public inbox for openembedded-devel@lists.openembedded.org
 help / color / mirror / Atom feed
* [PATCH 00/30] Whinlatter pull request
@ 2026-01-08  2:11 Anuj Mittal
  2026-01-09  7:19 ` Khem Raj
  0 siblings, 1 reply; 5+ messages in thread
From: Anuj Mittal @ 2026-01-08  2:11 UTC (permalink / raw)
  To: openembedded-devel, raj.khem

Please merge these changes in whinlatter. Tested on AB and locally.

https://autobuilder.yoctoproject.org/valkyrie/#/builders/81/builds/1225

The following changes since commit a4e768dcfae181dd99e39c4286fa0729ca7f4e47:

  bpftool-native: Empty DEBUG_PREFIX_MAP_EXTRA (2025-12-17 16:54:28 +0530)

are available in the Git repository at:

  https://git.openembedded.org/meta-openembedded-contrib stable/whinlatter-next
  https://git.openembedded.org/meta-openembedded-contrib/log/?h=stable/whinlatter-next

Ankur Tyagi (1):
  fetchmail: patch CVE-2025-61962

Gyorgy Sarvari (26):
  fex: ignore unrelated CVEs
  accountsservice: ignore CVE-2023-3297
  minio: ignore irrelevant CVEs
  cifs-utils: patch CVE-2025-2312
  cups-filters: patch CVE-2025-64524
  dovecot: patch CVE-2025-30189
  fio: ignore CVE-2025-10824
  tigervnc: fix typo in CVE_STATUS
  tigervnc: sync xserver code with oe-core
  tigervnc: ignore CVE-2023-6377
  tigervnc: ignore CVE-2023-6478
  tigervnc: ignore CVE-2025-26594...26601
  civetweb: ignore CVE-2025-9648
  freerdp3: ignore CVE-2025-68118
  gimp: patch CVE-2025-14422
  gimp: patch CVE-2025-14423
  gimp: patch CVE-2025-14424
  gimp: patch CVE-2025-14425
  imagemagick: upgrade 7.1.2-8 -> 7.1.2-12
  libcoap: ignore CVE-2025-50518
  openvpn: upgrade 2.6.16 -> 2.6.17
  php: upgrade 8.4.15 -> 8.4.16
  postgresql: upgrade 17.6 -> 17.7
  python3-configobj: ignore CVE-2023-26112
  python3-django: upgrade 4.2.26 -> 4.2.27
  python3-django: upgrade 5.2.8 -> 5.2.9

Hugo SIMELIERE (2):
  libwebsockets: fix CVE-2025-11677
  libwebsockets: fix CVE-2025-11678

Jason Schonberg (1):
  c-ares: upgrade 1.34.5 -> 1.34.6

 .../gimp/gimp/CVE-2025-14422.patch            |  66 +++++++
 .../gimp/gimp/CVE-2025-14423.patch            | 106 ++++++++++++
 .../gimp/gimp/CVE-2025-14424.patch            |  34 ++++
 .../gimp/gimp/CVE-2025-14425.patch            |  79 +++++++++
 meta-gnome/recipes-gimp/gimp/gimp_3.0.6.bb    |  15 +-
 .../accountsservice_23.13.9.bb                |   2 +
 .../civetweb/civetweb_1.16.bb                 |   3 +-
 .../libcoap/libcoap_4.3.5a.bb                 |   2 +
 .../cifs/cifs-utils/CVE-2025-2312.patch       | 135 +++++++++++++++
 .../recipes-support/cifs/cifs-utils_7.0.bb    |   4 +-
 .../dovecot/dovecot/CVE-2025-30189-1.patch    | 128 ++++++++++++++
 .../dovecot/dovecot/CVE-2025-30189-2.patch    |  51 ++++++
 .../dovecot/dovecot/CVE-2025-30189-3.patch    |  36 ++++
 .../dovecot/dovecot/CVE-2025-30189-4.patch    |  72 ++++++++
 .../dovecot/dovecot/CVE-2025-30189-5.patch    |  31 ++++
 .../dovecot/dovecot/CVE-2025-30189-6.patch    |  88 ++++++++++
 .../dovecot/dovecot/CVE-2025-30189-7.patch    |  76 +++++++++
 .../dovecot/dovecot_2.4.1-4.bb                |   7 +
 .../fetchmail/fetchmail/CVE-2025-61962.patch  |  51 ++++++
 .../fetchmail/fetchmail_6.5.2.bb              |   1 +
 .../{openvpn_2.6.16.bb => openvpn_2.6.17.bb}  |   2 +-
 meta-oe/recipes-benchmark/fio/fio_3.39.bb     |   2 +
 .../libwebsockets/CVE-2025-11677.patch        | 161 ++++++++++++++++++
 .../libwebsockets/CVE-2025-11678.patch        | 128 ++++++++++++++
 .../libwebsockets/libwebsockets_4.3.5.bb      |   2 +
 ...c-bypass-autoconf-2.69-version-check.patch |   2 +-
 ...{postgresql_17.6.bb => postgresql_17.7.bb} |   4 +-
 meta-oe/recipes-devtools/fex/fex_2511.bb      |   6 +
 .../php/{php_8.4.15.bb => php_8.4.16.bb}      |   2 +-
 meta-oe/recipes-extended/minio/minio_git.bb   |   6 +
 .../tigervnc/tigervnc_1.15.0.bb               |  16 +-
 .../cups/cups-filters/CVE-2025-64524.patch    |  82 +++++++++
 .../cups/cups-filters_2.0.1.bb                |  10 +-
 .../c-ares/0001-ares_uri-memory-leak.patch    |  21 ---
 .../{c-ares_1.34.5.bb => c-ares_1.34.6.bb}    |   3 +-
 .../freerdp/freerdp3_3.18.0.bb                |   1 +
 ...ick_7.1.2-8.bb => imagemagick_7.1.2-12.bb} |   2 +-
 .../python/python3-configobj_5.0.9.bb         |   2 +
 ...ngo_4.2.26.bb => python3-django_4.2.27.bb} |   2 +-
 ...jango_5.2.8.bb => python3-django_5.2.9.bb} |   2 +-
 40 files changed, 1397 insertions(+), 46 deletions(-)
 create mode 100644 meta-gnome/recipes-gimp/gimp/gimp/CVE-2025-14422.patch
 create mode 100644 meta-gnome/recipes-gimp/gimp/gimp/CVE-2025-14423.patch
 create mode 100644 meta-gnome/recipes-gimp/gimp/gimp/CVE-2025-14424.patch
 create mode 100644 meta-gnome/recipes-gimp/gimp/gimp/CVE-2025-14425.patch
 create mode 100644 meta-networking/recipes-support/cifs/cifs-utils/CVE-2025-2312.patch
 create mode 100644 meta-networking/recipes-support/dovecot/dovecot/CVE-2025-30189-1.patch
 create mode 100644 meta-networking/recipes-support/dovecot/dovecot/CVE-2025-30189-2.patch
 create mode 100644 meta-networking/recipes-support/dovecot/dovecot/CVE-2025-30189-3.patch
 create mode 100644 meta-networking/recipes-support/dovecot/dovecot/CVE-2025-30189-4.patch
 create mode 100644 meta-networking/recipes-support/dovecot/dovecot/CVE-2025-30189-5.patch
 create mode 100644 meta-networking/recipes-support/dovecot/dovecot/CVE-2025-30189-6.patch
 create mode 100644 meta-networking/recipes-support/dovecot/dovecot/CVE-2025-30189-7.patch
 create mode 100644 meta-networking/recipes-support/fetchmail/fetchmail/CVE-2025-61962.patch
 rename meta-networking/recipes-support/openvpn/{openvpn_2.6.16.bb => openvpn_2.6.17.bb} (98%)
 create mode 100644 meta-oe/recipes-connectivity/libwebsockets/libwebsockets/CVE-2025-11677.patch
 create mode 100644 meta-oe/recipes-connectivity/libwebsockets/libwebsockets/CVE-2025-11678.patch
 rename meta-oe/recipes-dbs/postgresql/{postgresql_17.6.bb => postgresql_17.7.bb} (69%)
 rename meta-oe/recipes-devtools/php/{php_8.4.15.bb => php_8.4.16.bb} (99%)
 create mode 100644 meta-oe/recipes-printing/cups/cups-filters/CVE-2025-64524.patch
 delete mode 100644 meta-oe/recipes-support/c-ares/c-ares/0001-ares_uri-memory-leak.patch
 rename meta-oe/recipes-support/c-ares/{c-ares_1.34.5.bb => c-ares_1.34.6.bb} (87%)
 rename meta-oe/recipes-support/imagemagick/{imagemagick_7.1.2-8.bb => imagemagick_7.1.2-12.bb} (99%)
 rename meta-python/recipes-devtools/python/{python3-django_4.2.26.bb => python3-django_4.2.27.bb} (79%)
 rename meta-python/recipes-devtools/python/{python3-django_5.2.8.bb => python3-django_5.2.9.bb} (60%)

-- 
2.52.0



^ permalink raw reply	[flat|nested] 5+ messages in thread
* [PATCH 00/30] Whinlatter pull request
@ 2026-04-01  6:08 Anuj Mittal
  0 siblings, 0 replies; 5+ messages in thread
From: Anuj Mittal @ 2026-04-01  6:08 UTC (permalink / raw)
  To: openembedded-devel

Please merge these changes in whinlatter. Tested locally and on
autobuilder.

https://autobuilder.yoctoproject.org/valkyrie/#/builders/81/builds/1420

The following changes since commit 6f989b75a08aacdcec1edb761da5559d3443c1ef:

  postfix: upgrade 3.10.6 -> 3.10.8 (2026-03-09 17:14:08 +0530)

are available in the Git repository at:

  https://git.openembedded.org/meta-openembedded-contrib stable/whinlatter-next
  https://git.openembedded.org/meta-openembedded-contrib/log/?h=stable/whinlatter-next

for you to fetch changes up to 8bcdb0cc1dab116253b409e78fb868ced7d8397c:

  bluealsa: fix QA issue staticdev (2026-03-26 10:31:48 +0530)

----------------------------------------------------------------

Ankur Tyagi (4):
  zfs: upgrade 2.2.8 -> 2.2.9
  php: upgrade 8.4.18 -> 8.4.19
  python3-pyjwt: Fix CVE-2026-32597
  python3-tornado: upgrade 6.5.4 -> 6.5.5

Aviv Daum (1):
  lldpd: fix xml PACKAGECONFIG dependency

Bartosz Golaszewski (1):
  python3-gpiod: update to v2.4.1

Deepak Rathore (1):
  libssh: Fix CVE-2026-3731

Gyorgy Sarvari (14):
  packagegroups: fix foldername
  owfs: upgrade 3.2p3 -> 3.2p4
  python3-django: upgrade 5.2.11 -> 5.2.12
  python3-django: upgrade 4.2.28 -> 4.2.29
  ettercap: patch CVE-2026-3603
  exiv2: patch CVE-2026-25884
  exiv2: patch CVE-2026-27596
  exiv2: patch CVE-2026-27631
  hiawatha: fix SRC_URI
  pcp: fix SRC_URI
  capnproto: patch CVE-2026-32239 and CVE-2026-32240
  imagemagick: upgrade 7.1.2-16 -> 7.1.2-17
  python3-marshmallow: mark CVE-2025-68480 patched
  libde265: patch CVE-2025-61147

Liu Yiding (1):
  btrfsmaintenance: upgrade 0.5 -> 0.5.2

Matthias Proske (1):
  bluealsa: fix QA issue staticdev

Mingli Yu (1):
  mariadb: Upgrade 11.4.9 -> 11.4.10

Peter Kjellerstedt (1):
  bpftrace: Update the runtime dependencies

Sujeet Nayak (1):
  libnice: make crypto library configurable via PACKAGECONFIG

Wang Mingyu (4):
  ser2net: upgrade 4.6.6 -> 4.6.7
  imagemagick: upgrade 7.1.2-15 -> 7.1.2-16
  jasper: upgrade 4.2.8 -> 4.2.9
  imapfilter: upgrade 2.8.3 -> 2.8.5

 .../owfs/0001-Add-build-rule-for-README.patch |   6 +-
 .../0001-Fix-compilation-with-GCC10.patch     |  44 -----
 .../owfs/{owfs_3.2p3.bb => owfs_3.2p4.bb}     |   7 +-
 .../packagegroup-meta-filesystems.bb          |   0
 ...Define-strndupa-if-it-does-not-exist.patch |   5 +-
 ...arch64-inline-assembly-for-gcc-13.1.patch} |   6 +-
 ...admmap-Replace-uint_t-with-uint32_t.patch} |  11 +-
 ...e-sys-stat.h-instead-of-linux-stat.h.patch |  83 +++++++++
 .../zfs/{zfs_2.2.8.bb => zfs_2.2.9.bb}        |   9 +-
 ...nance_0.5.bb => btrfsmaintenance_0.5.2.bb} |   4 +-
 ...change-sysconfig-path-to-etc-default.patch |  18 +-
 .../bluealsa/bluealsa_4.3.0.bb                |   1 +
 .../libde265/libde265/CVE-2025-61147.patch    |  84 +++++++++
 .../libde265/libde265_1.0.16.bb               |   4 +-
 .../recipes-daemons/lldpd/lldpd_1.0.20.bb     |   2 +-
 .../ettercap/ettercap/CVE-2026-3606.patch     |  48 ++++++
 .../ettercap/ettercap_0.8.3.1.bb              |   4 +-
 .../bpftrace/bpftrace_0.24.1.bb               |  11 +-
 .../{ser2net_4.6.6.bb => ser2net_4.6.7.bb}    |   2 +-
 ...ve_11.4.9.bb => mariadb-native_11.4.10.bb} |   0
 meta-oe/recipes-dbs/mysql/mariadb.inc         |   4 +-
 ...info-t-fails-for-certain-TZ-values-o.patch |  47 -----
 ...move-x86-specific-loop-in-my_convert.patch |  93 ----------
 .../{mariadb_11.4.9.bb => mariadb_11.4.10.bb} |   0
 .../CVE-2026-32239_CVE-2026-32240.patch       | 160 ++++++++++++++++++
 .../capnproto/capnproto_1.0.2.bb              |   4 +-
 .../php/{php_8.4.18.bb => php_8.4.19.bb}      |   2 +-
 .../{jasper_4.2.8.bb => jasper_4.2.9.bb}      |   2 +-
 .../exiv2/exiv2/CVE-2026-25884-1.patch        |  69 ++++++++
 .../exiv2/exiv2/CVE-2026-25884-2.patch        |  25 +++
 .../exiv2/exiv2/CVE-2026-27596-1.patch        |  71 ++++++++
 .../exiv2/exiv2/CVE-2026-27596-2.patch        |  24 +++
 .../exiv2/exiv2/CVE-2026-27631-1.patch        |  63 +++++++
 .../exiv2/exiv2/CVE-2026-27631-2.patch        |  26 +++
 meta-oe/recipes-support/exiv2/exiv2_0.28.7.bb |  11 +-
 ...ck_7.1.2-15.bb => imagemagick_7.1.2-17.bb} |   2 +-
 ...mapfilter_2.8.3.bb => imapfilter_2.8.5.bb} |   4 +-
 .../recipes-support/libnice/libnice_0.1.23.bb |   5 +-
 .../libssh/libssh/CVE-2026-3731_p1.patch      |  35 ++++
 .../libssh/libssh/CVE-2026-3731_p2.patch      | 102 +++++++++++
 .../recipes-support/libssh/libssh_0.11.3.bb   |   2 +
 meta-oe/recipes-support/pcp/pcp.inc           |   2 +-
 ...ngo_4.2.28.bb => python3-django_4.2.29.bb} |   2 +-
 ...ngo_5.2.11.bb => python3-django_5.2.12.bb} |   2 +-
 ...-gpiod_2.4.0.bb => python3-gpiod_2.4.1.bb} |   8 +-
 .../python/python3-marshmallow_4.1.2.bb       |   2 +
 .../python/python3-pyjwt/CVE-2026-32597.patch |  79 +++++++++
 .../python/python3-pyjwt_2.10.1.bb            |   2 +
 ...nado_6.5.4.bb => python3-tornado_6.5.5.bb} |   2 +-
 .../recipes-httpd/hiawatha/hiawatha_11.7.bb   |   2 +-
 50 files changed, 952 insertions(+), 249 deletions(-)
 delete mode 100644 meta-filesystems/recipes-filesystems/owfs/owfs/0001-Fix-compilation-with-GCC10.patch
 rename meta-filesystems/recipes-filesystems/owfs/{owfs_3.2p3.bb => owfs_3.2p4.bb} (96%)
 rename meta-filesystems/recipes-filesystems/{packageconfigs => packagegroups}/packagegroup-meta-filesystems.bb (100%)
 rename meta-filesystems/recipes-filesystems/zfs/zfs/{aaf28a4630af60496c9d33db1d06a7d7d8983422.patch => 0002-fixes-broken-aarch64-inline-assembly-for-gcc-13.1.patch} (94%)
 rename meta-filesystems/recipes-filesystems/zfs/zfs/{0001-fs-tests-cmd-readmmap-Replace-uint_t-with-uint32_t.patch => 0003-fs-tests-cmd-readmmap-Replace-uint_t-with-uint32_t.patch} (83%)
 create mode 100644 meta-filesystems/recipes-filesystems/zfs/zfs/0004-linux-use-sys-stat.h-instead-of-linux-stat.h.patch
 rename meta-filesystems/recipes-filesystems/zfs/{zfs_2.2.8.bb => zfs_2.2.9.bb} (91%)
 rename meta-filesystems/recipes-utils/btrfsmaintenance/{btrfsmaintenance_0.5.bb => btrfsmaintenance_0.5.2.bb} (96%)
 create mode 100644 meta-multimedia/recipes-multimedia/libde265/libde265/CVE-2025-61147.patch
 create mode 100644 meta-networking/recipes-support/ettercap/ettercap/CVE-2026-3606.patch
 rename meta-oe/recipes-connectivity/ser2net/{ser2net_4.6.6.bb => ser2net_4.6.7.bb} (91%)
 rename meta-oe/recipes-dbs/mysql/{mariadb-native_11.4.9.bb => mariadb-native_11.4.10.bb} (100%)
 delete mode 100644 meta-oe/recipes-dbs/mysql/mariadb/0001-MDEV-38029-my_tzinfo-t-fails-for-certain-TZ-values-o.patch
 delete mode 100644 meta-oe/recipes-dbs/mysql/mariadb/0001-Remove-x86-specific-loop-in-my_convert.patch
 rename meta-oe/recipes-dbs/mysql/{mariadb_11.4.9.bb => mariadb_11.4.10.bb} (100%)
 create mode 100644 meta-oe/recipes-devtools/capnproto/capnproto/CVE-2026-32239_CVE-2026-32240.patch
 rename meta-oe/recipes-devtools/php/{php_8.4.18.bb => php_8.4.19.bb} (99%)
 rename meta-oe/recipes-graphics/jasper/{jasper_4.2.8.bb => jasper_4.2.9.bb} (92%)
 create mode 100644 meta-oe/recipes-support/exiv2/exiv2/CVE-2026-25884-1.patch
 create mode 100644 meta-oe/recipes-support/exiv2/exiv2/CVE-2026-25884-2.patch
 create mode 100644 meta-oe/recipes-support/exiv2/exiv2/CVE-2026-27596-1.patch
 create mode 100644 meta-oe/recipes-support/exiv2/exiv2/CVE-2026-27596-2.patch
 create mode 100644 meta-oe/recipes-support/exiv2/exiv2/CVE-2026-27631-1.patch
 create mode 100644 meta-oe/recipes-support/exiv2/exiv2/CVE-2026-27631-2.patch
 rename meta-oe/recipes-support/imagemagick/{imagemagick_7.1.2-15.bb => imagemagick_7.1.2-17.bb} (99%)
 rename meta-oe/recipes-support/imapfilter/{imapfilter_2.8.3.bb => imapfilter_2.8.5.bb} (80%)
 create mode 100644 meta-oe/recipes-support/libssh/libssh/CVE-2026-3731_p1.patch
 create mode 100644 meta-oe/recipes-support/libssh/libssh/CVE-2026-3731_p2.patch
 rename meta-python/recipes-devtools/python/{python3-django_4.2.28.bb => python3-django_4.2.29.bb} (79%)
 rename meta-python/recipes-devtools/python/{python3-django_5.2.11.bb => python3-django_5.2.12.bb} (60%)
 rename meta-python/recipes-devtools/python/{python3-gpiod_2.4.0.bb => python3-gpiod_2.4.1.bb} (74%)
 create mode 100644 meta-python/recipes-devtools/python/python3-pyjwt/CVE-2026-32597.patch
 rename meta-python/recipes-devtools/python/{python3-tornado_6.5.4.bb => python3-tornado_6.5.5.bb} (93%)

-- 
2.53.0



^ permalink raw reply	[flat|nested] 5+ messages in thread
end of thread, other threads:[~2026-04-01  6:08 UTC | newest]

Thread overview: 5+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-01-08  2:11 [PATCH 00/30] Whinlatter pull request Anuj Mittal
2026-01-09  7:19 ` Khem Raj
2026-01-13  8:45   ` [oe] " Gyorgy Sarvari
2026-01-13 16:23     ` Khem Raj
  -- strict thread matches above, loose matches on Subject: below --
2026-04-01  6:08 Anuj Mittal

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox