bodnuti

Deterministic checks of Yocto Project & OpenEmbedded patches.

[PATCH 00/99] Wrynose pull request

List: openembedded-devel
Thread: lore
Author: Louis Rannou
Last message: 2026-10-12 14:51
Result: 9 findings, 5 errors
Checked against: meta-openembedded wrynose
Base: 47d7dbdd1089
Note: pull request: https://git.openembedded.org/meta-openembedded-contrib anujm/wrynose, 47d7dbdd1089..f28a144aa0a0

[PATCH 01/99] openvpn: create an extra package for the dns-updown script

[PATCH 02/99] openvpn: upgrade 2.7.0 -> 2.7.5

[PATCH 03/99] python3-py: correct CVE_PRODUCT mapping

[PATCH 04/99] msgpack-c: patch CVE-2026-72854

[PATCH 05/99] recipes: correct homepage

[PATCH 06/99] polkit: patch CVE-2026-4897 and CVE-2026-85498

[PATCH 07/99] python3-django: upgrade 6.0.7 -> 6.0.8

error patchtest test_patch.test_signed_off_by_presence

A patch file has been added without a Signed-off-by tag: '0001-Revert-Bumped-minimum-setuptools-version-to-83.patch'

warning oelint oelint.file.patchsignedoff meta-python/recipes-devtools/python/python3-django_6.0.8.bb:5

Patch '0001-Revert-Bumped-minimum-setuptools-version-to-83.patch' should contain a Signed-off-by entry

2inherit python_setuptools_build_meta34SRC_URI[sha256sum] = "cb0bd962d27fc866f3c514b20aae6a7df56ec80b488f9899da46d675cd051526"5SRC_URI += "file://0001-Revert-Bumped-minimum-setuptools-version-to-83.patch"67# Set DEFAULT_PREFERENCE so that the LTS version of django is built by8# default. To build the 6.x branch,

[PATCH 08/99] python3-eventlet: mark CVE-2023-29483 fixed

[PATCH 09/99] python3-marshmallow: mark CVE-2025-68480 fixed

[PATCH 10/99] python3-sqlparse: patch CVE-2026-54284

[PATCH 11/99] python3-sqlparse: patch CVE-2026-59893

[PATCH 12/99] python3-sqlparse: patch CVE-2026-59894

[PATCH 13/99] python3-sqlparse: patch CVE-2026-71491

[PATCH 14/99] python3-tornado: mark CVEs fixed

[PATCH 15/99] python3-pillow: fix CVE-2026-54058

[PATCH 16/99] libfastjson: switch git branch from master to main

[PATCH 17/99] avro-c++: Use fmt from oe-core instead of bundling fmt 10.2.1

[PATCH 18/99] python3-pillow: fix CVE-2026-59204

[PATCH 19/99] c-ares: mark CVEs fixed

[PATCH 20/99] cjose: mark CVE-2026-53938 and CVE-2026-53939 fixed

[PATCH 21/99] cjson: patch CVE-2026-87933

[PATCH 22/99] colord: ignore CVE-2026-85062

[PATCH 23/99] flatcc: patch CVE-2026-90786

[PATCH 24/99] flatcc: patch CVE-2026-90785

[PATCH 25/99] fluidsynth: mark CVEs fixed

[PATCH 26/99] freeipmi: patch CVE-2026-85509

[PATCH 27/99] freeipmi: patch CVE-2026-85508

[PATCH 28/99] freeipmi: patch CVE-2026-85507

[PATCH 29/99] freeipmi: patch CVE-2026-85506

[PATCH 30/99] freeipmi: patch CVE-2026-85505

[PATCH 31/99] freeipmi: patch CVE-2026-85504

[PATCH 32/99] libde265: patch CVE-2026-54240 and CVE-2026-54241

[PATCH 33/99] libheif: ignore CVE-2026-84383

[PATCH 34/99] libwebsockets: patch CVE-2026-19773

[PATCH 35/99] faad2: upgrade 2.11.2 -> 2.11.3

error patchtest test_mbox.test_commit_message_presence

Please include a commit message on your patch explaining the change

[PATCH 36/99] libmxml: upgrade 4.0.4 -> 4.0.5

error patchtest test_mbox.test_commit_message_presence

Please include a commit message on your patch explaining the change

[PATCH 37/99] nanomsg: upgrade 1.2.2 -> 1.2.4

error patchtest test_mbox.test_commit_message_presence

Please include a commit message on your patch explaining the change

[PATCH 38/99] nanomsg: upgrade 1.2.4 -> 1.2.5

[PATCH 39/99] libopenmpt: upgrade 0.8.4 -> 0.8.6

[PATCH 40/99] python3-tzdata: Upgrade 2026.3 -> 2026.4

[PATCH 41/99] smarty: mark CVEs patched

[PATCH 42/99] libssh: ignore CVE-2026-59842

[PATCH 43/99] ntopng: ignore CVE-2026-84989

[PATCH 44/99] ntopng: patch CVE-2026-84990

[PATCH 45/99] ntopng: patch CVE-2026-86090 and CVE-2026-86091

[PATCH 46/99] ldns: correct CVE_PRODUCT mapping

[PATCH 47/99] dnsmasq: correct CVE_PRODUCT mapping

[PATCH 48/99] jq: correct CVE_PRODUCT mapping

[PATCH 49/99] python3-twisted: correct CVE_PRODUCT mapping

[PATCH 50/99] php: correct CVE_PRODUCT mapping

[PATCH 51/99] python3-ldap: correct python-ldap CVE_PRODUCT mapping

[PATCH 52/99] mariadb: correct CVE_PRODUCT mapping

[PATCH 53/99] libssh: correct CVE_PRODUCT mapping

[PATCH 54/99] python3-flask-user: correct CVE_PRODUCT mapping

[PATCH 55/99] python3-aiohttp: correct CVE_PRODUCT mapping

[PATCH 56/99] python3-werkzeug: correct CVE_PRODUCT mapping

[PATCH 57/99] python3-flask: correct CVE_PRODUCT mapping

[PATCH 58/99] python3-twitter: correct Tweepy CVE_PRODUCT mapping

[PATCH 59/99] python3-ujson: add CVE_PRODUCT mapping

[PATCH 60/99] python3-waitress: correct CVE_PRODUCT mapping

[PATCH 61/99] nodejs: upgrade 22.23.2 -> 22.23.3

[PATCH 62/99] rabbitmq-c: patch CVE-2026-44236

[PATCH 63/99] redis: patch CVE-2026-81934

[PATCH 64/99] sngrep: patch CVE-2026-90558

[PATCH 65/99] strongswan: patch CVE-2026-78123

[PATCH 66/99] strongswan: patch CVE-2026-78124

[PATCH 67/99] strongswan: patch CVE-2026-78126

[PATCH 68/99] strongswan: patch CVE-2026-78127

[PATCH 69/99] strongswan: patch CVE-2026-78129

[PATCH 70/99] strongswan: patch CVE-2026-78133

[PATCH 71/99] strongswan: patch CVE-2026-78131

[PATCH 72/99] strongswan: patch CVE-2026-78130

[PATCH 73/99] strongswan: patch CVE-2026-78132

[PATCH 74/99] strongswan: patch CVE-2026-78135

[PATCH 75/99] strongswan: patch CVE-2026-78134

[PATCH 76/99] tesseract: patch CVE-2026-88052

[PATCH 77/99] tesseract: patch CVE-2026-88048

[PATCH 78/99] tesseract: patch CVE-2026-88049

[PATCH 79/99] tesseract: patch CVE-2026-88050

[PATCH 80/99] tesseract: patch CVE-2026-88047

[PATCH 81/99] tesseract: patch CVE-2026-88051

[PATCH 82/99] tesseract: patch CVE-2026-88054

[PATCH 83/99] valkey: upgrade 9.0.5 -> 9.0.6

[PATCH 84/99] valkey: mark CVE-2026-86227 fixed

[PATCH 85/99] abseil-cpp: fix 32-bit x86 build of hash.cc

error patchtest test_patch.test_signed_off_by_presence

A patch file has been added without a Signed-off-by tag: '0003-hash-restrict-x86-AES-SIMD-path-to-64-bit-targets.patch'

warning oelint oelint.file.patchsignedoff meta-oe/recipes-devtools/abseil-cpp/abseil-cpp_20260107.1.bb:10

Patch '0003-hash-restrict-x86-AES-SIMD-path-to-64-bit-targets.patch' should contain a Signed-off-by entry

 7LICENSE = "Apache-2.0" 8LIC_FILES_CHKSUM = "file://LICENSE;md5=df52c6edb7adc22e533b2bacc3bd3915" 910SRC_URI = "https://github.com/abseil/${BPN}/releases/download/${PV}/${BP}.tar.gz \11           file://0001-absl-always-use-asm-sgidefs.h.patch \12           file://0002-abseil-ppc-fixes.patch \13           file://0003-hash-restrict-x86-AES-SIMD-path-to-64-bit-targets.patch \

[PATCH 86/99] unbound: patch CVE-2026-80225

[PATCH 87/99] unbound: patch CVE-2026-81642

[PATCH 88/99] unbound: patch CVE-2026-78227

[PATCH 89/99] unbound: patch CVE-2026-77860

[PATCH 90/99] python3-tornado: patch CVE-2026-91990

[PATCH 91/99] python3-tornado: patch CVE-2026-82397

[PATCH 92/99] python3-tornado: patch CVE-2026-91991

[PATCH 93/99] freerdp3: patch CVE-2026-85089

[PATCH 94/99] freerdp3: patch CVE-2026-85090

warning shellcheck SC2164 meta-oe/recipes-support/freerdp/freerdp3_3.24.2.bb:111

Use 'cd ... || exit' or 'cd ... || return' in case cd fails.

108    cp -r ${S}/libfreerdp/codec/test/planar ${D}${PTEST_PATH}/test/109    cp -r ${S}/libfreerdp/codec/test/interleaved ${D}${PTEST_PATH}/test/110111    cd ${B}112    # the test definitions, how to execute the tests113    find . -name CTestTestfile.cmake -exec install -Dm 0644 {} ${D}${PTEST_PATH}/{} \;114

warning shellcheck SC2044 meta-oe/recipes-support/freerdp/freerdp3_3.24.2.bb:115

For loops over find output are fragile. Use find -exec or a while read loop.

112    # the test definitions, how to execute the tests113    find . -name CTestTestfile.cmake -exec install -Dm 0644 {} ${D}${PTEST_PATH}/{} \;114115    for testfile in $(find ${D}${PTEST_PATH} -name CTestTestfile.cmake); do116        # these are comments only, containing ${S} and ${B}, at the top of each file117        sed -i "s,Source directory: ${S},<source_dir>," $testfile118        sed -i "s,Build directory: ${B},<build_dir>," $testfile

[PATCH 95/99] php: upgrade 8.5.10 -> 8.5.11

[PATCH 96/99] gpsd: patch CVE-2026-60122

[PATCH 97/99] syslog-ng: patch CVE-2026-39879

[PATCH 98/99] spidev-test: clean the build dir before configure

[PATCH 99/99] vboxguestdrivers: fix vboxvideo build on kernels lacking drm_fb_helper_alloc_info

patchtest: 1054 pass, 5 fail, 426 skip

Text report