Peter Marko fd0ffc6666 libarchive: handle CVE-2026-5121 ...

Cherry-pick patch for this CVE mentioned in [1].

Since the actual code change is already included in previous patch for
CVE-2026-4426, add reference to CVE-2026-5121 to that patch and keep the
remaining part (test) as CVE-2026-5121-02.patch.

[1] https://security-tracker.debian.org/tracker/CVE-2026-5121

(From OE-Core rev: 608a151948db9652b0e7032863bba1ed022a00aa)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2026-09-04 10:39:10 +01:00

..

classes

rootfs: move tasks using image_list_installed_packages to postuninstall

2026-07-22 21:08:54 +01:00

classes-global

package.bbclass: hardcode emit_pkgdata to run last

2026-07-31 16:41:22 +01:00

classes-recipe

cargo-update-recipe-crates: Don't fail for partially empty Cargo.lock

2026-07-31 16:41:23 +01:00

conf

bitbake.conf: add TMPDIR to GIT_CEILING_DIRECTORIES

2026-08-28 09:52:24 +01:00

files

meta/files/layers.example.json: switch to https clone URIs

2026-05-04 13:57:32 +01:00

lib

oeqa: Drop /git/ from our urls

2026-07-02 13:42:26 +01:00

recipes-bsp

u-boot: Set CVE_PRODUCT

2026-08-24 11:43:45 +01:00

recipes-connectivity

socat: fix native build on host with newer glibc

2026-09-04 10:39:10 +01:00

recipes-core

systemd: upgrade 255.21 -> 255.22

2026-09-04 10:39:10 +01:00

recipes-devtools

python3: upgrade 3.12.13 -> 3.12.14

2026-09-04 10:39:10 +01:00

recipes-extended

libarchive: handle CVE-2026-5121

2026-09-04 10:39:10 +01:00

recipes-gnome

gdk-pixbuf: Fix CVE-2026-5201

2026-05-12 21:31:34 +01:00

recipes-graphics

xserver-org: update CVE_PRODUCT

2026-08-24 11:43:45 +01:00

recipes-kernel

linux-yocto/6.6: update to v6.6.147

2026-08-24 11:43:46 +01:00

recipes-multimedia

libsndfile1: patch CVE-2026-37555

2026-08-24 11:43:46 +01:00

recipes-rt

rt-tests: rt_bmark.py: fix TypeError

2024-08-06 19:11:18 -07:00

recipes-sato

webkitgtk: upgrade 2.44.3 -> 2.44.4

2025-11-14 06:45:29 -08:00

recipes-support

curl: fix CVE-2025-10148 backport for websockets on 8.7.1

2026-08-28 09:52:24 +01:00

site

site: remove at-spi2-core values

2023-09-02 07:45:29 +01:00

COPYING.MIT

…

recipes.txt

Remove LSB support

2019-08-29 14:05:12 +01:00