Mirror of git.openembedded.org/meta-openembedded https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=scarthgap 2026-05-25T02:35:43+00:00 2026-05-25T02:35:43+00:00 Ankur Tyagi ankur.tyagi85@gmail.com 2026-05-23T12:39:03+00:00 urn:sha1:d8cc4e44001c7257273d290ce8c4496e93d32841 Also refreshed patches to resolve patch fuzz QA issue. Bug fix releases https://www.postgresql.org/docs/release/16.13/ https://www.postgresql.org/docs/release/16.14/ Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com> 2026-05-21T04:26:15+00:00 Hugo SIMELIERE (Schneider Electric) hsimeliere.opensource@witekio.com 2026-05-20T11:50:32+00:00 urn:sha1:59f8c396f936e99770e6876af1e68e27d696857c Pick patch from [1] as 3.9X upstream mirror backport of [2] mentioned in Debian report in [3]. [1] https://github.com/nss-dev/nss/commit/870d3b013e6b39540d14e67b3db89da5a96381bf [2] https://hg-edge.mozilla.org/projects/nss/rev/245385e16fa6 [3] https://security-tracker.debian.org/tracker/CVE-2026-2781 Signed-off-by: Hugo SIMELIERE (Schneider Electric) <hsimeliere.opensource@witekio.com> Reviewed-by: Bruno VERNAY <bruno.vernay@se.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com> 2026-05-21T03:27:48+00:00 Theo Gaige tgaige.opensource@witekio.com 2026-05-19T13:26:14+00:00 urn:sha1:7acc7441941f8af0bb78700f62e926da2bbc12c9 Backport upstream fix for CVE-2026-31323 [1]. [1] https://git.kernel.org/pub/scm/utils/dash/dash.git/commit/?id=0034bfe185d3d875cebace8cb3ca5c9dabf9e0f3 Signed-off-by: Theo Gaige <tgaige.opensource@witekio.com> Reviewed-by: Bruno Vernay <bruno.vernay@se.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com> 2026-05-21T03:27:48+00:00 Sudhir Dumbhare sudumbha@cisco.com 2026-05-14T12:48:24+00:00 urn:sha1:9f70f8d461abae94342da0e41ed978022e0eefe2 The vulnerability is Windows-specific and depends on loading configuration from C:\etc, which does not apply to Linux/Yocto builds Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-14821 https://github.com/advisories/GHSA-5jf9-8f86-jhvw https://www.libssh.org/security/advisories/CVE-2025-14821.txt Signed-off-by: Sudhir Dumbhare <sudumbha@cisco.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com> 2026-05-21T03:27:46+00:00 Ankur Tyagi ankur.tyagi85@gmail.com 2026-05-13T05:04:47+00:00 urn:sha1:100da99a04bff89f53822c220e223298cb780f66 Details: https://nvd.nist.gov/vuln/detail/CVE-2026-42798 Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com> 2026-05-21T03:27:46+00:00 Ankur Tyagi ankur.tyagi85@gmail.com 2026-05-13T05:04:46+00:00 urn:sha1:49a682f2eda7d3405347fe9665d435b04fd9cfa3 Details: https://nvd.nist.gov/vuln/detail/CVE-2026-41254 Backport the patches referenced by the NVD advisory. Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com> 2026-05-21T03:27:44+00:00 Ankur Tyagi ankur.tyagi85@gmail.com 2026-05-13T05:04:42+00:00 urn:sha1:92b579811512a187b39b6c8b866b7e9066a3b89c The impacted function mentioned in the nvd[1] was introduced in v12.82[2], hence we can ignore this CVE. [1]https://nvd.nist.gov/vuln/detail/CVE-2026-7580 [2]https://github.com/exiftool/exiftool/commit/280a7f0db71b5887be492d57723723cb196ad2f9 Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com> 2026-05-21T03:27:43+00:00 Jason Schonberg schonm@gmail.com 2026-05-08T07:42:49+00:00 urn:sha1:5fe0fb19e7fe5b0084cda56985203fc180f1607b This is a security release. Changelog: https://www.php.net/ChangeLog-8.php#8.2.31 Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com> 2026-05-21T03:27:43+00:00 Het Patel hetpat@cisco.com 2026-05-08T06:28:41+00:00 urn:sha1:aaa594e19e932d99f9de020a5f9f83077d0cf28d - Set CVE_PRODUCT to align with the NVD CPE and ensure correct CVE reporting. Signed-off-by: Het Patel <hetpat@cisco.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 7bc5268662f1428bdbca08e14d223aa6b62e87f3) Signed-off-by: Himanshu Jadon <hjadon@cisco.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com> 2026-05-21T03:27:42+00:00 Het Patel hetpat@cisco.com 2026-05-08T06:27:54+00:00 urn:sha1:9500d051954b2c42869085e093efc684f8bd5076 - Set CVE_PRODUCT to align with the NVD CPE and ensure correct CVE reporting. Signed-off-by: Het Patel <hetpat@cisco.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit a428ea90c08fc93ce5e39612974323aad26d1ef3) Signed-off-by: Himanshu Jadon <hjadon@cisco.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>