[PATCH 00/48] Wrynose pull request
Anuj Mittal <[email protected]>
| Newsgroups | org.openembedded.lists.openembedded-devel |
|---|---|
| Message-ID | <[email protected]> |
Please merge these changes in wrynose. Tested locally and on autobuilder.
https://autobuilder.yoctoproject.org/valkyrie/#/builders/81/builds/1711
The following changes since commit af8b6d6b2f0b11595b0a0d5b82efa3129d52a628:
sysdig: Use LuaJIT headers to match the linked LuaJIT library (2026-07-24 06:15:59 +0530)
are available in the Git repository at:
https://git.openembedded.org/meta-openembedded-contrib anujm/wrynose
https://git.openembedded.org/meta-openembedded-contrib/log/?h=anujm/wrynose
for you to fetch changes up to c466d490dd85e1bdfa7bc2dd4aca1b279afdf83a:
sdbus-c++-libsystemd: add .git to github repository url (2026-08-10 07:33:03 +0530)
----------------------------------------------------------------
Adarsh Jagadish Kamini (4):
thrift: fix CVE-2026-55971
thrift: fix CVE-2026-58023
thrift: fix CVE-2026-48144
thrift: fix CVE-2026-58389
Ankur Tyagi (14):
valkey: upgrade 9.0.4 -> 9.0.5
bluealsa: upgrade 4.3.0 -> 4.3.1
strongswan: patch CVE-2026-47895
netplan: upgrade 1.2.1 -> 1.2.2
transmission: upgrade 4.1.1 -> 4.1.3
liboauth2: upgarde 2.2.0 -> 2.3.0
cryptsetup: upgrade 2.8.6 -> 2.8.7
xrdp: upgrade 0.10.6 -> 0.10.6.1
swagger-ui: upgrade 5.32.8 -> 5.32.11
cjose: upgrade 0.6.2.4 -> 0.6.2.7
usbredir: upgrade 0.14.0 -> 0.15.0
tcpreplay: upgrade 4.5.2 -> 4.5.5
python3-faker: upgrade 40.13.0 -> 40.14.1
python3-sh: upgrade 2.2.2 -> 2.2.4
Devansh Patel (2):
hdf5: Fix CVE-2026-26199
hdf5: Fix CVE-2026-26197
Hetvi Thakar (5):
libdbi-perl: Fix CVE-2026-9698
libdbi-perl: Fix CVE-2026-10879
libdbi-perl: Fix CVE-2026-14380
libdbi-perl: Fix CVE-2026-14739
libdbi-perl: Fix CVE-2026-14740
Jason Schonberg (2):
nodejs: upgrade 22.23.1 -> 22.23.2
php: upgrade 8.5.8 -> 8.5.9
Khem Raj (10):
libopus: upgrade 1.6 -> 1.6.1
mpv: propagate ffmpeg's commercial LICENSE_FLAGS
python3-mpv: propagate ffmpeg's commercial LICENSE_FLAGS
fluidsynth: upgrade 2.5.3 -> 2.5.7
libde265: upgrade 1.0.18 -> 1.0.19
libsrtp: upgrade 2.7.0 -> 2.8.0
gssdp: upgrade 1.6.4 -> 1.6.6
srt: upgrade 1.5.4 -> 1.5.6
gupnp: upgrade 1.6.9 -> 1.6.10
gupnp-tools: upgrade 0.12.2 -> 0.12.4
Leon Anavi (1):
python3-rarfile: Upgrade 4.2 -> 4.3
Markus Volk (2):
colord: set proper home-dir
fluidsynth: fix branch after recipe update
Omkar Patil (1):
openvpn: fix CVE-2026-40215
Peter Marko (1):
sdbus-c++-libsystemd: add .git to github repository url
Tugrul Kukul (1):
jq: fix infinite loop in CVE-2026-47770 backport
Wang Mingyu (5):
dovecot: upgrade 2.4.3 -> 2.4.4
smarty: upgrade 5.8.0 -> 5.8.3
smarty: upgrade 5.8.3 -> 5.8.4
libosip2: upgrade 5.3.1 -> 5.3.2
python3-rarfile: upgrade 4.3 -> 4.4
.../gupnp/{gssdp_1.6.4.bb => gssdp_1.6.6.bb} | 2 +-
...-tools_0.12.2.bb => gupnp-tools_0.12.4.bb} | 2 +-
.../gupnp/{gupnp_1.6.9.bb => gupnp_1.6.10.bb} | 2 +-
...asename-implementation-from-glib-2.0.patch | 88 ---
.../{bluealsa_4.3.0.bb => bluealsa_4.3.1.bb} | 5 +-
...luidsynth_2.5.3.bb => fluidsynth_2.5.7.bb} | 4 +-
...{libde265_1.0.18.bb => libde265_1.0.19.bb} | 3 +-
.../{libsrtp_2.7.0.bb => libsrtp_2.8.0.bb} | 2 +-
.../srt/0002-allow-build-with-cmake-4.patch | 43 --
.../srt/{srt_1.5.4.bb => srt_1.5.6.bb} | 3 +-
.../{dovecot_2.4.3.bb => dovecot_2.4.4.bb} | 2 +-
.../{libosip2_5.3.1.bb => libosip2_5.3.2.bb} | 2 +-
.../openvpn/openvpn/CVE-2026-40215.patch | 59 ++
.../recipes-support/openvpn/openvpn_2.7.0.bb | 1 +
...{usbredir_0.14.0.bb => usbredir_0.15.0.bb} | 4 +-
.../strongswan/CVE-2026-47895.patch | 92 +++
.../strongswan/strongswan_6.0.6.bb | 4 +-
...{tcpreplay_4.5.2.bb => tcpreplay_4.5.5.bb} | 2 +-
.../{netplan_1.2.1.bb => netplan_1.2.2.bb} | 2 +-
.../thrift/thrift/CVE-2026-48144.patch | 36 +
.../thrift/thrift/CVE-2026-55971.patch | 92 +++
.../thrift/thrift/CVE-2026-58023.patch | 231 ++++++
.../thrift/thrift/CVE-2026-58389.patch | 93 +++
.../thrift/thrift_0.22.0.bb | 4 +
...mission_4.1.1.bb => transmission_4.1.3.bb} | 4 +-
.../sdbus-c++/sdbus-c++-libsystemd_259.5.bb | 2 +-
...ryptsetup_2.8.6.bb => cryptsetup_2.8.7.bb} | 2 +-
.../jq/jq/CVE-2026-47770.patch | 6 +-
.../{nodejs_22.23.1.bb => nodejs_22.23.2.bb} | 2 +-
.../perl/libdbi-perl/CVE-2026-10879.patch | 41 ++
.../perl/libdbi-perl/CVE-2026-14380.patch | 37 +
.../perl/libdbi-perl/CVE-2026-14739.patch | 124 ++++
.../perl/libdbi-perl/CVE-2026-14740.patch | 39 +
.../perl/libdbi-perl/CVE-2026-9698.patch | 51 ++
.../perl/libdbi-perl_1.647.bb | 9 +-
.../php/{php_8.5.8.bb => php_8.5.9.bb} | 2 +-
.../{valkey_9.0.4.bb => valkey_9.0.5.bb} | 2 +-
.../{libopus_1.6.bb => libopus_1.6.1.bb} | 2 +-
.../recipes-multimedia/mplayer/mpv_0.41.0.bb | 7 +-
.../{cjose_0.6.2.4.bb => cjose_0.6.2.7.bb} | 2 +-
meta-oe/recipes-support/colord/colord.bb | 7 +-
.../hdf5/files/CVE-2026-26197.patch | 70 ++
.../hdf5/files/CVE-2026-26199.patch | 678 ++++++++++++++++++
meta-oe/recipes-support/hdf5/hdf5_2.0.0.bb | 2 +
...rage-linker-flag-behind-CODE_COVERAG.patch | 33 -
..._easy_setopt-takes-a-long-not-an-int.patch | 33 -
.../0002-Fix-use-of-strchr-with-new-GCC.patch | 33 -
...{liboauth2_2.2.0.bb => liboauth2_2.3.0.bb} | 8 +-
.../{smarty_5.8.0.bb => smarty_5.8.4.bb} | 2 +-
.../xrdp/{xrdp_0.10.6.bb => xrdp_0.10.6.1.bb} | 2 +-
...er_40.13.0.bb => python3-faker_40.14.1.bb} | 2 +-
.../python/python3-mpv_1.0.8.bb | 6 +-
...-rarfile_4.2.bb => python3-rarfile_4.4.bb} | 2 +-
...ython3-sh_2.2.2.bb => python3-sh_2.2.4.bb} | 2 +-
...ger-ui_5.32.8.bb => swagger-ui_5.32.11.bb} | 2 +-
55 files changed, 1715 insertions(+), 277 deletions(-)
rename meta-multimedia/recipes-connectivity/gupnp/{gssdp_1.6.4.bb => gssdp_1.6.6.bb} (92%)
rename meta-multimedia/recipes-connectivity/gupnp/{gupnp-tools_0.12.2.bb => gupnp-tools_0.12.4.bb} (84%)
rename meta-multimedia/recipes-connectivity/gupnp/{gupnp_1.6.9.bb => gupnp_1.6.10.bb} (93%)
delete mode 100644 meta-multimedia/recipes-multimedia/bluealsa/bluealsa/0001-Use-basename-implementation-from-glib-2.0.patch
rename meta-multimedia/recipes-multimedia/bluealsa/{bluealsa_4.3.0.bb => bluealsa_4.3.1.bb} (96%)
rename meta-multimedia/recipes-multimedia/fluidsynth/{fluidsynth_2.5.3.bb => fluidsynth_2.5.7.bb} (92%)
rename meta-multimedia/recipes-multimedia/libde265/{libde265_1.0.18.bb => libde265_1.0.19.bb} (93%)
rename meta-multimedia/recipes-support/libsrtp/{libsrtp_2.7.0.bb => libsrtp_2.8.0.bb} (94%)
delete mode 100644 meta-multimedia/recipes-support/srt/srt/0002-allow-build-with-cmake-4.patch
rename meta-multimedia/recipes-support/srt/{srt_1.5.4.bb => srt_1.5.6.bb} (90%)
rename meta-networking/recipes-support/dovecot/{dovecot_2.4.3.bb => dovecot_2.4.4.bb} (97%)
rename meta-networking/recipes-support/libosip2/{libosip2_5.3.1.bb => libosip2_5.3.2.bb} (88%)
create mode 100644 meta-networking/recipes-support/openvpn/openvpn/CVE-2026-40215.patch
rename meta-networking/recipes-support/spice/{usbredir_0.14.0.bb => usbredir_0.15.0.bb} (82%)
create mode 100644 meta-networking/recipes-support/strongswan/strongswan/CVE-2026-47895.patch
rename meta-networking/recipes-support/tcpreplay/{tcpreplay_4.5.2.bb => tcpreplay_4.5.5.bb} (89%)
rename meta-oe/dynamic-layers/meta-python/recipes-connectivity/netplan/{netplan_1.2.1.bb => netplan_1.2.2.bb} (97%)
create mode 100644 meta-oe/recipes-connectivity/thrift/thrift/CVE-2026-48144.patch
create mode 100644 meta-oe/recipes-connectivity/thrift/thrift/CVE-2026-55971.patch
create mode 100644 meta-oe/recipes-connectivity/thrift/thrift/CVE-2026-58023.patch
create mode 100644 meta-oe/recipes-connectivity/thrift/thrift/CVE-2026-58389.patch
rename meta-oe/recipes-connectivity/transmission/{transmission_4.1.1.bb => transmission_4.1.3.bb} (97%)
rename meta-oe/recipes-crypto/cryptsetup/{cryptsetup_2.8.6.bb => cryptsetup_2.8.7.bb} (98%)
rename meta-oe/recipes-devtools/nodejs/{nodejs_22.23.1.bb => nodejs_22.23.2.bb} (99%)
create mode 100644 meta-oe/recipes-devtools/perl/libdbi-perl/CVE-2026-10879.patch
create mode 100644 meta-oe/recipes-devtools/perl/libdbi-perl/CVE-2026-14380.patch
create mode 100644 meta-oe/recipes-devtools/perl/libdbi-perl/CVE-2026-14739.patch
create mode 100644 meta-oe/recipes-devtools/perl/libdbi-perl/CVE-2026-14740.patch
create mode 100644 meta-oe/recipes-devtools/perl/libdbi-perl/CVE-2026-9698.patch
rename meta-oe/recipes-devtools/php/{php_8.5.8.bb => php_8.5.9.bb} (99%)
rename meta-oe/recipes-extended/valkey/{valkey_9.0.4.bb => valkey_9.0.5.bb} (98%)
rename meta-oe/recipes-multimedia/libopus/{libopus_1.6.bb => libopus_1.6.1.bb} (96%)
rename meta-oe/recipes-support/cjose/{cjose_0.6.2.4.bb => cjose_0.6.2.7.bb} (88%)
create mode 100644 meta-oe/recipes-support/hdf5/files/CVE-2026-26197.patch
create mode 100644 meta-oe/recipes-support/hdf5/files/CVE-2026-26199.patch
delete mode 100644 meta-oe/recipes-support/liboauth2/liboauth2/0001-build-guard-coverage-linker-flag-behind-CODE_COVERAG.patch
delete mode 100644 meta-oe/recipes-support/liboauth2/liboauth2/0001-fix-clang-curl_easy_setopt-takes-a-long-not-an-int.patch
delete mode 100644 meta-oe/recipes-support/liboauth2/liboauth2/0002-Fix-use-of-strchr-with-new-GCC.patch
rename meta-oe/recipes-support/liboauth2/{liboauth2_2.2.0.bb => liboauth2_2.3.0.bb} (71%)
rename meta-oe/recipes-support/smarty/{smarty_5.8.0.bb => smarty_5.8.4.bb} (95%)
rename meta-oe/recipes-support/xrdp/{xrdp_0.10.6.bb => xrdp_0.10.6.1.bb} (98%)
rename meta-python/recipes-devtools/python/{python3-faker_40.13.0.bb => python3-faker_40.14.1.bb} (93%)
rename meta-python/recipes-devtools/python/{python3-rarfile_4.2.bb => python3-rarfile_4.4.bb} (82%)
rename meta-python/recipes-devtools/python/{python3-sh_2.2.2.bb => python3-sh_2.2.4.bb} (84%)
rename meta-webserver/recipes-devtools/swagger-ui/{swagger-ui_5.32.8.bb => swagger-ui_5.32.11.bb} (94%)
--
2.54.0