[meta-networking,1/8] ngtcp2: upgrade 1.22.0 -> 1.22.1

Message ID	20260420093323.357053-1-skandigraun@gmail.com
State	Accepted
Headers	show Return-Path: <skandigraun@gmail.com> ip: 209.85.221.50, mailfrom: skandigraun@gmail.com) From: Gyorgy Sarvari <skandigraun@gmail.com> To: openembedded-devel@lists.openembedded.org Subject: [meta-networking][PATCH 1/8] ngtcp2: upgrade 1.22.0 -> 1.22.1 Date: Mon, 20 Apr 2026 11:33:16 +0200 Message-ID: <20260420093323.357053-1-skandigraun@gmail.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	[meta-networking,1/8] ngtcp2: upgrade 1.22.0 -> 1.22.1 \| expand [meta-networking,1/8] ngtcp2: upgrade 1.22.0 -> 1.22.1 [meta-oe,2/8] openjpeg: patch CVE-2026-6192 [meta-oe,3/8] protobuf, python3-protobuf: ignore CVE-2026-6409 [meta-python,4/8] python3-grpcio: ignore CVE-2026-33186 [meta-python,5/8] python3-pillow: upgrade 12.1.1 -> 12.2.0 [meta-networking,6/8] wolfssl: mark fixed CVEs as patched [meta-oe,7/8] xdg-desktop-portal: upgrade 1.20.3 -> 1.20.4 [meta-oe,8/8] xrdp: upgrade 0.10.5 -> 0.10.6

Message ID

20260420093323.357053-1-skandigraun@gmail.com

State

Accepted

Headers

From: Gyorgy Sarvari <skandigraun@gmail.com>
To: openembedded-devel@lists.openembedded.org
Subject: [meta-networking][PATCH 1/8] ngtcp2: upgrade 1.22.0 -> 1.22.1
Date: Mon, 20 Apr 2026 11:33:16 +0200
Message-ID: <20260420093323.357053-1-skandigraun@gmail.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit

Series

[meta-networking,1/8] ngtcp2: upgrade 1.22.0 -> 1.22.1 | expand

Commit Message

Gyorgy Sarvari April 20, 2026, 9:33 a.m. UTC

Contains fix for CVE-2026-40170 (which is tracked without version
by NVD, so also mark explicitly as patched).

Changelog: https://github.com/ngtcp2/ngtcp2/releases/tag/v1.22.1

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
---
 .../ngtcp2/{ngtcp2_1.22.0.bb => ngtcp2_1.22.1.bb}           | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)
 rename meta-networking/recipes-protocols/ngtcp2/{ngtcp2_1.22.0.bb => ngtcp2_1.22.1.bb} (84%)

diff --git a/meta-networking/recipes-protocols/ngtcp2/ngtcp2_1.22.0.bb b/meta-networking/recipes-protocols/ngtcp2/ngtcp2_1.22.1.bb
similarity index 84%
rename from meta-networking/recipes-protocols/ngtcp2/ngtcp2_1.22.0.bb
rename to meta-networking/recipes-protocols/ngtcp2/ngtcp2_1.22.1.bb
index f7c0ee0d4f..acff7b548b 100644
--- a/meta-networking/recipes-protocols/ngtcp2/ngtcp2_1.22.0.bb
+++ b/meta-networking/recipes-protocols/ngtcp2/ngtcp2_1.22.1.bb
@@ -4,8 +4,8 @@  BUGTRACKER = "https://github.com/ngtcp2/ngtcp2/issues"
 LICENSE = "MIT"
 LIC_FILES_CHKSUM = "file://COPYING;md5=de0966c8ff4f62661a3da92967a75434"
 
-SRC_URI = "gitsm://github.com/ngtcp2/ngtcp2;protocol=https;branch=main;tag=v${PV};name=ngtcp2"
-SRCREV = "2a441e8540d192b0707989b146ce80efcae5f0d6"
+SRC_URI = "gitsm://github.com/ngtcp2/ngtcp2;protocol=https;branch=release-1.22;tag=v${PV}"
+SRCREV = "716e64b05f4a3709dfc0b0522cf9fd4456d055e5"
 
 DEPENDS = "brotli libev nghttp3"
 
@@ -18,3 +18,5 @@  PACKAGECONFIG[shared] = "-DENABLE_SHARED_LIB=ON, -DENABLE_SHARED_LIB=OFF"
 PACKAGECONFIG[build-lib-only] = "-DENABLE_LIB_ONLY=ON, -DENABLE_LIB_ONLY=OFF"
 PACKAGECONFIG[openssl] = "-DENABLE_OPENSSL=ON, -DENABLE_OPENSSL=OFF, openssl"
 PACKAGECONFIG[gnutls] = "-DENABLE_GNUTLS=ON, -DENABLE_GNUTLS=OFF, gnutls"
+
+CVE_STATUS[CVE-2026-40170] = "fixed-version: fixed in 1.22.1"

[meta-networking,1/8] ngtcp2: upgrade 1.22.0 -> 1.22.1

Commit Message

Patch