[PATCH 00/55] Wrynose pull request
Anuj Mittal <[email protected]> Fri, 24 Jul 2026 08:28:19 +0530
| Newsgroups | org.openembedded.lists.openembedded-devel |
|---|---|
| Message-ID | <[email protected]> |
Please merge these changes in wrynose. Tested locally and on autobuilder.
https://autobuilder.yoctoproject.org/valkyrie/#/builders/81/builds/1657
The following changes since commit d97b5602d7f64422c94b7311466cda7f6b1962d5:
libuio: fix FILE descriptor leak (2026-07-07 08:04:43 +0530)
are available in the Git repository at:
https://git.openembedded.org/meta-openembedded-contrib anujm/wrynose
https://git.openembedded.org/meta-openembedded-contrib/log/?h=anujm/wrynose
for you to fetch changes up to af8b6d6b2f0b11595b0a0d5b82efa3129d52a628:
sysdig: Use LuaJIT headers to match the linked LuaJIT library (2026-07-24 06:15:59 +0530)
----------------------------------------------------------------
Alejandro Mery (1):
ltrace: fix PRIb64 length modifier on LP64 musl
Ankur Tyagi (4):
haveged: upgrade 1.9.22 -> 1.9.23
postfix: upgrade 3.10.10 -> 3.10.12
python3-django: upgrade 6.0.6 -> 6.0.7
python3-django: upgrade 5.2.15 -> 5.2.16
Darsh Kelaiya (3):
jq: Fix CVE-2026-43895
jq: Fix CVE-2026-49839
jq: Fix CVE-2026-54679
Deepak Rathore (3):
nmap: Fix CVE-2026-58058
libidn: Fix CVE-2026-57053
mbedtls: set CVE_STATUS for CVE-2025-66442
He Zhe (1):
bpftool-native: Fix -Wdiscarded-qualifiers errors for glibc 2.42+
Jason Schonberg (2):
c-ares: upgrade 1.34.6 -> 1.34.8
php: upgrade 8.5.7 -> 8.5.8
Khem Raj (5):
ifuse: upgrade 1.2.0 -> 1.2.1
xdebug: upgrade 3.5.1 -> 3.5.3
apache2: upgrade 2.4.67 -> 2.4.68
samba: upgrade 4.23.5 -> 4.23.8
sysdig: Use LuaJIT headers to match the linked LuaJIT library
Leon Anavi (1):
python3-tornado: Upgrade 6.5.6 -> 6.5.7
Markus Volk (2):
pipewire: update 1.6.6 -> 1.6.7
pipewire: update 1.6.7 -> 1.6.8
Peter Marko (11):
libwebsockets: set status for CVE-2025-1866
libwebsockets: patch CVE-2026-10650
7zip: set status for CVE-2026-58052
bit7z: set status for CVE-2026-45380 and CVE-2026-45384
c-ares: set status for CVE-2025-31498
grpc: set status for CVE-2023-33953 and CVE-2024-37168
python3-grpcio: set status for CVE-2023-33953 and CVE-2024-37168
protobuf: set status for CVE-2024-7254
python3-protobuf: set status for CVE-2024-7254
tcpdump: set status for CVE-2024-2397
libcoap: set status for CVE-2023-51847
Roland Kovacs (2):
thrift: fix multiple CVEs
radvd: fix CVE-2026-48715
Wang Mingyu (19):
imagemagick: upgrade 7.1.2-24 -> 7.1.2-25
imagemagick: upgrade 7.1.2-25 -> 7.1.2-26
imagemagick: upgrade 7.1.2-26 -> 7.1.2-27
python3-tornado: upgrade 6.5.5 -> 6.5.6
python3-elementpath: upgrade 5.1.1 -> 5.1.2
python3-elementpath: upgrade 5.1.2 -> 5.1.3
swagger-ui: upgrade 5.32.6 -> 5.32.7
swagger-ui: upgrade 5.32.7 -> 5.32.8
libnvme: upgrade 1.16.1 -> 1.16.2
python3-sqlalchemy: upgrade 2.0.49 -> 2.0.50
python3-sqlalchemy: upgrade 2.0.50 -> 2.0.51
python3-socketio: upgrade 5.16.1 -> 5.16.2
python3-socketio: upgrade 5.16.2 -> 5.16.3
monocypher: upgrade 4.0.2 -> 4.0.3
proftpd: upgrade 1.3.9b -> 1.3.9c
python3-tzdata: upgrade 2026.2 -> 2026.3
memcached: upgrade 1.6.42 -> 1.6.43
memcached: upgrade 1.6.43 -> 1.6.45
ldns: upgrade 1.9.0 -> 1.9.2
mark.yang (1):
python3-h11: set CVE_PRODUCT
.../ifuse/{ifuse_1.2.0.bb => ifuse_1.2.1.bb} | 2 +-
.../{pipewire_1.6.6.bb => pipewire_1.6.8.bb} | 2 +-
.../mbedtls/mbedtls_3.6.6.bb | 17 +
.../{samba_4.23.5.bb => samba_4.23.8.bb} | 2 +-
...{postfix_3.10.10.bb => postfix_3.10.12.bb} | 2 +-
.../{proftpd_1.3.9b.bb => proftpd_1.3.9c.bb} | 2 +-
.../radvd/files/CVE-2026-48715.patch | 213 +++
.../radvd/files/CVE-2026-48715_dep.patch | 106 ++
.../recipes-daemons/radvd/radvd_2.20.bb | 2 +
.../libcoap/libcoap_4.3.5b.bb | 1 +
...emcached_1.6.42.bb => memcached_1.6.45.bb} | 2 +-
.../recipes-support/tcpdump/tcpdump_4.99.6.bb | 2 +
.../libwebsockets/CVE-2026-10650.patch | 46 +
.../libwebsockets/libwebsockets_4.5.8.bb | 7 +-
.../thrift/thrift/CVE-2026-43868.patch | 1381 +++++++++++++++
.../thrift/thrift/CVE-2026-43870.patch | 134 ++
.../thrift/thrift_0.22.0.bb | 4 +
...onocypher_4.0.2.bb => monocypher_4.0.3.bb} | 2 +-
meta-oe/recipes-devtools/grpc/grpc_1.80.0.bb | 3 +
.../jq/jq/CVE-2026-43895.patch | 1543 +++++++++++++++++
.../jq/jq/CVE-2026-49839.patch | 37 +
.../jq/jq/CVE-2026-54679.patch | 77 +
meta-oe/recipes-devtools/jq/jq_1.8.1.bb | 3 +
.../ldns/{ldns_1.9.0.bb => ldns_1.9.2.bb} | 2 +-
...t-fix-PRIb64-length-modifier-on-musl.patch | 49 +
.../recipes-devtools/ltrace/ltrace_0.8.1.bb | 1 +
.../php/{php_8.5.7.bb => php_8.5.8.bb} | 2 +-
.../protobuf/protobuf_6.33.6.bb | 2 +
meta-oe/recipes-extended/7zip/7zip_26.00.bb | 2 +
meta-oe/recipes-extended/7zip/bit7z_4.0.12.bb | 3 +
.../{haveged_1.9.22.bb => haveged_1.9.23.bb} | 2 +-
.../libidn/libidn/CVE-2026-57053.patch | 28 +
.../recipes-extended/libidn/libidn_1.43.bb | 1 +
.../recipes-extended/sysdig/sysdig_0.39.0.bb | 13 +-
.../bpftool/bpftool-native_6.16.bb | 5 +-
...-Fix-Wdiscarded-qualifiers-under-C23.patch | 69 +
.../nmap/files/CVE-2026-58058.patch | 33 +
meta-oe/recipes-security/nmap/nmap_7.95.bb | 1 +
.../{c-ares_1.34.6.bb => c-ares_1.34.8.bb} | 4 +-
...ck_7.1.2-24.bb => imagemagick_7.1.2-27.bb} | 2 +-
.../{libnvme_1.16.1.bb => libnvme_1.16.2.bb} | 4 +-
...ngo_5.2.15.bb => python3-django_5.2.16.bb} | 2 +-
...jango_6.0.6.bb => python3-django_6.0.7.bb} | 2 +-
..._5.1.1.bb => python3-elementpath_5.1.3.bb} | 2 +-
.../python/python3-grpcio_1.78.0.bb | 2 +
.../python/python3-h11_0.16.0.bb | 2 +
.../python/python3-protobuf_6.33.6.bb | 2 +
...o_5.16.1.bb => python3-socketio_5.16.3.bb} | 2 +-
...2.0.49.bb => python3-sqlalchemy_2.0.51.bb} | 2 +-
...nado_6.5.5.bb => python3-tornado_6.5.7.bb} | 2 +-
...ata_2026.2.bb => python3-tzdata_2026.3.bb} | 7 +-
...gger-ui_5.32.6.bb => swagger-ui_5.32.8.bb} | 2 +-
.../{apache2_2.4.67.bb => apache2_2.4.68.bb} | 2 +-
.../{xdebug_3.5.1.bb => xdebug_3.5.3.bb} | 2 +-
54 files changed, 3814 insertions(+), 30 deletions(-)
rename meta-filesystems/recipes-filesystems/ifuse/{ifuse_1.2.0.bb => ifuse_1.2.1.bb} (83%)
rename meta-multimedia/recipes-multimedia/pipewire/{pipewire_1.6.6.bb => pipewire_1.6.8.bb} (99%)
rename meta-networking/recipes-connectivity/samba/{samba_4.23.5.bb => samba_4.23.8.bb} (99%)
rename meta-networking/recipes-daemons/postfix/{postfix_3.10.10.bb => postfix_3.10.12.bb} (99%)
rename meta-networking/recipes-daemons/proftpd/{proftpd_1.3.9b.bb => proftpd_1.3.9c.bb} (99%)
create mode 100644 meta-networking/recipes-daemons/radvd/files/CVE-2026-48715.patch
create mode 100644 meta-networking/recipes-daemons/radvd/files/CVE-2026-48715_dep.patch
rename meta-networking/recipes-support/memcached/{memcached_1.6.42.bb => memcached_1.6.45.bb} (95%)
create mode 100644 meta-oe/recipes-connectivity/libwebsockets/libwebsockets/CVE-2026-10650.patch
create mode 100644 meta-oe/recipes-connectivity/thrift/thrift/CVE-2026-43868.patch
create mode 100644 meta-oe/recipes-connectivity/thrift/thrift/CVE-2026-43870.patch
rename meta-oe/recipes-crypto/monocypher/{monocypher_4.0.2.bb => monocypher_4.0.3.bb} (85%)
create mode 100644 meta-oe/recipes-devtools/jq/jq/CVE-2026-43895.patch
create mode 100644 meta-oe/recipes-devtools/jq/jq/CVE-2026-49839.patch
create mode 100644 meta-oe/recipes-devtools/jq/jq/CVE-2026-54679.patch
rename meta-oe/recipes-devtools/ldns/{ldns_1.9.0.bb => ldns_1.9.2.bb} (89%)
create mode 100644 meta-oe/recipes-devtools/ltrace/ltrace/0001-lens_default-fix-PRIb64-length-modifier-on-musl.patch
rename meta-oe/recipes-devtools/php/{php_8.5.7.bb => php_8.5.8.bb} (99%)
rename meta-oe/recipes-extended/haveged/{haveged_1.9.22.bb => haveged_1.9.23.bb} (94%)
create mode 100644 meta-oe/recipes-extended/libidn/libidn/CVE-2026-57053.patch
create mode 100644 meta-oe/recipes-kernel/bpftool/bpftool/0001-libbpf-Fix-Wdiscarded-qualifiers-under-C23.patch
create mode 100644 meta-oe/recipes-security/nmap/files/CVE-2026-58058.patch
rename meta-oe/recipes-support/c-ares/{c-ares_1.34.6.bb => c-ares_1.34.8.bb} (86%)
rename meta-oe/recipes-support/imagemagick/{imagemagick_7.1.2-24.bb => imagemagick_7.1.2-27.bb} (99%)
rename meta-oe/recipes-support/libnvme/{libnvme_1.16.1.bb => libnvme_1.16.2.bb} (93%)
rename meta-python/recipes-devtools/python/{python3-django_5.2.15.bb => python3-django_5.2.16.bb} (61%)
rename meta-python/recipes-devtools/python/{python3-django_6.0.6.bb => python3-django_6.0.7.bb} (75%)
rename meta-python/recipes-devtools/python/{python3-elementpath_5.1.1.bb => python3-elementpath_5.1.3.bb} (86%)
rename meta-python/recipes-devtools/python/{python3-socketio_5.16.1.bb => python3-socketio_5.16.3.bb} (88%)
rename meta-python/recipes-devtools/python/{python3-sqlalchemy_2.0.49.bb => python3-sqlalchemy_2.0.51.bb} (88%)
rename meta-python/recipes-devtools/python/{python3-tornado_6.5.5.bb => python3-tornado_6.5.7.bb} (93%)
rename meta-python/recipes-devtools/python/{python3-tzdata_2026.2.bb => python3-tzdata_2026.3.bb} (67%)
rename meta-webserver/recipes-devtools/swagger-ui/{swagger-ui_5.32.6.bb => swagger-ui_5.32.8.bb} (94%)
rename meta-webserver/recipes-httpd/apache2/{apache2_2.4.67.bb => apache2_2.4.68.bb} (99%)
rename meta-webserver/recipes-php/xdebug/{xdebug_3.5.1.bb => xdebug_3.5.3.bb} (92%)
--
2.54.0