mbox

[00/27] Scartgap pull request

Message ID cover.1765156725.git.anuj.mittal@oss.qualcomm.com
State New
Headers show

Pull-request

https://github.com/anujm1/meta-openembedded anujm/scarthgap

Message

Anuj Mittal Dec. 8, 2025, 1:22 a.m. UTC 
Please merge these changes in scarthgap. Tested on autobuilder and
locally.

https://autobuilder.yoctoproject.org/valkyrie/#/builders/81/builds/1153

The following changes since commit 89a01c3d9ad1f8fce6aeb4dd0e694cfa28d42099:

  cockpit: set correct CVE_PRODUCT (2025-11-28 11:27:05 -0800)

are available in the Git repository at:

  https://github.com/anujm1/meta-openembedded anujm/scarthgap
  https://github.com/anujm1/meta-openembedded/tree/anujm/scarthgap

Anuj Mittal (1):
  pidgin: fix reproducibility issues

Deepak Rathore (1):
  hdf5 1.14.4-3: Fix CVE tag format in patches

Gyorgy Sarvari (20):
  yasm: add alternative CVE_PRODUCT
  yasm: patch CVE-2023-29579
  yasm: patch CVE-2021-33464
  yasm: patch CVE-2021-33456
  redis: ignore CVE-2022-0543
  redis: handle CVE-2025-27151
  nbdkit: patch CVE-2025-47711
  nbdkit: patch CVE-2025-47712
  xrdp: patch CVE-2022-23468
  xrdp: patch CVE-2022-23477
  xrdp: patch CVE-2022-23478
  xrdp: patch CVE-2022-23479
  xrdp: patch CVE-2022-23480
  xrdp: patch CVE-2022-23481
  xrdp: patch CVE-2022-23482
  xrdp: patch CVE-2022-23483
  xrdp: patch CVE-2022-23484
  xrdp: patch CVE-2022-23493
  xrdp: patch CVE-2023-40184
  xrdp: patch CVE-2023-42822

Kai Kang (1):
  libtracefs: avoid run bison

Khem Raj (1):
  net-snmp: Fix a crash and support for 6.7+ kernel

Vijay Anusuri (1):
  net-snmp: Update Upstream-status in the
    net-snmp-5.9.4-kernel-6.7.patch

Yi Zhao (1):
  crash: add zlib-native to depends for crash-cross

yuyu (1):
  trace-cmd: Update SRC_URI to use HTTPS protocol

 .../net-snmp/net-snmp-5.9.4-kernel-6.7.patch  | 123 ++++++
 .../net-snmp/netsnmp-swinst-crash.patch       |  17 +
 .../net-snmp/net-snmp_5.9.4.bb                |   2 +
 .../nbdkit/nbdkit/CVE-2025-47711.patch        | 172 +++++++++
 .../nbdkit/nbdkit/CVE-2025-47712.patch        | 166 ++++++++
 .../recipes-support/nbdkit/nbdkit_1.33.11.bb  |   4 +-
 .../yasm/yasm/CVE-2021-33456.patch            |  35 ++
 .../yasm/yasm/CVE-2021-33464.patch            |  34 ++
 .../yasm/yasm/CVE-2023-29579.patch            |  39 ++
 meta-oe/recipes-devtools/yasm/yasm_git.bb     |   6 +-
 .../redis/redis/CVE-2025-27151.patch          |  32 ++
 .../recipes-extended/redis/redis_6.2.21.bb    |   5 +-
 .../recipes-extended/redis/redis_7.2.12.bb    |   2 +
 meta-oe/recipes-kernel/crash/crash_8.0.4.bb   |   2 +
 ...ake-sqlhist_remake-to-run-bison-and-.patch | 108 ++++++
 .../libtracefs/libtracefs_1.7.0.bb            |   1 +
 .../trace-cmd/trace-cmd_3.1.5.bb              |   2 +-
 ...025-2923-CVE-2025-6816-CVE-2025-6856.patch |   3 +-
 ...-6269-CVE-2025-6270-CVE-2025-6516_01.patch |   3 +-
 ...-6269-CVE-2025-6270-CVE-2025-6516_02.patch |   3 +-
 .../recipes-support/pidgin/pidgin_2.14.2.bb   |   7 +
 .../xrdp/xrdp/CVE-2022-23468.patch            |  34 ++
 .../xrdp/xrdp/CVE-2022-23477.patch            |  38 ++
 .../xrdp/xrdp/CVE-2022-23478.patch            |  85 +++++
 .../xrdp/xrdp/CVE-2022-23479.patch            |  83 ++++
 .../xrdp/xrdp/CVE-2022-23480-1.patch          | 356 ++++++++++++++++++
 .../xrdp/xrdp/CVE-2022-23480-2.patch          |  54 +++
 .../xrdp/xrdp/CVE-2022-23481.patch            |  46 +++
 .../xrdp/xrdp/CVE-2022-23482.patch            |  69 ++++
 .../xrdp/xrdp/CVE-2022-23483.patch            |  65 ++++
 .../xrdp/xrdp/CVE-2022-23484.patch            |  31 ++
 .../xrdp/xrdp/CVE-2022-23493.patch            |  33 ++
 .../xrdp/xrdp/CVE-2023-40184.patch            |  73 ++++
 .../xrdp/xrdp/CVE-2023-42822.patch            | 304 +++++++++++++++
 meta-oe/recipes-support/xrdp/xrdp_0.9.20.bb   |  13 +
 35 files changed, 2043 insertions(+), 7 deletions(-)
 create mode 100644 meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-5.9.4-kernel-6.7.patch
 create mode 100644 meta-networking/recipes-protocols/net-snmp/net-snmp/netsnmp-swinst-crash.patch
 create mode 100644 meta-networking/recipes-support/nbdkit/nbdkit/CVE-2025-47711.patch
 create mode 100644 meta-networking/recipes-support/nbdkit/nbdkit/CVE-2025-47712.patch
 create mode 100644 meta-oe/recipes-devtools/yasm/yasm/CVE-2021-33456.patch
 create mode 100644 meta-oe/recipes-devtools/yasm/yasm/CVE-2021-33464.patch
 create mode 100644 meta-oe/recipes-devtools/yasm/yasm/CVE-2023-29579.patch
 create mode 100644 meta-oe/recipes-extended/redis/redis/CVE-2025-27151.patch
 create mode 100644 meta-oe/recipes-kernel/libtracefs/libtracefs/0001-libtracefs-Add-make-sqlhist_remake-to-run-bison-and-.patch
 create mode 100644 meta-oe/recipes-support/xrdp/xrdp/CVE-2022-23468.patch
 create mode 100644 meta-oe/recipes-support/xrdp/xrdp/CVE-2022-23477.patch
 create mode 100644 meta-oe/recipes-support/xrdp/xrdp/CVE-2022-23478.patch
 create mode 100644 meta-oe/recipes-support/xrdp/xrdp/CVE-2022-23479.patch
 create mode 100644 meta-oe/recipes-support/xrdp/xrdp/CVE-2022-23480-1.patch
 create mode 100644 meta-oe/recipes-support/xrdp/xrdp/CVE-2022-23480-2.patch
 create mode 100644 meta-oe/recipes-support/xrdp/xrdp/CVE-2022-23481.patch
 create mode 100644 meta-oe/recipes-support/xrdp/xrdp/CVE-2022-23482.patch
 create mode 100644 meta-oe/recipes-support/xrdp/xrdp/CVE-2022-23483.patch
 create mode 100644 meta-oe/recipes-support/xrdp/xrdp/CVE-2022-23484.patch
 create mode 100644 meta-oe/recipes-support/xrdp/xrdp/CVE-2022-23493.patch
 create mode 100644 meta-oe/recipes-support/xrdp/xrdp/CVE-2023-40184.patch
 create mode 100644 meta-oe/recipes-support/xrdp/xrdp/CVE-2023-42822.patch