Mirror of git.openembedded.org/meta-openembedded https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=scarthgap 2026-05-21T04:26:21+00:00 2026-05-21T04:26:21+00:00 Hugo SIMELIERE (Schneider Electric) hsimeliere.opensource@witekio.com 2026-05-20T12:29:08+00:00 urn:sha1:f1d78e95277e4a74a71a75098da88edb2927b9a6 Pick patch from [1] dnsmasq 2.90 debian bookworm pacthes. [1] https://sources.debian.org/src/dnsmasq/2.90-4~deb12u2/debian/patches/CVE-2026-5172.patch Signed-off-by: Hugo SIMELIERE (Schneider Electric) <hsimeliere.opensource@witekio.com> Reviewed-by: Bruno VERNAY <bruno.vernay@se.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com> 2026-05-21T04:26:20+00:00 Hugo SIMELIERE (Schneider Electric) hsimeliere.opensource@witekio.com 2026-05-20T12:29:07+00:00 urn:sha1:7dda8e9bd75855300f55faa2d803deebac226d43 Pick patch from [1] dnsmasq 2.90 debian bookworm pacthes. [1] https://sources.debian.org/src/dnsmasq/2.90-4~deb12u2/debian/patches/CVE-2026-4893.patch Signed-off-by: Hugo SIMELIERE (Schneider Electric) <hsimeliere.opensource@witekio.com> Reviewed-by: Bruno VERNAY <bruno.vernay@se.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com> 2026-05-21T04:26:20+00:00 Hugo SIMELIERE (Schneider Electric) hsimeliere.opensource@witekio.com 2026-05-20T12:29:06+00:00 urn:sha1:e614003e0af184d59b3eb85658149c8bef2ed50e Pick patch from [1] dnsmasq 2.90 debian bookworm pacthes. [1] https://sources.debian.org/src/dnsmasq/2.90-4~deb12u2/debian/patches/CVE-2026-4892.patch Signed-off-by: Hugo SIMELIERE (Schneider Electric) <hsimeliere.opensource@witekio.com> Reviewed-by: Bruno VERNAY <bruno.vernay@se.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com> 2026-05-21T04:26:19+00:00 Hugo SIMELIERE (Schneider Electric) hsimeliere.opensource@witekio.com 2026-05-20T12:29:05+00:00 urn:sha1:cab6f6c603ee2b35c72f9f7e70bf22e23706c9a0 Pick patch from [1] dnsmasq 2.90 debian bookworm pacthes. [1] https://sources.debian.org/src/dnsmasq/2.90-4~deb12u2/debian/patches/CVE-2026-4891.patch Signed-off-by: Hugo SIMELIERE (Schneider Electric) <hsimeliere.opensource@witekio.com> Reviewed-by: Bruno VERNAY <bruno.vernay@se.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com> 2026-05-21T03:27:48+00:00 Hitendra Prajapati hprajapati@mvista.com 2026-05-14T13:15:41+00:00 urn:sha1:a587f53a0eff978246f7aec466fb42588c339056 Pick patch according to [1] [1] https://download.strongswan.org/security/CVE-2026-35334 [2] https://www.strongswan.org/blog/2026/04/22/strongswan-vulnerability-(cve-2026-35334).html [3] https://security-tracker.debian.org/tracker/CVE-2026-35334 Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com> 2026-05-21T03:27:43+00:00 Het Patel hetpat@cisco.com 2026-05-08T06:29:14+00:00 urn:sha1:90a0e3bf89582e3ce7afc7d7d598ab467d44004d - Added 'vmware:open_vm_tools' to CVE_PRODUCT to align with the NVD CPE and ensure accurate CVE reporting. Signed-off-by: Het Patel <hetpat@cisco.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 9b69587ecb92b3acb7b3092217357de9c1be14e6) Signed-off-by: Himanshu Jadon <hjadon@cisco.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com> 2026-05-21T03:27:37+00:00 Hitendra Prajapati hprajapati@mvista.com 2026-05-05T12:24:31+00:00 urn:sha1:fb4ebd12001257d4ba0d88173c6bc5887e974f9b Pick patch from [1] also mentioned at NVD report in [2] [1] https://gitlab.com/wireshark/wireshark/-/issues/20884 [2] https://nvd.nist.gov/vuln/detail/CVE-2025-13946 [3] https://security-tracker.debian.org/tracker/CVE-2025-13946 Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com> 2026-04-13T07:10:21+00:00 Jackson James jackson.james9803@gmail.com 2026-04-10T06:41:12+00:00 urn:sha1:fc30bb5eedfa89070a112425bcf8423a7b2aa998 Backport complete patch to fix CVE-2025-11411 The existing scarthgap patch is a partial backport with hardcoded logic, causing incorrect behavior and ptest failures. Backport the full upstream fix along with the follow-up patch to ensure correct functionality. Add below patch to fix 0001-CVE-2025-11411-1.patch 0002-CVE-2025-11411-2.patch Signed-off-by: Jackson James <jacksonj2@kpit.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com> 2026-04-03T09:30:48+00:00 Vijay Anusuri vanusuri@mvista.com 2026-04-02T11:58:57+00:00 urn:sha1:1ad0d777d1de1769e5995eb806f7ae5c15d0be54 Pick patch according to [1] [1] https://download.strongswan.org/security/CVE-2026-25075/ [2] https://www.strongswan.org/blog/2026/03/23/strongswan-vulnerability-(cve-2026-25075).html Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com> 2026-03-24T03:22:09+00:00 Gyorgy Sarvari skandigraun@gmail.com 2026-03-11T08:52:21+00:00 urn:sha1:75e3ed18503126c3fadbadc2084d5f02493470b7 Details: https://nvd.nist.gov/vuln/detail/CVE-2026-3606 Pick the commit that is marked to solve the related Github issue[1]. Its commit message also references the CVE ID explicitly. [1]: https://github.com/Ettercap/ettercap/issues/1297 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>