All of lore.kernel.org
 help / color / mirror / Atom feed
From: Yoann Congal <yoann.congal@smile.fr>
To: openembedded-core@lists.openembedded.org
Subject: [OE-core][scarthgap 00/31] Patch review
Date: Sun, 26 Jul 2026 10:29:24 +0200	[thread overview]
Message-ID: <cover.1785054429.git.yoann.congal@smile.fr> (raw)

Please review this set of changes for scarthgap and have comments back by
end of day Tuesday, July 28.

Passed a-full on autobuilder:
https://autobuilder.yoctoproject.org/valkyrie/#/builders/29/builds/4287

The following changes since commit 3217490cc554069ae53aa54cf8ad7327ce85fa10:

  glibc-testsuite: Do not generate SPDX (2026-07-21 20:32:51 +0200)

are available in the Git repository at:

  https://git.openembedded.org/openembedded-core-contrib stable/scarthgap-nut
  https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/scarthgap-nut

for you to fetch changes up to 762321beb0260b1411c7f98f13458ec99a118280:

  bzip2: fix 'bzip2 --version > /tmp/aaa 2>&1' hang (2026-07-25 23:57:45 +0200)

----------------------------------------------------------------

Bruce Ashfield (2):
  linux-yocto/6.6: update to v6.6.143
  linux-yocto/6.6: update to v6.6.144

Darsh Kelaiya (1):
  gzip: Fix CVE-2026-41991

Deepak Rathore (13):
  cups: fix CVE-2026-27447
  cups: fix CVE-2026-41079
  cups: fix CVE-2026-34978
  cups: fix CVE-2026-34980
  cups: fix CVE-2026-34979
  cups: fix CVE-2026-34990
  cups: fix CVE-2026-39314
  cups: fix CVE-2026-39316
  glib-2.0: fix CVE-2026-58010
  glib-2.0: fix CVE-2026-58011
  glib-2.0: fix CVE-2026-58012
  glib-2.0: fix CVE-2026-58013
  glib-2.0: fix CVE-2026-58014

Devansh Patel (8):
  libxml2: Fix CVE-2026-11979
  openssh: Fix CVE-2026-59999
  openssh: Fix CVE-2026-59997
  openssh: Fix CVE-2026-59996
  openssh: Fix CVE-2026-59995
  openssh: Fix CVE-2026-60001
  openssh: Fix CVE-2026-60002
  openssh: Fix CVE-2026-60000

Enoch Ng (1):
  libxpm: fix CVE-2026-4367

Hongxu Jia (1):
  bzip2: fix 'bzip2 --version > /tmp/aaa 2>&1' hang

Sudhir Dumbhare (3):
  gnutls: set status for CVE-2026-3832
  gnutls: fix CVE-2026-42009
  libpng: Fix CVE-2026-34757

Yoann Congal (2):
  scripts/install-buildtools: Update to 5.0.19
  linux-yocto/6.6: update CVE exclusions (6.6.144)

 .../openssh/openssh/CVE-2026-59995.patch      |   42 +
 .../openssh/openssh/CVE-2026-59996.patch      |   37 +
 .../openssh/openssh/CVE-2026-59997.patch      |   58 +
 .../openssh/openssh/CVE-2026-59999.patch      |   36 +
 .../openssh/openssh/CVE-2026-60000.patch      |  140 ++
 .../openssh/openssh/CVE-2026-60001.patch      |  130 ++
 .../openssh/openssh/CVE-2026-60002.patch      |  226 +++
 .../openssh/openssh_9.6p1.bb                  |    7 +
 .../glib-2.0/glib-2.0/CVE-2026-58010.patch    |  113 ++
 .../glib-2.0/glib-2.0/CVE-2026-58011.patch    |   78 ++
 .../glib-2.0/glib-2.0/CVE-2026-58012.patch    |  228 ++++
 .../glib-2.0/glib-2.0/CVE-2026-58013.patch    |  140 ++
 .../glib-2.0/glib-2.0/CVE-2026-58014.patch    |  106 ++
 meta/recipes-core/glib-2.0/glib-2.0_2.78.6.bb |    5 +
 .../libxml/libxml2/CVE-2026-11979.patch       |   70 +
 meta/recipes-core/libxml/libxml2_2.12.10.bb   |    1 +
 ...-fix-bzip2-version-tmp-aaa-will-hang.patch |   65 +
 meta/recipes-extended/bzip2/bzip2_1.0.8.bb    |    1 +
 meta/recipes-extended/cups/cups.inc           |   12 +
 .../cups/CVE-2026-27447-regression_p1.patch   |   33 +
 .../cups/CVE-2026-27447-regression_p2.patch   |   46 +
 .../cups/cups/CVE-2026-27447.patch            |  108 ++
 .../cups/cups/CVE-2026-34978.patch            |  107 ++
 .../cups/cups/CVE-2026-34979.patch            |   61 +
 .../cups/CVE-2026-34980-regression_p1.patch   |   31 +
 .../cups/CVE-2026-34980-regression_p2.patch   |   75 +
 .../cups/cups/CVE-2026-34980.patch            |   85 ++
 .../cups/cups/CVE-2026-34990.patch            |  351 +++++
 .../cups/cups/CVE-2026-39314.patch            |   45 +
 .../cups/cups/CVE-2026-39316.patch            |   40 +
 .../cups/cups/CVE-2026-41079.patch            |   71 +
 .../gzip/gzip-1.13/CVE-2026-41991.patch       |   75 +
 meta/recipes-extended/gzip/gzip_1.13.bb       |    1 +
 ...67-Out-of-bounds-read-in-xpmNextWord.patch |  140 ++
 .../xorg-lib/libxpm_3.5.17.bb                 |    1 +
 .../linux/cve-exclusion_6.6.inc               | 1216 ++++++++++++++---
 .../linux/linux-yocto-rt_6.6.bb               |    6 +-
 .../linux/linux-yocto-tiny_6.6.bb             |    6 +-
 meta/recipes-kernel/linux/linux-yocto_6.6.bb  |   28 +-
 .../libpng/files/CVE-2026-34757_p1.patch      |  521 +++++++
 .../libpng/files/CVE-2026-34757_p2.patch      |  484 +++++++
 .../libpng/libpng_1.6.42.bb                   |    4 +-
 .../gnutls/gnutls/CVE-2026-42009_p1.patch     |   66 +
 .../gnutls/gnutls/CVE-2026-42009_p2.patch     |   47 +
 meta/recipes-support/gnutls/gnutls_3.8.4.bb   |    4 +
 scripts/install-buildtools                    |    4 +-
 46 files changed, 4964 insertions(+), 187 deletions(-)
 create mode 100644 meta/recipes-connectivity/openssh/openssh/CVE-2026-59995.patch
 create mode 100644 meta/recipes-connectivity/openssh/openssh/CVE-2026-59996.patch
 create mode 100644 meta/recipes-connectivity/openssh/openssh/CVE-2026-59997.patch
 create mode 100644 meta/recipes-connectivity/openssh/openssh/CVE-2026-59999.patch
 create mode 100644 meta/recipes-connectivity/openssh/openssh/CVE-2026-60000.patch
 create mode 100644 meta/recipes-connectivity/openssh/openssh/CVE-2026-60001.patch
 create mode 100644 meta/recipes-connectivity/openssh/openssh/CVE-2026-60002.patch
 create mode 100644 meta/recipes-core/glib-2.0/glib-2.0/CVE-2026-58010.patch
 create mode 100644 meta/recipes-core/glib-2.0/glib-2.0/CVE-2026-58011.patch
 create mode 100644 meta/recipes-core/glib-2.0/glib-2.0/CVE-2026-58012.patch
 create mode 100644 meta/recipes-core/glib-2.0/glib-2.0/CVE-2026-58013.patch
 create mode 100644 meta/recipes-core/glib-2.0/glib-2.0/CVE-2026-58014.patch
 create mode 100644 meta/recipes-core/libxml/libxml2/CVE-2026-11979.patch
 create mode 100644 meta/recipes-extended/bzip2/bzip2/0001-fix-bzip2-version-tmp-aaa-will-hang.patch
 create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-27447-regression_p1.patch
 create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-27447-regression_p2.patch
 create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-27447.patch
 create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-34978.patch
 create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-34979.patch
 create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-34980-regression_p1.patch
 create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-34980-regression_p2.patch
 create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-34980.patch
 create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-34990.patch
 create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-39314.patch
 create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-39316.patch
 create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-41079.patch
 create mode 100644 meta/recipes-extended/gzip/gzip-1.13/CVE-2026-41991.patch
 create mode 100644 meta/recipes-graphics/xorg-lib/libxpm/0001-Fix-CVE-2026-4367-Out-of-bounds-read-in-xpmNextWord.patch
 create mode 100644 meta/recipes-multimedia/libpng/files/CVE-2026-34757_p1.patch
 create mode 100644 meta/recipes-multimedia/libpng/files/CVE-2026-34757_p2.patch
 create mode 100644 meta/recipes-support/gnutls/gnutls/CVE-2026-42009_p1.patch
 create mode 100644 meta/recipes-support/gnutls/gnutls/CVE-2026-42009_p2.patch



             reply	other threads:[~2026-07-26  8:30 UTC|newest]

Thread overview: 32+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2026-07-26  8:29 Yoann Congal [this message]
2026-07-26  8:29 ` [OE-core][scarthgap 01/31] scripts/install-buildtools: Update to 5.0.19 Yoann Congal
2026-07-26  8:29 ` [OE-core][scarthgap 02/31] linux-yocto/6.6: update to v6.6.143 Yoann Congal
2026-07-26  8:29 ` [OE-core][scarthgap 03/31] linux-yocto/6.6: update to v6.6.144 Yoann Congal
2026-07-26  8:29 ` [OE-core][scarthgap 04/31] linux-yocto/6.6: update CVE exclusions (6.6.144) Yoann Congal
2026-07-26  8:29 ` [OE-core][scarthgap 05/31] libxml2: Fix CVE-2026-11979 Yoann Congal
2026-07-26  8:29 ` [OE-core][scarthgap 06/31] openssh: Fix CVE-2026-59999 Yoann Congal
2026-07-26  8:29 ` [OE-core][scarthgap 07/31] openssh: Fix CVE-2026-59997 Yoann Congal
2026-07-26  8:29 ` [OE-core][scarthgap 08/31] openssh: Fix CVE-2026-59996 Yoann Congal
2026-07-26  8:29 ` [OE-core][scarthgap 09/31] openssh: Fix CVE-2026-59995 Yoann Congal
2026-07-26  8:29 ` [OE-core][scarthgap 10/31] openssh: Fix CVE-2026-60001 Yoann Congal
2026-07-26  8:29 ` [OE-core][scarthgap 11/31] openssh: Fix CVE-2026-60002 Yoann Congal
2026-07-26  8:29 ` [OE-core][scarthgap 12/31] openssh: Fix CVE-2026-60000 Yoann Congal
2026-07-26  8:29 ` [OE-core][scarthgap 13/31] cups: fix CVE-2026-27447 Yoann Congal
2026-07-26  8:29 ` [OE-core][scarthgap 14/31] cups: fix CVE-2026-41079 Yoann Congal
2026-07-26  8:29 ` [OE-core][scarthgap 15/31] cups: fix CVE-2026-34978 Yoann Congal
2026-07-26  8:29 ` [OE-core][scarthgap 16/31] cups: fix CVE-2026-34980 Yoann Congal
2026-07-26  8:29 ` [OE-core][scarthgap 17/31] cups: fix CVE-2026-34979 Yoann Congal
2026-07-26  8:29 ` [OE-core][scarthgap 18/31] cups: fix CVE-2026-34990 Yoann Congal
2026-07-26  8:29 ` [OE-core][scarthgap 19/31] cups: fix CVE-2026-39314 Yoann Congal
2026-07-26  8:29 ` [OE-core][scarthgap 20/31] cups: fix CVE-2026-39316 Yoann Congal
2026-07-26  8:29 ` [OE-core][scarthgap 21/31] libxpm: fix CVE-2026-4367 Yoann Congal
2026-07-26  8:29 ` [OE-core][scarthgap 22/31] gnutls: set status for CVE-2026-3832 Yoann Congal
2026-07-26  8:29 ` [OE-core][scarthgap 23/31] gnutls: fix CVE-2026-42009 Yoann Congal
2026-07-26  8:29 ` [OE-core][scarthgap 24/31] libpng: Fix CVE-2026-34757 Yoann Congal
2026-07-26  8:29 ` [OE-core][scarthgap 25/31] glib-2.0: fix CVE-2026-58010 Yoann Congal
2026-07-26  8:29 ` [OE-core][scarthgap 26/31] glib-2.0: fix CVE-2026-58011 Yoann Congal
2026-07-26  8:29 ` [OE-core][scarthgap 27/31] glib-2.0: fix CVE-2026-58012 Yoann Congal
2026-07-26  8:29 ` [OE-core][scarthgap 28/31] glib-2.0: fix CVE-2026-58013 Yoann Congal
2026-07-26  8:29 ` [OE-core][scarthgap 29/31] glib-2.0: fix CVE-2026-58014 Yoann Congal
2026-07-26  8:29 ` [OE-core][scarthgap 30/31] gzip: Fix CVE-2026-41991 Yoann Congal
2026-07-26  8:29 ` [OE-core][scarthgap 31/31] bzip2: fix 'bzip2 --version > /tmp/aaa 2>&1' hang Yoann Congal

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=cover.1785054429.git.yoann.congal@smile.fr \
    --to=yoann.congal@smile.fr \
    --cc=openembedded-core@lists.openembedded.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.