From: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
To: openembedded-devel@lists.openembedded.org
Subject: [PATCH 00/44] Scarthgap pull request
Date: Mon, 7 Sep 2026 16:41:51 +0530 [thread overview]
Message-ID: <cover.1788779254.git.anuj.mittal@oss.qualcomm.com> (raw)
Please merge these changes in scarthgap. Tested locally and on autobuilder:
https://autobuilder.yoctoproject.org/valkyrie/#/builders/81/builds/1763
The following changes since commit bec755063a8b5da65df626f5749496aadaa4f4bb:
thrift: fix CVE-2026-58389 (2026-08-13 10:01:51 +0530)
are available in the Git repository at:
https://git.openembedded.org/meta-openembedded-contrib anujm/scarthgap
https://git.openembedded.org/meta-openembedded-contrib/log/?h=anujm/scarthgap
for you to fetch changes up to b5874ea07d69919d9b40d59f2c2f0bbd24bc3259:
libssh: Fix CVE-2026-59850 (2026-09-02 10:39:59 +0530)
----------------------------------------------------------------
Ankur Tyagi (1):
jsoncpp: upgrade 1.9.5 -> 1.9.7
Benjamin Bouvier (2):
net-snmp: add CVE_PRODUCT
rsyslog: add CVE_PRODUCT
Darsh Kelaiya (16):
python3-filelock: fix CVE-2025-68146
python3-filelock: fix CVE-2026-22701
python3-httplib2: fix CVE-2026-59939
python3-django: fix CVE-2026-15307
python3-django: fix CVE-2026-15337
python3-django: fix CVE-2026-15830
python3-aiohttp: ignore CVE-2026-34515
python3-aiohttp: fix CVE-2025-69224
python3-aiohttp: fix CVE-2025-69227
python3-aiohttp: fix CVE-2025-69229
python3-aiohttp: fix CVE-2025-69223
python3-aiohttp: fix CVE-2026-22815
python3-aiohttp: fix CVE-2026-34514
python3-aiohttp: fix CVE-2026-34513
python3-aiohttp: fix CVE-2026-34993
python3-aiohttp: fix CVE-2026-34518
Devansh Patel (6):
hdf5: Fix CVE-2026-26199
hdf5: Fix CVE-2026-26197
python3-cbor2: Fix CVE-2026-26209
python3-httplib2: correct CVE_PRODUCT mapping
python3-cbor2: use exact CVE_PRODUCT mapping
python3-web3: add CVE_PRODUCT mapping
Gyorgy Sarvari (3):
python3-httpx: set CVE_PRODUCT
python3-twisted: set CVE_PRODUCT
smarty: extend CVE_PRODUCT
Hetvi Thakar (11):
python3-ujson: Fix CVE-2026-32875
python3-ujson: Fix CVE-2026-32874
python3-ujson: Fix CVE-2026-44660
python3-ujson: Fix CVE-2026-54911
python3-simpleeval: Fix CVE-2026-32640
python3-web3: Fix CVE-2026-40072
libssh: Fix CVE-2026-59843
libssh: Fix CVE-2026-59844
libssh: Fix CVE-2026-59846
libssh: Fix CVE-2026-59848
libssh: Fix CVE-2026-59850
Hitendra Prajapati (4):
libssh: set status for CVE-2026-15370
libssh: set status for CVE-2026-59842
libssh: fix for CVE-2026-59845, CVE-2026-59847
opensc: fix for CVE-2026-40528
Vijay Anusuri (1):
giflib: Fix CVE-2026-26740
.../net-snmp/net-snmp_5.9.4.bb | 2 +
.../giflib/giflib/CVE-2026-26740.patch | 40 +
.../recipes-devtools/giflib/giflib_5.2.2.bb | 1 +
...akage-when-compiled-with-C-17-1668-1.patch | 525 ++++++++
.../{jsoncpp_1.9.5.bb => jsoncpp_1.9.7.bb} | 6 +-
.../rsyslog/rsyslog_8.2402.0.bb | 2 +
.../hdf5/files/CVE-2026-26197.patch | 69 +
.../hdf5/files/CVE-2026-26199.patch | 675 ++++++++++
meta-oe/recipes-support/hdf5/hdf5_1.14.4-3.bb | 2 +
.../libssh/libssh/CVE-2026-59843.patch | 84 ++
.../libssh/libssh/CVE-2026-59844.patch | 52 +
.../libssh/libssh/CVE-2026-59845.patch | 68 +
.../libssh/libssh/CVE-2026-59846.patch | 87 ++
.../libssh/libssh/CVE-2026-59847-01.patch | 39 +
.../libssh/libssh/CVE-2026-59847-02.patch | 35 +
.../libssh/CVE-2026-59848-regression.patch | 45 +
.../libssh/libssh/CVE-2026-59848.patch | 684 ++++++++++
.../libssh/libssh/CVE-2026-59850.patch | 40 +
.../recipes-support/libssh/libssh_0.10.6.bb | 12 +
.../opensc/files/CVE-2026-40528.patch | 44 +
.../recipes-support/opensc/opensc_0.25.1.bb | 1 +
.../recipes-support/smarty/smarty_4.4.1.bb | 2 +-
.../python3-aiohttp/CVE-2025-69223.patch | 848 ++++++++++++
.../python3-aiohttp/CVE-2025-69224.patch | 161 +++
.../python3-aiohttp/CVE-2025-69227.patch | 163 +++
.../python3-aiohttp/CVE-2025-69229_p1.patch | 113 ++
.../python3-aiohttp/CVE-2025-69229_p2.patch | 256 ++++
.../python3-aiohttp/CVE-2026-22815.patch | 1020 +++++++++++++++
.../python3-aiohttp/CVE-2026-34513.patch | 211 +++
.../python3-aiohttp/CVE-2026-34514.patch | 65 +
.../python3-aiohttp/CVE-2026-34518.patch | 64 +
.../python3-aiohttp/CVE-2026-34993.patch | 364 ++++++
.../python/python3-aiohttp_3.9.5.bb | 21 +
.../CVE-2026-26209-dependent.patch | 27 +
.../python3-cbor2/CVE-2026-26209_p1.patch | 173 +++
.../python3-cbor2/CVE-2026-26209_p2.patch | 435 +++++++
.../python3-cbor2/CVE-2026-26209_p3.patch | 81 ++
.../python3-cbor2/CVE-2026-26209_p4.patch | 28 +
.../python/python3-cbor2_5.6.4.bb | 7 +
.../CVE-2026-15307.patch | 563 ++++++++
.../CVE-2026-15337.patch | 163 +++
.../CVE-2026-15830.patch | 1144 +++++++++++++++++
.../python/python3-django_5.0.14.bb | 3 +
.../python3-filelock/CVE-2025-68146.patch | 88 ++
.../python3-filelock/CVE-2026-22701.patch | 44 +
.../python/python3-filelock_3.13.4.bb | 4 +
.../python3-httplib2/CVE-2026-59939.patch | 745 +++++++++++
.../python/python3-httplib2_0.22.0.bb | 4 +
.../python/python3-httpx_0.27.0.bb | 2 +
.../CVE-2026-32640_p1.patch | 55 +
.../CVE-2026-32640_p2.patch | 187 +++
.../CVE-2026-32640_p3.patch | 485 +++++++
.../CVE-2026-32640_p4.patch | 90 ++
.../python/python3-simpleeval_0.9.13.bb | 8 +-
.../python/python3-twisted_24.3.0.bb | 2 +
.../python/python3-ujson/CVE-2026-32874.patch | 61 +
.../python/python3-ujson/CVE-2026-32875.patch | 199 +++
.../python/python3-ujson/CVE-2026-44660.patch | 112 ++
.../python/python3-ujson/CVE-2026-54911.patch | 267 ++++
.../python/python3-ujson_5.9.0.bb | 4 +
.../python/python3-web3/CVE-2026-40072.patch | 434 +++++++
.../python/python3-web3_6.17.0.bb | 3 +
62 files changed, 11215 insertions(+), 4 deletions(-)
create mode 100644 meta-oe/recipes-devtools/giflib/giflib/CVE-2026-26740.patch
create mode 100644 meta-oe/recipes-devtools/jsoncpp/jsoncpp/0001-Fix-C-11-ABI-breakage-when-compiled-with-C-17-1668-1.patch
rename meta-oe/recipes-devtools/jsoncpp/{jsoncpp_1.9.5.bb => jsoncpp_1.9.7.bb} (82%)
create mode 100644 meta-oe/recipes-support/hdf5/files/CVE-2026-26197.patch
create mode 100644 meta-oe/recipes-support/hdf5/files/CVE-2026-26199.patch
create mode 100644 meta-oe/recipes-support/libssh/libssh/CVE-2026-59843.patch
create mode 100644 meta-oe/recipes-support/libssh/libssh/CVE-2026-59844.patch
create mode 100644 meta-oe/recipes-support/libssh/libssh/CVE-2026-59845.patch
create mode 100644 meta-oe/recipes-support/libssh/libssh/CVE-2026-59846.patch
create mode 100644 meta-oe/recipes-support/libssh/libssh/CVE-2026-59847-01.patch
create mode 100644 meta-oe/recipes-support/libssh/libssh/CVE-2026-59847-02.patch
create mode 100644 meta-oe/recipes-support/libssh/libssh/CVE-2026-59848-regression.patch
create mode 100644 meta-oe/recipes-support/libssh/libssh/CVE-2026-59848.patch
create mode 100644 meta-oe/recipes-support/libssh/libssh/CVE-2026-59850.patch
create mode 100644 meta-oe/recipes-support/opensc/files/CVE-2026-40528.patch
create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2025-69223.patch
create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2025-69224.patch
create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2025-69227.patch
create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2025-69229_p1.patch
create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2025-69229_p2.patch
create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-22815.patch
create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-34513.patch
create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-34514.patch
create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-34518.patch
create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-34993.patch
create mode 100644 meta-python/recipes-devtools/python/python3-cbor2/CVE-2026-26209-dependent.patch
create mode 100644 meta-python/recipes-devtools/python/python3-cbor2/CVE-2026-26209_p1.patch
create mode 100644 meta-python/recipes-devtools/python/python3-cbor2/CVE-2026-26209_p2.patch
create mode 100644 meta-python/recipes-devtools/python/python3-cbor2/CVE-2026-26209_p3.patch
create mode 100644 meta-python/recipes-devtools/python/python3-cbor2/CVE-2026-26209_p4.patch
create mode 100644 meta-python/recipes-devtools/python/python3-django-5.0.14/CVE-2026-15307.patch
create mode 100644 meta-python/recipes-devtools/python/python3-django-5.0.14/CVE-2026-15337.patch
create mode 100644 meta-python/recipes-devtools/python/python3-django-5.0.14/CVE-2026-15830.patch
create mode 100644 meta-python/recipes-devtools/python/python3-filelock/CVE-2025-68146.patch
create mode 100644 meta-python/recipes-devtools/python/python3-filelock/CVE-2026-22701.patch
create mode 100644 meta-python/recipes-devtools/python/python3-httplib2/CVE-2026-59939.patch
create mode 100644 meta-python/recipes-devtools/python/python3-simpleeval/CVE-2026-32640_p1.patch
create mode 100644 meta-python/recipes-devtools/python/python3-simpleeval/CVE-2026-32640_p2.patch
create mode 100644 meta-python/recipes-devtools/python/python3-simpleeval/CVE-2026-32640_p3.patch
create mode 100644 meta-python/recipes-devtools/python/python3-simpleeval/CVE-2026-32640_p4.patch
create mode 100644 meta-python/recipes-devtools/python/python3-ujson/CVE-2026-32874.patch
create mode 100644 meta-python/recipes-devtools/python/python3-ujson/CVE-2026-32875.patch
create mode 100644 meta-python/recipes-devtools/python/python3-ujson/CVE-2026-44660.patch
create mode 100644 meta-python/recipes-devtools/python/python3-ujson/CVE-2026-54911.patch
create mode 100644 meta-python/recipes-devtools/python/python3-web3/CVE-2026-40072.patch
--
2.34.1
next reply other threads:[~2026-09-07 11:12 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-09-07 11:11 Anuj Mittal [this message]
2026-09-07 15:57 ` [oe] [PATCH 00/44] Scarthgap pull request Khem Raj
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=cover.1788779254.git.anuj.mittal@oss.qualcomm.com \
--to=anuj.mittal@oss.qualcomm.com \
--cc=openembedded-devel@lists.openembedded.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox