bodnuti

Deterministic checks of Yocto Project & OpenEmbedded patches.

[oe][meta-oe][wrynose][PATCH 1/4] redis: fix CVE-2026-23479

List
openembedded-devel
Thread
lore
Author
Yogita Urade
Last message
2026-10-16 05:21
Result
15 findings, 3 errors
Checked against
meta-openembedded wrynose
Base
f28a144aa0a0
AutoBuilder
2 builds: 1 passed, 0 with warnings, 1 failed

[oe][meta-oe][wrynose][PATCH 1/4] redis: fix CVE-2026-23479

[oe][meta-oe][wrynose][PATCH 2/4] redis: fix CVE-2026-23631

error oelint oelint.vars.specific meta-oe/recipes-extended/redis/redis_8.0.6.bb:32
'FINAL_LIBS' is set specific to ['toolchain-clang'], but isn't known from PACKAGES, MACHINE, DISTRO or resources
2930inherit pkgconfig update-rc.d systemd useradd3132FINAL_LIBS:x86:toolchain-clang = "-latomic"33FINAL_LIBS:riscv32 = "-latomic"34FINAL_LIBS:mips = "-latomic"35FINAL_LIBS:arm = "-latomic"
error oelint oelint.vars.specific meta-oe/recipes-extended/redis/redis_8.0.6.bb:35
'FINAL_LIBS' is set specific to ['arm'], but isn't known from PACKAGES, MACHINE, DISTRO or resources
32FINAL_LIBS:x86:toolchain-clang = "-latomic"33FINAL_LIBS:riscv32 = "-latomic"34FINAL_LIBS:mips = "-latomic"35FINAL_LIBS:arm = "-latomic"36FINAL_LIBS:powerpc = "-latomic"3738export FINAL_LIBS
error oelint oelint.vars.specific meta-oe/recipes-extended/redis/redis_8.0.6.bb:51
'EXTRA_OEMAKE' is set specific to ['toolchain-clang'], but isn't known from PACKAGES, MACHINE, DISTRO or resources
48# Redis adds -flto automatically to OPTIMIZATION when clang is used.49# Pass OPT instead, which is the documented way to provide explicit flags50# without Redis adding its own optimization defaults.51EXTRA_OEMAKE:append:toolchain-clang = " OPT='-fno-omit-frame-pointer'"5253TARGET_LDFLAGS:append = " ${DEBUG_PREFIX_MAP}"54
warning oelint oelint.vars.dependsordered meta-oe/recipes-extended/redis/redis_8.0.6.bb:7
'DEPENDS' entries should be ordered alphabetically
 4SECTION = "libs" 5LICENSE = "RSAL-2 | AGPL-3.0-only | SSPL-1" 6LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=9f1da87999fb281d8a9e3e3b2d0403b4" 7DEPENDS = "readline lua ncurses" 8 9SRC_URI = "http://download.redis.io/releases/${BP}.tar.gz \10           file://redis.conf \
warning oelint oelint.vars.mispell.unknown meta-oe/recipes-extended/redis/redis_8.0.6.bb:32
'FINAL_LIBS' is unknown. Consider adding it via --constantmods
2930inherit pkgconfig update-rc.d systemd useradd3132FINAL_LIBS:x86:toolchain-clang = "-latomic"33FINAL_LIBS:riscv32 = "-latomic"34FINAL_LIBS:mips = "-latomic"35FINAL_LIBS:arm = "-latomic"
warning oelint oelint.vars.mispell.unknown meta-oe/recipes-extended/redis/redis_8.0.6.bb:33
'FINAL_LIBS' is unknown. Consider adding it via --constantmods
30inherit pkgconfig update-rc.d systemd useradd3132FINAL_LIBS:x86:toolchain-clang = "-latomic"33FINAL_LIBS:riscv32 = "-latomic"34FINAL_LIBS:mips = "-latomic"35FINAL_LIBS:arm = "-latomic"36FINAL_LIBS:powerpc = "-latomic"
warning oelint oelint.vars.mispell.unknown meta-oe/recipes-extended/redis/redis_8.0.6.bb:34
'FINAL_LIBS' is unknown. Consider adding it via --constantmods
3132FINAL_LIBS:x86:toolchain-clang = "-latomic"33FINAL_LIBS:riscv32 = "-latomic"34FINAL_LIBS:mips = "-latomic"35FINAL_LIBS:arm = "-latomic"36FINAL_LIBS:powerpc = "-latomic"37
warning oelint oelint.vars.mispell.unknown meta-oe/recipes-extended/redis/redis_8.0.6.bb:35
'FINAL_LIBS' is unknown. Consider adding it via --constantmods
32FINAL_LIBS:x86:toolchain-clang = "-latomic"33FINAL_LIBS:riscv32 = "-latomic"34FINAL_LIBS:mips = "-latomic"35FINAL_LIBS:arm = "-latomic"36FINAL_LIBS:powerpc = "-latomic"3738export FINAL_LIBS
warning oelint oelint.vars.mispell.unknown meta-oe/recipes-extended/redis/redis_8.0.6.bb:36
'FINAL_LIBS' is unknown. Consider adding it via --constantmods
33FINAL_LIBS:riscv32 = "-latomic"34FINAL_LIBS:mips = "-latomic"35FINAL_LIBS:arm = "-latomic"36FINAL_LIBS:powerpc = "-latomic"3738export FINAL_LIBS39
warning oelint oelint.vars.pathhardcode.localstatedir meta-oe/recipes-extended/redis/redis_8.0.6.bb:41
'${localstatedir}' should be used instead of '/var'
38export FINAL_LIBS3940USERADD_PACKAGES = "${PN}"41USERADD_PARAM:${PN}  = "--system --home-dir /var/lib/redis -g redis --shell /bin/false redis"42GROUPADD_PARAM:${PN} = "--system redis"4344PACKAGECONFIG = "${@bb.utils.filter('DISTRO_FEATURES', 'systemd', d)}"
warning oelint oelint.vars.spacesassignment meta-oe/recipes-extended/redis/redis_8.0.6.bb:41
Suggest spaces around assignment. E.g. 'FOO = "BAR"'
38export FINAL_LIBS3940USERADD_PACKAGES = "${PN}"41USERADD_PARAM:${PN}  = "--system --home-dir /var/lib/redis -g redis --shell /bin/false redis"42GROUPADD_PARAM:${PN} = "--system redis"4344PACKAGECONFIG = "${@bb.utils.filter('DISTRO_FEATURES', 'systemd', d)}"
warning oelint oelint.vars.pathhardcode.localstatedir meta-oe/recipes-extended/redis/redis_8.0.6.bb:59
'${localstatedir}' should be used instead of '/var'
56    oe_runmake -C deps hdr_histogram fpconv hiredis lua linenoise57}5859do_install() {60    export PREFIX=${D}/${prefix}61    oe_runmake install62    install -d ${D}/${sysconfdir}/redis
info oelint oelint.var.bbclassextend meta-oe/recipes-extended/redis/redis_8.0.6.bb:1
BBCLASSEXTEND should be set if possible
1SUMMARY = "Redis key-value store"2DESCRIPTION = "Redis is an open source, advanced key-value store."3HOMEPAGE = "http://redis.io"4SECTION = "libs"
info oelint oelint.var.suggestedvar.BUGTRACKER meta-oe/recipes-extended/redis/redis_8.0.6.bb:1
Variable 'BUGTRACKER' should be set
1SUMMARY = "Redis key-value store"2DESCRIPTION = "Redis is an open source, advanced key-value store."3HOMEPAGE = "http://redis.io"4SECTION = "libs"
info oelint oelint.var.suggestedvar.CVE_PRODUCT meta-oe/recipes-extended/redis/redis_8.0.6.bb:1
Variable 'CVE_PRODUCT' should be set
1SUMMARY = "Redis key-value store"2DESCRIPTION = "Redis is an open source, advanced key-value store."3HOMEPAGE = "http://redis.io"4SECTION = "libs"

[oe][meta-oe][wrynose][PATCH 3/4] redis: fix CVE-2026-25243

[oe][meta-oe][wrynose][PATCH 4/4] redis: fix CVE-2026-66373

patchtest: 48 pass, 0 fail, 12 skip

Text report

AutoBuilder

Builds of staging branches that carried this series. Each builds every patch on the branch; a failure is shown as this series' only when it is in a recipe the series changes, or two builds failed so newly carrying it.