[00/16] Scarthgap pull request

Message ID	cover.1782985880.git.anuj.mittal@oss.qualcomm.com
State	Accepted, archived
Delegated to:	Anuj Mittal
Headers	show Return-Path: <anuj.mittal@oss.qualcomm.com> ip: 205.220.168.131, mailfrom: anuj.mittal@oss.qualcomm.com) From: Anuj Mittal <anuj.mittal@oss.qualcomm.com> To: openembedded-devel@lists.openembedded.org Subject: [PATCH 00/16] Scarthgap pull request Date: Thu, 2 Jul 2026 16:15:13 +0530 Message-ID: <cover.1782985880.git.anuj.mittal@oss.qualcomm.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit

Message ID

cover.1782985880.git.anuj.mittal@oss.qualcomm.com

State

Accepted, archived

Delegated to:

Anuj Mittal

Headers

From: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
To: openembedded-devel@lists.openembedded.org
Subject: [PATCH 00/16] Scarthgap pull request
Date: Thu,  2 Jul 2026 16:15:13 +0530
Message-ID: <cover.1782985880.git.anuj.mittal@oss.qualcomm.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit

Message

Anuj Mittal July 2, 2026, 10:45 a.m. UTC

Please merge these changes in scarthgap. Tested locally and on autobuilder.

https://autobuilder.yoctoproject.org/valkyrie/#/builders/81/builds/1592

The following changes since commit b0c2c648a1af89e7a8dd4c2ec841f3bc0ed0ccb9:

  nginx: backport fix for CVE-2026-9256 (2026-06-09 11:37:19 +0530)

are available in the Git repository at:

  https://git.openembedded.org/meta-openembedded-contrib anujm/scarthgap
  https://git.openembedded.org/meta-openembedded-contrib/log/?h=anujm/scarthgap

for you to fetch changes up to 29a044218285fdc7fcdd63d5f0929cb3a27b6fed:

  python3-matplotlib: fix build (2026-07-02 15:08:44 +0530)

----------------------------------------------------------------

Anuj Mittal (1):
  python3-matplotlib: fix build

Li Zhou (1):
  haveged: upgrade 1.9.18 -> 1.9.20

Nitin Wankhade (6):
  strongswan: Fix CVE-2026-35328
  strongswan: Fix CVE-2026-35329
  strongswan: Fix CVE-2026-35330
  strongswan: Fix CVE-2026-35331
  strongswan: Fix CVE-2026-35332
  strongswan: Fix CVE-2026-35333

Shubham Pushpkar (5):
  jq: Fix CVE-2026-40612
  jq: Fix CVE-2026-41256
  jq: Fix CVE-2026-41257
  jq: Fix CVE-2026-43894
  jq: Fix CVE-2026-43896

Theo Gaige (Schneider Electric) (1):
  nginx: patch CVE-2026-48142

Venkatasainath Ravikanti (1):
  syslog-ng: update config version to match installed binary

Wang Mingyu (1):
  haveged: upgrade 1.9.20 -> 1.9.22

 ...-insensitive-matching-and-reject-exc.patch | 176 ++++++++++++++++++
 ...-undersized-attributes-in-enumerator.patch |  41 ++++
 ...t-zero-length-EAP-SIM-AKA-attributes.patch |  54 ++++++
 ...d-NULL-pointer-dereference-when-veri.patch |  58 ++++++
 ...accept-non-empty-ECDH-public-keys-wi.patch |  51 +++++
 ...nt-infinite-loop-if-supported-versio.patch |  42 +++++
 .../strongswan/strongswan_5.9.14.bb           |   6 +
 .../jq/jq/CVE-2026-40612.patch                | 153 +++++++++++++++
 .../jq/jq/CVE-2026-41256.patch                |  54 ++++++
 .../jq/jq/CVE-2026-41257.patch                |  57 ++++++
 .../jq/jq/CVE-2026-43894.patch                |  56 ++++++
 .../jq/jq/CVE-2026-43896.patch                |  97 ++++++++++
 meta-oe/recipes-devtools/jq/jq_1.7.1.bb       |   5 +
 .../{haveged_1.9.18.bb => haveged_1.9.22.bb}  |   3 +-
 .../syslog-ng/files/syslog-ng.conf.systemd    |  11 +-
 .../syslog-ng/files/syslog-ng.conf.sysvinit   |   9 +-
 .../matplotlib-disable-download.patch         |  34 +++-
 .../python/python3-matplotlib_3.7.2.bb        |   4 +-
 .../nginx/nginx-1.24.0/CVE-2026-48142.patch   |  43 +++++
 .../recipes-httpd/nginx/nginx_1.24.0.bb       |   1 +
 20 files changed, 938 insertions(+), 17 deletions(-)
 create mode 100644 meta-networking/recipes-support/strongswan/strongswan/constraints-Case-insensitive-matching-and-reject-exc.patch
 create mode 100644 meta-networking/recipes-support/strongswan/strongswan/libradius-Reject-undersized-attributes-in-enumerator.patch
 create mode 100644 meta-networking/recipes-support/strongswan/strongswan/libsimaka-Reject-zero-length-EAP-SIM-AKA-attributes.patch
 create mode 100644 meta-networking/recipes-support/strongswan/strongswan/pkcs5-pkcs7-Avoid-NULL-pointer-dereference-when-veri.patch
 create mode 100644 meta-networking/recipes-support/strongswan/strongswan/tls-server-Only-accept-non-empty-ECDH-public-keys-wi.patch
 create mode 100644 meta-networking/recipes-support/strongswan/strongswan/tls-server-Prevent-infinite-loop-if-supported-versio.patch
 create mode 100644 meta-oe/recipes-devtools/jq/jq/CVE-2026-40612.patch
 create mode 100644 meta-oe/recipes-devtools/jq/jq/CVE-2026-41256.patch
 create mode 100644 meta-oe/recipes-devtools/jq/jq/CVE-2026-41257.patch
 create mode 100644 meta-oe/recipes-devtools/jq/jq/CVE-2026-43894.patch
 create mode 100644 meta-oe/recipes-devtools/jq/jq/CVE-2026-43896.patch
 rename meta-oe/recipes-extended/haveged/{haveged_1.9.18.bb => haveged_1.9.22.bb} (93%)
 create mode 100644 meta-webserver/recipes-httpd/nginx/nginx-1.24.0/CVE-2026-48142.patch

Comments

Khem Raj July 3, 2026, 6:15 a.m. UTC | #1

Looks good. merged now. Thanks Anuj

On Thu, Jul 2, 2026 at 3:45 AM Anuj Mittal via lists.openembedded.org
<anuj.mittal=oss.qualcomm.com@lists.openembedded.org> wrote:

> Please merge these changes in scarthgap. Tested locally and on autobuilder.
>
> https://autobuilder.yoctoproject.org/valkyrie/#/builders/81/builds/1592
>
> The following changes since commit
> b0c2c648a1af89e7a8dd4c2ec841f3bc0ed0ccb9:
>
>   nginx: backport fix for CVE-2026-9256 (2026-06-09 11:37:19 +0530)
>
> are available in the Git repository at:
>
>   https://git.openembedded.org/meta-openembedded-contrib anujm/scarthgap
>
> https://git.openembedded.org/meta-openembedded-contrib/log/?h=anujm/scarthgap
>
> for you to fetch changes up to 29a044218285fdc7fcdd63d5f0929cb3a27b6fed:
>
>   python3-matplotlib: fix build (2026-07-02 15:08:44 +0530)
>
> ----------------------------------------------------------------
>
> Anuj Mittal (1):
>   python3-matplotlib: fix build
>
> Li Zhou (1):
>   haveged: upgrade 1.9.18 -> 1.9.20
>
> Nitin Wankhade (6):
>   strongswan: Fix CVE-2026-35328
>   strongswan: Fix CVE-2026-35329
>   strongswan: Fix CVE-2026-35330
>   strongswan: Fix CVE-2026-35331
>   strongswan: Fix CVE-2026-35332
>   strongswan: Fix CVE-2026-35333
>
> Shubham Pushpkar (5):
>   jq: Fix CVE-2026-40612
>   jq: Fix CVE-2026-41256
>   jq: Fix CVE-2026-41257
>   jq: Fix CVE-2026-43894
>   jq: Fix CVE-2026-43896
>
> Theo Gaige (Schneider Electric) (1):
>   nginx: patch CVE-2026-48142
>
> Venkatasainath Ravikanti (1):
>   syslog-ng: update config version to match installed binary
>
> Wang Mingyu (1):
>   haveged: upgrade 1.9.20 -> 1.9.22
>
>  ...-insensitive-matching-and-reject-exc.patch | 176 ++++++++++++++++++
>  ...-undersized-attributes-in-enumerator.patch |  41 ++++
>  ...t-zero-length-EAP-SIM-AKA-attributes.patch |  54 ++++++
>  ...d-NULL-pointer-dereference-when-veri.patch |  58 ++++++
>  ...accept-non-empty-ECDH-public-keys-wi.patch |  51 +++++
>  ...nt-infinite-loop-if-supported-versio.patch |  42 +++++
>  .../strongswan/strongswan_5.9.14.bb           |   6 +
>  .../jq/jq/CVE-2026-40612.patch                | 153 +++++++++++++++
>  .../jq/jq/CVE-2026-41256.patch                |  54 ++++++
>  .../jq/jq/CVE-2026-41257.patch                |  57 ++++++
>  .../jq/jq/CVE-2026-43894.patch                |  56 ++++++
>  .../jq/jq/CVE-2026-43896.patch                |  97 ++++++++++
>  meta-oe/recipes-devtools/jq/jq_1.7.1.bb       |   5 +
>  .../{haveged_1.9.18.bb => haveged_1.9.22.bb}  |   3 +-
>  .../syslog-ng/files/syslog-ng.conf.systemd    |  11 +-
>  .../syslog-ng/files/syslog-ng.conf.sysvinit   |   9 +-
>  .../matplotlib-disable-download.patch         |  34 +++-
>  .../python/python3-matplotlib_3.7.2.bb        |   4 +-
>  .../nginx/nginx-1.24.0/CVE-2026-48142.patch   |  43 +++++
>  .../recipes-httpd/nginx/nginx_1.24.0.bb       |   1 +
>  20 files changed, 938 insertions(+), 17 deletions(-)
>  create mode 100644
> meta-networking/recipes-support/strongswan/strongswan/constraints-Case-insensitive-matching-and-reject-exc.patch
>  create mode 100644
> meta-networking/recipes-support/strongswan/strongswan/libradius-Reject-undersized-attributes-in-enumerator.patch
>  create mode 100644
> meta-networking/recipes-support/strongswan/strongswan/libsimaka-Reject-zero-length-EAP-SIM-AKA-attributes.patch
>  create mode 100644
> meta-networking/recipes-support/strongswan/strongswan/pkcs5-pkcs7-Avoid-NULL-pointer-dereference-when-veri.patch
>  create mode 100644
> meta-networking/recipes-support/strongswan/strongswan/tls-server-Only-accept-non-empty-ECDH-public-keys-wi.patch
>  create mode 100644
> meta-networking/recipes-support/strongswan/strongswan/tls-server-Prevent-infinite-loop-if-supported-versio.patch
>  create mode 100644 meta-oe/recipes-devtools/jq/jq/CVE-2026-40612.patch
>  create mode 100644 meta-oe/recipes-devtools/jq/jq/CVE-2026-41256.patch
>  create mode 100644 meta-oe/recipes-devtools/jq/jq/CVE-2026-41257.patch
>  create mode 100644 meta-oe/recipes-devtools/jq/jq/CVE-2026-43894.patch
>  create mode 100644 meta-oe/recipes-devtools/jq/jq/CVE-2026-43896.patch
>  rename meta-oe/recipes-extended/haveged/{haveged_1.9.18.bb =>
> haveged_1.9.22.bb} (93%)
>  create mode 100644
> meta-webserver/recipes-httpd/nginx/nginx-1.24.0/CVE-2026-48142.patch
>
> --
> 2.54.0
>
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#128000):
> https://lists.openembedded.org/g/openembedded-devel/message/128000
> Mute This Topic: https://lists.openembedded.org/mt/120081049/1997914
> Group Owner: openembedded-devel+owner@lists.openembedded.org
> Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [
> raj.khem@gmail.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>
>

[00/16] Scarthgap pull request

Pull-request

Message

Comments