mbox

[wrynose,00/56] Patch review

Message ID cover.1787945536.git.yoann.congal@smile.fr
State Not Applicable, archived
Headers show

Pull-request

https://git.openembedded.org/openembedded-core-contrib stable/wrynose-nut

Message

Yoann Congal Aug. 28, 2026, 7:35 p.m. UTC
This is the first part of the patches pending fro wrynose. I think there
will be one or two review cycles before returning to a more usual rhythm.

Please review this set of changes for wrynose and have comments back by
end of day Tuesday, September 1.

Passed a-full on autobuilder:
https://autobuilder.yoctoproject.org/valkyrie/?#/builders/29/builds/4604

The following changes since commit f7397af248e1e338929d70a910b0fbc2341528ec:

  mirrors: Disable YP mirrors on autobuilder (2026-08-21 18:06:46 +0200)

are available in the Git repository at:

  https://git.openembedded.org/openembedded-core-contrib stable/wrynose-nut
  https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/wrynose-nut

for you to fetch changes up to 00c66f1d38a234f7738c2eb8fafa41b4f057a865:

  pseudo: 1.9.10 -> 1.9.11 (2026-08-28 17:24:32 +0200)

----------------------------------------------------------------

Adarsh Jagadish Kamini (1):
  glibc: stable 2.43 branch updates

Alexander Kanavin (2):
  gstreamer1.0: disable an intermittently failing test
  gstreamer1.0: upgrade 1.28.2 -> 1.28.4 (the remaining pieces)

Bhavesh R Maheshwari (10):
  vim: Fix for CVE-2026-55693
  vim: Fix for CVE-2026-55895
  vim: Fix for CVE-2026-57451
  vim: Fix for CVE-2026-57453
  vim: Fix for CVE-2026-57454
  vim: Fix for CVE-2026-57455
  vim: Fix for CVE-2026-57456
  vim: Fix for CVE-2026-59856
  vim: Fix for CVE-2026-59857
  vim: Fix for CVE-2026-59858

Bruce Ashfield (1):
  kern-tools: bump SRCREV for conditional 'depends on X if Y' support

Deepak Rathore (6):
  curl: fix CVE-2026-8286
  curl: set CVE_STATUS for CVE-2026-8924
  curl: fix CVE-2026-8927
  curl: fix CVE-2026-8932
  curl: set CVE_STATUS for CVE-2026-9547
  curl: set CVE_STATUS for CVE-2026-12064

Hetvi Thakar (5):
  wget: Fix CVE-2026-58469
  wget: Fix CVE-2026-58471
  wget: Fix CVE-2026-58472
  patch: Fix CVE-2026-56289
  patch: Fix CVE-2026-56288

Jaipaul Cheernam (2):
  perl: fix CVE-2026-13221
  perl: fix CVE-2026-57432

Leonid Iziumtsev (1):
  coreutils: fix CVE-2026-56391

Peter Marko (10):
  openssh: set status for CVE-2026-55653
  connman: remove connection_manager from CVE_PRODUCTS
  gstreamer1.0*: upgrade 1.28.4 -> 1.28.5
  ffmpeg: upgrade 8.0.1 -> 8.0.3
  ffmpeg: set status for CVE-2026-8461 and CVE-2026-40962
  libsoup: patch CVE-2026-4271
  diffutils: patch CVE-2026-53910
  p11-kit: set status for CVE-2026-13757
  libxml2: set status for CVE-2026-6732
  python3-cryptography(-vectors): upgrade 46.0.5 -> 46.0.7

Richard Purdie (15):
  gst-devtools: upgrade 1.28.2 -> 1.28.4
  gstreamer1.0-libav: upgrade 1.28.2 -> 1.28.4
  gstreamer1.0-python: upgrade 1.28.2 -> 1.28.4
  gstreamer1.0: upgrade 1.28.2 -> 1.28.4
  xserver-xorg: upgrade 21.1.22 -> 21.1.23
  xserver-xorg: upgrade 21.1.23 -> 21.1.24
  ruby: upgrade 4.0.2 -> 4.0.3
  ruby: upgrade 4.0.3 -> 4.0.5
  xwayland: upgrade 24.1.11 -> 24.1.12
  xwayland: upgrade 24.1.12 -> 24.1.13
  p11-kit: upgrade 0.26.2 -> 0.26.4
  libxml2: upgrade 2.15.2 -> 2.15.3
  pseudo: Add in openat2, exec and linkat fixes
  pseudo: Update to 1.9.10
  pseudo: 1.9.10 -> 1.9.11

Sudhir Dumbhare (1):
  binutils: fix CVE-2026-3441 and CVE-2026-3442

Tim Orling (1):
  python3-pyasn1: upgrade 0.6.3 -> 0.6.4

Wang Mingyu (1):
  python3-pyasn1: upgrade 0.6.2 -> 0.6.3

 .../connman/connman_2.0.bb                    |    2 -
 .../openssh/openssh_10.3p1.bb                 |    1 +
 .../coreutils/coreutils/CVE-2026-56391.patch  |   66 +
 meta/recipes-core/coreutils/coreutils_9.10.bb |    1 +
 meta/recipes-core/glibc/glibc-version.inc     |    2 +-
 meta/recipes-core/glibc/glibc_2.43.bb         |    1 +
 ...-installation-directories-in-libxml2.patch |   12 +-
 .../libxml/libxml2/install-tests.patch        |    9 +-
 .../{libxml2_2.15.2.bb => libxml2_2.15.3.bb}  |    3 +-
 .../binutils/binutils-2.46.inc                |    1 +
 .../CVE-2026-3441_CVE-2026-3442.patch         |   51 +
 meta/recipes-devtools/patch/patch.inc         |    6 +-
 .../patch/patch/CVE-2026-56288.patch          |   75 ++
 .../patch/patch/CVE-2026-56289.patch          |   36 +
 .../perl/files/CVE-2026-13221.patch           |   75 ++
 .../perl/files/CVE-2026-57432-01.patch        |   52 +
 .../perl/files/CVE-2026-57432-02.patch        |   34 +
 meta/recipes-devtools/perl/perl_5.42.0.bb     |    3 +
 meta/recipes-devtools/pseudo/pseudo_git.bb    |    4 +-
 .../python/python3-cryptography-common.inc    |    2 +-
 .../python/python3-cryptography-vectors.bb    |    2 +-
 .../python/python3-cryptography.bb            |    2 +-
 ...yasn1_0.6.2.bb => python3-pyasn1_0.6.4.bb} |    2 +-
 ...save-the-original-name-and-timestamp.patch |    5 +-
 ...x-cross-compilation-of-external-gems.patch |    6 +-
 ...ine-REG_S1-and-REG_S2-for-musl-riscv.patch |    4 +-
 ...Obey-LDFLAGS-for-the-link-of-libruby.patch |    6 +-
 ...doc-build-reproducible-documentation.patch |   15 +-
 ...-list-of-object-files-in-generated-M.patch |    6 +-
 ...eproducible-change-fixing-784225-too.patch |    6 +-
 .../0006-Make-gemspecs-reproducible.patch     |   13 +-
 ..._rm_r_no_permissions-test-under-root.patch |    4 +-
 .../ruby/{ruby_4.0.2.bb => ruby_4.0.5.bb}     |    2 +-
 .../diffutils/CVE-2026-53910-01.patch         |   67 +
 .../diffutils/CVE-2026-53910-02.patch         |   35 +
 .../diffutils/diffutils_3.12.bb               |    9 +
 .../wget/CVE-2026-58469-regression_p1.patch   |   39 +
 .../wget/CVE-2026-58469-regression_p2.patch   |   26 +
 .../wget/wget/CVE-2026-58469.patch            |   53 +
 .../wget/wget/CVE-2026-58471.patch            |   71 +
 .../wget/wget/CVE-2026-58472-regression.patch |  233 ++++
 .../wget/wget/CVE-2026-58472.patch            |   74 ++
 meta/recipes-extended/wget/wget_1.25.0.bb     |    6 +
 ...-Intel-ddx-only-for-pre-gen4-hardwar.patch |    2 +-
 ...org_21.1.22.bb => xserver-xorg_21.1.24.bb} |    2 +-
 ...wayland_24.1.11.bb => xwayland_24.1.13.bb} |    2 +-
 .../kern-tools/kern-tools-native_git.bb       |    2 +-
 .../{ffmpeg_8.0.1.bb => ffmpeg_8.0.3.bb}      |    4 +-
 ...ct-has-a-different-signature-on-musl.patch |    2 +-
 ...tools_1.28.2.bb => gst-devtools_1.28.5.bb} |    2 +-
 ...001-Make-player-examples-installable.patch |   21 +-
 ...mples_1.28.2.bb => gst-examples_1.28.5.bb} |    2 +-
 ...1.28.2.bb => gstreamer1.0-libav_1.28.5.bb} |    2 +-
 ...ialized-warnings-when-compiling-with.patch |    4 +-
 ...-avoid-including-sys-poll.h-directly.patch |    2 +-
 ...issing-opencv-data-dir-in-yocto-buil.patch |    4 +-
 ...added-buffers-in-wl_shm-buffer-creat.patch |    5 +-
 ....bb => gstreamer1.0-plugins-bad_1.28.5.bb} |    2 +-
 ...et-caps-from-src-pad-when-query-caps.patch |    6 +-
 ...parse-enhance-SSA-text-lines-parsing.patch |    2 +-
 ...iv-fb-Make-sure-config.h-is-included.patch |    2 +-
 ...bb => gstreamer1.0-plugins-base_1.28.5.bb} |    2 +-
 ...bb => gstreamer1.0-plugins-good_1.28.5.bb} |    2 +-
 ...bb => gstreamer1.0-plugins-ugly_1.28.5.bb} |    2 +-
 ....28.2.bb => gstreamer1.0-python_1.28.5.bb} |    2 +-
 ....bb => gstreamer1.0-rtsp-server_1.28.5.bb} |    2 +-
 ...spect-the-idententaion-used-in-meson.patch |    2 +-
 ...ts-add-support-for-install-the-tests.patch |    6 +-
 ...s-use-a-dictionaries-for-environment.patch |    2 +-
 ...er-script-to-run-the-installed_tests.patch |    2 +-
 .../gstreamer/gstreamer1.0/run-ptest          |    4 +
 ...er1.0_1.28.2.bb => gstreamer1.0_1.28.5.bb} |    4 +-
 .../curl/curl/CVE-2026-8286.patch             |   81 ++
 .../curl/curl/CVE-2026-8927.patch             |  349 +++++
 .../curl/curl/CVE-2026-8932-dependent.patch   |   71 +
 .../curl/curl/CVE-2026-8932.patch             | 1148 +++++++++++++++++
 meta/recipes-support/curl/curl_8.19.0.bb      |    7 +
 .../libsoup/libsoup/CVE-2026-4271.patch       |  362 ++++++
 meta/recipes-support/libsoup/libsoup_3.6.6.bb |    1 +
 .../{p11-kit_0.26.2.bb => p11-kit_0.26.4.bb}  |    3 +-
 .../vim/files/CVE-2026-55693.patch            |  103 ++
 .../vim/files/CVE-2026-55895.patch            |  106 ++
 .../vim/files/CVE-2026-57451.patch            |  192 +++
 .../vim/files/CVE-2026-57453.patch            |  269 ++++
 .../vim/files/CVE-2026-57454.patch            |  203 +++
 .../vim/files/CVE-2026-57455.patch            |   87 ++
 .../vim/files/CVE-2026-57456.patch            |  164 +++
 .../vim/files/CVE-2026-59856.patch            |  118 ++
 .../vim/files/CVE-2026-59857.patch            |  125 ++
 .../vim/files/CVE-2026-59858.patch            |  149 +++
 meta/recipes-support/vim/vim.inc              |   10 +
 91 files changed, 4659 insertions(+), 109 deletions(-)
 create mode 100644 meta/recipes-core/coreutils/coreutils/CVE-2026-56391.patch
 rename meta/recipes-core/libxml/{libxml2_2.15.2.bb => libxml2_2.15.3.bb} (95%)
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2026-3441_CVE-2026-3442.patch
 create mode 100644 meta/recipes-devtools/patch/patch/CVE-2026-56288.patch
 create mode 100644 meta/recipes-devtools/patch/patch/CVE-2026-56289.patch
 create mode 100644 meta/recipes-devtools/perl/files/CVE-2026-13221.patch
 create mode 100644 meta/recipes-devtools/perl/files/CVE-2026-57432-01.patch
 create mode 100644 meta/recipes-devtools/perl/files/CVE-2026-57432-02.patch
 rename meta/recipes-devtools/python/{python3-pyasn1_0.6.2.bb => python3-pyasn1_0.6.4.bb} (83%)
 rename meta/recipes-devtools/ruby/{ruby_4.0.2.bb => ruby_4.0.5.bb} (98%)
 create mode 100644 meta/recipes-extended/diffutils/diffutils/CVE-2026-53910-01.patch
 create mode 100644 meta/recipes-extended/diffutils/diffutils/CVE-2026-53910-02.patch
 create mode 100644 meta/recipes-extended/wget/wget/CVE-2026-58469-regression_p1.patch
 create mode 100644 meta/recipes-extended/wget/wget/CVE-2026-58469-regression_p2.patch
 create mode 100644 meta/recipes-extended/wget/wget/CVE-2026-58469.patch
 create mode 100644 meta/recipes-extended/wget/wget/CVE-2026-58471.patch
 create mode 100644 meta/recipes-extended/wget/wget/CVE-2026-58472-regression.patch
 create mode 100644 meta/recipes-extended/wget/wget/CVE-2026-58472.patch
 rename meta/recipes-graphics/xorg-xserver/{xserver-xorg_21.1.22.bb => xserver-xorg_21.1.24.bb} (92%)
 rename meta/recipes-graphics/xwayland/{xwayland_24.1.11.bb => xwayland_24.1.13.bb} (96%)
 rename meta/recipes-multimedia/ffmpeg/{ffmpeg_8.0.1.bb => ffmpeg_8.0.3.bb} (97%)
 rename meta/recipes-multimedia/gstreamer/{gst-devtools_1.28.2.bb => gst-devtools_1.28.5.bb} (95%)
 rename meta/recipes-multimedia/gstreamer/{gst-examples_1.28.2.bb => gst-examples_1.28.5.bb} (96%)
 rename meta/recipes-multimedia/gstreamer/{gstreamer1.0-libav_1.28.2.bb => gstreamer1.0-libav_1.28.5.bb} (91%)
 rename meta/recipes-multimedia/gstreamer/{gstreamer1.0-plugins-bad_1.28.2.bb => gstreamer1.0-plugins-bad_1.28.5.bb} (99%)
 rename meta/recipes-multimedia/gstreamer/{gstreamer1.0-plugins-base_1.28.2.bb => gstreamer1.0-plugins-base_1.28.5.bb} (98%)
 rename meta/recipes-multimedia/gstreamer/{gstreamer1.0-plugins-good_1.28.2.bb => gstreamer1.0-plugins-good_1.28.5.bb} (97%)
 rename meta/recipes-multimedia/gstreamer/{gstreamer1.0-plugins-ugly_1.28.2.bb => gstreamer1.0-plugins-ugly_1.28.5.bb} (94%)
 rename meta/recipes-multimedia/gstreamer/{gstreamer1.0-python_1.28.2.bb => gstreamer1.0-python_1.28.5.bb} (91%)
 rename meta/recipes-multimedia/gstreamer/{gstreamer1.0-rtsp-server_1.28.2.bb => gstreamer1.0-rtsp-server_1.28.5.bb} (90%)
 rename meta/recipes-multimedia/gstreamer/{gstreamer1.0_1.28.2.bb => gstreamer1.0_1.28.5.bb} (93%)
 create mode 100644 meta/recipes-support/curl/curl/CVE-2026-8286.patch
 create mode 100644 meta/recipes-support/curl/curl/CVE-2026-8927.patch
 create mode 100644 meta/recipes-support/curl/curl/CVE-2026-8932-dependent.patch
 create mode 100644 meta/recipes-support/curl/curl/CVE-2026-8932.patch
 create mode 100644 meta/recipes-support/libsoup/libsoup/CVE-2026-4271.patch
 rename meta/recipes-support/p11-kit/{p11-kit_0.26.2.bb => p11-kit_0.26.4.bb} (95%)
 create mode 100644 meta/recipes-support/vim/files/CVE-2026-55693.patch
 create mode 100644 meta/recipes-support/vim/files/CVE-2026-55895.patch
 create mode 100644 meta/recipes-support/vim/files/CVE-2026-57451.patch
 create mode 100644 meta/recipes-support/vim/files/CVE-2026-57453.patch
 create mode 100644 meta/recipes-support/vim/files/CVE-2026-57454.patch
 create mode 100644 meta/recipes-support/vim/files/CVE-2026-57455.patch
 create mode 100644 meta/recipes-support/vim/files/CVE-2026-57456.patch
 create mode 100644 meta/recipes-support/vim/files/CVE-2026-59856.patch
 create mode 100644 meta/recipes-support/vim/files/CVE-2026-59857.patch
 create mode 100644 meta/recipes-support/vim/files/CVE-2026-59858.patch