From: Yoann Congal <yoann.congal@smile.fr>
To: openembedded-core@lists.openembedded.org
Subject: [OE-core][scarthgap 00/31] Patch review
Date: Sun, 26 Jul 2026 10:29:24 +0200 [thread overview]
Message-ID: <cover.1785054429.git.yoann.congal@smile.fr> (raw)
Please review this set of changes for scarthgap and have comments back by
end of day Tuesday, July 28.
Passed a-full on autobuilder:
https://autobuilder.yoctoproject.org/valkyrie/#/builders/29/builds/4287
The following changes since commit 3217490cc554069ae53aa54cf8ad7327ce85fa10:
glibc-testsuite: Do not generate SPDX (2026-07-21 20:32:51 +0200)
are available in the Git repository at:
https://git.openembedded.org/openembedded-core-contrib stable/scarthgap-nut
https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/scarthgap-nut
for you to fetch changes up to 762321beb0260b1411c7f98f13458ec99a118280:
bzip2: fix 'bzip2 --version > /tmp/aaa 2>&1' hang (2026-07-25 23:57:45 +0200)
----------------------------------------------------------------
Bruce Ashfield (2):
linux-yocto/6.6: update to v6.6.143
linux-yocto/6.6: update to v6.6.144
Darsh Kelaiya (1):
gzip: Fix CVE-2026-41991
Deepak Rathore (13):
cups: fix CVE-2026-27447
cups: fix CVE-2026-41079
cups: fix CVE-2026-34978
cups: fix CVE-2026-34980
cups: fix CVE-2026-34979
cups: fix CVE-2026-34990
cups: fix CVE-2026-39314
cups: fix CVE-2026-39316
glib-2.0: fix CVE-2026-58010
glib-2.0: fix CVE-2026-58011
glib-2.0: fix CVE-2026-58012
glib-2.0: fix CVE-2026-58013
glib-2.0: fix CVE-2026-58014
Devansh Patel (8):
libxml2: Fix CVE-2026-11979
openssh: Fix CVE-2026-59999
openssh: Fix CVE-2026-59997
openssh: Fix CVE-2026-59996
openssh: Fix CVE-2026-59995
openssh: Fix CVE-2026-60001
openssh: Fix CVE-2026-60002
openssh: Fix CVE-2026-60000
Enoch Ng (1):
libxpm: fix CVE-2026-4367
Hongxu Jia (1):
bzip2: fix 'bzip2 --version > /tmp/aaa 2>&1' hang
Sudhir Dumbhare (3):
gnutls: set status for CVE-2026-3832
gnutls: fix CVE-2026-42009
libpng: Fix CVE-2026-34757
Yoann Congal (2):
scripts/install-buildtools: Update to 5.0.19
linux-yocto/6.6: update CVE exclusions (6.6.144)
.../openssh/openssh/CVE-2026-59995.patch | 42 +
.../openssh/openssh/CVE-2026-59996.patch | 37 +
.../openssh/openssh/CVE-2026-59997.patch | 58 +
.../openssh/openssh/CVE-2026-59999.patch | 36 +
.../openssh/openssh/CVE-2026-60000.patch | 140 ++
.../openssh/openssh/CVE-2026-60001.patch | 130 ++
.../openssh/openssh/CVE-2026-60002.patch | 226 +++
.../openssh/openssh_9.6p1.bb | 7 +
.../glib-2.0/glib-2.0/CVE-2026-58010.patch | 113 ++
.../glib-2.0/glib-2.0/CVE-2026-58011.patch | 78 ++
.../glib-2.0/glib-2.0/CVE-2026-58012.patch | 228 ++++
.../glib-2.0/glib-2.0/CVE-2026-58013.patch | 140 ++
.../glib-2.0/glib-2.0/CVE-2026-58014.patch | 106 ++
meta/recipes-core/glib-2.0/glib-2.0_2.78.6.bb | 5 +
.../libxml/libxml2/CVE-2026-11979.patch | 70 +
meta/recipes-core/libxml/libxml2_2.12.10.bb | 1 +
...-fix-bzip2-version-tmp-aaa-will-hang.patch | 65 +
meta/recipes-extended/bzip2/bzip2_1.0.8.bb | 1 +
meta/recipes-extended/cups/cups.inc | 12 +
.../cups/CVE-2026-27447-regression_p1.patch | 33 +
.../cups/CVE-2026-27447-regression_p2.patch | 46 +
.../cups/cups/CVE-2026-27447.patch | 108 ++
.../cups/cups/CVE-2026-34978.patch | 107 ++
.../cups/cups/CVE-2026-34979.patch | 61 +
.../cups/CVE-2026-34980-regression_p1.patch | 31 +
.../cups/CVE-2026-34980-regression_p2.patch | 75 +
.../cups/cups/CVE-2026-34980.patch | 85 ++
.../cups/cups/CVE-2026-34990.patch | 351 +++++
.../cups/cups/CVE-2026-39314.patch | 45 +
.../cups/cups/CVE-2026-39316.patch | 40 +
.../cups/cups/CVE-2026-41079.patch | 71 +
.../gzip/gzip-1.13/CVE-2026-41991.patch | 75 +
meta/recipes-extended/gzip/gzip_1.13.bb | 1 +
...67-Out-of-bounds-read-in-xpmNextWord.patch | 140 ++
.../xorg-lib/libxpm_3.5.17.bb | 1 +
.../linux/cve-exclusion_6.6.inc | 1216 ++++++++++++++---
.../linux/linux-yocto-rt_6.6.bb | 6 +-
.../linux/linux-yocto-tiny_6.6.bb | 6 +-
meta/recipes-kernel/linux/linux-yocto_6.6.bb | 28 +-
.../libpng/files/CVE-2026-34757_p1.patch | 521 +++++++
.../libpng/files/CVE-2026-34757_p2.patch | 484 +++++++
.../libpng/libpng_1.6.42.bb | 4 +-
.../gnutls/gnutls/CVE-2026-42009_p1.patch | 66 +
.../gnutls/gnutls/CVE-2026-42009_p2.patch | 47 +
meta/recipes-support/gnutls/gnutls_3.8.4.bb | 4 +
scripts/install-buildtools | 4 +-
46 files changed, 4964 insertions(+), 187 deletions(-)
create mode 100644 meta/recipes-connectivity/openssh/openssh/CVE-2026-59995.patch
create mode 100644 meta/recipes-connectivity/openssh/openssh/CVE-2026-59996.patch
create mode 100644 meta/recipes-connectivity/openssh/openssh/CVE-2026-59997.patch
create mode 100644 meta/recipes-connectivity/openssh/openssh/CVE-2026-59999.patch
create mode 100644 meta/recipes-connectivity/openssh/openssh/CVE-2026-60000.patch
create mode 100644 meta/recipes-connectivity/openssh/openssh/CVE-2026-60001.patch
create mode 100644 meta/recipes-connectivity/openssh/openssh/CVE-2026-60002.patch
create mode 100644 meta/recipes-core/glib-2.0/glib-2.0/CVE-2026-58010.patch
create mode 100644 meta/recipes-core/glib-2.0/glib-2.0/CVE-2026-58011.patch
create mode 100644 meta/recipes-core/glib-2.0/glib-2.0/CVE-2026-58012.patch
create mode 100644 meta/recipes-core/glib-2.0/glib-2.0/CVE-2026-58013.patch
create mode 100644 meta/recipes-core/glib-2.0/glib-2.0/CVE-2026-58014.patch
create mode 100644 meta/recipes-core/libxml/libxml2/CVE-2026-11979.patch
create mode 100644 meta/recipes-extended/bzip2/bzip2/0001-fix-bzip2-version-tmp-aaa-will-hang.patch
create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-27447-regression_p1.patch
create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-27447-regression_p2.patch
create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-27447.patch
create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-34978.patch
create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-34979.patch
create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-34980-regression_p1.patch
create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-34980-regression_p2.patch
create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-34980.patch
create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-34990.patch
create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-39314.patch
create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-39316.patch
create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-41079.patch
create mode 100644 meta/recipes-extended/gzip/gzip-1.13/CVE-2026-41991.patch
create mode 100644 meta/recipes-graphics/xorg-lib/libxpm/0001-Fix-CVE-2026-4367-Out-of-bounds-read-in-xpmNextWord.patch
create mode 100644 meta/recipes-multimedia/libpng/files/CVE-2026-34757_p1.patch
create mode 100644 meta/recipes-multimedia/libpng/files/CVE-2026-34757_p2.patch
create mode 100644 meta/recipes-support/gnutls/gnutls/CVE-2026-42009_p1.patch
create mode 100644 meta/recipes-support/gnutls/gnutls/CVE-2026-42009_p2.patch
next reply other threads:[~2026-07-26 8:30 UTC|newest]
Thread overview: 32+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-07-26 8:29 Yoann Congal [this message]
2026-07-26 8:29 ` [OE-core][scarthgap 01/31] scripts/install-buildtools: Update to 5.0.19 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 02/31] linux-yocto/6.6: update to v6.6.143 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 03/31] linux-yocto/6.6: update to v6.6.144 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 04/31] linux-yocto/6.6: update CVE exclusions (6.6.144) Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 05/31] libxml2: Fix CVE-2026-11979 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 06/31] openssh: Fix CVE-2026-59999 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 07/31] openssh: Fix CVE-2026-59997 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 08/31] openssh: Fix CVE-2026-59996 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 09/31] openssh: Fix CVE-2026-59995 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 10/31] openssh: Fix CVE-2026-60001 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 11/31] openssh: Fix CVE-2026-60002 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 12/31] openssh: Fix CVE-2026-60000 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 13/31] cups: fix CVE-2026-27447 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 14/31] cups: fix CVE-2026-41079 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 15/31] cups: fix CVE-2026-34978 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 16/31] cups: fix CVE-2026-34980 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 17/31] cups: fix CVE-2026-34979 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 18/31] cups: fix CVE-2026-34990 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 19/31] cups: fix CVE-2026-39314 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 20/31] cups: fix CVE-2026-39316 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 21/31] libxpm: fix CVE-2026-4367 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 22/31] gnutls: set status for CVE-2026-3832 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 23/31] gnutls: fix CVE-2026-42009 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 24/31] libpng: Fix CVE-2026-34757 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 25/31] glib-2.0: fix CVE-2026-58010 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 26/31] glib-2.0: fix CVE-2026-58011 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 27/31] glib-2.0: fix CVE-2026-58012 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 28/31] glib-2.0: fix CVE-2026-58013 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 29/31] glib-2.0: fix CVE-2026-58014 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 30/31] gzip: Fix CVE-2026-41991 Yoann Congal
2026-07-26 8:29 ` [OE-core][scarthgap 31/31] bzip2: fix 'bzip2 --version > /tmp/aaa 2>&1' hang Yoann Congal
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=cover.1785054429.git.yoann.congal@smile.fr \
--to=yoann.congal@smile.fr \
--cc=openembedded-core@lists.openembedded.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox