Mirror of git.openembedded.org/meta-openembedded https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=master 2026-06-08T01:21:50+00:00 2026-06-08T01:21:50+00:00 Abhishek Bachiphale Abhishek.Bachiphale@windriver.com 2026-06-04T20:52:57+00:00 urn:sha1:44ec3710d58879a7e9e5f2de97cd81c3211b522c ChangeLog: https://dnsmasq.org/CHANGELOG - Update checksum - Remove obsolete patches - Verified build and runtime functionality Security fixes (included upstream in 2.93) : - CVE-2026-2291 - CVE-2026-4890 - CVE-2026-4891 - CVE-2026-4892 - CVE-2026-4893 - CVE-2026-5172 - Removed patches corresponding to the above CVEs as fixes are now part of upstream release Signed-off-by: Abhishek Bachiphale <Abhishek.Bachiphale@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> 2026-06-08T01:21:33+00:00 Filipe Pires filipe.pires@konsulko.com 2026-05-30T12:06:03+00:00 urn:sha1:50ae207ad79c9804986fdb6bf6045aa085522c7e Signed-off-by: Filipe Pires <filipe.pires@konsulko.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> 2026-05-31T10:08:55+00:00 Wang Mingyu wangmy@fujitsu.com 2026-05-27T09:48:04+00:00 urn:sha1:861e56d1ee61b4fff44c7f61d6dff2b96b7037dc Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> 2026-05-31T10:08:55+00:00 Wang Mingyu wangmy@fujitsu.com 2026-05-27T09:48:03+00:00 urn:sha1:faf6da8c0500b9efc471672d0cf34edff1022646 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> 2026-05-31T10:08:49+00:00 Wang Mingyu wangmy@fujitsu.com 2026-05-27T09:47:26+00:00 urn:sha1:dfbd7a910cda41d8f39e42f1437570c46fc2e7a6 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> 2026-05-31T10:08:49+00:00 Wang Mingyu wangmy@fujitsu.com 2026-05-27T09:47:24+00:00 urn:sha1:aab5fcaf7983875b9f9e84acea56891e755aa536 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> 2026-05-21T04:18:32+00:00 Wang Mingyu wangmy@fujitsu.com 2026-05-19T11:38:47+00:00 urn:sha1:05fe4e2bfc5a1b278e367b355e601c81183eecf2 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> 2026-05-21T04:18:31+00:00 Abhishek Bachiphale Abhishek.Bachiphale@windriver.com 2026-05-18T17:13:36+00:00 urn:sha1:44c8962f48a67fbe0fbc8fd830d2f51ae15541a4 A buffer overflow in dnsmasq’s extract_addresses() function allows an attacker to trigger a heap out-of-bounds read and crash by exploiting a malformed DNS response, enabling extract_name() to advance the pointer past the record’s end. Reference: [ https://nvd.nist.gov/vuln/detail/CVE-2026-5172 ] Signed-off-by: Abhishek Bachiphale <Abhishek.Bachiphale@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> 2026-05-21T04:18:31+00:00 Abhishek Bachiphale Abhishek.Bachiphale@windriver.com 2026-05-18T17:13:35+00:00 urn:sha1:b4c48536242d9aa7d1eaf968152fc83edea41923 An information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks via a crafted DNS packet with RFC 7871 client subnet information. Reference: [ https://nvd.nist.gov/vuln/detail/CVE-2026-4893 ] Signed-off-by: Abhishek Bachiphale <Abhishek.Bachiphale@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> 2026-05-21T04:18:31+00:00 Abhishek Bachiphale Abhishek.Bachiphale@windriver.com 2026-05-18T17:13:34+00:00 urn:sha1:21c3d7eb6f94f967b5e02fc61cc027d3893764a0 A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows local attackers to execute arbitrary code with root privileges via a crafted DHCPv6 packet. Reference: [ https://nvd.nist.gov/vuln/detail/CVE-2026-4892 ] Signed-off-by: Abhishek Bachiphale <Abhishek.Bachiphale@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>