Ankur Tyagi
11bc965378
unbound: patch CVE-2026-42534
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-42534
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:54 +05:30
Ankur Tyagi
565166d088
unbound: patch CVE-2026-41292
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-41292
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:53 +05:30
Ankur Tyagi
7e47245343
unbound: patch CVE-2026-40622
...
Also backport TTL_IS_EXPIRED macro introduced by commit:
https://github.com/NLnetLabs/unbound/commit/73e408f1d0792267429e9f5f89537cda61297952
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-40622
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:53 +05:30
Ankur Tyagi
e5bdfcd5ed
unbound: patch CVE-2026-32792
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-32792
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:52 +05:30
Ankur Tyagi
115d62e043
unbound: patch CVE-2026-42959
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-42959
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:52 +05:30
Ankur Tyagi
47db00bd59
unbound: patch CVE-2026-42944
...
Backport commit[1] needed to cherry-pick the fix.
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-42944
[1]https://github.com/NLnetLabs/unbound/commit/44659cb3bf4601d2daa19a0d51ac5af54bc698bc
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:51 +05:30
Ankur Tyagi
4dce0f9343
unbound: patch CVE-2026-33278
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-33278
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:51 +05:30
Ankur Tyagi
6b4b2f8f80
zabbix: ignore multiple CVEs
...
CVE-2026-23922
https://support.zabbix.com/browse/ZBX-28067
https://nvd.nist.gov/vuln/detail/cve-2026-23922
CVE-2026-23924
https://support.zabbix.com/browse/ZBX-27642
https://nvd.nist.gov/vuln/detail/cve-2026-23924
https://github.com/zabbix/zabbix/blob/7.4.14/ChangeLog#L1856
CVE-2026-23926
https://support.zabbix.com/browse/ZBX-27758
https://nvd.nist.gov/vuln/detail/cve-2026-23926
https://github.com/zabbix/zabbix/blob/7.4.14/ChangeLog#L1787
CVE-2026-23927
https://support.zabbix.com/browse/ZBX-27759
https://nvd.nist.gov/vuln/detail/cve-2026-23927
https://github.com/zabbix/zabbix/blob/7.4.14/ChangeLog#L1785
CVE-2026-23928
https://support.zabbix.com/browse/ZBX-27760
https://nvd.nist.gov/vuln/detail/cve-2026-23928
https://github.com/zabbix/zabbix/blob/7.4.14/ChangeLog#L1786
CVE-2026-23931
https://support.zabbix.com/browse/ZBX-28070
https://nvd.nist.gov/vuln/detail/cve-2026-23931
CVE-2026-23933
https://support.zabbix.com/browse/ZBX-28071
https://nvd.nist.gov/vuln/detail/cve-2026-23933
CVE-2026-23934
https://support.zabbix.com/browse/ZBX-28072
https://nvd.nist.gov/vuln/detail/cve-2026-23934
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:50 +05:30
Deepak Rathore
a536b38899
rsyslog: Fix CVE-2026-19654
...
This patch applies the fix backported to rsyslog 8.2402.0 for
CVE-2026-19654. The upstream fix commit is referenced in [1], and
the public CVE advisory is referenced in [2]. The regression-test
commit is included in the same upstream pull request and referenced
in [3] and the individual commit is reference in [4].
[1] https://github.com/rsyslog/rsyslog/commit/07b3c40a5a78c79ed9109251f842ca7e955dd586
[2] https://github.com/rsyslog/rsyslog/security/advisories/GHSA-cj5r-wh2m-7w29
[3] https://github.com/rsyslog/rsyslog/pull/7410
[4] https://github.com/rsyslog/rsyslog/commit/8e67ae69539153e4e80547dfb5f07ed17222e292
Signed-off-by: Deepak Rathore <deeratho@cisco.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:50 +05:30
Omkar Patil
2e1246f397
postgresql: upgrade 17.10 -> 17.11
...
Minor security release.
Refreshed the context of 0003-configure.ac-bypass-autoconf-2.69-version-check.patch
for the 17.11 sources (context/version line only, no functional change).
All other patches apply cleanly and are unchanged.
PostgreSQL 17.11 fixes several CVEs;
see the release notes: https://www.postgresql.org/docs/17/release-17-11.html
Ran ptest on qemux86-64: all tests passed.
Signed-off-by: Omkar Patil <OmkarAbaji.Patil@windriver.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:49 +05:30
Ankur Tyagi
24b8b4b3f1
python3-h11: mark CVE-2025-43859 patched
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2025-43859
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:49 +05:30
Ankur Tyagi
2cb622eea6
python3-gunicorn: mark CVE-2024-1135 patched
...
Debian[1] also identified the commit.
Details:
https://nvd.nist.gov/vuln/detail/cve-2024-1135
[1]https://security-tracker.debian.org/tracker/CVE-2024-1135
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:49 +05:30
Ankur Tyagi
933d86804a
freerdp3: patch CVE-2026-67288
...
Backport commit matching GitHub advisory[1] also identified by Debian[2]
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-67288
[1]https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-ph3q-f9w8-7jf3
[2]https://security-tracker.debian.org/tracker/CVE-2026-67288
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:48 +05:30
Ankur Tyagi
11f2bab405
freerdp3: patch CVE-2026-66401
...
Backport commit matching GitHub advisory[1]
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-66401
[1]https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-8jj2-67pg-j6mg
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:48 +05:30
Ankur Tyagi
ee9265dada
freerdp3: patch CVE-2026-64621
...
Backport commit matching GitHub advisory[1]
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-64621
[1]https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-f27x-frr8-j9hc
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:47 +05:30
Ankur Tyagi
4964784627
freerdp3: patch CVE-2026-64620
...
Backport commit matching GitHub advisory[1]
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-64620
[1]https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-pjqx-v446-x7fc
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:47 +05:30
Ankur Tyagi
a8c04cf8d2
freerdp3: patch CVE-2026-63652
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-63652
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:46 +05:30
Ankur Tyagi
5900c0fece
freerdp3: patch CVE-2026-63633
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-63633
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:46 +05:30
Ankur Tyagi
d6868b566a
freerdp3: patch CVE-2026-55648
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-55648
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:45 +05:30
Ankur Tyagi
631ca42559
freerdp3: patch CVE-2026-55564
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-55564
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:45 +05:30
Ankur Tyagi
3e87904310
freerdp3: patch CVE-2026-55194
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-55194
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:44 +05:30
Ankur Tyagi
1d846e479b
freerdp3: patch CVE-2026-55193
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-55193
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:44 +05:30
Ankur Tyagi
e555fd3307
freerdp3: patch CVE-2026-55192
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-55192
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:43 +05:30
Ankur Tyagi
e383fd8d1a
freerdp3: patch CVE-2026-55191
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-55191
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:43 +05:30
Ankur Tyagi
6a620760be
freerdp3: patch CVE-2026-40254
...
Backport commits matching advisory[1] mentioned in the NVD.
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-40254
[1]https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-3xpj-m4hx-8vmx
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:43 +05:30
Ankur Tyagi
7ce36bf1cc
wolfssl: patch CVE-2026-7531
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-7531
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:42 +05:30
Ankur Tyagi
e99f95d5b5
wolfssl: patch CVE-2026-6731
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-6731
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:42 +05:30
Ankur Tyagi
983b006bac
wolfssl: patch CVE-2026-6450
...
Also backport follow-up PR[1] to the initial PR mentioned in the NVD.
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-6450
[1]https://github.com/wolfSSL/wolfssl/pull/10274
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:41 +05:30
Ankur Tyagi
f2b753bc78
wolfssl: patch CVE-2026-6412
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-6412
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:41 +05:30
Ankur Tyagi
c78dd4dd4d
wolfssl: patch CVE-2026-6325
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-6325
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:40 +05:30
Ankur Tyagi
91aa2a8e57
wolfssl: patch CVE-2026-6291
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-6291
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:40 +05:30
Ankur Tyagi
140b51ee66
wolfssl: patch CVE-2026-6094
...
Details
https://nvd.nist.gov/vuln/detail/cve-2026-6094
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:39 +05:30
Ankur Tyagi
4b124297a2
wolfssl: patch CVE-2026-6092
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-6092
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:39 +05:30
Ankur Tyagi
c897678f87
wolfssl: patch CVE-2026-6091
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-6091
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:38 +05:30
Ankur Tyagi
7b5f42ff26
wolfssl: patch CVE-2026-55958
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-55958
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:38 +05:30
Ankur Tyagi
64f5842834
wolfssl: ignore CVE-2026-12340
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-12340
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:37 +05:30
Ankur Tyagi
cfa27d8569
wolfssl: patch CVE-2026-10512
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-10512
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:37 +05:30
Ankur Tyagi
6e7213f4d5
wolfssl: patch CVE-2026-10098
...
CVE-2026-10098-1.patch is needed to cherry-pick the commit mentioned in the
PR[1]
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-10098
[1]https://github.com/wolfSSL/wolfssl/pull/10554/commits
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:37 +05:30
Ankur Tyagi
c12fcc9b48
wolfssl: mark CVEs patched
...
CVE-2023-6937[1] and CVE-2024-5814[2] are patched in current version.
Details:
https://nvd.nist.gov/vuln/detail/cve-2023-6937
https://nvd.nist.gov/vuln/detail/cve-2024-5814
[1]https://github.com/wolfSSL/wolfssl/blob/v5.6.6-stable/ChangeLog.md#vulnerabilities
[2]https://github.com/wolfSSL/wolfssl/blob/v5.7.2-stable/ChangeLog.md#vulnerabilities
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:36 +05:30
Ankur Tyagi
e8277376bf
tesseract: patch CVE-2026-73067
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-73067
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:36 +05:30
Ankur Tyagi
10f315bace
tesseract: patch CVE-2026-73066
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-73066
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:35 +05:30
Ankur Tyagi
c799467d9c
open62541: patch CVE-2026-11946
...
Backport commit identified by Debian[1]
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-11946
[1]https://security-tracker.debian.org/tracker/CVE-2026-11946
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:35 +05:30
Ankur Tyagi
6093ccb547
nginx: mark CVE-2026-1642 patched
...
Debian[1] also identified the commit[2]
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-1642
[1]https://security-tracker.debian.org/tracker/CVE-2026-1642
[2]https://github.com/nginx/nginx/commit/784fa05025cb8cd0c770f99bc79d2794b9f85b6e
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:34 +05:30
Ankur Tyagi
233e6a56e5
tinyproxy: patch CVE-2026-55202
...
Backport commit identified by Debian[1]
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-55202
[1]https://security-tracker.debian.org/tracker/CVE-2026-55202
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:34 +05:30
Ankur Tyagi
33649b0657
tinyproxy: patch CVE-2026-54387
...
Backport commit identified by Debian[1]
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-54387
[1]https://security-tracker.debian.org/tracker/CVE-2026-54387
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:33 +05:30
Ankur Tyagi
985acd9e7c
tinyproxy: patch CVE-2026-31842
...
Backport commit identified by Debian[1]
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-31842
[1]https://security-tracker.debian.org/tracker/CVE-2026-31842
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:33 +05:30
Ankur Tyagi
6b06704ac1
libyang: patch CVE-2026-41401
...
Backport patch identified by Debian[1]
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-41401
[1]https://security-tracker.debian.org/tracker/CVE-2026-41401
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:32 +05:30
Ankur Tyagi
abf11a785d
valkey: mark CVE-2026-56684 and CVE-2026-63639 patched
...
Also mentioned in the release notes[1]
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-56684
https://nvd.nist.gov/vuln/detail/cve-2026-63639
[1]https://github.com/valkey-io/valkey/releases/tag/9.0.5
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:32 +05:30
Ankur Tyagi
2b272378cc
python3-zeroconf: patch CVE-2026-47184
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-47184
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:31 +05:30
Ankur Tyagi
4a1d7cfb5c
python3-zeroconf: patch CVE-2026-47183
...
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-47183
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com >
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com >
2026-09-15 10:13:31 +05:30
Ankur Tyagi
Deepak Rathore
Omkar Patil