From: Yoann Congal <yoann.congal@smile.fr>
To: openembedded-core@lists.openembedded.org
Subject: [OE-core][scarthgap 00/31] Patch review
Date: Sun, 26 Jul 2026 10:29:24 +0200 [thread overview]
Message-ID: <cover.1785054429.git.yoann.congal@smile.fr> (raw)
Please review this set of changes for scarthgap and have comments back by
end of day Tuesday, July 28.
Passed a-full on autobuilder:
https://autobuilder.yoctoproject.org/valkyrie/#/builders/29/builds/4287
The following changes since commit 3217490cc554069ae53aa54cf8ad7327ce85fa10:
glibc-testsuite: Do not generate SPDX (2026-07-21 20:32:51 +0200)
are available in the Git repository at:
https://git.openembedded.org/openembedded-core-contrib stable/scarthgap-nut
https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/scarthgap-nut
for you to fetch changes up to 762321beb0260b1411c7f98f13458ec99a118280:
bzip2: fix 'bzip2 --version > /tmp/aaa 2>&1' hang (2026-07-25 23:57:45 +0200)
----------------------------------------------------------------
Bruce Ashfield (2):
linux-yocto/6.6: update to v6.6.143
linux-yocto/6.6: update to v6.6.144
Darsh Kelaiya (1):
gzip: Fix CVE-2026-41991
Deepak Rathore (13):
cups: fix CVE-2026-27447
cups: fix CVE-2026-41079
cups: fix CVE-2026-34978
cups: fix CVE-2026-34980
cups: fix CVE-2026-34979
cups: fix CVE-2026-34990
cups: fix CVE-2026-39314
cups: fix CVE-2026-39316
glib-2.0: fix CVE-2026-58010
glib-2.0: fix CVE-2026-58011
glib-2.0: fix CVE-2026-58012
glib-2.0: fix CVE-2026-58013
glib-2.0: fix CVE-2026-58014
Devansh Patel (8):
libxml2: Fix CVE-2026-11979
openssh: Fix CVE-2026-59999
openssh: Fix CVE-2026-59997
openssh: Fix CVE-2026-59996
openssh: Fix CVE-2026-59995
openssh: Fix CVE-2026-60001
openssh: Fix CVE-2026-60002
openssh: Fix CVE-2026-60000
Enoch Ng (1):
libxpm: fix CVE-2026-4367
Hongxu Jia (1):
bzip2: fix 'bzip2 --version > /tmp/aaa 2>&1' hang
Sudhir Dumbhare (3):
gnutls: set status for CVE-2026-3832
gnutls: fix CVE-2026-42009
libpng: Fix CVE-2026-34757
Yoann Congal (2):
scripts/install-buildtools: Update to 5.0.19
linux-yocto/6.6: update CVE exclusions (6.6.144)
.../openssh/openssh/CVE-2026-59995.patch | 42 +
.../openssh/openssh/CVE-2026-59996.patch | 37 +
.../openssh/openssh/CVE-2026-59997.patch | 58 +
.../openssh/openssh/CVE-2026-59999.patch | 36 +
.../openssh/openssh/CVE-2026-60000.patch | 140 ++
.../openssh/openssh/CVE-2026-60001.patch | 130 ++
.../openssh/openssh/CVE-2026-60002.patch | 226 +++
.../openssh/openssh_9.6p1.bb | 7 +
.../glib-2.0/glib-2.0/CVE-2026-58010.patch | 113 ++
.../glib-2.0/glib-2.0/CVE-2026-58011.patch | 78 ++
.../glib-2.0/glib-2.0/CVE-2026-58012.patch | 228 ++++
.../glib-2.0/glib-2.0/CVE-2026-58013.patch | 140 ++
.../glib-2.0/glib-2.0/CVE-2026-58014.patch | 106 ++
meta/recipes-core/glib-2.0/glib-2.0_2.78.6.bb | 5 +
.../libxml/libxml2/CVE-2026-11979.patch | 70 +
meta/recipes-core/libxml/libxml2_2.12.10.bb | 1 +
...-fix-bzip2-version-tmp-aaa-will-hang.patch | 65 +
meta/recipes-extended/bzip2/bzip2_1.0.8.bb | 1 +
meta/recipes-extended/cups/cups.inc | 12 +
.../cups/CVE-2026-27447-regression_p1.patch | 33 +
.../cups/CVE-2026-27447-regression_p2.patch | 46 +
.../cups/cups/CVE-2026-27447.patch | 108 ++
.../cups/cups/CVE-2026-34978.patch | 107 ++
.../cups/cups/CVE-2026-34979.patch | 61 +
.../cups/CVE-2026-34980-regression_p1.patch | 31 +
.../cups/CVE-2026-34980-regression_p2.patch | 75 +
.../cups/cups/CVE-2026-34980.patch | 85 ++
.../cups/cups/CVE-2026-34990.patch | 351 +++++
.../cups/cups/CVE-2026-39314.patch | 45 +
.../cups/cups/CVE-2026-39316.patch | 40 +
.../cups/cups/CVE-2026-41079.patch | 71 +
.../gzip/gzip-1.13/CVE-2026-41991.patch | 75 +
meta/recipes-extended/gzip/gzip_1.13.bb | 1 +
...67-Out-of-bounds-read-in-xpmNextWord.patch | 140 ++
.../xorg-lib/libxpm_3.5.17.bb | 1 +
.../linux/cve-exclusion_6.6.inc | 1216 ++++++++++++++---
.../linux/linux-yocto-rt_6.6.bb | 6 +-
.../linux/linux-yocto-tiny_6.6.bb | 6 +-
meta/recipes-kernel/linux/linux-yocto_6.6.bb | 28 +-
.../libpng/files/CVE-2026-34757_p1.patch | 521 +++++++
.../libpng/files/CVE-2026-34757_p2.patch | 484 +++++++
.../libpng/libpng_1.6.42.bb | 4 +-
.../gnutls/gnutls/CVE-2026-42009_p1.patch | 66 +
.../gnutls/gnutls/CVE-2026-42009_p2.patch | 47 +
meta/recipes-support/gnutls/gnutls_3.8.4.bb | 4 +
scripts/install-buildtools | 4 +-
46 files changed, 4964 insertions(+), 187 deletions(-)
create mode 100644 meta/recipes-connectivity/openssh/openssh/CVE-2026-59995.patch
create mode 100644 meta/recipes-connectivity/openssh/openssh/CVE-2026-59996.patch
create mode 100644 meta/recipes-connectivity/openssh/openssh/CVE-2026-59997.patch
create mode 100644 meta/recipes-connectivity/openssh/openssh/CVE-2026-59999.patch
create mode 100644 meta/recipes-connectivity/openssh/openssh/CVE-2026-60000.patch
create mode 100644 meta/recipes-connectivity/openssh/openssh/CVE-2026-60001.patch
create mode 100644 meta/recipes-connectivity/openssh/openssh/CVE-2026-60002.patch
create mode 100644 meta/recipes-core/glib-2.0/glib-2.0/CVE-2026-58010.patch
create mode 100644 meta/recipes-core/glib-2.0/glib-2.0/CVE-2026-58011.patch
create mode 100644 meta/recipes-core/glib-2.0/glib-2.0/CVE-2026-58012.patch
create mode 100644 meta/recipes-core/glib-2.0/glib-2.0/CVE-2026-58013.patch
create mode 100644 meta/recipes-core/glib-2.0/glib-2.0/CVE-2026-58014.patch
create mode 100644 meta/recipes-core/libxml/libxml2/CVE-2026-11979.patch
create mode 100644 meta/recipes-extended/bzip2/bzip2/0001-fix-bzip2-version-tmp-aaa-will-hang.patch
create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-27447-regression_p1.patch
create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-27447-regression_p2.patch
create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-27447.patch
create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-34978.patch
create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-34979.patch
create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-34980-regression_p1.patch
create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-34980-regression_p2.patch
create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-34980.patch
create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-34990.patch
create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-39314.patch
create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-39316.patch
create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-41079.patch
create mode 100644 meta/recipes-extended/gzip/gzip-1.13/CVE-2026-41991.patch
create mode 100644 meta/recipes-graphics/xorg-lib/libxpm/0001-Fix-CVE-2026-4367-Out-of-bounds-read-in-xpmNextWord.patch
create mode 100644 meta/recipes-multimedia/libpng/files/CVE-2026-34757_p1.patch
create mode 100644 meta/recipes-multimedia/libpng/files/CVE-2026-34757_p2.patch
create mode 100644 meta/recipes-support/gnutls/gnutls/CVE-2026-42009_p1.patch
create mode 100644 meta/recipes-support/gnutls/gnutls/CVE-2026-42009_p2.patch
next reply other threads:[~2026-07-26 8:30 UTC|newest]
Thread overview: 32+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-07-26 8:29 Yoann Congal [this message]
2026-07-26 8:29 ` [OE-core][scarthgap 01/31] scripts/install-buildtools: Update to 5.0.19 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 02/31] linux-yocto/6.6: update to v6.6.143 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 03/31] linux-yocto/6.6: update to v6.6.144 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 04/31] linux-yocto/6.6: update CVE exclusions (6.6.144) Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 05/31] libxml2: Fix CVE-2026-11979 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 06/31] openssh: Fix CVE-2026-59999 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 07/31] openssh: Fix CVE-2026-59997 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 08/31] openssh: Fix CVE-2026-59996 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 09/31] openssh: Fix CVE-2026-59995 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 10/31] openssh: Fix CVE-2026-60001 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 11/31] openssh: Fix CVE-2026-60002 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 12/31] openssh: Fix CVE-2026-60000 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 13/31] cups: fix CVE-2026-27447 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 14/31] cups: fix CVE-2026-41079 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 15/31] cups: fix CVE-2026-34978 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 16/31] cups: fix CVE-2026-34980 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 17/31] cups: fix CVE-2026-34979 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 18/31] cups: fix CVE-2026-34990 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 19/31] cups: fix CVE-2026-39314 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 20/31] cups: fix CVE-2026-39316 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 21/31] libxpm: fix CVE-2026-4367 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 22/31] gnutls: set status for CVE-2026-3832 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 23/31] gnutls: fix CVE-2026-42009 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 24/31] libpng: Fix CVE-2026-34757 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 25/31] glib-2.0: fix CVE-2026-58010 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 26/31] glib-2.0: fix CVE-2026-58011 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 27/31] glib-2.0: fix CVE-2026-58012 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 28/31] glib-2.0: fix CVE-2026-58013 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 29/31] glib-2.0: fix CVE-2026-58014 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 30/31] gzip: Fix CVE-2026-41991 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 31/31] bzip2: fix 'bzip2 --version > /tmp/aaa 2>&1' hang Yoann Congal
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=cover.1785054429.git.yoann.congal@smile.fr \
--to=yoann.congal@smile.fr \
--cc=openembedded-core@lists.openembedded.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.