| Message ID | cover.1793161233.git.ankur.tyagi85@gmail.com |
|---|---|
| State | New |
| Headers | show |
merged now, thanks Ankur On Tue, Oct 27, 2026 at 9:23 PM Ankur Tyagi via lists.openembedded.org <ankur.tyagi85=gmail.com@lists.openembedded.org> wrote: > From: Ankur Tyagi <ankur.tyagi85@gmail.com> > > Please merge these changes in blacksail. Tested locally and on autobuilder. > > https://autobuilder.yoctoproject.org/valkyrie/#/builders/81/builds/1904 > > The following changes since commit > a9d69bc066bf9498397db27902c287dd666fdfd4: > > lvgl-demo-fb: fix SRCREV (2026-10-14 09:26:03 +1300) > > are available in the Git repository at: > > https://git.openembedded.org/meta-openembedded-contrib ankurt/blacksail > > https://git.openembedded.org/meta-openembedded-contrib/log/?h=ankurt/blacksail > > for you to fetch changes up to bb956bf8ff7a32f31deaa83e96880d10ab564d14: > > redis: upgrade 8.10.2 -> 8.10.3 (2026-10-28 08:22:29 +1300) > > ---------------------------------------------------------------- > > Ankur Tyagi (51): > zeroconf: ignore CVEs > udisks2: patch CVE-2026-7867 > tmate: patch CVE-2026-4751 > tinyproxy: patch CVE-2026-54388 > flatpak: upgrade 1.18.0 -> 1.18.4 > xdg-dbus-proxy: upgrade 0.1.7 -> 0.1.9 > swagger-ui: upgrade 5.33.1 -> 5.33.2 > freerdp3: upgrade 3.32.1 -> 3.32.2 > spitools: upgrade 1.1.0 -> 1.1.1 > libspdm: upgrade 3.8.2 -> 3.8.3 > libmikmod: upgrade 3.3.14 -> 3.3.15 > libxmp: upgrade 4.7.3 -> 4.7.4 > python3-pyjwt: upgrade 2.13.0 -> 2.14.0 > python3-cbor2: upgrade 6.1.4 -> 6.1.5 > samba: ignore CVE-2026-2340 > rapidjson: mark CVE-2024-38517 fixed > psqlodbc: patch CVE-2026-109448 > proftpd: mark CVE-2026-53994 fixed > postfix: ignore CVE-2023-32182 > poppler: patch CVE-2026-102621 > poppler: patch CVE-2026-102620 > opensc: patch CVE-2026-103531 > pjproject: mark CVE-2026-26967 fixed > pjproject: patch CVE-2026-57160 > pjproject: patch CVE-2026-57161 > pjproject: patch CVE-2026-57162 > pjproject: patch CVE-2026-57163 > pjproject: patch CVE-2026-57164 > pjproject: patch CVE-2026-57165 > pjproject: patch CVE-2026-57166 > pjproject: patch CVE-2026-77396 > pjproject: patch CVE-2026-84975 > nmap: patch CVE-2026-58058 > nmap: patch CVE-2026-72712 > netdata: mark CVE-2026-83602 fixed > mtr: patch CVE-2026-14461 > ncp: ignore CVE-2025-14577 and CVE-2026-35087 > libvncserver: patch CVE-2026-44988 > libvncserver: patch CVE-2026-32854 > libvncserver: patch CVE-2026-32853 > libvncserver: patch CVE-2026-50538 > swagger-ui: upgrade 5.33.2 -> 5.33.3 > libmspack: patch CVE-2026-110602 > unbound: upgrade 1.26.1 -> 1.26.2 > ntpsec: upgrade 1.2.5 -> 1.2.6 > apache2: upgrade 2.4.68 -> 2.4.69 > 7zip: upgrade 26.03 -> 26.04 > 7zip: upgrade 26.04 -> 26.05 > python3-brotli: upgrade 1.2.0 -> 1.2.1 > python3-oauthlib: patch CVE-2026-49265 > redis: upgrade 8.10.2 -> 8.10.3 > > James Lee (1): > mctp: upgrade 2.6 -> 2.6.1 > > Jason Schonberg (3): > brotli: upgrade 1.2.0 -> 1.2.1 > php: upgrade 8.5.11 -> 8.5.12 > c-ares: backport security fixes from 1.34.9 > > Peter Marko (5): > nginx: upgrade 1.30.5 -> 1.30.6 > nginx: set CVE_STATUS for CVE-2026-95101 and CVE-2026-97629 > nss: remove compromised eMudhra certificates > grpc: update gRPC repo roots > python3-grpcio: update gRPC repo roots > > .../pjproject/pjproject/CVE-2026-57160.patch | 42 + > .../pjproject/pjproject/CVE-2026-57161.patch | 49 + > .../pjproject/pjproject/CVE-2026-57162.patch | 43 + > .../pjproject/pjproject/CVE-2026-57163.patch | 52 + > .../pjproject/pjproject/CVE-2026-57164.patch | 66 + > .../pjproject/pjproject/CVE-2026-57165.patch | 85 + > .../pjproject/pjproject/CVE-2026-57166.patch | 228 + > .../pjproject/pjproject/CVE-2026-77396.patch | 74 + > .../pjproject/pjproject/CVE-2026-84975.patch | 87 + > .../pjproject/pjproject_2.17.bb | 11 + > .../samba/samba_4.23.11.bb | 1 + > .../recipes-daemons/postfix/postfix_3.11.7.bb | 2 + > .../recipes-daemons/proftpd/proftpd_1.3.9d.bb | 1 + > .../zeroconf/zeroconf_0.9.bb | 6 + > meta-networking/recipes-support/mctp/mctp.inc | 4 +- > .../mctp/{mctp_2.6.bb => mctp_2.6.1.bb} | 0 > .../mctp/{mctpd_2.6.bb => mctpd_2.6.1.bb} | 0 > .../mtr/mtr/CVE-2026-14461.patch | 32 + > .../recipes-support/mtr/mtr_0.96.bb | 4 +- > .../recipes-support/ncp/ncp_1.2.4.bb | 3 + > .../{ntpsec_1.2.5.bb => ntpsec_1.2.6.bb} | 2 +- > .../tinyproxy/tinyproxy/CVE-2026-54388.patch | 32 + > .../tinyproxy/tinyproxy_1.11.3.bb | 1 + > .../{unbound_1.26.1.bb => unbound_1.26.2.bb} | 2 +- > .../psqlodbc/files/CVE-2026-109448.patch | 243 + > .../psqlodbc/psqlodbc_18.00.0002.bb | 1 + > ...curity-Update-gRPC-repo-roots.-43699.patch | 2617 +++ > meta-oe/recipes-devtools/grpc/grpc_1.84.0.bb | 1 + > .../php/{php_8.5.11.bb => php_8.5.12.bb} | 2 +- > .../rapidjson/rapidjson_git.bb | 2 + > .../7zip/{7zip_26.03.bb => 7zip_26.05.bb} | 2 +- > .../{brotli_1.2.0.bb => brotli_1.2.1.bb} | 4 +- > .../{flatpak_1.18.0.bb => flatpak_1.18.4.bb} | 4 +- > ...-hiredis-use-default-CC-if-it-is-set.patch | 0 > ...ile-to-use-environment-build-setting.patch | 0 > ...003-hack-to-force-use-of-libc-malloc.patch | 0 > .../0004-src-Do-not-reset-FINAL_LIBS.patch | 0 > ...RCE-to-get-PTHREAD_MUTEX_INITIALIZER.patch | 0 > ...-not-build-the-test-modules-from-all.patch | 0 > .../init-redis-server | 0 > .../{redis-8.10.2 => redis-8.10.3}/redis.conf | 0 > .../redis.service | 0 > .../{redis_8.10.2.bb => redis_8.10.3.bb} | 2 +- > .../tmate/files/CVE-2026-4751.patch | 75 + > meta-oe/recipes-extended/tmate/tmate_2.4.0.bb | 1 + > .../libvncserver/CVE-2026-32853.patch | 76 + > .../libvncserver/CVE-2026-32854.patch | 66 + > .../libvncserver/CVE-2026-44988.patch | 71 + > .../libvncserver/CVE-2026-50538.patch | 49 + > .../libvncserver/libvncserver_0.9.15.bb | 4 + > .../{libxmp_4.7.3.bb => libxmp_4.7.4.bb} | 2 +- > ...ibmikmod_3.3.14.bb => libmikmod_3.3.15.bb} | 2 +- > .../nmap/files/CVE-2026-58058.patch | 34 + > .../nmap/files/CVE-2026-72712.patch | 46 + > meta-oe/recipes-security/nmap/nmap_7.99.bb | 2 + > ...troy-detach-queries-before-callbacks.patch | 2603 +++ > ...ed-socket-server-state-notifications.patch | 393 + > ...qcache-hand-callbacks-their-own-copy.patch | 1054 ++ > ...connections-torn-down-by-application.patch | 1107 ++ > ...pt-an-answer-on-the-right-connection.patch | 575 + > ...tions-read-channel-config-under-lock.patch | 243 + > ...res_inet_pton-reject-a-prefix-length.patch | 364 + > ...nt-drop-UDP-answers-from-server-port.patch | 178 + > .../recipes-support/c-ares/c-ares_1.34.8.bb | 8 + > .../libmspack/CVE-2026-110602.patch | 41 + > .../cabextract/libmspack_0.11alpha.bb | 4 +- > ...1-winpr-tools-link-only-winpr-public.patch | 76 - > ...{freerdp3_3.32.1.bb => freerdp3_3.32.2.bb} | 3 +- > .../{libspdm_3.8.2.bb => libspdm_3.8.3.bb} | 2 +- > ...ve-eMudhra-emSign-Root-CA-C1-and-emS.patch | 272 + > ...ve-eMudhra-emSign-Root-CA-G3-from-NS.patch | 143 + > meta-oe/recipes-support/nss/nss_3.126.bb | 2 + > .../opensc/opensc/CVE-2026-103531.patch | 54 + > .../recipes-support/opensc/opensc_0.27.1.bb | 1 + > .../poppler/poppler/CVE-2026-102620-1.patch | 145 + > .../poppler/poppler/CVE-2026-102620-2.patch | 34 + > .../poppler/poppler/CVE-2026-102621.patch | 40 + > .../poppler/poppler_26.08.0.bb | 3 + > .../{spitools_1.1.0.bb => spitools_1.1.1.bb} | 2 +- > .../udisks/udisks2/CVE-2026-7867-1.patch | 249 + > .../udisks/udisks2/CVE-2026-7867-2.patch | 208 + > .../udisks/udisks2/CVE-2026-7867-3.patch | 53 + > .../udisks/udisks2/CVE-2026-7867-4.patch | 40 + > .../udisks/udisks2/CVE-2026-7867-5.patch | 348 + > .../recipes-support/udisks/udisks2_2.10.2.bb | 9 +- > ...proxy_0.1.7.bb => xdg-dbus-proxy_0.1.9.bb} | 2 +- > ...rotli_1.2.0.bb => python3-brotli_1.2.1.bb} | 2 +- > ...-cbor2_6.1.4.bb => python3-cbor2_6.1.5.bb} | 2 +- > .../0001-Update-gRPC-repo-roots.-43699.patch | 2617 +++ > ...e-repo-roots-to-chromium-roots-42094.patch | 14324 ++++++++++++++++ > .../python/python3-grpcio_1.78.0.bb | 6 + > .../python3-oauthlib/CVE-2026-49265.patch | 51 + > .../python/python3-oauthlib_3.3.1.bb | 2 + > ...yjwt_2.13.0.bb => python3-pyjwt_2.14.0.bb} | 2 +- > ...gger-ui_5.33.1.bb => swagger-ui_5.33.3.bb} | 2 +- > ...mod_md-Add-OpenSSL-4.0-compatibility.patch | 47 - > .../{apache2_2.4.68.bb => apache2_2.4.69.bb} | 3 +- > .../{nginx_1.30.5.bb => nginx_1.30.6.bb} | 5 +- > .../netdata/netdata_2.10.4.bb | 2 + > 99 files changed, 29302 insertions(+), 152 deletions(-) > create mode 100644 > meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57160.patch > create mode 100644 > meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57161.patch > create mode 100644 > meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57162.patch > create mode 100644 > meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57163.patch > create mode 100644 > meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57164.patch > create mode 100644 > meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57165.patch > create mode 100644 > meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57166.patch > create mode 100644 > meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-77396.patch > create mode 100644 > meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-84975.patch > rename meta-networking/recipes-support/mctp/{mctp_2.6.bb => mctp_2.6.1.bb} > (100%) > rename meta-networking/recipes-support/mctp/{mctpd_2.6.bb => > mctpd_2.6.1.bb} (100%) > create mode 100644 > meta-networking/recipes-support/mtr/mtr/CVE-2026-14461.patch > rename meta-networking/recipes-support/ntpsec/{ntpsec_1.2.5.bb => > ntpsec_1.2.6.bb} (98%) > create mode 100644 > meta-networking/recipes-support/tinyproxy/tinyproxy/CVE-2026-54388.patch > rename meta-networking/recipes-support/unbound/{unbound_1.26.1.bb => > unbound_1.26.2.bb} (98%) > create mode 100644 > meta-oe/recipes-dbs/psqlodbc/files/CVE-2026-109448.patch > create mode 100644 > meta-oe/recipes-devtools/grpc/grpc/0001-security-Update-gRPC-repo-roots.-43699.patch > rename meta-oe/recipes-devtools/php/{php_8.5.11.bb => php_8.5.12.bb} > (99%) > rename meta-oe/recipes-extended/7zip/{7zip_26.03.bb => 7zip_26.05.bb} > (98%) > rename meta-oe/recipes-extended/brotli/{brotli_1.2.0.bb => > brotli_1.2.1.bb} (79%) > rename meta-oe/recipes-extended/flatpak/{flatpak_1.18.0.bb => > flatpak_1.18.4.bb} (94%) > rename meta-oe/recipes-extended/redis/{redis-8.10.2 => > redis-8.10.3}/0001-hiredis-use-default-CC-if-it-is-set.patch (100%) > rename meta-oe/recipes-extended/redis/{redis-8.10.2 => > redis-8.10.3}/0002-lua-update-Makefile-to-use-environment-build-setting.patch > (100%) > rename meta-oe/recipes-extended/redis/{redis-8.10.2 => > redis-8.10.3}/0003-hack-to-force-use-of-libc-malloc.patch (100%) > rename meta-oe/recipes-extended/redis/{redis-8.10.2 => > redis-8.10.3}/0004-src-Do-not-reset-FINAL_LIBS.patch (100%) > rename meta-oe/recipes-extended/redis/{redis-8.10.2 => > redis-8.10.3}/0005-Define-_GNU_SOURCE-to-get-PTHREAD_MUTEX_INITIALIZER.patch > (100%) > rename meta-oe/recipes-extended/redis/{redis-8.10.2 => > redis-8.10.3}/0006-src-Makefile-do-not-build-the-test-modules-from-all.patch > (100%) > rename meta-oe/recipes-extended/redis/{redis-8.10.2 => > redis-8.10.3}/init-redis-server (100%) > rename meta-oe/recipes-extended/redis/{redis-8.10.2 => > redis-8.10.3}/redis.conf (100%) > rename meta-oe/recipes-extended/redis/{redis-8.10.2 => > redis-8.10.3}/redis.service (100%) > rename meta-oe/recipes-extended/redis/{redis_8.10.2.bb => redis_8.10.3.bb} > (98%) > create mode 100644 > meta-oe/recipes-extended/tmate/files/CVE-2026-4751.patch > create mode 100644 > meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-32853.patch > create mode 100644 > meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-32854.patch > create mode 100644 > meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-44988.patch > create mode 100644 > meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-50538.patch > rename meta-oe/recipes-multimedia/libxmp/{libxmp_4.7.3.bb => > libxmp_4.7.4.bb} (85%) > rename meta-oe/recipes-multimedia/mikmod/{libmikmod_3.3.14.bb => > libmikmod_3.3.15.bb} (90%) > create mode 100644 > meta-oe/recipes-security/nmap/files/CVE-2026-58058.patch > create mode 100644 > meta-oe/recipes-security/nmap/files/CVE-2026-72712.patch > create mode 100644 > meta-oe/recipes-support/c-ares/c-ares/0001-ares_cancel-ares_destroy-detach-queries-before-callbacks.patch > create mode 100644 > meta-oe/recipes-support/c-ares/c-ares/0002-Deliver-deferred-socket-server-state-notifications.patch > create mode 100644 > meta-oe/recipes-support/c-ares/c-ares/0003-ares_qcache-hand-callbacks-their-own-copy.patch > create mode 100644 > meta-oe/recipes-support/c-ares/c-ares/0004-Handle-connections-torn-down-by-application.patch > create mode 100644 > meta-oe/recipes-support/c-ares/c-ares/0005-ares_process-only-accept-an-answer-on-the-right-connection.patch > create mode 100644 > meta-oe/recipes-support/c-ares/c-ares/0006-ares_save_options-read-channel-config-under-lock.patch > create mode 100644 > meta-oe/recipes-support/c-ares/c-ares/0007-ares_inet_pton-reject-a-prefix-length.patch > create mode 100644 > meta-oe/recipes-support/c-ares/c-ares/0008-ares_conn_read-dont-drop-UDP-answers-from-server-port.patch > create mode 100644 > meta-oe/recipes-support/cabextract/libmspack/CVE-2026-110602.patch > delete mode 100644 > meta-oe/recipes-support/freerdp/freerdp3/0001-winpr-tools-link-only-winpr-public.patch > rename meta-oe/recipes-support/freerdp/{freerdp3_3.32.1.bb => > freerdp3_3.32.2.bb} (98%) > rename meta-oe/recipes-support/libspdm/{libspdm_3.8.2.bb => > libspdm_3.8.3.bb} (98%) > create mode 100644 > meta-oe/recipes-support/nss/nss/0008-Bug-2083709-Remove-eMudhra-emSign-Root-CA-C1-and-emS.patch > create mode 100644 > meta-oe/recipes-support/nss/nss/0009-Bug-2084101-Remove-eMudhra-emSign-Root-CA-G3-from-NS.patch > create mode 100644 > meta-oe/recipes-support/opensc/opensc/CVE-2026-103531.patch > create mode 100644 > meta-oe/recipes-support/poppler/poppler/CVE-2026-102620-1.patch > create mode 100644 > meta-oe/recipes-support/poppler/poppler/CVE-2026-102620-2.patch > create mode 100644 > meta-oe/recipes-support/poppler/poppler/CVE-2026-102621.patch > rename meta-oe/recipes-support/spitools/{spitools_1.1.0.bb => > spitools_1.1.1.bb} (87%) > create mode 100644 > meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-1.patch > create mode 100644 > meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-2.patch > create mode 100644 > meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-3.patch > create mode 100644 > meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-4.patch > create mode 100644 > meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-5.patch > rename meta-oe/recipes-support/xdg-dbus-proxy/{xdg-dbus-proxy_0.1.7.bb > => xdg-dbus-proxy_0.1.9.bb} (93%) > rename meta-python/recipes-devtools/python/{python3-brotli_1.2.0.bb => > python3-brotli_1.2.1.bb} (81%) > rename meta-python/recipes-devtools/python/{python3-cbor2_6.1.4.bb => > python3-cbor2_6.1.5.bb} (87%) > create mode 100644 > meta-python/recipes-devtools/python/python3-grpcio/0001-Update-gRPC-repo-roots.-43699.patch > create mode 100644 > meta-python/recipes-devtools/python/python3-grpcio/0001-Update-repo-roots-to-chromium-roots-42094.patch > create mode 100644 > meta-python/recipes-devtools/python/python3-oauthlib/CVE-2026-49265.patch > rename meta-python/recipes-devtools/python/{python3-pyjwt_2.13.0.bb => > python3-pyjwt_2.14.0.bb} (84%) > rename meta-webserver/recipes-devtools/swagger-ui/{swagger-ui_5.33.1.bb > => swagger-ui_5.33.3.bb} (94%) > delete mode 100644 > meta-webserver/recipes-httpd/apache2/apache2/0011-mod_md-Add-OpenSSL-4.0-compatibility.patch > rename meta-webserver/recipes-httpd/apache2/{apache2_2.4.68.bb => > apache2_2.4.69.bb} (98%) > rename meta-webserver/recipes-httpd/nginx/{nginx_1.30.5.bb => > nginx_1.30.6.bb} (63%) > > > -=-=-=-=-=-=-=-=-=-=-=- > Links: You receive all messages sent to this group. > View/Reply Online (#131552): > https://lists.openembedded.org/g/openembedded-devel/message/131552 > Mute This Topic: https://lists.openembedded.org/mt/121972299/1997914 > Group Owner: openembedded-devel+owner@lists.openembedded.org > Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [ > raj.khem@gmail.com] > -=-=-=-=-=-=-=-=-=-=-=- > >
From: Ankur Tyagi <ankur.tyagi85@gmail.com> Please merge these changes in blacksail. Tested locally and on autobuilder. https://autobuilder.yoctoproject.org/valkyrie/#/builders/81/builds/1904 The following changes since commit a9d69bc066bf9498397db27902c287dd666fdfd4: lvgl-demo-fb: fix SRCREV (2026-10-14 09:26:03 +1300) are available in the Git repository at: https://git.openembedded.org/meta-openembedded-contrib ankurt/blacksail https://git.openembedded.org/meta-openembedded-contrib/log/?h=ankurt/blacksail for you to fetch changes up to bb956bf8ff7a32f31deaa83e96880d10ab564d14: redis: upgrade 8.10.2 -> 8.10.3 (2026-10-28 08:22:29 +1300) ---------------------------------------------------------------- Ankur Tyagi (51): zeroconf: ignore CVEs udisks2: patch CVE-2026-7867 tmate: patch CVE-2026-4751 tinyproxy: patch CVE-2026-54388 flatpak: upgrade 1.18.0 -> 1.18.4 xdg-dbus-proxy: upgrade 0.1.7 -> 0.1.9 swagger-ui: upgrade 5.33.1 -> 5.33.2 freerdp3: upgrade 3.32.1 -> 3.32.2 spitools: upgrade 1.1.0 -> 1.1.1 libspdm: upgrade 3.8.2 -> 3.8.3 libmikmod: upgrade 3.3.14 -> 3.3.15 libxmp: upgrade 4.7.3 -> 4.7.4 python3-pyjwt: upgrade 2.13.0 -> 2.14.0 python3-cbor2: upgrade 6.1.4 -> 6.1.5 samba: ignore CVE-2026-2340 rapidjson: mark CVE-2024-38517 fixed psqlodbc: patch CVE-2026-109448 proftpd: mark CVE-2026-53994 fixed postfix: ignore CVE-2023-32182 poppler: patch CVE-2026-102621 poppler: patch CVE-2026-102620 opensc: patch CVE-2026-103531 pjproject: mark CVE-2026-26967 fixed pjproject: patch CVE-2026-57160 pjproject: patch CVE-2026-57161 pjproject: patch CVE-2026-57162 pjproject: patch CVE-2026-57163 pjproject: patch CVE-2026-57164 pjproject: patch CVE-2026-57165 pjproject: patch CVE-2026-57166 pjproject: patch CVE-2026-77396 pjproject: patch CVE-2026-84975 nmap: patch CVE-2026-58058 nmap: patch CVE-2026-72712 netdata: mark CVE-2026-83602 fixed mtr: patch CVE-2026-14461 ncp: ignore CVE-2025-14577 and CVE-2026-35087 libvncserver: patch CVE-2026-44988 libvncserver: patch CVE-2026-32854 libvncserver: patch CVE-2026-32853 libvncserver: patch CVE-2026-50538 swagger-ui: upgrade 5.33.2 -> 5.33.3 libmspack: patch CVE-2026-110602 unbound: upgrade 1.26.1 -> 1.26.2 ntpsec: upgrade 1.2.5 -> 1.2.6 apache2: upgrade 2.4.68 -> 2.4.69 7zip: upgrade 26.03 -> 26.04 7zip: upgrade 26.04 -> 26.05 python3-brotli: upgrade 1.2.0 -> 1.2.1 python3-oauthlib: patch CVE-2026-49265 redis: upgrade 8.10.2 -> 8.10.3 James Lee (1): mctp: upgrade 2.6 -> 2.6.1 Jason Schonberg (3): brotli: upgrade 1.2.0 -> 1.2.1 php: upgrade 8.5.11 -> 8.5.12 c-ares: backport security fixes from 1.34.9 Peter Marko (5): nginx: upgrade 1.30.5 -> 1.30.6 nginx: set CVE_STATUS for CVE-2026-95101 and CVE-2026-97629 nss: remove compromised eMudhra certificates grpc: update gRPC repo roots python3-grpcio: update gRPC repo roots .../pjproject/pjproject/CVE-2026-57160.patch | 42 + .../pjproject/pjproject/CVE-2026-57161.patch | 49 + .../pjproject/pjproject/CVE-2026-57162.patch | 43 + .../pjproject/pjproject/CVE-2026-57163.patch | 52 + .../pjproject/pjproject/CVE-2026-57164.patch | 66 + .../pjproject/pjproject/CVE-2026-57165.patch | 85 + .../pjproject/pjproject/CVE-2026-57166.patch | 228 + .../pjproject/pjproject/CVE-2026-77396.patch | 74 + .../pjproject/pjproject/CVE-2026-84975.patch | 87 + .../pjproject/pjproject_2.17.bb | 11 + .../samba/samba_4.23.11.bb | 1 + .../recipes-daemons/postfix/postfix_3.11.7.bb | 2 + .../recipes-daemons/proftpd/proftpd_1.3.9d.bb | 1 + .../zeroconf/zeroconf_0.9.bb | 6 + meta-networking/recipes-support/mctp/mctp.inc | 4 +- .../mctp/{mctp_2.6.bb => mctp_2.6.1.bb} | 0 .../mctp/{mctpd_2.6.bb => mctpd_2.6.1.bb} | 0 .../mtr/mtr/CVE-2026-14461.patch | 32 + .../recipes-support/mtr/mtr_0.96.bb | 4 +- .../recipes-support/ncp/ncp_1.2.4.bb | 3 + .../{ntpsec_1.2.5.bb => ntpsec_1.2.6.bb} | 2 +- .../tinyproxy/tinyproxy/CVE-2026-54388.patch | 32 + .../tinyproxy/tinyproxy_1.11.3.bb | 1 + .../{unbound_1.26.1.bb => unbound_1.26.2.bb} | 2 +- .../psqlodbc/files/CVE-2026-109448.patch | 243 + .../psqlodbc/psqlodbc_18.00.0002.bb | 1 + ...curity-Update-gRPC-repo-roots.-43699.patch | 2617 +++ meta-oe/recipes-devtools/grpc/grpc_1.84.0.bb | 1 + .../php/{php_8.5.11.bb => php_8.5.12.bb} | 2 +- .../rapidjson/rapidjson_git.bb | 2 + .../7zip/{7zip_26.03.bb => 7zip_26.05.bb} | 2 +- .../{brotli_1.2.0.bb => brotli_1.2.1.bb} | 4 +- .../{flatpak_1.18.0.bb => flatpak_1.18.4.bb} | 4 +- ...-hiredis-use-default-CC-if-it-is-set.patch | 0 ...ile-to-use-environment-build-setting.patch | 0 ...003-hack-to-force-use-of-libc-malloc.patch | 0 .../0004-src-Do-not-reset-FINAL_LIBS.patch | 0 ...RCE-to-get-PTHREAD_MUTEX_INITIALIZER.patch | 0 ...-not-build-the-test-modules-from-all.patch | 0 .../init-redis-server | 0 .../{redis-8.10.2 => redis-8.10.3}/redis.conf | 0 .../redis.service | 0 .../{redis_8.10.2.bb => redis_8.10.3.bb} | 2 +- .../tmate/files/CVE-2026-4751.patch | 75 + meta-oe/recipes-extended/tmate/tmate_2.4.0.bb | 1 + .../libvncserver/CVE-2026-32853.patch | 76 + .../libvncserver/CVE-2026-32854.patch | 66 + .../libvncserver/CVE-2026-44988.patch | 71 + .../libvncserver/CVE-2026-50538.patch | 49 + .../libvncserver/libvncserver_0.9.15.bb | 4 + .../{libxmp_4.7.3.bb => libxmp_4.7.4.bb} | 2 +- ...ibmikmod_3.3.14.bb => libmikmod_3.3.15.bb} | 2 +- .../nmap/files/CVE-2026-58058.patch | 34 + .../nmap/files/CVE-2026-72712.patch | 46 + meta-oe/recipes-security/nmap/nmap_7.99.bb | 2 + ...troy-detach-queries-before-callbacks.patch | 2603 +++ ...ed-socket-server-state-notifications.patch | 393 + ...qcache-hand-callbacks-their-own-copy.patch | 1054 ++ ...connections-torn-down-by-application.patch | 1107 ++ ...pt-an-answer-on-the-right-connection.patch | 575 + ...tions-read-channel-config-under-lock.patch | 243 + ...res_inet_pton-reject-a-prefix-length.patch | 364 + ...nt-drop-UDP-answers-from-server-port.patch | 178 + .../recipes-support/c-ares/c-ares_1.34.8.bb | 8 + .../libmspack/CVE-2026-110602.patch | 41 + .../cabextract/libmspack_0.11alpha.bb | 4 +- ...1-winpr-tools-link-only-winpr-public.patch | 76 - ...{freerdp3_3.32.1.bb => freerdp3_3.32.2.bb} | 3 +- .../{libspdm_3.8.2.bb => libspdm_3.8.3.bb} | 2 +- ...ve-eMudhra-emSign-Root-CA-C1-and-emS.patch | 272 + ...ve-eMudhra-emSign-Root-CA-G3-from-NS.patch | 143 + meta-oe/recipes-support/nss/nss_3.126.bb | 2 + .../opensc/opensc/CVE-2026-103531.patch | 54 + .../recipes-support/opensc/opensc_0.27.1.bb | 1 + .../poppler/poppler/CVE-2026-102620-1.patch | 145 + .../poppler/poppler/CVE-2026-102620-2.patch | 34 + .../poppler/poppler/CVE-2026-102621.patch | 40 + .../poppler/poppler_26.08.0.bb | 3 + .../{spitools_1.1.0.bb => spitools_1.1.1.bb} | 2 +- .../udisks/udisks2/CVE-2026-7867-1.patch | 249 + .../udisks/udisks2/CVE-2026-7867-2.patch | 208 + .../udisks/udisks2/CVE-2026-7867-3.patch | 53 + .../udisks/udisks2/CVE-2026-7867-4.patch | 40 + .../udisks/udisks2/CVE-2026-7867-5.patch | 348 + .../recipes-support/udisks/udisks2_2.10.2.bb | 9 +- ...proxy_0.1.7.bb => xdg-dbus-proxy_0.1.9.bb} | 2 +- ...rotli_1.2.0.bb => python3-brotli_1.2.1.bb} | 2 +- ...-cbor2_6.1.4.bb => python3-cbor2_6.1.5.bb} | 2 +- .../0001-Update-gRPC-repo-roots.-43699.patch | 2617 +++ ...e-repo-roots-to-chromium-roots-42094.patch | 14324 ++++++++++++++++ .../python/python3-grpcio_1.78.0.bb | 6 + .../python3-oauthlib/CVE-2026-49265.patch | 51 + .../python/python3-oauthlib_3.3.1.bb | 2 + ...yjwt_2.13.0.bb => python3-pyjwt_2.14.0.bb} | 2 +- ...gger-ui_5.33.1.bb => swagger-ui_5.33.3.bb} | 2 +- ...mod_md-Add-OpenSSL-4.0-compatibility.patch | 47 - .../{apache2_2.4.68.bb => apache2_2.4.69.bb} | 3 +- .../{nginx_1.30.5.bb => nginx_1.30.6.bb} | 5 +- .../netdata/netdata_2.10.4.bb | 2 + 99 files changed, 29302 insertions(+), 152 deletions(-) create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57160.patch create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57161.patch create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57162.patch create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57163.patch create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57164.patch create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57165.patch create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57166.patch create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-77396.patch create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-84975.patch rename meta-networking/recipes-support/mctp/{mctp_2.6.bb => mctp_2.6.1.bb} (100%) rename meta-networking/recipes-support/mctp/{mctpd_2.6.bb => mctpd_2.6.1.bb} (100%) create mode 100644 meta-networking/recipes-support/mtr/mtr/CVE-2026-14461.patch rename meta-networking/recipes-support/ntpsec/{ntpsec_1.2.5.bb => ntpsec_1.2.6.bb} (98%) create mode 100644 meta-networking/recipes-support/tinyproxy/tinyproxy/CVE-2026-54388.patch rename meta-networking/recipes-support/unbound/{unbound_1.26.1.bb => unbound_1.26.2.bb} (98%) create mode 100644 meta-oe/recipes-dbs/psqlodbc/files/CVE-2026-109448.patch create mode 100644 meta-oe/recipes-devtools/grpc/grpc/0001-security-Update-gRPC-repo-roots.-43699.patch rename meta-oe/recipes-devtools/php/{php_8.5.11.bb => php_8.5.12.bb} (99%) rename meta-oe/recipes-extended/7zip/{7zip_26.03.bb => 7zip_26.05.bb} (98%) rename meta-oe/recipes-extended/brotli/{brotli_1.2.0.bb => brotli_1.2.1.bb} (79%) rename meta-oe/recipes-extended/flatpak/{flatpak_1.18.0.bb => flatpak_1.18.4.bb} (94%) rename meta-oe/recipes-extended/redis/{redis-8.10.2 => redis-8.10.3}/0001-hiredis-use-default-CC-if-it-is-set.patch (100%) rename meta-oe/recipes-extended/redis/{redis-8.10.2 => redis-8.10.3}/0002-lua-update-Makefile-to-use-environment-build-setting.patch (100%) rename meta-oe/recipes-extended/redis/{redis-8.10.2 => redis-8.10.3}/0003-hack-to-force-use-of-libc-malloc.patch (100%) rename meta-oe/recipes-extended/redis/{redis-8.10.2 => redis-8.10.3}/0004-src-Do-not-reset-FINAL_LIBS.patch (100%) rename meta-oe/recipes-extended/redis/{redis-8.10.2 => redis-8.10.3}/0005-Define-_GNU_SOURCE-to-get-PTHREAD_MUTEX_INITIALIZER.patch (100%) rename meta-oe/recipes-extended/redis/{redis-8.10.2 => redis-8.10.3}/0006-src-Makefile-do-not-build-the-test-modules-from-all.patch (100%) rename meta-oe/recipes-extended/redis/{redis-8.10.2 => redis-8.10.3}/init-redis-server (100%) rename meta-oe/recipes-extended/redis/{redis-8.10.2 => redis-8.10.3}/redis.conf (100%) rename meta-oe/recipes-extended/redis/{redis-8.10.2 => redis-8.10.3}/redis.service (100%) rename meta-oe/recipes-extended/redis/{redis_8.10.2.bb => redis_8.10.3.bb} (98%) create mode 100644 meta-oe/recipes-extended/tmate/files/CVE-2026-4751.patch create mode 100644 meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-32853.patch create mode 100644 meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-32854.patch create mode 100644 meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-44988.patch create mode 100644 meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-50538.patch rename meta-oe/recipes-multimedia/libxmp/{libxmp_4.7.3.bb => libxmp_4.7.4.bb} (85%) rename meta-oe/recipes-multimedia/mikmod/{libmikmod_3.3.14.bb => libmikmod_3.3.15.bb} (90%) create mode 100644 meta-oe/recipes-security/nmap/files/CVE-2026-58058.patch create mode 100644 meta-oe/recipes-security/nmap/files/CVE-2026-72712.patch create mode 100644 meta-oe/recipes-support/c-ares/c-ares/0001-ares_cancel-ares_destroy-detach-queries-before-callbacks.patch create mode 100644 meta-oe/recipes-support/c-ares/c-ares/0002-Deliver-deferred-socket-server-state-notifications.patch create mode 100644 meta-oe/recipes-support/c-ares/c-ares/0003-ares_qcache-hand-callbacks-their-own-copy.patch create mode 100644 meta-oe/recipes-support/c-ares/c-ares/0004-Handle-connections-torn-down-by-application.patch create mode 100644 meta-oe/recipes-support/c-ares/c-ares/0005-ares_process-only-accept-an-answer-on-the-right-connection.patch create mode 100644 meta-oe/recipes-support/c-ares/c-ares/0006-ares_save_options-read-channel-config-under-lock.patch create mode 100644 meta-oe/recipes-support/c-ares/c-ares/0007-ares_inet_pton-reject-a-prefix-length.patch create mode 100644 meta-oe/recipes-support/c-ares/c-ares/0008-ares_conn_read-dont-drop-UDP-answers-from-server-port.patch create mode 100644 meta-oe/recipes-support/cabextract/libmspack/CVE-2026-110602.patch delete mode 100644 meta-oe/recipes-support/freerdp/freerdp3/0001-winpr-tools-link-only-winpr-public.patch rename meta-oe/recipes-support/freerdp/{freerdp3_3.32.1.bb => freerdp3_3.32.2.bb} (98%) rename meta-oe/recipes-support/libspdm/{libspdm_3.8.2.bb => libspdm_3.8.3.bb} (98%) create mode 100644 meta-oe/recipes-support/nss/nss/0008-Bug-2083709-Remove-eMudhra-emSign-Root-CA-C1-and-emS.patch create mode 100644 meta-oe/recipes-support/nss/nss/0009-Bug-2084101-Remove-eMudhra-emSign-Root-CA-G3-from-NS.patch create mode 100644 meta-oe/recipes-support/opensc/opensc/CVE-2026-103531.patch create mode 100644 meta-oe/recipes-support/poppler/poppler/CVE-2026-102620-1.patch create mode 100644 meta-oe/recipes-support/poppler/poppler/CVE-2026-102620-2.patch create mode 100644 meta-oe/recipes-support/poppler/poppler/CVE-2026-102621.patch rename meta-oe/recipes-support/spitools/{spitools_1.1.0.bb => spitools_1.1.1.bb} (87%) create mode 100644 meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-1.patch create mode 100644 meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-2.patch create mode 100644 meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-3.patch create mode 100644 meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-4.patch create mode 100644 meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-5.patch rename meta-oe/recipes-support/xdg-dbus-proxy/{xdg-dbus-proxy_0.1.7.bb => xdg-dbus-proxy_0.1.9.bb} (93%) rename meta-python/recipes-devtools/python/{python3-brotli_1.2.0.bb => python3-brotli_1.2.1.bb} (81%) rename meta-python/recipes-devtools/python/{python3-cbor2_6.1.4.bb => python3-cbor2_6.1.5.bb} (87%) create mode 100644 meta-python/recipes-devtools/python/python3-grpcio/0001-Update-gRPC-repo-roots.-43699.patch create mode 100644 meta-python/recipes-devtools/python/python3-grpcio/0001-Update-repo-roots-to-chromium-roots-42094.patch create mode 100644 meta-python/recipes-devtools/python/python3-oauthlib/CVE-2026-49265.patch rename meta-python/recipes-devtools/python/{python3-pyjwt_2.13.0.bb => python3-pyjwt_2.14.0.bb} (84%) rename meta-webserver/recipes-devtools/swagger-ui/{swagger-ui_5.33.1.bb => swagger-ui_5.33.3.bb} (94%) delete mode 100644 meta-webserver/recipes-httpd/apache2/apache2/0011-mod_md-Add-OpenSSL-4.0-compatibility.patch rename meta-webserver/recipes-httpd/apache2/{apache2_2.4.68.bb => apache2_2.4.69.bb} (98%) rename meta-webserver/recipes-httpd/nginx/{nginx_1.30.5.bb => nginx_1.30.6.bb} (63%)