[OE-core][scarthgap 0/6] Patch review

[Steve Sakoman <steve@sakoman.com>]

Please review this set of changes for scarthgap and have comments back by
end of day Friday, October 31

Passed a-full on autobuilder:

https://autobuilder.yoctoproject.org/valkyrie/#/builders/29/builds/2655

The following changes since commit 0f98fecda8a0436f760e6fd9f3b7eb510e5258b8:

  curl: only set CA bundle in target build (2025-10-24 06:41:43 -0700)

are available in the Git repository at:

  https://git.openembedded.org/openembedded-core-contrib stable/scarthgap-nut
  https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/scarthgap-nut

David Nyström (1):
  lz4: fix CVE-2025-62813

Hongxu Jia (1):
  u-boot: fix CVE-2024-42040

Praveen Kumar (1):
  bind: upgrade 9.18.33 -> 9.18.41

Yash Shinde (2):
  binutils: fix CVE-2025-11081
  binutils: fix CVE-2025-8225

Yogita Urade (1):
  tiff: ignore CVE-2025-8961

 .../u-boot/files/CVE-2024-42040.patch         | 56 +++++++++++++
 meta/recipes-bsp/u-boot/u-boot-common.inc     |  1 +
 .../bind/{bind_9.18.33.bb => bind_9.18.41.bb} |  2 +-
 .../binutils/binutils-2.42.inc                |  2 +
 .../binutils/0026-CVE-2025-11081.patch        | 84 +++++++++++++++++++
 .../binutils/0027-CVE-2025-8225.patch         | 47 +++++++++++
 meta/recipes-multimedia/libtiff/tiff_4.6.0.bb |  2 +-
 .../lz4/files/CVE-2025-62813.patch            | 73 ++++++++++++++++
 meta/recipes-support/lz4/lz4_1.9.4.bb         |  5 +-
 9 files changed, 268 insertions(+), 4 deletions(-)
 create mode 100644 meta/recipes-bsp/u-boot/files/CVE-2024-42040.patch
 rename meta/recipes-connectivity/bind/{bind_9.18.33.bb => bind_9.18.41.bb} (97%)
 create mode 100644 meta/recipes-devtools/binutils/binutils/0026-CVE-2025-11081.patch
 create mode 100644 meta/recipes-devtools/binutils/binutils/0027-CVE-2025-8225.patch
 create mode 100644 meta/recipes-support/lz4/files/CVE-2025-62813.patch

-- 
2.43.0