From: Yoann Congal <yoann.congal@smile.fr>
To: openembedded-core@lists.openembedded.org
Cc: Paul Barker <paul@pbarker.dev>,
Richard Purdie <richard.purdie@linuxfoundation.org>
Subject: [OE-core][wrynose 00/19] Pull request (cover letter only)
Date: Thu, 27 Aug 2026 09:58:51 +0200 [thread overview]
Message-ID: <cover.1787817328.git.yoann.congal@smile.fr> (raw)
Those are the patches from the last patch review:
https://lore.kernel.org/all/cover.1787576160.git.yoann.congal@smile.fr/
No changes
Passed a-full on autobuilder:
https://autobuilder.yoctoproject.org/valkyrie/#/builders/29/builds/4542
The following changes since commit ef022bf82d79015802309d14c28b13373ebe53f5:
build-appliance-image: Update to wrynose head revisions (2026-08-18 08:40:33 +0100)
are available in the Git repository at:
https://git.openembedded.org/openembedded-core-contrib stable/wrynose-next
https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/wrynose-next
for you to fetch changes up to f7397af248e1e338929d70a910b0fbc2341528ec:
mirrors: Disable YP mirrors on autobuilder (2026-08-21 18:06:46 +0200)
----------------------------------------------------------------
Adarsh Jagadish Kamini (1):
libssh2: fix CVE-2026-58050
Deepak Rathore (2):
curl: fix CVE-2026-4873
nghttp2: set status for CVE-2026-58055
Jaipaul Cheernam (6):
libssh2: fix CVE-2026-66032
libssh2: fix CVE-2026-66033
libssh2: fix CVE-2026-66034
libssh2: fix CVE-2026-66035
binutils: Patch for CVE-2026-15003
binutils: fix CVE-2026-18220
Michal Sieron (1):
rpcbind: Drop dependency on quota
Peter Marko (6):
busybox: patch CVE-2026-38754
libsndfile1: patch CVE-2026-37555
bison: patch CVE-2026-56389
cpio: patch CVE-2026-66485
cpio: patch CVE-2026-66484
cpio: patch CVE-2026-66486
Richard Purdie (3):
rpcbind: upgrade 1.2.8 -> 1.2.9
oeqa/maturin: Update dependency version
mirrors: Disable YP mirrors on autobuilder
meta/classes-global/mirrors.bbclass | 19 +-
.../yocto-autobuilder/autobuilder.conf | 1 +
.../files/maturin/guessing-game/Cargo.toml | 2 +-
.../busybox/busybox/CVE-2026-38754.patch | 155 ++++++
meta/recipes-core/busybox/busybox_1.37.0.bb | 1 +
.../binutils/binutils-2.46.inc | 2 +
.../binutils/binutils/CVE-2026-15003.patch | 402 ++++++++++++++
.../binutils/binutils/CVE-2026-18220.patch | 65 +++
.../bison/bison/CVE-2026-56389.patch | 56 ++
meta/recipes-devtools/bison/bison_3.8.2.bb | 1 +
meta/recipes-extended/cpio/cpio_2.15.bb | 3 +
.../cpio/files/CVE-2026-66484.patch | 28 +
.../cpio/files/CVE-2026-66485.patch | 210 ++++++++
.../cpio/files/CVE-2026-66486.patch | 497 ++++++++++++++++++
.../0001-systemd-use-EnvironmentFile.patch | 7 +-
...pcbind_add_option_to_fix_port_number.patch | 25 +-
.../{rpcbind_1.2.8.bb => rpcbind_1.2.9.bb} | 4 +-
.../libsndfile1/CVE-2026-37555.patch | 44 ++
.../libsndfile/libsndfile1_1.2.2.bb | 1 +
.../curl/curl/CVE-2026-4873.patch | 52 ++
meta/recipes-support/curl/curl_8.19.0.bb | 1 +
.../libssh2/libssh2/CVE-2026-58050.patch | 45 ++
.../libssh2/libssh2/CVE-2026-66032.patch | 36 ++
.../libssh2/libssh2/CVE-2026-66033.patch | 45 ++
.../libssh2/libssh2/CVE-2026-66034.patch | 40 ++
.../libssh2/libssh2/CVE-2026-66035.patch | 56 ++
.../recipes-support/libssh2/libssh2_1.11.1.bb | 5 +
.../recipes-support/nghttp2/nghttp2_1.68.1.bb | 2 +
28 files changed, 1776 insertions(+), 29 deletions(-)
create mode 100644 meta/recipes-core/busybox/busybox/CVE-2026-38754.patch
create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2026-15003.patch
create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2026-18220.patch
create mode 100644 meta/recipes-devtools/bison/bison/CVE-2026-56389.patch
create mode 100644 meta/recipes-extended/cpio/files/CVE-2026-66484.patch
create mode 100644 meta/recipes-extended/cpio/files/CVE-2026-66485.patch
create mode 100644 meta/recipes-extended/cpio/files/CVE-2026-66486.patch
rename meta/recipes-extended/rpcbind/{rpcbind_1.2.8.bb => rpcbind_1.2.9.bb} (95%)
create mode 100644 meta/recipes-multimedia/libsndfile/libsndfile1/CVE-2026-37555.patch
create mode 100644 meta/recipes-support/curl/curl/CVE-2026-4873.patch
create mode 100644 meta/recipes-support/libssh2/libssh2/CVE-2026-58050.patch
create mode 100644 meta/recipes-support/libssh2/libssh2/CVE-2026-66032.patch
create mode 100644 meta/recipes-support/libssh2/libssh2/CVE-2026-66033.patch
create mode 100644 meta/recipes-support/libssh2/libssh2/CVE-2026-66034.patch
create mode 100644 meta/recipes-support/libssh2/libssh2/CVE-2026-66035.patch
reply other threads:[~2026-08-27 7:59 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=cover.1787817328.git.yoann.congal@smile.fr \
--to=yoann.congal@smile.fr \
--cc=openembedded-core@lists.openembedded.org \
--cc=paul@pbarker.dev \
--cc=richard.purdie@linuxfoundation.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.