[00/45] Scarthgap pull request

Message ID	cover.1793075119.git.anuj.mittal@oss.qualcomm.com
State	New
Headers	show Received: from mx0b-0031df01.pphosted.com (mx0b-0031df01.pphosted.com [205.220.180.131]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.12150.1793075875692334622 for <openembedded-devel@lists.openembedded.org>; Mon, 26 Oct 2026 21:37:55 -0700 ip: 205.220.180.131, mailfrom: anuj.mittal@oss.qualcomm.com) From: Anuj Mittal <anuj.mittal@oss.qualcomm.com> To: openembedded-devel@lists.openembedded.org Subject: [PATCH 00/45] Scarthgap pull request Date: Tue, 27 Oct 2026 10:07:44 +0530 Message-ID: <cover.1793075119.git.anuj.mittal@oss.qualcomm.com> MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

Message ID

cover.1793075119.git.anuj.mittal@oss.qualcomm.com

State

New

Headers

From: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
To: openembedded-devel@lists.openembedded.org
Subject: [PATCH 00/45] Scarthgap pull request
Date: Tue, 27 Oct 2026 10:07:44 +0530
Message-ID: <cover.1793075119.git.anuj.mittal@oss.qualcomm.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Message

Anuj Mittal Oct. 27, 2026, 4:37 a.m. UTC

Please merge these changes in scarthgap. Tested locally and on autbuilder:

https://autobuilder.yoctoproject.org/valkyrie/#/builders/81/builds/1901

The following changes since commit 0f00f8b9a21950640da8c5707343e5540133f86e:

  vboxguestdrivers: fix vboxvideo build on kernels lacking drm_fb_helper_alloc_info (2026-09-29 16:10:23 +0530)

are available in the Git repository at:

  https://git.openembedded.org/meta-openembedded-contrib anujm/scarthgap
  https://git.openembedded.org/meta-openembedded-contrib/log/?h=anujm/scarthgap

for you to fetch changes up to 2db6aece32c7f8ebf6015b468e1b4e21de072e3b:

  python3-grpcio: update gRPC repo roots (2026-10-26 12:46:49 +0530)

----------------------------------------------------------------

Ankur Tyagi (1):
  apache2: upgrade 2.4.68 -> 2.4.69

Darsh Kelaiya (20):
  python3-aiohttp: fix CVE-2026-34519
  python3-aiohttp: fix CVE-2026-34516
  python3-aiohttp: fix CVE-2026-34517
  python3-aiohttp: fix CVE-2026-34520
  python3-aiohttp: fix CVE-2026-34525
  python3-aiohttp: fix CVE-2026-47265
  python3-aiohttp: fix CVE-2026-50269
  python3-aiohttp: fix CVE-2026-54274
  python3-aiohttp: fix CVE-2026-54275
  python3-aiohttp: fix CVE-2026-54277
  python3-aiohttp: fix CVE-2026-54278
  python3-aiohttp: fix CVE-2026-54279
  python3-aiohttp: fix CVE-2026-54273
  ntfs-3g-ntfsprogs: fix CVE-2026-46572 and CVE-2026-42617
  ntfs-3g-ntfsprogs: fix CVE-2026-46571
  ntfs-3g-ntfsprogs: fix CVE-2026-46570
  ntfs-3g-ntfsprogs: fix CVE-2026-46569
  ntfs-3g-ntfsprogs: fix CVE-2026-42618
  ntfs-3g-ntfsprogs: fix CVE-2026-42616
  ntfs-3g-ntfsprogs: fix CVE-2026-40706

Jason Schonberg (1):
  php: upgrade 8.2.34 -> 8.2.35

João Marcos Costa (Schneider Electric) (2):
  ntp: add CVE-2016-1548 to CVE_STATUS_NTP
  ntpsec: add CVE_STATUS for CVE-2016-1548

Mehmet Fide (1):
  spidev-test: clean the build dir before configure

Peter Marko (15):
  c-ares: patch CVE-2026-69186
  c-ares: patch CVE-2026-69184
  cjson: patch CVE-2026-87933
  syslog-ng: patch CVE-2026-39879
  libwebsockets: patch CVE-2026-78161
  squid: patch CVE-2026-33526
  squid: patch CVE-2026-33515
  squid: patch CVE-2026-32748
  squid: patch CVE-2026-47729
  squid: patch CVE-2026-50012
  squid: patch CVE-2026-61642
  squid: patch CVE-2026-104786
  nss: remove compromised eMudhra certificates
  grpc: update gRPC repo roots
  python3-grpcio: update gRPC repo roots

Rohini Sangam (3):
  nodejs: Security fix for CVE-2026-48617
  nodejs: Security fix for CVE-2026-48619
  nodejs: Security fix for CVE-2026-48937

Yogita Urade (2):
  hdf5: Fix CVE-2026-17573
  hdf5: Fix CVE-2026-17574

 .../files/CVE-2026-40706_p1.patch             |    60 +
 .../files/CVE-2026-40706_p2.patch             |    34 +
 .../files/CVE-2026-42616.patch                |    70 +
 .../files/CVE-2026-42618_p1.patch             |    53 +
 .../files/CVE-2026-42618_p2.patch             |   216 +
 .../files/CVE-2026-46569.patch                |    62 +
 .../files/CVE-2026-46570.patch                |    42 +
 .../files/CVE-2026-46571.patch                |    50 +
 .../CVE-2026-46572_CVE-2026-42617_p1.patch    |    66 +
 .../CVE-2026-46572_CVE-2026-42617_p2.patch    |   104 +
 .../CVE-2026-46572_CVE-2026-42617_p3.patch    |    35 +
 .../ntfs-3g-ntfsprogs_2022.10.3.bb            |    11 +
 .../squid/files/CVE-2026-104786.patch         |   131 +
 .../squid/files/CVE-2026-32748.patch          |   182 +
 .../squid/files/CVE-2026-33515.patch          |   199 +
 .../squid/files/CVE-2026-33526.patch          |    35 +
 .../squid/files/CVE-2026-47729.patch          |    51 +
 .../squid/files/CVE-2026-50012-01.patch       |    34 +
 .../squid/files/CVE-2026-50012-02.patch       |    31 +
 .../squid/files/CVE-2026-61642.patch          |    43 +
 .../recipes-daemons/squid/squid_6.14.bb       |     8 +
 .../recipes-support/ntp/ntp_4.2.8p17.bb       |     1 +
 .../recipes-support/ntpsec/ntpsec_1.2.2a.bb   |     2 +
 .../libwebsockets/CVE-2026-78161.patch        |    45 +
 .../libwebsockets/libwebsockets_4.3.10.bb     |     1 +
 .../cjson/cjson/CVE-2026-87933.patch          |   108 +
 .../recipes-devtools/cjson/cjson_1.7.19.bb    |     1 +
 ...e-repo-roots-to-chromium-roots-42094.patch | 14348 ++++++++++++++++
 ...curity-Update-gRPC-repo-roots.-43699.patch |  2617 +++
 meta-oe/recipes-devtools/grpc/grpc_1.60.1.bb  |     2 +
 .../nodejs/nodejs/CVE-2026-48617.patch        |   118 +
 .../nodejs/nodejs/CVE-2026-48619.patch        |   253 +
 .../nodejs/nodejs/CVE-2026-48937.patch        |   349 +
 .../recipes-devtools/nodejs/nodejs_20.20.2.bb |     3 +
 .../php/{php_8.2.34.bb => php_8.2.35.bb}      |     2 +-
 .../recipes-kernel/spidev-test/spidev-test.bb |     1 +
 .../c-ares/c-ares/CVE-2026-69184.patch        |   295 +
 .../c-ares/c-ares/CVE-2026-69186.patch        |   159 +
 .../recipes-support/c-ares/c-ares_1.27.0.bb   |     5 +-
 .../hdf5/files/CVE-2026-17573.patch           |    49 +
 .../hdf5/files/CVE-2026-17574.patch           |    62 +
 meta-oe/recipes-support/hdf5/hdf5_1.14.4-3.bb |     2 +
 ...ve-eMudhra-emSign-Root-CA-C1-and-emS.patch |   272 +
 ...ve-eMudhra-emSign-Root-CA-G3-from-NS.patch |   143 +
 meta-oe/recipes-support/nss/nss_3.98.bb       |     2 +
 .../syslog-ng/files/CVE-2026-39879-01.patch   |    65 +
 .../syslog-ng/files/CVE-2026-39879-02.patch   |   571 +
 .../syslog-ng/files/CVE-2026-39879-03.patch   |   758 +
 .../syslog-ng/files/CVE-2026-39879-04.patch   |   176 +
 .../syslog-ng/syslog-ng_4.6.0.bb              |     4 +
 .../python3-aiohttp/CVE-2026-34516.patch      |   356 +
 .../python3-aiohttp/CVE-2026-34517.patch      |    65 +
 .../python3-aiohttp/CVE-2026-34519.patch      |   638 +
 .../python3-aiohttp/CVE-2026-34520.patch      |   121 +
 .../python3-aiohttp/CVE-2026-34525_p1.patch   |   128 +
 .../python3-aiohttp/CVE-2026-34525_p2.patch   |   331 +
 .../python3-aiohttp/CVE-2026-47265.patch      |    61 +
 .../python3-aiohttp/CVE-2026-50269.patch      |   166 +
 .../python3-aiohttp/CVE-2026-54273_p1.patch   |   798 +
 .../python3-aiohttp/CVE-2026-54273_p2.patch   |   181 +
 .../python3-aiohttp/CVE-2026-54274.patch      |   195 +
 .../python3-aiohttp/CVE-2026-54275.patch      |   124 +
 .../python3-aiohttp/CVE-2026-54277.patch      |    96 +
 .../python3-aiohttp/CVE-2026-54278.patch      |   209 +
 .../python3-aiohttp/CVE-2026-54279.patch      |   317 +
 .../python/python3-aiohttp_3.9.5.bb           |    15 +
 .../0001-Update-gRPC-repo-roots.-43699.patch  |  2617 +++
 ...e-repo-roots-to-chromium-roots-42094.patch | 14324 +++++++++++++++
 .../python/python3-grpcio_1.62.2.bb           |     6 +
 .../{apache2_2.4.68.bb => apache2_2.4.69.bb}  |     2 +-
 70 files changed, 42678 insertions(+), 3 deletions(-)
 create mode 100644 meta-filesystems/recipes-filesystems/ntfs-3g-ntfsprogs/files/CVE-2026-40706_p1.patch
 create mode 100644 meta-filesystems/recipes-filesystems/ntfs-3g-ntfsprogs/files/CVE-2026-40706_p2.patch
 create mode 100644 meta-filesystems/recipes-filesystems/ntfs-3g-ntfsprogs/files/CVE-2026-42616.patch
 create mode 100644 meta-filesystems/recipes-filesystems/ntfs-3g-ntfsprogs/files/CVE-2026-42618_p1.patch
 create mode 100644 meta-filesystems/recipes-filesystems/ntfs-3g-ntfsprogs/files/CVE-2026-42618_p2.patch
 create mode 100644 meta-filesystems/recipes-filesystems/ntfs-3g-ntfsprogs/files/CVE-2026-46569.patch
 create mode 100644 meta-filesystems/recipes-filesystems/ntfs-3g-ntfsprogs/files/CVE-2026-46570.patch
 create mode 100644 meta-filesystems/recipes-filesystems/ntfs-3g-ntfsprogs/files/CVE-2026-46571.patch
 create mode 100644 meta-filesystems/recipes-filesystems/ntfs-3g-ntfsprogs/files/CVE-2026-46572_CVE-2026-42617_p1.patch
 create mode 100644 meta-filesystems/recipes-filesystems/ntfs-3g-ntfsprogs/files/CVE-2026-46572_CVE-2026-42617_p2.patch
 create mode 100644 meta-filesystems/recipes-filesystems/ntfs-3g-ntfsprogs/files/CVE-2026-46572_CVE-2026-42617_p3.patch
 create mode 100644 meta-networking/recipes-daemons/squid/files/CVE-2026-104786.patch
 create mode 100644 meta-networking/recipes-daemons/squid/files/CVE-2026-32748.patch
 create mode 100644 meta-networking/recipes-daemons/squid/files/CVE-2026-33515.patch
 create mode 100644 meta-networking/recipes-daemons/squid/files/CVE-2026-33526.patch
 create mode 100644 meta-networking/recipes-daemons/squid/files/CVE-2026-47729.patch
 create mode 100644 meta-networking/recipes-daemons/squid/files/CVE-2026-50012-01.patch
 create mode 100644 meta-networking/recipes-daemons/squid/files/CVE-2026-50012-02.patch
 create mode 100644 meta-networking/recipes-daemons/squid/files/CVE-2026-61642.patch
 create mode 100644 meta-oe/recipes-connectivity/libwebsockets/libwebsockets/CVE-2026-78161.patch
 create mode 100644 meta-oe/recipes-devtools/cjson/cjson/CVE-2026-87933.patch
 create mode 100644 meta-oe/recipes-devtools/grpc/grpc/0001-Security-Update-repo-roots-to-chromium-roots-42094.patch
 create mode 100644 meta-oe/recipes-devtools/grpc/grpc/0001-security-Update-gRPC-repo-roots.-43699.patch
 create mode 100644 meta-oe/recipes-devtools/nodejs/nodejs/CVE-2026-48617.patch
 create mode 100644 meta-oe/recipes-devtools/nodejs/nodejs/CVE-2026-48619.patch
 create mode 100644 meta-oe/recipes-devtools/nodejs/nodejs/CVE-2026-48937.patch
 rename meta-oe/recipes-devtools/php/{php_8.2.34.bb => php_8.2.35.bb} (99%)
 create mode 100644 meta-oe/recipes-support/c-ares/c-ares/CVE-2026-69184.patch
 create mode 100644 meta-oe/recipes-support/c-ares/c-ares/CVE-2026-69186.patch
 create mode 100644 meta-oe/recipes-support/hdf5/files/CVE-2026-17573.patch
 create mode 100644 meta-oe/recipes-support/hdf5/files/CVE-2026-17574.patch
 create mode 100644 meta-oe/recipes-support/nss/nss/0008-Bug-2083709-Remove-eMudhra-emSign-Root-CA-C1-and-emS.patch
 create mode 100644 meta-oe/recipes-support/nss/nss/0009-Bug-2084101-Remove-eMudhra-emSign-Root-CA-G3-from-NS.patch
 create mode 100644 meta-oe/recipes-support/syslog-ng/files/CVE-2026-39879-01.patch
 create mode 100644 meta-oe/recipes-support/syslog-ng/files/CVE-2026-39879-02.patch
 create mode 100644 meta-oe/recipes-support/syslog-ng/files/CVE-2026-39879-03.patch
 create mode 100644 meta-oe/recipes-support/syslog-ng/files/CVE-2026-39879-04.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-34516.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-34517.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-34519.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-34520.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-34525_p1.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-34525_p2.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-47265.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-50269.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-54273_p1.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-54273_p2.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-54274.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-54275.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-54277.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-54278.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-54279.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-grpcio/0001-Update-gRPC-repo-roots.-43699.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-grpcio/0001-Update-repo-roots-to-chromium-roots-42094.patch
 rename meta-webserver/recipes-httpd/apache2/{apache2_2.4.68.bb => apache2_2.4.69.bb} (99%)

Comments

Khem Raj Oct. 27, 2026, 5:28 a.m. UTC | #1

merged now, thanks Anuj

On Mon, Oct 26, 2026 at 9:37 PM Anuj Mittal via lists.openembedded.org
<anuj.mittal=oss.qualcomm.com@lists.openembedded.org> wrote:

> Please merge these changes in scarthgap. Tested locally and on autbuilder:
>
> https://autobuilder.yoctoproject.org/valkyrie/#/builders/81/builds/1901
>
> The following changes since commit
> 0f00f8b9a21950640da8c5707343e5540133f86e:
>
>   vboxguestdrivers: fix vboxvideo build on kernels lacking
> drm_fb_helper_alloc_info (2026-09-29 16:10:23 +0530)
>
> are available in the Git repository at:
>
>   https://git.openembedded.org/meta-openembedded-contrib anujm/scarthgap
>
> https://git.openembedded.org/meta-openembedded-contrib/log/?h=anujm/scarthgap
>
> for you to fetch changes up to 2db6aece32c7f8ebf6015b468e1b4e21de072e3b:
>
>   python3-grpcio: update gRPC repo roots (2026-10-26 12:46:49 +0530)
>
> ----------------------------------------------------------------
>
> Ankur Tyagi (1):
>   apache2: upgrade 2.4.68 -> 2.4.69
>
> Darsh Kelaiya (20):
>   python3-aiohttp: fix CVE-2026-34519
>   python3-aiohttp: fix CVE-2026-34516
>   python3-aiohttp: fix CVE-2026-34517
>   python3-aiohttp: fix CVE-2026-34520
>   python3-aiohttp: fix CVE-2026-34525
>   python3-aiohttp: fix CVE-2026-47265
>   python3-aiohttp: fix CVE-2026-50269
>   python3-aiohttp: fix CVE-2026-54274
>   python3-aiohttp: fix CVE-2026-54275
>   python3-aiohttp: fix CVE-2026-54277
>   python3-aiohttp: fix CVE-2026-54278
>   python3-aiohttp: fix CVE-2026-54279
>   python3-aiohttp: fix CVE-2026-54273
>   ntfs-3g-ntfsprogs: fix CVE-2026-46572 and CVE-2026-42617
>   ntfs-3g-ntfsprogs: fix CVE-2026-46571
>   ntfs-3g-ntfsprogs: fix CVE-2026-46570
>   ntfs-3g-ntfsprogs: fix CVE-2026-46569
>   ntfs-3g-ntfsprogs: fix CVE-2026-42618
>   ntfs-3g-ntfsprogs: fix CVE-2026-42616
>   ntfs-3g-ntfsprogs: fix CVE-2026-40706
>
> Jason Schonberg (1):
>   php: upgrade 8.2.34 -> 8.2.35
>
> João Marcos Costa (Schneider Electric) (2):
>   ntp: add CVE-2016-1548 to CVE_STATUS_NTP
>   ntpsec: add CVE_STATUS for CVE-2016-1548
>
> Mehmet Fide (1):
>   spidev-test: clean the build dir before configure
>
> Peter Marko (15):
>   c-ares: patch CVE-2026-69186
>   c-ares: patch CVE-2026-69184
>   cjson: patch CVE-2026-87933
>   syslog-ng: patch CVE-2026-39879
>   libwebsockets: patch CVE-2026-78161
>   squid: patch CVE-2026-33526
>   squid: patch CVE-2026-33515
>   squid: patch CVE-2026-32748
>   squid: patch CVE-2026-47729
>   squid: patch CVE-2026-50012
>   squid: patch CVE-2026-61642
>   squid: patch CVE-2026-104786
>   nss: remove compromised eMudhra certificates
>   grpc: update gRPC repo roots
>   python3-grpcio: update gRPC repo roots
>
> Rohini Sangam (3):
>   nodejs: Security fix for CVE-2026-48617
>   nodejs: Security fix for CVE-2026-48619
>   nodejs: Security fix for CVE-2026-48937
>
> Yogita Urade (2):
>   hdf5: Fix CVE-2026-17573
>   hdf5: Fix CVE-2026-17574
>
>  .../files/CVE-2026-40706_p1.patch             |    60 +
>  .../files/CVE-2026-40706_p2.patch             |    34 +
>  .../files/CVE-2026-42616.patch                |    70 +
>  .../files/CVE-2026-42618_p1.patch             |    53 +
>  .../files/CVE-2026-42618_p2.patch             |   216 +
>  .../files/CVE-2026-46569.patch                |    62 +
>  .../files/CVE-2026-46570.patch                |    42 +
>  .../files/CVE-2026-46571.patch                |    50 +
>  .../CVE-2026-46572_CVE-2026-42617_p1.patch    |    66 +
>  .../CVE-2026-46572_CVE-2026-42617_p2.patch    |   104 +
>  .../CVE-2026-46572_CVE-2026-42617_p3.patch    |    35 +
>  .../ntfs-3g-ntfsprogs_2022.10.3.bb            |    11 +
>  .../squid/files/CVE-2026-104786.patch         |   131 +
>  .../squid/files/CVE-2026-32748.patch          |   182 +
>  .../squid/files/CVE-2026-33515.patch          |   199 +
>  .../squid/files/CVE-2026-33526.patch          |    35 +
>  .../squid/files/CVE-2026-47729.patch          |    51 +
>  .../squid/files/CVE-2026-50012-01.patch       |    34 +
>  .../squid/files/CVE-2026-50012-02.patch       |    31 +
>  .../squid/files/CVE-2026-61642.patch          |    43 +
>  .../recipes-daemons/squid/squid_6.14.bb       |     8 +
>  .../recipes-support/ntp/ntp_4.2.8p17.bb       |     1 +
>  .../recipes-support/ntpsec/ntpsec_1.2.2a.bb   |     2 +
>  .../libwebsockets/CVE-2026-78161.patch        |    45 +
>  .../libwebsockets/libwebsockets_4.3.10.bb     |     1 +
>  .../cjson/cjson/CVE-2026-87933.patch          |   108 +
>  .../recipes-devtools/cjson/cjson_1.7.19.bb    |     1 +
>  ...e-repo-roots-to-chromium-roots-42094.patch | 14348 ++++++++++++++++
>  ...curity-Update-gRPC-repo-roots.-43699.patch |  2617 +++
>  meta-oe/recipes-devtools/grpc/grpc_1.60.1.bb  |     2 +
>  .../nodejs/nodejs/CVE-2026-48617.patch        |   118 +
>  .../nodejs/nodejs/CVE-2026-48619.patch        |   253 +
>  .../nodejs/nodejs/CVE-2026-48937.patch        |   349 +
>  .../recipes-devtools/nodejs/nodejs_20.20.2.bb |     3 +
>  .../php/{php_8.2.34.bb => php_8.2.35.bb}      |     2 +-
>  .../recipes-kernel/spidev-test/spidev-test.bb |     1 +
>  .../c-ares/c-ares/CVE-2026-69184.patch        |   295 +
>  .../c-ares/c-ares/CVE-2026-69186.patch        |   159 +
>  .../recipes-support/c-ares/c-ares_1.27.0.bb   |     5 +-
>  .../hdf5/files/CVE-2026-17573.patch           |    49 +
>  .../hdf5/files/CVE-2026-17574.patch           |    62 +
>  meta-oe/recipes-support/hdf5/hdf5_1.14.4-3.bb |     2 +
>  ...ve-eMudhra-emSign-Root-CA-C1-and-emS.patch |   272 +
>  ...ve-eMudhra-emSign-Root-CA-G3-from-NS.patch |   143 +
>  meta-oe/recipes-support/nss/nss_3.98.bb       |     2 +
>  .../syslog-ng/files/CVE-2026-39879-01.patch   |    65 +
>  .../syslog-ng/files/CVE-2026-39879-02.patch   |   571 +
>  .../syslog-ng/files/CVE-2026-39879-03.patch   |   758 +
>  .../syslog-ng/files/CVE-2026-39879-04.patch   |   176 +
>  .../syslog-ng/syslog-ng_4.6.0.bb              |     4 +
>  .../python3-aiohttp/CVE-2026-34516.patch      |   356 +
>  .../python3-aiohttp/CVE-2026-34517.patch      |    65 +
>  .../python3-aiohttp/CVE-2026-34519.patch      |   638 +
>  .../python3-aiohttp/CVE-2026-34520.patch      |   121 +
>  .../python3-aiohttp/CVE-2026-34525_p1.patch   |   128 +
>  .../python3-aiohttp/CVE-2026-34525_p2.patch   |   331 +
>  .../python3-aiohttp/CVE-2026-47265.patch      |    61 +
>  .../python3-aiohttp/CVE-2026-50269.patch      |   166 +
>  .../python3-aiohttp/CVE-2026-54273_p1.patch   |   798 +
>  .../python3-aiohttp/CVE-2026-54273_p2.patch   |   181 +
>  .../python3-aiohttp/CVE-2026-54274.patch      |   195 +
>  .../python3-aiohttp/CVE-2026-54275.patch      |   124 +
>  .../python3-aiohttp/CVE-2026-54277.patch      |    96 +
>  .../python3-aiohttp/CVE-2026-54278.patch      |   209 +
>  .../python3-aiohttp/CVE-2026-54279.patch      |   317 +
>  .../python/python3-aiohttp_3.9.5.bb           |    15 +
>  .../0001-Update-gRPC-repo-roots.-43699.patch  |  2617 +++
>  ...e-repo-roots-to-chromium-roots-42094.patch | 14324 +++++++++++++++
>  .../python/python3-grpcio_1.62.2.bb           |     6 +
>  .../{apache2_2.4.68.bb => apache2_2.4.69.bb}  |     2 +-
>  70 files changed, 42678 insertions(+), 3 deletions(-)
>  create mode 100644
> meta-filesystems/recipes-filesystems/ntfs-3g-ntfsprogs/files/CVE-2026-40706_p1.patch
>  create mode 100644
> meta-filesystems/recipes-filesystems/ntfs-3g-ntfsprogs/files/CVE-2026-40706_p2.patch
>  create mode 100644
> meta-filesystems/recipes-filesystems/ntfs-3g-ntfsprogs/files/CVE-2026-42616.patch
>  create mode 100644
> meta-filesystems/recipes-filesystems/ntfs-3g-ntfsprogs/files/CVE-2026-42618_p1.patch
>  create mode 100644
> meta-filesystems/recipes-filesystems/ntfs-3g-ntfsprogs/files/CVE-2026-42618_p2.patch
>  create mode 100644
> meta-filesystems/recipes-filesystems/ntfs-3g-ntfsprogs/files/CVE-2026-46569.patch
>  create mode 100644
> meta-filesystems/recipes-filesystems/ntfs-3g-ntfsprogs/files/CVE-2026-46570.patch
>  create mode 100644
> meta-filesystems/recipes-filesystems/ntfs-3g-ntfsprogs/files/CVE-2026-46571.patch
>  create mode 100644
> meta-filesystems/recipes-filesystems/ntfs-3g-ntfsprogs/files/CVE-2026-46572_CVE-2026-42617_p1.patch
>  create mode 100644
> meta-filesystems/recipes-filesystems/ntfs-3g-ntfsprogs/files/CVE-2026-46572_CVE-2026-42617_p2.patch
>  create mode 100644
> meta-filesystems/recipes-filesystems/ntfs-3g-ntfsprogs/files/CVE-2026-46572_CVE-2026-42617_p3.patch
>  create mode 100644
> meta-networking/recipes-daemons/squid/files/CVE-2026-104786.patch
>  create mode 100644
> meta-networking/recipes-daemons/squid/files/CVE-2026-32748.patch
>  create mode 100644
> meta-networking/recipes-daemons/squid/files/CVE-2026-33515.patch
>  create mode 100644
> meta-networking/recipes-daemons/squid/files/CVE-2026-33526.patch
>  create mode 100644
> meta-networking/recipes-daemons/squid/files/CVE-2026-47729.patch
>  create mode 100644
> meta-networking/recipes-daemons/squid/files/CVE-2026-50012-01.patch
>  create mode 100644
> meta-networking/recipes-daemons/squid/files/CVE-2026-50012-02.patch
>  create mode 100644
> meta-networking/recipes-daemons/squid/files/CVE-2026-61642.patch
>  create mode 100644
> meta-oe/recipes-connectivity/libwebsockets/libwebsockets/CVE-2026-78161.patch
>  create mode 100644
> meta-oe/recipes-devtools/cjson/cjson/CVE-2026-87933.patch
>  create mode 100644
> meta-oe/recipes-devtools/grpc/grpc/0001-Security-Update-repo-roots-to-chromium-roots-42094.patch
>  create mode 100644
> meta-oe/recipes-devtools/grpc/grpc/0001-security-Update-gRPC-repo-roots.-43699.patch
>  create mode 100644
> meta-oe/recipes-devtools/nodejs/nodejs/CVE-2026-48617.patch
>  create mode 100644
> meta-oe/recipes-devtools/nodejs/nodejs/CVE-2026-48619.patch
>  create mode 100644
> meta-oe/recipes-devtools/nodejs/nodejs/CVE-2026-48937.patch
>  rename meta-oe/recipes-devtools/php/{php_8.2.34.bb => php_8.2.35.bb}
> (99%)
>  create mode 100644
> meta-oe/recipes-support/c-ares/c-ares/CVE-2026-69184.patch
>  create mode 100644
> meta-oe/recipes-support/c-ares/c-ares/CVE-2026-69186.patch
>  create mode 100644 meta-oe/recipes-support/hdf5/files/CVE-2026-17573.patch
>  create mode 100644 meta-oe/recipes-support/hdf5/files/CVE-2026-17574.patch
>  create mode 100644
> meta-oe/recipes-support/nss/nss/0008-Bug-2083709-Remove-eMudhra-emSign-Root-CA-C1-and-emS.patch
>  create mode 100644
> meta-oe/recipes-support/nss/nss/0009-Bug-2084101-Remove-eMudhra-emSign-Root-CA-G3-from-NS.patch
>  create mode 100644
> meta-oe/recipes-support/syslog-ng/files/CVE-2026-39879-01.patch
>  create mode 100644
> meta-oe/recipes-support/syslog-ng/files/CVE-2026-39879-02.patch
>  create mode 100644
> meta-oe/recipes-support/syslog-ng/files/CVE-2026-39879-03.patch
>  create mode 100644
> meta-oe/recipes-support/syslog-ng/files/CVE-2026-39879-04.patch
>  create mode 100644
> meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-34516.patch
>  create mode 100644
> meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-34517.patch
>  create mode 100644
> meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-34519.patch
>  create mode 100644
> meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-34520.patch
>  create mode 100644
> meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-34525_p1.patch
>  create mode 100644
> meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-34525_p2.patch
>  create mode 100644
> meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-47265.patch
>  create mode 100644
> meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-50269.patch
>  create mode 100644
> meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-54273_p1.patch
>  create mode 100644
> meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-54273_p2.patch
>  create mode 100644
> meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-54274.patch
>  create mode 100644
> meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-54275.patch
>  create mode 100644
> meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-54277.patch
>  create mode 100644
> meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-54278.patch
>  create mode 100644
> meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-54279.patch
>  create mode 100644
> meta-python/recipes-devtools/python/python3-grpcio/0001-Update-gRPC-repo-roots.-43699.patch
>  create mode 100644
> meta-python/recipes-devtools/python/python3-grpcio/0001-Update-repo-roots-to-chromium-roots-42094.patch
>  rename meta-webserver/recipes-httpd/apache2/{apache2_2.4.68.bb =>
> apache2_2.4.69.bb} (99%)
>
> --
> 2.55.0
>
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#131455):
> https://lists.openembedded.org/g/openembedded-devel/message/131455
> Mute This Topic: https://lists.openembedded.org/mt/121955317/1997914
> Group Owner: openembedded-devel+owner@lists.openembedded.org
> Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [
> raj.khem@gmail.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>
>

[00/45] Scarthgap pull request

Pull-request

Message

Comments