linux/meta-openembedded.git, branch whinlatter

lshw: Fix binmerge

2026-04-24T15:43:21+00:00

In case $sbindir = $bindir we have to pass this setting to make. Signed-off-by: Jörg Sommer Signed-off-by: Khem Raj (cherry picked from commit d09f50438f5d6bda37413e583776f177c3ccd343) Signed-off-by: Anuj Mittal

libdvdnav: use https for fetching code

2026-04-24T15:43:21+00:00

Signed-off-by: Markus Volk Signed-off-by: Khem Raj (cherry picked from commit b50fbdd66b5d93fed47e62271048372bd97b18f3) Signed-off-by: Anuj Mittal

libdvdcss: use https for fetching code

2026-04-24T15:43:21+00:00

Signed-off-by: Markus Volk Signed-off-by: Khem Raj (cherry picked from commit ae92a2993cb1d9289ed45859c9891b810c62c1dc) Signed-off-by: Anuj Mittal

libdvdread: use https for fetching code

2026-04-24T15:43:21+00:00

Signed-off-by: Markus Volk Signed-off-by: Khem Raj (cherry picked from commit 7bf89d06a41405b48fa3af260da36bc686973afc) Signed-off-by: Anuj Mittal

jq: patch CVE-2026-39979

2026-04-24T15:43:21+00:00

Details: https://nvd.nist.gov/vuln/detail/CVE-2026-39979 Backport the patch that is referenced by the NVD advisory.y Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj (cherry picked from commit 2b1e34f0f51b103fa37f163cdccdeebf821ac7c1) Signed-off-by: Anuj Mittal

jq: patch CVE-2026-33948

2026-04-24T15:43:21+00:00

Details: https://nvd.nist.gov/vuln/detail/CVE-2026-33948 Backport the patch that is referenced by the NVD advisory. Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj (cherry picked from commit 8d399af3337b25d71f8cd4308b9788ac4e88b730) Signed-off-by: Anuj Mittal

jq: patch CVE-2026-33947

2026-04-24T15:43:20+00:00

Details: https://nvd.nist.gov/vuln/detail/CVE-2026-33947 Backport the patch that is referenced by the NVD report. Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj (cherry picked from commit 525e18ce214213193d9a280de3bfd2deb847110e) Signed-off-by: Anuj Mittal

jq: patch CVE-2026-32316

2026-04-24T15:43:20+00:00

Details: https://nvd.nist.gov/vuln/detail/CVE-2026-32316 Backport the patch that is referenced by the NVD advisory. Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj (cherry picked from commit e94ab85126f12d77253107084dc8463c79b3e776) Signed-off-by: Anuj Mittal

jq: Use Git to fetch the code

2026-04-24T15:43:20+00:00

There is a bug (see https://github.com/jqlang/jq/issues/434), which results in an empty version being used if autoreconf is run on the jq sources when using a release tar ball. The incorrect assumption is that autoreconf is only used when fetching the code using Git. The empty version results in an incorrect libjq.pc file being created where the version is not set, which results in, e.g., `pkgconf --libs 'libjq > 1.6'` failing even if version 1.8.1 of jq is actually installed. Switch to fetching the code using Git to workaround the bug. Signed-off-by: Peter Kjellerstedt Signed-off-by: Khem Raj (cherry picked from commit ed33569f822a3a8d41f82f6980a046d17aca37d5) Signed-off-by: Anuj Mittal

libgphoto2: patch CVE-2026-40341

2026-04-24T15:43:20+00:00

Details: https://nvd.nist.gov/vuln/detail/CVE-2026-40341 Backport the patch referenced by the NVD advisory. Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj (cherry picked from commit de5f93f95d420447043cedbedf798560925c44e1) Signed-off-by: Anuj Mittal