Mirror of git.yoctoproject.org/poky https://git.enea.com/cgit/linux/poky.git/atom?h=scarthgap 2026-05-12T20:31:33+00:00 2026-05-12T20:31:33+00:00 Sudhir Dumbhare sudumbha@cisco.com 2026-04-22T02:57:52+00:00 urn:sha1:af4fdac1ff06b837f8db1e829f97e9814d440eb4 Pick the patch [1] as mentioned in [2]. [1] https://github.com/pnggroup/libpng/commit/aba9f18eba870d14fb52c5ba5d73451349e339c3 [2] https://nvd.nist.gov/vuln/detail/CVE-2026-33636 Reference: https://security-tracker.debian.org/tracker/CVE-2026-33636 https://www.suse.com/security/cve/CVE-2026-33636.html (From OE-Core rev: be55a3bdc140d4882fab933f311c4b80912c3a77) Signed-off-by: Sudhir Dumbhare <sudumbha@cisco.com> Signed-off-by: Fabien Thomas <fabien.thomas@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev> 2026-02-27T17:45:06+00:00 Peter Marko peter.marko@siemens.com 2026-02-17T21:05:41+00:00 urn:sha1:d95e14f86c18454d48baa48415de447343595b1d Backport patch mentioned in NVD CVE report. (From OE-Core rev: dd08ef6de714ea06d6b6255faca2ddbc66450977) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2026-02-16T09:52:34+00:00 Peter Marko peter.marko@siemens.com 2026-01-15T00:25:24+00:00 urn:sha1:005e0f6dafc75339ba36fe663ae72ef09fd4cc81 Pick comit per [1]. [1] https://github.com/pnggroup/libpng/security/advisories/GHSA-vgjq-8cw5-ggw8 (From OE-Core rev: fc0f0ecb694ae3042cff4472c62c78a7389662c6) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2026-02-16T09:52:34+00:00 Peter Marko peter.marko@siemens.com 2026-01-15T00:25:23+00:00 urn:sha1:f824456616843cb2b6bbb901c8ca26c4db1db275 Pick commit per [1]. This CVE is regression of fix for CVE-2025-65018. [1] https://security-tracker.debian.org/tracker/CVE-2026-22695 (From OE-Core rev: cdfeb4e55f856b1020caf58f380d3a1e7eb5cd97) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2025-12-17T16:48:37+00:00 Peter Marko peter.marko@siemens.com 2025-12-06T23:42:31+00:00 urn:sha1:0549c04c9f56b131256171caa43fbaba3a0251d1 Pick patches per nvd report [1] and github advisory [2]. [1] https://nvd.nist.gov/vuln/detail/CVE-2025-66293 [2] https://github.com/pnggroup/libpng/security/advisories/GHSA-9mpm-9pxh-mg4f (From OE-Core rev: f5f0af82d8775180d76e6448a14f74cc70edf963) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2025-12-05T15:13:42+00:00 Peter Marko peter.marko@siemens.com 2025-11-27T18:03:25+00:00 urn:sha1:295e960b85c68089eaaf987f3f5ea144b62c5d25 Pick commit per NVD report. Add two patches to apply it cleanly. (From OE-Core rev: 4e03bed20bceb455cb46dcf9564ad5a8525b207d) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2025-12-05T15:13:42+00:00 Peter Marko peter.marko@siemens.com 2025-11-27T18:03:24+00:00 urn:sha1:ea30165e8be617d4130bdd109304f3c2ebba5824 Pick commit per NVD report. (From OE-Core rev: e8fbb7521e0113c467e07ba473a46612709c5311) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2025-12-05T15:13:42+00:00 Peter Marko peter.marko@siemens.com 2025-11-27T18:03:23+00:00 urn:sha1:eed16ae61397d8d77af378641253ffebf9cfee4d Pick commit per NVD report. (From OE-Core rev: f3bdbd782eed2b597927df489a7d38a22fbba5ed) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2025-12-05T15:13:42+00:00 Peter Marko peter.marko@siemens.com 2025-11-27T18:03:22+00:00 urn:sha1:b0b3210686a7c0e99d3c88ef1cc9a337d0a48afd Pick commit per NVD report. Add two patches to apply it cleanly. (From OE-Core rev: 285a495b8b0e8fa93a0a0884f466f1adca76a28a) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com> 2025-06-20T15:38:12+00:00 Poonam Jadhav ppjadhav456@gmail.com 2025-06-16T04:46:04+00:00 urn:sha1:39f1520cd7bc5cb01f47faa5cc3af50621418cda Install libpng test-suite to run it as a ptest. As the test-suite takes more than 30 seconds to run, add libpng-ptest to PTESTS_SLOW in ptest-packagelists.inc (From OE-Core rev: 1b52b7ebe5f8fb490088622181cdb95e6b7f5a29) Signed-off-by: Poonam Jadhav <poonam.jadhav@kpit.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>