mbox series

[0/6,wrynose,wrynose] cups: fix multiple CVEs

Message ID 20260601195801.4008899-1-Abhishek.Bachiphale@windriver.com
Headers show
Series cups: fix multiple CVEs | expand

Message

Abhishek Bachiphale June 1, 2026, 7:57 p.m. UTC
This series fixes multiple security vulnerabilities in cups:

- CVE-2026-34978
- CVE-2026-34979
- CVE-2026-34980
- CVE-2026-34990
- CVE-2026-39314
- CVE-2026-39316

The fixes are backported from upstream commits where available
and adapted to apply cleanly to the version currently used in
oe-core.

Changes include:
- Importing upstream patches
- Updating cups.inc to apply the patches

Tested:
- Build tested successfully
- No regressions observed during basic runtime validation

---

Abhishek Bachiphale (6):
  cups: fix CVE-2026-34978
  cups: fix CVE-2026-34979
  cups: fix CVE-2026-34980
  cups: fix CVE-2026-34990
  cups: fix CVE-2026-39314
  cups: fix CVE-2026-39316

 meta/recipes-extended/cups/cups.inc           |   6 +
 .../cups/cups/CVE-2026-34978.patch            | 120 ++++++
 .../cups/cups/CVE-2026-34979.patch            |  57 +++
 .../cups/cups/CVE-2026-34980.patch            |  88 +++++
 .../cups/cups/CVE-2026-34990.patch            | 348 ++++++++++++++++++
 .../cups/cups/CVE-2026-39314.patch            |  47 +++
 .../cups/cups/CVE-2026-39316.patch            |  42 +++
 7 files changed, 708 insertions(+)
 create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-34978.patch
 create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-34979.patch
 create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-34980.patch
 create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-34990.patch
 create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-39314.patch
 create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-39316.patch