All of lore.kernel.org
 help / color / mirror / Atom feed
* [PATCH 00/47] Scarthgap pull request
@ 2026-04-15 12:32 Anuj Mittal
  2026-04-15 14:58 ` [oe] " Khem Raj
  0 siblings, 1 reply; 2+ messages in thread
From: Anuj Mittal @ 2026-04-15 12:32 UTC (permalink / raw)
  To: openembedded-devel

Please merge these changes in scarthgap. Tested locally and on autobuilder.

https://autobuilder.yoctoproject.org/valkyrie/#/builders/81/builds/1469

The following changes since commit 1ad0d777d1de1769e5995eb806f7ae5c15d0be54:

  strongswan: Fix CVE-2026-25075 (2026-04-03 15:00:48 +0530)

are available in the Git repository at:

  https://git.openembedded.org/meta-openembedded-contrib anujm/scarthgap
  https://git.openembedded.org/meta-openembedded-contrib/log/?h=anujm/scarthgap

for you to fetch changes up to 5124ac4a658899158f4a7a2ddf1d2ca931ec7d0e:

  nginx: fix CVE-2026-28753 (2026-04-15 14:12:18 +0530)

----------------------------------------------------------------

Ankur Tyagi (32):
  abseil-cpp: ignore CVE-2025-0838
  freerdp3: fix CVE-2026-25941
  freerdp3: fix CVE-2026-33952
  freerdp3: fix CVE-2026-23948
  freerdp3: fix CVE-2026-24491
  freerdp3: fix CVE-2026-24675
  freerdp3: fix CVE-2026-24676
  freerdp3: ignore CVE-2026-24677 and CVE-2026-24678
  freerdp3: fix CVE-2026-24679
  freerdp3: fix CVE-2026-24680 and CVE-2026-27950
  freerdp3: fix CVE-2026-24681
  freerdp3: fix CVE-2026-24682
  freerdp3: fix CVE-2026-24683
  freerdp3: fix CVE-2026-29774
  freerdp3: fix CVE-2026-29775
  freerdp3: fix CVE-2026-29776
  freerdp3: fix CVE-2026-31806
  freerdp3: fix CVE-2026-31897
  freerdp3: fix CVE-2026-33984
  libde265: upgrade 1.0.12 -> 1.0.16
  libraw: ignore CVE-2026-5318
  libvncserver: fix CVE-2026-32853
  libvncserver: fix CVE-2026-32854
  nodejs: upgrade 20.20.0 -> 20.20.2
  python3-django: upgrade 4.2.29 -> 4.2.30
  python3-ecdsa: fix CVE-2026-33936
  python3-flask: upgrade 3.0.2 -> 3.0.3
  python3-tornado: fix CVE-2026-35536
  python3-werkzeug: ignore CVE-2026-27199
  nginx: fix CVE-2026-27651
  nginx: fix CVE-2026-27654
  nginx: fix CVE-2026-28753

Guocai He (1):
  yasm: fix CVE-2021-33454

Gyorgy Sarvari (2):
  giflib: patch CVE-2025-31344
  mbedtls: upgrade 3.6.5 -> 3.6.6

Haixiao Yan (3):
  python3-django: fix CVE-2025-64459
  python3-django: fix CVE-2025-57833
  python3-django: fix CVE-2025-59681

Hitendra Prajapati (2):
  nginx: Fix for CVE-2026-27784
  nginx: Fix for CVE-2026-28755

Jackson James (1):
  unbound: Fix CVE-2025-11411

Jinfeng Wang (1):
  nmap: rename enum PCAP_SOCKET

Libo Chen (4):
  hdf5: fix CVE-2025-2153
  hdf5: fix CVE-2025-2310
  hdf5: fix CVE-2025-44905
  hdf5: fix CVE-2025-2309

Peter Marko (1):
  grpc: set status for CVE-2026-33186

 .../libde265/libde265/CVE-2023-43887.patch    |   39 -
 .../libde265/libde265/CVE-2023-47471.patch    |   42 -
 ...{libde265_1.0.12.bb => libde265_1.0.16.bb} |    4 +-
 .../{mbedtls_3.6.5.bb => mbedtls_3.6.6.bb}    |    2 +-
 .../unbound/0001-CVE-2025-11411-1.patch       | 1874 +++++++++++++++++
 .../unbound/0002-CVE-2025-11411-2.patch       |  153 ++
 .../unbound/unbound/CVE-2025-11411.patch      |   48 -
 .../recipes-support/unbound/unbound_1.19.3.bb |    3 +-
 .../abseil-cpp/abseil-cpp_20240116.3.bb       |    2 +
 .../giflib/giflib/CVE-2025-31344.patch        |   28 +
 .../recipes-devtools/giflib/giflib_5.2.2.bb   |    3 +-
 meta-oe/recipes-devtools/grpc/grpc_1.60.1.bb  |    2 +
 .../{nodejs_20.20.0.bb => nodejs_20.20.2.bb}  |    4 +-
 .../yasm/yasm/CVE-2021-33454.patch            |   29 +
 meta-oe/recipes-devtools/yasm/yasm_git.bb     |    1 +
 .../libvncserver/CVE-2026-32853.patch         |   76 +
 .../libvncserver/CVE-2026-32854.patch         |   66 +
 .../libvncserver/libvncserver_0.9.14.bb       |    5 +-
 .../files/nmap-rename-enum-PCAP_SOCKET.patch  |   81 +
 meta-oe/recipes-security/nmap/nmap_7.80.bb    |    1 +
 .../freerdp/freerdp3/CVE-2026-23948.patch     |   55 +
 .../freerdp/freerdp3/CVE-2026-24491.patch     |   52 +
 .../freerdp/freerdp3/CVE-2026-24675.patch     |   32 +
 .../freerdp/freerdp3/CVE-2026-24676.patch     |   34 +
 .../freerdp/freerdp3/CVE-2026-24679.patch     |   44 +
 .../CVE-2026-24680_CVE-2026-27950.patch       |   24 +
 .../freerdp/freerdp3/CVE-2026-24681.patch     |   26 +
 .../freerdp/freerdp3/CVE-2026-24682.patch     |   31 +
 .../freerdp/freerdp3/CVE-2026-24683.patch     |  114 +
 .../freerdp/freerdp3/CVE-2026-25941.patch     |   28 +
 .../freerdp/freerdp3/CVE-2026-29774.patch     |   75 +
 .../freerdp/freerdp3/CVE-2026-29775.patch     |   30 +
 .../freerdp/freerdp3/CVE-2026-29776.patch     |   30 +
 .../freerdp/freerdp3/CVE-2026-31806.patch     |   36 +
 .../freerdp/freerdp3/CVE-2026-31897.patch     |   28 +
 .../freerdp/freerdp3/CVE-2026-33952.patch     |   38 +
 .../freerdp/freerdp3/CVE-2026-33984.patch     |   34 +
 .../recipes-support/freerdp/freerdp3_3.4.0.bb |   19 +
 .../hdf5/files/CVE-2025-2153.patch            |   51 +
 .../hdf5/files/CVE-2025-2309.patch            |   41 +
 .../hdf5/files/CVE-2025-2310.patch            |   37 +
 .../hdf5/files/CVE-2025-44905.patch           |   46 +
 meta-oe/recipes-support/hdf5/hdf5_1.14.4-3.bb |    4 +
 .../recipes-support/libraw/libraw_0.21.2.bb   |    2 +
 .../0001-lower-setuptools-requirements.patch  |    0
 .../CVE-2025-57833.patch                      |   88 +
 .../CVE-2025-59681.patch                      |  178 ++
 .../CVE-2025-64459-1.patch                    |   57 +
 .../CVE-2025-64459-2.patch                    |   63 +
 ...ngo_4.2.29.bb => python3-django_4.2.30.bb} |    2 +-
 .../python/python3-django_5.0.14.bb           |    7 +-
 .../python/python3-ecdsa/CVE-2026-33936.patch |   56 +
 .../python/python3-ecdsa_0.19.0.bb            |    1 +
 ...-flask_3.0.2.bb => python3-flask_3.0.3.bb} |    4 +-
 .../python3-tornado/CVE-2026-35536.patch      |  155 ++
 .../python/python3-tornado_6.4.2.bb           |    1 +
 .../python/python3-werkzeug_3.0.6.bb          |    1 +
 .../nginx/files/CVE-2026-27784.patch          |   88 +
 .../nginx/nginx-1.24.0/CVE-2026-27651.patch   |   34 +
 .../nginx/nginx-1.24.0/CVE-2026-27654.patch   |   81 +
 .../nginx/nginx-1.24.0/CVE-2026-28753.patch   |   93 +
 .../nginx/nginx-1.24.0/CVE-2026-28755.patch   |   48 +
 .../nginx/nginx-1.25.5/CVE-2026-28755.patch   |   48 +
 meta-webserver/recipes-httpd/nginx/nginx.inc  |    1 +
 .../recipes-httpd/nginx/nginx_1.24.0.bb       |    8 +-
 .../recipes-httpd/nginx/nginx_1.25.5.bb       |    2 +
 66 files changed, 4247 insertions(+), 143 deletions(-)
 delete mode 100644 meta-multimedia/recipes-multimedia/libde265/libde265/CVE-2023-43887.patch
 delete mode 100644 meta-multimedia/recipes-multimedia/libde265/libde265/CVE-2023-47471.patch
 rename meta-multimedia/recipes-multimedia/libde265/{libde265_1.0.12.bb => libde265_1.0.16.bb} (84%)
 rename meta-networking/recipes-connectivity/mbedtls/{mbedtls_3.6.5.bb => mbedtls_3.6.6.bb} (98%)
 create mode 100644 meta-networking/recipes-support/unbound/unbound/0001-CVE-2025-11411-1.patch
 create mode 100644 meta-networking/recipes-support/unbound/unbound/0002-CVE-2025-11411-2.patch
 delete mode 100644 meta-networking/recipes-support/unbound/unbound/CVE-2025-11411.patch
 create mode 100644 meta-oe/recipes-devtools/giflib/giflib/CVE-2025-31344.patch
 rename meta-oe/recipes-devtools/nodejs/{nodejs_20.20.0.bb => nodejs_20.20.2.bb} (98%)
 create mode 100644 meta-oe/recipes-devtools/yasm/yasm/CVE-2021-33454.patch
 create mode 100644 meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-32853.patch
 create mode 100644 meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-32854.patch
 create mode 100644 meta-oe/recipes-security/nmap/files/nmap-rename-enum-PCAP_SOCKET.patch
 create mode 100644 meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-23948.patch
 create mode 100644 meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-24491.patch
 create mode 100644 meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-24675.patch
 create mode 100644 meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-24676.patch
 create mode 100644 meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-24679.patch
 create mode 100644 meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-24680_CVE-2026-27950.patch
 create mode 100644 meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-24681.patch
 create mode 100644 meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-24682.patch
 create mode 100644 meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-24683.patch
 create mode 100644 meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-25941.patch
 create mode 100644 meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-29774.patch
 create mode 100644 meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-29775.patch
 create mode 100644 meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-29776.patch
 create mode 100644 meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-31806.patch
 create mode 100644 meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-31897.patch
 create mode 100644 meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-33952.patch
 create mode 100644 meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-33984.patch
 create mode 100644 meta-oe/recipes-support/hdf5/files/CVE-2025-2153.patch
 create mode 100644 meta-oe/recipes-support/hdf5/files/CVE-2025-2309.patch
 create mode 100644 meta-oe/recipes-support/hdf5/files/CVE-2025-2310.patch
 create mode 100644 meta-oe/recipes-support/hdf5/files/CVE-2025-44905.patch
 rename meta-python/recipes-devtools/python/{python3-django-4.2.29 => python3-django-4.2.30}/0001-lower-setuptools-requirements.patch (100%)
 create mode 100644 meta-python/recipes-devtools/python/python3-django-5.0.14/CVE-2025-57833.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-django-5.0.14/CVE-2025-59681.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-django-5.0.14/CVE-2025-64459-1.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-django-5.0.14/CVE-2025-64459-2.patch
 rename meta-python/recipes-devtools/python/{python3-django_4.2.29.bb => python3-django_4.2.30.bb} (82%)
 create mode 100644 meta-python/recipes-devtools/python/python3-ecdsa/CVE-2026-33936.patch
 rename meta-python/recipes-devtools/python/{python3-flask_3.0.2.bb => python3-flask_3.0.3.bb} (80%)
 create mode 100644 meta-python/recipes-devtools/python/python3-tornado/CVE-2026-35536.patch
 create mode 100644 meta-webserver/recipes-httpd/nginx/files/CVE-2026-27784.patch
 create mode 100644 meta-webserver/recipes-httpd/nginx/nginx-1.24.0/CVE-2026-27651.patch
 create mode 100644 meta-webserver/recipes-httpd/nginx/nginx-1.24.0/CVE-2026-27654.patch
 create mode 100644 meta-webserver/recipes-httpd/nginx/nginx-1.24.0/CVE-2026-28753.patch
 create mode 100644 meta-webserver/recipes-httpd/nginx/nginx-1.24.0/CVE-2026-28755.patch
 create mode 100644 meta-webserver/recipes-httpd/nginx/nginx-1.25.5/CVE-2026-28755.patch

-- 
2.53.0



^ permalink raw reply	[flat|nested] 2+ messages in thread
end of thread, other threads:[~2026-04-15 14:58 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-04-15 12:32 [PATCH 00/47] Scarthgap pull request Anuj Mittal
2026-04-15 14:58 ` [oe] " Khem Raj

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.