mbox

[00/55] Wrynose pull request

Message ID cover.1784858854.git.anuj.mittal@oss.qualcomm.com
State New
Headers show

Pull-request

https://git.openembedded.org/meta-openembedded-contrib anujm/wrynose

Message

Anuj Mittal July 24, 2026, 2:58 a.m. UTC 
Please merge these changes in wrynose. Tested locally and on autobuilder.

https://autobuilder.yoctoproject.org/valkyrie/#/builders/81/builds/1657

The following changes since commit d97b5602d7f64422c94b7311466cda7f6b1962d5:

  libuio: fix FILE descriptor leak (2026-07-07 08:04:43 +0530)

are available in the Git repository at:

  https://git.openembedded.org/meta-openembedded-contrib anujm/wrynose
  https://git.openembedded.org/meta-openembedded-contrib/log/?h=anujm/wrynose

for you to fetch changes up to af8b6d6b2f0b11595b0a0d5b82efa3129d52a628:

  sysdig: Use LuaJIT headers to match the linked LuaJIT library (2026-07-24 06:15:59 +0530)

----------------------------------------------------------------

Alejandro Mery (1):
  ltrace: fix PRIb64 length modifier on LP64 musl

Ankur Tyagi (4):
  haveged: upgrade 1.9.22 -> 1.9.23
  postfix: upgrade 3.10.10 -> 3.10.12
  python3-django: upgrade 6.0.6 -> 6.0.7
  python3-django: upgrade 5.2.15 -> 5.2.16

Darsh Kelaiya (3):
  jq: Fix CVE-2026-43895
  jq: Fix CVE-2026-49839
  jq: Fix CVE-2026-54679

Deepak Rathore (3):
  nmap: Fix CVE-2026-58058
  libidn: Fix CVE-2026-57053
  mbedtls: set CVE_STATUS for CVE-2025-66442

He Zhe (1):
  bpftool-native: Fix -Wdiscarded-qualifiers errors for glibc 2.42+

Jason Schonberg (2):
  c-ares: upgrade 1.34.6 -> 1.34.8
  php: upgrade 8.5.7 -> 8.5.8

Khem Raj (5):
  ifuse: upgrade 1.2.0 -> 1.2.1
  xdebug: upgrade 3.5.1 -> 3.5.3
  apache2: upgrade 2.4.67 -> 2.4.68
  samba: upgrade 4.23.5 -> 4.23.8
  sysdig: Use LuaJIT headers to match the linked LuaJIT library

Leon Anavi (1):
  python3-tornado: Upgrade 6.5.6 -> 6.5.7

Markus Volk (2):
  pipewire: update 1.6.6 -> 1.6.7
  pipewire: update 1.6.7 -> 1.6.8

Peter Marko (11):
  libwebsockets: set status for CVE-2025-1866
  libwebsockets: patch CVE-2026-10650
  7zip: set status for CVE-2026-58052
  bit7z: set status for CVE-2026-45380 and CVE-2026-45384
  c-ares: set status for CVE-2025-31498
  grpc: set status for CVE-2023-33953 and CVE-2024-37168
  python3-grpcio: set status for CVE-2023-33953 and CVE-2024-37168
  protobuf: set status for CVE-2024-7254
  python3-protobuf: set status for CVE-2024-7254
  tcpdump: set status for CVE-2024-2397
  libcoap: set status for CVE-2023-51847

Roland Kovacs (2):
  thrift: fix multiple CVEs
  radvd: fix CVE-2026-48715

Wang Mingyu (19):
  imagemagick: upgrade 7.1.2-24 -> 7.1.2-25
  imagemagick: upgrade 7.1.2-25 -> 7.1.2-26
  imagemagick: upgrade 7.1.2-26 -> 7.1.2-27
  python3-tornado: upgrade 6.5.5 -> 6.5.6
  python3-elementpath: upgrade 5.1.1 -> 5.1.2
  python3-elementpath: upgrade 5.1.2 -> 5.1.3
  swagger-ui: upgrade 5.32.6 -> 5.32.7
  swagger-ui: upgrade 5.32.7 -> 5.32.8
  libnvme: upgrade 1.16.1 -> 1.16.2
  python3-sqlalchemy: upgrade 2.0.49 -> 2.0.50
  python3-sqlalchemy: upgrade 2.0.50 -> 2.0.51
  python3-socketio: upgrade 5.16.1 -> 5.16.2
  python3-socketio: upgrade 5.16.2 -> 5.16.3
  monocypher: upgrade 4.0.2 -> 4.0.3
  proftpd: upgrade 1.3.9b -> 1.3.9c
  python3-tzdata: upgrade 2026.2 -> 2026.3
  memcached: upgrade 1.6.42 -> 1.6.43
  memcached: upgrade 1.6.43 -> 1.6.45
  ldns: upgrade 1.9.0 -> 1.9.2

mark.yang (1):
  python3-h11: set CVE_PRODUCT

 .../ifuse/{ifuse_1.2.0.bb => ifuse_1.2.1.bb}  |    2 +-
 .../{pipewire_1.6.6.bb => pipewire_1.6.8.bb}  |    2 +-
 .../mbedtls/mbedtls_3.6.6.bb                  |   17 +
 .../{samba_4.23.5.bb => samba_4.23.8.bb}      |    2 +-
 ...{postfix_3.10.10.bb => postfix_3.10.12.bb} |    2 +-
 .../{proftpd_1.3.9b.bb => proftpd_1.3.9c.bb}  |    2 +-
 .../radvd/files/CVE-2026-48715.patch          |  213 +++
 .../radvd/files/CVE-2026-48715_dep.patch      |  106 ++
 .../recipes-daemons/radvd/radvd_2.20.bb       |    2 +
 .../libcoap/libcoap_4.3.5b.bb                 |    1 +
 ...emcached_1.6.42.bb => memcached_1.6.45.bb} |    2 +-
 .../recipes-support/tcpdump/tcpdump_4.99.6.bb |    2 +
 .../libwebsockets/CVE-2026-10650.patch        |   46 +
 .../libwebsockets/libwebsockets_4.5.8.bb      |    7 +-
 .../thrift/thrift/CVE-2026-43868.patch        | 1381 +++++++++++++++
 .../thrift/thrift/CVE-2026-43870.patch        |  134 ++
 .../thrift/thrift_0.22.0.bb                   |    4 +
 ...onocypher_4.0.2.bb => monocypher_4.0.3.bb} |    2 +-
 meta-oe/recipes-devtools/grpc/grpc_1.80.0.bb  |    3 +
 .../jq/jq/CVE-2026-43895.patch                | 1543 +++++++++++++++++
 .../jq/jq/CVE-2026-49839.patch                |   37 +
 .../jq/jq/CVE-2026-54679.patch                |   77 +
 meta-oe/recipes-devtools/jq/jq_1.8.1.bb       |    3 +
 .../ldns/{ldns_1.9.0.bb => ldns_1.9.2.bb}     |    2 +-
 ...t-fix-PRIb64-length-modifier-on-musl.patch |   49 +
 .../recipes-devtools/ltrace/ltrace_0.8.1.bb   |    1 +
 .../php/{php_8.5.7.bb => php_8.5.8.bb}        |    2 +-
 .../protobuf/protobuf_6.33.6.bb               |    2 +
 meta-oe/recipes-extended/7zip/7zip_26.00.bb   |    2 +
 meta-oe/recipes-extended/7zip/bit7z_4.0.12.bb |    3 +
 .../{haveged_1.9.22.bb => haveged_1.9.23.bb}  |    2 +-
 .../libidn/libidn/CVE-2026-57053.patch        |   28 +
 .../recipes-extended/libidn/libidn_1.43.bb    |    1 +
 .../recipes-extended/sysdig/sysdig_0.39.0.bb  |   13 +-
 .../bpftool/bpftool-native_6.16.bb            |    5 +-
 ...-Fix-Wdiscarded-qualifiers-under-C23.patch |   69 +
 .../nmap/files/CVE-2026-58058.patch           |   33 +
 meta-oe/recipes-security/nmap/nmap_7.95.bb    |    1 +
 .../{c-ares_1.34.6.bb => c-ares_1.34.8.bb}    |    4 +-
 ...ck_7.1.2-24.bb => imagemagick_7.1.2-27.bb} |    2 +-
 .../{libnvme_1.16.1.bb => libnvme_1.16.2.bb}  |    4 +-
 ...ngo_5.2.15.bb => python3-django_5.2.16.bb} |    2 +-
 ...jango_6.0.6.bb => python3-django_6.0.7.bb} |    2 +-
 ..._5.1.1.bb => python3-elementpath_5.1.3.bb} |    2 +-
 .../python/python3-grpcio_1.78.0.bb           |    2 +
 .../python/python3-h11_0.16.0.bb              |    2 +
 .../python/python3-protobuf_6.33.6.bb         |    2 +
 ...o_5.16.1.bb => python3-socketio_5.16.3.bb} |    2 +-
 ...2.0.49.bb => python3-sqlalchemy_2.0.51.bb} |    2 +-
 ...nado_6.5.5.bb => python3-tornado_6.5.7.bb} |    2 +-
 ...ata_2026.2.bb => python3-tzdata_2026.3.bb} |    7 +-
 ...gger-ui_5.32.6.bb => swagger-ui_5.32.8.bb} |    2 +-
 .../{apache2_2.4.67.bb => apache2_2.4.68.bb}  |    2 +-
 .../{xdebug_3.5.1.bb => xdebug_3.5.3.bb}      |    2 +-
 54 files changed, 3814 insertions(+), 30 deletions(-)
 rename meta-filesystems/recipes-filesystems/ifuse/{ifuse_1.2.0.bb => ifuse_1.2.1.bb} (83%)
 rename meta-multimedia/recipes-multimedia/pipewire/{pipewire_1.6.6.bb => pipewire_1.6.8.bb} (99%)
 rename meta-networking/recipes-connectivity/samba/{samba_4.23.5.bb => samba_4.23.8.bb} (99%)
 rename meta-networking/recipes-daemons/postfix/{postfix_3.10.10.bb => postfix_3.10.12.bb} (99%)
 rename meta-networking/recipes-daemons/proftpd/{proftpd_1.3.9b.bb => proftpd_1.3.9c.bb} (99%)
 create mode 100644 meta-networking/recipes-daemons/radvd/files/CVE-2026-48715.patch
 create mode 100644 meta-networking/recipes-daemons/radvd/files/CVE-2026-48715_dep.patch
 rename meta-networking/recipes-support/memcached/{memcached_1.6.42.bb => memcached_1.6.45.bb} (95%)
 create mode 100644 meta-oe/recipes-connectivity/libwebsockets/libwebsockets/CVE-2026-10650.patch
 create mode 100644 meta-oe/recipes-connectivity/thrift/thrift/CVE-2026-43868.patch
 create mode 100644 meta-oe/recipes-connectivity/thrift/thrift/CVE-2026-43870.patch
 rename meta-oe/recipes-crypto/monocypher/{monocypher_4.0.2.bb => monocypher_4.0.3.bb} (85%)
 create mode 100644 meta-oe/recipes-devtools/jq/jq/CVE-2026-43895.patch
 create mode 100644 meta-oe/recipes-devtools/jq/jq/CVE-2026-49839.patch
 create mode 100644 meta-oe/recipes-devtools/jq/jq/CVE-2026-54679.patch
 rename meta-oe/recipes-devtools/ldns/{ldns_1.9.0.bb => ldns_1.9.2.bb} (89%)
 create mode 100644 meta-oe/recipes-devtools/ltrace/ltrace/0001-lens_default-fix-PRIb64-length-modifier-on-musl.patch
 rename meta-oe/recipes-devtools/php/{php_8.5.7.bb => php_8.5.8.bb} (99%)
 rename meta-oe/recipes-extended/haveged/{haveged_1.9.22.bb => haveged_1.9.23.bb} (94%)
 create mode 100644 meta-oe/recipes-extended/libidn/libidn/CVE-2026-57053.patch
 create mode 100644 meta-oe/recipes-kernel/bpftool/bpftool/0001-libbpf-Fix-Wdiscarded-qualifiers-under-C23.patch
 create mode 100644 meta-oe/recipes-security/nmap/files/CVE-2026-58058.patch
 rename meta-oe/recipes-support/c-ares/{c-ares_1.34.6.bb => c-ares_1.34.8.bb} (86%)
 rename meta-oe/recipes-support/imagemagick/{imagemagick_7.1.2-24.bb => imagemagick_7.1.2-27.bb} (99%)
 rename meta-oe/recipes-support/libnvme/{libnvme_1.16.1.bb => libnvme_1.16.2.bb} (93%)
 rename meta-python/recipes-devtools/python/{python3-django_5.2.15.bb => python3-django_5.2.16.bb} (61%)
 rename meta-python/recipes-devtools/python/{python3-django_6.0.6.bb => python3-django_6.0.7.bb} (75%)
 rename meta-python/recipes-devtools/python/{python3-elementpath_5.1.1.bb => python3-elementpath_5.1.3.bb} (86%)
 rename meta-python/recipes-devtools/python/{python3-socketio_5.16.1.bb => python3-socketio_5.16.3.bb} (88%)
 rename meta-python/recipes-devtools/python/{python3-sqlalchemy_2.0.49.bb => python3-sqlalchemy_2.0.51.bb} (88%)
 rename meta-python/recipes-devtools/python/{python3-tornado_6.5.5.bb => python3-tornado_6.5.7.bb} (93%)
 rename meta-python/recipes-devtools/python/{python3-tzdata_2026.2.bb => python3-tzdata_2026.3.bb} (67%)
 rename meta-webserver/recipes-devtools/swagger-ui/{swagger-ui_5.32.6.bb => swagger-ui_5.32.8.bb} (94%)
 rename meta-webserver/recipes-httpd/apache2/{apache2_2.4.67.bb => apache2_2.4.68.bb} (99%)
 rename meta-webserver/recipes-php/xdebug/{xdebug_3.5.1.bb => xdebug_3.5.3.bb} (92%)