All of lore.kernel.org
 help / color / mirror / Atom feed
* [PATCH 00/44] Scarthgap pull request
@ 2026-09-07 11:11 Anuj Mittal
  2026-09-07 15:57 ` [oe] " Khem Raj
  0 siblings, 1 reply; 2+ messages in thread
From: Anuj Mittal @ 2026-09-07 11:11 UTC (permalink / raw)
  To: openembedded-devel

Please merge these changes in scarthgap. Tested locally and on autobuilder:

https://autobuilder.yoctoproject.org/valkyrie/#/builders/81/builds/1763


The following changes since commit bec755063a8b5da65df626f5749496aadaa4f4bb:

  thrift: fix CVE-2026-58389 (2026-08-13 10:01:51 +0530)

are available in the Git repository at:

  https://git.openembedded.org/meta-openembedded-contrib anujm/scarthgap
  https://git.openembedded.org/meta-openembedded-contrib/log/?h=anujm/scarthgap

for you to fetch changes up to b5874ea07d69919d9b40d59f2c2f0bbd24bc3259:

  libssh: Fix CVE-2026-59850 (2026-09-02 10:39:59 +0530)

----------------------------------------------------------------

Ankur Tyagi (1):
  jsoncpp: upgrade 1.9.5 -> 1.9.7

Benjamin Bouvier (2):
  net-snmp: add CVE_PRODUCT
  rsyslog: add CVE_PRODUCT

Darsh Kelaiya (16):
  python3-filelock: fix CVE-2025-68146
  python3-filelock: fix CVE-2026-22701
  python3-httplib2: fix CVE-2026-59939
  python3-django: fix CVE-2026-15307
  python3-django: fix CVE-2026-15337
  python3-django: fix CVE-2026-15830
  python3-aiohttp: ignore CVE-2026-34515
  python3-aiohttp: fix CVE-2025-69224
  python3-aiohttp: fix CVE-2025-69227
  python3-aiohttp: fix CVE-2025-69229
  python3-aiohttp: fix CVE-2025-69223
  python3-aiohttp: fix CVE-2026-22815
  python3-aiohttp: fix CVE-2026-34514
  python3-aiohttp: fix CVE-2026-34513
  python3-aiohttp: fix CVE-2026-34993
  python3-aiohttp: fix CVE-2026-34518

Devansh Patel (6):
  hdf5: Fix CVE-2026-26199
  hdf5: Fix CVE-2026-26197
  python3-cbor2: Fix CVE-2026-26209
  python3-httplib2: correct CVE_PRODUCT mapping
  python3-cbor2: use exact CVE_PRODUCT mapping
  python3-web3: add CVE_PRODUCT mapping

Gyorgy Sarvari (3):
  python3-httpx: set CVE_PRODUCT
  python3-twisted: set CVE_PRODUCT
  smarty: extend CVE_PRODUCT

Hetvi Thakar (11):
  python3-ujson: Fix CVE-2026-32875
  python3-ujson: Fix CVE-2026-32874
  python3-ujson: Fix CVE-2026-44660
  python3-ujson: Fix CVE-2026-54911
  python3-simpleeval: Fix CVE-2026-32640
  python3-web3: Fix CVE-2026-40072
  libssh: Fix CVE-2026-59843
  libssh: Fix CVE-2026-59844
  libssh: Fix CVE-2026-59846
  libssh: Fix CVE-2026-59848
  libssh: Fix CVE-2026-59850

Hitendra Prajapati (4):
  libssh: set status for CVE-2026-15370
  libssh: set status for CVE-2026-59842
  libssh: fix for CVE-2026-59845, CVE-2026-59847
  opensc: fix for CVE-2026-40528

Vijay Anusuri (1):
  giflib: Fix CVE-2026-26740

 .../net-snmp/net-snmp_5.9.4.bb                |    2 +
 .../giflib/giflib/CVE-2026-26740.patch        |   40 +
 .../recipes-devtools/giflib/giflib_5.2.2.bb   |    1 +
 ...akage-when-compiled-with-C-17-1668-1.patch |  525 ++++++++
 .../{jsoncpp_1.9.5.bb => jsoncpp_1.9.7.bb}    |    6 +-
 .../rsyslog/rsyslog_8.2402.0.bb               |    2 +
 .../hdf5/files/CVE-2026-26197.patch           |   69 +
 .../hdf5/files/CVE-2026-26199.patch           |  675 ++++++++++
 meta-oe/recipes-support/hdf5/hdf5_1.14.4-3.bb |    2 +
 .../libssh/libssh/CVE-2026-59843.patch        |   84 ++
 .../libssh/libssh/CVE-2026-59844.patch        |   52 +
 .../libssh/libssh/CVE-2026-59845.patch        |   68 +
 .../libssh/libssh/CVE-2026-59846.patch        |   87 ++
 .../libssh/libssh/CVE-2026-59847-01.patch     |   39 +
 .../libssh/libssh/CVE-2026-59847-02.patch     |   35 +
 .../libssh/CVE-2026-59848-regression.patch    |   45 +
 .../libssh/libssh/CVE-2026-59848.patch        |  684 ++++++++++
 .../libssh/libssh/CVE-2026-59850.patch        |   40 +
 .../recipes-support/libssh/libssh_0.10.6.bb   |   12 +
 .../opensc/files/CVE-2026-40528.patch         |   44 +
 .../recipes-support/opensc/opensc_0.25.1.bb   |    1 +
 .../recipes-support/smarty/smarty_4.4.1.bb    |    2 +-
 .../python3-aiohttp/CVE-2025-69223.patch      |  848 ++++++++++++
 .../python3-aiohttp/CVE-2025-69224.patch      |  161 +++
 .../python3-aiohttp/CVE-2025-69227.patch      |  163 +++
 .../python3-aiohttp/CVE-2025-69229_p1.patch   |  113 ++
 .../python3-aiohttp/CVE-2025-69229_p2.patch   |  256 ++++
 .../python3-aiohttp/CVE-2026-22815.patch      | 1020 +++++++++++++++
 .../python3-aiohttp/CVE-2026-34513.patch      |  211 +++
 .../python3-aiohttp/CVE-2026-34514.patch      |   65 +
 .../python3-aiohttp/CVE-2026-34518.patch      |   64 +
 .../python3-aiohttp/CVE-2026-34993.patch      |  364 ++++++
 .../python/python3-aiohttp_3.9.5.bb           |   21 +
 .../CVE-2026-26209-dependent.patch            |   27 +
 .../python3-cbor2/CVE-2026-26209_p1.patch     |  173 +++
 .../python3-cbor2/CVE-2026-26209_p2.patch     |  435 +++++++
 .../python3-cbor2/CVE-2026-26209_p3.patch     |   81 ++
 .../python3-cbor2/CVE-2026-26209_p4.patch     |   28 +
 .../python/python3-cbor2_5.6.4.bb             |    7 +
 .../CVE-2026-15307.patch                      |  563 ++++++++
 .../CVE-2026-15337.patch                      |  163 +++
 .../CVE-2026-15830.patch                      | 1144 +++++++++++++++++
 .../python/python3-django_5.0.14.bb           |    3 +
 .../python3-filelock/CVE-2025-68146.patch     |   88 ++
 .../python3-filelock/CVE-2026-22701.patch     |   44 +
 .../python/python3-filelock_3.13.4.bb         |    4 +
 .../python3-httplib2/CVE-2026-59939.patch     |  745 +++++++++++
 .../python/python3-httplib2_0.22.0.bb         |    4 +
 .../python/python3-httpx_0.27.0.bb            |    2 +
 .../CVE-2026-32640_p1.patch                   |   55 +
 .../CVE-2026-32640_p2.patch                   |  187 +++
 .../CVE-2026-32640_p3.patch                   |  485 +++++++
 .../CVE-2026-32640_p4.patch                   |   90 ++
 .../python/python3-simpleeval_0.9.13.bb       |    8 +-
 .../python/python3-twisted_24.3.0.bb          |    2 +
 .../python/python3-ujson/CVE-2026-32874.patch |   61 +
 .../python/python3-ujson/CVE-2026-32875.patch |  199 +++
 .../python/python3-ujson/CVE-2026-44660.patch |  112 ++
 .../python/python3-ujson/CVE-2026-54911.patch |  267 ++++
 .../python/python3-ujson_5.9.0.bb             |    4 +
 .../python/python3-web3/CVE-2026-40072.patch  |  434 +++++++
 .../python/python3-web3_6.17.0.bb             |    3 +
 62 files changed, 11215 insertions(+), 4 deletions(-)
 create mode 100644 meta-oe/recipes-devtools/giflib/giflib/CVE-2026-26740.patch
 create mode 100644 meta-oe/recipes-devtools/jsoncpp/jsoncpp/0001-Fix-C-11-ABI-breakage-when-compiled-with-C-17-1668-1.patch
 rename meta-oe/recipes-devtools/jsoncpp/{jsoncpp_1.9.5.bb => jsoncpp_1.9.7.bb} (82%)
 create mode 100644 meta-oe/recipes-support/hdf5/files/CVE-2026-26197.patch
 create mode 100644 meta-oe/recipes-support/hdf5/files/CVE-2026-26199.patch
 create mode 100644 meta-oe/recipes-support/libssh/libssh/CVE-2026-59843.patch
 create mode 100644 meta-oe/recipes-support/libssh/libssh/CVE-2026-59844.patch
 create mode 100644 meta-oe/recipes-support/libssh/libssh/CVE-2026-59845.patch
 create mode 100644 meta-oe/recipes-support/libssh/libssh/CVE-2026-59846.patch
 create mode 100644 meta-oe/recipes-support/libssh/libssh/CVE-2026-59847-01.patch
 create mode 100644 meta-oe/recipes-support/libssh/libssh/CVE-2026-59847-02.patch
 create mode 100644 meta-oe/recipes-support/libssh/libssh/CVE-2026-59848-regression.patch
 create mode 100644 meta-oe/recipes-support/libssh/libssh/CVE-2026-59848.patch
 create mode 100644 meta-oe/recipes-support/libssh/libssh/CVE-2026-59850.patch
 create mode 100644 meta-oe/recipes-support/opensc/files/CVE-2026-40528.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2025-69223.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2025-69224.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2025-69227.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2025-69229_p1.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2025-69229_p2.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-22815.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-34513.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-34514.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-34518.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-34993.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-cbor2/CVE-2026-26209-dependent.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-cbor2/CVE-2026-26209_p1.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-cbor2/CVE-2026-26209_p2.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-cbor2/CVE-2026-26209_p3.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-cbor2/CVE-2026-26209_p4.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-django-5.0.14/CVE-2026-15307.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-django-5.0.14/CVE-2026-15337.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-django-5.0.14/CVE-2026-15830.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-filelock/CVE-2025-68146.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-filelock/CVE-2026-22701.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-httplib2/CVE-2026-59939.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-simpleeval/CVE-2026-32640_p1.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-simpleeval/CVE-2026-32640_p2.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-simpleeval/CVE-2026-32640_p3.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-simpleeval/CVE-2026-32640_p4.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-ujson/CVE-2026-32874.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-ujson/CVE-2026-32875.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-ujson/CVE-2026-44660.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-ujson/CVE-2026-54911.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-web3/CVE-2026-40072.patch

-- 
2.34.1



^ permalink raw reply	[flat|nested] 2+ messages in thread
end of thread, other threads:[~2026-09-07 15:57 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-09-07 11:11 [PATCH 00/44] Scarthgap pull request Anuj Mittal
2026-09-07 15:57 ` [oe] " Khem Raj

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.