mbox series

[scarthgap,0/5] libsoup-2.4: Fix several CVEs

Message ID 20260929205055.2403390-1-jason.stasiak@garmin.com
Headers show
Series libsoup-2.4: Fix several CVEs | expand

Message

Jason Stasiak Sept. 29, 2026, 8:50 p.m. UTC
Backport CVE fixes from both the upstream Yocto Wrynose branch and Libsoup3
repository.

Jason Stasiak (5):
  libsoup-2.4: fix CVE-2026-1539
  libsoup-2.4: fix CVE-2026-1801
  libsoup-2.4: fix CVE-2026-2443
  libsoup-2.4: fix CVE-2026-5119
  libsoup-2.4: fix CVE-2026-3633

 .../libsoup/libsoup-2.4/CVE-2026-1539.patch   | 104 +++++
 .../libsoup/libsoup-2.4/CVE-2026-1801.patch   | 217 ++++++++++
 .../libsoup/libsoup-2.4/CVE-2026-2443.patch   | 390 ++++++++++++++++++
 .../libsoup/libsoup-2.4/CVE-2026-3633-1.patch |  51 +++
 .../libsoup/libsoup-2.4/CVE-2026-3633-2.patch |  53 +++
 .../libsoup/libsoup-2.4/CVE-2026-3633-3.patch |  49 +++
 .../libsoup/libsoup-2.4/CVE-2026-3633-4.patch | 113 +++++
 .../libsoup/libsoup-2.4/CVE-2026-5119.patch   | 129 ++++++
 .../libsoup/libsoup-2.4_2.74.3.bb             |   8 +
 9 files changed, 1114 insertions(+)
 create mode 100644 meta/recipes-support/libsoup/libsoup-2.4/CVE-2026-1539.patch
 create mode 100644 meta/recipes-support/libsoup/libsoup-2.4/CVE-2026-1801.patch
 create mode 100644 meta/recipes-support/libsoup/libsoup-2.4/CVE-2026-2443.patch
 create mode 100644 meta/recipes-support/libsoup/libsoup-2.4/CVE-2026-3633-1.patch
 create mode 100644 meta/recipes-support/libsoup/libsoup-2.4/CVE-2026-3633-2.patch
 create mode 100644 meta/recipes-support/libsoup/libsoup-2.4/CVE-2026-3633-3.patch
 create mode 100644 meta/recipes-support/libsoup/libsoup-2.4/CVE-2026-3633-4.patch
 create mode 100644 meta/recipes-support/libsoup/libsoup-2.4/CVE-2026-5119.patch