[wrynose,15/60] openssh: set status for CVE-2026-55654

Message ID	7940891fd50e0fe5a509d81afd66ebc05e4420d3.1791707817.git.yoann.congal@smile.fr
State	New
Headers	show Return-Path: <yoann.congal@smile.fr> ip: 209.85.221.48, mailfrom: yoann.congal@smile.fr) From: Yoann Congal <yoann.congal@smile.fr> To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 15/60] openssh: set status for CVE-2026-55654 Date: Sun, 11 Oct 2026 10:39:48 +0200 Message-ID: <7940891fd50e0fe5a509d81afd66ebc05e4420d3.1791707817.git.yoann.congal@smile.fr> In-Reply-To: <cover.1791707817.git.yoann.congal@smile.fr> References: <cover.1791707817.git.yoann.congal@smile.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	[wrynose,01/60] glibc: set status for CVE-2011-0536 and CVE-2025-0577 \| expand [wrynose,01/60] glibc: set status for CVE-2011-0536 and CVE-2025-0577 [wrynose,02/60] gnutls: set status for CVE-2023-0361 [wrynose,03/60] libarchive: set status for CVE-2026-4424 [wrynose,04/60] nfs-utils: set status for CVE-2025-12801 [wrynose,05/60] openssl: set status for CVE-2015-3216 [wrynose,06/60] ovmf: set status of CVE-2017-5731 and CVE-2019-14584 [wrynose,07/60] ppp: set status for CVE-2020-15704 [wrynose,08/60] pulseaudio: set status for CVE-2020-15710 and CVE-2020-16123 [wrynose,09/60] tzcode/tzdata: fix upstream version check [wrynose,10/60] tzdata/tzcode-native: upgrade 2026c -> 2026d [wrynose,11/60] bind: upgrade 9.20.26 -> 9.20.27 [wrynose,12/60] bind: upgrade 9.20.27 -> 9.20.29 [wrynose,13/60] graphene: set status for CVE-2026-81281 [wrynose,14/60] openssh: set status for CVE-2026-55655 [wrynose,15/60] openssh: set status for CVE-2026-55654 [wrynose,16/60] xserver-xorg: set status for CVE-2026-55999 and CVE-2026-56000 [wrynose,17/60] openssh: fix CVE-2026-73283 [wrynose,18/60] openssh: fix CVE-2026-73282 [wrynose,19/60] openssh: fix CVE-2026-73281 [wrynose,20/60] vim: set CVE_STATUS for CVE-2026-51400 [wrynose,21/60] vim: set CVE_STATUS for CVE-2026-51401 [wrynose,22/60] gnutls: fix CVE-2026-42012 [wrynose,23/60] gnutls: fix CVE-2026-42013 [wrynose,24/60] gnutls: fix CVE-2026-42014 [wrynose,25/60] gnutls: fix CVE-2026-42015 [wrynose,26/60] gnutls: fix CVE-2026-5260 [wrynose,27/60] openssl: upgrade 3.5.8 -> 3.5.9 [wrynose,28/60] glibc: stable 2.43 branch updates to 9cda6fc96ab [wrynose,29/60] glibc: stable 2.43 branch updates to 562cd7badd [wrynose,30/60] glibc: set status for CVE-2026-86805 and CVE-2026-95818 [wrynose,31/60] devtool: standard: fix update-recipe/finish --initial-rev override [wrynose,32/60] oeqa/selftest/devtool: cover update-recipe --initial-rev [wrynose,33/60] barebox: upgrade 2026.04.0 -> 2026.04.2 [wrynose,34/60] python3-click: depend on python3-shell for shlex [wrynose,35/60] libpng: upgrade 1.6.56 -> 1.6.58 [wrynose,36/60] libpng: upgrade 1.6.58 -> 1.6.59 [wrynose,37/60] util-linux(-uuid): upgrade 2.41.5 -> 2.41.6 [wrynose,38/60] qemuriscv.inc: default to fw_dynamic.elf as QEMU BIOS [wrynose,39/60] libsolv: patch CVE-2026-48863 [wrynose,40/60] expat: patch CVE-2026-66046 and CVE-2026-76641 [wrynose,41/60] expat: patch CVE-2026-76956 [wrynose,42/60] expat: patch CVE-2026-76957 [wrynose,43/60] expat: patch CVE-2026-93990 [wrynose,44/60] ffmpeg: Fix for CVE-2026-66036 [wrynose,45/60] ffmpeg: Fix for CVE-2026-66041 [wrynose,46/60] systemd: fix mDNS hostname changes [wrynose,47/60] gstreamer: skip test_queue:test_leaky_downstream test as it's flakey [wrynose,48/60] libaio: update SRC_URI [wrynose,49/60] alsa-lib: patch CVE-2026-90781 [wrynose,50/60] weston: fix VNC backend build with aml 1.0 [wrynose,51/60] go: upgrade 1.26.8 -> 1.26.9 [wrynose,52/60] wget: fix CVE-2026-15146 [wrynose,53/60] libpcre2: patch CVE-2026-89162 [wrynose,54/60] libpcre2: patch CVE-2026-89161 [wrynose,55/60] libpcre2: patch CVE-2026-89156 [wrynose,56/60] libpcre2: patch CVE-2026-89157 [wrynose,57/60] libpcre2: patch CVE-2026-89160 [wrynose,58/60] libpcre2: patch CVE-2026-89158 [wrynose,59/60] libpcre2: patch CVE-2026-86145 [wrynose,60/60] libpcre2: patch CVE-2026-103111

Message ID

7940891fd50e0fe5a509d81afd66ebc05e4420d3.1791707817.git.yoann.congal@smile.fr

State

New

Headers

From: Yoann Congal <yoann.congal@smile.fr>
To: openembedded-core@lists.openembedded.org
Subject: [OE-core][wrynose 15/60] openssh: set status for CVE-2026-55654
Date: Sun, 11 Oct 2026 10:39:48 +0200
Message-ID: 
 <7940891fd50e0fe5a509d81afd66ebc05e4420d3.1791707817.git.yoann.congal@smile.fr>
In-Reply-To: <cover.1791707817.git.yoann.congal@smile.fr>
References: <cover.1791707817.git.yoann.congal@smile.fr>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit

Series

[wrynose,01/60] glibc: set status for CVE-2011-0536 and CVE-2025-0577 | expand

Commit Message

Yoann Congal Oct. 11, 2026, 8:39 a.m. UTC

From: Peter Marko <peter.marko@siemens.com>

Per desctiption in [1] (which is different than description in [2]),
this is RedHat patches.
Also [3] suggests this.

[1] https://github.com/CVEProject/cvelistV5/blob/main/cves/2026/55xxx/CVE-2026-55654.json
[2] https://security-tracker.debian.org/tracker/CVE-2026-55654
[3] https://ubuntu.com/security/CVE-2026-55654

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(From OE-Core rev: 389919ea7927962a61a5aaa7b641c5b60af560e0)
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
---
 meta/recipes-connectivity/openssh/openssh_10.3p1.bb | 1 +
 1 file changed, 1 insertion(+)

diff --git a/meta/recipes-connectivity/openssh/openssh_10.3p1.bb b/meta/recipes-connectivity/openssh/openssh_10.3p1.bb
index 9793e3fa6dc..c53100cd99f 100644
--- a/meta/recipes-connectivity/openssh/openssh_10.3p1.bb
+++ b/meta/recipes-connectivity/openssh/openssh_10.3p1.bb
@@ -46,6 +46,7 @@  CVE_STATUS[CVE-2023-51767] = "upstream-wontfix: It was demonstrated on modified
 CVE_STATUS[CVE-2026-3497] = "not-applicable-platform: Only affects GSSAPI Key Exchange patches used by some Linux distributions and does not exist in upstream openssh."
 CVE_STATUS[CVE-2026-55653] = "not-applicable-platform: Only applies to RHEL FIPS patches."
 CVE_STATUS[CVE-2026-59998] = "${@bb.utils.contains('PACKAGECONFIG', 'kerberos', 'unpatched', 'not-applicable-config: GSSAPI/Kerberos support is disabled in the default OpenSSH configuration', d)}"
+CVE_STATUS[CVE-2026-55654] = "not-applicable-platform: Only applies to RHEL patches."
 CVE_STATUS[CVE-2026-55655] = "not-applicable-platform: Only applies to RHEL patches."
 
 PAM_SRC_URI = "file://sshd"

[wrynose,15/60] openssh: set status for CVE-2026-55654

Commit Message

Patch