Openembedded Devel Discussions
 help / color / mirror / Atom feed
* [PATCH 00/45] Scarthgap pull request
@ 2026-10-27  4:37 Anuj Mittal
  2026-10-27  5:28 ` [oe] " Khem Raj
  0 siblings, 1 reply; 2+ messages in thread
From: Anuj Mittal @ 2026-10-27  4:37 UTC (permalink / raw)
  To: openembedded-devel

Please merge these changes in scarthgap. Tested locally and on autbuilder:

https://autobuilder.yoctoproject.org/valkyrie/#/builders/81/builds/1901

The following changes since commit 0f00f8b9a21950640da8c5707343e5540133f86e:

  vboxguestdrivers: fix vboxvideo build on kernels lacking drm_fb_helper_alloc_info (2026-09-29 16:10:23 +0530)

are available in the Git repository at:

  https://git.openembedded.org/meta-openembedded-contrib anujm/scarthgap
  https://git.openembedded.org/meta-openembedded-contrib/log/?h=anujm/scarthgap

for you to fetch changes up to 2db6aece32c7f8ebf6015b468e1b4e21de072e3b:

  python3-grpcio: update gRPC repo roots (2026-10-26 12:46:49 +0530)

----------------------------------------------------------------

Ankur Tyagi (1):
  apache2: upgrade 2.4.68 -> 2.4.69

Darsh Kelaiya (20):
  python3-aiohttp: fix CVE-2026-34519
  python3-aiohttp: fix CVE-2026-34516
  python3-aiohttp: fix CVE-2026-34517
  python3-aiohttp: fix CVE-2026-34520
  python3-aiohttp: fix CVE-2026-34525
  python3-aiohttp: fix CVE-2026-47265
  python3-aiohttp: fix CVE-2026-50269
  python3-aiohttp: fix CVE-2026-54274
  python3-aiohttp: fix CVE-2026-54275
  python3-aiohttp: fix CVE-2026-54277
  python3-aiohttp: fix CVE-2026-54278
  python3-aiohttp: fix CVE-2026-54279
  python3-aiohttp: fix CVE-2026-54273
  ntfs-3g-ntfsprogs: fix CVE-2026-46572 and CVE-2026-42617
  ntfs-3g-ntfsprogs: fix CVE-2026-46571
  ntfs-3g-ntfsprogs: fix CVE-2026-46570
  ntfs-3g-ntfsprogs: fix CVE-2026-46569
  ntfs-3g-ntfsprogs: fix CVE-2026-42618
  ntfs-3g-ntfsprogs: fix CVE-2026-42616
  ntfs-3g-ntfsprogs: fix CVE-2026-40706

Jason Schonberg (1):
  php: upgrade 8.2.34 -> 8.2.35

João Marcos Costa (Schneider Electric) (2):
  ntp: add CVE-2016-1548 to CVE_STATUS_NTP
  ntpsec: add CVE_STATUS for CVE-2016-1548

Mehmet Fide (1):
  spidev-test: clean the build dir before configure

Peter Marko (15):
  c-ares: patch CVE-2026-69186
  c-ares: patch CVE-2026-69184
  cjson: patch CVE-2026-87933
  syslog-ng: patch CVE-2026-39879
  libwebsockets: patch CVE-2026-78161
  squid: patch CVE-2026-33526
  squid: patch CVE-2026-33515
  squid: patch CVE-2026-32748
  squid: patch CVE-2026-47729
  squid: patch CVE-2026-50012
  squid: patch CVE-2026-61642
  squid: patch CVE-2026-104786
  nss: remove compromised eMudhra certificates
  grpc: update gRPC repo roots
  python3-grpcio: update gRPC repo roots

Rohini Sangam (3):
  nodejs: Security fix for CVE-2026-48617
  nodejs: Security fix for CVE-2026-48619
  nodejs: Security fix for CVE-2026-48937

Yogita Urade (2):
  hdf5: Fix CVE-2026-17573
  hdf5: Fix CVE-2026-17574

 .../files/CVE-2026-40706_p1.patch             |    60 +
 .../files/CVE-2026-40706_p2.patch             |    34 +
 .../files/CVE-2026-42616.patch                |    70 +
 .../files/CVE-2026-42618_p1.patch             |    53 +
 .../files/CVE-2026-42618_p2.patch             |   216 +
 .../files/CVE-2026-46569.patch                |    62 +
 .../files/CVE-2026-46570.patch                |    42 +
 .../files/CVE-2026-46571.patch                |    50 +
 .../CVE-2026-46572_CVE-2026-42617_p1.patch    |    66 +
 .../CVE-2026-46572_CVE-2026-42617_p2.patch    |   104 +
 .../CVE-2026-46572_CVE-2026-42617_p3.patch    |    35 +
 .../ntfs-3g-ntfsprogs_2022.10.3.bb            |    11 +
 .../squid/files/CVE-2026-104786.patch         |   131 +
 .../squid/files/CVE-2026-32748.patch          |   182 +
 .../squid/files/CVE-2026-33515.patch          |   199 +
 .../squid/files/CVE-2026-33526.patch          |    35 +
 .../squid/files/CVE-2026-47729.patch          |    51 +
 .../squid/files/CVE-2026-50012-01.patch       |    34 +
 .../squid/files/CVE-2026-50012-02.patch       |    31 +
 .../squid/files/CVE-2026-61642.patch          |    43 +
 .../recipes-daemons/squid/squid_6.14.bb       |     8 +
 .../recipes-support/ntp/ntp_4.2.8p17.bb       |     1 +
 .../recipes-support/ntpsec/ntpsec_1.2.2a.bb   |     2 +
 .../libwebsockets/CVE-2026-78161.patch        |    45 +
 .../libwebsockets/libwebsockets_4.3.10.bb     |     1 +
 .../cjson/cjson/CVE-2026-87933.patch          |   108 +
 .../recipes-devtools/cjson/cjson_1.7.19.bb    |     1 +
 ...e-repo-roots-to-chromium-roots-42094.patch | 14348 ++++++++++++++++
 ...curity-Update-gRPC-repo-roots.-43699.patch |  2617 +++
 meta-oe/recipes-devtools/grpc/grpc_1.60.1.bb  |     2 +
 .../nodejs/nodejs/CVE-2026-48617.patch        |   118 +
 .../nodejs/nodejs/CVE-2026-48619.patch        |   253 +
 .../nodejs/nodejs/CVE-2026-48937.patch        |   349 +
 .../recipes-devtools/nodejs/nodejs_20.20.2.bb |     3 +
 .../php/{php_8.2.34.bb => php_8.2.35.bb}      |     2 +-
 .../recipes-kernel/spidev-test/spidev-test.bb |     1 +
 .../c-ares/c-ares/CVE-2026-69184.patch        |   295 +
 .../c-ares/c-ares/CVE-2026-69186.patch        |   159 +
 .../recipes-support/c-ares/c-ares_1.27.0.bb   |     5 +-
 .../hdf5/files/CVE-2026-17573.patch           |    49 +
 .../hdf5/files/CVE-2026-17574.patch           |    62 +
 meta-oe/recipes-support/hdf5/hdf5_1.14.4-3.bb |     2 +
 ...ve-eMudhra-emSign-Root-CA-C1-and-emS.patch |   272 +
 ...ve-eMudhra-emSign-Root-CA-G3-from-NS.patch |   143 +
 meta-oe/recipes-support/nss/nss_3.98.bb       |     2 +
 .../syslog-ng/files/CVE-2026-39879-01.patch   |    65 +
 .../syslog-ng/files/CVE-2026-39879-02.patch   |   571 +
 .../syslog-ng/files/CVE-2026-39879-03.patch   |   758 +
 .../syslog-ng/files/CVE-2026-39879-04.patch   |   176 +
 .../syslog-ng/syslog-ng_4.6.0.bb              |     4 +
 .../python3-aiohttp/CVE-2026-34516.patch      |   356 +
 .../python3-aiohttp/CVE-2026-34517.patch      |    65 +
 .../python3-aiohttp/CVE-2026-34519.patch      |   638 +
 .../python3-aiohttp/CVE-2026-34520.patch      |   121 +
 .../python3-aiohttp/CVE-2026-34525_p1.patch   |   128 +
 .../python3-aiohttp/CVE-2026-34525_p2.patch   |   331 +
 .../python3-aiohttp/CVE-2026-47265.patch      |    61 +
 .../python3-aiohttp/CVE-2026-50269.patch      |   166 +
 .../python3-aiohttp/CVE-2026-54273_p1.patch   |   798 +
 .../python3-aiohttp/CVE-2026-54273_p2.patch   |   181 +
 .../python3-aiohttp/CVE-2026-54274.patch      |   195 +
 .../python3-aiohttp/CVE-2026-54275.patch      |   124 +
 .../python3-aiohttp/CVE-2026-54277.patch      |    96 +
 .../python3-aiohttp/CVE-2026-54278.patch      |   209 +
 .../python3-aiohttp/CVE-2026-54279.patch      |   317 +
 .../python/python3-aiohttp_3.9.5.bb           |    15 +
 .../0001-Update-gRPC-repo-roots.-43699.patch  |  2617 +++
 ...e-repo-roots-to-chromium-roots-42094.patch | 14324 +++++++++++++++
 .../python/python3-grpcio_1.62.2.bb           |     6 +
 .../{apache2_2.4.68.bb => apache2_2.4.69.bb}  |     2 +-
 70 files changed, 42678 insertions(+), 3 deletions(-)
 create mode 100644 meta-filesystems/recipes-filesystems/ntfs-3g-ntfsprogs/files/CVE-2026-40706_p1.patch
 create mode 100644 meta-filesystems/recipes-filesystems/ntfs-3g-ntfsprogs/files/CVE-2026-40706_p2.patch
 create mode 100644 meta-filesystems/recipes-filesystems/ntfs-3g-ntfsprogs/files/CVE-2026-42616.patch
 create mode 100644 meta-filesystems/recipes-filesystems/ntfs-3g-ntfsprogs/files/CVE-2026-42618_p1.patch
 create mode 100644 meta-filesystems/recipes-filesystems/ntfs-3g-ntfsprogs/files/CVE-2026-42618_p2.patch
 create mode 100644 meta-filesystems/recipes-filesystems/ntfs-3g-ntfsprogs/files/CVE-2026-46569.patch
 create mode 100644 meta-filesystems/recipes-filesystems/ntfs-3g-ntfsprogs/files/CVE-2026-46570.patch
 create mode 100644 meta-filesystems/recipes-filesystems/ntfs-3g-ntfsprogs/files/CVE-2026-46571.patch
 create mode 100644 meta-filesystems/recipes-filesystems/ntfs-3g-ntfsprogs/files/CVE-2026-46572_CVE-2026-42617_p1.patch
 create mode 100644 meta-filesystems/recipes-filesystems/ntfs-3g-ntfsprogs/files/CVE-2026-46572_CVE-2026-42617_p2.patch
 create mode 100644 meta-filesystems/recipes-filesystems/ntfs-3g-ntfsprogs/files/CVE-2026-46572_CVE-2026-42617_p3.patch
 create mode 100644 meta-networking/recipes-daemons/squid/files/CVE-2026-104786.patch
 create mode 100644 meta-networking/recipes-daemons/squid/files/CVE-2026-32748.patch
 create mode 100644 meta-networking/recipes-daemons/squid/files/CVE-2026-33515.patch
 create mode 100644 meta-networking/recipes-daemons/squid/files/CVE-2026-33526.patch
 create mode 100644 meta-networking/recipes-daemons/squid/files/CVE-2026-47729.patch
 create mode 100644 meta-networking/recipes-daemons/squid/files/CVE-2026-50012-01.patch
 create mode 100644 meta-networking/recipes-daemons/squid/files/CVE-2026-50012-02.patch
 create mode 100644 meta-networking/recipes-daemons/squid/files/CVE-2026-61642.patch
 create mode 100644 meta-oe/recipes-connectivity/libwebsockets/libwebsockets/CVE-2026-78161.patch
 create mode 100644 meta-oe/recipes-devtools/cjson/cjson/CVE-2026-87933.patch
 create mode 100644 meta-oe/recipes-devtools/grpc/grpc/0001-Security-Update-repo-roots-to-chromium-roots-42094.patch
 create mode 100644 meta-oe/recipes-devtools/grpc/grpc/0001-security-Update-gRPC-repo-roots.-43699.patch
 create mode 100644 meta-oe/recipes-devtools/nodejs/nodejs/CVE-2026-48617.patch
 create mode 100644 meta-oe/recipes-devtools/nodejs/nodejs/CVE-2026-48619.patch
 create mode 100644 meta-oe/recipes-devtools/nodejs/nodejs/CVE-2026-48937.patch
 rename meta-oe/recipes-devtools/php/{php_8.2.34.bb => php_8.2.35.bb} (99%)
 create mode 100644 meta-oe/recipes-support/c-ares/c-ares/CVE-2026-69184.patch
 create mode 100644 meta-oe/recipes-support/c-ares/c-ares/CVE-2026-69186.patch
 create mode 100644 meta-oe/recipes-support/hdf5/files/CVE-2026-17573.patch
 create mode 100644 meta-oe/recipes-support/hdf5/files/CVE-2026-17574.patch
 create mode 100644 meta-oe/recipes-support/nss/nss/0008-Bug-2083709-Remove-eMudhra-emSign-Root-CA-C1-and-emS.patch
 create mode 100644 meta-oe/recipes-support/nss/nss/0009-Bug-2084101-Remove-eMudhra-emSign-Root-CA-G3-from-NS.patch
 create mode 100644 meta-oe/recipes-support/syslog-ng/files/CVE-2026-39879-01.patch
 create mode 100644 meta-oe/recipes-support/syslog-ng/files/CVE-2026-39879-02.patch
 create mode 100644 meta-oe/recipes-support/syslog-ng/files/CVE-2026-39879-03.patch
 create mode 100644 meta-oe/recipes-support/syslog-ng/files/CVE-2026-39879-04.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-34516.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-34517.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-34519.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-34520.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-34525_p1.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-34525_p2.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-47265.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-50269.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-54273_p1.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-54273_p2.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-54274.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-54275.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-54277.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-54278.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-54279.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-grpcio/0001-Update-gRPC-repo-roots.-43699.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-grpcio/0001-Update-repo-roots-to-chromium-roots-42094.patch
 rename meta-webserver/recipes-httpd/apache2/{apache2_2.4.68.bb => apache2_2.4.69.bb} (99%)

-- 
2.55.0


^ permalink raw reply	[flat|nested] 2+ messages in thread
end of thread, other threads:[~2026-10-27  5:29 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-10-27  4:37 [PATCH 00/45] Scarthgap pull request Anuj Mittal
2026-10-27  5:28 ` [oe] " Khem Raj

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox