Re: [oe] [PATCH 00/55] Wrynose pull request

LGTM, Merged now, thanks Anuj

On Thu, Jul 23, 2026 at 7:58 PM Anuj Mittal via lists.openembedded.org
<[email protected]> wrote:

> Please merge these changes in wrynose. Tested locally and on autobuilder.
>
> https://autobuilder.yoctoproject.org/valkyrie/#/builders/81/builds/1657
>
> The following changes since commit
> d97b5602d7f64422c94b7311466cda7f6b1962d5:
>
>   libuio: fix FILE descriptor leak (2026-07-07 08:04:43 +0530)
>
> are available in the Git repository at:
>
>   https://git.openembedded.org/meta-openembedded-contrib anujm/wrynose
>
> https://git.openembedded.org/meta-openembedded-contrib/log/?h=anujm/wrynose
>
> for you to fetch changes up to af8b6d6b2f0b11595b0a0d5b82efa3129d52a628:
>
>   sysdig: Use LuaJIT headers to match the linked LuaJIT library
> (2026-07-24 06:15:59 +0530)
>
> ----------------------------------------------------------------
>
> Alejandro Mery (1):
>   ltrace: fix PRIb64 length modifier on LP64 musl
>
> Ankur Tyagi (4):
>   haveged: upgrade 1.9.22 -> 1.9.23
>   postfix: upgrade 3.10.10 -> 3.10.12
>   python3-django: upgrade 6.0.6 -> 6.0.7
>   python3-django: upgrade 5.2.15 -> 5.2.16
>
> Darsh Kelaiya (3):
>   jq: Fix CVE-2026-43895
>   jq: Fix CVE-2026-49839
>   jq: Fix CVE-2026-54679
>
> Deepak Rathore (3):
>   nmap: Fix CVE-2026-58058
>   libidn: Fix CVE-2026-57053
>   mbedtls: set CVE_STATUS for CVE-2025-66442
>
> He Zhe (1):
>   bpftool-native: Fix -Wdiscarded-qualifiers errors for glibc 2.42+
>
> Jason Schonberg (2):
>   c-ares: upgrade 1.34.6 -> 1.34.8
>   php: upgrade 8.5.7 -> 8.5.8
>
> Khem Raj (5):
>   ifuse: upgrade 1.2.0 -> 1.2.1
>   xdebug: upgrade 3.5.1 -> 3.5.3
>   apache2: upgrade 2.4.67 -> 2.4.68
>   samba: upgrade 4.23.5 -> 4.23.8
>   sysdig: Use LuaJIT headers to match the linked LuaJIT library
>
> Leon Anavi (1):
>   python3-tornado: Upgrade 6.5.6 -> 6.5.7
>
> Markus Volk (2):
>   pipewire: update 1.6.6 -> 1.6.7
>   pipewire: update 1.6.7 -> 1.6.8
>
> Peter Marko (11):
>   libwebsockets: set status for CVE-2025-1866
>   libwebsockets: patch CVE-2026-10650
>   7zip: set status for CVE-2026-58052
>   bit7z: set status for CVE-2026-45380 and CVE-2026-45384
>   c-ares: set status for CVE-2025-31498
>   grpc: set status for CVE-2023-33953 and CVE-2024-37168
>   python3-grpcio: set status for CVE-2023-33953 and CVE-2024-37168
>   protobuf: set status for CVE-2024-7254
>   python3-protobuf: set status for CVE-2024-7254
>   tcpdump: set status for CVE-2024-2397
>   libcoap: set status for CVE-2023-51847
>
> Roland Kovacs (2):
>   thrift: fix multiple CVEs
>   radvd: fix CVE-2026-48715
>
> Wang Mingyu (19):
>   imagemagick: upgrade 7.1.2-24 -> 7.1.2-25
>   imagemagick: upgrade 7.1.2-25 -> 7.1.2-26
>   imagemagick: upgrade 7.1.2-26 -> 7.1.2-27
>   python3-tornado: upgrade 6.5.5 -> 6.5.6
>   python3-elementpath: upgrade 5.1.1 -> 5.1.2
>   python3-elementpath: upgrade 5.1.2 -> 5.1.3
>   swagger-ui: upgrade 5.32.6 -> 5.32.7
>   swagger-ui: upgrade 5.32.7 -> 5.32.8
>   libnvme: upgrade 1.16.1 -> 1.16.2
>   python3-sqlalchemy: upgrade 2.0.49 -> 2.0.50
>   python3-sqlalchemy: upgrade 2.0.50 -> 2.0.51
>   python3-socketio: upgrade 5.16.1 -> 5.16.2
>   python3-socketio: upgrade 5.16.2 -> 5.16.3
>   monocypher: upgrade 4.0.2 -> 4.0.3
>   proftpd: upgrade 1.3.9b -> 1.3.9c
>   python3-tzdata: upgrade 2026.2 -> 2026.3
>   memcached: upgrade 1.6.42 -> 1.6.43
>   memcached: upgrade 1.6.43 -> 1.6.45
>   ldns: upgrade 1.9.0 -> 1.9.2
>
> mark.yang (1):
>   python3-h11: set CVE_PRODUCT
>
>  .../ifuse/{ifuse_1.2.0.bb => ifuse_1.2.1.bb}  |    2 +-
>  .../{pipewire_1.6.6.bb => pipewire_1.6.8.bb}  |    2 +-
>  .../mbedtls/mbedtls_3.6.6.bb                  |   17 +
>  .../{samba_4.23.5.bb => samba_4.23.8.bb}      |    2 +-
>  ...{postfix_3.10.10.bb => postfix_3.10.12.bb} |    2 +-
>  .../{proftpd_1.3.9b.bb => proftpd_1.3.9c.bb}  |    2 +-
>  .../radvd/files/CVE-2026-48715.patch          |  213 +++
>  .../radvd/files/CVE-2026-48715_dep.patch      |  106 ++
>  .../recipes-daemons/radvd/radvd_2.20.bb       |    2 +
>  .../libcoap/libcoap_4.3.5b.bb                 |    1 +
>  ...emcached_1.6.42.bb => memcached_1.6.45.bb} |    2 +-
>  .../recipes-support/tcpdump/tcpdump_4.99.6.bb |    2 +
>  .../libwebsockets/CVE-2026-10650.patch        |   46 +
>  .../libwebsockets/libwebsockets_4.5.8.bb      |    7 +-
>  .../thrift/thrift/CVE-2026-43868.patch        | 1381 +++++++++++++++
>  .../thrift/thrift/CVE-2026-43870.patch        |  134 ++
>  .../thrift/thrift_0.22.0.bb                   |    4 +
>  ...onocypher_4.0.2.bb => monocypher_4.0.3.bb} |    2 +-
>  meta-oe/recipes-devtools/grpc/grpc_1.80.0.bb  |    3 +
>  .../jq/jq/CVE-2026-43895.patch                | 1543 +++++++++++++++++
>  .../jq/jq/CVE-2026-49839.patch                |   37 +
>  .../jq/jq/CVE-2026-54679.patch                |   77 +
>  meta-oe/recipes-devtools/jq/jq_1.8.1.bb       |    3 +
>  .../ldns/{ldns_1.9.0.bb => ldns_1.9.2.bb}     |    2 +-
>  ...t-fix-PRIb64-length-modifier-on-musl.patch |   49 +
>  .../recipes-devtools/ltrace/ltrace_0.8.1.bb   |    1 +
>  .../php/{php_8.5.7.bb => php_8.5.8.bb}        |    2 +-
>  .../protobuf/protobuf_6.33.6.bb               |    2 +
>  meta-oe/recipes-extended/7zip/7zip_26.00.bb   |    2 +
>  meta-oe/recipes-extended/7zip/bit7z_4.0.12.bb |    3 +
>  .../{haveged_1.9.22.bb => haveged_1.9.23.bb}  |    2 +-
>  .../libidn/libidn/CVE-2026-57053.patch        |   28 +
>  .../recipes-extended/libidn/libidn_1.43.bb    |    1 +
>  .../recipes-extended/sysdig/sysdig_0.39.0.bb  |   13 +-
>  .../bpftool/bpftool-native_6.16.bb            |    5 +-
>  ...-Fix-Wdiscarded-qualifiers-under-C23.patch |   69 +
>  .../nmap/files/CVE-2026-58058.patch           |   33 +
>  meta-oe/recipes-security/nmap/nmap_7.95.bb    |    1 +
>  .../{c-ares_1.34.6.bb => c-ares_1.34.8.bb}    |    4 +-
>  ...ck_7.1.2-24.bb => imagemagick_7.1.2-27.bb} |    2 +-
>  .../{libnvme_1.16.1.bb => libnvme_1.16.2.bb}  |    4 +-
>  ...ngo_5.2.15.bb => python3-django_5.2.16.bb} |    2 +-
>  ...jango_6.0.6.bb => python3-django_6.0.7.bb} |    2 +-
>  ..._5.1.1.bb => python3-elementpath_5.1.3.bb} |    2 +-
>  .../python/python3-grpcio_1.78.0.bb           |    2 +
>  .../python/python3-h11_0.16.0.bb              |    2 +
>  .../python/python3-protobuf_6.33.6.bb         |    2 +
>  ...o_5.16.1.bb => python3-socketio_5.16.3.bb} |    2 +-
>  ...2.0.49.bb => python3-sqlalchemy_2.0.51.bb} |    2 +-
>  ...nado_6.5.5.bb => python3-tornado_6.5.7.bb} |    2 +-
>  ...ata_2026.2.bb => python3-tzdata_2026.3.bb} |    7 +-
>  ...gger-ui_5.32.6.bb => swagger-ui_5.32.8.bb} |    2 +-
>  .../{apache2_2.4.67.bb => apache2_2.4.68.bb}  |    2 +-
>  .../{xdebug_3.5.1.bb => xdebug_3.5.3.bb}      |    2 +-
>  54 files changed, 3814 insertions(+), 30 deletions(-)
>  rename meta-filesystems/recipes-filesystems/ifuse/{ifuse_1.2.0.bb =>
> ifuse_1.2.1.bb} (83%)
>  rename meta-multimedia/recipes-multimedia/pipewire/{pipewire_1.6.6.bb =>
> pipewire_1.6.8.bb} (99%)
>  rename meta-networking/recipes-connectivity/samba/{samba_4.23.5.bb =>
> samba_4.23.8.bb} (99%)
>  rename meta-networking/recipes-daemons/postfix/{postfix_3.10.10.bb =>
> postfix_3.10.12.bb} (99%)
>  rename meta-networking/recipes-daemons/proftpd/{proftpd_1.3.9b.bb =>
> proftpd_1.3.9c.bb} (99%)
>  create mode 100644
> meta-networking/recipes-daemons/radvd/files/CVE-2026-48715.patch
>  create mode 100644
> meta-networking/recipes-daemons/radvd/files/CVE-2026-48715_dep.patch
>  rename meta-networking/recipes-support/memcached/{memcached_1.6.42.bb =>
> memcached_1.6.45.bb} (95%)
>  create mode 100644
> meta-oe/recipes-connectivity/libwebsockets/libwebsockets/CVE-2026-10650.patch
>  create mode 100644
> meta-oe/recipes-connectivity/thrift/thrift/CVE-2026-43868.patch
>  create mode 100644
> meta-oe/recipes-connectivity/thrift/thrift/CVE-2026-43870.patch
>  rename meta-oe/recipes-crypto/monocypher/{monocypher_4.0.2.bb =>
> monocypher_4.0.3.bb} (85%)
>  create mode 100644 meta-oe/recipes-devtools/jq/jq/CVE-2026-43895.patch
>  create mode 100644 meta-oe/recipes-devtools/jq/jq/CVE-2026-49839.patch
>  create mode 100644 meta-oe/recipes-devtools/jq/jq/CVE-2026-54679.patch
>  rename meta-oe/recipes-devtools/ldns/{ldns_1.9.0.bb => ldns_1.9.2.bb}
> (89%)
>  create mode 100644
> meta-oe/recipes-devtools/ltrace/ltrace/0001-lens_default-fix-PRIb64-length-modifier-on-musl.patch
>  rename meta-oe/recipes-devtools/php/{php_8.5.7.bb => php_8.5.8.bb} (99%)
>  rename meta-oe/recipes-extended/haveged/{haveged_1.9.22.bb =>
> haveged_1.9.23.bb} (94%)
>  create mode 100644
> meta-oe/recipes-extended/libidn/libidn/CVE-2026-57053.patch
>  create mode 100644
> meta-oe/recipes-kernel/bpftool/bpftool/0001-libbpf-Fix-Wdiscarded-qualifiers-under-C23.patch
>  create mode 100644
> meta-oe/recipes-security/nmap/files/CVE-2026-58058.patch
>  rename meta-oe/recipes-support/c-ares/{c-ares_1.34.6.bb =>
> c-ares_1.34.8.bb} (86%)
>  rename meta-oe/recipes-support/imagemagick/{imagemagick_7.1.2-24.bb =>
> imagemagick_7.1.2-27.bb} (99%)
>  rename meta-oe/recipes-support/libnvme/{libnvme_1.16.1.bb =>
> libnvme_1.16.2.bb} (93%)
>  rename meta-python/recipes-devtools/python/{python3-django_5.2.15.bb =>
> python3-django_5.2.16.bb} (61%)
>  rename meta-python/recipes-devtools/python/{python3-django_6.0.6.bb =>
> python3-django_6.0.7.bb} (75%)
>  rename meta-python/recipes-devtools/python/{python3-elementpath_5.1.1.bb
> => python3-elementpath_5.1.3.bb} (86%)
>  rename meta-python/recipes-devtools/python/{python3-socketio_5.16.1.bb
> => python3-socketio_5.16.3.bb} (88%)
>  rename meta-python/recipes-devtools/python/{python3-sqlalchemy_2.0.49.bb
> => python3-sqlalchemy_2.0.51.bb} (88%)
>  rename meta-python/recipes-devtools/python/{python3-tornado_6.5.5.bb =>
> python3-tornado_6.5.7.bb} (93%)
>  rename meta-python/recipes-devtools/python/{python3-tzdata_2026.2.bb =>
> python3-tzdata_2026.3.bb} (67%)
>  rename meta-webserver/recipes-devtools/swagger-ui/{swagger-ui_5.32.6.bb
> => swagger-ui_5.32.8.bb} (94%)
>  rename meta-webserver/recipes-httpd/apache2/{apache2_2.4.67.bb =>
> apache2_2.4.68.bb} (99%)
>  rename meta-webserver/recipes-php/xdebug/{xdebug_3.5.1.bb =>
> xdebug_3.5.3.bb} (92%)
>
> --
> 2.54.0
>
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#128436):
> https://lists.openembedded.org/g/openembedded-devel/message/128436
> Mute This Topic: https://lists.openembedded.org/mt/120421135/1997914
> Group Owner: [email protected]
> Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [
> [email protected]]
> -=-=-=-=-=-=-=-=-=-=-=-
>
>