80 files changed, 1006 insertions, 397 deletions

diff --git a/meta/classes-global/license.bbclass b/meta/classes-global/license.bbclass
index 94dcc7f331..af5f1ed41d 100644
--- a/meta/classes-global/license.bbclass
+++ b/meta/classes-global/license.bbclass
@@ -44,7 +44,6 @@ python do_populate_lic() {
     oe.qa.exit_if_errors(d)
 }
 
-PSEUDO_IGNORE_PATHS .= ",${@','.join(((d.getVar('COMMON_LICENSE_DIR') or '') + ' ' + (d.getVar('LICENSE_PATH') or '') + ' ' + d.getVar('COREBASE') + '/meta/COPYING').split())}"
 # it would be better to copy them in do_install:append, but find_license_files is python
 python perform_packagecopy:prepend () {
     enabled = oe.data.typed_value('LICENSE_CREATE_PACKAGE', d)
diff --git a/meta/classes-global/sanity.bbclass b/meta/classes-global/sanity.bbclass
index 192582b82e..d1452967fc 100644
--- a/meta/classes-global/sanity.bbclass
+++ b/meta/classes-global/sanity.bbclass
@@ -733,14 +733,14 @@ def check_sanity_version_change(status, d):
         status.addresult("TMPDIR is setuid, please don't build in a setuid directory")
 
     # Check that a user isn't building in a path in PSEUDO_IGNORE_PATHS
-    pseudoignorepaths = d.getVar('PSEUDO_IGNORE_PATHS', expand=True).split(",")
+    pseudoignorepaths = (d.getVar('PSEUDO_IGNORE_PATHS', expand=True) or "").split(",")
     workdir = d.getVar('WORKDIR', expand=True)
     for i in pseudoignorepaths:
         if i and workdir.startswith(i):
             status.addresult("You are building in a path included in PSEUDO_IGNORE_PATHS " + str(i) + " please locate the build outside this path.\n")
 
     # Check if PSEUDO_IGNORE_PATHS and paths under pseudo control overlap
-    pseudoignorepaths = d.getVar('PSEUDO_IGNORE_PATHS', expand=True).split(",")
+    pseudoignorepaths = (d.getVar('PSEUDO_IGNORE_PATHS', expand=True) or "").split(",")
     pseudo_control_dir = "${D},${PKGD},${PKGDEST},${IMAGEROOTFS},${SDK_OUTPUT}"
     pseudocontroldir = d.expand(pseudo_control_dir).split(",")
     for i in pseudoignorepaths:
diff --git a/meta/classes-global/sstate.bbclass b/meta/classes-global/sstate.bbclass
index 2c259a6657..1d7b033b80 100644
--- a/meta/classes-global/sstate.bbclass
+++ b/meta/classes-global/sstate.bbclass
@@ -76,7 +76,7 @@ SSTATE_SCAN_CMD_NATIVE ??= 'grep -Irl -e ${RECIPE_SYSROOT} -e ${RECIPE_SYSROOT_N
 SSTATE_HASHEQUIV_FILEMAP ?= " \
     populate_sysroot:*/postinst-useradd-*:${TMPDIR} \
     populate_sysroot:*/postinst-useradd-*:${COREBASE} \
-    populate_sysroot:*/postinst-useradd-*:regex-\s(PATH|PSEUDO_IGNORE_PATHS|HOME|LOGNAME|OMP_NUM_THREADS|USER)=.*\s \
+    populate_sysroot:*/postinst-useradd-*:regex-\s(PATH|PSEUDO_INCLUDE_PATHS|HOME|LOGNAME|OMP_NUM_THREADS|USER)=.*\s \
     populate_sysroot:*/crossscripts/*:${TMPDIR} \
     populate_sysroot:*/crossscripts/*:${COREBASE} \
     "
diff --git a/meta/classes-recipe/image.bbclass b/meta/classes-recipe/image.bbclass
index dc4ce5c0a9..24a19fce1a 100644
--- a/meta/classes-recipe/image.bbclass
+++ b/meta/classes-recipe/image.bbclass
@@ -199,8 +199,6 @@ IMAGE_LOCALES_ARCHIVE ?= '1'
 # aren't yet available.
 PSEUDO_PASSWD = "${IMAGE_ROOTFS}:${STAGING_DIR_NATIVE}"
 
-PSEUDO_IGNORE_PATHS .= ",${WORKDIR}/intercept_scripts,${WORKDIR}/oe-rootfs-repo,${WORKDIR}/sstate-build-image_complete"
-
 PACKAGE_EXCLUDE ??= ""
 PACKAGE_EXCLUDE[type] = "list"
 
@@ -666,6 +664,8 @@ MULTILIBRE_ALLOW_REP += "${base_bindir} ${base_sbindir} ${bindir} ${sbindir} ${l
 MULTILIB_CHECK_FILE = "${WORKDIR}/multilib_check.py"
 MULTILIB_TEMP_ROOTFS = "${WORKDIR}/multilib"
 
+PSEUDO_INCLUDE_PATHS .= ",${MULTILIB_TEMP_ROOTFS}"
+
 do_fetch[noexec] = "1"
 do_unpack[noexec] = "1"
 do_patch[noexec] = "1"
diff --git a/meta/classes-recipe/image_types_wic.bbclass b/meta/classes-recipe/image_types_wic.bbclass
index 1b422b6280..61f028bd7b 100644
--- a/meta/classes-recipe/image_types_wic.bbclass
+++ b/meta/classes-recipe/image_types_wic.bbclass
@@ -30,7 +30,7 @@ WICVARS ?= "\
         KERNEL_CONSOLE \
         KERNEL_IMAGETYPE \
         MACHINE \
-        PSEUDO_IGNORE_PATHS \
+        PSEUDO_INCLUDE_PATHS \
         RECIPE_SYSROOT_NATIVE \
         ROOTFS_SIZE \
         STAGING_DATADIR \
@@ -96,8 +96,6 @@ IMAGE_CMD:wic[vardepsexclude] = "WKS_FULL_PATH WKS_FILES TOPDIR"
 SPDX_IMAGE_PURPOSE:wic = "diskImage"
 do_image_wic[cleandirs] = "${WORKDIR}/build-wic"
 
-PSEUDO_IGNORE_PATHS .= ",${WORKDIR}/build-wic"
-
 # Rebuild when the wks file or vars in WICVARS change
 USING_WIC = "${@bb.utils.contains_any('IMAGE_FSTYPES', 'wic ' + ' '.join('wic.%s' % c for c in '${CONVERSIONTYPES}'.split()), '1', '', d)}"
 WKS_FILE_CHECKSUM = "${@'${WKS_FULL_PATH}:%s' % os.path.exists('${WKS_FULL_PATH}') if '${USING_WIC}' else ''}"
diff --git a/meta/classes-recipe/populate_sdk_base.bbclass b/meta/classes-recipe/populate_sdk_base.bbclass
index 238cb1ee6e..8ef4b2be77 100644
--- a/meta/classes-recipe/populate_sdk_base.bbclass
+++ b/meta/classes-recipe/populate_sdk_base.bbclass
@@ -52,6 +52,8 @@ SDK_DEPLOY = "${DEPLOY_DIR}/sdk"
 
 SDKDEPLOYDIR = "${WORKDIR}/${SDKMACHINE}-deploy-${PN}-populate-sdk"
 
+PSEUDO_INCLUDE_PATHS .= ",${SDK_DIR}"
+
 B:task-populate-sdk = "${SDK_DIR}"
 
 SDKTARGETSYSROOT = "${SDKPATH}/sysroots/${REAL_MULTIMACH_TARGET_SYS}"
@@ -263,8 +265,6 @@ python do_populate_sdk_setscene () {
 }
 addtask do_populate_sdk_setscene
 
-PSEUDO_IGNORE_PATHS .= ",${SDKDEPLOYDIR},${WORKDIR}/oe-sdk-repo,${WORKDIR}/sstate-build-populate_sdk"
-
 fakeroot create_sdk_files() {
         cp ${COREBASE}/scripts/relocate_sdk.py ${SDK_OUTPUT}/${SDKPATH}/
 
diff --git a/meta/classes/archiver.bbclass b/meta/classes/archiver.bbclass
index df271feddd..a95c899a0f 100644
--- a/meta/classes/archiver.bbclass
+++ b/meta/classes/archiver.bbclass
@@ -166,6 +166,7 @@ python () {
             d.appendVarFlag('do_package_write_rpm', 'dirs', ' ${ARCHIVER_RPMTOPDIR}')
             d.appendVarFlag('do_package_write_rpm', 'sstate-inputdirs', ' ${ARCHIVER_RPMTOPDIR}')
             d.appendVarFlag('do_package_write_rpm', 'sstate-outputdirs', ' ${DEPLOY_DIR_SRC}')
+            d.appendVar('PSEUDO_INCLUDE_PATHS', ',${ARCHIVER_TOPDIR}')
             if ar_dumpdata == "1":
                 d.appendVarFlag('do_package_write_rpm', 'depends', ' %s:do_dumpdata' % pn)
             if ar_recipe == "1":
diff --git a/meta/conf/bitbake.conf b/meta/conf/bitbake.conf
index b1dae17267..e5037c6277 100644
--- a/meta/conf/bitbake.conf
+++ b/meta/conf/bitbake.conf
@@ -744,18 +744,15 @@ SRC_URI = ""
 PSEUDO_LOCALSTATEDIR ?= "${WORKDIR}/pseudo/"
 PSEUDO_PASSWD ?= "${STAGING_DIR_TARGET}:${PSEUDO_SYSROOT}"
 PSEUDO_SYSROOT = "${COMPONENTS_DIR}/${BUILD_ARCH}/pseudo-native"
-PSEUDO_IGNORE_PATHS = "/usr/,/etc/,/lib,/dev/,/run/,${T},${WORKDIR}/recipe-sysroot,${SSTATE_DIR},${STAMPS_DIR}"
-PSEUDO_IGNORE_PATHS .= ",${TMPDIR}/sstate-control,${TMPDIR}/buildstats,${TMPDIR}/sysroots-components,${TMPDIR}/pkgdata"
-PSEUDO_IGNORE_PATHS .= ",${WORKDIR}/deploy-,${WORKDIR}/sstate-build-package_,${WORKDIR}/sstate-install-package_,${WORKDIR}/pkgdata-sysroot"
-PSEUDO_IGNORE_PATHS .= ",${DEPLOY_DIR},${BUILDHISTORY_DIR},${TOPDIR}/cache,${COREBASE}/scripts,${CCACHE_DIR},${S},${B}"
+PSEUDO_INCLUDE_PATHS = "/proc,${WORKDIR}/image,${WORKDIR}/package,${WORKDIR}/rootfs,${WORKDIR}/sstate-build-package/,${WORKDIR}/sstate-install-package/,${WORKDIR}/pkgdata,${WORKDIR}/minidebuginfo"
 
 export PSEUDO_DISABLED = "1"
 #export PSEUDO_PREFIX = "${STAGING_DIR_NATIVE}${prefix_native}"
 #export PSEUDO_BINDIR = "${STAGING_DIR_NATIVE}${bindir_native}"
 #export PSEUDO_LIBDIR = "${STAGING_DIR_NATIVE}$PSEUDOBINDIR/../lib/pseudo/lib
-FAKEROOTBASEENV = "PSEUDO_BINDIR=${PSEUDO_SYSROOT}${bindir_native} PSEUDO_LIBDIR=${PSEUDO_SYSROOT}${prefix_native}/lib/pseudo/lib PSEUDO_PREFIX=${PSEUDO_SYSROOT}${prefix_native} PSEUDO_IGNORE_PATHS=${@oe.path.canonicalize(d.getVar('PSEUDO_IGNORE_PATHS'))} PSEUDO_DISABLED=1 PYTHONDONTWRITEBYTECODE=1"
+FAKEROOTBASEENV = "PSEUDO_BINDIR=${PSEUDO_SYSROOT}${bindir_native} PSEUDO_LIBDIR=${PSEUDO_SYSROOT}${prefix_native}/lib/pseudo/lib PSEUDO_PREFIX=${PSEUDO_SYSROOT}${prefix_native} PSEUDO_INCLUDE_PATHS=${@oe.path.canonicalize(d.getVar('PSEUDO_INCLUDE_PATHS'))} PSEUDO_DISABLED=1 PYTHONDONTWRITEBYTECODE=1"
 FAKEROOTCMD = "${PSEUDO_SYSROOT}${bindir_native}/pseudo"
-FAKEROOTENV = "PSEUDO_PREFIX=${PSEUDO_SYSROOT}${prefix_native} PSEUDO_LOCALSTATEDIR=${PSEUDO_LOCALSTATEDIR} PSEUDO_PASSWD=${PSEUDO_PASSWD} PSEUDO_NOSYMLINKEXP=1 PSEUDO_IGNORE_PATHS=${@oe.path.canonicalize(d.getVar('PSEUDO_IGNORE_PATHS'))} PSEUDO_DISABLED=0"
+FAKEROOTENV = "PSEUDO_PREFIX=${PSEUDO_SYSROOT}${prefix_native} PSEUDO_LOCALSTATEDIR=${PSEUDO_LOCALSTATEDIR} PSEUDO_PASSWD=${PSEUDO_PASSWD} PSEUDO_NOSYMLINKEXP=1 PSEUDO_INCLUDE_PATHS=${@oe.path.canonicalize(d.getVar('PSEUDO_INCLUDE_PATHS'))} PSEUDO_DISABLED=0"
 FAKEROOTNOENV = "PSEUDO_UNLOAD=1"
 FAKEROOTDIRS = "${PSEUDO_LOCALSTATEDIR}"
 FAKEROOTLOGS = "${WORKDIR}/pseudo/pseudo.log"
@@ -965,7 +962,7 @@ BB_HASHEXCLUDE_COMMON ?= "TMPDIR FILE PATH PWD BB_TASKHASH BBPATH BBSERVER DL_DI
     SSTATE_HASHEQUIV_METHOD SSTATE_HASHEQUIV_REPORT_TASKDATA \
     SSTATE_HASHEQUIV_OWNER CCACHE_TOP_DIR BB_HASHSERVE GIT_CEILING_DIRECTORIES \
     OMP_NUM_THREADS BB_CURRENTTASK"
-BB_BASEHASH_IGNORE_VARS ?= "${BB_HASHEXCLUDE_COMMON} PSEUDO_IGNORE_PATHS BUILDHISTORY_DIR \
+BB_BASEHASH_IGNORE_VARS ?= "${BB_HASHEXCLUDE_COMMON} PSEUDO_INCLUDE_PATHS BUILDHISTORY_DIR \
     SSTATE_DIR SOURCE_DATE_EPOCH RUST_BUILD_SYS RUST_HOST_SYS RUST_TARGET_SYS"
 BB_HASHCONFIG_IGNORE_VARS ?= "${BB_HASHEXCLUDE_COMMON} DATE TIME SSH_AGENT_PID \
     SSH_AUTH_SOCK PSEUDO_BUILD BB_ENV_PASSTHROUGH_ADDITIONS DISABLE_SANITY_CHECKS \
diff --git a/meta/conf/multilib.conf b/meta/conf/multilib.conf
index 86d1f8c144..6163405be4 100644
--- a/meta/conf/multilib.conf
+++ b/meta/conf/multilib.conf
@@ -12,8 +12,6 @@ STAGING_DIR_TARGET = "${WORKDIR}/${MLPREFIX}recipe-sysroot"
 RECIPE_SYSROOT = "${WORKDIR}/${MLPREFIX}recipe-sysroot"
 RECIPE_SYSROOT:class-native = "${WORKDIR}/recipe-sysroot"
 
-PSEUDO_IGNORE_PATHS .= ",${WORKDIR}/${MLPREFIX}recipe-sysroot"
-
 INHERIT += "multilib_global"
 
 BBCLASSEXTEND:append = " ${MULTILIBS}"
diff --git a/meta/lib/oeqa/selftest/cases/runtime_test.py b/meta/lib/oeqa/selftest/cases/runtime_test.py
index 4843d810a2..d58ffa80f5 100644
--- a/meta/lib/oeqa/selftest/cases/runtime_test.py
+++ b/meta/lib/oeqa/selftest/cases/runtime_test.py
@@ -174,7 +174,6 @@ TEST_RUNQEMUPARAMS += " slirp"
         features += 'PACKAGE_FEED_GPG_NAME = "testuser"\n'
         features += 'PACKAGE_FEED_GPG_PASSPHRASE_FILE = "%s"\n' % os.path.join(signing_key_dir, 'key.passphrase')
         features += 'GPG_PATH = "%s"\n' % self.gpg_home
-        features += 'PSEUDO_IGNORE_PATHS .= ",%s"\n' % self.gpg_home
         self.write_config(features)
 
         bitbake('core-image-full-cmdline socat')
@@ -211,7 +210,6 @@ TEST_RUNQEMUPARAMS += " slirp"
         features += 'PACKAGE_FEED_GPG_NAME = "testuser"\n'
         features += 'PACKAGE_FEED_GPG_PASSPHRASE_FILE = "%s"\n' % os.path.join(signing_key_dir, 'key.passphrase')
         features += 'GPG_PATH = "%s"\n' % self.gpg_home
-        features += 'PSEUDO_IGNORE_PATHS .= ",%s"\n' % self.gpg_home
         self.write_config(features)
 
         # Build core-image-sato and testimage
diff --git a/meta/recipes-bsp/barebox/barebox-common.inc b/meta/recipes-bsp/barebox/barebox-common.inc
index 7fd7a88d71..d6ea1eedfe 100644
--- a/meta/recipes-bsp/barebox/barebox-common.inc
+++ b/meta/recipes-bsp/barebox/barebox-common.inc
@@ -3,6 +3,6 @@ SECTION = "bootloaders"
 
 LIC_FILES_CHKSUM = "file://COPYING;md5=f5125d13e000b9ca1f0d3364286c4192"
 
-PV = "2025.03.0"
+PV = "2025.04.0"
 SRC_URI = "https://barebox.org/download/barebox-${PV}.tar.bz2"
-SRC_URI[sha256sum] = "0bf7118004e445bdd57feeef89ee9064982acc221e8a046c4a7994d3da6da2ec"
+SRC_URI[sha256sum] = "3124f3c2b69d9ce0512b2d40fa17cace9c356f65f005a63da0474387b8839c41"
diff --git a/meta/recipes-bsp/barebox/barebox-tools.bb b/meta/recipes-bsp/barebox/barebox-tools.bb
index f6395beb7c..2a117bc9c0 100644
--- a/meta/recipes-bsp/barebox/barebox-tools.bb
+++ b/meta/recipes-bsp/barebox/barebox-tools.bb
@@ -2,10 +2,6 @@ SUMMARY = "barebox bootloader tools"
 
 require barebox-common.inc
 
-SRC_URI += " \
-    file://0001-scripts-dtc-clean-up-yamltree-from-dtc.patch \
-"
-
 LICENSE = "GPL-2.0-only"
 
 DEPENDS = "bison-native flex-native libusb1"
diff --git a/meta/recipes-bsp/barebox/files/0001-scripts-dtc-clean-up-yamltree-from-dtc.patch b/meta/recipes-bsp/barebox/files/0001-scripts-dtc-clean-up-yamltree-from-dtc.patch
deleted file mode 100644
index fdab21ef72..0000000000
--- a/meta/recipes-bsp/barebox/files/0001-scripts-dtc-clean-up-yamltree-from-dtc.patch
+++ /dev/null
@@ -1,60 +0,0 @@
-From 77afd065dc58e2f57066ef7f392c571f8136723d Mon Sep 17 00:00:00 2001
-From: Hongxu Jia <hongxu.jia@windriver.com>
-Date: Mon, 7 Apr 2025 14:45:27 +0000
-Subject: [PATCH] scripts/dtc: clean up yamltree from dtc
-
-Refer Linux commit [dt-bindings: kbuild: Use DTB files for validation][1],
-clean up yamltree from dtc to avoid compile failure while include <yaml.h>
-in non-standard path
-
-Since barebox actually doesn't do any dtb binding checks at the moment, just
-remove the test of /usr/include/yaml.h, hard-code the -DNO_YAML and remove
-yamltree.c from DTC_SOURCE
-
-[1] https://github.com/torvalds/linux/commit/ef8795f3f1ce
-
-Upstream-Status: Submitted [https://github.com/barebox/barebox/pull/37]
-
-Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
----
- scripts/dtc/Makefile             | 9 ---------
- scripts/dtc/update-dtc-source.sh | 2 +-
- 2 files changed, 1 insertion(+), 10 deletions(-)
-
-diff --git a/scripts/dtc/Makefile b/scripts/dtc/Makefile
-index 721e8e2b..da00319f 100644
---- a/scripts/dtc/Makefile
-+++ b/scripts/dtc/Makefile
-@@ -16,16 +16,7 @@ fdtget-objs    += fdtget.o $(libfdt-objs) util.o
- # Source files need to get at the userspace version of libfdt_env.h to compile
- HOST_EXTRACFLAGS += -I$(src)/libfdt
- 
--ifeq ($(wildcard /usr/include/yaml.h),)
--ifneq ($(CHECK_DTBS),)
--$(error dtc needs libyaml for DT schema validation support. \
--       Install the necessary libyaml development package.)
--endif
- HOST_EXTRACFLAGS += -DNO_YAML
--else
--dtc-objs       += yamltree.o
--HOSTLDLIBS_dtc := -lyaml
--endif
- 
- # Generated files need one more search path to include headers in source tree
- HOSTCFLAGS_dtc-lexer.lex.o := -I$(src)
-diff --git a/scripts/dtc/update-dtc-source.sh b/scripts/dtc/update-dtc-source.sh
-index 141d3629..8aa5cd66 100755
---- a/scripts/dtc/update-dtc-source.sh
-+++ b/scripts/dtc/update-dtc-source.sh
-@@ -31,7 +31,7 @@ DTC_UPSTREAM_PATH=`pwd`/../dtc
- DTC_LINUX_PATH=`pwd`/scripts/dtc
- 
- DTC_SOURCE="checks.c data.c dtc.c dtc.h flattree.c fstree.c livetree.c srcpos.c \
--               srcpos.h treesource.c util.c util.h version_gen.h yamltree.c Makefile.dtc \
-+               srcpos.h treesource.c util.c util.h version_gen.h Makefile.dtc \
-                dtc-lexer.l dtc-parser.y fdtget.c"
- LIBFDT_SOURCE="Makefile.libfdt fdt.c fdt.h fdt_addresses.c fdt_empty_tree.c \
-                fdt_overlay.c fdt_ro.c fdt_rw.c fdt_strerror.c fdt_sw.c \
--- 
-2.48.1
-
diff --git a/meta/recipes-connectivity/bind/bind_9.20.7.bb b/meta/recipes-connectivity/bind/bind_9.20.8.bb
index b4202f1a59..864daed97e 100644
--- a/meta/recipes-connectivity/bind/bind_9.20.7.bb
+++ b/meta/recipes-connectivity/bind/bind_9.20.8.bb
@@ -20,7 +20,7 @@ SRC_URI = "https://ftp.isc.org/isc/bind9/${PV}/${BPN}-${PV}.tar.xz \
            file://0001-avoid-start-failure-with-bind-user.patch \
            "
 
-SRC_URI[sha256sum] = "43323c8d22d2144282c37b4060ec11e98c24835e225688876fad08ba7b95dca6"
+SRC_URI[sha256sum] = "3004d99c476beab49a986c2d49f902e2cd7766c9ab18b261e8b353cabf3a04b5"
 
 UPSTREAM_CHECK_URI = "https://ftp.isc.org/isc/bind9/"
 # follow the ESV versions divisible by 2
diff --git a/meta/recipes-connectivity/libuv/libuv_1.50.0.bb b/meta/recipes-connectivity/libuv/libuv_1.51.0.bb
index c5f4e9d3ac..569bff1439 100644
--- a/meta/recipes-connectivity/libuv/libuv_1.50.0.bb
+++ b/meta/recipes-connectivity/libuv/libuv_1.51.0.bb
@@ -6,8 +6,8 @@ LICENSE = "MIT"
 LIC_FILES_CHKSUM = "file://LICENSE;md5=74b6f2f7818a4e3a80d03556f71b129b \
                     file://LICENSE-extra;md5=f9307417749e19bd1d6d68a394b49324"
 
-SRCREV = "8fb9cb919489a48880680a56efecff6a7dfb4504"
-SRC_URI = "git://github.com/libuv/libuv.git;branch=v1.x;protocol=https"
+SRCREV = "5152db2cbfeb5582e9c27c5ea1dba2cd9e10759b"
+SRC_URI = "git://github.com/libuv/libuv.git;branch=v1.x;protocol=https;tag=v${PV}"
 UPSTREAM_CHECK_GITTAGREGEX = "v(?P<pver>\d+(\.\d+)+)"
 
 S = "${WORKDIR}/git"
diff --git a/meta/recipes-connectivity/resolvconf/resolvconf_1.92.bb b/meta/recipes-connectivity/resolvconf/resolvconf_1.93.bb
index c3ce5bc22e..93e5a944d1 100644
--- a/meta/recipes-connectivity/resolvconf/resolvconf_1.92.bb
+++ b/meta/recipes-connectivity/resolvconf/resolvconf_1.93.bb
@@ -15,7 +15,7 @@ SRC_URI = "git://salsa.debian.org/debian/resolvconf.git;protocol=https;branch=un
            file://0001-avoid-using-m-option-for-readlink.patch \
            "
 
-SRCREV = "86047276c80705c51859a19f0c472102e0822f34"
+SRCREV = "ab766fa31f7939f6d879123236b4275320b7ff64"
 
 S = "${WORKDIR}/git"
 
diff --git a/meta/recipes-core/glibc/glibc-locale.inc b/meta/recipes-core/glibc/glibc-locale.inc
index c63c9edd76..90248bbc0f 100644
--- a/meta/recipes-core/glibc/glibc-locale.inc
+++ b/meta/recipes-core/glibc/glibc-locale.inc
@@ -65,6 +65,8 @@ FILES:${LOCALEBASEPN}-locale-alias = "${datadir}/locale/locale.alias"
 
 LOCALETREESRC = "${COMPONENTS_DIR}/${PACKAGE_ARCH}/glibc-stash-locale"
 
+PSEUDO_INCLUDE_PATHS .= ",${WORKDIR}/locale-tree"
+
 copy_locale_files() {
         local dir=$1 mode=$2
 
diff --git a/meta/recipes-core/libcgroup/libcgroup/0001-include-Makefile-install-systemd.h-by-default.patch b/meta/recipes-core/libcgroup/libcgroup/0001-include-Makefile-install-systemd.h-by-default.patch
deleted file mode 100644
index 4b743f9b33..0000000000
--- a/meta/recipes-core/libcgroup/libcgroup/0001-include-Makefile-install-systemd.h-by-default.patch
+++ /dev/null
@@ -1,37 +0,0 @@
-From 592dcdcf243576bd2517d3da9bc18990de08e37e Mon Sep 17 00:00:00 2001
-From: Kamalesh Babulal <kamalesh.babulal@oracle.com>
-Date: Mon, 27 Nov 2023 20:07:33 +0530
-Subject: [PATCH 1/1] include/Makefile: install systemd.h by default
-
-Install systemd.h header file by default, as we have stub and defined
-versions of the systemd functions for both non-systemd and systemd
-enabled configurations.  This will help packagers to ship package
-without systemd support (--enable-systemd=no).
-
-Signed-off-by: Kamalesh Babulal <kamalesh.babulal@oracle.com>
-Signed-off-by: Tom Hromatka <tom.hromatka@oracle.com>
-
-Upstream-Status: Backport [https://github.com/libcgroup/libcgroup/commit/592dcdcf243576bd2517d3da9bc18990de08e37e]
-
-Signed-off-by: Adriaan Schmidt <adriaan.schmidt@siemens.com>
----
- include/Makefile.am | 6 +-----
- 1 file changed, 1 insertion(+), 5 deletions(-)
-
-diff --git a/include/Makefile.am b/include/Makefile.am
-index 23cebaac..4cb05529 100644
---- a/include/Makefile.am
-+++ b/include/Makefile.am
-@@ -2,8 +2,4 @@
- nobase_include_HEADERS = libcgroup.h libcgroup/error.h libcgroup/init.h \
-                         libcgroup/groups.h libcgroup/tasks.h \
-                         libcgroup/iterators.h libcgroup/config.h \
--                        libcgroup/log.h libcgroup/tools.h
--
--if WITH_SYSTEMD
--nobase_include_HEADERS += libcgroup/systemd.h
--endif
-+                        libcgroup/log.h libcgroup/tools.h libcgroup/systemd.h
--- 
-2.39.2
-
diff --git a/meta/recipes-core/libcgroup/libcgroup_3.1.0.bb b/meta/recipes-core/libcgroup/libcgroup_3.2.0.bb
index a1d27c7e7f..28562a5b37 100644
--- a/meta/recipes-core/libcgroup/libcgroup_3.1.0.bb
+++ b/meta/recipes-core/libcgroup/libcgroup_3.2.0.bb
@@ -12,12 +12,10 @@ inherit autotools pkgconfig github-releases
 DEPENDS = "bison-native flex-native"
 DEPENDS:append:libc-musl = " fts"
 
-SRC_URI = "${GITHUB_BASE_URI}/download/v${PV}/${BP}.tar.gz \
-           file://0001-include-Makefile-install-systemd.h-by-default.patch \
-"
+SRC_URI = "${GITHUB_BASE_URI}/download/v${PV}/${BP}.tar.gz"
 UPSTREAM_CHECK_URI = "https://github.com/libcgroup/libcgroup/tags"
 
-SRC_URI[sha256sum] = "976ec4b1e03c0498308cfd28f1b256b40858f636abc8d1f9db24f0a7ea9e1258"
+SRC_URI[sha256sum] = "9a0fc2d6c377215c3e0d849f9189ecd91fd075f1da0a24b73f56c8892e86bdfe"
 
 PACKAGECONFIG = "${@bb.utils.filter('DISTRO_FEATURES', 'pam systemd', d)}"
 PACKAGECONFIG[pam] = "--enable-pam-module-dir=${base_libdir}/security --enable-pam=yes,--enable-pam=no,libpam"
diff --git a/meta/recipes-devtools/ccache/ccache_4.11.2.bb b/meta/recipes-devtools/ccache/ccache_4.11.3.bb
index 3a41cb5736..83374fa44c 100644
--- a/meta/recipes-devtools/ccache/ccache_4.11.2.bb
+++ b/meta/recipes-devtools/ccache/ccache_4.11.3.bb
@@ -17,7 +17,7 @@ DEPENDS = "zstd fmt xxhash"
 
 SRC_URI = "${GITHUB_BASE_URI}/download/v${PV}/${BP}.tar.gz"
 
-SRC_URI[sha256sum] = "d51b82bb8c3932649323fd4cb8e5a0a9f7fe7f672c71a6d6839bee13b4ded4c5"
+SRC_URI[sha256sum] = "28a407314f03a7bd7a008038dbaffa83448bc670e2fc119609b1d99fb33bb600"
 
 inherit cmake github-releases
 
diff --git a/meta/recipes-devtools/diffstat/diffstat_1.67.bb b/meta/recipes-devtools/diffstat/diffstat_1.68.bb
index 8c84b30975..488f0834d6 100644
--- a/meta/recipes-devtools/diffstat/diffstat_1.67.bb
+++ b/meta/recipes-devtools/diffstat/diffstat_1.68.bb
@@ -5,14 +5,14 @@ reviewing large, complex patch files."
 HOMEPAGE = "http://invisible-island.net/diffstat/"
 SECTION = "devel"
 LICENSE = "X11"
-LIC_FILES_CHKSUM = "file://COPYING;md5=6232ea974e4cbc4ee06b49ed53df6ece"
+LIC_FILES_CHKSUM = "file://COPYING;md5=0c432d3aeb935855b2ca1ad2a0542ce4"
 
 SRC_URI = "http://invisible-mirror.net/archives/${BPN}/${BP}.tgz \
            file://run-ptest \
            file://avoid-check-user-break-cc.patch \
            "
 
-SRC_URI[sha256sum] = "760ed0c99c6d643238d41b80e60278cf1683ffb94a283954ac7ef168c852766a"
+SRC_URI[sha256sum] = "89f9294a8ac74fcef6f1b9ac408f43ebedf8d208e3efe0b99b4acc16dc6582c7"
 
 inherit autotools gettext ptest
 
diff --git a/meta/recipes-devtools/fmt/fmt_11.1.4.bb b/meta/recipes-devtools/fmt/fmt_11.2.0.bb
index 1bcf758fd9..b2b8c575c8 100644
--- a/meta/recipes-devtools/fmt/fmt_11.1.4.bb
+++ b/meta/recipes-devtools/fmt/fmt_11.2.0.bb
@@ -4,9 +4,9 @@ HOMEPAGE = "https://fmt.dev"
 LICENSE = "MIT"
 LIC_FILES_CHKSUM = "file://LICENSE;md5=b9257785fc4f3803a4b71b76c1412729"
 
-SRC_URI = "git://github.com/fmtlib/fmt;branch=master;protocol=https \
+SRC_URI = "git://github.com/fmtlib/fmt;branch=master;protocol=https;tag=${PV}\
            file://0001-Workaround-an-ABI-issue-in-spdlog.patch"
-SRCREV = "123913715afeb8a437e6388b4473fcc4753e1c9a"
+SRCREV = "40626af88bd7df9a5fb80be7b25ac85b122d6c21"
 
 S = "${WORKDIR}/git"
 
diff --git a/meta/recipes-devtools/pseudo/pseudo_git.bb b/meta/recipes-devtools/pseudo/pseudo_git.bb
index 5e2a8bf328..d7528d336b 100644
--- a/meta/recipes-devtools/pseudo/pseudo_git.bb
+++ b/meta/recipes-devtools/pseudo/pseudo_git.bb
@@ -12,7 +12,7 @@ SRC_URI:append:class-nativesdk = " \
     file://older-glibc-symbols.patch"
 SRC_URI[prebuilt.sha256sum] = "ed9f456856e9d86359f169f46a70ad7be4190d6040282b84c8d97b99072485aa"
 
-SRCREV = "3fac97341f0f8270ca28a91098d0a58ca306a6bd"
+SRCREV = "2c43381180f9cfef4c0a8bb0c1658a86c3fcc876"
 S = "${WORKDIR}/git"
 PV = "1.9.0+git"
 
diff --git a/meta/recipes-devtools/python/python3-calver_2025.04.02.bb b/meta/recipes-devtools/python/python3-calver_2025.04.17.bb
index 3f169e1f7c..290be21ce2 100644
--- a/meta/recipes-devtools/python/python3-calver_2025.04.02.bb
+++ b/meta/recipes-devtools/python/python3-calver_2025.04.17.bb
@@ -4,7 +4,7 @@ LICENSE = "Apache-2.0"
 LIC_FILES_CHKSUM = "file://LICENSE;md5=3b83ef96387f14655fc854ddc3c6bd57"
 
 SRC_URI = "git://github.com/di/calver;branch=master;protocol=https;tag=${PV}"
-SRCREV = "e9c8017caf3e3aff214fbb581ee7f366de55f629"
+SRCREV = "3b74bdce35f2814eb2b65db39a133d5c849ddea7"
 
 inherit python_setuptools_build_meta ptest-python-pytest
 
diff --git a/meta/recipes-devtools/python/python3-certifi_2025.1.31.bb b/meta/recipes-devtools/python/python3-certifi_2025.4.26.bb
index 69b39ba100..07f9f3bfc8 100644
--- a/meta/recipes-devtools/python/python3-certifi_2025.1.31.bb
+++ b/meta/recipes-devtools/python/python3-certifi_2025.4.26.bb
@@ -7,7 +7,7 @@ HOMEPAGE = " http://certifi.io/"
 LICENSE = "ISC"
 LIC_FILES_CHKSUM = "file://LICENSE;md5=11618cb6a975948679286b1211bd573c"
 
-SRC_URI[sha256sum] = "3d5da6925056f6f18f119200434a4780a94263f10d1c21d032a6f6b2baa20651"
+SRC_URI[sha256sum] = "0a816057ea3cdefcef70270d2c515e4506bbc954f417fa5ade2021213bb8f0c6"
 
 inherit pypi setuptools3
 
diff --git a/meta/recipes-devtools/python/python3-hatch-fancy-pypi-readme_24.1.0.bb b/meta/recipes-devtools/python/python3-hatch-fancy-pypi-readme_25.1.0.bb
index b32527f949..5d8d82edd8 100644
--- a/meta/recipes-devtools/python/python3-hatch-fancy-pypi-readme_24.1.0.bb
+++ b/meta/recipes-devtools/python/python3-hatch-fancy-pypi-readme_25.1.0.bb
@@ -8,6 +8,6 @@ inherit pypi python_hatchling
 PYPI_PACKAGE = "hatch_fancy_pypi_readme"
 UPSTREAM_CHECK_PYPI_PACKAGE = "${PYPI_PACKAGE}"
 
-SRC_URI[sha256sum] = "44dd239f1a779b9dcf8ebc9401a611fd7f7e3e14578dcf22c265dfaf7c1514b8"
+SRC_URI[sha256sum] = "9c58ed3dff90d51f43414ce37009ad1d5b0f08ffc9fc216998a06380f01c0045"
 
 BBCLASSEXTEND = "native nativesdk"
diff --git a/meta/recipes-devtools/python/python3-hypothesis_6.131.0.bb b/meta/recipes-devtools/python/python3-hypothesis_6.131.14.bb
index d7656dc1d8..269ed936b6 100644
--- a/meta/recipes-devtools/python/python3-hypothesis_6.131.0.bb
+++ b/meta/recipes-devtools/python/python3-hypothesis_6.131.14.bb
@@ -13,7 +13,7 @@ SRC_URI += " \
     file://test_rle.py \
     "
 
-SRC_URI[sha256sum] = "4b807daeeee47852edfd9818ba0e33df14902f1b78a5524f1a3fb71f80c7cec3"
+SRC_URI[sha256sum] = "347edc46cfe9bfcfb0598c4c927ed8fd573edfc8bacd2162023c4cf16accb702"
 
 RDEPENDS:${PN} += " \
     python3-attrs \
diff --git a/meta/recipes-devtools/python/python3-jsonschema-specifications_2024.10.1.bb b/meta/recipes-devtools/python/python3-jsonschema-specifications_2025.4.1.bb
index c45e5c25c7..53805b0396 100644
--- a/meta/recipes-devtools/python/python3-jsonschema-specifications_2024.10.1.bb
+++ b/meta/recipes-devtools/python/python3-jsonschema-specifications_2025.4.1.bb
@@ -5,7 +5,7 @@ HOMEPAGE = "https://pypi.org/project/jsonschema-specifications/"
 LICENSE = "MIT"
 LIC_FILES_CHKSUM = "file://COPYING;md5=93eb9740964b59e9ba30281255b044e2"
 
-SRC_URI[sha256sum] = "0f38b83639958ce1152d02a7f062902c41c8fd20d558b0c34344292d417ae272"
+SRC_URI[sha256sum] = "630159c9f4dbea161a6a2205c3011cc4f18ff381b189fff48bb39b9bf26ae608"
 
 inherit pypi python_hatchling
 
diff --git a/meta/recipes-devtools/python/python3-lxml_5.3.2.bb b/meta/recipes-devtools/python/python3-lxml_5.4.0.bb
index cc0d4ecd25..126fbe99b4 100644
--- a/meta/recipes-devtools/python/python3-lxml_5.3.2.bb
+++ b/meta/recipes-devtools/python/python3-lxml_5.4.0.bb
@@ -18,7 +18,7 @@ LIC_FILES_CHKSUM = "file://LICENSES.txt;md5=e4c045ebad958ead4b48008f70838403 \
 
 DEPENDS += "libxml2 libxslt"
 
-SRC_URI[sha256sum] = "773947d0ed809ddad824b7b14467e1a481b8976e87278ac4a730c2f7c7fcddc1"
+SRC_URI[sha256sum] = "d12832e1dbea4be280b22fd0ea7c9b87f0d8fc51ba06e92dc62d52f804f78ebd"
 
 SRC_URI += "${PYPI_SRC_URI}"
 inherit pkgconfig pypi setuptools3
diff --git a/meta/recipes-devtools/python/python3-mako_1.3.9.bb b/meta/recipes-devtools/python/python3-mako_1.3.10.bb
index 83b6149337..4facce9233 100644
--- a/meta/recipes-devtools/python/python3-mako_1.3.9.bb
+++ b/meta/recipes-devtools/python/python3-mako_1.3.10.bb
@@ -10,7 +10,7 @@ inherit pypi python_setuptools_build_meta ptest-python-pytest
 
 
 
-SRC_URI[sha256sum] = "b5d65ff3462870feec922dbccf38f6efb44e5714d7b593a656be86663d8600ac"
+SRC_URI[sha256sum] = "99579a6f39583fa7e5630a28c3c1f440e4e97a414b80372649c0ce338da2ea28"
 
 RDEPENDS:${PN} = "python3-html \
                   python3-markupsafe \
diff --git a/meta/recipes-devtools/python/python3-markdown_3.7.bb b/meta/recipes-devtools/python/python3-markdown_3.8.bb
index 6a2ab36494..09c2f3435b 100644
--- a/meta/recipes-devtools/python/python3-markdown_3.7.bb
+++ b/meta/recipes-devtools/python/python3-markdown_3.8.bb
@@ -5,7 +5,7 @@ LIC_FILES_CHKSUM = "file://LICENSE.md;md5=ec58cdf7cfed06a21f7a9362627a5480"
 
 inherit pypi python_setuptools_build_meta
 
-SRC_URI[sha256sum] = "2ae2471477cfd02dbbf038d5d9bc226d40def84b4fe2986e49b59b6b472bbed2"
+SRC_URI[sha256sum] = "7df81e63f0df5c4b24b7d156eb81e4690595239b7d70937d0409f1b0de319c6f"
 
 BBCLASSEXTEND = "native nativesdk"
 
diff --git a/meta/recipes-devtools/python/python3-meson-python_0.17.1.bb b/meta/recipes-devtools/python/python3-meson-python_0.18.0.bb
index 4dc7177557..742a2580a7 100644
--- a/meta/recipes-devtools/python/python3-meson-python_0.17.1.bb
+++ b/meta/recipes-devtools/python/python3-meson-python_0.18.0.bb
@@ -14,7 +14,7 @@ PYPI_PACKAGE = "meson_python"
 UPSTREAM_CHECK_PYPI_PACKAGE = "${PYPI_PACKAGE}"
 
 inherit pypi python_mesonpy
-SRC_URI[sha256sum] = "efb91f69f2e19eef7bc9a471ed2a4e730088cc6b39eacaf3e49fc4f930eb5f83"
+SRC_URI[sha256sum] = "c56a99ec9df669a40662fe46960321af6e4b14106c14db228709c1628e23848d"
 
 DEPENDS:remove:class-native = "python3-meson-python-native"
 
diff --git a/meta/recipes-devtools/python/python3-packaging_24.2.bb b/meta/recipes-devtools/python/python3-packaging_25.0.bb
index 3526cd5b39..9cb5c68f58 100644
--- a/meta/recipes-devtools/python/python3-packaging_24.2.bb
+++ b/meta/recipes-devtools/python/python3-packaging_25.0.bb
@@ -3,7 +3,7 @@ HOMEPAGE = "https://github.com/pypa/packaging"
 LICENSE = "Apache-2.0 | BSD-2-Clause"
 LIC_FILES_CHKSUM = "file://LICENSE;md5=faadaedca9251a90b205c9167578ce91"
 
-SRC_URI[sha256sum] = "c228a6dc5e932d346bc5739379109d49e8853dd8223571c7c5b55260edc0b97f"
+SRC_URI[sha256sum] = "d443872c98d677bf60f6a1f2f8c1cb748e8fe762d2bf9d3148b5599295b0fc4f"
 
 SRC_URI += "file://run-ptest.in"
 
diff --git a/meta/recipes-devtools/python/python3-pdm_2.23.1.bb b/meta/recipes-devtools/python/python3-pdm_2.24.1.bb
index acab401392..3f251c7f0f 100644
--- a/meta/recipes-devtools/python/python3-pdm_2.23.1.bb
+++ b/meta/recipes-devtools/python/python3-pdm_2.24.1.bb
@@ -4,7 +4,7 @@ LICENSE = "MIT"
 SECTION = "devel/python"
 LIC_FILES_CHKSUM = "file://LICENSE;md5=2eb31a2cc1a758c34b499f287dd04ef2"
 
-SRC_URI[sha256sum] = "cf12cd2201df78a6543a5485ac1d7015a73b3a6b10c98b66dfae6ebd481386fe"
+SRC_URI[sha256sum] = "fc8adf011caa4ee2b0f25dabf890152aa4153cc21599ea67fe0c14e533dcd6d9"
 
 inherit pypi python_setuptools_build_meta
 
diff --git a/meta/recipes-devtools/python/python3-pip_25.0.1.bb b/meta/recipes-devtools/python/python3-pip_25.1.1.bb
index e54e63cba5..431ba182c6 100644
--- a/meta/recipes-devtools/python/python3-pip_25.0.1.bb
+++ b/meta/recipes-devtools/python/python3-pip_25.1.1.bb
@@ -27,7 +27,7 @@ inherit pypi python_setuptools_build_meta
 
 SRC_URI += "file://no_shebang_mangling.patch"
 
-SRC_URI[sha256sum] = "88f96547ea48b940a3a385494e181e29fb8637898f88d88737c5049780f196ea"
+SRC_URI[sha256sum] = "3de45d411d308d5054c2168185d8da7f9a2cd753dbac8acbfa88a8909ecd9077"
 
 RDEPENDS:${PN} = "\
   python3-compile \
diff --git a/meta/recipes-devtools/python/python3-poetry-core_2.1.2.bb b/meta/recipes-devtools/python/python3-poetry-core_2.1.3.bb
index 728b09cd7e..12c4751de8 100644
--- a/meta/recipes-devtools/python/python3-poetry-core_2.1.2.bb
+++ b/meta/recipes-devtools/python/python3-poetry-core_2.1.3.bb
@@ -15,7 +15,7 @@ LIC_FILES_CHKSUM = "\
     file://src/poetry/core/_vendor/tomli/LICENSE;md5=aaaaf0879d17df0110d1aa8c8c9f46f5 \
 "
 
-SRC_URI[sha256sum] = "f9dbbbd0ebf9755476a1d57f04b30e9aecf71ca9dc2fcd4b17aba92c0002aa04"
+SRC_URI[sha256sum] = "0522a015477ed622c89aad56a477a57813cace0c8e7ff2a2906b7ef4a2e296a4"
 
 inherit python_poetry_core pypi
 
diff --git a/meta/recipes-devtools/python/python3-pycairo_1.27.0.bb b/meta/recipes-devtools/python/python3-pycairo_1.28.0.bb
index 3dab9e823f..c610f3eae9 100644
--- a/meta/recipes-devtools/python/python3-pycairo_1.27.0.bb
+++ b/meta/recipes-devtools/python/python3-pycairo_1.28.0.bb
@@ -13,7 +13,7 @@ DEPENDS = "cairo python3"
 SRC_URI = "${GITHUB_BASE_URI}/download/v${PV}/pycairo-${PV}.tar.gz"
 GITHUB_BASE_URI = "https://github.com/pygobject/pycairo/releases/"
 
-SRC_URI[sha256sum] = "5cb21e7a00a2afcafea7f14390235be33497a2cce53a98a19389492a60628430"
+SRC_URI[sha256sum] = "26ec5c6126781eb167089a123919f87baa2740da2cca9098be8b3a6b91cc5fbc"
 
 S = "${WORKDIR}/pycairo-${PV}"
 
diff --git a/meta/recipes-devtools/python/python3-typing-extensions_4.13.1.bb b/meta/recipes-devtools/python/python3-typing-extensions_4.13.2.bb
index c3d3dbc275..9c83ae6c61 100644
--- a/meta/recipes-devtools/python/python3-typing-extensions_4.13.1.bb
+++ b/meta/recipes-devtools/python/python3-typing-extensions_4.13.2.bb
@@ -16,7 +16,7 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=fcf6b249c2641540219a727f35d8d2c2"
 PYPI_PACKAGE = "typing_extensions"
 UPSTREAM_CHECK_PYPI_PACKAGE = "${PYPI_PACKAGE}"
 
-SRC_URI[sha256sum] = "98795af00fb9640edec5b8e31fc647597b4691f099ad75f469a2616be1a76dff"
+SRC_URI[sha256sum] = "e6c81219bd689f51865d9e372991c540bda33a0379d5573cddb9a3a23f7caaef"
 
 inherit pypi python_flit_core
 
diff --git a/meta/recipes-devtools/python/python3-yamllint_1.37.0.bb b/meta/recipes-devtools/python/python3-yamllint_1.37.1.bb
index 9ba0e8bc6e..1b0ddde873 100644
--- a/meta/recipes-devtools/python/python3-yamllint_1.37.0.bb
+++ b/meta/recipes-devtools/python/python3-yamllint_1.37.1.bb
@@ -7,7 +7,7 @@ inherit pypi python_setuptools_build_meta
 
 PYPI_PACKAGE = "yamllint"
 
-SRC_URI[sha256sum] = "ead81921d4d87216b2528b7a055664708f9fb8267beb0c427cb706ac6ab93580"
+SRC_URI[sha256sum] = "81f7c0c5559becc8049470d86046b36e96113637bcbe4753ecef06977c00245d"
 
 RDEPENDS:${PN} += "python3-pathspec python3-pyyaml"
 
diff --git a/meta/recipes-devtools/repo/repo_2.53.bb b/meta/recipes-devtools/repo/repo_2.54.bb
index 77817c25e4..07ee583172 100644
--- a/meta/recipes-devtools/repo/repo_2.53.bb
+++ b/meta/recipes-devtools/repo/repo_2.54.bb
@@ -11,7 +11,7 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=3b83ef96387f14655fc854ddc3c6bd57"
 
 SRC_URI = "git://gerrit.googlesource.com/git-repo.git;protocol=https;branch=main;tag=v${PV} \
            "
-SRCREV = "4b94e773efd36754f6c8649ad55b90d19a61107f"
+SRCREV = "97dc5c1bd9527c2abe2183b16a4b7ef037dc34a7"
 
 MIRRORS += "git://gerrit.googlesource.com/git-repo.git git://github.com/GerritCodeReview/git-repo.git"
 
diff --git a/meta/recipes-devtools/swig/swig_4.3.0.bb b/meta/recipes-devtools/swig/swig_4.3.1.bb
index a31ca68444..dd979580a1 100644
--- a/meta/recipes-devtools/swig/swig_4.3.0.bb
+++ b/meta/recipes-devtools/swig/swig_4.3.1.bb
@@ -15,7 +15,7 @@ DEPENDS = "libpcre2 bison-native"
 SRC_URI = "${SOURCEFORGE_MIRROR}/${BPN}/${BPN}-${PV}.tar.gz \
             file://determinism.patch \
            "
-SRC_URI[sha256sum] = "f7203ef796f61af986c70c05816236cbd0d31b7aa9631e5ab53020ab7804aa9e"
+SRC_URI[sha256sum] = "44fc829f70f1e17d635a2b4d69acab38896699ecc24aa023e516e0eabbec61b8"
 UPSTREAM_CHECK_URI = "https://sourceforge.net/projects/swig/files/swig/"
 UPSTREAM_CHECK_REGEX = "swig-(?P<pver>\d+(\.\d+)+)"
 
diff --git a/meta/recipes-extended/cups/cups_2.4.11.bb b/meta/recipes-extended/cups/cups_2.4.12.bb
index 71568295cb..ac73c2780f 100644
--- a/meta/recipes-extended/cups/cups_2.4.11.bb
+++ b/meta/recipes-extended/cups/cups_2.4.12.bb
@@ -2,4 +2,4 @@ require cups.inc
 
 LIC_FILES_CHKSUM = "file://LICENSE;md5=3b83ef96387f14655fc854ddc3c6bd57"
 
-SRC_URI[sha256sum] = "9a88fe1da3a29a917c3fc67ce6eb3178399d68e1a548c6d86c70d9b13651fd71"
+SRC_URI[sha256sum] = "b1dde191a4ae2760c47220c82ca6155a28c382701e6c1a0159d1054990231d59"
diff --git a/meta/recipes-extended/ghostscript/ghostscript_10.05.0.bb b/meta/recipes-extended/ghostscript/ghostscript_10.05.1.bb
index c0e2654701..8f132d55c6 100644
--- a/meta/recipes-extended/ghostscript/ghostscript_10.05.0.bb
+++ b/meta/recipes-extended/ghostscript/ghostscript_10.05.1.bb
@@ -28,7 +28,7 @@ SRC_URI = "https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/downlo
            file://0001-Bug-708160-Fix-compatibility-with-C23-compilers.patch \
            "
 
-SRC_URI[sha256sum] = "56e77833de683825c420d0af8cb90aa8ba7da71ea6fb5624290cbc1b53fe7942"
+SRC_URI[sha256sum] = "121861b6d29b2461dec6575c9f3cab665b810bd408d4ec02c86719fa708b0a49"
 
 PACKAGECONFIG ??= ""
 PACKAGECONFIG[gtk] = "--enable-gtk,--disable-gtk,gtk+3"
diff --git a/meta/recipes-extended/grep/grep_3.11.bb b/meta/recipes-extended/grep/grep_3.12.bb
index 0d36eba3b2..2678d2d41e 100644
--- a/meta/recipes-extended/grep/grep_3.11.bb
+++ b/meta/recipes-extended/grep/grep_3.12.bb
@@ -8,7 +8,7 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=1ebbd3e34237af26da5dc08a4e440464"
 
 SRC_URI = "${GNU_MIRROR}/grep/grep-${PV}.tar.xz"
 
-SRC_URI[sha256sum] = "1db2aedde89d0dea42b16d9528f894c8d15dae4e190b59aecc78f5a951276eab"
+SRC_URI[sha256sum] = "2649b27c0e90e632eadcd757be06c6e9a4f48d941de51e7c0f83ff76408a07b9"
 
 inherit autotools gettext texinfo pkgconfig
 
diff --git a/meta/recipes-extended/man-db/files/0001-check-for-_nl_msg_cat_cntr-in-configure.patch b/meta/recipes-extended/man-db/files/0001-check-for-_nl_msg_cat_cntr-in-configure.patch
deleted file mode 100644
index feef52b11c..0000000000
--- a/meta/recipes-extended/man-db/files/0001-check-for-_nl_msg_cat_cntr-in-configure.patch
+++ /dev/null
@@ -1,61 +0,0 @@
-From ea00e32a87cc733dd5aa05cef407a5bee3e6db29 Mon Sep 17 00:00:00 2001
-From: Khem Raj <raj.khem@gmail.com>
-Date: Tue, 18 Mar 2025 22:42:45 -0700
-Subject: [PATCH] check for _nl_msg_cat_cntr in configure
-
-_nl_msg_cat_cntr is not available in all implementations e.g. musl libintl
-does not have it, therefore add a check to detect it and use it only if
-it is found.
-
-Upstream-Status: Backport [https://gitlab.com/man-db/man-db/-/commit/7430ca617b5cee3d4420da3158382c5ffbc3e77d]
-Signed-off-by: Khem Raj <raj.khem@gmail.com>
----
- configure.ac        | 9 +++++++++
- include/manconfig.h | 6 ++++--
- 2 files changed, 13 insertions(+), 2 deletions(-)
-
---- a/configure.ac
-+++ b/configure.ac
-@@ -404,6 +404,15 @@ AC_TYPE_PID_T
- AC_TYPE_UID_T
- AC_TYPE_SIZE_T
- 
-+dnl _nl_msg_cat_cntr is required for GNU gettext
-+AC_MSG_CHECKING([for _nl_msg_cat_cntr])
-+AC_LINK_IFELSE([AC_LANG_PROGRAM(
-+       [[#include <libintl.h>
-+       extern int _nl_msg_cat_cntr;]],
-+       [[++_nl_msg_cat_cntr;]])],
-+       AC_MSG_RESULT([yes]); AC_DEFINE([HAVE_NL_MSG_CAT_CNTR], [], [_nl_msg_cat_cntr from GNU Gettext]),
-+       AC_MSG_RESULT([no]))
-+
- # Check for pipeline library.
- PKG_CHECK_MODULES([libpipeline], [libpipeline >= 1.5.0])
- 
---- a/include/manconfig.h
-+++ b/include/manconfig.h
-@@ -24,6 +24,8 @@
- #ifndef MANCONFIG_H
- #define MANCONFIG_H
- 
-+#include "config.h"
-+
- /* STD_SECTIONS must contain all of your man hierarchy subdirectories. The
-    order is important. Manual pages will be displayed in this order. Ie
-    if "1" comes before "2", then a kill(1) will be displayed in preference to
-@@ -138,13 +140,13 @@
- #define UNLIKELY(cond) __builtin_expect ((cond), 0)
- 
- /* GNU gettext needs to know when the locale changes. This macro tells it. */
--#ifdef ENABLE_NLS
-+#ifdef HAVE_NL_MSG_CAT_CNTR
- extern int _nl_msg_cat_cntr;
- #  define locale_changed()                                                    \
-          do {                                                                \
-                  ++_nl_msg_cat_cntr;                                         \
-          } while (0)
--#else /* !ENABLE_NLS */
-+#else /* !HAVE_NL_MSG_CAT_CNTR */
- #  define locale_changed()
- #endif /* ENABLE_NLS */
- 
diff --git a/meta/recipes-extended/man-db/files/flex.patch b/meta/recipes-extended/man-db/files/flex.patch
deleted file mode 100644
index c18be7e36a..0000000000
--- a/meta/recipes-extended/man-db/files/flex.patch
+++ /dev/null
@@ -1,36 +0,0 @@
-From d3f7c160bddf5d879c74e19e4f577882e8b22559 Mon Sep 17 00:00:00 2001
-From: Ross Burton <ross.burton@arm.com>
-Date: Wed, 22 Jan 2025 14:16:48 +0000
-Subject: [PATCH] configure: check for shipped generated sources in source
- directory
-
-The configure script fails if it can't find flex and the pregenerated
-source code isn't available, as is the case in builds from git whereas
-tarballs include the code.
-
-However this breaks with out-of-tree builds, where cwd during configure
-is the build directory not the source directory, and the pregenerated
-sources will always be inside the source directory.
-
-Upstream-Status: Submitted [https://gitlab.com/man-db/man-db/-/merge_requests/12]
-Signed-off-by: Ross Burton <ross.burton@arm.com>
----
- configure.ac | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/configure.ac b/configure.ac
-index 7e9148fb..49a213fd 100644
---- a/configure.ac
-+++ b/configure.ac
-@@ -380,7 +380,7 @@ dnl To add more decompressors just follow the scheme above.
- dnl The "noyywrap" argument is new in Autoconf 2.70, but this also works
- dnl fine with older versions that ignore the argument.
- AC_PROG_LEX([noyywrap])
--if test "$LEX" = ":" && (test ! -e src/lexgrog.c || test ! -e src/zsoelim.c)
-+if test "$LEX" = ":" && (test ! -e $srcdir/src/lexgrog.c || test ! -e $srcdir/src/zsoelim.c)
- then
-        AC_MSG_ERROR([flex is required when building from revision control])
- fi
--- 
-2.43.0
-
diff --git a/meta/recipes-extended/man-db/man-db_2.13.0.bb b/meta/recipes-extended/man-db/man-db_2.13.1.bb
index a0ce2150f9..f044a47f7d 100644
--- a/meta/recipes-extended/man-db/man-db_2.13.0.bb
+++ b/meta/recipes-extended/man-db/man-db_2.13.1.bb
@@ -8,11 +8,9 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=1ebbd3e34237af26da5dc08a4e440464 \
                    "
 
 SRC_URI = "${SAVANNAH_NONGNU_MIRROR}/man-db/man-db-${PV}.tar.xz \
-           file://flex.patch \
-           file://0001-check-for-_nl_msg_cat_cntr-in-configure.patch \
            file://99_mandb \
-          "
-SRC_URI[sha256sum] = "82f0739f4f61aab5eb937d234de3b014e777b5538a28cbd31433c45ae09aefb9"
+           "
+SRC_URI[sha256sum] = "8afebb6f7eb6bb8542929458841f5c7e6f240e30c86358c1fbcefbea076c87d9"
 
 DEPENDS = "libpipeline gdbm groff-native base-passwd"
 RDEPENDS:${PN} += "base-passwd"
diff --git a/meta/recipes-gnome/epiphany/epiphany_48.0.bb b/meta/recipes-gnome/epiphany/epiphany_48.3.bb
index 9eff56df3a..74a17be5a5 100644
--- a/meta/recipes-gnome/epiphany/epiphany_48.0.bb
+++ b/meta/recipes-gnome/epiphany/epiphany_48.3.bb
@@ -31,7 +31,7 @@ SRC_URI = "${GNOME_MIRROR}/${GNOMEBN}/${@oe.utils.trim_version("${PV}", 1)}/${GN
            file://migrator.patch \
            file://distributor.patch \
            "
-SRC_URI[archive.sha256sum] = "c9d1f6dffbad03b0916436901c770da302879ca60a636d2b72b25b142ec05f80"
+SRC_URI[archive.sha256sum] = "da2953e7e2b73bf7473c0a33979104d79362795295eaa0a2a38ea188537daf13"
 
 # Developer mode enables debugging
 PACKAGECONFIG[developer-mode] = "-Ddeveloper_mode=true,-Ddeveloper_mode=false"
diff --git a/meta/recipes-gnome/libadwaita/libadwaita/90d68222c184f681472d9d9ce2ae443ebd76386e.patch b/meta/recipes-gnome/libadwaita/libadwaita/90d68222c184f681472d9d9ce2ae443ebd76386e.patch
deleted file mode 100644
index d3a3535013..0000000000
--- a/meta/recipes-gnome/libadwaita/libadwaita/90d68222c184f681472d9d9ce2ae443ebd76386e.patch
+++ /dev/null
@@ -1,38 +0,0 @@
-From 90d68222c184f681472d9d9ce2ae443ebd76386e Mon Sep 17 00:00:00 2001
-From: Maximiliano Sandoval <msandova@gnome.org>
-Date: Sat, 15 Mar 2025 10:47:31 +0100
-Subject: [PATCH] meson: Check g-i before using --doc-format arg
-
-Upstream-Status: Backport [https://gitlab.gnome.org/GNOME/libadwaita/-/commit/90d68222c184f681472d9d9ce2ae443ebd76386e.patch]
-
-Signed-off-by: Markus Volk <f_l_k@t-online.de>
----
- src/meson.build | 8 +++++++-
- 1 file changed, 7 insertions(+), 1 deletion(-)
-
-diff --git a/src/meson.build b/src/meson.build
-index 90cecc6a1..585fe3aad 100644
---- a/src/meson.build
-+++ b/src/meson.build
-@@ -450,11 +450,17 @@ meson.override_dependency(package_api_name, libadwaita_dep)
- 
- if introspection
- 
-+   gir_dep = dependency('gobject-introspection-1.0')
-    libadwaita_gir_extra_args = [
-      '--quiet',
--     '--doc-format=gi-docgen',
-      '-DADWAITA_COMPILATION',
-    ]
-+   if gir_dep.version().version_compare('>=1.83.2')
-+     libadwaita_gir_extra_args += [
-+       '--doc-format=gi-docgen',
-+     ]
-+   endif
-+
- 
-    libadwaita_gir = gnome.generate_gir(libadwaita,
-                  sources: libadwaita_generated_headers + libadwaita_public_headers + libadwaita_public_sources,
--- 
-GitLab
-
diff --git a/meta/recipes-gnome/libadwaita/libadwaita_1.7.0.bb b/meta/recipes-gnome/libadwaita/libadwaita_1.7.2.bb
index 55985bf7cc..4dc583ab39 100644
--- a/meta/recipes-gnome/libadwaita/libadwaita_1.7.0.bb
+++ b/meta/recipes-gnome/libadwaita/libadwaita_1.7.2.bb
@@ -11,8 +11,7 @@ DEPENDS = " \
 
 inherit gnomebase gobject-introspection gi-docgen vala features_check
 
-SRC_URI[archive.sha256sum] = "58bf99b8a9f8b0171964de0ae741d01d5a09db3662134fa67541c99a8ed7dec0"
-SRC_URI += "file://90d68222c184f681472d9d9ce2ae443ebd76386e.patch"
+SRC_URI[archive.sha256sum] = "28ee2ff589c6debe47af9da7a56e37c97d6849e003918a4b223f690d25f960be"
 
 ANY_OF_DISTRO_FEATURES = "${GTK3DISTROFEATURES}"
 REQUIRED_DISTRO_FEATURES = "opengl"
diff --git a/meta/recipes-graphics/harfbuzz/harfbuzz_11.1.0.bb b/meta/recipes-graphics/harfbuzz/harfbuzz_11.2.0.bb
index 9eaacdaa5a..db5a04486c 100644
--- a/meta/recipes-graphics/harfbuzz/harfbuzz_11.1.0.bb
+++ b/meta/recipes-graphics/harfbuzz/harfbuzz_11.2.0.bb
@@ -10,7 +10,7 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=b98429b8e8e3c2a67cfef01e99e4893d \
 
 SRC_URI = "${GITHUB_BASE_URI}/download/${PV}/${BPN}-${PV}.tar.xz"
 SRC_URI += "file://0001-Use-Os-to-compile-hb-subset-plan-layout.cc.patch"
-SRC_URI[sha256sum] = "477f0d48c34dc32093b45304178eb9733361ca1832b5159879c99e6d40227969"
+SRC_URI[sha256sum] = "50f7d0a208367e606dbf6eecc5cfbecc01a47be6ee837ae7aff2787e24b09b45"
 
 DEPENDS += "glib-2.0-native"
 
diff --git a/meta/recipes-graphics/jpeg/libjpeg-turbo_3.0.1.bb b/meta/recipes-graphics/jpeg/libjpeg-turbo_3.1.0.bb
index a1d7d57fb5..8533bd8525 100644
--- a/meta/recipes-graphics/jpeg/libjpeg-turbo_3.0.1.bb
+++ b/meta/recipes-graphics/jpeg/libjpeg-turbo_3.1.0.bb
@@ -3,13 +3,13 @@ DESCRIPTION = "libjpeg-turbo is a derivative of libjpeg that uses SIMD instructi
 HOMEPAGE = "http://libjpeg-turbo.org/"
 
 LICENSE = "IJG & BSD-3-Clause & Zlib"
-LIC_FILES_CHKSUM = "file://LICENSE.md;md5=2a8e0d8226a102f07ab63ed7fd6ce155"
+LIC_FILES_CHKSUM = "file://LICENSE.md;md5=023c2e8942020502d6ea709e2a5453f7"
 
 DEPENDS:append:x86-64:class-target = " nasm-native"
 DEPENDS:append:x86:class-target = " nasm-native"
 
 SRC_URI = "${GITHUB_BASE_URI}/download/${PV}/${BP}.tar.gz"
-SRC_URI[sha256sum] = "22429507714ae147b3acacd299e82099fce5d9f456882fc28e252e4579ba2a75"
+SRC_URI[sha256sum] = "9564c72b1dfd1d6fe6274c5f95a8d989b59854575d4bbee44ade7bc17aa9bc93"
 
 PE = "1"
 
diff --git a/meta/recipes-graphics/libsdl2/libsdl2_2.32.4.bb b/meta/recipes-graphics/libsdl2/libsdl2_2.32.6.bb
index 28338b0936..75710b962a 100644
--- a/meta/recipes-graphics/libsdl2/libsdl2_2.32.4.bb
+++ b/meta/recipes-graphics/libsdl2/libsdl2_2.32.6.bb
@@ -25,7 +25,7 @@ SRC_URI = "http://www.libsdl.org/release/SDL2-${PV}.tar.gz"
 
 S = "${WORKDIR}/SDL2-${PV}"
 
-SRC_URI[sha256sum] = "f15b478253e1ff6dac62257ded225ff4e7d0c5230204ac3450f1144ee806f934"
+SRC_URI[sha256sum] = "6a7a40d6c2e00016791815e1a9f4042809210bdf10cc78d2c75b45c4f52f93ad"
 
 inherit cmake lib_package binconfig-disabled pkgconfig upstream-version-is-even
 UPSTREAM_CHECK_REGEX = "SDL2-(?P<pver>\d+\.(\d*[02468])+(\.\d+)+)\.tar"
diff --git a/meta/recipes-graphics/shaderc/shaderc_2025.1.bb b/meta/recipes-graphics/shaderc/shaderc_2025.2.bb
index e9c0ecdd37..8c451e6e46 100644
--- a/meta/recipes-graphics/shaderc/shaderc_2025.1.bb
+++ b/meta/recipes-graphics/shaderc/shaderc_2025.2.bb
@@ -6,7 +6,7 @@ HOMEPAGE = "https://github.com/google/shaderc"
 LICENSE = "Apache-2.0"
 LIC_FILES_CHKSUM = "file://LICENSE;md5=86d3f3a95c324c9479bd8986968f4327"
 
-SRCREV = "7f68b1cf6f35f518febf36d425365bb8e6ad224a"
+SRCREV = "8c269ee0fe607f2d7cac00c0cb4fa243d6a6ec26"
 SRC_URI = "git://github.com/google/shaderc.git;protocol=https;branch=main;tag=v${PV} \
            file://0001-cmake-disable-building-external-dependencies.patch \
            file://0002-libshaderc_util-fix-glslang-header-file-location.patch \
diff --git a/meta/recipes-graphics/xorg-lib/libxft_2.3.8.bb b/meta/recipes-graphics/xorg-lib/libxft_2.3.9.bb
index 2699c1dfd7..0b7c736451 100644
--- a/meta/recipes-graphics/xorg-lib/libxft_2.3.8.bb
+++ b/meta/recipes-graphics/xorg-lib/libxft_2.3.9.bb
@@ -20,7 +20,7 @@ PROVIDES = "xft"
 
 PE = "1"
 
-SRC_URI[sha256sum] = "5e8c3c4bc2d4c0a40aef6b4b38ed2fb74301640da29f6528154b5009b1c6dd49"
+SRC_URI[sha256sum] = "60a25b78945ed6932635b3bb1899a517d31df7456e69867ffba27f89ff3976f5"
 
 XORG_PN = "libXft"
 
diff --git a/meta/recipes-graphics/xorg-lib/libxkbcommon_1.8.1.bb b/meta/recipes-graphics/xorg-lib/libxkbcommon_1.9.2.bb
index 76a622e157..77ee8ce500 100644
--- a/meta/recipes-graphics/xorg-lib/libxkbcommon_1.8.1.bb
+++ b/meta/recipes-graphics/xorg-lib/libxkbcommon_1.9.2.bb
@@ -7,9 +7,9 @@ LICENSE = "MIT & MIT-open-group & HPND & HPND-sell-variant & X11"
 
 DEPENDS = "flex-native bison-native"
 
-SRC_URI = "git://github.com/xkbcommon/libxkbcommon;protocol=https;branch=master"
+SRC_URI = "git://github.com/xkbcommon/libxkbcommon;protocol=https;branch=master;tag=xkbcommon-${PV}"
 
-SRCREV = "b3465081878e80ca6c11fe35c81787ec374ec15a"
+SRCREV = "dd642359f8d43c09968e34ca7f1eb1121b2dfd70"
 S = "${WORKDIR}/git"
 
 inherit meson pkgconfig bash-completion
diff --git a/meta/recipes-graphics/xorg-lib/pixman_0.44.2.bb b/meta/recipes-graphics/xorg-lib/pixman_0.46.0.bb
index 2e5bb172f5..c1c71fd420 100644
--- a/meta/recipes-graphics/xorg-lib/pixman_0.44.2.bb
+++ b/meta/recipes-graphics/xorg-lib/pixman_0.46.0.bb
@@ -8,7 +8,7 @@ SECTION = "x11/libs"
 DEPENDS = "zlib"
 
 SRC_URI = "https://www.cairographics.org/releases/${BP}.tar.gz"
-SRC_URI[sha256sum] = "6349061ce1a338ab6952b92194d1b0377472244208d47ff25bef86fc71973466"
+SRC_URI[sha256sum] = "02d9ff7b8458ef61731c3d355f854bbf461fd0a4d3563c51f1c1c7b00638050d"
 
 # see http://cairographics.org/releases/ - only even minor versions are stable
 UPSTREAM_CHECK_REGEX = "pixman-(?P<pver>\d+\.(\d*[02468])+(\.\d+)+)"
diff --git a/meta/recipes-kernel/kexec/kexec-tools/0001-kexec.c-add-MFD_NOEXEC_SEAL-flag-explicitly.patch b/meta/recipes-kernel/kexec/kexec-tools/0001-kexec.c-add-MFD_NOEXEC_SEAL-flag-explicitly.patch
index 8dc5fed765..5d994d9ffb 100644
--- a/meta/recipes-kernel/kexec/kexec-tools/0001-kexec.c-add-MFD_NOEXEC_SEAL-flag-explicitly.patch
+++ b/meta/recipes-kernel/kexec/kexec-tools/0001-kexec.c-add-MFD_NOEXEC_SEAL-flag-explicitly.patch
@@ -1,4 +1,4 @@
-From 1a09bf71c2f541c2cfb44a00661051597bbd0b76 Mon Sep 17 00:00:00 2001
+From 0b176595ca1610037d1175e1786d1a8aff1fb43f Mon Sep 17 00:00:00 2001
 From: Chen Qi <Qi.Chen@windriver.com>
 Date: Tue, 6 Aug 2024 21:42:43 -0700
 Subject: [PATCH] kexec.c: add MFD_NOEXEC_SEAL flag explicitly
@@ -18,10 +18,10 @@ Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
  1 file changed, 5 insertions(+), 1 deletion(-)
 
 diff --git a/kexec/kexec.c b/kexec/kexec.c
-index 4f51987..8f02595 100644
+index 6bf12d7..2f8e7cc 100644
 --- a/kexec/kexec.c
 +++ b/kexec/kexec.c
-@@ -60,6 +60,10 @@
+@@ -61,6 +61,10 @@
  #define KEXEC_LOADED_PATH "/sys/kernel/kexec_loaded"
  #define KEXEC_CRASH_LOADED_PATH "/sys/kernel/kexec_crash_loaded"
  
@@ -32,7 +32,7 @@ index 4f51987..8f02595 100644
  unsigned long long mem_min = 0;
  unsigned long long mem_max = ULONG_MAX;
  unsigned long elfcorehdrsz = 0;
-@@ -657,7 +661,7 @@ static int copybuf_memfd(const char *kernel_buf, size_t size)
+@@ -661,7 +665,7 @@ static int copybuf_memfd(const char *kernel_buf, size_t size)
  {
         int fd, count;
  
diff --git a/meta/recipes-kernel/kexec/kexec-tools_2.0.30.bb b/meta/recipes-kernel/kexec/kexec-tools_2.0.31.bb
index 6a67427888..d824859686 100644
--- a/meta/recipes-kernel/kexec/kexec-tools_2.0.30.bb
+++ b/meta/recipes-kernel/kexec/kexec-tools_2.0.31.bb
@@ -20,7 +20,7 @@ SRC_URI = "${KERNELORG_MIRROR}/linux/utils/kernel/kexec/kexec-tools-${PV}.tar.gz
            file://0001-kexec.c-add-MFD_NOEXEC_SEAL-flag-explicitly.patch \
            "
 
-SRC_URI[sha256sum] = "bb6b39bbe00099219e95ab34b25ea4348e1a95964eefc45c1e6fe32362ac9021"
+SRC_URI[sha256sum] = "ddaaa65b02b4f8aa9222586b1f26565b93a4baeffd35bcbd523f15fae7aa4897"
 
 inherit autotools update-rc.d systemd
 
diff --git a/meta/recipes-kernel/linux/cve-exclusion_6.12.inc b/meta/recipes-kernel/linux/cve-exclusion_6.12.inc
index 5249572cd4..656d1f6898 100644
--- a/meta/recipes-kernel/linux/cve-exclusion_6.12.inc
+++ b/meta/recipes-kernel/linux/cve-exclusion_6.12.inc
@@ -1,9 +1,9 @@
 
 # Auto-generated CVE metadata, DO NOT EDIT BY HAND.
-# Generated at 2025-04-27 09:28:35.170900+00:00 for version 6.12.23
+# Generated at 2025-05-12 13:07:15.166162+00:00 for version 6.12.27
 
 python check_kernel_cve_status_version() {
-    this_version = "6.12.23"
+    this_version = "6.12.27"
     kernel_version = d.getVar("LINUX_VERSION")
     if kernel_version != this_version:
         bb.warn("Kernel CVE status needs updating: generated for %s but kernel is %s" % (this_version, kernel_version))
@@ -48,6 +48,10 @@ CVE_STATUS[CVE-2020-36788] = "fixed-version: Fixed from version 5.15"
 
 CVE_STATUS[CVE-2020-36789] = "fixed-version: Fixed from version 5.10"
 
+CVE_STATUS[CVE-2020-36790] = "fixed-version: Fixed from version 5.9"
+
+CVE_STATUS[CVE-2020-36791] = "fixed-version: Fixed from version 5.5.14"
+
 # CVE-2021-28688 has no known resolution
 
 # CVE-2021-28691 has no known resolution
@@ -1526,6 +1530,8 @@ CVE_STATUS[CVE-2021-4453] = "fixed-version: Fixed from version 5.16"
 
 CVE_STATUS[CVE-2021-4454] = "fixed-version: Fixed from version 6.2"
 
+CVE_STATUS[CVE-2022-21546] = "fixed-version: Fixed from version 5.19"
+
 # CVE-2022-26365 has no known resolution
 
 # CVE-2022-33740 has no known resolution
@@ -2098,8 +2104,6 @@ CVE_STATUS[CVE-2022-48915] = "fixed-version: Fixed from version 5.17"
 
 CVE_STATUS[CVE-2022-48916] = "fixed-version: Fixed from version 5.17"
 
-CVE_STATUS[CVE-2022-48917] = "fixed-version: Fixed from version 5.16.13"
-
 CVE_STATUS[CVE-2022-48918] = "fixed-version: Fixed from version 5.17"
 
 CVE_STATUS[CVE-2022-48919] = "fixed-version: Fixed from version 5.17"
@@ -3740,6 +3744,342 @@ CVE_STATUS[CVE-2022-49760] = "fixed-version: Fixed from version 6.2"
 
 CVE_STATUS[CVE-2022-49761] = "fixed-version: Fixed from version 6.2"
 
+CVE_STATUS[CVE-2022-49762] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49763] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49764] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49765] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49766] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49767] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49768] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49769] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49770] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49771] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49772] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49773] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49774] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49775] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49776] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49777] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49778] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49779] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49780] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49781] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49782] = "fixed-version: Fixed from version 6.0.10"
+
+CVE_STATUS[CVE-2022-49783] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49784] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49785] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49786] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49787] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49788] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49789] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49790] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49791] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49792] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49793] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49794] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49795] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49796] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49797] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49798] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49799] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49800] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49801] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49802] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49803] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49804] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49805] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49806] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49807] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49808] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49809] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49810] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49811] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49812] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49813] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49814] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49815] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49817] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49818] = "fixed-version: Fixed from version 6.0.10"
+
+CVE_STATUS[CVE-2022-49819] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49820] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49821] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49822] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49823] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49824] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49825] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49826] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49827] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49828] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49829] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49830] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49831] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49832] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49833] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49834] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49835] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49836] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49837] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49838] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49839] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49840] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49841] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49842] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49844] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49845] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49846] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49847] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49848] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49849] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49850] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49851] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49852] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49853] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49854] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49855] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49857] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49858] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49859] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49860] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49861] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49862] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49863] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49864] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49865] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49866] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49867] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49868] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49869] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49870] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49871] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49872] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49873] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49874] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49875] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49876] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49877] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49878] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49879] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49880] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49881] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49882] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49883] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49884] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49885] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49886] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49887] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49888] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49889] = "fixed-version: Fixed from version 6.0.8"
+
+CVE_STATUS[CVE-2022-49890] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49891] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49892] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49893] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49894] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49895] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49896] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49898] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49899] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49900] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49901] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49902] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49903] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49904] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49905] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49906] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49907] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49908] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49909] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49910] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49911] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49912] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49913] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49914] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49915] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49916] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49917] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49918] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49919] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49920] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49921] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49922] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49923] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49924] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49925] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49926] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49927] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49928] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49929] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49930] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49931] = "fixed-version: Fixed from version 6.1"
+
+CVE_STATUS[CVE-2022-49932] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2022-49933] = "fixed-version: Fixed from version 6.3"
+
 # CVE-2023-34319 has no known resolution
 
 # CVE-2023-34324 has no known resolution
@@ -4734,6 +5074,216 @@ CVE_STATUS[CVE-2023-53033] = "fixed-version: Fixed from version 6.2"
 
 CVE_STATUS[CVE-2023-53034] = "cpe-stable-backport: Backported in 6.12.23"
 
+CVE_STATUS[CVE-2023-53035] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53036] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53037] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53038] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53039] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53040] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53041] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53042] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53043] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53044] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53045] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53046] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53047] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53048] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53049] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53050] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53051] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53052] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53053] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53054] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53055] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53056] = "fixed-version: Fixed from version 6.2.9"
+
+CVE_STATUS[CVE-2023-53057] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53058] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53059] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53060] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53061] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53062] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53064] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53065] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53066] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53067] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53068] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53069] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53070] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53071] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53072] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53073] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53074] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53075] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53077] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53078] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53079] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53080] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53081] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53082] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53083] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53084] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53085] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53086] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53087] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53088] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53089] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53090] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53091] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53092] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53093] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53094] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53095] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53096] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53097] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53098] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53099] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53100] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53101] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53102] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53103] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53105] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53106] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53107] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53108] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53109] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53110] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53111] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53112] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53113] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53114] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53115] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53116] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53117] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53118] = "fixed-version: Fixed from version 6.2.8"
+
+CVE_STATUS[CVE-2023-53119] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53120] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53121] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53123] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53124] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53125] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53126] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53127] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53128] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53131] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53132] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53133] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53134] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53135] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53136] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53137] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53138] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53139] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53140] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53141] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53142] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53143] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53144] = "fixed-version: Fixed from version 6.3"
+
+CVE_STATUS[CVE-2023-53145] = "fixed-version: Fixed from version 6.3"
+
 CVE_STATUS[CVE-2024-26581] = "fixed-version: Fixed from version 6.8"
 
 CVE_STATUS[CVE-2024-26582] = "fixed-version: Fixed from version 6.8"
@@ -6826,8 +7376,6 @@ CVE_STATUS[CVE-2024-39499] = "fixed-version: Fixed from version 6.10"
 
 CVE_STATUS[CVE-2024-39500] = "fixed-version: Fixed from version 6.10"
 
-CVE_STATUS[CVE-2024-39501] = "fixed-version: Fixed from version 6.10"
-
 CVE_STATUS[CVE-2024-39502] = "fixed-version: Fixed from version 6.10"
 
 CVE_STATUS[CVE-2024-39503] = "fixed-version: Fixed from version 6.10"
@@ -8974,8 +9522,6 @@ CVE_STATUS[CVE-2024-50014] = "fixed-version: Fixed from version 6.12"
 
 CVE_STATUS[CVE-2024-50015] = "fixed-version: Fixed from version 6.12"
 
-CVE_STATUS[CVE-2024-50016] = "fixed-version: Fixed from version 6.12"
-
 CVE_STATUS[CVE-2024-50017] = "fixed-version: Fixed from version 6.12"
 
 CVE_STATUS[CVE-2024-50019] = "fixed-version: Fixed from version 6.12"
@@ -10878,6 +11424,14 @@ CVE_STATUS[CVE-2024-58092] = "cpe-stable-backport: Backported in 6.12.22"
 
 # CVE-2024-58097 needs backporting (fixed from 6.15rc1)
 
+CVE_STATUS[CVE-2024-58098] = "cpe-stable-backport: Backported in 6.12.25"
+
+CVE_STATUS[CVE-2024-58099] = "fixed-version: Fixed from version 6.12"
+
+CVE_STATUS[CVE-2024-58100] = "cpe-stable-backport: Backported in 6.12.25"
+
+CVE_STATUS[CVE-2024-58237] = "cpe-stable-backport: Backported in 6.12.9"
+
 CVE_STATUS[CVE-2025-21629] = "cpe-stable-backport: Backported in 6.12.9"
 
 CVE_STATUS[CVE-2025-21631] = "cpe-stable-backport: Backported in 6.12.10"
@@ -11660,14 +12214,12 @@ CVE_STATUS[CVE-2025-22024] = "cpe-stable-backport: Backported in 6.12.23"
 
 CVE_STATUS[CVE-2025-22025] = "cpe-stable-backport: Backported in 6.12.23"
 
-# CVE-2025-22026 needs backporting (fixed from 6.12.24)
+CVE_STATUS[CVE-2025-22026] = "cpe-stable-backport: Backported in 6.12.24"
 
 CVE_STATUS[CVE-2025-22027] = "cpe-stable-backport: Backported in 6.12.23"
 
 CVE_STATUS[CVE-2025-22028] = "cpe-stable-backport: Backported in 6.12.23"
 
-CVE_STATUS[CVE-2025-22029] = "cpe-stable-backport: Backported in 6.12.23"
-
 CVE_STATUS[CVE-2025-22030] = "fixed-version: only affects 6.13 onwards"
 
 CVE_STATUS[CVE-2025-22031] = "fixed-version: only affects 6.13 onwards"
@@ -11860,7 +12412,7 @@ CVE_STATUS[CVE-2025-22120] = "fixed-version: only affects 6.13 onwards"
 
 # CVE-2025-22125 needs backporting (fixed from 6.15rc1)
 
-# CVE-2025-22126 needs backporting (fixed from 6.12.25)
+CVE_STATUS[CVE-2025-22126] = "cpe-stable-backport: Backported in 6.12.25"
 
 # CVE-2025-22127 needs backporting (fixed from 6.15rc1)
 
@@ -11886,12 +12438,354 @@ CVE_STATUS[CVE-2025-23136] = "cpe-stable-backport: Backported in 6.12.23"
 
 CVE_STATUS[CVE-2025-23138] = "cpe-stable-backport: Backported in 6.12.23"
 
+CVE_STATUS[CVE-2025-23140] = "cpe-stable-backport: Backported in 6.12.25"
+
+CVE_STATUS[CVE-2025-23141] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-23142] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-23143] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-23144] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-23145] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-23146] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-23147] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-23148] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-23149] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-23150] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-23151] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-23152] = "fixed-version: only affects 6.14 onwards"
+
+CVE_STATUS[CVE-2025-23153] = "fixed-version: only affects 6.14 onwards"
+
+CVE_STATUS[CVE-2025-23154] = "cpe-stable-backport: Backported in 6.12.24"
+
+# CVE-2025-23155 needs backporting (fixed from 6.15rc1)
+
+CVE_STATUS[CVE-2025-23156] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-23157] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-23158] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-23159] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-23160] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-23161] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-23162] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-23163] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-37738] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-37739] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-37740] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-37741] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-37742] = "cpe-stable-backport: Backported in 6.12.24"
+
+# CVE-2025-37743 needs backporting (fixed from 6.15rc1)
+
+CVE_STATUS[CVE-2025-37744] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-37745] = "cpe-stable-backport: Backported in 6.12.24"
+
+# CVE-2025-37746 needs backporting (fixed from 6.15rc1)
+
+CVE_STATUS[CVE-2025-37747] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-37748] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-37749] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-37750] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-37751] = "fixed-version: only affects 6.14 onwards"
+
+CVE_STATUS[CVE-2025-37752] = "fixed-version: only affects 6.14 onwards"
+
+CVE_STATUS[CVE-2025-37753] = "fixed-version: only affects 6.15rc1 onwards"
+
+CVE_STATUS[CVE-2025-37754] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-37755] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-37756] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-37757] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-37758] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-37759] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-37760] = "fixed-version: only affects 6.14 onwards"
+
+CVE_STATUS[CVE-2025-37761] = "cpe-stable-backport: Backported in 6.12.25"
+
+CVE_STATUS[CVE-2025-37762] = "fixed-version: only affects 6.14 onwards"
+
+CVE_STATUS[CVE-2025-37763] = "cpe-stable-backport: Backported in 6.12.25"
+
+CVE_STATUS[CVE-2025-37764] = "cpe-stable-backport: Backported in 6.12.25"
+
+CVE_STATUS[CVE-2025-37765] = "cpe-stable-backport: Backported in 6.12.25"
+
+CVE_STATUS[CVE-2025-37766] = "cpe-stable-backport: Backported in 6.12.25"
+
+CVE_STATUS[CVE-2025-37767] = "cpe-stable-backport: Backported in 6.12.25"
+
+CVE_STATUS[CVE-2025-37768] = "cpe-stable-backport: Backported in 6.12.25"
+
+CVE_STATUS[CVE-2025-37769] = "cpe-stable-backport: Backported in 6.12.25"
+
+CVE_STATUS[CVE-2025-37770] = "cpe-stable-backport: Backported in 6.12.25"
+
+CVE_STATUS[CVE-2025-37771] = "cpe-stable-backport: Backported in 6.12.25"
+
+CVE_STATUS[CVE-2025-37772] = "cpe-stable-backport: Backported in 6.12.25"
+
+CVE_STATUS[CVE-2025-37773] = "cpe-stable-backport: Backported in 6.12.25"
+
+CVE_STATUS[CVE-2025-37774] = "cpe-stable-backport: Backported in 6.12.25"
+
+CVE_STATUS[CVE-2025-37775] = "cpe-stable-backport: Backported in 6.12.25"
+
+CVE_STATUS[CVE-2025-37776] = "cpe-stable-backport: Backported in 6.12.25"
+
+CVE_STATUS[CVE-2025-37777] = "cpe-stable-backport: Backported in 6.12.26"
+
+CVE_STATUS[CVE-2025-37778] = "cpe-stable-backport: Backported in 6.12.25"
+
+CVE_STATUS[CVE-2025-37779] = "fixed-version: only affects 6.14 onwards"
+
+CVE_STATUS[CVE-2025-37780] = "cpe-stable-backport: Backported in 6.12.25"
+
+CVE_STATUS[CVE-2025-37781] = "cpe-stable-backport: Backported in 6.12.25"
+
+CVE_STATUS[CVE-2025-37782] = "cpe-stable-backport: Backported in 6.12.25"
+
+CVE_STATUS[CVE-2025-37783] = "fixed-version: only affects 6.14 onwards"
+
+CVE_STATUS[CVE-2025-37784] = "fixed-version: only affects 6.13 onwards"
+
 CVE_STATUS[CVE-2025-37785] = "cpe-stable-backport: Backported in 6.12.23"
 
-# CVE-2025-37838 needs backporting (fixed from 6.12.24)
+CVE_STATUS[CVE-2025-37786] = "cpe-stable-backport: Backported in 6.12.25"
+
+CVE_STATUS[CVE-2025-37787] = "cpe-stable-backport: Backported in 6.12.25"
+
+CVE_STATUS[CVE-2025-37788] = "cpe-stable-backport: Backported in 6.12.25"
+
+CVE_STATUS[CVE-2025-37789] = "cpe-stable-backport: Backported in 6.12.25"
+
+CVE_STATUS[CVE-2025-37790] = "cpe-stable-backport: Backported in 6.12.25"
+
+CVE_STATUS[CVE-2025-37791] = "cpe-stable-backport: Backported in 6.12.25"
+
+CVE_STATUS[CVE-2025-37792] = "cpe-stable-backport: Backported in 6.12.25"
+
+CVE_STATUS[CVE-2025-37793] = "cpe-stable-backport: Backported in 6.12.25"
+
+CVE_STATUS[CVE-2025-37794] = "cpe-stable-backport: Backported in 6.12.25"
+
+CVE_STATUS[CVE-2025-37796] = "cpe-stable-backport: Backported in 6.12.25"
+
+CVE_STATUS[CVE-2025-37797] = "cpe-stable-backport: Backported in 6.12.26"
+
+CVE_STATUS[CVE-2025-37798] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-37799] = "cpe-stable-backport: Backported in 6.12.26"
+
+CVE_STATUS[CVE-2025-37800] = "cpe-stable-backport: Backported in 6.12.26"
+
+CVE_STATUS[CVE-2025-37801] = "cpe-stable-backport: Backported in 6.12.26"
+
+CVE_STATUS[CVE-2025-37802] = "cpe-stable-backport: Backported in 6.12.26"
+
+# CVE-2025-37803 needs backporting (fixed from 6.15rc2)
+
+CVE_STATUS[CVE-2025-37804] = "cpe-stable-backport: Backported in 6.12.26"
+
+CVE_STATUS[CVE-2025-37805] = "cpe-stable-backport: Backported in 6.12.26"
+
+CVE_STATUS[CVE-2025-37806] = "cpe-stable-backport: Backported in 6.12.26"
+
+CVE_STATUS[CVE-2025-37807] = "cpe-stable-backport: Backported in 6.12.26"
+
+CVE_STATUS[CVE-2025-37808] = "cpe-stable-backport: Backported in 6.12.26"
+
+CVE_STATUS[CVE-2025-37809] = "cpe-stable-backport: Backported in 6.12.26"
+
+CVE_STATUS[CVE-2025-37810] = "cpe-stable-backport: Backported in 6.12.26"
+
+CVE_STATUS[CVE-2025-37811] = "fixed-version: only affects 6.13 onwards"
+
+CVE_STATUS[CVE-2025-37812] = "cpe-stable-backport: Backported in 6.12.26"
+
+CVE_STATUS[CVE-2025-37813] = "fixed-version: only affects 6.13 onwards"
+
+CVE_STATUS[CVE-2025-37814] = "fixed-version: only affects 6.14 onwards"
+
+CVE_STATUS[CVE-2025-37815] = "fixed-version: only affects 6.13 onwards"
+
+CVE_STATUS[CVE-2025-37816] = "cpe-stable-backport: Backported in 6.12.26"
+
+CVE_STATUS[CVE-2025-37817] = "cpe-stable-backport: Backported in 6.12.26"
+
+CVE_STATUS[CVE-2025-37818] = "cpe-stable-backport: Backported in 6.12.26"
+
+CVE_STATUS[CVE-2025-37819] = "cpe-stable-backport: Backported in 6.12.26"
+
+CVE_STATUS[CVE-2025-37820] = "cpe-stable-backport: Backported in 6.12.26"
+
+# CVE-2025-37821 needs backporting (fixed from 6.15rc4)
+
+CVE_STATUS[CVE-2025-37822] = "cpe-stable-backport: Backported in 6.12.26"
+
+CVE_STATUS[CVE-2025-37823] = "cpe-stable-backport: Backported in 6.12.26"
+
+CVE_STATUS[CVE-2025-37824] = "cpe-stable-backport: Backported in 6.12.26"
+
+CVE_STATUS[CVE-2025-37825] = "fixed-version: only affects 6.14 onwards"
+
+CVE_STATUS[CVE-2025-37826] = "cpe-stable-backport: Backported in 6.12.26"
+
+CVE_STATUS[CVE-2025-37827] = "cpe-stable-backport: Backported in 6.12.26"
+
+CVE_STATUS[CVE-2025-37828] = "cpe-stable-backport: Backported in 6.12.26"
+
+CVE_STATUS[CVE-2025-37829] = "cpe-stable-backport: Backported in 6.12.26"
+
+CVE_STATUS[CVE-2025-37830] = "cpe-stable-backport: Backported in 6.12.26"
+
+CVE_STATUS[CVE-2025-37831] = "cpe-stable-backport: Backported in 6.12.26"
+
+CVE_STATUS[CVE-2025-37832] = "cpe-stable-backport: Backported in 6.12.26"
+
+CVE_STATUS[CVE-2025-37833] = "cpe-stable-backport: Backported in 6.12.26"
+
+CVE_STATUS[CVE-2025-37834] = "cpe-stable-backport: Backported in 6.12.26"
+
+CVE_STATUS[CVE-2025-37836] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-37837] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-37838] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-37839] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-37840] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-37841] = "cpe-stable-backport: Backported in 6.12.24"
+
+# CVE-2025-37842 needs backporting (fixed from 6.15rc1)
+
+CVE_STATUS[CVE-2025-37843] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-37844] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-37845] = "fixed-version: only affects 6.14 onwards"
+
+CVE_STATUS[CVE-2025-37846] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-37847] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-37848] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-37849] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-37850] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-37851] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-37852] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-37853] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-37854] = "cpe-stable-backport: Backported in 6.12.24"
+
+# CVE-2025-37855 needs backporting (fixed from 6.15rc1)
+
+CVE_STATUS[CVE-2025-37856] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-37857] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-37858] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-37859] = "cpe-stable-backport: Backported in 6.12.24"
 
 # CVE-2025-37860 needs backporting (fixed from 6.15rc1)
 
+CVE_STATUS[CVE-2025-37861] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-37862] = "cpe-stable-backport: Backported in 6.12.24"
+
+CVE_STATUS[CVE-2025-37863] = "cpe-stable-backport: Backported in 6.12.25"
+
+CVE_STATUS[CVE-2025-37864] = "cpe-stable-backport: Backported in 6.12.25"
+
+CVE_STATUS[CVE-2025-37865] = "cpe-stable-backport: Backported in 6.12.25"
+
+CVE_STATUS[CVE-2025-37866] = "fixed-version: only affects 6.14 onwards"
+
+CVE_STATUS[CVE-2025-37867] = "cpe-stable-backport: Backported in 6.12.25"
+
+CVE_STATUS[CVE-2025-37868] = "fixed-version: only affects 6.14 onwards"
+
+CVE_STATUS[CVE-2025-37869] = "cpe-stable-backport: Backported in 6.12.25"
+
+CVE_STATUS[CVE-2025-37870] = "cpe-stable-backport: Backported in 6.12.25"
+
+CVE_STATUS[CVE-2025-37871] = "fixed-version: only affects 6.15rc1 onwards"
+
+CVE_STATUS[CVE-2025-37872] = "cpe-stable-backport: Backported in 6.12.25"
+
+CVE_STATUS[CVE-2025-37873] = "cpe-stable-backport: Backported in 6.12.25"
+
+CVE_STATUS[CVE-2025-37874] = "cpe-stable-backport: Backported in 6.12.25"
+
+CVE_STATUS[CVE-2025-37875] = "cpe-stable-backport: Backported in 6.12.25"
+
+CVE_STATUS[CVE-2025-37876] = "cpe-stable-backport: Backported in 6.12.26"
+
+CVE_STATUS[CVE-2025-37877] = "cpe-stable-backport: Backported in 6.12.26"
+
+CVE_STATUS[CVE-2025-37878] = "cpe-stable-backport: Backported in 6.12.26"
+
+CVE_STATUS[CVE-2025-37879] = "cpe-stable-backport: Backported in 6.12.26"
+
+CVE_STATUS[CVE-2025-37880] = "cpe-stable-backport: Backported in 6.12.26"
+
+CVE_STATUS[CVE-2025-37881] = "cpe-stable-backport: Backported in 6.12.26"
+
+CVE_STATUS[CVE-2025-37882] = "cpe-stable-backport: Backported in 6.12.26"
+
+CVE_STATUS[CVE-2025-37883] = "cpe-stable-backport: Backported in 6.12.26"
+
+CVE_STATUS[CVE-2025-37884] = "cpe-stable-backport: Backported in 6.12.26"
+
+CVE_STATUS[CVE-2025-37885] = "cpe-stable-backport: Backported in 6.12.26"
+
+CVE_STATUS[CVE-2025-37886] = "cpe-stable-backport: Backported in 6.12.26"
+
+CVE_STATUS[CVE-2025-37887] = "cpe-stable-backport: Backported in 6.12.26"
+
+CVE_STATUS[CVE-2025-37888] = "cpe-stable-backport: Backported in 6.12.26"
+
+CVE_STATUS[CVE-2025-37889] = "cpe-stable-backport: Backported in 6.12.20"
+
 CVE_STATUS[CVE-2025-37893] = "cpe-stable-backport: Backported in 6.12.23"
 
 # CVE-2025-37925 needs backporting (fixed from 6.15rc1)
diff --git a/meta/recipes-kernel/lttng/babeltrace2_2.1.0.bb b/meta/recipes-kernel/lttng/babeltrace2_2.1.1.bb
index a9a3a9961b..fdcb637761 100644
--- a/meta/recipes-kernel/lttng/babeltrace2_2.1.0.bb
+++ b/meta/recipes-kernel/lttng/babeltrace2_2.1.1.bb
@@ -7,14 +7,14 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=f6b015e4f388d6e78adb1b1f9a887d06"
 
 DEPENDS = "glib-2.0 util-linux popt bison-native flex-native virtual/libiconv"
 
-SRC_URI = "git://git.efficios.com/babeltrace.git;branch=stable-2.1;protocol=https \
+SRC_URI = "git://git.efficios.com/babeltrace.git;branch=stable-2.1;protocol=https;tag=v${PV} \
            file://run-ptest \
            file://0001-Make-manpages-multilib-identical.patch \
            file://0001-tests-fix-test-applications-in-cpp-common.patch \
            file://0001-tests-set-the-correct-plugin-directory.patch \
            file://0001-Make-bt_field_blob_get_length-return-size_t-instead-.patch \
            "
-SRCREV = "e61d41ff3c3ac6a123930d4e60cf710ff9ea18e0"
+SRCREV = "7f2f8cd6dac497cbb466efb31219b531c62013f5"
 UPSTREAM_CHECK_GITTAGREGEX = "v(?P<pver>2(\.\d+)+)$"
 
 S = "${WORKDIR}/git"
diff --git a/meta/recipes-multimedia/libpng/libpng_1.6.47.bb b/meta/recipes-multimedia/libpng/libpng_1.6.48.bb
index 371ff1436f..338891c683 100644
--- a/meta/recipes-multimedia/libpng/libpng_1.6.47.bb
+++ b/meta/recipes-multimedia/libpng/libpng_1.6.48.bb
@@ -11,7 +11,7 @@ DEPENDS = "zlib"
 LIBV = "16"
 
 SRC_URI = "${SOURCEFORGE_MIRROR}/${BPN}/${BPN}${LIBV}/${BP}.tar.xz"
-SRC_URI[sha256sum] = "b213cb381fbb1175327bd708a77aab708a05adde7b471bc267bd15ac99893631"
+SRC_URI[sha256sum] = "46fd06ff37db1db64c0dc288d78a3f5efd23ad9ac41561193f983e20937ece03"
 
 MIRRORS += "${SOURCEFORGE_MIRROR}/project/${BPN}/${BPN}${LIBV}/ ${SOURCEFORGE_MIRROR}/project/${BPN}/${BPN}${LIBV}/older-releases/"
 
diff --git a/meta/recipes-support/appstream/appstream_1.0.4.bb b/meta/recipes-support/appstream/appstream_1.0.5.bb
index a9c87f7589..3e4f8708d8 100644
--- a/meta/recipes-support/appstream/appstream_1.0.4.bb
+++ b/meta/recipes-support/appstream/appstream_1.0.5.bb
@@ -30,7 +30,7 @@ SRC_URI = " \
         file://0002-Do-not-build-qt-tests.patch \
         file://0003-Fix-PACKAGE_PREFIX_DIR-in-qt-cmake-AppStreamQtConfig.patch \
 "
-SRC_URI[sha256sum] = "2d218348067f98c4f34a3ffe2d8219ad9f504b1b2481f1872dec66c77bf37509"
+SRC_URI[sha256sum] = "ce0ed29e89abd5f0cf790ea87d792f1967c3413060beb30e63a979578d975121"
 
 S = "${WORKDIR}/AppStream-${PV}"
 
diff --git a/meta/recipes-support/atk/at-spi2-core_2.56.1.bb b/meta/recipes-support/atk/at-spi2-core_2.56.2.bb
index c806779ca8..59eed4b5ab 100644
--- a/meta/recipes-support/atk/at-spi2-core_2.56.1.bb
+++ b/meta/recipes-support/atk/at-spi2-core_2.56.2.bb
@@ -13,7 +13,7 @@ MAJ_VER = "${@oe.utils.trim_version("${PV}", 2)}"
 
 SRC_URI = "${GNOME_MIRROR}/${BPN}/${MAJ_VER}/${BPN}-${PV}.tar.xz"
 
-SRC_URI[sha256sum] = "fd177fecd8c95006ff0a355eafd7066fe110a2e17eb5eb5fe17ff70e49a4eace"
+SRC_URI[sha256sum] = "e1b1c9836a8947852f7440c32e23179234c76bd98cd9cc4001f376405f8b783b"
 
 DEPENDS = " \
         dbus \
diff --git a/meta/recipes-support/boost/boost-1.87.0.inc b/meta/recipes-support/boost/boost-1.88.0.inc
index c6e55b239e..917f1a9600 100644
--- a/meta/recipes-support/boost/boost-1.87.0.inc
+++ b/meta/recipes-support/boost/boost-1.88.0.inc
@@ -12,7 +12,7 @@ BOOST_MAJ = "${@"_".join(d.getVar("PV").split(".")[0:2])}"
 BOOST_P = "boost_${BOOST_VER}"
 
 SRC_URI = "https://archives.boost.io/release/${PV}/source/${BOOST_P}.tar.bz2"
-SRC_URI[sha256sum] = "af57be25cb4c4f4b413ed692fe378affb4352ea50fbe294a11ef548f4d527d89"
+SRC_URI[sha256sum] = "46d9d2c06637b219270877c9e16155cbd015b6dc84349af064c088e9b5b12f7b"
 
 UPSTREAM_CHECK_URI = "http://www.boost.org/users/download/"
 UPSTREAM_CHECK_REGEX = "release/(?P<pver>.*)/source/"
diff --git a/meta/recipes-support/boost/boost_1.87.0.bb b/meta/recipes-support/boost/boost_1.88.0.bb
index 4b580d078b..4b580d078b 100644
--- a/meta/recipes-support/boost/boost_1.87.0.bb
+++ b/meta/recipes-support/boost/boost_1.88.0.bb
diff --git a/meta/recipes-support/ca-certificates/ca-certificates/0001-Revert-mozilla-certdata2pem.py-print-a-warning-for-e.patch b/meta/recipes-support/ca-certificates/ca-certificates/0001-Revert-mozilla-certdata2pem.py-print-a-warning-for-e.patch
index da2a247e51..1226508c98 100644
--- a/meta/recipes-support/ca-certificates/ca-certificates/0001-Revert-mozilla-certdata2pem.py-print-a-warning-for-e.patch
+++ b/meta/recipes-support/ca-certificates/ca-certificates/0001-Revert-mozilla-certdata2pem.py-print-a-warning-for-e.patch
@@ -1,4 +1,4 @@
-From 630736f427c0a1bd0be0b5a2f6d51d63b2c4c9fd Mon Sep 17 00:00:00 2001
+From 743774cd53ed1c45bb660eddacf6dadb5ee3e145 Mon Sep 17 00:00:00 2001
 From: Alexander Kanavin <alex@linutronix.de>
 Date: Mon, 18 Oct 2021 12:05:49 +0200
 Subject: [PATCH] Revert "mozilla/certdata2pem.py: print a warning for expired
@@ -16,10 +16,10 @@ Signed-off-by: Alexander Kanavin <alex@linutronix.de>
  3 files changed, 1 insertion(+), 13 deletions(-)
 
 diff --git a/debian/changelog b/debian/changelog
-index 52d41ca..bdb2c8a 100644
+index dbe3e9c..496e05d 100644
 --- a/debian/changelog
 +++ b/debian/changelog
-@@ -138,7 +138,6 @@ ca-certificates (20211004) unstable; urgency=low
+@@ -156,7 +156,6 @@ ca-certificates (20211004) unstable; urgency=low
      - "Trustis FPS Root CA"
      - "Staat der Nederlanden Root CA - G3"
    * Blacklist expired root certificate "DST Root CA X3" (closes: #995432)
diff --git a/meta/recipes-support/ca-certificates/ca-certificates/0001-update-ca-certificates-don-t-use-Debianisms-in-run-p.patch b/meta/recipes-support/ca-certificates/ca-certificates/0001-update-ca-certificates-don-t-use-Debianisms-in-run-p.patch
index cad30929f5..1a29da756f 100644
--- a/meta/recipes-support/ca-certificates/ca-certificates/0001-update-ca-certificates-don-t-use-Debianisms-in-run-p.patch
+++ b/meta/recipes-support/ca-certificates/ca-certificates/0001-update-ca-certificates-don-t-use-Debianisms-in-run-p.patch
@@ -1,4 +1,4 @@
-From 348163df412e53b1b7ec3e81ae5f22caa0227c37 Mon Sep 17 00:00:00 2001
+From 63086d41f76b1c3357e23c6509df72d3f75af20c Mon Sep 17 00:00:00 2001
 From: Ross Burton <ross.burton@intel.com>
 Date: Mon, 6 Jul 2015 15:19:41 +0100
 Subject: [PATCH] ca-certificates: remove Debianism in run-parts invocation
@@ -22,10 +22,10 @@ Signed-off-by: Maciej Borzecki <maciej.borzecki@rndity.com>
  1 file changed, 1 insertion(+), 3 deletions(-)
 
 diff --git a/sbin/update-ca-certificates b/sbin/update-ca-certificates
-index 36cdd9a..2d3e1fe 100755
+index 91d8024..1e737b9 100755
 --- a/sbin/update-ca-certificates
 +++ b/sbin/update-ca-certificates
-@@ -202,9 +202,7 @@ if [ -d "$HOOKSDIR" ]
+@@ -210,9 +210,7 @@ if [ -d "$HOOKSDIR" ]
  then
  
    echo "Running hooks in $HOOKSDIR..."
diff --git a/meta/recipes-support/ca-certificates/ca-certificates/0002-sbin-update-ca-certificates-add-a-sysroot-option.patch b/meta/recipes-support/ca-certificates/ca-certificates/0002-sbin-update-ca-certificates-add-a-sysroot-option.patch
deleted file mode 100644
index ba5bb69657..0000000000
--- a/meta/recipes-support/ca-certificates/ca-certificates/0002-sbin-update-ca-certificates-add-a-sysroot-option.patch
+++ /dev/null
@@ -1,36 +0,0 @@
-From d6bb773745c2e95fd1a414e916fbed64e0d8df66 Mon Sep 17 00:00:00 2001
-From: Alexander Kanavin <alex@linutronix.de>
-Date: Mon, 31 Mar 2025 17:42:25 +0200
-Subject: [PATCH] sbin/update-ca-certificates: add a --sysroot option
-
-This allows using the script in cross-compilation environments
-where the script needs to prefix the sysroot to every other
-directory it operates on. There are individual options
-to set those directories, but using a common prefix option
-instead is a lot less clutter and more robust.
-
-Upstream-Status: Submitted [https://salsa.debian.org/debian/ca-certificates/-/merge_requests/13]
-Signed-off-by: Alexander Kanavin <alex@linutronix.de>
----
- sbin/update-ca-certificates | 8 ++++++++
- 1 file changed, 8 insertions(+)
-
-diff --git a/sbin/update-ca-certificates b/sbin/update-ca-certificates
-index 4bb77a0..1e737b9 100755
---- a/sbin/update-ca-certificates
-+++ b/sbin/update-ca-certificates
-@@ -59,6 +59,14 @@ do
-     --hooksdir)
-       shift
-       HOOKSDIR="$1";;
-+    --sysroot)
-+      shift
-+      SYSROOT="$1"
-+      CERTSCONF="$1/${CERTSCONF}"
-+      CERTSDIR="$1/${CERTSDIR}"
-+      LOCALCERTSDIR="$1/${LOCALCERTSDIR}"
-+      ETCCERTSDIR="$1/${ETCCERTSDIR}"
-+      HOOKSDIR="$1/${HOOKSDIR}";;
-     --help|-h|*)
-       echo "$0: [--verbose] [--fresh]"
-       exit;;
diff --git a/meta/recipes-support/ca-certificates/ca-certificates_20241223.bb b/meta/recipes-support/ca-certificates/ca-certificates_20250419.bb
index 676e9e0c78..f06a30bd6d 100644
--- a/meta/recipes-support/ca-certificates/ca-certificates_20241223.bb
+++ b/meta/recipes-support/ca-certificates/ca-certificates_20250419.bb
@@ -14,10 +14,9 @@ DEPENDS:class-nativesdk = "openssl-native"
 # Need rehash from openssl and run-parts from debianutils
 PACKAGE_WRITE_DEPS += "openssl-native debianutils-native"
 
-SRC_URI[sha256sum] = "dd8286d0a9dd35c756fea5f1df3fed1510fb891f376903891b003cd9b1ad7e03"
+SRC_URI[sha256sum] = "33b44ef78653ecd3f0f2f13e5bba6be466be2e7da72182f737912b81798ba5d2"
 SRC_URI = "${DEBIAN_MIRROR}/main/c/ca-certificates/${BPN}_${PV}.tar.xz \
            file://0001-update-ca-certificates-don-t-use-Debianisms-in-run-p.patch \
-           file://0002-sbin-update-ca-certificates-add-a-sysroot-option.patch \
            file://0003-update-ca-certificates-use-relative-symlinks-from-ET.patch \
            file://0001-Revert-mozilla-certdata2pem.py-print-a-warning-for-e.patch \
            "
diff --git a/meta/recipes-support/debianutils/debianutils_5.21.bb b/meta/recipes-support/debianutils/debianutils_5.22.bb
index e0485b24a3..f5deead51a 100644
--- a/meta/recipes-support/debianutils/debianutils_5.21.bb
+++ b/meta/recipes-support/debianutils/debianutils_5.22.bb
@@ -8,10 +8,10 @@ SECTION = "base"
 LICENSE = "GPL-2.0-only & SMAIL_GPL"
 LIC_FILES_CHKSUM = "file://debian/copyright;md5=4b667f30411d21bc8fd7db85d502a8e9"
 
-SRC_URI = "git://salsa.debian.org/debian/debianutils.git;protocol=https;branch=master \
+SRC_URI = "git://salsa.debian.org/debian/debianutils.git;protocol=https;branch=master;tag=debian/${PV} \
            "
 
-SRCREV = "ae002b498f2e310c934a0b3f0992e83391f108c7"
+SRCREV = "528fac5c7448989f33c54599ae6e4c2b84d41e21"
 
 inherit autotools update-alternatives
 
diff --git a/meta/recipes-support/enchant/enchant2_2.8.2.bb b/meta/recipes-support/enchant/enchant2_2.8.4.bb
index e26fb640f4..a5479a0e7d 100644
--- a/meta/recipes-support/enchant/enchant2_2.8.2.bb
+++ b/meta/recipes-support/enchant/enchant2_2.8.4.bb
@@ -12,7 +12,7 @@ DEPENDS = "glib-2.0 groff-native"
 inherit autotools pkgconfig github-releases
 
 SRC_URI = "${GITHUB_BASE_URI}/download/v${PV}/enchant-${PV}.tar.gz"
-SRC_URI[sha256sum] = "8f19535adb5577b83b00e02f330fe9b9eb40dd21f19e2899636fc4d3a7696375"
+SRC_URI[sha256sum] = "e28f98208df5f99320d6a05cd49f83420bf71e69052debe3b343c9bb15c833ed"
 
 GITHUB_BASE_URI = "https://github.com/rrthomas/enchant/releases"
 
diff --git a/meta/recipes-support/iso-codes/iso-codes_4.17.0.bb b/meta/recipes-support/iso-codes/iso-codes_4.18.0.bb
index bba2cd9de1..c737cfd59f 100644
--- a/meta/recipes-support/iso-codes/iso-codes_4.17.0.bb
+++ b/meta/recipes-support/iso-codes/iso-codes_4.18.0.bb
@@ -6,10 +6,10 @@ HOMEPAGE = "https://salsa.debian.org/iso-codes-team/iso-codes"
 BUGTRACKER = "https://salsa.debian.org/iso-codes-team/iso-codes/issues"
 
 LICENSE = "LGPL-2.1-only"
-LIC_FILES_CHKSUM = "file://COPYING;md5=4fbd65380cdd255951079008b364516c"
+LIC_FILES_CHKSUM = "file://COPYING;md5=4bf661c1e3793e55c8d1051bc5e0ae21"
 
-SRC_URI = "git://salsa.debian.org/iso-codes-team/iso-codes.git;protocol=https;branch=main;"
-SRCREV = "0640070a001ca6edfa8ab6b61fe3230e66b3963b"
+SRC_URI = "git://salsa.debian.org/iso-codes-team/iso-codes.git;protocol=https;branch=main;tag=v${PV}"
+SRCREV = "5be4d112d420706eacd913a3ebd85549fe9eeae4"
 
 # inherit gettext cannot be used, because it adds gettext-native to BASEDEPENDS which
 # are inhibited by allarch
diff --git a/meta/recipes-support/libffi/libffi/not-win32.patch b/meta/recipes-support/libffi/libffi/not-win32.patch
index f4ed839ed8..8efeb9c357 100644
--- a/meta/recipes-support/libffi/libffi/not-win32.patch
+++ b/meta/recipes-support/libffi/libffi/not-win32.patch
@@ -1,4 +1,4 @@
-From be9d4cc110c159812699780348686da371296b94 Mon Sep 17 00:00:00 2001
+From d7263091bbea40fd97d4fccd295c0ea4f5a80ad7 Mon Sep 17 00:00:00 2001
 From: Ross Burton <ross.burton@intel.com>
 Date: Thu, 4 Feb 2016 16:22:50 +0000
 Subject: [PATCH] libffi: ensure sysroot paths are not in libffi.pc
@@ -20,10 +20,10 @@ Signed-off-by: Ross Burton <ross.burton@intel.com>
  1 file changed, 1 insertion(+), 1 deletion(-)
 
 diff --git a/configure.ac b/configure.ac
-index 816bfd6..e37c5a8 100644
+index f047895..630bdd5 100644
 --- a/configure.ac
 +++ b/configure.ac
-@@ -401,7 +401,7 @@ AC_ARG_ENABLE(multi-os-directory,
+@@ -402,7 +402,7 @@ AC_ARG_ENABLE(multi-os-directory,
  
  # These variables are only ever used when we cross-build to X86_WIN32.
  # And we only support this with GCC, so...
diff --git a/meta/recipes-support/libffi/libffi_3.4.7.bb b/meta/recipes-support/libffi/libffi_3.4.8.bb
index b2caaa88ba..7f927c650b 100644
--- a/meta/recipes-support/libffi/libffi_3.4.7.bb
+++ b/meta/recipes-support/libffi/libffi_3.4.8.bb
@@ -13,7 +13,7 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=1db54c9fd307a12218766c3c7f650ca7"
 SRC_URI = "${GITHUB_BASE_URI}/download/v${PV}/${BPN}-${PV}.tar.gz \
            file://not-win32.patch \
            "
-SRC_URI[sha256sum] = "138607dee268bdecf374adf9144c00e839e38541f75f24a1fcf18b78fda48b2d"
+SRC_URI[sha256sum] = "bc9842a18898bfacb0ed1252c4febcc7e78fa139fd27fdc7a3e30d9d9356119b"
 
 EXTRA_OECONF += "--disable-builddir --disable-exec-static-tramp"
 EXTRA_OECONF:class-native += "--with-gcc-arch=generic"
diff --git a/meta/recipes-support/libgpg-error/libgpg-error/0001-Do-not-fail-when-testing-config-scripts.patch b/meta/recipes-support/libgpg-error/libgpg-error/0001-Do-not-fail-when-testing-config-scripts.patch
index 0910d6cc63..39798c009f 100644
--- a/meta/recipes-support/libgpg-error/libgpg-error/0001-Do-not-fail-when-testing-config-scripts.patch
+++ b/meta/recipes-support/libgpg-error/libgpg-error/0001-Do-not-fail-when-testing-config-scripts.patch
@@ -1,4 +1,4 @@
-From 581919f3af914c6b62e51b345d5d15e709f20e77 Mon Sep 17 00:00:00 2001
+From b1b6c28b4753c027052aeb6275a73eed06f0bf49 Mon Sep 17 00:00:00 2001
 From: Alexander Kanavin <alex.kanavin@gmail.com>
 Date: Fri, 28 Feb 2020 09:19:56 +0000
 Subject: [PATCH] Do not fail when testing config scripts
@@ -14,10 +14,10 @@ Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
  1 file changed, 1 deletion(-)
 
 diff --git a/src/Makefile.am b/src/Makefile.am
-index 9389e99..6ded263 100644
+index e56bb23..8c3ba7b 100644
 --- a/src/Makefile.am
 +++ b/src/Makefile.am
-@@ -324,6 +324,5 @@ gpg-error-config: gpgrt-config gpg-error-config-old gpg-error-config-test.sh
+@@ -326,6 +326,5 @@ gpg-error-config: gpgrt-config gpg-error-config-old gpg-error-config-test.sh
         else                                                   \
           echo "no";                                           \
           echo "***  Please report to <https://bugs.gnupg.org> with gpg-error-config-test.log"; \
diff --git a/meta/recipes-support/libgpg-error/libgpg-error_1.51.bb b/meta/recipes-support/libgpg-error/libgpg-error_1.55.bb
index 741969beb0..96dac49aae 100644
--- a/meta/recipes-support/libgpg-error/libgpg-error_1.51.bb
+++ b/meta/recipes-support/libgpg-error/libgpg-error_1.55.bb
@@ -20,7 +20,7 @@ SRC_URI = "${GNUPG_MIRROR}/libgpg-error/libgpg-error-${PV}.tar.bz2 \
            file://run-ptest \
            "
 
-SRC_URI[sha256sum] = "be0f1b2db6b93eed55369cdf79f19f72750c8c7c39fc20b577e724545427e6b2"
+SRC_URI[sha256sum] = "95b178148863f07d45df0cea67e880a79b9ef71f5d230baddc0071128516ef78"
 
 BINCONFIG = "${bindir}/gpg-error-config"
 
diff --git a/meta/recipes-support/libjitterentropy/libjitterentropy_3.6.2.bb b/meta/recipes-support/libjitterentropy/libjitterentropy_3.6.3.bb
index 54a866c432..e2df844202 100644
--- a/meta/recipes-support/libjitterentropy/libjitterentropy_3.6.2.bb
+++ b/meta/recipes-support/libjitterentropy/libjitterentropy_3.6.3.bb
@@ -9,8 +9,8 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=e01027c4ad1fe5a4768f8488c945d491 \
                     file://LICENSE.gplv2;md5=eb723b61539feef013de476e68b5c50a \
                     file://LICENSE.bsd;md5=66a5cedaf62c4b2637025f049f9b826f \
                     "
-SRC_URI = "git://github.com/smuellerDD/jitterentropy-library.git;branch=master;protocol=https"
-SRCREV = "ddcf1124801b74bcf39285b070093ab674d8ea97"
+SRC_URI = "git://github.com/smuellerDD/jitterentropy-library.git;branch=master;protocol=https;tag=v${PV}"
+SRCREV = "c90ff465dcdb6a6949542c72a26a8ab496daa8cb"
 S = "${WORKDIR}/git"
 
 do_configure[noexec] = "1"
diff --git a/meta/recipes-support/liburcu/liburcu_0.15.1.bb b/meta/recipes-support/liburcu/liburcu_0.15.2.bb
index 811e59f853..93d6a6551f 100644
--- a/meta/recipes-support/liburcu/liburcu_0.15.1.bb
+++ b/meta/recipes-support/liburcu/liburcu_0.15.2.bb
@@ -14,7 +14,7 @@ LIC_FILES_CHKSUM = "file://LICENSE.md;md5=c2a92498b6e88e276f986877995425b8 \
 
 SRC_URI = "http://lttng.org/files/urcu/userspace-rcu-${PV}.tar.bz2"
 
-SRC_URI[sha256sum] = "98d66cc12f2c5881879b976f0c55d10d311401513be254e3bd28cf3811fb50c8"
+SRC_URI[sha256sum] = "59f36f2b8bda1b7620a7eced2634f26c549444818a8313025a3bb09c0766a61d"
 
 S = "${WORKDIR}/userspace-rcu-${PV}"
 inherit autotools multilib_header
diff --git a/meta/recipes-support/re2c/re2c_4.1.bb b/meta/recipes-support/re2c/re2c_4.2.bb
index 238f95f745..0696080603 100644
--- a/meta/recipes-support/re2c/re2c_4.1.bb
+++ b/meta/recipes-support/re2c/re2c_4.2.bb
@@ -7,7 +7,7 @@ LICENSE = "PD"
 LIC_FILES_CHKSUM = "file://LICENSE;md5=64eca4d8a3b67f9dc7656094731a2c8d"
 
 SRC_URI = "${GITHUB_BASE_URI}/download/${PV}/${BPN}-${PV}.tar.xz"
-SRC_URI[sha256sum] = "cd7d9bbadb3f04f20da25e20e155655de57beef48e0807266938069f0e322e8b"
+SRC_URI[sha256sum] = "c9dc2b24f340d135a07a1ac63ff53f7f8f74997fed5a4e9132a64050dbc3da1f"
 GITHUB_BASE_URI = "https://github.com/skvadrik/re2c/releases"
 
 BBCLASSEXTEND = "native nativesdk"