mbox

[00/74] Wrynose pull request

Message ID cover.1794302275.git.anuj.mittal@oss.qualcomm.com
State New
Headers show

Pull-request

https://git.openembedded.org/meta-openembedded-contrib anujm/wrynose

Message

Anuj Mittal Nov. 10, 2026, 9:22 a.m. UTC
Please merge these changes in wrynose. Tested locally and on autobuilder.

https://autobuilder.yoctoproject.org/valkyrie/#/builders/81/builds/1946

The following changes since commit c734c2cb9713dbd6d50697a9f6c25ebdf3ae589e:

  frr: Fix native clippy failing to load libatomic.so.1 (2026-10-29 10:19:10 +0530)

are available in the Git repository at:

  https://git.openembedded.org/meta-openembedded-contrib anujm/wrynose
  https://git.openembedded.org/meta-openembedded-contrib/log/?h=anujm/wrynose

for you to fetch changes up to c0fcd7cca3760ef24e087ac4a31b8f357cb204da:

  pgpool2: 4.6.4 -> 4.6.6 (2026-11-09 11:17:15 +0530)

----------------------------------------------------------------

Ankur Tyagi (23):
  zchunk: upgrade 1.5.4 -> 1.5.5
  wireshark: upgrade 4.6.8 -> 4.6.9
  crow: upgrade 1.3.2 -> 1.3.3
  crow: upgrade 1.3.3 -> 1.3.4
  hdf5: patch CVE-2026-19026, CVE-2026-19027 and CVE-2026-19028
  hdf5: patch CVE-2026-19023 and CVE-2026-19024
  hdf5: patch CVE-2026-120689
  hdf5: patch CVE-2026-120754 and CVE-2026-120755
  hdf5: patch CVE-2026-120756
  hdf5: patch CVE-2026-120757
  hdf5: patch CVE-2026-120758
  libgphoto2: patch CVE-2026-120451
  libgphoto2: patch CVE-2026-120452
  smarty: upgrade 5.8.4 -> 5.8.5
  valkey: upgrade 9.0.6 -> 9.0.7
  uriparser: upgrade 1.0.2 -> 1.0.3
  python3-django: upgrade 6.0.9 -> 6.0.10
  python3-django: upgrade 5.2.18 -> 5.2.19
  mtr: patch CVE-2026-14461
  libvncserver: patch CVE-2026-44988
  libmspack: patch CVE-2026-110602
  ndpi: patch CVE-2026-116744
  ncp: ignore CVE-2025-14577 and CVE-2026-35087

Ashishkumar Parmar (1):
  nmap: Fix CVE-2026-72712

Darsh Kelaiya (10):
  libhtml-parser-perl: fix CVE-2026-8829
  ntfs-3g-ntfsprogs: fix CVE-2026-56135
  ntfs-3g-ntfsprogs: mark CVE-2026-56136 as fixed
  python3-aiohttp: fix CVE-2026-111066
  python3-aiohttp: fix CVE-2026-111750
  python3-aiohttp: fix CVE-2026-111749
  python3-aiohttp: fix CVE-2026-111065
  python3-aiohttp: fix CVE-2026-111748
  python3-aiohttp: fix CVE-2026-111063
  python3-aiohttp: fix CVE-2026-111064

Hetvi Thakar (21):
  nginx: fix CVE-2026-95101
  nginx: fix CVE-2026-97629
  nginx: fix CVE-2026-15176
  python3-virtualenv: fix CVE-2026-102938
  python3-virtualenv: fix CVE-2026-102930
  python3-virtualenv: fix CVE-2026-102925
  python3-virtualenv: fix CVE-2026-113732
  python3-virtualenv: fix CVE-2026-113776
  python3-virtualenv: fix CVE-2026-113726
  python3-virtualenv: fix CVE-2026-113725
  python3-virtualenv: fix CVE-2026-113723
  python3-virtualenv: fix CVE-2026-113715
  python3-virtualenv: fix CVE-2026-113720
  python3-virtualenv: fix CVE-2026-113719
  python3-virtualenv: fix CVE-2026-113721
  python3-virtualenv: fix CVE-2026-113716
  python3-virtualenv: fix CVE-2026-113722
  python3-virtualenv: fix CVE-2026-113713
  python3-virtualenv: Ignore CVE-2026-102937
  python3-virtualenv: Ignore CVE-2026-113718
  python3-virtualenv: Ignore CVE-2026-113724

Jason Schonberg (1):
  nodejs: 22.23.3 -> 22.23.4

Khem Raj (3):
  fwupd-efi: Use the cross linker instead of the host ld.bfd
  clight: Fix build with musl
  fftw: Fix planner hang on musl with CLOCK_SGI_CYCLE

Kris Gavvala (1):
  python3-pillow: patch CVE-2026-112393

Markus Volk (1):
  mpv: fix a file descriptor leak in the render API

Nate Kent (1):
  nng: correct upstream branch name

Peter Marko (1):
  libwebsockets: patch CVE-2026-114550

Poornima Lokesh (1):
  mariadb: upgrade 11.4.12 -> 11.4.13

Wang Mingyu (2):
  zchunk: upgrade 1.5.3 -> 1.5.4
  pgpool2: 4.6.4 -> 4.6.6

Yogita Urade (8):
  python3-tornado: Fix CVE-2026-103261
  python3-tornado: Fix CVE-2026-103262
  python3-tornado: Fix CVE-2026-103263
  python3-tornado: Fix CVE-2026-115927
  python3-tornado: Fix CVE-2026-116577
  python3-tornado: Fix CVE-2026-116578
  python3-pymongo: Fix CVE-2026-88029
  python3-pymongo: Fix CVE-2026-106435

 ...72_CVE-2026-42617_CVE-2026-56136_p1.patch} |    2 +-
 ...72_CVE-2026-42617_CVE-2026-56136_p2.patch} |    2 +-
 ...72_CVE-2026-42617_CVE-2026-56136_p3.patch} |    2 +-
 .../files/CVE-2026-56135_p1.patch             |  140 ++
 .../files/CVE-2026-56135_p2.patch             |   36 +
 .../files/CVE-2026-56135_p3.patch             |  203 +++
 .../files/CVE-2026-56135_p4.patch             |   94 ++
 .../ntfs-3g-ntfsprogs_2022.10.3.bb            |   10 +-
 ...nclude-fcntl.h-for-open-and-O_-flags.patch |   27 +
 .../recipes-multimedia/clight/clight_4.11.bb  |    1 +
 .../recipes-connectivity/nanomsg/nng_1.11.bb  |    2 +-
 .../mtr/mtr/CVE-2026-14461.patch              |   32 +
 .../recipes-support/mtr/mtr_0.96.bb           |    4 +-
 .../recipes-support/ncp/ncp_1.2.4.bb          |    3 +
 .../ntopng/files/CVE-2026-116744.patch        |   33 +
 .../recipes-support/ntopng/ndpi_5.0.bb        |    1 +
 .../{pgpool2_4.6.4.bb => pgpool2_4.6.6.bb}    |    4 +-
 ...{wireshark_4.6.8.bb => wireshark_4.6.9.bb} |    2 +-
 meta-oe/recipes-bsp/fwupd/fwupd-efi_1.8.bb    |   10 +
 .../libwebsockets/CVE-2026-114550.patch       |   31 +
 .../libwebsockets/libwebsockets_4.5.8.bb      |    1 +
 ...e_11.4.12.bb => mariadb-native_11.4.13.bb} |    0
 meta-oe/recipes-dbs/mysql/mariadb.inc         |    4 +-
 ...b11be28ae9b2432b2a661bf38a197cf9514d.patch |   52 -
 ...{mariadb_11.4.12.bb => mariadb_11.4.13.bb} |    0
 .../{nodejs_22.23.3.bb => nodejs_22.23.4.bb}  |    2 +-
 .../{valkey_9.0.6.bb => valkey_9.0.7.bb}      |    2 +-
 .../gphoto2/libgphoto2/CVE-2026-120451.patch  |   43 +
 .../gphoto2/libgphoto2/CVE-2026-120452.patch  |   40 +
 .../gphoto2/libgphoto2_2.5.33.bb              |    2 +
 .../libvncserver/CVE-2026-44988.patch         |   71 +
 .../libvncserver/libvncserver_0.9.15.bb       |    1 +
 ...equire-swap_buffers-param-for-FenceS.patch |   35 +
 .../recipes-multimedia/mplayer/mpv_0.41.0.bb  |    5 +-
 .../nmap/files/CVE-2026-72712.patch           |   50 +
 meta-oe/recipes-security/nmap/nmap_7.95.bb    |    1 +
 .../libmspack/CVE-2026-110602.patch           |   41 +
 .../cabextract/libmspack_0.11alpha.bb         |    4 +-
 .../crow/{crow_1.3.2.bb => crow_1.3.4.bb}     |    2 +-
 ...-Do-not-use-CLOCK_SGI_CYCLE-on-Linux.patch |   43 +
 meta-oe/recipes-support/fftw/fftw_3.3.11.bb   |    1 +
 .../hdf5/files/CVE-2026-120689.patch          |   60 +
 .../CVE-2026-120754-CVE-2026-120755.patch     |  172 +++
 .../hdf5/files/CVE-2026-120756.patch          |   45 +
 .../hdf5/files/CVE-2026-120757.patch          |   63 +
 .../hdf5/files/CVE-2026-120758.patch          |  143 ++
 .../files/CVE-2026-19023-CVE-2026-19024.patch |  176 +++
 ...-19026-CVE-2026-19027-CVE-2026-19028.patch |  579 ++++++++
 meta-oe/recipes-support/hdf5/hdf5_2.0.0.bb    |    7 +
 .../{smarty_5.8.4.bb => smarty_5.8.5.bb}      |    2 +-
 ...{uriparser_1.0.2.bb => uriparser_1.0.3.bb} |    2 +-
 .../{zchunk_1.5.3.bb => zchunk_1.5.5.bb}      |    4 +-
 .../libhtml/files/CVE-2026-8829.patch         |  127 ++
 .../libhtml/libhtml-parser-perl_3.83.bb       |    4 +-
 .../python3-aiohttp/CVE-2026-111063_p1.patch  |  137 ++
 .../python3-aiohttp/CVE-2026-111063_p2.patch  |  244 ++++
 .../python3-aiohttp/CVE-2026-111064.patch     |  285 ++++
 .../python3-aiohttp/CVE-2026-111065.patch     |  176 +++
 .../python3-aiohttp/CVE-2026-111066_p1.patch  |  400 ++++++
 .../python3-aiohttp/CVE-2026-111066_p2.patch  |   57 +
 .../python3-aiohttp/CVE-2026-111748_p1.patch  |  376 +++++
 .../python3-aiohttp/CVE-2026-111748_p2.patch  |  282 ++++
 .../python3-aiohttp/CVE-2026-111749.patch     |  205 +++
 .../python3-aiohttp/CVE-2026-111750.patch     |   83 ++
 .../python/python3-aiohttp_3.13.5.bb          |   10 +
 ...ngo_5.2.18.bb => python3-django_5.2.19.bb} |    2 +-
 ...ango_6.0.9.bb => python3-django_6.0.10.bb} |    2 +-
 .../python3-pillow/CVE-2026-112393.patch      |  124 ++
 .../python/python3-pillow_12.2.0.bb           |    1 +
 .../CVE-2026-106435-regression.patch          |   92 ++
 .../python3-pymongo/CVE-2026-106435.patch     |  122 ++
 .../python3-pymongo/CVE-2026-88029.patch      | 1255 +++++++++++++++++
 .../python/python3-pymongo_4.16.0.bb          |    5 +
 .../python3-tornado/CVE-2026-103261.patch     |   98 ++
 .../python3-tornado/CVE-2026-103262.patch     | 1117 +++++++++++++++
 .../CVE-2026-103263-dependent.patch           |  255 ++++
 .../python3-tornado/CVE-2026-103263.patch     |  422 ++++++
 .../python3-tornado/CVE-2026-115927.patch     |  397 ++++++
 .../python3-tornado/CVE-2026-116577_p1.patch  |  195 +++
 .../python3-tornado/CVE-2026-116577_p2.patch  |   99 ++
 .../python3-tornado/CVE-2026-116577_p3.patch  |  101 ++
 .../python3-tornado/CVE-2026-116578_p1.patch  |   62 +
 .../python3-tornado/CVE-2026-116578_p2.patch  |  106 ++
 .../python3-tornado/CVE-2026-116578_p3.patch  |  192 +++
 .../python/python3-tornado_6.5.7.bb           |   11 +
 .../python3-virtualenv/CVE-2026-102925.patch  |  296 ++++
 .../CVE-2026-102930-dependent.patch           |  115 ++
 .../CVE-2026-102930_p1.patch                  |  309 ++++
 .../CVE-2026-102930_p2.patch                  |  293 ++++
 .../CVE-2026-102930_p3.patch                  |  777 ++++++++++
 .../python3-virtualenv/CVE-2026-102938.patch  |  141 ++
 .../python3-virtualenv/CVE-2026-113713.patch  |  113 ++
 .../python3-virtualenv/CVE-2026-113715.patch  |  165 +++
 .../python3-virtualenv/CVE-2026-113716.patch  |  208 +++
 .../python3-virtualenv/CVE-2026-113719.patch  |  207 +++
 .../python3-virtualenv/CVE-2026-113720.patch  |  156 ++
 .../python3-virtualenv/CVE-2026-113721.patch  |  477 +++++++
 .../CVE-2026-113722_p1.patch                  |  262 ++++
 .../CVE-2026-113722_p2.patch                  |   50 +
 .../python3-virtualenv/CVE-2026-113723.patch  |  233 +++
 .../python3-virtualenv/CVE-2026-113725.patch  |   88 ++
 .../CVE-2026-113726-dependent.patch           |  168 +++
 .../python3-virtualenv/CVE-2026-113726.patch  |  149 ++
 .../CVE-2026-113732_p1.patch                  |  116 ++
 .../CVE-2026-113732_p2.patch                  |  120 ++
 .../python3-virtualenv/CVE-2026-113776.patch  |  133 ++
 .../python3-virtualenv/CVE-2026-115586.patch  |  526 +++++++
 .../python/python3-virtualenv_21.2.1.bb       |   31 +
 .../nginx/files/CVE-2026-15176.patch          |   54 +
 .../nginx/files/CVE-2026-95101.patch          |   68 +
 .../nginx/files/CVE-2026-97629.patch          |   45 +
 .../recipes-httpd/nginx/nginx_1.28.3.bb       |    3 +
 .../recipes-httpd/nginx/nginx_1.29.7.bb       |    3 +
 113 files changed, 14565 insertions(+), 77 deletions(-)
 rename meta-filesystems/recipes-filesystems/ntfs-3g-ntfsprogs/files/{CVE-2026-46572_CVE-2026-42617_p1.patch => CVE-2026-46572_CVE-2026-42617_CVE-2026-56136_p1.patch} (97%)
 rename meta-filesystems/recipes-filesystems/ntfs-3g-ntfsprogs/files/{CVE-2026-46572_CVE-2026-42617_p2.patch => CVE-2026-46572_CVE-2026-42617_CVE-2026-56136_p2.patch} (98%)
 rename meta-filesystems/recipes-filesystems/ntfs-3g-ntfsprogs/files/{CVE-2026-46572_CVE-2026-42617_p3.patch => CVE-2026-46572_CVE-2026-42617_CVE-2026-56136_p3.patch} (96%)
 create mode 100644 meta-filesystems/recipes-filesystems/ntfs-3g-ntfsprogs/files/CVE-2026-56135_p1.patch
 create mode 100644 meta-filesystems/recipes-filesystems/ntfs-3g-ntfsprogs/files/CVE-2026-56135_p2.patch
 create mode 100644 meta-filesystems/recipes-filesystems/ntfs-3g-ntfsprogs/files/CVE-2026-56135_p3.patch
 create mode 100644 meta-filesystems/recipes-filesystems/ntfs-3g-ntfsprogs/files/CVE-2026-56135_p4.patch
 create mode 100644 meta-multimedia/recipes-multimedia/clight/clight/0001-log-Include-fcntl.h-for-open-and-O_-flags.patch
 create mode 100644 meta-networking/recipes-support/mtr/mtr/CVE-2026-14461.patch
 create mode 100644 meta-networking/recipes-support/ntopng/files/CVE-2026-116744.patch
 rename meta-networking/recipes-support/pgpool2/{pgpool2_4.6.4.bb => pgpool2_4.6.6.bb} (92%)
 rename meta-networking/recipes-support/wireshark/{wireshark_4.6.8.bb => wireshark_4.6.9.bb} (97%)
 create mode 100644 meta-oe/recipes-connectivity/libwebsockets/libwebsockets/CVE-2026-114550.patch
 rename meta-oe/recipes-dbs/mysql/{mariadb-native_11.4.12.bb => mariadb-native_11.4.13.bb} (100%)
 delete mode 100644 meta-oe/recipes-dbs/mysql/mariadb/c21bb11be28ae9b2432b2a661bf38a197cf9514d.patch
 rename meta-oe/recipes-dbs/mysql/{mariadb_11.4.12.bb => mariadb_11.4.13.bb} (100%)
 rename meta-oe/recipes-devtools/nodejs/{nodejs_22.23.3.bb => nodejs_22.23.4.bb} (99%)
 rename meta-oe/recipes-extended/valkey/{valkey_9.0.6.bb => valkey_9.0.7.bb} (98%)
 create mode 100644 meta-oe/recipes-graphics/gphoto2/libgphoto2/CVE-2026-120451.patch
 create mode 100644 meta-oe/recipes-graphics/gphoto2/libgphoto2/CVE-2026-120452.patch
 create mode 100644 meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-44988.patch
 create mode 100644 meta-oe/recipes-multimedia/mplayer/mpv/0001-opengl-context-require-swap_buffers-param-for-FenceS.patch
 create mode 100644 meta-oe/recipes-security/nmap/files/CVE-2026-72712.patch
 create mode 100644 meta-oe/recipes-support/cabextract/libmspack/CVE-2026-110602.patch
 rename meta-oe/recipes-support/crow/{crow_1.3.2.bb => crow_1.3.4.bb} (92%)
 create mode 100644 meta-oe/recipes-support/fftw/fftw/0001-cycle.h-Do-not-use-CLOCK_SGI_CYCLE-on-Linux.patch
 create mode 100644 meta-oe/recipes-support/hdf5/files/CVE-2026-120689.patch
 create mode 100644 meta-oe/recipes-support/hdf5/files/CVE-2026-120754-CVE-2026-120755.patch
 create mode 100644 meta-oe/recipes-support/hdf5/files/CVE-2026-120756.patch
 create mode 100644 meta-oe/recipes-support/hdf5/files/CVE-2026-120757.patch
 create mode 100644 meta-oe/recipes-support/hdf5/files/CVE-2026-120758.patch
 create mode 100644 meta-oe/recipes-support/hdf5/files/CVE-2026-19023-CVE-2026-19024.patch
 create mode 100644 meta-oe/recipes-support/hdf5/files/CVE-2026-19026-CVE-2026-19027-CVE-2026-19028.patch
 rename meta-oe/recipes-support/smarty/{smarty_5.8.4.bb => smarty_5.8.5.bb} (96%)
 rename meta-oe/recipes-support/uriparser/{uriparser_1.0.2.bb => uriparser_1.0.3.bb} (91%)
 rename meta-oe/recipes-support/zchunk/{zchunk_1.5.3.bb => zchunk_1.5.5.bb} (81%)
 create mode 100644 meta-perl/recipes-perl/libhtml/files/CVE-2026-8829.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-111063_p1.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-111063_p2.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-111064.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-111065.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-111066_p1.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-111066_p2.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-111748_p1.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-111748_p2.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-111749.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-aiohttp/CVE-2026-111750.patch
 rename meta-python/recipes-devtools/python/{python3-django_5.2.18.bb => python3-django_5.2.19.bb} (70%)
 rename meta-python/recipes-devtools/python/{python3-django_6.0.9.bb => python3-django_6.0.10.bb} (79%)
 create mode 100644 meta-python/recipes-devtools/python/python3-pillow/CVE-2026-112393.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-pymongo/CVE-2026-106435-regression.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-pymongo/CVE-2026-106435.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-pymongo/CVE-2026-88029.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-tornado/CVE-2026-103261.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-tornado/CVE-2026-103262.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-tornado/CVE-2026-103263-dependent.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-tornado/CVE-2026-103263.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-tornado/CVE-2026-115927.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-tornado/CVE-2026-116577_p1.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-tornado/CVE-2026-116577_p2.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-tornado/CVE-2026-116577_p3.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-tornado/CVE-2026-116578_p1.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-tornado/CVE-2026-116578_p2.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-tornado/CVE-2026-116578_p3.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-virtualenv/CVE-2026-102925.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-virtualenv/CVE-2026-102930-dependent.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-virtualenv/CVE-2026-102930_p1.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-virtualenv/CVE-2026-102930_p2.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-virtualenv/CVE-2026-102930_p3.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-virtualenv/CVE-2026-102938.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-virtualenv/CVE-2026-113713.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-virtualenv/CVE-2026-113715.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-virtualenv/CVE-2026-113716.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-virtualenv/CVE-2026-113719.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-virtualenv/CVE-2026-113720.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-virtualenv/CVE-2026-113721.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-virtualenv/CVE-2026-113722_p1.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-virtualenv/CVE-2026-113722_p2.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-virtualenv/CVE-2026-113723.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-virtualenv/CVE-2026-113725.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-virtualenv/CVE-2026-113726-dependent.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-virtualenv/CVE-2026-113726.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-virtualenv/CVE-2026-113732_p1.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-virtualenv/CVE-2026-113732_p2.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-virtualenv/CVE-2026-113776.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-virtualenv/CVE-2026-115586.patch
 create mode 100644 meta-webserver/recipes-httpd/nginx/files/CVE-2026-15176.patch
 create mode 100644 meta-webserver/recipes-httpd/nginx/files/CVE-2026-95101.patch
 create mode 100644 meta-webserver/recipes-httpd/nginx/files/CVE-2026-97629.patch