* [OE-core][wrynose 00/51] Pull request (cover letter only)
@ 2026-10-14 9:03 Yoann Congal
0 siblings, 0 replies; only message in thread
From: Yoann Congal @ 2026-10-14 9:03 UTC (permalink / raw)
To: openembedded-core; +Cc: Paul Barker
Those are the patches from the last patch review:
https://lore.kernel.org/all/cover.1791707817.git.yoann.congal@smile.fr/
with the following changes:
* "libpng: upgrade 1.6.58 -> 1.6.59" held until the equivalent merge on
blacksail
* libpcre2 series dropped per Peter's request.
https://lore.kernel.org/all/AS8PR10MB507316F31E025A7F7EEC2533FD902@AS8PR10MB5073.EURPRD10.PROD.OUTLOOK.COM/
Passed a-full on autobuilder:
https://autobuilder.yoctoproject.org/valkyrie/?#/builders/29/builds/4920
* qemuarm64-armhost failed with disk space issues (now fixed)
rebuild in https://autobuilder.yoctoproject.org/valkyrie/?#/builders/8/builds/4855
* oe-selftest-armhost failed with #16450 – AB-INT: gopkg.in connectivity issues
rebuild in https://autobuilder.yoctoproject.org/valkyrie/?#/builders/23/builds/5086
* oe-selftest-debian failed with #16236 – AB-INT: test_list_pkg_files: ResourceWarning: unclosed transport
rebuild in https://autobuilder.yoctoproject.org/valkyrie/?#/builders/35/builds/5058
The following changes since commit 0f03c732a0a2d0506b41b1abe60b3f368b2300dc:
build-appliance-image: Update to wrynose head revisions (2026-09-30 11:06:32 +0100)
are available in the Git repository at:
https://git.openembedded.org/openembedded-core-contrib stable/wrynose-next
https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/wrynose-next
for you to fetch changes up to 636e5d3b12d54951c13d57346648bc29a0e6b24e:
wget: fix CVE-2026-15146 (2026-10-12 17:35:35 +0200)
----------------------------------------------------------------
Alexander Kanavin (1):
tzcode/tzdata: fix upstream version check
Babanpreet Singh (2):
devtool: standard: fix update-recipe/finish --initial-rev override
oeqa/selftest/devtool: cover update-recipe --initial-rev
Bhavesh R Maheshwari (2):
ffmpeg: Fix for CVE-2026-66036
ffmpeg: Fix for CVE-2026-66041
Darsh Kelaiya (1):
python3-click: depend on python3-shell for shlex
Deepesh Varatharajan (1):
glibc: stable 2.43 branch updates to 9cda6fc96ab
Frieder Schrempf (1):
weston: fix VNC backend build with aml 1.0
Ghanshyam Banait (1):
wget: fix CVE-2026-15146
Harish Sadineni (2):
glibc: stable 2.43 branch updates to 562cd7badd
qemuriscv.inc: default to fw_dynamic.elf as QEMU BIOS
Hetvi Thakar (5):
openssh: fix CVE-2026-73283
openssh: fix CVE-2026-73282
openssh: fix CVE-2026-73281
vim: set CVE_STATUS for CVE-2026-51400
vim: set CVE_STATUS for CVE-2026-51401
Jaipaul Cheernam (1):
bind: upgrade 9.20.26 -> 9.20.27
Jakub Szczudlo (Nokia) (5):
gnutls: fix CVE-2026-42012
gnutls: fix CVE-2026-42013
gnutls: fix CVE-2026-42014
gnutls: fix CVE-2026-42015
gnutls: fix CVE-2026-5260
Lucas Stach (1):
barebox: upgrade 2026.04.0 -> 2026.04.2
Peter Marko (23):
glibc: set status for CVE-2011-0536 and CVE-2025-0577
gnutls: set status for CVE-2023-0361
libarchive: set status for CVE-2026-4424
nfs-utils: set status for CVE-2025-12801
openssl: set status for CVE-2015-3216
ovmf: set status of CVE-2017-5731 and CVE-2019-14584
ppp: set status for CVE-2020-15704
pulseaudio: set status for CVE-2020-15710 and CVE-2020-16123
graphene: set status for CVE-2026-81281
openssh: set status for CVE-2026-55655
openssh: set status for CVE-2026-55654
xserver-xorg: set status for CVE-2026-55999 and CVE-2026-56000
openssl: upgrade 3.5.8 -> 3.5.9
glibc: set status for CVE-2026-86805 and CVE-2026-95818
libpng: upgrade 1.6.56 -> 1.6.58
util-linux(-uuid): upgrade 2.41.5 -> 2.41.6
libsolv: patch CVE-2026-48863
expat: patch CVE-2026-66046 and CVE-2026-76641
expat: patch CVE-2026-76956
expat: patch CVE-2026-76957
expat: patch CVE-2026-93990
alsa-lib: patch CVE-2026-90781
go: upgrade 1.26.8 -> 1.26.9
Peter Tatrai (1):
systemd: fix mDNS hostname changes
Richard Purdie (1):
bind: upgrade 9.20.27 -> 9.20.29
Ross Burton (2):
gstreamer: skip test_queue:test_leaky_downstream test as it's flakey
libaio: update SRC_URI
Vijay Anusuri (1):
tzdata/tzcode-native: upgrade 2026c -> 2026d
meta/conf/machine/include/riscv/qemuriscv.inc | 5 +-
meta/lib/oeqa/selftest/cases/devtool.py | 22 +
meta/recipes-bsp/barebox/barebox-common.inc | 4 +-
...1-avoid-start-failure-with-bind-user.patch | 2 +-
...kport-ax_prog_cc_for_build.m4-macros.patch | 2 +-
...d-V-and-start-log-hide-build-options.patch | 4 +-
...ching-for-json-headers-searches-sysr.patch | 4 +-
.../recipes-connectivity/bind/bind/conf.patch | 2 +-
...t.d-add-support-for-read-only-rootfs.patch | 2 +-
.../bind/make-etc-initd-bind-stop-work.patch | 2 +-
.../bind/{bind_9.20.26.bb => bind_9.20.29.bb} | 2 +-
.../nfs-utils/nfs-utils_2.8.7.bb | 2 +
.../openssh/openssh/CVE-2026-73281.patch | 80 +++
.../openssh/openssh/CVE-2026-73282.patch | 80 +++
.../openssh/openssh/CVE-2026-73283.patch | 42 ++
.../openssh/openssh_10.3p1.bb | 5 +
.../{openssl_3.5.8.bb => openssl_3.5.9.bb} | 4 +-
meta/recipes-connectivity/ppp/ppp_2.5.2.bb | 1 +
.../expat/expat/CVE-2026-66046-01.patch | 107 ++++
.../expat/expat/CVE-2026-66046-02.patch | 90 +++
.../expat/expat/CVE-2026-76641.patch | 160 ++++++
.../expat/expat/CVE-2026-76956.patch | 26 +
.../expat/expat/CVE-2026-76957-01.patch | 121 ++++
.../expat/expat/CVE-2026-76957-02.patch | 85 +++
.../expat/expat/CVE-2026-93990-01.patch | 191 +++++++
.../expat/expat/CVE-2026-93990-02.patch | 328 +++++++++++
meta/recipes-core/expat/expat_2.8.3.bb | 8 +
meta/recipes-core/glibc/glibc-version.inc | 2 +-
meta/recipes-core/glibc/glibc_2.43.bb | 5 +
meta/recipes-core/ovmf/ovmf_git.bb | 2 +
...use-traffic-from-the-local-host-only.patch | 61 +++
meta/recipes-core/systemd/systemd_259.5.bb | 1 +
...2.41.5.bb => util-linux-libuuid_2.41.6.bb} | 0
meta/recipes-core/util-linux/util-linux.inc | 5 +-
...sing-fileutils.h-include-to-hook_idm.patch | 38 ++
.../util-linux/CVE-2026-78408.patch | 75 +++
.../util-linux/CVE-2026-78410.patch | 115 ++++
...l-linux_2.41.5.bb => util-linux_2.41.6.bb} | 0
.../go/{go-1.26.8.inc => go-1.26.9.inc} | 2 +-
...e_1.26.8.bb => go-binary-native_1.26.9.bb} | 6 +-
..._1.26.8.bb => go-cross-canadian_1.26.9.bb} | 0
...{go-cross_1.26.8.bb => go-cross_1.26.9.bb} | 0
...osssdk_1.26.8.bb => go-crosssdk_1.26.9.bb} | 0
...runtime_1.26.8.bb => go-runtime_1.26.9.bb} | 0
...ent-based-hash-generation-less-pedan.patch | 8 +-
...3-ld-add-soname-to-shareable-objects.patch | 6 +-
...d-go-make-GOROOT-precious-by-default.patch | 2 +-
...ut-build-specific-paths-from-linker-.patch | 4 +-
.../go/{go_1.26.8.bb => go_1.26.9.bb} | 0
.../python/python3-click_8.3.3.bb | 1 +
.../recipes-extended/libaio/libaio_0.3.113.bb | 2 +-
.../libarchive/libarchive_3.8.7.bb | 1 +
.../libsolv/libsolv/CVE-2026-48863.patch | 25 +
.../libsolv/libsolv_0.7.36.bb | 1 +
meta/recipes-extended/timezone/timezone.inc | 8 +-
.../wget/wget/CVE-2026-15146.patch | 126 +++++
meta/recipes-extended/wget/wget_1.25.0.bb | 1 +
.../graphene/graphene_1.10.8.bb | 1 +
.../weston/0001-backend-vnc-Use-aml-v1.patch | 24 +
.../recipes-graphics/wayland/weston_15.0.0.bb | 3 +-
.../xorg-xserver/xserver-xorg.inc | 2 +
.../alsa/alsa-lib/CVE-2026-90781.patch | 41 ++
.../alsa/alsa-lib_1.2.15.3.bb | 1 +
.../ffmpeg/ffmpeg/CVE-2026-66036_p1.patch | 120 ++++
.../ffmpeg/ffmpeg/CVE-2026-66036_p2.patch | 71 +++
.../ffmpeg/ffmpeg/CVE-2026-66041.patch | 60 ++
.../recipes-multimedia/ffmpeg/ffmpeg_8.0.3.bb | 3 +
.../gstreamer/gstreamer1.0/run-ptest | 3 +
.../libpng/files/CVE-2026-34757_p1.patch | 518 ------------------
.../libpng/files/CVE-2026-34757_p2.patch | 481 ----------------
.../{libpng_1.6.56.bb => libpng_1.6.58.bb} | 7 +-
.../pulseaudio/pulseaudio.inc | 2 +
.../gnutls/gnutls/CVE-2026-42012-pre1.patch | 69 +++
.../gnutls/gnutls/CVE-2026-42012-pre2.patch | 161 ++++++
.../gnutls/gnutls/CVE-2026-42012.patch | 48 ++
.../gnutls/gnutls/CVE-2026-42013-pre1.patch | 56 ++
.../gnutls/gnutls/CVE-2026-42013.patch | 74 +++
.../gnutls/gnutls/CVE-2026-42014.patch | 60 ++
.../gnutls/gnutls/CVE-2026-42015.patch | 43 ++
.../gnutls/gnutls/CVE-2026-5260_p1.patch | 69 +++
.../gnutls/gnutls/CVE-2026-5260_p2.patch | 33 ++
meta/recipes-support/gnutls/gnutls_3.8.12.bb | 10 +
meta/recipes-support/vim/vim.inc | 3 +
scripts/lib/devtool/standard.py | 4 +
84 files changed, 2805 insertions(+), 1040 deletions(-)
rename meta/recipes-connectivity/bind/{bind_9.20.26.bb => bind_9.20.29.bb} (97%)
create mode 100644 meta/recipes-connectivity/openssh/openssh/CVE-2026-73281.patch
create mode 100644 meta/recipes-connectivity/openssh/openssh/CVE-2026-73282.patch
create mode 100644 meta/recipes-connectivity/openssh/openssh/CVE-2026-73283.patch
rename meta/recipes-connectivity/openssl/{openssl_3.5.8.bb => openssl_3.5.9.bb} (98%)
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-66046-01.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-66046-02.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-76641.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-76956.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-76957-01.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-76957-02.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-93990-01.patch
create mode 100644 meta/recipes-core/expat/expat/CVE-2026-93990-02.patch
create mode 100644 meta/recipes-core/systemd/systemd/0001-Revert-resolve-refuse-traffic-from-the-local-host-only.patch
rename meta/recipes-core/util-linux/{util-linux-libuuid_2.41.5.bb => util-linux-libuuid_2.41.6.bb} (100%)
create mode 100644 meta/recipes-core/util-linux/util-linux/0001-libmount-add-missing-fileutils.h-include-to-hook_idm.patch
create mode 100644 meta/recipes-core/util-linux/util-linux/CVE-2026-78408.patch
create mode 100644 meta/recipes-core/util-linux/util-linux/CVE-2026-78410.patch
rename meta/recipes-core/util-linux/{util-linux_2.41.5.bb => util-linux_2.41.6.bb} (100%)
rename meta/recipes-devtools/go/{go-1.26.8.inc => go-1.26.9.inc} (90%)
rename meta/recipes-devtools/go/{go-binary-native_1.26.8.bb => go-binary-native_1.26.9.bb} (80%)
rename meta/recipes-devtools/go/{go-cross-canadian_1.26.8.bb => go-cross-canadian_1.26.9.bb} (100%)
rename meta/recipes-devtools/go/{go-cross_1.26.8.bb => go-cross_1.26.9.bb} (100%)
rename meta/recipes-devtools/go/{go-crosssdk_1.26.8.bb => go-crosssdk_1.26.9.bb} (100%)
rename meta/recipes-devtools/go/{go-runtime_1.26.8.bb => go-runtime_1.26.9.bb} (100%)
rename meta/recipes-devtools/go/{go_1.26.8.bb => go_1.26.9.bb} (100%)
create mode 100644 meta/recipes-extended/libsolv/libsolv/CVE-2026-48863.patch
create mode 100644 meta/recipes-extended/wget/wget/CVE-2026-15146.patch
create mode 100644 meta/recipes-graphics/wayland/weston/0001-backend-vnc-Use-aml-v1.patch
create mode 100644 meta/recipes-multimedia/alsa/alsa-lib/CVE-2026-90781.patch
create mode 100644 meta/recipes-multimedia/ffmpeg/ffmpeg/CVE-2026-66036_p1.patch
create mode 100644 meta/recipes-multimedia/ffmpeg/ffmpeg/CVE-2026-66036_p2.patch
create mode 100644 meta/recipes-multimedia/ffmpeg/ffmpeg/CVE-2026-66041.patch
delete mode 100644 meta/recipes-multimedia/libpng/files/CVE-2026-34757_p1.patch
delete mode 100644 meta/recipes-multimedia/libpng/files/CVE-2026-34757_p2.patch
rename meta/recipes-multimedia/libpng/{libpng_1.6.56.bb => libpng_1.6.58.bb} (94%)
create mode 100644 meta/recipes-support/gnutls/gnutls/CVE-2026-42012-pre1.patch
create mode 100644 meta/recipes-support/gnutls/gnutls/CVE-2026-42012-pre2.patch
create mode 100644 meta/recipes-support/gnutls/gnutls/CVE-2026-42012.patch
create mode 100644 meta/recipes-support/gnutls/gnutls/CVE-2026-42013-pre1.patch
create mode 100644 meta/recipes-support/gnutls/gnutls/CVE-2026-42013.patch
create mode 100644 meta/recipes-support/gnutls/gnutls/CVE-2026-42014.patch
create mode 100644 meta/recipes-support/gnutls/gnutls/CVE-2026-42015.patch
create mode 100644 meta/recipes-support/gnutls/gnutls/CVE-2026-5260_p1.patch
create mode 100644 meta/recipes-support/gnutls/gnutls/CVE-2026-5260_p2.patch
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2026-10-14 9:04 UTC | newest]
Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-10-14 9:03 [OE-core][wrynose 00/51] Pull request (cover letter only) Yoann Congal
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox