mirrors/poky
1
0
Fork 0
mirror of https://git.yoctoproject.org/poky synced 2026-09-20 12:49:33 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
9b68c3fb716d5297e6c6c7fb41f5baaaa55b0ea5
poky/meta/recipes-support
History
Sudhir Dumbhare 75764cf5d7 gnutls: fix CVE-2026-42009 
This patch applies the upstream fix [1] and [2], as referenced in [3],
to address a DTLS packet reordering flaw where duplicate sequence numbers
could lead to unstable ordering or undefined behavior.

[1] f01e21441e
[2] f341441fad
[3] https://security-tracker.debian.org/tracker/CVE-2026-42009

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2026-42009

(From OE-Core rev: 8f3c2010a6bb4b2e7f4508a3ea4c2717294d75a3)

Signed-off-by: Sudhir Dumbhare <sudumbha@cisco.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
2026-07-30 13:21:16 +01:00
..
appstream
appstream: upgrade 1.0.2 -> 1.0.3
2024-06-20 06:29:43 -07:00
apr
apr: Add CVE_PRODUCT to support product name
2026-06-26 16:55:54 +01:00
argp-standalone
argp-standalone: replace with a maintained fork
2022-11-01 17:34:59 +00:00
aspell
aspell: upgrade 0.60.8 -> 0.60.8.1
2024-01-01 23:11:42 +00:00
atk
at-spi2-core: upgrade 2.50.0 -> 2.50.1
2024-02-03 22:08:25 +00:00
attr
acl: upgrade 2.3.1 -> 2.3.2
2024-03-07 17:25:02 +00:00
bash-completion
bash-completion: upgrade 2.11 -> 2.12.0
2024-03-01 09:28:51 +00:00
bmaptool
bmaptool: update to latest
2024-03-23 10:18:20 +00:00
boost
boost: fix do_fetch error
2025-01-25 06:20:37 -08:00
ca-certificates
ca-certificates: upgrade 20260223 -> 20260601
2026-07-22 21:08:55 +01:00
consolekit
consolekit: Disable incompatible-pointer-types warning as error
2024-06-20 06:29:43 -07:00
curl
curl: fix CVE-2026-6276
2026-07-20 09:04:32 +01:00
db
db: Pin to use C99 std
2026-05-04 13:57:33 +01:00
debianutils
debianutils: upgrade 5.15 -> 5.16
2024-01-21 12:27:12 +00:00
diffoscope
diffoscope: upgrade 253 -> 259
2024-03-07 17:25:02 +00:00
dos2unix
dos2unix: upgrade 7.5.1 -> 7.5.2
2024-02-03 22:08:26 +00:00
enchant
enchant2: fix do_fetch error
2024-11-18 06:59:35 -08:00
fribidi
fribidi: upgrade 1.0.13 -> 1.0.14
2024-07-17 05:36:13 -07:00
gdbm
gdbm: Use C11 standard
2025-09-01 08:30:56 -07:00
gmp
gmp: Fix build with older gcc versions
2025-09-01 08:30:56 -07:00
gnome-desktop-testing
recipes: Default to https git protocol where possible
2023-05-05 11:07:25 +01:00
gnupg
gnupg: upgrade 2.4.8 -> 2.4.9
2026-06-10 14:35:20 +01:00
gnutls
gnutls: fix CVE-2026-42009
2026-07-30 13:21:16 +01:00
gpgme
gpgme: move gpgme-tool to own sub-package
2024-08-06 19:11:18 -07:00
icu
icu: Backport patch to fix build issues with long paths (>512 chars)
2025-10-24 06:23:40 -07:00
iso-codes
iso-codes: upgrade 4.15.0 -> 4.16.0
2024-02-03 22:08:25 +00:00
itstool
itstool: add missing COPYING.GPL3
2022-04-14 09:47:00 +01:00
libassuan
libassuan: upgrade 2.5.5 -> 2.5.6
2023-06-28 07:56:33 +01:00
libatomic-ops
libatomic-ops: upgrade 7.8.2 -> 7.8.4
2026-05-04 13:57:33 +01:00
libbsd
libbsd: upgrade 0.11.8 -> 0.12.1
2024-03-07 17:25:02 +00:00
libcap
libcap: Fix CVE-2026-4878
2026-07-22 21:08:55 +01:00
libcap-ng
libcap-ng: update SRC_URI
2024-09-03 05:39:12 -07:00
libcheck
libcheck: add ghetto automake output
2023-05-25 10:29:08 +01:00
libdaemon
recipes: remove unused AUTHOR variable
2023-08-10 09:18:53 +01:00
libevdev
libevdev: upgrade 1.13.0 -> 1.13.1
2023-05-22 10:53:49 +01:00
libevent
libevent: fix patch Upstream-Status
2023-09-20 23:51:11 +01:00
libexif
libexif: fix for CVE-2026-40385, CVE-2026-40386
2026-06-10 14:35:20 +01:00
libffi
libffi: upgrade 3.4.5 -> 3.4.6
2024-03-01 09:28:51 +00:00
libfm
lrzsz connman-gnome libfm: ignore various issues fatal with gcc-14
2024-06-20 06:29:43 -07:00
libgcrypt
libgcrypt: upgrade 1.10.3 -> 1.10.4
2026-07-20 09:04:33 +01:00
libgit2
libgit2: update 1.7.1 -> 1.7.2
2024-02-18 22:02:40 +00:00
libgpg-error
libgpg-error: fix build with gcc-15
2025-09-01 08:30:56 -07:00
libical
libical: upgrade 3.0.16 -> 3.0.17
2023-11-05 11:28:39 +00:00
libjitterentropy
abi_version/sstate: Handle pkgconfig output changes and bump output versions
2023-03-26 18:50:17 +01:00
libksba
libksba: upgrade 1.6.5 -> 1.6.6
2024-03-01 09:28:51 +00:00
libmd
libmd: upgrade 1.0.4 -> 1.1.0
2023-06-28 07:56:33 +01:00
libmicrohttpd
libmicrohttpd: disable experimental code by default
2025-12-17 08:48:37 -08:00
libmpc
libmpc: upgrade 1.2.1 -> 1.3.1
2022-12-22 23:05:50 +00:00
libnl
libnl: change HOMEPAGE
2024-07-26 07:43:46 -07:00
libpcre
libpcre2: Update base uri PhilipHazel -> PCRE2Project
2024-10-18 06:04:40 -07:00
libproxy
libproxy: upgrade 0.5.3 -> 0.5.4
2024-02-17 18:19:19 +00:00
libpsl
libpsl: upgrade 0.21.2 -> 0.21.5
2024-01-24 15:46:19 +00:00
libseccomp
libseccomp: Fix build when python packageconfig is enabled
2024-04-12 17:27:53 +01:00
libsoup
libsoup: fix for CVE-2026-2369
2026-07-02 13:42:25 +01:00
libssh2
libssh2: fix CVE-2026-55199
2026-07-20 09:04:31 +01:00
libunistring
libunistring: upgrade 1.1 -> 1.2
2024-03-01 09:28:51 +00:00
libunwind
libunwind: ignore various issues now fatal with gcc-14
2024-06-20 06:29:43 -07:00
liburcu
liburcu: upgrade 0.14.0 -> 0.14.2
2026-05-04 13:57:33 +01:00
libusb
libusb1: fix CVE-2026-23679 and CVE-2026-47104
2026-07-02 13:42:26 +01:00
libxslt
libxslt: Fix CVE-2025-11731
2025-12-31 07:49:31 -08:00
libyaml
libyaml: Ignore CVE-2024-35325
2024-09-03 05:39:12 -07:00
lz4
lz4: Remove a reference to the rejected CVE-2025-62813
2026-06-10 14:35:20 +01:00
lzo
lzo: Add further info to a patch and mark as Inactive-Upstream
2022-05-27 23:50:48 +01:00
lzop
Revert "lzop: remove recipe from oe-core"
2024-02-09 16:18:05 +00:00
mpfr
mpfr: upgrade 4.2.0 -> 4.2.1
2023-09-02 18:23:05 +01:00
nettle
nettle: avoid neon on unsupported machines
2023-09-04 20:14:14 +01:00
nghttp2
nghttp2: Fix CVE-2026-27135
2026-05-04 13:57:31 +01:00
npth
meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers
2022-02-20 16:45:25 +00:00
nss-myhostname
meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers
2022-02-20 16:45:25 +00:00
numactl
numactl: Upgrade 2.0.17 -> 2.0.18
2024-02-21 22:20:10 +00:00
p11-kit
p11-kit: backport fix for handle USE_NLS from master
2025-09-30 08:01:59 -07:00
pinentry
pinentry: update 1.2.0 -> 1.2.1
2022-10-29 16:28:35 +01:00
popt
popt: update 1.18 -> 1.19
2022-11-22 12:26:46 +00:00
ptest-runner
ptest-runner: Update 2.4.4 -> 2.4.5
2024-10-18 06:04:40 -07:00
re2c
re2c: upgrade 3.0 -> 3.1
2023-08-14 12:51:21 +01:00
rng-tools
rng-tools: ignore incompatible-pointer-types errors for now
2024-07-09 06:02:55 -07:00
serf
serf: mark patch as inappropriate for upstream submission
2024-06-19 08:34:58 -07:00
shared-mime-info
shared-mime-info: Handle USE_NLS
2025-09-30 08:01:59 -07:00
sqlite
sqlite3: Fix CVE-2025-70873
2026-05-04 13:57:31 +01:00
taglib
taglib: upgrade 2.0 -> 2.0.1
2024-06-19 08:34:57 -07:00
user-creation
Convert to new override syntax
2021-08-02 15:44:10 +01:00
utfcpp
taglib: upgrade 1.13.1 -> 2.0 and add utfcpp recipe to support that
2024-03-07 17:25:03 +00:00
vim
vim: Fix for CVE-2026-52858,CVE-2026-52859,CVE-2026-52860
2026-07-22 21:08:55 +01:00
vte
vte: fix CVE-2024-37535
2024-07-23 06:05:47 -07:00
xxhash
xxhash: upgrade 0.8.1 -> 0.8.2
2023-08-14 12:51:21 +01:00