[OE-core][wrynose v2 00/18] Pull request (cover letter only)

[OE-core][wrynose v2 00/18] Pull request (cover letter only)

[Yoann Congal]

This is the second version of my current wrynose pull request.
Link to PR v1: https://lore.kernel.org/openembedded-core/cover.1781275754.git.yoann.congal@smile.fr/

v1->v2:
* Removed cleanup patches related to python:
  * python3: use SKIPPED_TESTS instead of test skip patches
  * python3: use += instead of :append in SKIPPED_TESTS
  * python3: reference upstream ticket in a test skip

Passed a-full on autobuilder:
https://autobuilder.yoctoproject.org/valkyrie/#/builders/29/builds/4003

The following changes since commit 39d4d267906f8e18d44e1ba5da84acc4a5a85b61:

  pseudo: Update to version 1.9.8 (2026-06-05 12:59:40 +0200)

are available in the Git repository at:

  https://git.openembedded.org/openembedded-core-contrib stable/wrynose-next
  https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/wrynose-next

for you to fetch changes up to cd635307ab8460d05d13dbfb3f28efdbde6609cd:

  python3: sanitize userbase in _sysconfig_vars JSON to avoid host path leak (2026-06-15 10:50:53 +0200)

----------------------------------------------------------------

Abhishek Bachiphale (6):
  cups: fix CVE-2026-34978
  cups: fix CVE-2026-34979
  cups: fix CVE-2026-34980
  cups: fix CVE-2026-34990
  cups: fix CVE-2026-39314
  cups: fix CVE-2026-39316

Adarsh Jagadish Kamini (2):
  libpcap: fix error message on 32-bit integer overflow
  libsolv: fix CVE-2026-9150

Bin Cao (1):
  python3: sanitize userbase in _sysconfig_vars JSON to avoid host path
    leak

He Zhe (1):
  lttng-modules: Fix trace_hrtimer_start build failure

Jinfeng Wang (1):
  bind: upgrade 9.20.22 -> 9.20.23

Mark Jonas (1):
  libsdl2: Fix compilation error with DirectFB

Peter Marko (4):
  perf: make libraries for install_headers configurable
  go: upgrade 1.26.2 -> 1.26.3
  go: upgrade 1.26.3 -> 1.26.4
  python3: upgrade 3.14.4 -> 3.14.5

Sai Sneha (1):
  python3: Fix ThreadingMock call_count race condition

Wang Mingyu (1):
  xserver-xorg: upgrade 21.1.21 -> 21.1.22

 .../bind/{bind_9.20.22.bb => bind_9.20.23.bb} |   2 +-
 ...ssages-about-32-bit-integer-overflow.patch | 158 ++++++++
 .../libpcap/libpcap_1.10.6.bb                 |   4 +-
 .../go/{go-1.26.2.inc => go-1.26.4.inc}       |   3 +-
 ...e_1.26.2.bb => go-binary-native_1.26.4.bb} |   6 +-
 ..._1.26.2.bb => go-cross-canadian_1.26.4.bb} |   0
 ...{go-cross_1.26.2.bb => go-cross_1.26.4.bb} |   0
 ...osssdk_1.26.2.bb => go-crosssdk_1.26.4.bb} |   0
 ...runtime_1.26.2.bb => go-runtime_1.26.4.bb} |   0
 ...rcing-binutils-gold-dependency-on-aa.patch |  55 ---
 .../go/{go_1.26.2.bb => go_1.26.4.bb}         |   0
 ...shebang-overflow-on-python-config.py.patch |   2 +-
 ...eadingMock-call-count-race-condition.patch |  37 ++
 ...e-stdin-I-O-errors-same-way-as-maste.patch |   2 +-
 ...-qemu-wrapper-when-gathering-profile.patch |   2 +-
 ...sts-due-to-load-variability-on-YP-AB.patch |  10 +-
 ...kip-flaky-test_default_timeout-tests.patch |   4 +-
 ...est_sysconfig-for-posix_user-purelib.patch |   2 +-
 ..._fileno-test-due-to-load-variability.patch |   2 +-
 ...ctive_children-skip-problematic-test.patch |   2 +-
 ...1-test_cmd-skip-bang-completion-test.patch |   2 +-
 ...pes.test_find-skip-without-tools-sdk.patch |   2 +-
 ...le.py-correct-the-test-output-format.patch |   2 +-
 ..._active_thread-skip-problematic-test.patch |   2 +-
 ...-test_unix_console.test_cursor_back_.patch |   2 +-
 ...t_readline-skip-limited-history-test.patch |   6 +-
 ...kip-test_sysconfig.test_sysconfigdat.patch |   2 +-
 .../python/python3/makerace.patch             |   2 +-
 .../{python3_3.14.4.bb => python3_3.14.5.bb}  |  10 +-
 meta/recipes-extended/cups/cups.inc           |   6 +
 .../cups/cups/CVE-2026-34978.patch            | 120 ++++++
 .../cups/cups/CVE-2026-34979.patch            |  57 +++
 .../cups/cups/CVE-2026-34980.patch            |  88 +++++
 .../cups/cups/CVE-2026-34990.patch            | 348 ++++++++++++++++++
 .../cups/cups/CVE-2026-39314.patch            |  47 +++
 .../cups/cups/CVE-2026-39316.patch            |  42 +++
 .../libsolv/libsolv/CVE-2026-9150.patch       |  68 ++++
 .../libsolv/libsolv_0.7.36.bb                 |   1 +
 ...ix-CreateRenderer-callback-signature.patch |  58 +++
 .../libsdl2/libsdl2_2.32.10.bb                |   5 +-
 .../xorg-xserver/xserver-xorg.inc             |   2 +-
 ...org_21.1.21.bb => xserver-xorg_21.1.22.bb} |   2 +-
 ...ce-trace-noise-in-hrtimer_start-v7.1.patch | 103 ++++++
 .../lttng/lttng-modules_2.14.4.bb             |   1 +
 meta/recipes-kernel/perf/perf.bb              |   5 +-
 45 files changed, 1183 insertions(+), 91 deletions(-)
 rename meta/recipes-connectivity/bind/{bind_9.20.22.bb => bind_9.20.23.bb} (97%)
 create mode 100644 meta/recipes-connectivity/libpcap/libpcap/0001-Fix-error-messages-about-32-bit-integer-overflow.patch
 rename meta/recipes-devtools/go/{go-1.26.2.inc => go-1.26.4.inc} (83%)
 rename meta/recipes-devtools/go/{go-binary-native_1.26.2.bb => go-binary-native_1.26.4.bb} (80%)
 rename meta/recipes-devtools/go/{go-cross-canadian_1.26.2.bb => go-cross-canadian_1.26.4.bb} (100%)
 rename meta/recipes-devtools/go/{go-cross_1.26.2.bb => go-cross_1.26.4.bb} (100%)
 rename meta/recipes-devtools/go/{go-crosssdk_1.26.2.bb => go-crosssdk_1.26.4.bb} (100%)
 rename meta/recipes-devtools/go/{go-runtime_1.26.2.bb => go-runtime_1.26.4.bb} (100%)
 delete mode 100644 meta/recipes-devtools/go/go/0011-cmd-link-stop-forcing-binutils-gold-dependency-on-aa.patch
 rename meta/recipes-devtools/go/{go_1.26.2.bb => go_1.26.4.bb} (100%)
 create mode 100644 meta/recipes-devtools/python/python3/0001-Fix-ThreadingMock-call-count-race-condition.patch
 rename meta/recipes-devtools/python/{python3_3.14.4.bb => python3_3.14.5.bb} (97%)
 create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-34978.patch
 create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-34979.patch
 create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-34980.patch
 create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-34990.patch
 create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-39314.patch
 create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-39316.patch
 create mode 100644 meta/recipes-extended/libsolv/libsolv/CVE-2026-9150.patch
 create mode 100644 meta/recipes-graphics/libsdl2/libsdl2/0001-directfb-Fix-CreateRenderer-callback-signature.patch
 rename meta/recipes-graphics/xorg-xserver/{xserver-xorg_21.1.21.bb => xserver-xorg_21.1.22.bb} (92%)
 create mode 100644 meta/recipes-kernel/lttng/lttng-modules/0001-fix-hrtimer-Reduce-trace-noise-in-hrtimer_start-v7.1.patch