mbox series

[scarthgap,00/11] Fix multiple CVEs

Message ID 20260409061904.1694992-1-jinfeng.wang.cn@windriver.com
Headers show
Series Fix multiple CVEs | expand

Message

Wang, Jinfeng (CN) April 9, 2026, 6:18 a.m. UTC 
From: Jinfeng Wang <jinfeng.wang.cn@windriver.com>

Test done:
bitbake world without introducing new errors.

Note:
Dependency: This patch(11/11 - nmap: rename enum PCAP_SOCKET) addresses a build failure caused by the libpcap 1.10.4 -> 1.10.6 upgrade (submitted separately to the oe-core mailing list). The enum PCAP_SOCKET in nmap conflicts with definitions in libpcap 1.10.6.

Action required: Only merge this patch if the libpcap upgrade is merged. If the libpcap upgrade is rejected, this patch should also be rejected.

Guocai He (1):
  yasm: fix CVE-2021-33454

Haixiao Yan (3):
  python3-django: fix CVE-2025-64459
  python3-django: fix CVE-2025-57833
  python3-django: fix CVE-2025-59681

Kai Kang (1):
  nmap: rename enum PCAP_SOCKET

Libo Chen (6):
  hdf5: fix CVE-2025-6857
  hdf5: fix CVE-2025-2153
  hdf5: fix CVE-2025-2310
  hdf5: fix CVE-2025-44905
  hdf5: fix CVE-2025-2309
  hdf5: fix CVE-2025-2308

 .../yasm/yasm/CVE-2021-33454.patch            |   29 +
 meta-oe/recipes-devtools/yasm/yasm_git.bb     |    1 +
 .../files/nmap-rename-enum-PCAP_SOCKET.patch  |   86 +
 meta-oe/recipes-security/nmap/nmap_7.80.bb    |    1 +
 .../hdf5/files/CVE-2025-2153.patch            |   51 +
 .../hdf5/files/CVE-2025-2308.patch            | 2120 +++++++++++++++++
 .../hdf5/files/CVE-2025-2309.patch            |   41 +
 .../hdf5/files/CVE-2025-2310.patch            |   37 +
 .../hdf5/files/CVE-2025-44905.patch           |   46 +
 .../hdf5/files/CVE-2025-6857.patch            |  248 ++
 meta-oe/recipes-support/hdf5/hdf5_1.14.4-3.bb |    6 +
 .../CVE-2025-57833.patch                      |   88 +
 .../CVE-2025-59681.patch                      |  179 ++
 .../CVE-2025-64459-1.patch                    |   57 +
 .../CVE-2025-64459-2.patch                    |   63 +
 .../python/python3-django_5.0.14.bb           |    7 +-
 16 files changed, 3059 insertions(+), 1 deletion(-)
 create mode 100644 meta-oe/recipes-devtools/yasm/yasm/CVE-2021-33454.patch
 create mode 100644 meta-oe/recipes-security/nmap/files/nmap-rename-enum-PCAP_SOCKET.patch
 create mode 100644 meta-oe/recipes-support/hdf5/files/CVE-2025-2153.patch
 create mode 100644 meta-oe/recipes-support/hdf5/files/CVE-2025-2308.patch
 create mode 100644 meta-oe/recipes-support/hdf5/files/CVE-2025-2309.patch
 create mode 100644 meta-oe/recipes-support/hdf5/files/CVE-2025-2310.patch
 create mode 100644 meta-oe/recipes-support/hdf5/files/CVE-2025-44905.patch
 create mode 100644 meta-oe/recipes-support/hdf5/files/CVE-2025-6857.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-django-5.0.14/CVE-2025-57833.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-django-5.0.14/CVE-2025-59681.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-django-5.0.14/CVE-2025-64459-1.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-django-5.0.14/CVE-2025-64459-2.patch