mirrors/meta-openembedded
1
0 Fork 0
mirror of https://github.com/openembedded/meta-openembedded.git synced 2026-11-12 15:31:03 +00:00
Code Issues Projects Releases Wiki Activity
38,625 Commits 65 Branches 0 Tags
bd53a3321202dae2db76f2bb4e89b149ea0935da
Commit Graph
38625 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Ankur Tyagi bd53a33212 python3-sdbus: upgrade 0.14.2 -> 0.14.3 
Changelog:
https://github.com/python-sdbus/python-sdbus/releases/tag/0.14.3

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
(cherry picked from commit a9ded29815)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-10-28 11:01:33 +05:30
Ankur Tyagi 8d48ddc08a swagger-ui: upgrade 5.32.14 -> 5.32.15 
Changelog:
https://github.com/swagger-api/swagger-ui/releases/tag/v5.32.15

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-10-28 11:01:33 +05:30
Khem Raj ca1537edf3 srt: Match SRCREV to tag 
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
(cherry picked from commit c024e49756)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-10-28 11:01:32 +05:30
Ankur Tyagi ca6032cca4 srt: upgrade 1.5.6 -> 1.5.7 
Changelog:
https://github.com/Haivision/srt/releases/tag/v1.5.7

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
(cherry picked from commit 426b417769)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-10-28 11:01:32 +05:30
Ankur Tyagi 748bb45c9c znc: upgrade 1.10.2 -> 1.10.3 
Changelog:
https://github.com/znc/znc/blob/znc-1.10.3/ChangeLog.md

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-10-28 11:01:31 +05:30
Ankur Tyagi 9984c5697d cryptsetup: upgrade 2.8.7 -> 2.8.8 
Changelog:
https://gitlab.com/cryptsetup/cryptsetup/-/blob/v2.8.8/docs/v2.8.8-ReleaseNotes?ref_type=tags

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-10-28 11:01:31 +05:30
Ankur Tyagi 1f0c94ec4e squid: upgrade 7.6 -> 7.7 
Also refresh patches for the new version.

Changelog:
https://github.com/squid-cache/squid/blob/SQUID_7_7/ChangeLog

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
(From meta-oe rev: 1ce2305241)
Fixes CVE-2026-104786 and SQUID-2026:8.
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-10-27 13:38:02 +05:30
Khem Raj 55f12ead36 squid: upgrade 7.5 -> 7.6 
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
(From meta-oe rev: ed02dad69f)
Fixes CVE-2026-47729, CVE-2026-50012 and CVE-2026-61642.
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-10-27 13:38:01 +05:30
Peter Marko facdbc6acc libwebsockets: patch CVE-2026-78161 
Pick patch per [1].

[1] https://security-tracker.debian.org/tracker/CVE-2026-78161

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-10-27 13:38:01 +05:30
Ankur Tyagi 552db40603 rabbitmq-c: patch CVE-2026-44235 
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-44235

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-10-27 13:37:07 +05:30
Anuj Mittal f28a144aa0 vboxguestdrivers: fix vboxvideo build on kernels lacking drm_fb_helper_alloc_info 
Kernel 6.6.151 dropped the drm_fb_helper_alloc_info() declaration as
part of a stable backport, causing vbox_fb.c to fail with:

  vbox_fb.c:336:16: error: implicit declaration of function 'drm_fb_helper_alloc_info'

The existing RTLNX_VER_MIN(6,19,0) check can't express this since the
change landed mid-series in 6.6.y/6.12.y/6.18.y. Backport master
commit b249fbbf1b ("vboxguestdrivers: fix
vboxvideo build on kernels lacking drm_fb_helper_alloc_info"), adapted
for the 7.2.8 recipe (which only carries the RTLNX_VER_MIN(6,19,0)
guard upstream).

(cherry picked from commit 0f00f8b9a2)
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-10-06 13:52:06 +05:30
Mehmet Fide 98d0cdce96 spidev-test: clean the build dir before configure 
The recipe builds out of tree with O=${B}, and the kernel's tools/build
writes fixdep .cmd files into ${B} that list the compiler's own headers
by absolute path, version included. When the toolchain changes (gcc
13.4 -> 13.5 here) do_compile reruns in the same ${B}, make cannot find
the old prerequisite and stops:

  make[1]: *** No rule to make target '.../recipe-sysroot-native/usr/lib/arm-poky-linux-gnueabi/gcc/arm-poky-linux-gnueabi/13.4.0/include/stddef.h', needed by '.../spidev_test.o'.  Stop.

Empty ${B} before configure, as bpftool does.

Signed-off-by: Mehmet Fide <mehmet.fide@screeningeagle.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
(cherry picked from commit bd52d9b479)
Signed-off-by: Mehmet Fide <mehmet.fide@screeningeagle.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-10-06 09:51:02 +05:30
Peter Marko 6ca6acf7e1 syslog-ng: patch CVE-2026-39879 
Pick patches per [1].

[1] https://security-tracker.debian.org/tracker/CVE-2026-39879

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-10-06 09:51:01 +05:30
Ankur Tyagi da527bb6ba gpsd: patch CVE-2026-60122 
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-60122

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-10-06 09:51:01 +05:30
Jason Schonberg c1e467b895 php: upgrade 8.5.10 -> 8.5.11 
This is a security release.

CVE-2025-1218 CVE-2025-14181
CVE-2026-91765 CVE-2026-91766 CVE-2026-91767 CVE-2026-91768 CVE-2026-91769
CVE-2026-6103 CVE-2026-93682 CVE-2026-92842 CVE-2026-17545

Changelog: https://www.php.net/ChangeLog-8.php#8.5.11
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
(cherry picked from commit 38accdd031)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-10-06 09:51:00 +05:30
Ankur Tyagi d1446eb906 freerdp3: patch CVE-2026-85090 
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-85090

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-10-06 09:51:00 +05:30
Ankur Tyagi 031ea834e5 freerdp3: patch CVE-2026-85089 
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-85089

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-10-06 09:50:59 +05:30
Ankur Tyagi 9707f8cea7 python3-tornado: patch CVE-2026-91991 
Backport patch from v6.5.8 matching CVE description.

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-91991

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-10-06 09:50:59 +05:30
Ankur Tyagi 7aabebd1f4 python3-tornado: patch CVE-2026-82397 
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-82397

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-10-06 09:50:58 +05:30
Ankur Tyagi 53a277b804 python3-tornado: patch CVE-2026-91990 
Backport patch from v6.5.8 matching CVE description.

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-91990

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-10-06 09:50:58 +05:30
Ankur Tyagi d89e903ab0 unbound: patch CVE-2026-77860 
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-77860

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-10-06 09:50:57 +05:30
Ankur Tyagi 94a66542ef unbound: patch CVE-2026-78227 
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-78227

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-10-06 09:50:57 +05:30
Ankur Tyagi 8ad259a937 unbound: patch CVE-2026-81642 
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-81642

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-10-06 09:50:56 +05:30
Ankur Tyagi e11fbb3967 unbound: patch CVE-2026-80225 
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-80225

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-10-06 09:50:56 +05:30
Jaipaul Cheernam b92e727cf3 abseil-cpp: fix 32-bit x86 build of hash.cc 
The x86 AES SIMD path in absl/hash/internal/hash.cc uses the 64-bit-only
_mm_cvtsi128_si64 and _mm_extract_epi64 intrinsics but is gated only on
__SSE4_2__ && __AES__, so the 32-bit multilib build fails to compile.

Add a patch that requires __x86_64__/_M_X64 for that path, matching the
existing guard in absl/crc/internal/crc32_x86_arm_combined_simd.h.

Upstream-Bug: https://github.com/abseil/abseil-cpp/issues/2176

Signed-off-by: Jaipaul Cheernam <jaipaul.cheernam@est.tech>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-10-06 09:50:56 +05:30
Ankur Tyagi 2cb0b25af3 valkey: mark CVE-2026-86227 fixed 
Fix[1] for the CVE is part of current upstream version.

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-86227

[1]https://github.com/valkey-io/valkey/commit/b7c39406bbfac01068c1469df28b22ccf1ecc102

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-10-06 09:50:55 +05:30
Ankur Tyagi ab73c2052d valkey: upgrade 9.0.5 -> 9.0.6 
Changelog:
https://github.com/valkey-io/valkey/releases/tag/9.0.6

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-10-06 09:50:55 +05:30
Ankur Tyagi 4c00053135 tesseract: patch CVE-2026-88054 
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-88054

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-10-06 09:50:54 +05:30
Ankur Tyagi 727354dae2 tesseract: patch CVE-2026-88051 
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-88051

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-10-06 09:50:54 +05:30
Ankur Tyagi b8fa7aac91 tesseract: patch CVE-2026-88047 
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-88047

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-10-06 09:50:53 +05:30
Ankur Tyagi 4aab0847c2 tesseract: patch CVE-2026-88050 
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-88050

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-10-06 09:50:53 +05:30
Ankur Tyagi 218b6a19b1 tesseract: patch CVE-2026-88049 
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-88049

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-10-06 09:50:52 +05:30
Ankur Tyagi 9e544d6e50 tesseract: patch CVE-2026-88048 
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-88048

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-10-06 09:50:52 +05:30
Ankur Tyagi 251dd7f80d tesseract: patch CVE-2026-88052 
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-88052

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-10-06 09:50:51 +05:30
Ankur Tyagi 2352f80100 strongswan: patch CVE-2026-78134 
Use patch[1] provided by strongSwan[2]

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-78134

[1]https://download.strongswan.org/security/CVE-2026-78134/strongswan-5.9.10-6.0.7_eap_inner_auth_cfg.patch
[2]https://www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-(cve-2026-78134).html

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-10-06 09:50:51 +05:30
Ankur Tyagi 9b02fe4850 strongswan: patch CVE-2026-78135 
Use patch[1] provided by strongSwan[2]

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-78135

[1]https://download.strongswan.org/security/CVE-2026-78135/strongswan-5.9.7-6.0.7_early_create_child_sa.patch
[2]https://www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-(cve-2026-78135).html

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-10-06 09:50:51 +05:30
Ankur Tyagi dd3053a1a3 strongswan: patch CVE-2026-78132 
Use patch[1] provided by strongSwan[2]

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-78132

[1]https://download.strongswan.org/security/CVE-2026-78132/strongswan-5.1.3-6.0.7_x509_ac_ietfattr_loop.patch
[2]https://www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-(cve-2026-78132).html

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-10-06 09:50:50 +05:30
Ankur Tyagi d831ff4ac9 strongswan: patch CVE-2026-78130 
Use patch[1] provided by strongSwan[2]

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-78130

[1]https://download.strongswan.org/security/CVE-2026-78130/strongswan-5.1.3-6.0.7_x509_ac_issuer_null.patch
[2]https://www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-(cve-2026-78130).html

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-10-06 09:50:50 +05:30
Ankur Tyagi 41cb8cca46 strongswan: patch CVE-2026-78131 
Use patch[1] provided by strongSwan[2]

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-78131

[1]https://download.strongswan.org/security/CVE-2026-78131/strongswan-5.5.3-6.0.7_x509_ac_leaks.patch
[2]https://www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-(cve-2026-78131).html

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-10-06 09:50:49 +05:30
Ankur Tyagi 7a55891633 strongswan: patch CVE-2026-78133 
Use patch[1] provided by strongSwan[2]

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-78133

[1]https://download.strongswan.org/security/CVE-2026-78133/strongswan-6.0.0-6.0.7_ikev2_rekey_collision.patch
[2]https://www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-(cve-2026-78133).html

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-10-06 09:50:49 +05:30
Ankur Tyagi 9ea8363e30 strongswan: patch CVE-2026-78129 
Use patch[1] provided by strongSwan[2]

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-78129

[1]https://download.strongswan.org/security/CVE-2026-78129/strongswan-5.6.3-6.0.7_pkcs5_params_dos.patch
[2]https://www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-(cve-2026-78129).html

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-10-06 09:50:48 +05:30
Ankur Tyagi 7b8fd4df2e strongswan: patch CVE-2026-78127 
Use patch[1] provided by strongSwan[2]

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-78127

[1]https://download.strongswan.org/security/CVE-2026-78127/strongswan-5.3.1-6.0.7_message_log_leak.patch
[2]https://www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-(cve-2026-78127).html

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-10-06 09:50:48 +05:30
Ankur Tyagi e228e7711e strongswan: patch CVE-2026-78126 
Use patch[1] provided by strongSwan[2]

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-78126

[1]https://download.strongswan.org/security/CVE-2026-78126/strongswan-4.4.0-6.0.7_eap_aka_sync_fail.patch
[2]https://www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-(cve-2026-78126).html

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-10-06 09:50:47 +05:30
Ankur Tyagi dd0ba33ed2 strongswan: patch CVE-2026-78124 
Use patch[1] provided by strongSwan[2]

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-78124

[1]https://download.strongswan.org/security/CVE-2026-78124/strongswan-5.0.2-6.0.7_openssl_pkcs7_certs_leak.patch
[2]https://www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-(cve-2026-78124).html

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-10-06 09:50:47 +05:30
Ankur Tyagi aa064e512a strongswan: patch CVE-2026-78123 
Use patch[1] provided by strongSwan[2]

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-78123

[1]https://download.strongswan.org/security/CVE-2026-78123/strongswan-5.0.2-6.0.7_openssl_pkcs7_info_init.patch
[2]https://www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-(cve-2026-78123).html

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-10-06 09:50:46 +05:30
Ankur Tyagi 36ddee53b1 sngrep: patch CVE-2026-90558 
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-90558

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-10-06 09:50:46 +05:30
Ankur Tyagi b23291be83 redis: patch CVE-2026-81934 
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-81934

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-10-06 09:50:46 +05:30
Ankur Tyagi 1247184a9d rabbitmq-c: patch CVE-2026-44236 
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-44236

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-10-06 09:50:43 +05:30
Jason Schonberg a4b45b1d0b nodejs: upgrade 22.23.2 -> 22.23.3 
Changelog: https://github.com/nodejs/node/releases/tag/v22.23.3

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-10-05 14:41:38 +05:30
Devansh Patel 9b190c4026 python3-waitress: correct CVE_PRODUCT mapping 
The current product-only "waitress" mapping emits a wildcard-vendor identity instead of the exact identities assigned to the packaged Pylons source.

Use "pylons:waitress" for the CNA affected-data identity and "agendaless:waitress" for the NVD dictionary CPE and configuration identity. This changes the generated product identity, but sbom-cve-check 1.3.3 with the pinned databases leaves the current CVE report unchanged.

Signed-off-by: Devansh Patel <devanshp@cisco.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
(cherry picked from commit ae093476ee)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
 2026-10-05 14:41:37 +05:30