From: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
To: openembedded-devel@lists.openembedded.org
Subject: [PATCH 00/44] Scarthgap pull request
Date: Mon, 7 Sep 2026 16:41:51 +0530 [thread overview]
Message-ID: <cover.1788779254.git.anuj.mittal@oss.qualcomm.com> (raw)
Please merge these changes in scarthgap. Tested locally and on autobuilder:
https://autobuilder.yoctoproject.org/valkyrie/#/builders/81/builds/1763
The following changes since commit bec755063a8b5da65df626f5749496aadaa4f4bb:
thrift: fix CVE-2026-58389 (2026-08-13 10:01:51 +0530)
are available in the Git repository at:
https://git.openembedded.org/meta-openembedded-contrib anujm/scarthgap
https://git.openembedded.org/meta-openembedded-contrib/log/?h=anujm/scarthgap
for you to fetch changes up to b5874ea07d69919d9b40d59f2c2f0bbd24bc3259:
libssh: Fix CVE-2026-59850 (2026-09-02 10:39:59 +0530)
----------------------------------------------------------------
Ankur Tyagi (1):
jsoncpp: upgrade 1.9.5 -> 1.9.7
Benjamin Bouvier (2):
net-snmp: add CVE_PRODUCT
rsyslog: add CVE_PRODUCT
Darsh Kelaiya (16):
python3-filelock: fix CVE-2025-68146
python3-filelock: fix CVE-2026-22701
python3-httplib2: fix CVE-2026-59939
python3-django: fix CVE-2026-15307
python3-django: fix CVE-2026-15337
python3-django: fix CVE-2026-15830
python3-aiohttp: ignore CVE-2026-34515
python3-aiohttp: fix CVE-2025-69224
python3-aiohttp: fix CVE-2025-69227
python3-aiohttp: fix CVE-2025-69229
python3-aiohttp: fix CVE-2025-69223
python3-aiohttp: fix CVE-2026-22815
python3-aiohttp: fix CVE-2026-34514
python3-aiohttp: fix CVE-2026-34513
python3-aiohttp: fix CVE-2026-34993
python3-aiohttp: fix CVE-2026-34518
Devansh Patel (6):
hdf5: Fix CVE-2026-26199
hdf5: Fix CVE-2026-26197
python3-cbor2: Fix CVE-2026-26209
python3-httplib2: correct CVE_PRODUCT mapping
python3-cbor2: use exact CVE_PRODUCT mapping
python3-web3: add CVE_PRODUCT mapping
Gyorgy Sarvari (3):
python3-httpx: set CVE_PRODUCT
python3-twisted: set CVE_PRODUCT
smarty: extend CVE_PRODUCT
Hetvi Thakar (11):
python3-ujson: Fix CVE-2026-32875
python3-ujson: Fix CVE-2026-32874
python3-ujson: Fix CVE-2026-44660
python3-ujson: Fix CVE-2026-54911
python3-simpleeval: Fix CVE-2026-32640
python3-web3: Fix CVE-2026-40072
libssh: Fix CVE-2026-59843
libssh: Fix CVE-2026-59844
libssh: Fix CVE-2026-59846
libssh: Fix CVE-2026-59848
libssh: Fix CVE-2026-59850
Hitendra Prajapati (4):
libssh: set status for CVE-2026-15370
libssh: set status for CVE-2026-59842
libssh: fix for CVE-2026-59845, CVE-2026-59847
opensc: fix for CVE-2026-40528
Vijay Anusuri (1):
giflib: Fix CVE-2026-26740
.../net-snmp/net-snmp_5.9.4.bb | 2 +
.../giflib/giflib/CVE-2026-26740.patch | 40 +
.../recipes-devtools/giflib/giflib_5.2.2.bb | 1 +
...akage-when-compiled-with-C-17-1668-1.patch | 525 ++++++++
.../{jsoncpp_1.9.5.bb => jsoncpp_1.9.7.bb} | 6 +-
.../rsyslog/rsyslog_8.2402.0.bb | 2 +
.../hdf5/files/CVE-2026-26197.patch | 69 +
.../hdf5/files/CVE-2026-26199.patch | 675 ++++++++++
meta-oe/recipes-support/hdf5/hdf5_1.14.4-3.bb | 2 +
.../libssh/libssh/CVE-2026-59843.patch | 84 ++
.../libssh/libssh/CVE-2026-59844.patch | 52 +
.../libssh/libssh/CVE-2026-59845.patch | 68 +
.../libssh/libssh/CVE-2026-59846.patch | 87 ++
.../libssh/libssh/CVE-2026-59847-01.patch | 39 +
.../libssh/libssh/CVE-2026-59847-02.patch | 35 +
.../libssh/CVE-2026-59848-regression.patch | 45 +
.../libssh/libssh/CVE-2026-59848.patch | 684 ++++++++++
.../libssh/libssh/CVE-2026-59850.patch | 40 +
.../recipes-support/libssh/libssh_0.10.6.bb | 12 +
.../opensc/files/CVE-2026-40528.patch | 44 +
.../recipes-support/opensc/opensc_0.25.1.bb | 1 +
.../recipes-support/smarty/smarty_4.4.1.bb | 2 +-
.../python3-aiohttp/CVE-2025-69223.patch | 848 ++++++++++++
.../python3-aiohttp/CVE-2025-69224.patch | 161 +++
.../python3-aiohttp/CVE-2025-69227.patch | 163 +++
.../python3-aiohttp/CVE-2025-69229_p1.patch | 113 ++
.../python3-aiohttp/CVE-2025-69229_p2.patch | 256 ++++
.../python3-aiohttp/CVE-2026-22815.patch | 1020 +++++++++++++++
.../python3-aiohttp/CVE-2026-34513.patch | 211 +++
.../python3-aiohttp/CVE-2026-34514.patch | 65 +
.../python3-aiohttp/CVE-2026-34518.patch | 64 +
.../python3-aiohttp/CVE-2026-34993.patch | 364 ++++++
.../python/python3-aiohttp_3.9.5.bb | 21 +
.../CVE-2026-26209-dependent.patch | 27 +
.../python3-cbor2/CVE-2026-26209_p1.patch | 173 +++
.../python3-cbor2/CVE-2026-26209_p2.patch | 435 +++++++
.../python3-cbor2/CVE-2026-26209_p3.patch | 81 ++
.../python3-cbor2/CVE-2026-26209_p4.patch | 28 +
.../python/python3-cbor2_5.6.4.bb | 7 +
.../CVE-2026-15307.patch | 563 ++++++++
.../CVE-2026-15337.patch | 163 +++
.../CVE-2026-15830.patch | 1144 +++++++++++++++++
.../python/python3-django_5.0.14.bb | 3 +
.../python3-filelock/CVE-2025-68146.patch | 88 ++
.../python3-filelock/CVE-2026-22701.patch | 44 +
.../python/python3-filelock_3.13.4.bb | 4 +
.../python3-httplib2/CVE-2026-59939.patch | 745 +++++++++++
.../python/python3-httplib2_0.22.0.bb | 4 +
.../python/python3-httpx_0.27.0.bb | 2 +
.../CVE-2026-32640_p1.patch | 55 +
.../CVE-2026-32640_p2.patch | 187 +++
.../CVE-2026-32640_p3.patch | 485 +++++++
.../CVE-2026-32640_p4.patch | 90 ++
.../python/python3-simpleeval_0.9.13.bb | 8 +-
.../python/python3-twisted_24.3.0.bb | 2 +
.../python/python3-ujson/CVE-2026-32874.patch | 61 +
.../python/python3-ujson/CVE-2026-32875.patch | 199 +++
.../python/python3-ujson/CVE-2026-44660.patch | 112 ++
.../python/python3-ujson/CVE-2026-54911.patch | 267 ++++
.../python/python3-ujson_5.9.0.bb | 4 +
.../python/python3-web3/CVE-2026-40072.patch | 434 +++++++
.../python/python3-web3_6.17.0.bb | 3 +
62 files changed, 11215 insertions(+), 4 deletions(-)
create mode 100644 meta-oe/recipes-devtools/giflib/giflib/CVE-2026-26740.patch
create mode 100644 meta-oe/recipes-devtools/jsoncpp/jsoncpp/0001-Fix-C-11-ABI-breakage-when-compiled-with-C-17-1668-1.patch
rename meta-oe/recipes-devtools/jsoncpp/{jsoncpp_1.9.5.bb => jsoncpp_1.9.7.bb} (82%)
create mode 100644 meta-oe/recipes-support/hdf5/files/CVE-2026-26197.patch
create mode 100644 meta-oe/recipes-support/hdf5/files/CVE-2026-26199.patch
create mode 100644 meta-oe/recipes-support/libssh/libssh/CVE-2026-59843.patch
create mode 100644 meta-oe/recipes-support/libssh/libssh/CVE-2026-59844.patch
create mode 100644 meta-oe/recipes-support/libssh/libssh/CVE-2026-59845.patch
create mode 100644 meta-oe/recipes-support/libssh/libssh/CVE-2026-59846.patch
create mode 100644 meta-oe/recipes-support/libssh/libssh/CVE-2026-59847-01.patch
create mode 100644 meta-oe/recipes-support/libssh/libssh/CVE-2026-59847-02.patch
create mode 100644 meta-oe/recipes-support/libssh/libssh/CVE-2026-59848-regression.patch
create mode 100644 meta-oe/recipes-support/libssh/libssh/CVE-2026-59848.patch
create mode 100644 meta-oe/recipes-support/libssh/libssh/CVE-2026-59850.patch
create mode 100644 meta-oe/recipes-support/opensc/files/CVE-2026-40528.patch
create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2025-69223.patch
create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2025-69224.patch
create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2025-69227.patch
create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2025-69229_p1.patch
create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2025-69229_p2.patch
create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-22815.patch
create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-34513.patch
create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-34514.patch
create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-34518.patch
create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-34993.patch
create mode 100644 meta-python/recipes-devtools/python/python3-cbor2/CVE-2026-26209-dependent.patch
create mode 100644 meta-python/recipes-devtools/python/python3-cbor2/CVE-2026-26209_p1.patch
create mode 100644 meta-python/recipes-devtools/python/python3-cbor2/CVE-2026-26209_p2.patch
create mode 100644 meta-python/recipes-devtools/python/python3-cbor2/CVE-2026-26209_p3.patch
create mode 100644 meta-python/recipes-devtools/python/python3-cbor2/CVE-2026-26209_p4.patch
create mode 100644 meta-python/recipes-devtools/python/python3-django-5.0.14/CVE-2026-15307.patch
create mode 100644 meta-python/recipes-devtools/python/python3-django-5.0.14/CVE-2026-15337.patch
create mode 100644 meta-python/recipes-devtools/python/python3-django-5.0.14/CVE-2026-15830.patch
create mode 100644 meta-python/recipes-devtools/python/python3-filelock/CVE-2025-68146.patch
create mode 100644 meta-python/recipes-devtools/python/python3-filelock/CVE-2026-22701.patch
create mode 100644 meta-python/recipes-devtools/python/python3-httplib2/CVE-2026-59939.patch
create mode 100644 meta-python/recipes-devtools/python/python3-simpleeval/CVE-2026-32640_p1.patch
create mode 100644 meta-python/recipes-devtools/python/python3-simpleeval/CVE-2026-32640_p2.patch
create mode 100644 meta-python/recipes-devtools/python/python3-simpleeval/CVE-2026-32640_p3.patch
create mode 100644 meta-python/recipes-devtools/python/python3-simpleeval/CVE-2026-32640_p4.patch
create mode 100644 meta-python/recipes-devtools/python/python3-ujson/CVE-2026-32874.patch
create mode 100644 meta-python/recipes-devtools/python/python3-ujson/CVE-2026-32875.patch
create mode 100644 meta-python/recipes-devtools/python/python3-ujson/CVE-2026-44660.patch
create mode 100644 meta-python/recipes-devtools/python/python3-ujson/CVE-2026-54911.patch
create mode 100644 meta-python/recipes-devtools/python/python3-web3/CVE-2026-40072.patch
--
2.34.1
next reply other threads:[~2026-09-07 11:12 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-09-07 11:11 Anuj Mittal [this message]
2026-09-07 15:57 ` [oe] [PATCH 00/44] Scarthgap pull request Khem Raj
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=cover.1788779254.git.anuj.mittal@oss.qualcomm.com \
--to=anuj.mittal@oss.qualcomm.com \
--cc=openembedded-devel@lists.openembedded.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.