Jaipaul Cheernam 3dcbd1b54b systemd: Fix CVE-2026-29111 ...

Backport patches from upstream systemd to fix CVE-2026-29111, where
systemd (as PID 1) hits an assert and freezes execution when an
unprivileged IPC API call is made with spurious data.

Pick patches from [1], [2], [3] and [4] as referenced in [5].

Note: As scarthgap is using 255 version picked fixes from 257

[1] 20021e7686
[2] 7ac3220213
[3] 2116700657
[4] 54588d2ded
[5] https://security-tracker.debian.org/tracker/CVE-2026-29111

(From OE-Core rev: b229b0b6c4004c6588e684d790343df249cedd57)

Signed-off-by: Jaipaul Cheernam <jaipaul.cheernam@est.tech>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2026-09-04 10:39:10 +01:00

..

base-files

base-files: Drop /bin/sh dependency

2025-02-14 06:38:54 -08:00

base-passwd

base-passwd: upgrade 3.6.3 -> 3.6.8

2026-05-04 13:57:31 +01:00

busybox

busybox: patch CVE-2026-38754

2026-08-24 11:43:45 +01:00

coreutils

coreutils: set CVE_PRODUCT

2026-05-12 21:31:34 +01:00

dbus

dbus: gate user-session PACKAGECONFIG on systemd in DISTRO_FEATURES

2026-05-12 21:31:33 +01:00

dbus-wait

dbus-wait: bump srcrev

2024-01-07 12:24:57 +00:00

dropbear

dropbear: patch CVE-2019-6111

2026-01-26 09:45:38 +00:00

ell

ell: upgrade 0.63 -> 0.64

2024-05-03 06:12:21 -07:00

expat

expat: fix CVE-2026-56132

2026-08-24 11:43:45 +01:00

fts

fts: Fix typo in summary

2023-04-27 14:41:31 +01:00

gettext

gettext: fix a parallel build issue

2024-07-23 06:05:47 -07:00

glib-2.0

glib-2.0: fix CVE-2026-58015

2026-08-28 09:52:24 +01:00

glib-networking

glib-networking: fix CVE-2025-60019

2025-10-24 06:23:40 -07:00

glibc

glibc: fix CVE-2026-5435

2026-09-04 10:39:10 +01:00

ifupdown

ifupdown: install missing directories

2023-06-28 23:02:50 +01:00

images

build-appliance-image: Update to scarthgap head revision

2026-08-28 09:52:43 +01:00

init-ifupdown

init-ifupdown: modify interfaces for busybox

2024-04-12 17:27:53 +01:00

initrdscripts

initramfs-framework: fix typos

2024-08-26 05:18:44 -07:00

initscripts

initscripts: add function log_success_msg/log_failure_msg/log_warning_msg

2025-05-02 08:20:12 -07:00

kbd

kbd: update license

2024-04-14 06:28:02 +01:00

libcgroup

libcgroup_3.1.0: fix build on non-systemd systems

2024-05-23 08:55:01 -07:00

libxcrypt

libxcrypt: Use configure knob to disable warnings as errors

2026-05-04 13:57:32 +01:00

libxml

libxml2: Fix CVE-2026-11979

2026-07-30 13:21:15 +01:00

meta

cve-update: Avoid NFS caching issues

2026-07-20 09:04:33 +01:00

musl

musl: patch CVE-2025-26519

2025-11-26 07:50:35 -08:00

ncurses

ncurses: fix for CVE-2025-69720

2026-05-04 13:57:31 +01:00

netbase

netbase: upgrade 6.3 -> 6.4

2022-11-08 22:47:16 +00:00

newlib

libgloss: Do not apply non-existent patch

2024-06-14 05:19:22 -07:00

os-release

os-release: Fix VERSION_CODENAME in case it is empty

2024-08-26 05:18:44 -07:00

ovmf

ovmf: fix CVE-2024-38798

2026-05-12 21:31:33 +01:00

packagegroups

packagegroup-core-boot: recommend ifupdown

2024-04-12 17:27:53 +01:00

psplash

psplash: upgrade to latest revision

2023-12-06 22:55:49 +00:00

readline

readline: Apply patches from readline-8.2-patches

2024-03-30 22:25:43 +00:00

seatd

seatd: upgrade 0.7.0 -> 0.8.0

2023-09-26 10:35:27 +01:00

sysfsutils

sysfsutils: don't install to base_libdir

2023-06-21 18:38:25 +01:00

systemd

systemd: Fix CVE-2026-29111

2026-09-04 10:39:10 +01:00

sysvinit

sysvinit: backport patch for fixing one issue of pidof

2024-11-26 06:11:30 -08:00

ttyrun

ttyrun: define CVE_PRODUCT

2024-06-05 05:57:12 -07:00

udev

udev-extraconf: fix network.sh script did not configure hotplugged interfaces

2024-11-26 06:11:30 -08:00

update-rc.d

update-rc.d: add +git to PV

2024-06-05 05:57:12 -07:00

util-linux

util-linux: fix CVE-2026-13595

2026-07-22 21:08:55 +01:00

volatile-binds

volatile-binds: Calculate the name of the /var/lib service

2023-10-30 08:50:46 +00:00

zlib

zlib: Fix CVE-2026-27171

2026-03-16 10:22:06 +00:00