linux/meta-openembedded.git/meta-networking/recipes-support, branch whinlatter

dovecot: mark CVE-2026-0394 patched

2026-04-24T15:43:20+00:00

Details: https://nvd.nist.gov/vuln/detail/CVE-2026-0394 As identified[1] by Debian, the recipe version already contains the commits that fix this. Due to this mark it as patched. [1]: https://security-tracker.debian.org/tracker/CVE-2026-0394 Signed-off-by: Gyorgy Sarvari Signed-off-by: Anuj Mittal

dovecot: patch CVE-2025-59031

2026-04-24T15:43:20+00:00

Details: https://nvd.nist.gov/vuln/detail/CVE-2025-59031 Backport the patch that was identified[1] by Debian. [1]: https://security-tracker.debian.org/tracker/CVE-2025-59031 Signed-off-by: Gyorgy Sarvari Signed-off-by: Anuj Mittal

strongswan: patch CVE-2026-25075

2026-04-21T03:27:47+00:00

Details: https://nvd.nist.gov/vuln/detail/CVE-2026-25075 Signed-off-by: Ankur Tyagi Signed-off-by: Anuj Mittal

ettercap: patch CVE-2026-3603

2026-03-26T04:59:23+00:00

Details: https://nvd.nist.gov/vuln/detail/CVE-2026-3606 Pick the commit that is marked to solve the related Github issue[1]. Its commit message also references the CVE ID explicitly. [1]: https://github.com/Ettercap/ettercap/issues/1297 Signed-off-by: Gyorgy Sarvari Signed-off-by: Anuj Mittal

libcacard: upgrade 2.8.1 -> 2.8.2

2026-03-09T11:44:07+00:00

Changelog: ========== - Sort certificates by underlying objects CKA_ID to provide deterministic object order - Avoid using uninitialized memory - Improve test coverage and build scripts - Improve compatibility with modern compilers (avoid strict warnings) Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj (cherry picked from commit bf0ea3fc286a432e6eb6c1e538d4db4a7455d7f4) Signed-off-by: Ankur Tyagi Signed-off-by: Anuj Mittal

unbound: patch CVE-2025-5994

2026-03-09T02:19:32+00:00

Details: https://nvd.nist.gov/vuln/detail/CVE-2025-5994 Backport the patch[1] provided by upstream, which is linked in the upstream advisory[2] referenced by the NVD report. Tests passed successfully in a locally prepared ptest image. [1]: https://nlnetlabs.nl/downloads/unbound/patch_CVE-2025-5994_2.diff [1]: https://nlnetlabs.nl/downloads/unbound/CVE-2025-5994.txt Signed-off-by: Gyorgy Sarvari Signed-off-by: Anuj Mittal

wireshark: patch CVE-2026-0962

2026-02-19T02:50:29+00:00

Details: https://nvd.nist.gov/vuln/detail/CVE-2026-0962 Backport the commit that is referenced in the related gitlab issue[1]. [1]: https://gitlab.com/wireshark/wireshark/-/issues/20945 Signed-off-by: Gyorgy Sarvari Signed-off-by: Anuj Mittal

linux-atm: fix SRC_URI

2026-02-03T02:40:29+00:00

The original SRC_URI's certificate has expired - change it to a working URL. Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj (cherry picked from commit a1baa1c027cba6ba86d92b4ad5c2db0b7bba0d1f) Signed-off-by: Anuj Mittal

ndpi: ignore CVE-2025-25066

2026-02-03T02:37:27+00:00

Details: https://nvd.nist.gov/vuln/detail/CVE-2025-25066 The vulnerable code was introduced in version 4.12[1], and the recipe version is not vulnerable yet. Due to this, ignore this CVE. [1]: https://github.com/ntop/nDPI/commit/b9348e9d6e0e754c4b17661c643ca258f1540ca1 Signed-off-by: Gyorgy Sarvari Signed-off-by: Anuj Mittal

libowfat: update SRC_URI

2026-01-21T04:58:20+00:00

The https link does not work anymore, it just refuses the connection. http still works though. Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj (cherry picked from commit 8cab2b2977f7cfbbf7bf1aa617070163e2eaf002) Signed-off-by: Anuj Mittal