openembedded-core: subtree update:42fa856a00..907af8fb44

2026-05-14T19:46:27+00:00

Adam Blank (2): lib/packagedata.py: slight improvement to code readability sstate: remove dead code and unify path operations Alexander Kanavin (1): sbom-cve-check: set PV from upstream tags and ensure version checks are correct Andrew Geissler (1): efivar: Backport patch to fix -march issue for ppc64le Ankur Tyagi (2): tzdata/tzcode-native: upgrade 2026a -> 2026b wireless-regdb: upgrade 2026.02.04 -> 2026.03.18 Antonin Godard (1): mirrors: remove inactive sources.openembedded.org URLs Benjamin Robin (Schneider Electric) (3): python3-sbom-cve-check: Update to version 1.3.1 sbom-cve-check-update-cvelist-native: Update source revision sbom-cve-check-update-nvd-native: Update source revision Bin Cao (1): scripts/cve-json-to-text.py: simplify getopt argument parsing Bruce Ashfield (6): linux-yocto/6.18: update to v6.18.25 linux-yocto/6.18: update CVE exclusions (6.18.25) linux-yocto/6.18: update to v6.18.26 linux-yocto/6.18: update CVE exclusions (6.18.26) linux-yocto/6.18: update to v6.18.28 linux-yocto/6.18: update CVE exclusions (6.18.28) Changqing Li (1): gstreamer1.0-plugins-bad: disble vulkan when x11/wayland not enabled Corentin Guillevic (1): sanity: add check for own-mirrors/SOURCE_MIRROR_URL Daniel McGregor (1): python3-requests: update to 2.33.1 Denys Dmytriyenko (2): wayland: upgrade 1.24.0 -> 1.25.0 weston: upgrade 15.0.0 -> 15.0.1 Dmitry Sakhonchik (1): shadow-native: Change upstream status of disable_syslog.patch Himanshu Jadon (2): apr: Add CVE_PRODUCT to support product name apr-util: Add CVE_PRODUCT to support product name Ivan Nestlerode (1): glibc: Fix recipe bug that disabled stack protector Joao Marcos Costa (2): u-boot-tools: drop yaml in DT validation u-boot-tools: drop the hardlink workaround in do_compile João Marcos Costa (3): soc-family.inc: improve clarity at MACHINEOVERRIDES's prepend meta: simplify conditional operations with bb.utils.filter insane: simplify conditional operations with bb.utils.filter Khem Raj (8): gn: upgrade to latest revision dos2unix: upgrade 7.5.4 -> 7.5.5 python3-pdm-backend: upgrade 2.4.7 -> 2.4.8 python3-pdm: upgrade 2.26.6 -> 2.26.7 python3-lxml: upgrade 6.0.2 -> 6.0.4 re2c: upgrade 4.4 -> 4.5.1 libmpc: Upgrade to 1.4.0 u-boot-tools: Add dependency on libyaml for dtschema validation Leonardo Costa (1): bluez5: add patches to fix 8.56 cli issues Li Wang (1): perf: add PACKAGECONFIG for llvm Marcus Flyckt (1): initramfs-framework: overlayroot: Don't assume rootfs location Mingli Yu (1): valgrind: Upgrade 3.26.0 -> 3.27.0 Moritz Haase (2): cmake: upgrade 4.3.1 -> 4.3.2 devtool: Disable gpg signing when setting up source tree repos Paul Barker (1): oe/lsb: Only read /etc/os-release Peter Marko (49): shadow: set CVE_PRODUCT ruby: set status for CVE-2025-0306 python3-setuptools: set status for CVE-2024-6345 p11-kit: set status for CVE-2026-2100 libva: set status for CVE-2023-39929 harfbuzz: set status for CVE-2024-56732 gnutls: set status for CVE-2026-1584 cve-extra-exclusions: ignore CVE-2019-2708 bind: set status for CVE-2017-3139 base-files: set status for CVE-2018-6557 rsync: set status for CVE-2024-12084 python3-requests: set status for CVE-2024-35195 python3-requests: set status for CVE-2024-47081 git: set status of 5 CVEs cargo: set status of CVE-2023-40030 cargo: set CVE_PRODUCT ovmf: set status for 7 CVEs sed: upgrade 4.9 -> 4.10 expat: upgrade 2.7.5 -> 2.8.0 ffmpeg: set status for 4 CVEs coreutils: set CVE_PRODUCT cups: upgrade 2.4.16 -> 2.4.19 libsoup: set status for CVE-2026-2436 libsoup: patch CVE-2026-5119 sudo: set CVE_PRODUCT libsoup: set status for CVE-2026-2369 libmicrohttpd: set status for CVE-2025-59777 and CVE-2025-62689 libsdl2: set status for CVE-2026-35444 libcap: set status for CVE-2026-4878 libarchive: set status for CVE-2026-4426 libgcrypt: upgrade 1.12.1 -> 1.12.2 libpng: upgrade 1.6.56 -> 1.6.58 python3-lxml: upgrade 6.0.4 -> 6.1.0 tiff: patch CVE-2026-4775 sudo: patch CVE-2026-35535 libssh2: patch CVE-2026-7598 inetutils: patch CVE-2026-32772 libarchive: set status of CVE-2026-5745 perf: make libraries for install_headers configurable rpm-sequoia: set status for CVE-2026-2625 libxml2: set status for CVE-2026-6732 gdk-pixbuf: set status for 2.44.6 xserver-xorg: set status for CVE-2026-34000 and CVE-2026-34002 libsoup: patch CVE-2026-2708 busybox: patch CVE-2024-58251 go: upgrade 1.26.2 -> 1.26.3 glibc: stable 2.43 branch updates ffmpeg: upgrade 8.0.1 -> 8.1.1 python3: upgrade 3.14.4 -> 3.14.5 Peter Tatrai (1): rust: fix codegen test failure on big-endian targets Pratik Farkase (3): go: add ptest support go: ptest: improvements and multiple fixes in golang ptest go: ptest: fix GOROOT detection and improve cleanup/exit handling Quan Sun (1): qemu: fix iotlb_to_section() for different AddressSpace Richard Purdie (65): useradd: Switch from --root to --prefix option pseudo: Update 1.9.5 -> 1.9.6 at-spi2-core: upgrade 2.60.0 -> 2.60.3 boost-build-native: upgrade 1.90.0 -> 1.91.0 ccache: upgrade 4.13.3 -> 4.13.5 coreutils: upgrade 9.10 -> 9.11 dhcpcd: upgrade 10.3.1 -> 10.3.2 epiphany: upgrade 50.3 -> 50.4 ethtool: upgrade 6.19 -> 7.0 font-util: upgrade 1.4.1 -> 1.4.2 gdk-pixbuf: upgrade 2.44.5 -> 2.44.6 git: upgrade 2.53.0 -> 2.54.0 gn: upgrade to latest revision gtk4: upgrade 4.22.2 -> 4.22.4 iproute2: upgrade 6.19.0 -> 7.0.0 libdrm: upgrade 2.4.131 -> 2.4.133 libgpg-error: upgrade 1.59 -> 1.60 libjpeg-turbo: upgrade 3.1.3 -> 3.1.4.1 libmpc: upgrade 1.4.0 -> 1.4.1 libsolv: upgrade 0.7.36 -> 0.7.37 libxml2: upgrade 2.15.2 -> 2.15.3 libxmlb: upgrade 0.3.25 -> 0.3.26 libxpm: upgrade 3.5.18 -> 3.5.19 makedumpfile: upgrade 1.7.8 -> 1.7.9 mesa, mesa-tools-native: Upgrade 26.0.5 -> 26.0.6 meson: upgrade 1.11.0 -> 1.11.1 mpg123: upgrade 1.33.4 -> 1.33.5 nghttp2: upgrade 1.68.1 -> 1.69.0 puzzles: upgrade to latest revision python3-attrs: upgrade 25.4.0 -> 26.1.0 python3-build: upgrade 1.4.3 -> 1.5.0 python3-certifi: upgrade 2026.2.25 -> 2026.4.22 python3-click: upgrade 8.3.1 -> 8.3.3 python3-hypothesis: upgrade 6.151.9 -> 6.152.4 python3-idna: upgrade 3.11 -> 3.13 python3-jsonpointer: upgrade 3.0.0 -> 3.1.1 python3-mako: upgrade 1.3.10 -> 1.3.12 python3-numpy: upgrade 2.4.3 -> 2.4.4 python3-pathspec: upgrade 1.0.4 -> 1.1.1 python3-pdm: upgrade 2.26.7 -> 2.26.8 python3-pip: upgrade 26.0.1 -> 26.1 python3-pygobject: upgrade 3.56.1 -> 3.56.2 python3-pyopenssl: upgrade 26.0.0 -> 26.1.0 python3-testtools: upgrade 2.9.0 -> 2.9.1 python3-trove-classifiers: upgrade 2026.1.14.14 -> 2026.4.28.13 python3-uritools: upgrade 6.0.1 -> 6.1.0 python3-uv-build: upgrade 0.10.10 -> 0.11.8 python3-wheel: upgrade 0.46.3 -> 0.47.0 repo: upgrade 2.62 -> 2.63 rpm-sequoia-crypto-policy: upgrade to latest revision rpm-sequoia: upgrade 1.10.1 -> 1.10.2 rsync: upgrade 3.4.1 -> 3.4.2 ruby: upgrade 4.0.2 -> 4.0.3 shaderc: upgrade 2026.1 -> 2026.2 spirv-llvm-translator: upgrade 22.1.1 -> 22.1.2 ttyrun: upgrade 2.41.0 -> 2.42.0 vulkan-samples: upgrade to latest revision xz: upgrade 5.8.2 -> 5.8.3 kernel: Disable module deploy tarball by default utils: Handle unexpanded variables in DISTRO_FEATURES expat: Upgrade 2.8.0 -> 2.8.1 pseudo: Upgrade 1.9.6 -> 1.9.7 glib-2.0-native: Remove problematic path reference sstate: Improve confusing debug message sstate: Detect broken sstate paths containing tmpdir Robert P. J. Day (1): features-check.bbclass: add reference to required TUNE_FEATURES Robert Yang (1): time: 1.9 -> 1.10 Ross Burton (31): classes/base: add explicit bzip2-native dependency for unpacking .bz2 p11-kit: remove obsolete compile error workaround p11-kit: add PACKAGECONFIG for trust and systemd p11-kit: explicitly disable tests and zsh-completions p11-kit: packaging rewrite wpa-supplicant: remove obsolete explicit debug packaging python3-cryptography: remove obsolete explicit debug packaging gobject-introspection: remove obsolete explicit debug packaging kernel-devsrc: remove obsolete explicit debug packaging dhcpcd: remove obsolete explicit debug packaging bitbake.conf: add firmwaredir classes/kernel: use ${firmwaredir} instead of ${nonarch_base_libdir}/firmware bluez5: use ${firmwaredir} instead of ${nonarch_base_libdir}/firmware linux-firmware: use ${firmwaredir} instead of ${nonarch_base_libdir}/firmware wpa_supplicant: recommend the wireless regulatory database linux-firmware: delink some tegra firmware to avoid pulling in full nvidia firmware linux-firmware: split out MediaTek mt7996 firmare classes/kernel-module-split: skip .debug files early classes/kernel-module-split: return list of values in extract_modinfo wireless-regdb: use ${firmwaredir} instead of ${nonarch_base_libdir}/firmware harfbuzz: improve packaging harfbuzz: upgrade 12.3.2 -> 14.2.0 weston: remove obsolete .la deletion librsvg: remove obsolete .la deletion librsvg: consolidate DEPENDS librsvg: consolidate PACKAGECONFIG librsvg: rewrite cross gdk-pixbuf-query-loaders handling epiphany: use GTK3DISTROFEATURES in features check epiphany: remove obsolete build dependencies libdazzle: remove libhandy: remove Sam Kent (2): package.py: fix kernel module file pre-filter and document strip asymmetry oe-pkgdata-util: fix empty runtime-rprovides directory handling Tejas Kanfade (1): pulseaudio: split pactl into a dedicated client subpackage Thomas Perrot (2): scripts/makefile-getvar: quote MAKEFILE variable oe-pkgdata-util: fix runtime-rprovides handling in lookup_pkg error path Trevor Gamblin (5): python3-urllib3: enable setuptools-scm 10.x python3-vcs-versioning: add recipe python3-setuptools-scm: upgrade 9.2.2 -> 10.0.5 maintainers.inc: add self for python3-uv-build python3-vcs-versioning: add ptest Vijay Anusuri (1): avahi: Fix CVE-2026-34933 Viswanath Kraleti (1): mirrors: switch Yocto Project mirrors to HTTPS Wang Mingyu (40): acpica: upgrade 20251212 -> 20260408 adwaita-icon-theme: upgrade 49.0 -> 50.0 ccache: upgrade 4.13.2 -> 4.13.3 dhcpcd: upgrade 10.3.0 -> 10.3.1 diffoscope: upgrade 314 -> 317 epiphany: upgrade 49.7 -> 50.3 fastfloat: upgrade 8.2.4 -> 8.2.5 ghostscript: upgrade 10.06.0 -> 10.07.0 groff: upgrade 1.24.0 -> 1.24.1 gsettings-desktop-schemas: upgrade 50.0 -> 50.1 gtk+3: upgrade 3.24.51 -> 3.24.52 gtk4: upgrade 4.22.1 -> 4.22.2 hwdata: upgrade 0.405 -> 0.406 libadwaita: upgrade 1.8.4 -> 1.9.0 libcap: upgrade 2.77 -> 2.78 lzip: upgrade 1.25 -> 1.26 meson: upgrade 1.10.2 -> 1.11.0 pango: upgrade 1.57.0 -> 1.57.1 pciutils: upgrade 3.14.0 -> 3.15.0 python3-build: upgrade 1.4.0 -> 1.4.3 python3-dtschema: upgrade 2025.12 -> 2026.4 python3-editables: upgrade 0.5 -> 0.6 python3-maturin: upgrade 1.12.4 -> 1.13.1 python3-poetry-core: upgrade 2.3.1 -> 2.3.2 python3-pyasn1: upgrade 0.6.2 -> 0.6.3 python3-pygments: upgrade 2.19.2 -> 2.20.0 python3-pytest: upgrade 9.0.2 -> 9.0.3 python3-setuptools-rust: upgrade 1.12.0 -> 1.12.1 python3-testtools: upgrade 2.8.7 -> 2.9.0 python3-zipp: upgrade 3.23.0 -> 3.23.1 repo: upgrade 2.61.1 -> 2.62 resolvconf: upgrade 1.94 -> 1.95 sqlite3: upgrade 3.51.3 -> 3.53.0 stress-ng: upgrade 0.20.01 -> 0.21.00 vala: upgrade 0.56.18 -> 0.56.19 wayland-protocols: upgrade 1.47 -> 1.48 xserver-xorg: upgrade 21.1.21 -> 21.1.22 libmicrohttpd: upgrade 1.0.2 -> 1.0.5 python3-cryptography(-vectors): upgrade 46.0.5 -> 46.0.7 u-boot: upgrade 2026.01 -> 2026.04 Zk47T (2): meta-selftest: add usegroup-deponly recipe to test USERADD_DEPENDS only oe-selftest: add test for useradd with only USERADD_DEPENDS Change-Id: Icbbd748f12680ef280568abd6fe02a84a697c69a Signed-off-by: Patrick Williams

openembedded-core: subtree update:5a60dca0fb..a9cc47107c

2026-04-16T10:31:11+00:00

Adam Blank (1): package: update the comment block explaining 'emit_pkgdata' Adarsh Jagadish Kamini (1): vim: update to 9.2.0340 to fix CVEs Adrian Freihofer (4): oe-selftest: devtool: GDB breakpoint after std::vector is constructed oe-selftest: devtool: use assertRegex to match test output for meson oe-selftest/cpp-example: fix conf file ownership with static UIDs/GIDs devtool: ide-sdk: use TOOLCHAIN not TCOVERRIDE Benjamin Robin (4): cve_check: Improve escaping of special characters in CPE 2.3 cve_check: do not break old CVE_PRODUCT with escaped + gtk+: Remove escaping of the plus sign in `CVE_PRODUCT` webkitgtk: Remove escaping of the plus sign in `CVE_PRODUCT` Daniel Turull (1): python3-kirk: upgrade 4.0.0 -> 4.1.0 Fabio Estevam (1): mtd-utils: Upgrade to 2.3.1 Harish Sadineni (1): binutils: Set status for CVE-2025-69649 Khem Raj (11): db: Pin to use C99 std flex: Fix build with autoconf-2.74 and gcc <= 13 sudo: Fix build with std=gnu23 bind: Fix build with std=gnu23 strace: Fix build with std=gnu23 rsync: Add packageconfig to use system zlib time: Use upstream applied patches vulkan-samples: Upgrade to latest tip of trunk bluez: Fix linking with lld linker pulseaudio: Fix build with LLD linker avahi-libnss-mdns: Fix build with LLD linker Mahesh Angadi (1): weston: backport gl-shaders fix to avoid shader compiler crashes Martin Jansa (4): apr: fix build with autoconf-2.73 apr: remove -std=gnu23 from apr_rules.mk to fix reproducibility apr: remove space before the -std=gnu23 from apr_rules.mk dbus: use ${PN} in pkg_postinst instead of 'dbus' Mohammad Rafi Shaik (1): alsa-ucm-conf: Add GLYMUR CRD HiFi config Peter Kjellerstedt (1): gstreamer1.0-plugins-bad: Add fdkaac as a package feature Peter Marko (17): libpng: upgrade 1.6.55 -> 1.6.56 xserver-org: update CVE_PRODUCT go: set status for CVE-2024-24786 libexif: upgrade 0.6.25 -> 0.6.26 bind: upgrade 9.20.20 -> 9.20.22 openssh: upgrade 10.2p1 -> 10.3p1 grub: set status for CVE-2024-49504 grub: set status for 6 CVEs fixed in 2.14 libarchive: upgrade 3.8.6 -> 3.8.7 kea: upgrade 3.0.2 -> 3.0.3 inetutils: patch CVE-2026-32746 xwayland: set status for CVE-2024-21886 xdg-utils: set status for CVE-2025-52968 tar: set status for CVE-2025-45582 screen: set status for CVE-2025-46802 ovmf: set status for CVE-2024-1298 mpg123: set status for CVE-2006-3355 Richard Purdie (2): strace: Fix reproducibility issue strace: PR bump due to reproducibility issues Ross Burton (10): systemtap: add option for readline graphene: ignore CVE-2024-1984 re2c: backport fix for CVE-2026-2903 perl: link to the system zlib instead of a vendored copy perl: link to the system bzip2 instead of a vendored copy rsync: always use the system zlib rsync: update comment about out-of-tree builds wic: set CVE_PRODUCT libinput: backport fixes for CVE-2026-35093 and CVE-2026-35094 glib-networking: backport fixes for CVE-2025-60018 and CVE-2025-60019 Rouven Rastetter (2): kernel-fit-image: Fix support for initramfs multiconfig qemuboot-x86.inc: Allow override of QB_AUDIO_* Sunil Dora (1): rust: enable fully static linking with TCLIBC=musl Vivek Puar (1): linux-firmware: upgrade 20260309 -> 20260410 Yash Gupta (1): weston-init: set require-outputs=none to allow startup without connected display Yoann Congal (2): oeqa/selftest/devtool: add vulkan feature check for test needing it oeqa/selftest/sstatetests: add wayland feature check for test needing it Zk47T (2): useradd.bbclass: allow inheriting with only USERADD_DEPENDS set oe-pkgdata-util: improve lookup-pkg error for RPROVIDES packages Zoltán Böszörményi (1): ovmf: Fix build with GCC 16 and GLIBC 2.43 mark.yang (1): clang: consolidate sysroot compiler-rt search path patches Change-Id: I36bfa7183f83886a88ca2edcf1e0bcb0f7f67d04 Signed-off-by: Patrick Williams

openembedded-core: move in prep for poky deprecation

2026-03-11T21:48:36+00:00

Poky has been deprecated and instead we are expected to have individual layers. Move the openembedded-core sourced directories to a separate upstream-layers directory in preparation for this and clean out any old poky content that is not present in openembedded-core. Signed-off-by: Patrick Williams Change-Id: Id969d4852ffc4b0188ea2262c7ec0fe8fea935fe

BMC/OpenBmc/openbmc.git/upstream-layers/openembedded-core/scripts/oe-pkgdata-util, branch master

openembedded-core: subtree update:42fa856a00..907af8fb44

openembedded-core: subtree update:5a60dca0fb..a9cc47107c

openembedded-core: move in prep for poky deprecation