From: Daniel Turull <[email protected]> util-linux's README ("Stable Branches") documents stable/v<major>.<minor> branches whose maintenance releases are bug fixes only, so upgrades within a major.minor are stable point upgrades per the OE-Core stable release policy (ref-manual, "Stable Point Release Upgrades").
https://docs.yoctoproject.org/dev/ref-manual/release-process.html#stable-point-release-upgrades https://github.com/util-linux/util-linux/blob/v2.42.2/README#L95 Checked the last point release for feature creep: 2.42.2 (Jun 16 2026), against 2.42.1 (May 18 2026): 32 commits, all fixes or hardening -- memory safety (a libblkid use-after-free, two buffer overflows, a libfdisk GPT fix), privilege tightening (X-mount.subdir restricted for non-root), diagnostics (fanotify queue overflow detection) and documentation. No new options or behaviour. These releases are not picked up on the OE stable branches: util-linux has had zero point-release bumps on kirkstone, scarthgap or wrynose since each branch forked from master, leaving them at 2.37.4, 2.39.3 and 2.41.3 respectively. This addresses that gap going forward. Scarthgap already has v2.39.3, and the 2.39.x stable branch history (mount API regression fix in 2.39.1, new CPU model support, and libblkid’s bcachefs handling) demonstrates that util-linux exercises good judgement in managing stable branches, so we can safely track their stable series there as well. For the avoidance of doubt it is not a development-series effect either: util-linux has no development/stable version split, and pre-release work goes to -rc tags. AI-Generated: Kiro with Claude Opus 5 Signed-off-by: Daniel Turull <[email protected]> --- meta/recipes-core/util-linux/util-linux.inc | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/meta/recipes-core/util-linux/util-linux.inc b/meta/recipes-core/util-linux/util-linux.inc index 9713c8b882..ee9291fb4f 100644 --- a/meta/recipes-core/util-linux/util-linux.inc +++ b/meta/recipes-core/util-linux/util-linux.inc @@ -24,3 +24,7 @@ SRC_URI[sha256sum] = "03a05d3adf9602ef128f2da05b84b3205ce60c351e5737c0370f740006 CVE_PRODUCT = "util-linux" CVE_STATUS[CVE-2026-3184] = "fixed-version: Fixed since 2.42" + +# util-linux publishes bugfix/security-only point releases on its +# stable/v<major.minor> branches. +inherit upstream-stable-release-point
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#243010): https://lists.openembedded.org/g/openembedded-core/message/243010 Mute This Topic: https://lists.openembedded.org/mt/120641371/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
