mirror of
https://git.yoctoproject.org/poky
synced 2026-09-20 21:49:33 +02:00
b9993675ea
Pick the upstream backport [1] for CVE-2026-27447 as mentioned in [2], where the scheduler treated local user and group names as case-insensitive. Also include the two upstream regression fixes that followed the CVE fix: - CVE-2026-27447-regression_p1.patch [3] fixes a cupsd crash when the referenced user does not exist on the server. This regression was reported in OpenPrinting/cups Issue [5]. - CVE-2026-27447-regression_p2.patch [4] fixes unauthenticated print policies for non-local accounts. This regression was reported in OpenPrinting/cups Issue [6]. [1]a0c62c1e69[2] https://security-tracker.debian.org/tracker/CVE-2026-27447 [3]6d97ee39fe[4]849fba7d7a[5] https://github.com/OpenPrinting/cups/issues/1555 [6] https://github.com/OpenPrinting/cups/issues/1557 (From OE-Core rev: f2aac255fcc1c44ed30a191ba18c4ad46ea4c807) Signed-off-by: Deepak Rathore <deeratho@cisco.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev>