Re: [oe] [PATCH 00/48] Wrynose pull request

This looks good, Applied now thanks Anuj

On Mon, Aug 10, 2026 at 3:20 AM Anuj Mittal via lists.openembedded.org
<[email protected]> wrote:

> Please merge these changes in wrynose. Tested locally and on autobuilder.
>
> https://autobuilder.yoctoproject.org/valkyrie/#/builders/81/builds/1711
>
> The following changes since commit
> af8b6d6b2f0b11595b0a0d5b82efa3129d52a628:
>
>   sysdig: Use LuaJIT headers to match the linked LuaJIT library
> (2026-07-24 06:15:59 +0530)
>
> are available in the Git repository at:
>
>   https://git.openembedded.org/meta-openembedded-contrib anujm/wrynose
>
> https://git.openembedded.org/meta-openembedded-contrib/log/?h=anujm/wrynose
>
> for you to fetch changes up to c466d490dd85e1bdfa7bc2dd4aca1b279afdf83a:
>
>   sdbus-c++-libsystemd: add .git to github repository url (2026-08-10
> 07:33:03 +0530)
>
> ----------------------------------------------------------------
>
> Adarsh Jagadish Kamini (4):
>   thrift: fix CVE-2026-55971
>   thrift: fix CVE-2026-58023
>   thrift: fix CVE-2026-48144
>   thrift: fix CVE-2026-58389
>
> Ankur Tyagi (14):
>   valkey: upgrade 9.0.4 -> 9.0.5
>   bluealsa: upgrade 4.3.0 -> 4.3.1
>   strongswan: patch CVE-2026-47895
>   netplan: upgrade 1.2.1 -> 1.2.2
>   transmission: upgrade 4.1.1 -> 4.1.3
>   liboauth2: upgarde 2.2.0 -> 2.3.0
>   cryptsetup: upgrade 2.8.6 -> 2.8.7
>   xrdp: upgrade 0.10.6 -> 0.10.6.1
>   swagger-ui: upgrade 5.32.8 -> 5.32.11
>   cjose: upgrade 0.6.2.4 -> 0.6.2.7
>   usbredir: upgrade 0.14.0 -> 0.15.0
>   tcpreplay: upgrade 4.5.2 -> 4.5.5
>   python3-faker: upgrade 40.13.0 -> 40.14.1
>   python3-sh: upgrade 2.2.2 -> 2.2.4
>
> Devansh Patel (2):
>   hdf5: Fix CVE-2026-26199
>   hdf5: Fix CVE-2026-26197
>
> Hetvi Thakar (5):
>   libdbi-perl: Fix CVE-2026-9698
>   libdbi-perl: Fix CVE-2026-10879
>   libdbi-perl: Fix CVE-2026-14380
>   libdbi-perl: Fix CVE-2026-14739
>   libdbi-perl: Fix CVE-2026-14740
>
> Jason Schonberg (2):
>   nodejs: upgrade 22.23.1 -> 22.23.2
>   php: upgrade 8.5.8 -> 8.5.9
>
> Khem Raj (10):
>   libopus: upgrade 1.6 -> 1.6.1
>   mpv: propagate ffmpeg's commercial LICENSE_FLAGS
>   python3-mpv: propagate ffmpeg's commercial LICENSE_FLAGS
>   fluidsynth: upgrade 2.5.3 -> 2.5.7
>   libde265: upgrade 1.0.18 -> 1.0.19
>   libsrtp: upgrade 2.7.0 -> 2.8.0
>   gssdp: upgrade 1.6.4 -> 1.6.6
>   srt: upgrade 1.5.4 -> 1.5.6
>   gupnp: upgrade 1.6.9 -> 1.6.10
>   gupnp-tools: upgrade 0.12.2 -> 0.12.4
>
> Leon Anavi (1):
>   python3-rarfile: Upgrade 4.2 -> 4.3
>
> Markus Volk (2):
>   colord: set proper home-dir
>   fluidsynth: fix branch after recipe update
>
> Omkar Patil (1):
>   openvpn: fix CVE-2026-40215
>
> Peter Marko (1):
>   sdbus-c++-libsystemd: add .git to github repository url
>
> Tugrul Kukul (1):
>   jq: fix infinite loop in CVE-2026-47770 backport
>
> Wang Mingyu (5):
>   dovecot: upgrade 2.4.3 -> 2.4.4
>   smarty: upgrade 5.8.0 -> 5.8.3
>   smarty: upgrade 5.8.3 -> 5.8.4
>   libosip2: upgrade 5.3.1 -> 5.3.2
>   python3-rarfile: upgrade 4.3 -> 4.4
>
>  .../gupnp/{gssdp_1.6.4.bb => gssdp_1.6.6.bb}  |   2 +-
>  ...-tools_0.12.2.bb => gupnp-tools_0.12.4.bb} |   2 +-
>  .../gupnp/{gupnp_1.6.9.bb => gupnp_1.6.10.bb} |   2 +-
>  ...asename-implementation-from-glib-2.0.patch |  88 ---
>  .../{bluealsa_4.3.0.bb => bluealsa_4.3.1.bb}  |   5 +-
>  ...luidsynth_2.5.3.bb => fluidsynth_2.5.7.bb} |   4 +-
>  ...{libde265_1.0.18.bb => libde265_1.0.19.bb} |   3 +-
>  .../{libsrtp_2.7.0.bb => libsrtp_2.8.0.bb}    |   2 +-
>  .../srt/0002-allow-build-with-cmake-4.patch   |  43 --
>  .../srt/{srt_1.5.4.bb => srt_1.5.6.bb}        |   3 +-
>  .../{dovecot_2.4.3.bb => dovecot_2.4.4.bb}    |   2 +-
>  .../{libosip2_5.3.1.bb => libosip2_5.3.2.bb}  |   2 +-
>  .../openvpn/openvpn/CVE-2026-40215.patch      |  59 ++
>  .../recipes-support/openvpn/openvpn_2.7.0.bb  |   1 +
>  ...{usbredir_0.14.0.bb => usbredir_0.15.0.bb} |   4 +-
>  .../strongswan/CVE-2026-47895.patch           |  92 +++
>  .../strongswan/strongswan_6.0.6.bb            |   4 +-
>  ...{tcpreplay_4.5.2.bb => tcpreplay_4.5.5.bb} |   2 +-
>  .../{netplan_1.2.1.bb => netplan_1.2.2.bb}    |   2 +-
>  .../thrift/thrift/CVE-2026-48144.patch        |  36 +
>  .../thrift/thrift/CVE-2026-55971.patch        |  92 +++
>  .../thrift/thrift/CVE-2026-58023.patch        | 231 ++++++
>  .../thrift/thrift/CVE-2026-58389.patch        |  93 +++
>  .../thrift/thrift_0.22.0.bb                   |   4 +
>  ...mission_4.1.1.bb => transmission_4.1.3.bb} |   4 +-
>  .../sdbus-c++/sdbus-c++-libsystemd_259.5.bb   |   2 +-
>  ...ryptsetup_2.8.6.bb => cryptsetup_2.8.7.bb} |   2 +-
>  .../jq/jq/CVE-2026-47770.patch                |   6 +-
>  .../{nodejs_22.23.1.bb => nodejs_22.23.2.bb}  |   2 +-
>  .../perl/libdbi-perl/CVE-2026-10879.patch     |  41 ++
>  .../perl/libdbi-perl/CVE-2026-14380.patch     |  37 +
>  .../perl/libdbi-perl/CVE-2026-14739.patch     | 124 ++++
>  .../perl/libdbi-perl/CVE-2026-14740.patch     |  39 +
>  .../perl/libdbi-perl/CVE-2026-9698.patch      |  51 ++
>  .../perl/libdbi-perl_1.647.bb                 |   9 +-
>  .../php/{php_8.5.8.bb => php_8.5.9.bb}        |   2 +-
>  .../{valkey_9.0.4.bb => valkey_9.0.5.bb}      |   2 +-
>  .../{libopus_1.6.bb => libopus_1.6.1.bb}      |   2 +-
>  .../recipes-multimedia/mplayer/mpv_0.41.0.bb  |   7 +-
>  .../{cjose_0.6.2.4.bb => cjose_0.6.2.7.bb}    |   2 +-
>  meta-oe/recipes-support/colord/colord.bb      |   7 +-
>  .../hdf5/files/CVE-2026-26197.patch           |  70 ++
>  .../hdf5/files/CVE-2026-26199.patch           | 678 ++++++++++++++++++
>  meta-oe/recipes-support/hdf5/hdf5_2.0.0.bb    |   2 +
>  ...rage-linker-flag-behind-CODE_COVERAG.patch |  33 -
>  ..._easy_setopt-takes-a-long-not-an-int.patch |  33 -
>  .../0002-Fix-use-of-strchr-with-new-GCC.patch |  33 -
>  ...{liboauth2_2.2.0.bb => liboauth2_2.3.0.bb} |   8 +-
>  .../{smarty_5.8.0.bb => smarty_5.8.4.bb}      |   2 +-
>  .../xrdp/{xrdp_0.10.6.bb => xrdp_0.10.6.1.bb} |   2 +-
>  ...er_40.13.0.bb => python3-faker_40.14.1.bb} |   2 +-
>  .../python/python3-mpv_1.0.8.bb               |   6 +-
>  ...-rarfile_4.2.bb => python3-rarfile_4.4.bb} |   2 +-
>  ...ython3-sh_2.2.2.bb => python3-sh_2.2.4.bb} |   2 +-
>  ...ger-ui_5.32.8.bb => swagger-ui_5.32.11.bb} |   2 +-
>  55 files changed, 1715 insertions(+), 277 deletions(-)
>  rename meta-multimedia/recipes-connectivity/gupnp/{gssdp_1.6.4.bb =>
> gssdp_1.6.6.bb} (92%)
>  rename meta-multimedia/recipes-connectivity/gupnp/{gupnp-tools_0.12.2.bb
> => gupnp-tools_0.12.4.bb} (84%)
>  rename meta-multimedia/recipes-connectivity/gupnp/{gupnp_1.6.9.bb =>
> gupnp_1.6.10.bb} (93%)
>  delete mode 100644
> meta-multimedia/recipes-multimedia/bluealsa/bluealsa/0001-Use-basename-implementation-from-glib-2.0.patch
>  rename meta-multimedia/recipes-multimedia/bluealsa/{bluealsa_4.3.0.bb =>
> bluealsa_4.3.1.bb} (96%)
>  rename meta-multimedia/recipes-multimedia/fluidsynth/{fluidsynth_2.5.3.bb
> => fluidsynth_2.5.7.bb} (92%)
>  rename meta-multimedia/recipes-multimedia/libde265/{libde265_1.0.18.bb
> => libde265_1.0.19.bb} (93%)
>  rename meta-multimedia/recipes-support/libsrtp/{libsrtp_2.7.0.bb =>
> libsrtp_2.8.0.bb} (94%)
>  delete mode 100644
> meta-multimedia/recipes-support/srt/srt/0002-allow-build-with-cmake-4.patch
>  rename meta-multimedia/recipes-support/srt/{srt_1.5.4.bb => srt_1.5.6.bb}
> (90%)
>  rename meta-networking/recipes-support/dovecot/{dovecot_2.4.3.bb =>
> dovecot_2.4.4.bb} (97%)
>  rename meta-networking/recipes-support/libosip2/{libosip2_5.3.1.bb =>
> libosip2_5.3.2.bb} (88%)
>  create mode 100644
> meta-networking/recipes-support/openvpn/openvpn/CVE-2026-40215.patch
>  rename meta-networking/recipes-support/spice/{usbredir_0.14.0.bb =>
> usbredir_0.15.0.bb} (82%)
>  create mode 100644
> meta-networking/recipes-support/strongswan/strongswan/CVE-2026-47895.patch
>  rename meta-networking/recipes-support/tcpreplay/{tcpreplay_4.5.2.bb =>
> tcpreplay_4.5.5.bb} (89%)
>  rename meta-oe/dynamic-layers/meta-python/recipes-connectivity/netplan/{
> netplan_1.2.1.bb => netplan_1.2.2.bb} (97%)
>  create mode 100644
> meta-oe/recipes-connectivity/thrift/thrift/CVE-2026-48144.patch
>  create mode 100644
> meta-oe/recipes-connectivity/thrift/thrift/CVE-2026-55971.patch
>  create mode 100644
> meta-oe/recipes-connectivity/thrift/thrift/CVE-2026-58023.patch
>  create mode 100644
> meta-oe/recipes-connectivity/thrift/thrift/CVE-2026-58389.patch
>  rename meta-oe/recipes-connectivity/transmission/{transmission_4.1.1.bb
> => transmission_4.1.3.bb} (97%)
>  rename meta-oe/recipes-crypto/cryptsetup/{cryptsetup_2.8.6.bb =>
> cryptsetup_2.8.7.bb} (98%)
>  rename meta-oe/recipes-devtools/nodejs/{nodejs_22.23.1.bb =>
> nodejs_22.23.2.bb} (99%)
>  create mode 100644
> meta-oe/recipes-devtools/perl/libdbi-perl/CVE-2026-10879.patch
>  create mode 100644
> meta-oe/recipes-devtools/perl/libdbi-perl/CVE-2026-14380.patch
>  create mode 100644
> meta-oe/recipes-devtools/perl/libdbi-perl/CVE-2026-14739.patch
>  create mode 100644
> meta-oe/recipes-devtools/perl/libdbi-perl/CVE-2026-14740.patch
>  create mode 100644
> meta-oe/recipes-devtools/perl/libdbi-perl/CVE-2026-9698.patch
>  rename meta-oe/recipes-devtools/php/{php_8.5.8.bb => php_8.5.9.bb} (99%)
>  rename meta-oe/recipes-extended/valkey/{valkey_9.0.4.bb =>
> valkey_9.0.5.bb} (98%)
>  rename meta-oe/recipes-multimedia/libopus/{libopus_1.6.bb =>
> libopus_1.6.1.bb} (96%)
>  rename meta-oe/recipes-support/cjose/{cjose_0.6.2.4.bb =>
> cjose_0.6.2.7.bb} (88%)
>  create mode 100644 meta-oe/recipes-support/hdf5/files/CVE-2026-26197.patch
>  create mode 100644 meta-oe/recipes-support/hdf5/files/CVE-2026-26199.patch
>  delete mode 100644
> meta-oe/recipes-support/liboauth2/liboauth2/0001-build-guard-coverage-linker-flag-behind-CODE_COVERAG.patch
>  delete mode 100644
> meta-oe/recipes-support/liboauth2/liboauth2/0001-fix-clang-curl_easy_setopt-takes-a-long-not-an-int.patch
>  delete mode 100644
> meta-oe/recipes-support/liboauth2/liboauth2/0002-Fix-use-of-strchr-with-new-GCC.patch
>  rename meta-oe/recipes-support/liboauth2/{liboauth2_2.2.0.bb =>
> liboauth2_2.3.0.bb} (71%)
>  rename meta-oe/recipes-support/smarty/{smarty_5.8.0.bb => smarty_5.8.4.bb}
> (95%)
>  rename meta-oe/recipes-support/xrdp/{xrdp_0.10.6.bb => xrdp_0.10.6.1.bb}
> (98%)
>  rename meta-python/recipes-devtools/python/{python3-faker_40.13.0.bb =>
> python3-faker_40.14.1.bb} (93%)
>  rename meta-python/recipes-devtools/python/{python3-rarfile_4.2.bb =>
> python3-rarfile_4.4.bb} (82%)
>  rename meta-python/recipes-devtools/python/{python3-sh_2.2.2.bb =>
> python3-sh_2.2.4.bb} (84%)
>  rename meta-webserver/recipes-devtools/swagger-ui/{swagger-ui_5.32.8.bb
> => swagger-ui_5.32.11.bb} (94%)
>
> --
> 2.54.0
>
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#128877):
> https://lists.openembedded.org/g/openembedded-devel/message/128877
> Mute This Topic: https://lists.openembedded.org/mt/120682416/1997914
> Group Owner: [email protected]
> Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [
> [email protected]]
> -=-=-=-=-=-=-=-=-=-=-=-
>
>