Mirror of git.yoctoproject.org/poky https://git.enea.com/cgit/linux/poky.git/atom?h=kirkstone 2026-04-10T10:53:18+00:00 2026-04-10T10:53:18+00:00 Hitendra Prajapati hprajapati@mvista.com 2026-04-08T11:31:35+00:00 urn:sha1:4a4e0944fa5cc9ed1bc63949821aa0a042916a27 Pick patch from [1] also mentioned in [2] [1] https://github.com/vim/vim/commit/9b7dfa2948c9e1e5e32a5812812d580c7879f4a0 [2] https://nvd.nist.gov/vuln/detail/CVE-2026-28419 (From OE-Core rev: 550a2a5e2d3b5aa08f50b89a0127187c3f76854c) Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev> 2026-04-10T10:53:18+00:00 Hitendra Prajapati hprajapati@mvista.com 2026-04-08T11:31:19+00:00 urn:sha1:c1c8289d56ef5e185be7e49504573b6c6cae54f7 Pick patch from [1] also mentioned in [2] [1] https://github.com/vim/vim/commit/f6a7f469a9c0d09e84cd6cb46c3a9e76f684da2d [2] https://nvd.nist.gov/vuln/detail/CVE-2026-28418 (From OE-Core rev: 8cadabb525aa1ea57aa0316240ac8f9ec09161d9) Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev> 2026-04-10T10:53:18+00:00 Hitendra Prajapati hprajapati@mvista.com 2026-04-08T11:28:44+00:00 urn:sha1:0f1a5cc7a141ac403dc92f5a32ea8290e5c01d31 Pick patch from [1] also mentioned in [2] [1] https://github.com/vim/vim/commit/c5f312aad8e4179e437f81ad39a860cd0ef11970 [2] https://nvd.nist.gov/vuln/detail/CVE-2026-26269 (From OE-Core rev: a0a559aa8f3f556eec648f8f0fe3cb167011e0b7) Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev> 2026-04-10T10:53:18+00:00 Hitendra Prajapati hprajapati@mvista.com 2026-04-08T11:26:54+00:00 urn:sha1:7e09c83dd879007742cc6f804dcd66ea32c42386 Pick patch from [1] also mentioned in [2] [1] https://github.com/vim/vim/commit/0714b15940b245108e6e9d7aa2260dd849a26fa9 [2] https://nvd.nist.gov/vuln/detail/CVE-2026-25749 (From OE-Core rev: ee5c47fdfed865ef7ddc18054cb6cebdb7b0e4cb) Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev> 2026-04-10T10:53:18+00:00 Yoann Congal yoann.congal@smile.fr 2026-04-09T11:10:53+00:00 urn:sha1:e2b0ffbd78a9f36e2f9b635ee7314656eaee364d This corresponds to the master commit 139102a73d41 ("recipes: Default to https git protocol where possible"). But only for the git.yoctoproject.org and git.openembedded.org repos. > The recommendation from server maintainers is that the https protocol > is both faster and more reliable than the dedicated git protocol at this point. > Switch to it where possible. (From OE-Core rev: c1b208babae70244ab062b2e4674b0309fbd65e5) Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev> 2026-04-10T10:53:18+00:00 Vijay Anusuri vanusuri@mvista.com 2026-03-21T09:47:23+00:00 urn:sha1:e728c23ab3177998c3eb65db5f0951e822db589c pick patch from ubuntu per [1] [1] https://launchpad.net/ubuntu/+archive/primary/+sourcefiles/curl/7.81.0-1ubuntu1.23/curl_7.81.0-1ubuntu1.23.debian.tar.xz [2] https://ubuntu.com/security/CVE-2026-3784 [3] https://curl.se/docs/CVE-2026-3784.html (From OE-Core rev: 659a32145680054823581ddcf6412410247df108) Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev> 2026-04-10T10:53:18+00:00 Vijay Anusuri vanusuri@mvista.com 2026-03-21T09:47:22+00:00 urn:sha1:6bdb27cfe1514924897beadc7b83092fa12ce495 CVE-2026-3783-pre1.patch is dependency patch for CVE-2026-3783.patch cherry picked from upstream commit: https://github.com/curl/curl/commit/d7b970e46ba29a7e558e21d19f485977ffed6266 https://github.com/curl/curl/commit/e3d7401a32a46516c9e5ee877 Reference: https://curl.se/docs/CVE-2026-3783.html (From OE-Core rev: a904e52def0a789ce20f58bcbf2edd7b762c1c1e) Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev> 2026-04-10T10:53:18+00:00 Vijay Anusuri vanusuri@mvista.com 2026-03-21T09:47:21+00:00 urn:sha1:33fab72fa7a093107ba9d871dadb8e2fd9660b0e pick patches from ubuntu per [1] [1] https://launchpad.net/ubuntu/+archive/primary/+sourcefiles/curl/7.81.0-1ubuntu1.23/curl_7.81.0-1ubuntu1.23.debian.tar.xz [2] https://ubuntu.com/security/CVE-2026-1965 [3] https://curl.se/docs/CVE-2026-1965.html (From OE-Core rev: adb8a05ef19faf76c7c4a3ea68600aa443861a95) Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev> 2026-04-10T10:53:18+00:00 Vijay Anusuri vanusuri@mvista.com 2026-03-21T09:47:20+00:00 urn:sha1:f6d2fd38dce12a4e1d2a919b37e732a25985eae8 Pick commit per [1]. [1] https://curl.se/docs/CVE-2025-14524.html [2] https://security-tracker.debian.org/tracker/CVE-2025-14524 (From OE-Core rev: 69b98b1f2bd0717b0ab7adcb5d8aa9b84ae2f48b) Signed-off-by: Amaury Couderc <amaury.couderc@est.tech> Signed-off-by: Paul Barker <paul@pbarker.dev> Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> [YC: cherry-picked from scarthgap commit 951113a6e8185969444b5e28292f23434dba1f6c] Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev> 2026-04-10T10:53:18+00:00 Vijay Anusuri vanusuri@mvista.com 2026-04-02T07:15:59+00:00 urn:sha1:78749ad27d301f56c605fbbb20deba6a631e6e71 Pick patch as per [1] [1] https://sqlite.org/src/info/3d459f1fb1bd1b5e [2] https://sqlite.org/forum/forumpost/761eac3c82 [3] https://gist.github.com/cnwangjihe/f496393f30f5ecec5b18c8f5ab072054 (From OE-Core rev: c83cd0147548921f87d4167f6a4a7c58ddc8600f) Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev>