[OE-core][whinlatter 00/15] Pull request (cover letter only)

Yoann Congal
2026-01-23T18:20:39Z

Those are the patches from the last patch review:
https://lore.kernel.org/openembedded-core/cover.1768906687.git.yoann.congal@smile.fr/
... with cherry-pick reference added to "libpng: upgrade 1.6.52 -> 1.6.53"

Passed a-full on autobuilder:
https://autobuilder.yoctoproject.org/valkyrie/?#/builders/29/builds/3117

The following changes since commit dd10706cfafb5574b7cf316fca2300d166ef71b0:

build-appliance-image: Update to whinlatter head revisions (2026-01-12 10:58:53 +0000)

are available in the Git repository at:

https://git.openembedded.org/openembedded-core-contrib stable/whinlatter-next
https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/whinlatter-next

for you to fetch changes up to b4e7819b99d9c1a8995eba87e6f466fd8c77e14a:

libarchive: upgrade 3.8.4 -> 3.8.5 (2026-01-23 15:27:32 +0100)

----------------------------------------------------------------

Alexander Kanavin (3):
libpng: upgrade 1.6.52 -> 1.6.53
ffmpeg: add a (possible) build race fix
ffmpeg: fix a build race, hopefully for real this time

Paul Barker (1):
selftest: devtool: Set PATH when running pseudo

Peter Marko (9):
util-linux: patch CVE-2025-14104
gnupg: patch CVE-2025-68973
curl: patch CVE-2025-13034
curl: patch CVE-2025-14017
curl: patch CVE-2025-14524
curl: patch CVE-2025-14819
curl: patch CVE-2025-15079
curl: patch CVE-2025-15224
libarchive: upgrade 3.8.4 -> 3.8.5

Richard Purdie (2):
pseudo: Update to pull in openat2 and efault return code changes
pseudo: Update to pull in 'makewrappers: Fix EFAULT implementation'

meta/lib/oeqa/selftest/cases/devtool.py | 5 +-
meta/recipes-core/util-linux/util-linux.inc | 2 +
.../util-linux/CVE-2025-14104-01.patch | 33 +++++
.../util-linux/CVE-2025-14104-02.patch | 28 +++++
meta/recipes-devtools/pseudo/pseudo_git.bb | 2 +-
...ibarchive_3.8.4.bb => libarchive_3.8.5.bb} | 2 +-
...k-Consolidate-pattern-rules-for-comp.patch | 106 ++++++++++++++++
...s-Fix-double-build-by-disabling-.d-f.patch | 78 ++++++++++++
...ak-ensure-target-directories-are-cre.patch | 43 +++++++
meta/recipes-multimedia/ffmpeg/ffmpeg_8.0.bb | 6 +-
.../{libpng_1.6.52.bb => libpng_1.6.53.bb} | 2 +-
.../curl/curl/CVE-2025-13034.patch | 37 ++++++
.../curl/curl/CVE-2025-14017.patch | 116 ++++++++++++++++++
.../curl/curl/CVE-2025-14524.patch | 40 ++++++
.../curl/curl/CVE-2025-14819.patch | 73 +++++++++++
.../curl/curl/CVE-2025-15079.patch | 32 +++++
.../curl/curl/CVE-2025-15224.patch | 31 +++++
meta/recipes-support/curl/curl_8.17.0.bb | 6 +
.../gnupg/gnupg/CVE-2025-68973.patch | 108 ++++++++++++++++
meta/recipes-support/gnupg/gnupg_2.5.11.bb | 1 +
20 files changed, 745 insertions(+), 6 deletions(-)
create mode 100644 meta/recipes-core/util-linux/util-linux/CVE-2025-14104-01.patch
create mode 100644 meta/recipes-core/util-linux/util-linux/CVE-2025-14104-02.patch
rename meta/recipes-extended/libarchive/{libarchive_3.8.4.bb => libarchive_3.8.5.bb} (96%)
create mode 100644 meta/recipes-multimedia/ffmpeg/ffmpeg/0001-ffbuild-commonmak-Consolidate-pattern-rules-for-comp.patch
create mode 100644 meta/recipes-multimedia/ffmpeg/ffmpeg/0001-fftools-resources-Fix-double-build-by-disabling-.d-f.patch
create mode 100644 meta/recipes-multimedia/ffmpeg/ffmpeg/0002-ffbuild-common.mak-ensure-target-directories-are-cre.patch
rename meta/recipes-multimedia/libpng/{libpng_1.6.52.bb => libpng_1.6.53.bb} (97%)
create mode 100644 meta/recipes-support/curl/curl/CVE-2025-13034.patch
create mode 100644 meta/recipes-support/curl/curl/CVE-2025-14017.patch
create mode 100644 meta/recipes-support/curl/curl/CVE-2025-14524.patch
create mode 100644 meta/recipes-support/curl/curl/CVE-2025-14819.patch
create mode 100644 meta/recipes-support/curl/curl/CVE-2025-15079.patch
create mode 100644 meta/recipes-support/curl/curl/CVE-2025-15224.patch
create mode 100644 meta/recipes-support/gnupg/gnupg/CVE-2025-68973.patch