mbox

[00/47] Scarthgap pull request

Message ID cover.1776247700.git.anuj.mittal@oss.qualcomm.com
State New, archived
Headers show

Pull-request

https://git.openembedded.org/meta-openembedded-contrib anujm/scarthgap

Message

Anuj Mittal April 15, 2026, 12:32 p.m. UTC 
Please merge these changes in scarthgap. Tested locally and on autobuilder.

https://autobuilder.yoctoproject.org/valkyrie/#/builders/81/builds/1469

The following changes since commit 1ad0d777d1de1769e5995eb806f7ae5c15d0be54:

  strongswan: Fix CVE-2026-25075 (2026-04-03 15:00:48 +0530)

are available in the Git repository at:

  https://git.openembedded.org/meta-openembedded-contrib anujm/scarthgap
  https://git.openembedded.org/meta-openembedded-contrib/log/?h=anujm/scarthgap

for you to fetch changes up to 5124ac4a658899158f4a7a2ddf1d2ca931ec7d0e:

  nginx: fix CVE-2026-28753 (2026-04-15 14:12:18 +0530)

----------------------------------------------------------------

Ankur Tyagi (32):
  abseil-cpp: ignore CVE-2025-0838
  freerdp3: fix CVE-2026-25941
  freerdp3: fix CVE-2026-33952
  freerdp3: fix CVE-2026-23948
  freerdp3: fix CVE-2026-24491
  freerdp3: fix CVE-2026-24675
  freerdp3: fix CVE-2026-24676
  freerdp3: ignore CVE-2026-24677 and CVE-2026-24678
  freerdp3: fix CVE-2026-24679
  freerdp3: fix CVE-2026-24680 and CVE-2026-27950
  freerdp3: fix CVE-2026-24681
  freerdp3: fix CVE-2026-24682
  freerdp3: fix CVE-2026-24683
  freerdp3: fix CVE-2026-29774
  freerdp3: fix CVE-2026-29775
  freerdp3: fix CVE-2026-29776
  freerdp3: fix CVE-2026-31806
  freerdp3: fix CVE-2026-31897
  freerdp3: fix CVE-2026-33984
  libde265: upgrade 1.0.12 -> 1.0.16
  libraw: ignore CVE-2026-5318
  libvncserver: fix CVE-2026-32853
  libvncserver: fix CVE-2026-32854
  nodejs: upgrade 20.20.0 -> 20.20.2
  python3-django: upgrade 4.2.29 -> 4.2.30
  python3-ecdsa: fix CVE-2026-33936
  python3-flask: upgrade 3.0.2 -> 3.0.3
  python3-tornado: fix CVE-2026-35536
  python3-werkzeug: ignore CVE-2026-27199
  nginx: fix CVE-2026-27651
  nginx: fix CVE-2026-27654
  nginx: fix CVE-2026-28753

Guocai He (1):
  yasm: fix CVE-2021-33454

Gyorgy Sarvari (2):
  giflib: patch CVE-2025-31344
  mbedtls: upgrade 3.6.5 -> 3.6.6

Haixiao Yan (3):
  python3-django: fix CVE-2025-64459
  python3-django: fix CVE-2025-57833
  python3-django: fix CVE-2025-59681

Hitendra Prajapati (2):
  nginx: Fix for CVE-2026-27784
  nginx: Fix for CVE-2026-28755

Jackson James (1):
  unbound: Fix CVE-2025-11411

Jinfeng Wang (1):
  nmap: rename enum PCAP_SOCKET

Libo Chen (4):
  hdf5: fix CVE-2025-2153
  hdf5: fix CVE-2025-2310
  hdf5: fix CVE-2025-44905
  hdf5: fix CVE-2025-2309

Peter Marko (1):
  grpc: set status for CVE-2026-33186

 .../libde265/libde265/CVE-2023-43887.patch    |   39 -
 .../libde265/libde265/CVE-2023-47471.patch    |   42 -
 ...{libde265_1.0.12.bb => libde265_1.0.16.bb} |    4 +-
 .../{mbedtls_3.6.5.bb => mbedtls_3.6.6.bb}    |    2 +-
 .../unbound/0001-CVE-2025-11411-1.patch       | 1874 +++++++++++++++++
 .../unbound/0002-CVE-2025-11411-2.patch       |  153 ++
 .../unbound/unbound/CVE-2025-11411.patch      |   48 -
 .../recipes-support/unbound/unbound_1.19.3.bb |    3 +-
 .../abseil-cpp/abseil-cpp_20240116.3.bb       |    2 +
 .../giflib/giflib/CVE-2025-31344.patch        |   28 +
 .../recipes-devtools/giflib/giflib_5.2.2.bb   |    3 +-
 meta-oe/recipes-devtools/grpc/grpc_1.60.1.bb  |    2 +
 .../{nodejs_20.20.0.bb => nodejs_20.20.2.bb}  |    4 +-
 .../yasm/yasm/CVE-2021-33454.patch            |   29 +
 meta-oe/recipes-devtools/yasm/yasm_git.bb     |    1 +
 .../libvncserver/CVE-2026-32853.patch         |   76 +
 .../libvncserver/CVE-2026-32854.patch         |   66 +
 .../libvncserver/libvncserver_0.9.14.bb       |    5 +-
 .../files/nmap-rename-enum-PCAP_SOCKET.patch  |   81 +
 meta-oe/recipes-security/nmap/nmap_7.80.bb    |    1 +
 .../freerdp/freerdp3/CVE-2026-23948.patch     |   55 +
 .../freerdp/freerdp3/CVE-2026-24491.patch     |   52 +
 .../freerdp/freerdp3/CVE-2026-24675.patch     |   32 +
 .../freerdp/freerdp3/CVE-2026-24676.patch     |   34 +
 .../freerdp/freerdp3/CVE-2026-24679.patch     |   44 +
 .../CVE-2026-24680_CVE-2026-27950.patch       |   24 +
 .../freerdp/freerdp3/CVE-2026-24681.patch     |   26 +
 .../freerdp/freerdp3/CVE-2026-24682.patch     |   31 +
 .../freerdp/freerdp3/CVE-2026-24683.patch     |  114 +
 .../freerdp/freerdp3/CVE-2026-25941.patch     |   28 +
 .../freerdp/freerdp3/CVE-2026-29774.patch     |   75 +
 .../freerdp/freerdp3/CVE-2026-29775.patch     |   30 +
 .../freerdp/freerdp3/CVE-2026-29776.patch     |   30 +
 .../freerdp/freerdp3/CVE-2026-31806.patch     |   36 +
 .../freerdp/freerdp3/CVE-2026-31897.patch     |   28 +
 .../freerdp/freerdp3/CVE-2026-33952.patch     |   38 +
 .../freerdp/freerdp3/CVE-2026-33984.patch     |   34 +
 .../recipes-support/freerdp/freerdp3_3.4.0.bb |   19 +
 .../hdf5/files/CVE-2025-2153.patch            |   51 +
 .../hdf5/files/CVE-2025-2309.patch            |   41 +
 .../hdf5/files/CVE-2025-2310.patch            |   37 +
 .../hdf5/files/CVE-2025-44905.patch           |   46 +
 meta-oe/recipes-support/hdf5/hdf5_1.14.4-3.bb |    4 +
 .../recipes-support/libraw/libraw_0.21.2.bb   |    2 +
 .../0001-lower-setuptools-requirements.patch  |    0
 .../CVE-2025-57833.patch                      |   88 +
 .../CVE-2025-59681.patch                      |  178 ++
 .../CVE-2025-64459-1.patch                    |   57 +
 .../CVE-2025-64459-2.patch                    |   63 +
 ...ngo_4.2.29.bb => python3-django_4.2.30.bb} |    2 +-
 .../python/python3-django_5.0.14.bb           |    7 +-
 .../python/python3-ecdsa/CVE-2026-33936.patch |   56 +
 .../python/python3-ecdsa_0.19.0.bb            |    1 +
 ...-flask_3.0.2.bb => python3-flask_3.0.3.bb} |    4 +-
 .../python3-tornado/CVE-2026-35536.patch      |  155 ++
 .../python/python3-tornado_6.4.2.bb           |    1 +
 .../python/python3-werkzeug_3.0.6.bb          |    1 +
 .../nginx/files/CVE-2026-27784.patch          |   88 +
 .../nginx/nginx-1.24.0/CVE-2026-27651.patch   |   34 +
 .../nginx/nginx-1.24.0/CVE-2026-27654.patch   |   81 +
 .../nginx/nginx-1.24.0/CVE-2026-28753.patch   |   93 +
 .../nginx/nginx-1.24.0/CVE-2026-28755.patch   |   48 +
 .../nginx/nginx-1.25.5/CVE-2026-28755.patch   |   48 +
 meta-webserver/recipes-httpd/nginx/nginx.inc  |    1 +
 .../recipes-httpd/nginx/nginx_1.24.0.bb       |    8 +-
 .../recipes-httpd/nginx/nginx_1.25.5.bb       |    2 +
 66 files changed, 4247 insertions(+), 143 deletions(-)
 delete mode 100644 meta-multimedia/recipes-multimedia/libde265/libde265/CVE-2023-43887.patch
 delete mode 100644 meta-multimedia/recipes-multimedia/libde265/libde265/CVE-2023-47471.patch
 rename meta-multimedia/recipes-multimedia/libde265/{libde265_1.0.12.bb => libde265_1.0.16.bb} (84%)
 rename meta-networking/recipes-connectivity/mbedtls/{mbedtls_3.6.5.bb => mbedtls_3.6.6.bb} (98%)
 create mode 100644 meta-networking/recipes-support/unbound/unbound/0001-CVE-2025-11411-1.patch
 create mode 100644 meta-networking/recipes-support/unbound/unbound/0002-CVE-2025-11411-2.patch
 delete mode 100644 meta-networking/recipes-support/unbound/unbound/CVE-2025-11411.patch
 create mode 100644 meta-oe/recipes-devtools/giflib/giflib/CVE-2025-31344.patch
 rename meta-oe/recipes-devtools/nodejs/{nodejs_20.20.0.bb => nodejs_20.20.2.bb} (98%)
 create mode 100644 meta-oe/recipes-devtools/yasm/yasm/CVE-2021-33454.patch
 create mode 100644 meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-32853.patch
 create mode 100644 meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-32854.patch
 create mode 100644 meta-oe/recipes-security/nmap/files/nmap-rename-enum-PCAP_SOCKET.patch
 create mode 100644 meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-23948.patch
 create mode 100644 meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-24491.patch
 create mode 100644 meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-24675.patch
 create mode 100644 meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-24676.patch
 create mode 100644 meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-24679.patch
 create mode 100644 meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-24680_CVE-2026-27950.patch
 create mode 100644 meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-24681.patch
 create mode 100644 meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-24682.patch
 create mode 100644 meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-24683.patch
 create mode 100644 meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-25941.patch
 create mode 100644 meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-29774.patch
 create mode 100644 meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-29775.patch
 create mode 100644 meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-29776.patch
 create mode 100644 meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-31806.patch
 create mode 100644 meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-31897.patch
 create mode 100644 meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-33952.patch
 create mode 100644 meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-33984.patch
 create mode 100644 meta-oe/recipes-support/hdf5/files/CVE-2025-2153.patch
 create mode 100644 meta-oe/recipes-support/hdf5/files/CVE-2025-2309.patch
 create mode 100644 meta-oe/recipes-support/hdf5/files/CVE-2025-2310.patch
 create mode 100644 meta-oe/recipes-support/hdf5/files/CVE-2025-44905.patch
 rename meta-python/recipes-devtools/python/{python3-django-4.2.29 => python3-django-4.2.30}/0001-lower-setuptools-requirements.patch (100%)
 create mode 100644 meta-python/recipes-devtools/python/python3-django-5.0.14/CVE-2025-57833.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-django-5.0.14/CVE-2025-59681.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-django-5.0.14/CVE-2025-64459-1.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-django-5.0.14/CVE-2025-64459-2.patch
 rename meta-python/recipes-devtools/python/{python3-django_4.2.29.bb => python3-django_4.2.30.bb} (82%)
 create mode 100644 meta-python/recipes-devtools/python/python3-ecdsa/CVE-2026-33936.patch
 rename meta-python/recipes-devtools/python/{python3-flask_3.0.2.bb => python3-flask_3.0.3.bb} (80%)
 create mode 100644 meta-python/recipes-devtools/python/python3-tornado/CVE-2026-35536.patch
 create mode 100644 meta-webserver/recipes-httpd/nginx/files/CVE-2026-27784.patch
 create mode 100644 meta-webserver/recipes-httpd/nginx/nginx-1.24.0/CVE-2026-27651.patch
 create mode 100644 meta-webserver/recipes-httpd/nginx/nginx-1.24.0/CVE-2026-27654.patch
 create mode 100644 meta-webserver/recipes-httpd/nginx/nginx-1.24.0/CVE-2026-28753.patch
 create mode 100644 meta-webserver/recipes-httpd/nginx/nginx-1.24.0/CVE-2026-28755.patch
 create mode 100644 meta-webserver/recipes-httpd/nginx/nginx-1.25.5/CVE-2026-28755.patch

Comments

Khem Raj April 15, 2026, 2:58 p.m. UTC | #1 
merged now. Thanks Anuj

On Wed, Apr 15, 2026 at 5:32 AM Anuj Mittal via lists.openembedded.org
<anuj.mittal=oss.qualcomm.com@lists.openembedded.org> wrote:

> Please merge these changes in scarthgap. Tested locally and on autobuilder.
>
> https://autobuilder.yoctoproject.org/valkyrie/#/builders/81/builds/1469
>
> The following changes since commit
> 1ad0d777d1de1769e5995eb806f7ae5c15d0be54:
>
>   strongswan: Fix CVE-2026-25075 (2026-04-03 15:00:48 +0530)
>
> are available in the Git repository at:
>
>   https://git.openembedded.org/meta-openembedded-contrib anujm/scarthgap
>
> https://git.openembedded.org/meta-openembedded-contrib/log/?h=anujm/scarthgap
>
> for you to fetch changes up to 5124ac4a658899158f4a7a2ddf1d2ca931ec7d0e:
>
>   nginx: fix CVE-2026-28753 (2026-04-15 14:12:18 +0530)
>
> ----------------------------------------------------------------
>
> Ankur Tyagi (32):
>   abseil-cpp: ignore CVE-2025-0838
>   freerdp3: fix CVE-2026-25941
>   freerdp3: fix CVE-2026-33952
>   freerdp3: fix CVE-2026-23948
>   freerdp3: fix CVE-2026-24491
>   freerdp3: fix CVE-2026-24675
>   freerdp3: fix CVE-2026-24676
>   freerdp3: ignore CVE-2026-24677 and CVE-2026-24678
>   freerdp3: fix CVE-2026-24679
>   freerdp3: fix CVE-2026-24680 and CVE-2026-27950
>   freerdp3: fix CVE-2026-24681
>   freerdp3: fix CVE-2026-24682
>   freerdp3: fix CVE-2026-24683
>   freerdp3: fix CVE-2026-29774
>   freerdp3: fix CVE-2026-29775
>   freerdp3: fix CVE-2026-29776
>   freerdp3: fix CVE-2026-31806
>   freerdp3: fix CVE-2026-31897
>   freerdp3: fix CVE-2026-33984
>   libde265: upgrade 1.0.12 -> 1.0.16
>   libraw: ignore CVE-2026-5318
>   libvncserver: fix CVE-2026-32853
>   libvncserver: fix CVE-2026-32854
>   nodejs: upgrade 20.20.0 -> 20.20.2
>   python3-django: upgrade 4.2.29 -> 4.2.30
>   python3-ecdsa: fix CVE-2026-33936
>   python3-flask: upgrade 3.0.2 -> 3.0.3
>   python3-tornado: fix CVE-2026-35536
>   python3-werkzeug: ignore CVE-2026-27199
>   nginx: fix CVE-2026-27651
>   nginx: fix CVE-2026-27654
>   nginx: fix CVE-2026-28753
>
> Guocai He (1):
>   yasm: fix CVE-2021-33454
>
> Gyorgy Sarvari (2):
>   giflib: patch CVE-2025-31344
>   mbedtls: upgrade 3.6.5 -> 3.6.6
>
> Haixiao Yan (3):
>   python3-django: fix CVE-2025-64459
>   python3-django: fix CVE-2025-57833
>   python3-django: fix CVE-2025-59681
>
> Hitendra Prajapati (2):
>   nginx: Fix for CVE-2026-27784
>   nginx: Fix for CVE-2026-28755
>
> Jackson James (1):
>   unbound: Fix CVE-2025-11411
>
> Jinfeng Wang (1):
>   nmap: rename enum PCAP_SOCKET
>
> Libo Chen (4):
>   hdf5: fix CVE-2025-2153
>   hdf5: fix CVE-2025-2310
>   hdf5: fix CVE-2025-44905
>   hdf5: fix CVE-2025-2309
>
> Peter Marko (1):
>   grpc: set status for CVE-2026-33186
>
>  .../libde265/libde265/CVE-2023-43887.patch    |   39 -
>  .../libde265/libde265/CVE-2023-47471.patch    |   42 -
>  ...{libde265_1.0.12.bb => libde265_1.0.16.bb} |    4 +-
>  .../{mbedtls_3.6.5.bb => mbedtls_3.6.6.bb}    |    2 +-
>  .../unbound/0001-CVE-2025-11411-1.patch       | 1874 +++++++++++++++++
>  .../unbound/0002-CVE-2025-11411-2.patch       |  153 ++
>  .../unbound/unbound/CVE-2025-11411.patch      |   48 -
>  .../recipes-support/unbound/unbound_1.19.3.bb |    3 +-
>  .../abseil-cpp/abseil-cpp_20240116.3.bb       |    2 +
>  .../giflib/giflib/CVE-2025-31344.patch        |   28 +
>  .../recipes-devtools/giflib/giflib_5.2.2.bb   |    3 +-
>  meta-oe/recipes-devtools/grpc/grpc_1.60.1.bb  |    2 +
>  .../{nodejs_20.20.0.bb => nodejs_20.20.2.bb}  |    4 +-
>  .../yasm/yasm/CVE-2021-33454.patch            |   29 +
>  meta-oe/recipes-devtools/yasm/yasm_git.bb     |    1 +
>  .../libvncserver/CVE-2026-32853.patch         |   76 +
>  .../libvncserver/CVE-2026-32854.patch         |   66 +
>  .../libvncserver/libvncserver_0.9.14.bb       |    5 +-
>  .../files/nmap-rename-enum-PCAP_SOCKET.patch  |   81 +
>  meta-oe/recipes-security/nmap/nmap_7.80.bb    |    1 +
>  .../freerdp/freerdp3/CVE-2026-23948.patch     |   55 +
>  .../freerdp/freerdp3/CVE-2026-24491.patch     |   52 +
>  .../freerdp/freerdp3/CVE-2026-24675.patch     |   32 +
>  .../freerdp/freerdp3/CVE-2026-24676.patch     |   34 +
>  .../freerdp/freerdp3/CVE-2026-24679.patch     |   44 +
>  .../CVE-2026-24680_CVE-2026-27950.patch       |   24 +
>  .../freerdp/freerdp3/CVE-2026-24681.patch     |   26 +
>  .../freerdp/freerdp3/CVE-2026-24682.patch     |   31 +
>  .../freerdp/freerdp3/CVE-2026-24683.patch     |  114 +
>  .../freerdp/freerdp3/CVE-2026-25941.patch     |   28 +
>  .../freerdp/freerdp3/CVE-2026-29774.patch     |   75 +
>  .../freerdp/freerdp3/CVE-2026-29775.patch     |   30 +
>  .../freerdp/freerdp3/CVE-2026-29776.patch     |   30 +
>  .../freerdp/freerdp3/CVE-2026-31806.patch     |   36 +
>  .../freerdp/freerdp3/CVE-2026-31897.patch     |   28 +
>  .../freerdp/freerdp3/CVE-2026-33952.patch     |   38 +
>  .../freerdp/freerdp3/CVE-2026-33984.patch     |   34 +
>  .../recipes-support/freerdp/freerdp3_3.4.0.bb |   19 +
>  .../hdf5/files/CVE-2025-2153.patch            |   51 +
>  .../hdf5/files/CVE-2025-2309.patch            |   41 +
>  .../hdf5/files/CVE-2025-2310.patch            |   37 +
>  .../hdf5/files/CVE-2025-44905.patch           |   46 +
>  meta-oe/recipes-support/hdf5/hdf5_1.14.4-3.bb |    4 +
>  .../recipes-support/libraw/libraw_0.21.2.bb   |    2 +
>  .../0001-lower-setuptools-requirements.patch  |    0
>  .../CVE-2025-57833.patch                      |   88 +
>  .../CVE-2025-59681.patch                      |  178 ++
>  .../CVE-2025-64459-1.patch                    |   57 +
>  .../CVE-2025-64459-2.patch                    |   63 +
>  ...ngo_4.2.29.bb => python3-django_4.2.30.bb} |    2 +-
>  .../python/python3-django_5.0.14.bb           |    7 +-
>  .../python/python3-ecdsa/CVE-2026-33936.patch |   56 +
>  .../python/python3-ecdsa_0.19.0.bb            |    1 +
>  ...-flask_3.0.2.bb => python3-flask_3.0.3.bb} |    4 +-
>  .../python3-tornado/CVE-2026-35536.patch      |  155 ++
>  .../python/python3-tornado_6.4.2.bb           |    1 +
>  .../python/python3-werkzeug_3.0.6.bb          |    1 +
>  .../nginx/files/CVE-2026-27784.patch          |   88 +
>  .../nginx/nginx-1.24.0/CVE-2026-27651.patch   |   34 +
>  .../nginx/nginx-1.24.0/CVE-2026-27654.patch   |   81 +
>  .../nginx/nginx-1.24.0/CVE-2026-28753.patch   |   93 +
>  .../nginx/nginx-1.24.0/CVE-2026-28755.patch   |   48 +
>  .../nginx/nginx-1.25.5/CVE-2026-28755.patch   |   48 +
>  meta-webserver/recipes-httpd/nginx/nginx.inc  |    1 +
>  .../recipes-httpd/nginx/nginx_1.24.0.bb       |    8 +-
>  .../recipes-httpd/nginx/nginx_1.25.5.bb       |    2 +
>  66 files changed, 4247 insertions(+), 143 deletions(-)
>  delete mode 100644
> meta-multimedia/recipes-multimedia/libde265/libde265/CVE-2023-43887.patch
>  delete mode 100644
> meta-multimedia/recipes-multimedia/libde265/libde265/CVE-2023-47471.patch
>  rename meta-multimedia/recipes-multimedia/libde265/{libde265_1.0.12.bb
> => libde265_1.0.16.bb} (84%)
>  rename meta-networking/recipes-connectivity/mbedtls/{mbedtls_3.6.5.bb =>
> mbedtls_3.6.6.bb} (98%)
>  create mode 100644
> meta-networking/recipes-support/unbound/unbound/0001-CVE-2025-11411-1.patch
>  create mode 100644
> meta-networking/recipes-support/unbound/unbound/0002-CVE-2025-11411-2.patch
>  delete mode 100644
> meta-networking/recipes-support/unbound/unbound/CVE-2025-11411.patch
>  create mode 100644
> meta-oe/recipes-devtools/giflib/giflib/CVE-2025-31344.patch
>  rename meta-oe/recipes-devtools/nodejs/{nodejs_20.20.0.bb =>
> nodejs_20.20.2.bb} (98%)
>  create mode 100644 meta-oe/recipes-devtools/yasm/yasm/CVE-2021-33454.patch
>  create mode 100644
> meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-32853.patch
>  create mode 100644
> meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-32854.patch
>  create mode 100644
> meta-oe/recipes-security/nmap/files/nmap-rename-enum-PCAP_SOCKET.patch
>  create mode 100644
> meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-23948.patch
>  create mode 100644
> meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-24491.patch
>  create mode 100644
> meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-24675.patch
>  create mode 100644
> meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-24676.patch
>  create mode 100644
> meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-24679.patch
>  create mode 100644
> meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-24680_CVE-2026-27950.patch
>  create mode 100644
> meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-24681.patch
>  create mode 100644
> meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-24682.patch
>  create mode 100644
> meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-24683.patch
>  create mode 100644
> meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-25941.patch
>  create mode 100644
> meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-29774.patch
>  create mode 100644
> meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-29775.patch
>  create mode 100644
> meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-29776.patch
>  create mode 100644
> meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-31806.patch
>  create mode 100644
> meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-31897.patch
>  create mode 100644
> meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-33952.patch
>  create mode 100644
> meta-oe/recipes-support/freerdp/freerdp3/CVE-2026-33984.patch
>  create mode 100644 meta-oe/recipes-support/hdf5/files/CVE-2025-2153.patch
>  create mode 100644 meta-oe/recipes-support/hdf5/files/CVE-2025-2309.patch
>  create mode 100644 meta-oe/recipes-support/hdf5/files/CVE-2025-2310.patch
>  create mode 100644 meta-oe/recipes-support/hdf5/files/CVE-2025-44905.patch
>  rename meta-python/recipes-devtools/python/{python3-django-4.2.29 =>
> python3-django-4.2.30}/0001-lower-setuptools-requirements.patch (100%)
>  create mode 100644
> meta-python/recipes-devtools/python/python3-django-5.0.14/CVE-2025-57833.patch
>  create mode 100644
> meta-python/recipes-devtools/python/python3-django-5.0.14/CVE-2025-59681.patch
>  create mode 100644
> meta-python/recipes-devtools/python/python3-django-5.0.14/CVE-2025-64459-1.patch
>  create mode 100644
> meta-python/recipes-devtools/python/python3-django-5.0.14/CVE-2025-64459-2.patch
>  rename meta-python/recipes-devtools/python/{python3-django_4.2.29.bb =>
> python3-django_4.2.30.bb} (82%)
>  create mode 100644
> meta-python/recipes-devtools/python/python3-ecdsa/CVE-2026-33936.patch
>  rename meta-python/recipes-devtools/python/{python3-flask_3.0.2.bb =>
> python3-flask_3.0.3.bb} (80%)
>  create mode 100644
> meta-python/recipes-devtools/python/python3-tornado/CVE-2026-35536.patch
>  create mode 100644
> meta-webserver/recipes-httpd/nginx/files/CVE-2026-27784.patch
>  create mode 100644
> meta-webserver/recipes-httpd/nginx/nginx-1.24.0/CVE-2026-27651.patch
>  create mode 100644
> meta-webserver/recipes-httpd/nginx/nginx-1.24.0/CVE-2026-27654.patch
>  create mode 100644
> meta-webserver/recipes-httpd/nginx/nginx-1.24.0/CVE-2026-28753.patch
>  create mode 100644
> meta-webserver/recipes-httpd/nginx/nginx-1.24.0/CVE-2026-28755.patch
>  create mode 100644
> meta-webserver/recipes-httpd/nginx/nginx-1.25.5/CVE-2026-28755.patch
>
> --
> 2.53.0
>
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#126359):
> https://lists.openembedded.org/g/openembedded-devel/message/126359
> Mute This Topic: https://lists.openembedded.org/mt/118839095/1997914
> Group Owner: openembedded-devel+owner@lists.openembedded.org
> Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [
> raj.khem@gmail.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>
>