mbox

[00/48] Wrynose pull request

Message ID cover.1786352020.git.anuj.mittal@oss.qualcomm.com
State New
Headers show

Pull-request

https://git.openembedded.org/meta-openembedded-contrib anujm/wrynose

Message

Anuj Mittal Aug. 10, 2026, 10:20 a.m. UTC 
Please merge these changes in wrynose. Tested locally and on autobuilder.

https://autobuilder.yoctoproject.org/valkyrie/#/builders/81/builds/1711

The following changes since commit af8b6d6b2f0b11595b0a0d5b82efa3129d52a628:

  sysdig: Use LuaJIT headers to match the linked LuaJIT library (2026-07-24 06:15:59 +0530)

are available in the Git repository at:

  https://git.openembedded.org/meta-openembedded-contrib anujm/wrynose
  https://git.openembedded.org/meta-openembedded-contrib/log/?h=anujm/wrynose

for you to fetch changes up to c466d490dd85e1bdfa7bc2dd4aca1b279afdf83a:

  sdbus-c++-libsystemd: add .git to github repository url (2026-08-10 07:33:03 +0530)

----------------------------------------------------------------

Adarsh Jagadish Kamini (4):
  thrift: fix CVE-2026-55971
  thrift: fix CVE-2026-58023
  thrift: fix CVE-2026-48144
  thrift: fix CVE-2026-58389

Ankur Tyagi (14):
  valkey: upgrade 9.0.4 -> 9.0.5
  bluealsa: upgrade 4.3.0 -> 4.3.1
  strongswan: patch CVE-2026-47895
  netplan: upgrade 1.2.1 -> 1.2.2
  transmission: upgrade 4.1.1 -> 4.1.3
  liboauth2: upgarde 2.2.0 -> 2.3.0
  cryptsetup: upgrade 2.8.6 -> 2.8.7
  xrdp: upgrade 0.10.6 -> 0.10.6.1
  swagger-ui: upgrade 5.32.8 -> 5.32.11
  cjose: upgrade 0.6.2.4 -> 0.6.2.7
  usbredir: upgrade 0.14.0 -> 0.15.0
  tcpreplay: upgrade 4.5.2 -> 4.5.5
  python3-faker: upgrade 40.13.0 -> 40.14.1
  python3-sh: upgrade 2.2.2 -> 2.2.4

Devansh Patel (2):
  hdf5: Fix CVE-2026-26199
  hdf5: Fix CVE-2026-26197

Hetvi Thakar (5):
  libdbi-perl: Fix CVE-2026-9698
  libdbi-perl: Fix CVE-2026-10879
  libdbi-perl: Fix CVE-2026-14380
  libdbi-perl: Fix CVE-2026-14739
  libdbi-perl: Fix CVE-2026-14740

Jason Schonberg (2):
  nodejs: upgrade 22.23.1 -> 22.23.2
  php: upgrade 8.5.8 -> 8.5.9

Khem Raj (10):
  libopus: upgrade 1.6 -> 1.6.1
  mpv: propagate ffmpeg's commercial LICENSE_FLAGS
  python3-mpv: propagate ffmpeg's commercial LICENSE_FLAGS
  fluidsynth: upgrade 2.5.3 -> 2.5.7
  libde265: upgrade 1.0.18 -> 1.0.19
  libsrtp: upgrade 2.7.0 -> 2.8.0
  gssdp: upgrade 1.6.4 -> 1.6.6
  srt: upgrade 1.5.4 -> 1.5.6
  gupnp: upgrade 1.6.9 -> 1.6.10
  gupnp-tools: upgrade 0.12.2 -> 0.12.4

Leon Anavi (1):
  python3-rarfile: Upgrade 4.2 -> 4.3

Markus Volk (2):
  colord: set proper home-dir
  fluidsynth: fix branch after recipe update

Omkar Patil (1):
  openvpn: fix CVE-2026-40215

Peter Marko (1):
  sdbus-c++-libsystemd: add .git to github repository url

Tugrul Kukul (1):
  jq: fix infinite loop in CVE-2026-47770 backport

Wang Mingyu (5):
  dovecot: upgrade 2.4.3 -> 2.4.4
  smarty: upgrade 5.8.0 -> 5.8.3
  smarty: upgrade 5.8.3 -> 5.8.4
  libosip2: upgrade 5.3.1 -> 5.3.2
  python3-rarfile: upgrade 4.3 -> 4.4

 .../gupnp/{gssdp_1.6.4.bb => gssdp_1.6.6.bb}  |   2 +-
 ...-tools_0.12.2.bb => gupnp-tools_0.12.4.bb} |   2 +-
 .../gupnp/{gupnp_1.6.9.bb => gupnp_1.6.10.bb} |   2 +-
 ...asename-implementation-from-glib-2.0.patch |  88 ---
 .../{bluealsa_4.3.0.bb => bluealsa_4.3.1.bb}  |   5 +-
 ...luidsynth_2.5.3.bb => fluidsynth_2.5.7.bb} |   4 +-
 ...{libde265_1.0.18.bb => libde265_1.0.19.bb} |   3 +-
 .../{libsrtp_2.7.0.bb => libsrtp_2.8.0.bb}    |   2 +-
 .../srt/0002-allow-build-with-cmake-4.patch   |  43 --
 .../srt/{srt_1.5.4.bb => srt_1.5.6.bb}        |   3 +-
 .../{dovecot_2.4.3.bb => dovecot_2.4.4.bb}    |   2 +-
 .../{libosip2_5.3.1.bb => libosip2_5.3.2.bb}  |   2 +-
 .../openvpn/openvpn/CVE-2026-40215.patch      |  59 ++
 .../recipes-support/openvpn/openvpn_2.7.0.bb  |   1 +
 ...{usbredir_0.14.0.bb => usbredir_0.15.0.bb} |   4 +-
 .../strongswan/CVE-2026-47895.patch           |  92 +++
 .../strongswan/strongswan_6.0.6.bb            |   4 +-
 ...{tcpreplay_4.5.2.bb => tcpreplay_4.5.5.bb} |   2 +-
 .../{netplan_1.2.1.bb => netplan_1.2.2.bb}    |   2 +-
 .../thrift/thrift/CVE-2026-48144.patch        |  36 +
 .../thrift/thrift/CVE-2026-55971.patch        |  92 +++
 .../thrift/thrift/CVE-2026-58023.patch        | 231 ++++++
 .../thrift/thrift/CVE-2026-58389.patch        |  93 +++
 .../thrift/thrift_0.22.0.bb                   |   4 +
 ...mission_4.1.1.bb => transmission_4.1.3.bb} |   4 +-
 .../sdbus-c++/sdbus-c++-libsystemd_259.5.bb   |   2 +-
 ...ryptsetup_2.8.6.bb => cryptsetup_2.8.7.bb} |   2 +-
 .../jq/jq/CVE-2026-47770.patch                |   6 +-
 .../{nodejs_22.23.1.bb => nodejs_22.23.2.bb}  |   2 +-
 .../perl/libdbi-perl/CVE-2026-10879.patch     |  41 ++
 .../perl/libdbi-perl/CVE-2026-14380.patch     |  37 +
 .../perl/libdbi-perl/CVE-2026-14739.patch     | 124 ++++
 .../perl/libdbi-perl/CVE-2026-14740.patch     |  39 +
 .../perl/libdbi-perl/CVE-2026-9698.patch      |  51 ++
 .../perl/libdbi-perl_1.647.bb                 |   9 +-
 .../php/{php_8.5.8.bb => php_8.5.9.bb}        |   2 +-
 .../{valkey_9.0.4.bb => valkey_9.0.5.bb}      |   2 +-
 .../{libopus_1.6.bb => libopus_1.6.1.bb}      |   2 +-
 .../recipes-multimedia/mplayer/mpv_0.41.0.bb  |   7 +-
 .../{cjose_0.6.2.4.bb => cjose_0.6.2.7.bb}    |   2 +-
 meta-oe/recipes-support/colord/colord.bb      |   7 +-
 .../hdf5/files/CVE-2026-26197.patch           |  70 ++
 .../hdf5/files/CVE-2026-26199.patch           | 678 ++++++++++++++++++
 meta-oe/recipes-support/hdf5/hdf5_2.0.0.bb    |   2 +
 ...rage-linker-flag-behind-CODE_COVERAG.patch |  33 -
 ..._easy_setopt-takes-a-long-not-an-int.patch |  33 -
 .../0002-Fix-use-of-strchr-with-new-GCC.patch |  33 -
 ...{liboauth2_2.2.0.bb => liboauth2_2.3.0.bb} |   8 +-
 .../{smarty_5.8.0.bb => smarty_5.8.4.bb}      |   2 +-
 .../xrdp/{xrdp_0.10.6.bb => xrdp_0.10.6.1.bb} |   2 +-
 ...er_40.13.0.bb => python3-faker_40.14.1.bb} |   2 +-
 .../python/python3-mpv_1.0.8.bb               |   6 +-
 ...-rarfile_4.2.bb => python3-rarfile_4.4.bb} |   2 +-
 ...ython3-sh_2.2.2.bb => python3-sh_2.2.4.bb} |   2 +-
 ...ger-ui_5.32.8.bb => swagger-ui_5.32.11.bb} |   2 +-
 55 files changed, 1715 insertions(+), 277 deletions(-)
 rename meta-multimedia/recipes-connectivity/gupnp/{gssdp_1.6.4.bb => gssdp_1.6.6.bb} (92%)
 rename meta-multimedia/recipes-connectivity/gupnp/{gupnp-tools_0.12.2.bb => gupnp-tools_0.12.4.bb} (84%)
 rename meta-multimedia/recipes-connectivity/gupnp/{gupnp_1.6.9.bb => gupnp_1.6.10.bb} (93%)
 delete mode 100644 meta-multimedia/recipes-multimedia/bluealsa/bluealsa/0001-Use-basename-implementation-from-glib-2.0.patch
 rename meta-multimedia/recipes-multimedia/bluealsa/{bluealsa_4.3.0.bb => bluealsa_4.3.1.bb} (96%)
 rename meta-multimedia/recipes-multimedia/fluidsynth/{fluidsynth_2.5.3.bb => fluidsynth_2.5.7.bb} (92%)
 rename meta-multimedia/recipes-multimedia/libde265/{libde265_1.0.18.bb => libde265_1.0.19.bb} (93%)
 rename meta-multimedia/recipes-support/libsrtp/{libsrtp_2.7.0.bb => libsrtp_2.8.0.bb} (94%)
 delete mode 100644 meta-multimedia/recipes-support/srt/srt/0002-allow-build-with-cmake-4.patch
 rename meta-multimedia/recipes-support/srt/{srt_1.5.4.bb => srt_1.5.6.bb} (90%)
 rename meta-networking/recipes-support/dovecot/{dovecot_2.4.3.bb => dovecot_2.4.4.bb} (97%)
 rename meta-networking/recipes-support/libosip2/{libosip2_5.3.1.bb => libosip2_5.3.2.bb} (88%)
 create mode 100644 meta-networking/recipes-support/openvpn/openvpn/CVE-2026-40215.patch
 rename meta-networking/recipes-support/spice/{usbredir_0.14.0.bb => usbredir_0.15.0.bb} (82%)
 create mode 100644 meta-networking/recipes-support/strongswan/strongswan/CVE-2026-47895.patch
 rename meta-networking/recipes-support/tcpreplay/{tcpreplay_4.5.2.bb => tcpreplay_4.5.5.bb} (89%)
 rename meta-oe/dynamic-layers/meta-python/recipes-connectivity/netplan/{netplan_1.2.1.bb => netplan_1.2.2.bb} (97%)
 create mode 100644 meta-oe/recipes-connectivity/thrift/thrift/CVE-2026-48144.patch
 create mode 100644 meta-oe/recipes-connectivity/thrift/thrift/CVE-2026-55971.patch
 create mode 100644 meta-oe/recipes-connectivity/thrift/thrift/CVE-2026-58023.patch
 create mode 100644 meta-oe/recipes-connectivity/thrift/thrift/CVE-2026-58389.patch
 rename meta-oe/recipes-connectivity/transmission/{transmission_4.1.1.bb => transmission_4.1.3.bb} (97%)
 rename meta-oe/recipes-crypto/cryptsetup/{cryptsetup_2.8.6.bb => cryptsetup_2.8.7.bb} (98%)
 rename meta-oe/recipes-devtools/nodejs/{nodejs_22.23.1.bb => nodejs_22.23.2.bb} (99%)
 create mode 100644 meta-oe/recipes-devtools/perl/libdbi-perl/CVE-2026-10879.patch
 create mode 100644 meta-oe/recipes-devtools/perl/libdbi-perl/CVE-2026-14380.patch
 create mode 100644 meta-oe/recipes-devtools/perl/libdbi-perl/CVE-2026-14739.patch
 create mode 100644 meta-oe/recipes-devtools/perl/libdbi-perl/CVE-2026-14740.patch
 create mode 100644 meta-oe/recipes-devtools/perl/libdbi-perl/CVE-2026-9698.patch
 rename meta-oe/recipes-devtools/php/{php_8.5.8.bb => php_8.5.9.bb} (99%)
 rename meta-oe/recipes-extended/valkey/{valkey_9.0.4.bb => valkey_9.0.5.bb} (98%)
 rename meta-oe/recipes-multimedia/libopus/{libopus_1.6.bb => libopus_1.6.1.bb} (96%)
 rename meta-oe/recipes-support/cjose/{cjose_0.6.2.4.bb => cjose_0.6.2.7.bb} (88%)
 create mode 100644 meta-oe/recipes-support/hdf5/files/CVE-2026-26197.patch
 create mode 100644 meta-oe/recipes-support/hdf5/files/CVE-2026-26199.patch
 delete mode 100644 meta-oe/recipes-support/liboauth2/liboauth2/0001-build-guard-coverage-linker-flag-behind-CODE_COVERAG.patch
 delete mode 100644 meta-oe/recipes-support/liboauth2/liboauth2/0001-fix-clang-curl_easy_setopt-takes-a-long-not-an-int.patch
 delete mode 100644 meta-oe/recipes-support/liboauth2/liboauth2/0002-Fix-use-of-strchr-with-new-GCC.patch
 rename meta-oe/recipes-support/liboauth2/{liboauth2_2.2.0.bb => liboauth2_2.3.0.bb} (71%)
 rename meta-oe/recipes-support/smarty/{smarty_5.8.0.bb => smarty_5.8.4.bb} (95%)
 rename meta-oe/recipes-support/xrdp/{xrdp_0.10.6.bb => xrdp_0.10.6.1.bb} (98%)
 rename meta-python/recipes-devtools/python/{python3-faker_40.13.0.bb => python3-faker_40.14.1.bb} (93%)
 rename meta-python/recipes-devtools/python/{python3-rarfile_4.2.bb => python3-rarfile_4.4.bb} (82%)
 rename meta-python/recipes-devtools/python/{python3-sh_2.2.2.bb => python3-sh_2.2.4.bb} (84%)
 rename meta-webserver/recipes-devtools/swagger-ui/{swagger-ui_5.32.8.bb => swagger-ui_5.32.11.bb} (94%)