Deepak Rathore 12c7c6841f expat: fix CVE-2026-56132 ...

These patches apply the upstream fix shown in [2], its prerequisite
[1], the regression test in [3], and the follow-up cleanups in [4] and
[5], as referenced by [6].

[1] 3a4eaf47af
[2] 58400483d7
[3] 353919b3b9
[4] bca93b4ba9
[5] 08baa7ef9d
[6] https://nvd.nist.gov/vuln/detail/CVE-2026-56132

(From OE-Core rev: 0cba8f866ffe5b96dd7f2a8fe7b4c52264d382c5)

Signed-off-by: Deepak Rathore <deeratho@cisco.com>
Signed-off-by: Fabien Thomas <fabien.thomas@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>

2026-08-24 11:43:45 +01:00

..

base-files

base-files: Drop /bin/sh dependency

2025-02-14 06:38:54 -08:00

base-passwd

base-passwd: upgrade 3.6.3 -> 3.6.8

2026-05-04 13:57:31 +01:00

busybox

busybox: Fix CVE-2026-29004

2026-06-16 20:42:19 +01:00

coreutils

coreutils: set CVE_PRODUCT

2026-05-12 21:31:34 +01:00

dbus

dbus: gate user-session PACKAGECONFIG on systemd in DISTRO_FEATURES

2026-05-12 21:31:33 +01:00

dbus-wait

dbus-wait: bump srcrev

2024-01-07 12:24:57 +00:00

dropbear

dropbear: patch CVE-2019-6111

2026-01-26 09:45:38 +00:00

ell

ell: upgrade 0.63 -> 0.64

2024-05-03 06:12:21 -07:00

expat

expat: fix CVE-2026-56132

2026-08-24 11:43:45 +01:00

fts

fts: Fix typo in summary

2023-04-27 14:41:31 +01:00

gettext

gettext: fix a parallel build issue

2024-07-23 06:05:47 -07:00

glib-2.0

glib-2.0: fix CVE-2026-58014

2026-07-30 13:21:16 +01:00

glib-networking

glib-networking: fix CVE-2025-60019

2025-10-24 06:23:40 -07:00

glibc

glibc-testsuite: Do not generate SPDX

2026-07-22 21:08:55 +01:00

ifupdown

ifupdown: install missing directories

2023-06-28 23:02:50 +01:00

images

build-appliance-image: Update to scarthgap head revisions

2026-07-02 13:52:11 +01:00

init-ifupdown

init-ifupdown: modify interfaces for busybox

2024-04-12 17:27:53 +01:00

initrdscripts

initramfs-framework: fix typos

2024-08-26 05:18:44 -07:00

initscripts

initscripts: add function log_success_msg/log_failure_msg/log_warning_msg

2025-05-02 08:20:12 -07:00

kbd

kbd: update license

2024-04-14 06:28:02 +01:00

libcgroup

libcgroup_3.1.0: fix build on non-systemd systems

2024-05-23 08:55:01 -07:00

libxcrypt

libxcrypt: Use configure knob to disable warnings as errors

2026-05-04 13:57:32 +01:00

libxml

libxml2: Fix CVE-2026-11979

2026-07-30 13:21:15 +01:00

meta

cve-update: Avoid NFS caching issues

2026-07-20 09:04:33 +01:00

musl

musl: patch CVE-2025-26519

2025-11-26 07:50:35 -08:00

ncurses

ncurses: fix for CVE-2025-69720

2026-05-04 13:57:31 +01:00

netbase

netbase: upgrade 6.3 -> 6.4

2022-11-08 22:47:16 +00:00

newlib

libgloss: Do not apply non-existent patch

2024-06-14 05:19:22 -07:00

os-release

os-release: Fix VERSION_CODENAME in case it is empty

2024-08-26 05:18:44 -07:00

ovmf

ovmf: fix CVE-2024-38798

2026-05-12 21:31:33 +01:00

packagegroups

packagegroup-core-boot: recommend ifupdown

2024-04-12 17:27:53 +01:00

psplash

psplash: upgrade to latest revision

2023-12-06 22:55:49 +00:00

readline

readline: Apply patches from readline-8.2-patches

2024-03-30 22:25:43 +00:00

seatd

seatd: upgrade 0.7.0 -> 0.8.0

2023-09-26 10:35:27 +01:00

sysfsutils

sysfsutils: don't install to base_libdir

2023-06-21 18:38:25 +01:00

systemd

systemd: update musl specific patch to apply

2026-06-10 14:35:20 +01:00

sysvinit

sysvinit: backport patch for fixing one issue of pidof

2024-11-26 06:11:30 -08:00

ttyrun

ttyrun: define CVE_PRODUCT

2024-06-05 05:57:12 -07:00

udev

udev-extraconf: fix network.sh script did not configure hotplugged interfaces

2024-11-26 06:11:30 -08:00

update-rc.d

update-rc.d: add +git to PV

2024-06-05 05:57:12 -07:00

util-linux

util-linux: fix CVE-2026-13595

2026-07-22 21:08:55 +01:00

volatile-binds

volatile-binds: Calculate the name of the /var/lib service

2023-10-30 08:50:46 +00:00

zlib

zlib: Fix CVE-2026-27171

2026-03-16 10:22:06 +00:00