mbox

[wrynose,00/40] Patch review

Message ID cover.1788629392.git.yoann.congal@smile.fr
State Not Applicable, archived
Headers show

Pull-request

https://git.openembedded.org/openembedded-core-contrib stable/wrynose-nut

Message

Yoann Congal Sept. 5, 2026, 8:44 p.m. UTC 
Hello,

This is a series dedicated to unblock a number of patches on scarthgap.

Please review this set of changes for wrynose and have comments back by
end of day Tuesday, September 8.

Passed a-full on autobuilder:
https://autobuilder.yoctoproject.org/valkyrie/?#/builders/29/builds/4666
Some builds failed due to failed access to our infrastructure (Michael
Halstead is looking into it)
* "Compare AB workers and SANITY_TESTED_DISTROS" failed but succeeded in
  a previous run (with no change related to this)
* qemuarm64-armhost retried in https://autobuilder.yoctoproject.org/valkyrie/?#/builders/8/builds/4608
* qemux86 retried in https://autobuilder.yoctoproject.org/valkyrie/?#/builders/30/builds/4563
* qemuarmv5 retried in https://autobuilder.yoctoproject.org/valkyrie/?#/builders/80/builds/4409
* oe-selftest-armhost: Bitbake Selftest failed but that particular
    bitbake commit succeeded in https://autobuilder.yoctoproject.org/valkyrie/?#/builders/23/builds/4798

The following changes since commit 00c66f1d38a234f7738c2eb8fafa41b4f057a865:

  pseudo: 1.9.10 -> 1.9.11 (2026-08-28 17:24:32 +0200)

are available in the Git repository at:

  https://git.openembedded.org/openembedded-core-contrib stable/wrynose-nut
  https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/wrynose-nut

for you to fetch changes up to 31def396136be047e10c507a50264aad52ba6b0f:

  scripts/install-buildtools: Update to 6.0.3 (2026-09-04 16:21:55 +0200)

----------------------------------------------------------------

Abhishek Bachiphale (1):
  perl: fix CVE-2026-42496 and CVE-2026-42497

Darsh Kelaiya (4):
  python3-git: fix CVE-2026-42284
  python3-git: fix CVE-2026-42215
  python3-git: fix CVE-2026-44243
  python3-git: fix CVE-2026-44244

Deepak Rathore (2):
  python3-cryptography: backport stray file install fix
  qemu: guard RESOLVE_CACHED strace flag

Devansh Patel (1):
  apt: mark CVE-2011-3374 as fixed-version

Esa Jaaskela (1):
  volatile-binds: order systemd-timesyncd after /var/lib

Hetvi Thakar (2):
  python3-idna: Fix CVE-2026-45409
  libssh2: Fix CVE-2026-58051

Jaipaul Cheernam (3):
  expat: set CVE_STATUS for CVE-2026-72522
  util-linux: Fix CVE-2026-3184
  python3: upgrade 3.14.6 -> 3.14.7

Jakub Szczudlo (Nokia) (2):
  gnutls: fix for CVE-2026-42011
  gnutls: fix CVE-2026-42010

Peter Marko (5):
  alsa-lib: patch CVE-2026-56109
  libevent: set status for CVE-2026-63380
  go: upgrade 1.26.5 -> 1.26.6
  util-linux: set status for CVE-2026-13595
  go: upgrade 1.26.6 -> 1.26.7

Richard Purdie (2):
  python3-mako: upgrade 1.3.10 -> 1.3.12
  python3-click: upgrade 8.3.1 -> 8.3.3

Ross Burton (1):
  libevent: upgrade 2.1.12 -> 2.1.13

Sowmya Sathram (1):
  binutils: stable 2.46 branch updates

Tafil Avdyli (2):
  python3: add missing pyc files to core
  python3: fix stringold cache files

Tim Orling (9):
  python3-babel: fix CVE_PRODUCT
  python3-pycryptodome: fix CVE_PRODUCT
  python3-dbusmock: fix CVE_PRODUCT
  python3-wheel: fix CVE_PRODUCT
  python3-click: fix CVE_PRODUCT
  python3-attrs: fix CVE_PRODUCT
  python3-numpy: fix CVE_PRODUCT
  python3-pycryptodomex: fix CVE_PRODUCT
  python3-git: fix CVE_PRODUCT

Vijay Anusuri (3):
  libxfont2: Fix CVE-2026-56001
  libxfont2: Fix CVE-2026-56002
  libxfont2: Fix CVE-2026-56003

Yoann Congal (1):
  scripts/install-buildtools: Update to 6.0.3

 meta/recipes-core/expat/expat_2.7.5.bb        |   3 +
 meta/recipes-core/util-linux/util-linux.inc   |   3 +
 .../util-linux/util-linux/CVE-2026-3184.patch |  61 ++++++++
 .../volatile-binds/volatile-binds.bb          |   9 +-
 meta/recipes-devtools/apt/apt_3.0.3.bb        |   3 +
 .../binutils/binutils-2.46.inc                |   2 +-
 .../go/{go-1.26.5.inc => go-1.26.7.inc}       |   2 +-
 ...e_1.26.5.bb => go-binary-native_1.26.7.bb} |   6 +-
 ..._1.26.5.bb => go-cross-canadian_1.26.7.bb} |   0
 ...{go-cross_1.26.5.bb => go-cross_1.26.7.bb} |   0
 ...osssdk_1.26.5.bb => go-crosssdk_1.26.7.bb} |   0
 ...runtime_1.26.5.bb => go-runtime_1.26.7.bb} |   0
 .../go/{go_1.26.5.bb => go_1.26.7.bb}         |   0
 .../perl/files/CVE-2026-42496.patch           |  99 ++++++++++++
 meta/recipes-devtools/perl/perl_5.42.0.bb     |   1 +
 .../python/python3-attrs_25.4.0.bb            |   2 +
 .../python/python3-babel_2.18.0.bb            |   2 +
 ...-click_8.3.1.bb => python3-click_8.3.3.bb} |   4 +-
 .../python/python3-cryptography.bb            |   1 +
 ...lling-stray-files-into-site-packages.patch |  55 +++++++
 .../python/python3-dbusmock_0.38.1.bb         |   2 +
 .../python3-git/CVE-2026-42215_p1.patch       |  60 ++++++++
 .../python3-git/CVE-2026-42215_p2.patch       |  45 ++++++
 .../python/python3-git/CVE-2026-42284.patch   |  36 +++++
 .../python3-git/CVE-2026-44243_p1.patch       | 134 +++++++++++++++++
 .../python3-git/CVE-2026-44243_p2.patch       |  83 +++++++++++
 .../python3-git/CVE-2026-44244_p1.patch       | 102 +++++++++++++
 .../python3-git/CVE-2026-44244_p2.patch       |  28 ++++
 .../python/python3-git_3.1.43.bb              |  10 ++
 .../python3-idna/CVE-2026-45409_p1.patch      |  75 ++++++++++
 .../python3-idna/CVE-2026-45409_p2.patch      |  48 ++++++
 .../python3-idna/CVE-2026-45409_p3.patch      |  72 +++++++++
 .../python/python3-idna_3.11.bb               |   4 +
 ...-mako_1.3.10.bb => python3-mako_1.3.12.bb} |   2 +-
 .../python/python3-numpy_2.4.3.bb             |   2 +
 .../python/python3-pycryptodome_3.23.0.bb     |   1 +
 .../python/python3-pycryptodomex_3.23.0.bb    |   2 +
 .../python/python3-wheel_0.46.3.bb            |   2 +
 ...shebang-overflow-on-python-config.py.patch |   6 +-
 ...e-stdin-I-O-errors-same-way-as-maste.patch |   4 +-
 ...-use-prefix-value-from-build-configu.patch |   7 +-
 ...-qemu-wrapper-when-gathering-profile.patch |   9 +-
 ...est_sysconfig-for-posix_user-purelib.patch |   4 +-
 .../0001-prefer-valid-entrypoints.patch       |   2 +-
 ...g.py-use-platlibdir-also-for-purelib.patch |   4 +-
 ...le.py-correct-the-test-output-format.patch |   6 +-
 .../python/python3/CVE-2026-11940.patch       |  67 ---------
 .../python/python3/CVE-2026-11972.patch       |  61 --------
 .../python/python3/makerace.patch             |   6 +-
 .../python/python3/python3-manifest.json      |  11 +-
 .../python/python3/valid-dists.patch          |   2 +-
 .../{python3_3.14.6.bb => python3_3.14.7.bb}  |   7 +-
 meta/recipes-devtools/qemu/qemu.inc           |   1 +
 ...-if-RESOLVE_CACHED-flag-is-defined-b.patch |  38 +++++
 .../xorg-lib/libxfont2/CVE-2026-56001.patch   |  75 ++++++++++
 .../xorg-lib/libxfont2/CVE-2026-56002.patch   | 138 +++++++++++++++++
 .../xorg-lib/libxfont2/CVE-2026-56003.patch   | 114 ++++++++++++++
 .../xorg-lib/libxfont2_2.0.7.bb               |   5 +
 .../alsa/alsa-lib/CVE-2026-56109.patch        |  33 ++++
 .../alsa/alsa-lib_1.2.15.3.bb                 |   1 +
 .../gnutls/gnutls/CVE-2026-42010.patch        |  41 +++++
 .../gnutls/gnutls/CVE-2026-42011_p1.patch     |  43 ++++++
 .../gnutls/gnutls/CVE-2026-42011_p2.patch     | 141 ++++++++++++++++++
 meta/recipes-support/gnutls/gnutls_3.8.12.bb  |   3 +
 ....c-patch-out-tests-that-require-a-wo.patch |   8 +-
 ...ncrease-default-timeval-tolerance-50.patch |  10 +-
 ...-monotonic_prc_fallback-as-retriable.patch |  11 +-
 ...ts-are-marked-failed-only-when-all-a.patch |   9 +-
 .../libevent/Makefile-missing-test-dir.patch  |  14 +-
 ...{libevent_2.1.12.bb => libevent_2.1.13.bb} |   4 +-
 .../libssh2/libssh2/CVE-2026-58051.patch      |  34 +++++
 .../recipes-support/libssh2/libssh2_1.11.1.bb |   1 +
 scripts/install-buildtools                    |   4 +-
 73 files changed, 1679 insertions(+), 206 deletions(-)
 create mode 100644 meta/recipes-core/util-linux/util-linux/CVE-2026-3184.patch
 rename meta/recipes-devtools/go/{go-1.26.5.inc => go-1.26.7.inc} (90%)
 rename meta/recipes-devtools/go/{go-binary-native_1.26.5.bb => go-binary-native_1.26.7.bb} (80%)
 rename meta/recipes-devtools/go/{go-cross-canadian_1.26.5.bb => go-cross-canadian_1.26.7.bb} (100%)
 rename meta/recipes-devtools/go/{go-cross_1.26.5.bb => go-cross_1.26.7.bb} (100%)
 rename meta/recipes-devtools/go/{go-crosssdk_1.26.5.bb => go-crosssdk_1.26.7.bb} (100%)
 rename meta/recipes-devtools/go/{go-runtime_1.26.5.bb => go-runtime_1.26.7.bb} (100%)
 rename meta/recipes-devtools/go/{go_1.26.5.bb => go_1.26.7.bb} (100%)
 create mode 100644 meta/recipes-devtools/perl/files/CVE-2026-42496.patch
 rename meta/recipes-devtools/python/{python3-click_8.3.1.bb => python3-click_8.3.3.bb} (87%)
 create mode 100644 meta/recipes-devtools/python/python3-cryptography/0002-Fix-installing-stray-files-into-site-packages.patch
 create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-42215_p1.patch
 create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-42215_p2.patch
 create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-42284.patch
 create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-44243_p1.patch
 create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-44243_p2.patch
 create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-44244_p1.patch
 create mode 100644 meta/recipes-devtools/python/python3-git/CVE-2026-44244_p2.patch
 create mode 100644 meta/recipes-devtools/python/python3-idna/CVE-2026-45409_p1.patch
 create mode 100644 meta/recipes-devtools/python/python3-idna/CVE-2026-45409_p2.patch
 create mode 100644 meta/recipes-devtools/python/python3-idna/CVE-2026-45409_p3.patch
 rename meta/recipes-devtools/python/{python3-mako_1.3.10.bb => python3-mako_1.3.12.bb} (88%)
 delete mode 100644 meta/recipes-devtools/python/python3/CVE-2026-11940.patch
 delete mode 100644 meta/recipes-devtools/python/python3/CVE-2026-11972.patch
 rename meta/recipes-devtools/python/{python3_3.14.6.bb => python3_3.14.7.bb} (98%)
 create mode 100644 meta/recipes-devtools/qemu/qemu/0012-linux-user-Check-if-RESOLVE_CACHED-flag-is-defined-b.patch
 create mode 100644 meta/recipes-graphics/xorg-lib/libxfont2/CVE-2026-56001.patch
 create mode 100644 meta/recipes-graphics/xorg-lib/libxfont2/CVE-2026-56002.patch
 create mode 100644 meta/recipes-graphics/xorg-lib/libxfont2/CVE-2026-56003.patch
 create mode 100644 meta/recipes-multimedia/alsa/alsa-lib/CVE-2026-56109.patch
 create mode 100644 meta/recipes-support/gnutls/gnutls/CVE-2026-42010.patch
 create mode 100644 meta/recipes-support/gnutls/gnutls/CVE-2026-42011_p1.patch
 create mode 100644 meta/recipes-support/gnutls/gnutls/CVE-2026-42011_p2.patch
 rename meta/recipes-support/libevent/{libevent_2.1.12.bb => libevent_2.1.13.bb} (92%)
 create mode 100644 meta/recipes-support/libssh2/libssh2/CVE-2026-58051.patch