[OE-core][scarthgap 00/19] Patch review

[Yoann Congal <yoann.congal@smile.fr>]

Please review this set of changes for scarthgap and have comments back by
end of day Thursday, July 30.

Passed a-full on autobuilder:
https://autobuilder.yoctoproject.org/valkyrie/?#/builders/29/builds/4312

The following changes since commit 762321beb0260b1411c7f98f13458ec99a118280:

  bzip2: fix 'bzip2 --version > /tmp/aaa 2>&1' hang (2026-07-25 23:57:45 +0200)

are available in the Git repository at:

  https://git.openembedded.org/openembedded-core-contrib stable/scarthgap-nut
  https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/scarthgap-nut

for you to fetch changes up to 543550522f831479f07d332a40ba343c53ae1065:

  openssh: set status for CVE-2026-59998 (2026-07-28 15:30:13 +0200)

----------------------------------------------------------------

AshishKumar Mishra (1):
  package.bbclass: hardcode emit_pkgdata to run last

Darsh Kelaiya (5):
  gawk: Fix CVE-2026-40467
  gawk: Fix CVE-2026-40468
  gawk: Fix CVE-2026-40469
  gawk: Fix CVE-2026-40553
  python3-setuptools: Fix CVE-2026-59890

Deepak Rathore (1):
  sqlite3: fix CVE-2026-11822 and CVE-2026-11824

Devansh Patel (1):
  openssh: set status for CVE-2026-59998

João Marcos Costa (1):
  curl: add annotation for CVE-2026-10536

Martin Schwan (1):
  cargo-update-recipe-crates: Don't fail for partially empty Cargo.lock

Shubham Pushpkar (1):
  libsolv: Fix CVE-2026-9149

Siddharth Doshi (5):
  vim: Security Fix for CVE-2026-28422
  vim: Security Fix for CVE-2026-42307
  vim: Security Fix for CVE-2026-43961
  vim: Security Fix for CVE-2026-47162
  vim: Security Fix for CVE-2026-47167

mark.yang (3):
  python3-cryptography: set CVE_PRODUCT
  python3-ply: set CVE_PRODUCT
  python3-pyasn1: set CVE_PRODUCT

 meta/classes-global/package.bbclass           |   7 +-
 .../cargo-update-recipe-crates.bbclass        |  16 +-
 .../openssh/openssh_9.6p1.bb                  |   1 +
 .../python/python3-cryptography_42.0.5.bb     |   2 +
 .../python/python3-ply_3.11.bb                |   2 +
 .../python/python3-pyasn1_0.5.1.bb            |   1 +
 .../python3-setuptools/CVE-2026-59890.patch   | 194 ++++++++++++++++++
 .../python/python3-setuptools_69.1.1.bb       |   1 +
 .../gawk/gawk/CVE-2026-40467.patch            |  63 ++++++
 .../gawk/gawk/CVE-2026-40468.patch            |  65 ++++++
 .../gawk/gawk/CVE-2026-40469.patch            |  90 ++++++++
 .../gawk/gawk/CVE-2026-40553_p1.patch         |  50 +++++
 .../gawk/gawk/CVE-2026-40553_p2.patch         |  44 ++++
 meta/recipes-extended/gawk/gawk_5.3.0.bb      |   5 +
 .../libsolv/libsolv/CVE-2026-9149.patch       | 152 ++++++++++++++
 .../libsolv/libsolv_0.7.28.bb                 |   1 +
 meta/recipes-support/curl/curl_8.7.1.bb       |   1 +
 .../CVE-2026-11822_CVE-2026-11824.patch       |  41 ++++
 meta/recipes-support/sqlite/sqlite3_3.45.3.bb |   1 +
 .../vim/files/CVE-2026-28422.patch            |  44 ++++
 .../vim/files/CVE-2026-42307.patch            | 121 +++++++++++
 .../vim/files/CVE-2026-43961.patch            |  65 ++++++
 .../vim/files/CVE-2026-47162.patch            |  39 ++++
 .../vim/files/CVE-2026-47167.patch            |  39 ++++
 meta/recipes-support/vim/vim.inc              |   5 +
 25 files changed, 1039 insertions(+), 11 deletions(-)
 create mode 100644 meta/recipes-devtools/python/python3-setuptools/CVE-2026-59890.patch
 create mode 100644 meta/recipes-extended/gawk/gawk/CVE-2026-40467.patch
 create mode 100644 meta/recipes-extended/gawk/gawk/CVE-2026-40468.patch
 create mode 100644 meta/recipes-extended/gawk/gawk/CVE-2026-40469.patch
 create mode 100644 meta/recipes-extended/gawk/gawk/CVE-2026-40553_p1.patch
 create mode 100644 meta/recipes-extended/gawk/gawk/CVE-2026-40553_p2.patch
 create mode 100644 meta/recipes-extended/libsolv/libsolv/CVE-2026-9149.patch
 create mode 100644 meta/recipes-support/sqlite/sqlite3/CVE-2026-11822_CVE-2026-11824.patch
 create mode 100644 meta/recipes-support/vim/files/CVE-2026-28422.patch
 create mode 100644 meta/recipes-support/vim/files/CVE-2026-42307.patch
 create mode 100644 meta/recipes-support/vim/files/CVE-2026-43961.patch
 create mode 100644 meta/recipes-support/vim/files/CVE-2026-47162.patch
 create mode 100644 meta/recipes-support/vim/files/CVE-2026-47167.patch