[wrynose,v2,11/28] libsoup: set status for CVE-2026-2369

Message ID	89d30abf282d593766f4e8362fc595a73488bbc6.1779264709.git.yoann.congal@smile.fr
State	New
Headers	show Return-Path: <yoann.congal@smile.fr> ip: 209.85.128.53, mailfrom: yoann.congal@smile.fr) From: Yoann Congal <yoann.congal@smile.fr> To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose v2 11/28] libsoup: set status for CVE-2026-2369 Date: Wed, 20 May 2026 10:20:12 +0200 Message-ID: <89d30abf282d593766f4e8362fc595a73488bbc6.1779264709.git.yoann.congal@smile.fr> In-Reply-To: <cover.1779264709.git.yoann.congal@smile.fr> References: <cover.1779264709.git.yoann.congal@smile.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	[wrynose,v2,01/28] README: Add wrynose subject-prefix to git-send-email suggestion \| expand [wrynose,v2,01/28] README: Add wrynose subject-prefix to git-send-email suggestion [wrynose,v2,02/28] python3-requests: Increase chardet upper limit [wrynose,v2,03/28] tzdata/tzcode-native: upgrade 2026a -> 2026b [wrynose,v2,04/28] wireless-regdb: upgrade 2026.02.04 -> 2026.03.18 [wrynose,v2,05/28] python3-sbom-cve-check: Update to version 1.3.1 [wrynose,v2,06/28] sbom-cve-check-update-cvelist-native: Update source revision [wrynose,v2,07/28] sbom-cve-check-update-nvd-native: Update source revision [wrynose,v2,08/28] busybox: patch CVE-2024-58251 [wrynose,v2,09/28] busybox: fix CVE-2026-29004 [wrynose,v2,10/28] b4-config: add send-prefixes for wrynose [wrynose,v2,11/28] libsoup: set status for CVE-2026-2369 [wrynose,v2,12/28] tiff: patch CVE-2026-4775 [wrynose,v2,13/28] libssh2: patch CVE-2026-7598 [wrynose,v2,14/28] libarchive: set status of CVE-2026-5745 [wrynose,v2,15/28] efivar: Backport patch to fix -march issue for ppc64le [wrynose,v2,16/28] oe-pkgdata-util: fix empty runtime-rprovides directory handling [wrynose,v2,17/28] oe-pkgdata-util: fix runtime-rprovides handling in lookup_pkg error path [wrynose,v2,18/28] libsoup: patch CVE-2026-2708 [wrynose,v2,19/28] utils: Handle unexpanded variables in DISTRO_FEATURES [wrynose,v2,20/28] shadow-native: Change upstream status of disable_syslog.patch [wrynose,v2,21/28] features-check.bbclass: add reference to required TUNE_FEATURES [wrynose,v2,22/28] scripts/makefile-getvar: quote MAKEFILE variable [wrynose,v2,23/28] qemu: fix iotlb_to_section() for different AddressSpace [wrynose,v2,24/28] sbom-cve-check: set PV from upstream tags and ensure version checks are correct [wrynose,v2,25/28] bluez5: add patches to fix 8.56 gatt issue [wrynose,v2,26/28] default-distrovars.inc: add missing spaces in append overrides [wrynose,v2,27/28] glibc: stable 2.43 branch updates [wrynose,v2,28/28] pseudo: Upgrade 1.9.6 -> 1.9.7

Message ID

89d30abf282d593766f4e8362fc595a73488bbc6.1779264709.git.yoann.congal@smile.fr

State

New

Headers

From: Yoann Congal <yoann.congal@smile.fr>
To: openembedded-core@lists.openembedded.org
Subject: [OE-core][wrynose v2 11/28] libsoup: set status for CVE-2026-2369
Date: Wed, 20 May 2026 10:20:12 +0200
Message-ID: 
 <89d30abf282d593766f4e8362fc595a73488bbc6.1779264709.git.yoann.congal@smile.fr>
In-Reply-To: <cover.1779264709.git.yoann.congal@smile.fr>
References: <cover.1779264709.git.yoann.congal@smile.fr>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit

Series

[wrynose,v2,01/28] README: Add wrynose subject-prefix to git-send-email suggestion | expand

Commit Message

Yoann Congal May 20, 2026, 8:20 a.m. UTC

From: Peter Marko <peter.marko@siemens.com>

Per [1] this is fixed by commit in version 3.6.6.
It is RedHat version-less CVE.

[1] https://security-tracker.debian.org/tracker/CVE-2026-2369

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 14d6ba9a0f4a2813c1dd7554e4eddf93bd2f2b55)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
---
 meta/recipes-support/libsoup/libsoup_3.6.6.bb | 1 +
 1 file changed, 1 insertion(+)

diff --git a/meta/recipes-support/libsoup/libsoup_3.6.6.bb b/meta/recipes-support/libsoup/libsoup_3.6.6.bb
index b36976a2be4..792cb26e930 100644
--- a/meta/recipes-support/libsoup/libsoup_3.6.6.bb
+++ b/meta/recipes-support/libsoup/libsoup_3.6.6.bb
@@ -63,5 +63,6 @@  BBCLASSEXTEND = "native nativesdk"
 CVE_STATUS[CVE-2026-1467] = "fixed-version: fixed in 3.6.6"
 CVE_STATUS[CVE-2026-1536] = "fixed-version: fixed in 3.6.6"
 CVE_STATUS[CVE-2026-1801] = "fixed-version: fixed in 3.6.6"
+CVE_STATUS[CVE-2026-2369] = "fixed-version: fixed in 3.6.6"
 CVE_STATUS[CVE-2026-2436] = "fixed-version: fixed in 3.6.6"
 CVE_STATUS[CVE-2026-2443] = "fixed-version: fixed in 3.6.6"

[wrynose,v2,11/28] libsoup: set status for CVE-2026-2369

Commit Message

Patch