[wrynose,10/28] libsoup: set status for CVE-2026-2369

Message ID	e11c5c8f5b9e646c65f4eb417c9a3e9309295443.1779232800.git.yoann.congal@smile.fr
State	New
Headers	show Return-Path: <yoann.congal@smile.fr> ip: 209.85.128.45, mailfrom: yoann.congal@smile.fr) From: Yoann Congal <yoann.congal@smile.fr> To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 10/28] libsoup: set status for CVE-2026-2369 Date: Wed, 20 May 2026 01:29:47 +0200 Message-ID: <e11c5c8f5b9e646c65f4eb417c9a3e9309295443.1779232800.git.yoann.congal@smile.fr> In-Reply-To: <cover.1779232800.git.yoann.congal@smile.fr> References: <cover.1779232800.git.yoann.congal@smile.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	[wrynose,01/28] README: Add wrynose subject-prefix to git-send-email suggestion \| expand [wrynose,01/28] README: Add wrynose subject-prefix to git-send-email suggestion [wrynose,02/28] python3-requests: Increase chardet upper limit [wrynose,03/28] tzdata/tzcode-native: upgrade 2026a -> 2026b [wrynose,04/28] wireless-regdb: upgrade 2026.02.04 -> 2026.03.18 [wrynose,05/28] python3-sbom-cve-check: Update to version 1.3.1 [wrynose,06/28] sbom-cve-check-update-cvelist-native: Update source revision [wrynose,07/28] sbom-cve-check-update-nvd-native: Update source revision [wrynose,08/28] busybox: patch CVE-2024-58251 [wrynose,09/28] b4-config: add send-prefixes for wrynose [wrynose,10/28] libsoup: set status for CVE-2026-2369 [wrynose,11/28] libsdl2: set status for CVE-2026-35444 [wrynose,12/28] tiff: patch CVE-2026-4775 [wrynose,13/28] libssh2: patch CVE-2026-7598 [wrynose,14/28] libarchive: set status of CVE-2026-5745 [wrynose,15/28] efivar: Backport patch to fix -march issue for ppc64le [wrynose,16/28] oe-pkgdata-util: fix empty runtime-rprovides directory handling [wrynose,17/28] oe-pkgdata-util: fix runtime-rprovides handling in lookup_pkg error path [wrynose,18/28] libsoup: patch CVE-2026-2708 [wrynose,19/28] utils: Handle unexpanded variables in DISTRO_FEATURES [wrynose,20/28] shadow-native: Change upstream status of disable_syslog.patch [wrynose,21/28] features-check.bbclass: add reference to required TUNE_FEATURES [wrynose,22/28] scripts/makefile-getvar: quote MAKEFILE variable [wrynose,23/28] qemu: fix iotlb_to_section() for different AddressSpace [wrynose,24/28] sbom-cve-check: set PV from upstream tags and ensure version checks are correct [wrynose,25/28] bluez5: add patches to fix 8.56 gatt issue [wrynose,26/28] default-distrovars.inc: add missing spaces in append overrides [wrynose,27/28] glibc: stable 2.43 branch updates [wrynose,28/28] pseudo: Upgrade 1.9.6 -> 1.9.7

Message ID

e11c5c8f5b9e646c65f4eb417c9a3e9309295443.1779232800.git.yoann.congal@smile.fr

State

New

Headers

From: Yoann Congal <yoann.congal@smile.fr>
To: openembedded-core@lists.openembedded.org
Subject: [OE-core][wrynose 10/28] libsoup: set status for CVE-2026-2369
Date: Wed, 20 May 2026 01:29:47 +0200
Message-ID: 
 <e11c5c8f5b9e646c65f4eb417c9a3e9309295443.1779232800.git.yoann.congal@smile.fr>
In-Reply-To: <cover.1779232800.git.yoann.congal@smile.fr>
References: <cover.1779232800.git.yoann.congal@smile.fr>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit

Series

[wrynose,01/28] README: Add wrynose subject-prefix to git-send-email suggestion | expand

Commit Message

Yoann Congal May 19, 2026, 11:29 p.m. UTC

From: Peter Marko <peter.marko@siemens.com>

Per [1] this is fixed by commit in version 3.6.6.
It is RedHat version-less CVE.

[1] https://security-tracker.debian.org/tracker/CVE-2026-2369

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 14d6ba9a0f4a2813c1dd7554e4eddf93bd2f2b55)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
---
 meta/recipes-support/libsoup/libsoup_3.6.6.bb | 1 +
 1 file changed, 1 insertion(+)

diff --git a/meta/recipes-support/libsoup/libsoup_3.6.6.bb b/meta/recipes-support/libsoup/libsoup_3.6.6.bb
index b36976a2be4..792cb26e930 100644
--- a/meta/recipes-support/libsoup/libsoup_3.6.6.bb
+++ b/meta/recipes-support/libsoup/libsoup_3.6.6.bb
@@ -63,5 +63,6 @@  BBCLASSEXTEND = "native nativesdk"
 CVE_STATUS[CVE-2026-1467] = "fixed-version: fixed in 3.6.6"
 CVE_STATUS[CVE-2026-1536] = "fixed-version: fixed in 3.6.6"
 CVE_STATUS[CVE-2026-1801] = "fixed-version: fixed in 3.6.6"
+CVE_STATUS[CVE-2026-2369] = "fixed-version: fixed in 3.6.6"
 CVE_STATUS[CVE-2026-2436] = "fixed-version: fixed in 3.6.6"
 CVE_STATUS[CVE-2026-2443] = "fixed-version: fixed in 3.6.6"

[wrynose,10/28] libsoup: set status for CVE-2026-2369

Commit Message

Patch