From: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
To: openembedded-devel@lists.openembedded.org
Subject: [PATCH 00/55] Wrynose pull request
Date: Fri, 24 Jul 2026 08:28:19 +0530 [thread overview]
Message-ID: <cover.1784858854.git.anuj.mittal@oss.qualcomm.com> (raw)
Please merge these changes in wrynose. Tested locally and on autobuilder.
https://autobuilder.yoctoproject.org/valkyrie/#/builders/81/builds/1657
The following changes since commit d97b5602d7f64422c94b7311466cda7f6b1962d5:
libuio: fix FILE descriptor leak (2026-07-07 08:04:43 +0530)
are available in the Git repository at:
https://git.openembedded.org/meta-openembedded-contrib anujm/wrynose
https://git.openembedded.org/meta-openembedded-contrib/log/?h=anujm/wrynose
for you to fetch changes up to af8b6d6b2f0b11595b0a0d5b82efa3129d52a628:
sysdig: Use LuaJIT headers to match the linked LuaJIT library (2026-07-24 06:15:59 +0530)
----------------------------------------------------------------
Alejandro Mery (1):
ltrace: fix PRIb64 length modifier on LP64 musl
Ankur Tyagi (4):
haveged: upgrade 1.9.22 -> 1.9.23
postfix: upgrade 3.10.10 -> 3.10.12
python3-django: upgrade 6.0.6 -> 6.0.7
python3-django: upgrade 5.2.15 -> 5.2.16
Darsh Kelaiya (3):
jq: Fix CVE-2026-43895
jq: Fix CVE-2026-49839
jq: Fix CVE-2026-54679
Deepak Rathore (3):
nmap: Fix CVE-2026-58058
libidn: Fix CVE-2026-57053
mbedtls: set CVE_STATUS for CVE-2025-66442
He Zhe (1):
bpftool-native: Fix -Wdiscarded-qualifiers errors for glibc 2.42+
Jason Schonberg (2):
c-ares: upgrade 1.34.6 -> 1.34.8
php: upgrade 8.5.7 -> 8.5.8
Khem Raj (5):
ifuse: upgrade 1.2.0 -> 1.2.1
xdebug: upgrade 3.5.1 -> 3.5.3
apache2: upgrade 2.4.67 -> 2.4.68
samba: upgrade 4.23.5 -> 4.23.8
sysdig: Use LuaJIT headers to match the linked LuaJIT library
Leon Anavi (1):
python3-tornado: Upgrade 6.5.6 -> 6.5.7
Markus Volk (2):
pipewire: update 1.6.6 -> 1.6.7
pipewire: update 1.6.7 -> 1.6.8
Peter Marko (11):
libwebsockets: set status for CVE-2025-1866
libwebsockets: patch CVE-2026-10650
7zip: set status for CVE-2026-58052
bit7z: set status for CVE-2026-45380 and CVE-2026-45384
c-ares: set status for CVE-2025-31498
grpc: set status for CVE-2023-33953 and CVE-2024-37168
python3-grpcio: set status for CVE-2023-33953 and CVE-2024-37168
protobuf: set status for CVE-2024-7254
python3-protobuf: set status for CVE-2024-7254
tcpdump: set status for CVE-2024-2397
libcoap: set status for CVE-2023-51847
Roland Kovacs (2):
thrift: fix multiple CVEs
radvd: fix CVE-2026-48715
Wang Mingyu (19):
imagemagick: upgrade 7.1.2-24 -> 7.1.2-25
imagemagick: upgrade 7.1.2-25 -> 7.1.2-26
imagemagick: upgrade 7.1.2-26 -> 7.1.2-27
python3-tornado: upgrade 6.5.5 -> 6.5.6
python3-elementpath: upgrade 5.1.1 -> 5.1.2
python3-elementpath: upgrade 5.1.2 -> 5.1.3
swagger-ui: upgrade 5.32.6 -> 5.32.7
swagger-ui: upgrade 5.32.7 -> 5.32.8
libnvme: upgrade 1.16.1 -> 1.16.2
python3-sqlalchemy: upgrade 2.0.49 -> 2.0.50
python3-sqlalchemy: upgrade 2.0.50 -> 2.0.51
python3-socketio: upgrade 5.16.1 -> 5.16.2
python3-socketio: upgrade 5.16.2 -> 5.16.3
monocypher: upgrade 4.0.2 -> 4.0.3
proftpd: upgrade 1.3.9b -> 1.3.9c
python3-tzdata: upgrade 2026.2 -> 2026.3
memcached: upgrade 1.6.42 -> 1.6.43
memcached: upgrade 1.6.43 -> 1.6.45
ldns: upgrade 1.9.0 -> 1.9.2
mark.yang (1):
python3-h11: set CVE_PRODUCT
.../ifuse/{ifuse_1.2.0.bb => ifuse_1.2.1.bb} | 2 +-
.../{pipewire_1.6.6.bb => pipewire_1.6.8.bb} | 2 +-
.../mbedtls/mbedtls_3.6.6.bb | 17 +
.../{samba_4.23.5.bb => samba_4.23.8.bb} | 2 +-
...{postfix_3.10.10.bb => postfix_3.10.12.bb} | 2 +-
.../{proftpd_1.3.9b.bb => proftpd_1.3.9c.bb} | 2 +-
.../radvd/files/CVE-2026-48715.patch | 213 +++
.../radvd/files/CVE-2026-48715_dep.patch | 106 ++
.../recipes-daemons/radvd/radvd_2.20.bb | 2 +
.../libcoap/libcoap_4.3.5b.bb | 1 +
...emcached_1.6.42.bb => memcached_1.6.45.bb} | 2 +-
.../recipes-support/tcpdump/tcpdump_4.99.6.bb | 2 +
.../libwebsockets/CVE-2026-10650.patch | 46 +
.../libwebsockets/libwebsockets_4.5.8.bb | 7 +-
.../thrift/thrift/CVE-2026-43868.patch | 1381 +++++++++++++++
.../thrift/thrift/CVE-2026-43870.patch | 134 ++
.../thrift/thrift_0.22.0.bb | 4 +
...onocypher_4.0.2.bb => monocypher_4.0.3.bb} | 2 +-
meta-oe/recipes-devtools/grpc/grpc_1.80.0.bb | 3 +
.../jq/jq/CVE-2026-43895.patch | 1543 +++++++++++++++++
.../jq/jq/CVE-2026-49839.patch | 37 +
.../jq/jq/CVE-2026-54679.patch | 77 +
meta-oe/recipes-devtools/jq/jq_1.8.1.bb | 3 +
.../ldns/{ldns_1.9.0.bb => ldns_1.9.2.bb} | 2 +-
...t-fix-PRIb64-length-modifier-on-musl.patch | 49 +
.../recipes-devtools/ltrace/ltrace_0.8.1.bb | 1 +
.../php/{php_8.5.7.bb => php_8.5.8.bb} | 2 +-
.../protobuf/protobuf_6.33.6.bb | 2 +
meta-oe/recipes-extended/7zip/7zip_26.00.bb | 2 +
meta-oe/recipes-extended/7zip/bit7z_4.0.12.bb | 3 +
.../{haveged_1.9.22.bb => haveged_1.9.23.bb} | 2 +-
.../libidn/libidn/CVE-2026-57053.patch | 28 +
.../recipes-extended/libidn/libidn_1.43.bb | 1 +
.../recipes-extended/sysdig/sysdig_0.39.0.bb | 13 +-
.../bpftool/bpftool-native_6.16.bb | 5 +-
...-Fix-Wdiscarded-qualifiers-under-C23.patch | 69 +
.../nmap/files/CVE-2026-58058.patch | 33 +
meta-oe/recipes-security/nmap/nmap_7.95.bb | 1 +
.../{c-ares_1.34.6.bb => c-ares_1.34.8.bb} | 4 +-
...ck_7.1.2-24.bb => imagemagick_7.1.2-27.bb} | 2 +-
.../{libnvme_1.16.1.bb => libnvme_1.16.2.bb} | 4 +-
...ngo_5.2.15.bb => python3-django_5.2.16.bb} | 2 +-
...jango_6.0.6.bb => python3-django_6.0.7.bb} | 2 +-
..._5.1.1.bb => python3-elementpath_5.1.3.bb} | 2 +-
.../python/python3-grpcio_1.78.0.bb | 2 +
.../python/python3-h11_0.16.0.bb | 2 +
.../python/python3-protobuf_6.33.6.bb | 2 +
...o_5.16.1.bb => python3-socketio_5.16.3.bb} | 2 +-
...2.0.49.bb => python3-sqlalchemy_2.0.51.bb} | 2 +-
...nado_6.5.5.bb => python3-tornado_6.5.7.bb} | 2 +-
...ata_2026.2.bb => python3-tzdata_2026.3.bb} | 7 +-
...gger-ui_5.32.6.bb => swagger-ui_5.32.8.bb} | 2 +-
.../{apache2_2.4.67.bb => apache2_2.4.68.bb} | 2 +-
.../{xdebug_3.5.1.bb => xdebug_3.5.3.bb} | 2 +-
54 files changed, 3814 insertions(+), 30 deletions(-)
rename meta-filesystems/recipes-filesystems/ifuse/{ifuse_1.2.0.bb => ifuse_1.2.1.bb} (83%)
rename meta-multimedia/recipes-multimedia/pipewire/{pipewire_1.6.6.bb => pipewire_1.6.8.bb} (99%)
rename meta-networking/recipes-connectivity/samba/{samba_4.23.5.bb => samba_4.23.8.bb} (99%)
rename meta-networking/recipes-daemons/postfix/{postfix_3.10.10.bb => postfix_3.10.12.bb} (99%)
rename meta-networking/recipes-daemons/proftpd/{proftpd_1.3.9b.bb => proftpd_1.3.9c.bb} (99%)
create mode 100644 meta-networking/recipes-daemons/radvd/files/CVE-2026-48715.patch
create mode 100644 meta-networking/recipes-daemons/radvd/files/CVE-2026-48715_dep.patch
rename meta-networking/recipes-support/memcached/{memcached_1.6.42.bb => memcached_1.6.45.bb} (95%)
create mode 100644 meta-oe/recipes-connectivity/libwebsockets/libwebsockets/CVE-2026-10650.patch
create mode 100644 meta-oe/recipes-connectivity/thrift/thrift/CVE-2026-43868.patch
create mode 100644 meta-oe/recipes-connectivity/thrift/thrift/CVE-2026-43870.patch
rename meta-oe/recipes-crypto/monocypher/{monocypher_4.0.2.bb => monocypher_4.0.3.bb} (85%)
create mode 100644 meta-oe/recipes-devtools/jq/jq/CVE-2026-43895.patch
create mode 100644 meta-oe/recipes-devtools/jq/jq/CVE-2026-49839.patch
create mode 100644 meta-oe/recipes-devtools/jq/jq/CVE-2026-54679.patch
rename meta-oe/recipes-devtools/ldns/{ldns_1.9.0.bb => ldns_1.9.2.bb} (89%)
create mode 100644 meta-oe/recipes-devtools/ltrace/ltrace/0001-lens_default-fix-PRIb64-length-modifier-on-musl.patch
rename meta-oe/recipes-devtools/php/{php_8.5.7.bb => php_8.5.8.bb} (99%)
rename meta-oe/recipes-extended/haveged/{haveged_1.9.22.bb => haveged_1.9.23.bb} (94%)
create mode 100644 meta-oe/recipes-extended/libidn/libidn/CVE-2026-57053.patch
create mode 100644 meta-oe/recipes-kernel/bpftool/bpftool/0001-libbpf-Fix-Wdiscarded-qualifiers-under-C23.patch
create mode 100644 meta-oe/recipes-security/nmap/files/CVE-2026-58058.patch
rename meta-oe/recipes-support/c-ares/{c-ares_1.34.6.bb => c-ares_1.34.8.bb} (86%)
rename meta-oe/recipes-support/imagemagick/{imagemagick_7.1.2-24.bb => imagemagick_7.1.2-27.bb} (99%)
rename meta-oe/recipes-support/libnvme/{libnvme_1.16.1.bb => libnvme_1.16.2.bb} (93%)
rename meta-python/recipes-devtools/python/{python3-django_5.2.15.bb => python3-django_5.2.16.bb} (61%)
rename meta-python/recipes-devtools/python/{python3-django_6.0.6.bb => python3-django_6.0.7.bb} (75%)
rename meta-python/recipes-devtools/python/{python3-elementpath_5.1.1.bb => python3-elementpath_5.1.3.bb} (86%)
rename meta-python/recipes-devtools/python/{python3-socketio_5.16.1.bb => python3-socketio_5.16.3.bb} (88%)
rename meta-python/recipes-devtools/python/{python3-sqlalchemy_2.0.49.bb => python3-sqlalchemy_2.0.51.bb} (88%)
rename meta-python/recipes-devtools/python/{python3-tornado_6.5.5.bb => python3-tornado_6.5.7.bb} (93%)
rename meta-python/recipes-devtools/python/{python3-tzdata_2026.2.bb => python3-tzdata_2026.3.bb} (67%)
rename meta-webserver/recipes-devtools/swagger-ui/{swagger-ui_5.32.6.bb => swagger-ui_5.32.8.bb} (94%)
rename meta-webserver/recipes-httpd/apache2/{apache2_2.4.67.bb => apache2_2.4.68.bb} (99%)
rename meta-webserver/recipes-php/xdebug/{xdebug_3.5.1.bb => xdebug_3.5.3.bb} (92%)
--
2.54.0
reply other threads:[~2026-07-24 2:58 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=cover.1784858854.git.anuj.mittal@oss.qualcomm.com \
--to=anuj.mittal@oss.qualcomm.com \
--cc=openembedded-devel@lists.openembedded.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.