* [OE-core][scarthgap 00/35] Pull request (cover letter only)
@ 2026-08-21 15:07 Fabien Thomas
0 siblings, 0 replies; 2+ messages in thread
From: Fabien Thomas @ 2026-08-21 15:07 UTC (permalink / raw)
To: openembedded-core; +Cc: Paul Barker
Those are the patches from the last patch review:
https://lore.kernel.org/openembedded-core/cover.1787154074.git.fabien.thomas@smile.fr/
From this series, two patches were removed:
* curl: fix CVE-2026-6429
* curl: fix CVE-2026-7168
See : https://lore.kernel.org/openembedded-core/DKTP3XEC9P8X.3NH15CYC35F07@smile.fr/
Passed a-full on autobuilder:
https://autobuilder.yoctoproject.org/valkyrie/#/builders/29/builds/4529
The following changes since commit 543550522f831479f07d332a40ba343c53ae1065:
openssh: set status for CVE-2026-59998 (2026-07-28 15:30:13 +0200)
are available in the Git repository at:
https://git.openembedded.org/openembedded-core-contrib stable/scarthgap-next
https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/scarthgap-next
for you to fetch changes up to 735dd46d8557280b0a4a79dd5d5bd0467a18fe5f:
linux-yocto/6.6: update to v6.6.147 (2026-08-20 15:11:42 +0200)
----------------------------------------------------------------
Adarsh Jagadish Kamini (1):
gnutls: fix CVE-2026-3833
Alexander Kanavin (1):
perf: drop newt from tui build requirements
Amaury Couderc (1):
python3: fix CVE-2026-7210
Bruce Ashfield (1):
linux-yocto/6.6: update to v6.6.147
David Nyström (1):
libssh2: Fix CVE-2025-15661
Deepak Rathore (13):
expat: fix CVE-2026-56403
expat: fix CVE-2026-56408
expat: fix CVE-2026-56404
expat: fix CVE-2026-56405
expat: fix CVE-2026-56410
expat: fix CVE-2026-56406
expat: fix CVE-2026-56409
expat: fix CVE-2026-56411
expat: fix CVE-2026-56407
expat: fix CVE-2026-56132
curl: fix CVE-2026-5545
curl: fix CVE-2026-6253
curl: fix CVE-2026-4873
Himanshu Jadon (1):
python3-pip: set CVE_PRODUCT
Jaipaul Cheernam (4):
libssh2: fix CVE-2026-66032
libssh2: fix CVE-2026-66033
libssh2: fix CVE-2026-66034
libssh2: fix CVE-2026-66035
Maik Otto (1):
u-boot: Set CVE_PRODUCT
Marta Rybczynska (1):
flex: update CVE_PRODUCT
Peter Marko (5):
xserver-org: update CVE_PRODUCT
shadow: set CVE_PRODUCT
sudo: set CVE_PRODUCT
busybox: patch CVE-2026-38754
libsndfile1: patch CVE-2026-37555
mark.yang (5):
python3-pyopenssl: set CVE_PRODUCT
python3-idna: set CVE_PRODUCT
python3-certifi: set CVE_PRODUCT
python3-xmltodict: set CVE_PRODUCT
python3-pyyaml: set CVE_PRODUCT
meta/recipes-bsp/u-boot/u-boot.inc | 2 +
.../busybox/busybox/CVE-2026-38754.patch | 155 +++++++
meta/recipes-core/busybox/busybox_1.36.1.bb | 1 +
.../expat/expat/CVE-2026-56132_p1.patch | 80 ++++
.../expat/expat/CVE-2026-56132_p2.patch | 60 +++
.../expat/expat/CVE-2026-56132_p3.patch | 74 ++++
.../expat/expat/CVE-2026-56132_p4.patch | 60 +++
.../expat/expat/CVE-2026-56132_p5.patch | 56 +++
.../expat/expat/CVE-2026-56403_p1.patch | 81 ++++
.../expat/expat/CVE-2026-56403_p2.patch | 52 +++
.../expat/expat/CVE-2026-56404.patch | 45 ++
.../expat/expat/CVE-2026-56405.patch | 30 ++
.../expat/CVE-2026-56406-dependent.patch | 59 +++
.../expat/expat/CVE-2026-56406.patch | 34 ++
.../expat/expat/CVE-2026-56407.patch | 41 ++
.../expat/expat/CVE-2026-56408.patch | 29 ++
.../expat/expat/CVE-2026-56409.patch | 51 +++
.../expat/expat/CVE-2026-56410_p1.patch | 46 ++
.../expat/expat/CVE-2026-56410_p2.patch | 39 ++
.../expat/expat/CVE-2026-56411.patch | 50 +++
meta/recipes-core/expat/expat_2.6.4.bb | 17 +
meta/recipes-devtools/flex/flex_2.6.4.bb | 2 +-
.../python/python3-certifi_2024.2.2.bb | 2 +
.../python/python3-idna_3.7.bb | 2 +
.../python/python3-pip_24.0.bb | 2 +
.../python/python3-pyopenssl_24.0.0.bb | 1 +
.../python/python3-pyyaml_6.0.1.bb | 2 +
.../python/python3-xmltodict_0.13.0.bb | 2 +
.../python/python3/CVE-2026-7210.patch | 148 +++++++
.../python/python3_3.12.13.bb | 1 +
meta/recipes-extended/shadow/shadow.inc | 2 +
meta/recipes-extended/sudo/sudo_1.9.17p2.bb | 2 +
.../xorg-xserver/xserver-xorg.inc | 2 +-
.../linux/linux-yocto-rt_6.6.bb | 6 +-
.../linux/linux-yocto-tiny_6.6.bb | 6 +-
meta/recipes-kernel/linux/linux-yocto_6.6.bb | 28 +-
meta/recipes-kernel/perf/perf.bb | 5 +-
.../libsndfile1/CVE-2026-37555.patch | 44 ++
.../libsndfile/libsndfile1_1.2.2.bb | 1 +
.../curl/curl/CVE-2026-4873.patch | 58 +++
.../curl/curl/CVE-2026-5545.patch | 42 ++
.../curl/curl/CVE-2026-6253.patch | 392 ++++++++++++++++++
meta/recipes-support/curl/curl_8.7.1.bb | 3 +
.../gnutls/gnutls/CVE-2026-3833.patch | 90 ++++
meta/recipes-support/gnutls/gnutls_3.8.4.bb | 1 +
.../libssh2/libssh2/CVE-2025-15661-1.patch | 45 ++
.../libssh2/libssh2/CVE-2025-15661-2.patch | 131 ++++++
.../libssh2/libssh2/CVE-2025-15661-3.patch | 57 +++
.../libssh2/libssh2/CVE-2026-66032.patch | 36 ++
.../libssh2/libssh2/CVE-2026-66033.patch | 45 ++
.../libssh2/libssh2/CVE-2026-66034.patch | 40 ++
.../libssh2/libssh2/CVE-2026-66035.patch | 56 +++
.../recipes-support/libssh2/libssh2_1.11.1.bb | 7 +
53 files changed, 2297 insertions(+), 26 deletions(-)
create mode 100644 meta/recipes-core/busybox/busybox/CVE-2026-38754.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-56132_p1.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-56132_p2.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-56132_p3.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-56132_p4.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-56132_p5.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-56403_p1.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-56403_p2.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-56404.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-56405.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-56406-dependent.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-56406.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-56407.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-56408.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-56409.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-56410_p1.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-56410_p2.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-56411.patch
create mode 100644 meta/recipes-devtools/python/python3/CVE-2026-7210.patch
create mode 100644 meta/recipes-multimedia/libsndfile/libsndfile1/CVE-2026-37555.patch
create mode 100644 meta/recipes-support/curl/curl/CVE-2026-4873.patch
create mode 100644 meta/recipes-support/curl/curl/CVE-2026-5545.patch
create mode 100644 meta/recipes-support/curl/curl/CVE-2026-6253.patch
create mode 100644 meta/recipes-support/gnutls/gnutls/CVE-2026-3833.patch
create mode 100644 meta/recipes-support/libssh2/libssh2/CVE-2025-15661-1.patch
create mode 100644 meta/recipes-support/libssh2/libssh2/CVE-2025-15661-2.patch
create mode 100644 meta/recipes-support/libssh2/libssh2/CVE-2025-15661-3.patch
create mode 100644 meta/recipes-support/libssh2/libssh2/CVE-2026-66032.patch
create mode 100644 meta/recipes-support/libssh2/libssh2/CVE-2026-66033.patch
create mode 100644 meta/recipes-support/libssh2/libssh2/CVE-2026-66034.patch
create mode 100644 meta/recipes-support/libssh2/libssh2/CVE-2026-66035.patch
^ permalink raw reply [flat|nested] 2+ messages in thread
* [OE-core][scarthgap 00/35] Pull request (cover letter only)
@ 2026-09-10 6:47 Yoann Congal
0 siblings, 0 replies; 2+ messages in thread
From: Yoann Congal @ 2026-09-10 6:47 UTC (permalink / raw)
To: openembedded-core; +Cc: Paul Barker, Richard Purdie
Those are the patches from the last patch review:
https://lore.kernel.org/all/cover.1788787321.git.yoann.congal@smile.fr/
(No review, no changes)
Passed a-full on autobuilder (Same as patch review request):
* qemuppc (AB disk space issue) retried in https://autobuilder.yoctoproject.org/valkyrie/?#/builders/31/builds/1662
* pkgman-non-rpm (AB disk space issue) retried in https://autobuilder.yoctoproject.org/valkyrie/?#/builders/67/builds/4598
* oe-selftest-debian: AB disk space issue in https://autobuilder.yoctoproject.org/valkyrie/?#/builders/35/builds/4777
but "Bitbake Selftest" passed.
Retried in https://autobuilder.yoctoproject.org/valkyrie/?#/builders/35/builds/4779
but, here, "Bitbake Selftest" failed on github infra issue (see #16415 – AB-INT: github infrastructure issues)
* oe-selftest-fedora failed with 16206 – [scarthgap] AB-INT: runtime_test.SystemTap.test_crosstap_* failures
retried in https://autobuilder.yoctoproject.org/valkyrie/?#/builders/48/builds/4594
(TL;DR: No new bug seen in test with this series.)
The following changes since commit 048f2f8e8864ae5861afe95ea52efc0354bfc18c:
build-appliance-image: Update to scarthgap head revision (2026-09-04 10:39:17 +0100)
are available in the Git repository at:
https://git.openembedded.org/openembedded-core-contrib stable/scarthgap-next
https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/scarthgap-next
for you to fetch changes up to 5b4292b3fc1586709dcdc27d7cfa3d880e6f338a:
gnutls: Backport fix for CVE-2026-33846 (2026-09-06 01:25:16 +0200)
----------------------------------------------------------------
Anil Dongare (1):
apt: mark CVE-2011-3374 as not-applicable-config
Bruce Ashfield (3):
linux-yocto/6.6: update to v6.6.150
linux-yocto/6.6: update to v6.6.151
linux-yocto/6.6: fix tiny build
Darsh Kelaiya (3):
python3-git: fix CVE-2026-42284
python3-git: fix CVE-2026-44243
python3-git: fix CVE-2026-44244
Eilís 'pidge' Ní Fhlannagáin (1):
ovmf: fix tpm PACKAGECONFIG to use TPM2_ENABLE
Hetvi Thakar (3):
python3-idna: Fix CVE-2026-45409
python3-mako: Fix CVE-2026-41205
libssh2: Fix CVE-2026-58051
Jaipaul Cheernam (2):
util-linux: Fix CVE-2026-3184
expat: set CVE_STATUS for CVE-2026-72522
Jakub Szczudlo (Nokia) (2):
gnutls: fix CVE-2026-42010
gnutls: fix for CVE-2026-42011
Peter Marko (3):
libevent: set status for CVE-2026-63380
alsa-lib: patch CVE-2026-56109
busybox: patch CVE-2024-58251
Pratik Farkase (1):
libevent: merge inherit statements
Roland Kovacs (1):
gnutls: Backport fix for CVE-2026-33846
Ross Burton (2):
libevent: use libtool to install test binaries
libevent: upgrade 2.1.12 -> 2.1.13
Tim Orling (9):
python3-babel: fix CVE_PRODUCT
python3-click: fix CVE_PRODUCT
python3-dbusmock: fix CVE_PRODUCT
python3-attrs: fix CVE_PRODUCT
python3-numpy: fix CVE_PRODUCT
python3-pycryptodome: fix CVE_PRODUCT
python3-wheel: fix CVE_PRODUCT
python3-pycryptodomex: fix CVE_PRODUCT
python3-git: fix CVE_PRODUCT
Vijay Anusuri (4):
p11-kit: Fix CVE-2026-13757
libxfont2: Fix CVE-2026-56001
libxfont2: Fix CVE-2026-56002
libxfont2: Fix CVE-2026-56003
.../busybox/busybox/CVE-2024-58251.patch | 51 ++++
meta/recipes-core/busybox/busybox_1.36.1.bb | 1 +
meta/recipes-core/expat/expat_2.6.4.bb | 3 +
meta/recipes-core/ovmf/ovmf_git.bb | 2 +-
meta/recipes-core/util-linux/util-linux.inc | 1 +
.../util-linux/util-linux/CVE-2026-3184.patch | 61 ++++
meta/recipes-devtools/apt/apt_2.6.1.bb | 3 +
.../python/python3-attrs_23.2.0.bb | 2 +
.../python/python3-babel_2.14.0.bb | 2 +
.../python/python3-click_8.1.7.bb | 2 +
.../python/python3-dbusmock_0.31.1.bb | 2 +
.../python/python3-git/CVE-2026-42284.patch | 37 +++
.../python3-git/CVE-2026-44243_p1.patch | 136 +++++++++
.../python3-git/CVE-2026-44243_p2.patch | 86 ++++++
.../python3-git/CVE-2026-44244_p1.patch | 104 +++++++
.../python3-git/CVE-2026-44244_p2.patch | 30 ++
.../python/python3-git_3.1.42.bb | 8 +
.../python3-idna/CVE-2026-45409_p1.patch | 75 +++++
.../python3-idna/CVE-2026-45409_p2.patch | 48 ++++
.../python3-idna/CVE-2026-45409_p3.patch | 72 +++++
.../python/python3-idna_3.7.bb | 5 +
.../python/python3-mako/CVE-2026-41205.patch | 110 ++++++++
.../python/python3-mako_1.3.2.bb | 2 +
.../python/python3-numpy_1.26.4.bb | 2 +
.../python/python3-pycryptodome_3.20.0.bb | 1 +
.../python/python3-pycryptodomex_3.20.0.bb | 2 +
.../python/python3-wheel_0.42.0.bb | 2 +
.../xorg-lib/libxfont2/CVE-2026-56001.patch | 75 +++++
.../xorg-lib/libxfont2/CVE-2026-56002.patch | 138 +++++++++
.../xorg-lib/libxfont2/CVE-2026-56003.patch | 114 ++++++++
.../xorg-lib/libxfont2_2.0.6.bb | 5 +
.../linux/linux-yocto-rt_6.6.bb | 6 +-
.../linux/linux-yocto-tiny_6.6.bb | 6 +-
meta/recipes-kernel/linux/linux-yocto_6.6.bb | 28 +-
.../alsa/alsa-lib/CVE-2026-56109.patch | 33 +++
.../alsa/alsa-lib_1.2.11.bb | 1 +
.../gnutls/gnutls/CVE-2026-33846.patch | 66 +++++
.../gnutls/gnutls/CVE-2026-42010.patch | 41 +++
.../gnutls/gnutls/CVE-2026-42011_p1.patch | 43 +++
.../gnutls/gnutls/CVE-2026-42011_p2.patch | 141 ++++++++++
meta/recipes-support/gnutls/gnutls_3.8.4.bb | 4 +
....c-patch-out-tests-that-require-a-wo.patch | 8 +-
...ncrease-default-timeval-tolerance-50.patch | 10 +-
...-monotonic_prc_fallback-as-retriable.patch | 11 +-
...ts-are-marked-failed-only-when-all-a.patch | 9 +-
.../libevent/Makefile-missing-test-dir.patch | 14 +-
...{libevent_2.1.12.bb => libevent_2.1.13.bb} | 16 +-
.../libssh2/libssh2/CVE-2026-58051.patch | 34 +++
.../recipes-support/libssh2/libssh2_1.11.1.bb | 1 +
.../p11-kit/files/CVE-2026-13757.patch | 265 ++++++++++++++++++
.../recipes-support/p11-kit/p11-kit_0.25.3.bb | 1 +
51 files changed, 1863 insertions(+), 57 deletions(-)
create mode 100644 meta/recipes-core/busybox/busybox/CVE-2024-58251.patch
create mode 100644 meta/recipes-core/util-linux/util-linux/CVE-2026-3184.patch
create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-42284.patch
create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-44243_p1.patch
create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-44243_p2.patch
create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-44244_p1.patch
create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-44244_p2.patch
create mode 100644 meta/recipes-devtools/python/python3-idna/CVE-2026-45409_p1.patch
create mode 100644 meta/recipes-devtools/python/python3-idna/CVE-2026-45409_p2.patch
create mode 100644 meta/recipes-devtools/python/python3-idna/CVE-2026-45409_p3.patch
create mode 100644 meta/recipes-devtools/python/python3-mako/CVE-2026-41205.patch
create mode 100644 meta/recipes-graphics/xorg-lib/libxfont2/CVE-2026-56001.patch
create mode 100644 meta/recipes-graphics/xorg-lib/libxfont2/CVE-2026-56002.patch
create mode 100644 meta/recipes-graphics/xorg-lib/libxfont2/CVE-2026-56003.patch
create mode 100644 meta/recipes-multimedia/alsa/alsa-lib/CVE-2026-56109.patch
create mode 100644 meta/recipes-support/gnutls/gnutls/CVE-2026-33846.patch
create mode 100644 meta/recipes-support/gnutls/gnutls/CVE-2026-42010.patch
create mode 100644 meta/recipes-support/gnutls/gnutls/CVE-2026-42011_p1.patch
create mode 100644 meta/recipes-support/gnutls/gnutls/CVE-2026-42011_p2.patch
rename meta/recipes-support/libevent/{libevent_2.1.12.bb => libevent_2.1.13.bb} (84%)
create mode 100644 meta/recipes-support/libssh2/libssh2/CVE-2026-58051.patch
create mode 100644 meta/recipes-support/p11-kit/files/CVE-2026-13757.patch
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2026-09-10 6:47 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-08-21 15:07 [OE-core][scarthgap 00/35] Pull request (cover letter only) Fabien Thomas
-- strict thread matches above, loose matches on Subject: below --
2026-09-10 6:47 Yoann Congal
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox