 1.3.0 Benjamin Robin (Schneider Electric) (11): oe/sbom30: Remove unneeded oe.sbom30. to reference local symbol oe/sbom30: Simplify sorting of license_text_map oe/sbom30: Fix undeclared variable in import_bitbake_build() oe/spdx30_tasks: Remove unused license_ref_idx variable oe/spdx30_tasks: Fix return value of get_package_sources_from_debug oe/spdx30_tasks: Remove unused local variables oe/spdx_common: Remove redundant '\d' in RegExp oe/spdx_common: Remove unused local variables oe/spdx30_task: Add status notes to VEX relationship oe/spdx30_task: Prevent duplication of sources in hasInput rel devtool-source: set S variable to a sub dir of UNPACKDIR Bruce Ashfield (10): linux-yocto/6.18: update to v6.18.20 linux-yocto/6.18: update CVE exclusions (6.18.20) linux-yocto/6.18: update to v6.18.21 linux-yocto/6.18: update CVE exclusions (6.18.21) linux-yocto/6.18: update to v6.18.22 linux-yocto/6.18: update CVE exclusions (6.18.22) linux-yocto/6.18: update to v6.18.23 linux-yocto/6.18: update CVE exclusions (6.18.23) linux-yocto/6.18: update to v6.18.24 linux-yocto/6.18: update CVE exclusions (6.18.24) Chen Qi (2): systemd: drop unneeded sysv compat patch systemd: add osc-context PACKAGECONFIG Ernst Persson (1): busybox: fix for CVE-2026-26157, CVE-2026-26158 Franz Schnyder (1): gnutls: Add p11-kit for native builds Haiqing Bai (1): libxml-parser-perl: patch CVE-2006-10003 Himanshu Jadon (1): apt: Add CVE_PRODUCT to support product name Jason Schonberg (1): ruby: upgrade 4.0.1 -> 4.0.2 Jörg Sommer (1): run-postinsts: Replace which by command -v Mathieu Dubois-Briand (2): python3: exclude test_timerfd_TFD_TIMER_ABSTIME from ptest python3: Simplify ptest exclusion list Michael Arndt (1): sstate: Fail on file systems without hard link support Paul Barker (1): image_types_wic: Introduce wicenv image type Peter Kjellerstedt (1): combo-layer: Remove the script and its associated files Peter Marko (6): binutils: mark CVE-2025-69652 as fixed binutils: patch CVE-2026-4647 create-spdx-3.0: rerun do_create_recipe_spdx on patch changes go: skip recipe instead of throwing fatal error on unknown architectures cve-exclusions: set status for 5 CVEs cve-exclusions: set status for CVE-2025-71145 Quentin Schulz (1): mesa: upgrade 26.0.3 -> 26.0.5 Richard Purdie (10): groff: Fix occasional build race failure pseudo: Upgrade to 1.9.4 pseudo: Upgrade to 1.9.5 shadow: Disable tallylog execution shadow: Drop 'pointless' patch python3-python-spdx-model: Upgrade 0.0.4 -> 0.0.5 selftest/runtime_test: Avoid virgl test on opensuse 16.0 for now sanity.conf: Depend on bitbake 2.18 base/bitbake.conf: Rework DISTRO_FEATURES and MACHINE_FEATURES default handling build-appliance-image: Update to master head revisions Ross Burton (12): libsoup: actually apply patches for CVE-2025-32049 and CVE-2026-1539 libsoup: mark CVEs which have been resolved upstream glib-networking: backport fix for CVE-2026-2574 python3-requests: backport fix for CVE-2026-25645 python3: prefer valid dists when searching for entry points bluez5: mark two CVEs as being in the wrong product systemd: mark several CVEs as fixed xz: mark several CVEs as fixed xz: fix CVE-2026-34743 util-linux: fix CVE-2026-27456 quilt: remove bzip2 RDEPENDS vim: disable GTK+3 UI by default Sunil Dora (1): libcxx: fix libunwind collision with musl builds Wang Mingyu (1): python3-shacl2code: upgrade 0.0.24 -> 1.0.1 Yoann Congal (8): virglrenderer: update a merged patch Upstream-Status oeqa/selftest/incompatible_lic: add wayland feature check for test needing it build-appliance-image: switch SRC_URI to https protocol scripts: Default to https git protocol for YP/OE repos oeqa/selftest/git-submodule-test: Default to https git protocol for YP/OE repos oeqa/selftest/devtool-test-git-gitsm: Default to https git protocol for YP/OE repos meta/files/layers.example.json: switch to https clone URIs oeqa/sdk: Default to https git protocol for YP/OE repos Change-Id: Ie3f769ddd5ccd4d3b99bfc85e7f4673f7a162651 Signed-off-by: Patrick Williams <patrick@stwcx.xyz> 2026-03-11T21:48:36+00:00 Patrick Williams patrick@stwcx.xyz 2026-03-11T20:37:31+00:00 urn:sha1:b36127831f3340e3148e3fe6144fec31d9b333fd Poky has been deprecated and instead we are expected to have individual layers. Move the openembedded-core sourced directories to a separate upstream-layers directory in preparation for this and clean out any old poky content that is not present in openembedded-core. Signed-off-by: Patrick Williams <patrick@stwcx.xyz> Change-Id: Id969d4852ffc4b0188ea2262c7ec0fe8fea935fe