sbom-cve-check 1.3.2 and 1.3.3: improved SBOM handling and more robust CVE analysis

sbom-cve-checkSince our previous update on sbom-cve-check, the project has continued to evolve with two new releases: version 1.3.2, released in June, and version 1.3.3, released in August.

These releases bring a number of improvements to the handling of SBOM data, CVE version ranges and vulnerability assessments, as well as fixes for some corner cases encountered when analyzing real-world software projects.

For those discovering the project, sbom-cve-check is a lightweight open-source tool developed by Bootlin for performing vulnerability analysis on Software Bill of Materials (SBOMs). It is based on SPDX SBOMs and can be used both as a standalone tool and through its integration in the Yocto Project. Since the Yocto Project’s Wrynose release, sbom-cve-check has been used as the Yocto Project’s official tool for CVE monitoring.

Continue reading “sbom-cve-check 1.3.2 and 1.3.3: improved SBOM handling and more robust CVE analysis”

yocto-kiss: updated to the Wrynose Yocto LTS release

meta-kissWe are pleased to announce that yocto-kiss, our minimal but realistic Yocto/OpenEmbedded reference setup, has been updated to the latest Wrynose Yocto LTS release (version 6.0). Following the addition of ZynqMP support and the move to a cleaner multi-layer architecture earlier this year, this update keeps the project aligned with the current Yocto LTS and brings several improvements we’d like to highlight.

Continue reading “yocto-kiss: updated to the Wrynose Yocto LTS release”

Snagboot v3.0 is released!

SnagbootSnagboot has just received its second major version number increase since its initial release in 2023! The jump to 2.0 had been made to mark the introduction of Snagfactory, back in 2024. Almost two years have passed since then, and contributions to the project have been going strong! The milestone which underlies our decision to jump to 3.0 is a major overhaul of Snagfactory, turning it into a QT6-based app.

Let’s look back at some notable changes since the last release.

Continue reading “Snagboot v3.0 is released!”

Linux 7.2 released, Bootlin contributions inside

TuxLinux 7.2 has been released last Sunday afternoon. You can take a look at the whole content of this new version thanks to LWN merge window posts (see part 1 and part 2). As stated by Linus Torvalds himself, the final week of this release has not been a peaceful endeavour (with some late reverts being needed), but this phenomenon seems to be slowly becoming “the new normal thing”. You can find more details and facts about this release in the 7.2 coverage from LWN.

Continue reading “Linux 7.2 released, Bootlin contributions inside”

Understanding the Linux Graphics Stack is now available as a self-paced video course

Understanding the Linux graphics stack trainingBootlin’s Understanding the Linux Graphics Stack training course is now available as a self-paced, pre-recorded video course on Udemy.

This course has previously been offered as an instructor-led training course. We are now changing its format: it is no longer available as an instructor-led course and is instead offered as a pre-recorded course that you can follow at your own pace.

For now, Understanding the Linux Graphics Stack is the only Bootlin training course available in a self-paced format. All of our other training courses continue to be offered as instructor-led training sessions.

Continue reading “Understanding the Linux Graphics Stack is now available as a self-paced video course”

Bootlin at Open Source Summit Europe 2026 and Linux Plumbers 2026

PragueFrom October 5 to October 9 this year, Prague will be the place to be for the open-source community, and especially for embedded open-source developers. The Open Source Summit Europe will take place there from October 7 to 9, while Linux Plumbers Conference will run from October 5 to 7. Numerous co-located events are also being organized around these two major conferences.

Bootlin will once again have a strong presence in Prague, both in terms of attendance and technical presentations.

Continue reading “Bootlin at Open Source Summit Europe 2026 and Linux Plumbers 2026”

Netconf 2026 and Netdev 0x1a

From the 13th to 16th of July in Rome, Italy, 130 Linux Kernel developers specialized in networking gathered at the Netdev 0x1a Conference, accompanied by 50 people attending remotely.

As someone who works a lot on Network drivers for Embedded Linux devices, I attended the event as well as the Netconf conference, a smaller conference that took place on the first day of the event and gathered Network Maintainers and Contributors to discuss ongoing topics in the Linux Kernel Networking ecosystem.

Continue reading “Netconf 2026 and Netdev 0x1a”

Updated Yocto support for SiFive RISC-V platforms

SiFive logoBootlin has been maintaining Freedom-U-SDK (FUSDK), a Yocto/OpenEmbedded-based software development kit for RISC-V platforms from SiFive, in collaboration with SiFive since 2022.

The Yocto support for SiFive RISC-V platforms is split into two layers:

  1. meta-sifive, a BSP layer providing
    machine-specific support
  2. freedom-u-sdk, a demo and SDK layer that builds images for the HiFive Unmatched board and QEMU RISC-V 64-bit targets

In a previous blog post we summarized the work done up to the 2022.10 release. This new post covers everything since then, up to the latest 2026.07.00-lts release which was published recently.

Continue reading “Updated Yocto support for SiFive RISC-V platforms”

Welcome to Paul Louvel and Diogo Ivo

We recently welcomed two engineers in our team located in Toulouse, France: Paul Louvel and Diogo Ivo.

Paul Louvel

Paul LouvelPaul joined Bootlin in February 2026, after graduating from École 42, with a combined apprenticeship at IDEMIA on SIM card technology projects, implementing the (D)TLS protocol in a smart card operating system. At Bootlin, Paul already contributed to the development and customization of Linux BSPs targeting x86-based Intel platforms, PowerPC, and ARM-based NXP platforms, using both Yocto and Buildroot. Paul is also contributing to the Linux kernel, developing and making changes to various drivers using different subsystems, including GPIO, IRQ, and crypto.

Check out Paul’s page on bootlin.com, LinkedIn profile and Linux kernel commits.

Diogo Ivo

Diogo IvoDiogo joined Bootlin at the beginning of June 2026. Diogo graduated with a Master’s Degree in Engineering Physics from Instituto Superior Técnico (Portugal) in 2022. From 2023 to 2026, he worked at Siemens as an Embedded Linux engineer, working with edge industrial platforms and gaining experience in Yocto integration, platform maintenance and BSP kernel updates. He also contributed to the upstream Linux kernel, namely an Ethernet driver for the Texas Instruments AM654x SR1.0 SoC and a watchdog driver for the Intel Over-Clocking watchdog.

Check out Diogo’s page on bootlin.com, LinkedIn profile and Linux kernel commits.

We’re happy to see two young and talented engineers join our team to work on the numerous embedded Linux projects from our customers!

Recovery boot on Rockchip SoCs

Rockchip is a well-known silicon vendor whose System-on-Chips (SoCs) are integrated in a wide range of embedded Linux systems. For example, Pine64, a company manufacturing embedded devices targeted for the Open Source community uses the RK3399 for its PinePhone Pro,  and the RK3566 for its PineTab 2. Rockchip SoCs implement a rather powerful recovery bootflow.

Unfortunately, that capability is poorly documented, and the tooling available is fragmented and only partially open source.

The aim of this article is to present this capability and give a step-by-step guide to using it.

Continue reading “Recovery boot on Rockchip SoCs”