mirrors/meta-openembedded
1
0 Fork 0
mirror of https://github.com/openembedded/meta-openembedded.git synced 2026-11-13 15:47:23 +00:00
Code Issues Projects Releases Wiki Activity
40,651 Commits 65 Branches 0 Tags
bedbe1184fe38d6996b560bbf3e9d569ffb62247
Commit Graph
40651 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Ankur Tyagi bedbe1184f postfix: ignore CVE-2023-32182 
Details:
https://nvd.nist.gov/vuln/detail/cve-2023-32182

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
 2026-10-19 00:14:20 +13:00
Ankur Tyagi 9771015a7d proftpd: mark CVE-2026-53994 fixed 
Debian[1] identified the issue[2] associated with this CVE.
Changelog[3] confirms the resolution.

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-53994

[]https://security-tracker.debian.org/tracker/CVE-2026-53994
[]https://github.com/proftpd/proftpd/issues/2115
[]https://github.com/proftpd/proftpd/blob/v1.3.9b/NEWS#L35

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
 2026-10-19 00:14:10 +13:00
Ankur Tyagi 3e0c7af047 psqlodbc: patch CVE-2026-109448 
Backport the commit identified by Debian[1]

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-109448

[1]https://security-tracker.debian.org/tracker/CVE-2026-109448

PTEST pass:
root@qemuarm64:~# ptest-runner psqlodbc
START: ptest-runner
2026-10-17T09:22
BEGIN: /usr/lib/psqlodbc/ptest
...
DURATION: 43
END: /usr/lib/psqlodbc/ptest
2026-10-17T09:23
STOP: ptest-runner
TOTAL: 1 FAIL: 0

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
 2026-10-19 00:14:07 +13:00
Ankur Tyagi 622cd276dd rapidjson: mark CVE-2024-38517 fixed 
Commit mentioned in the NVD is part of the current version:

$ git log HEAD --oneline | grep 8269bc2b
8269bc2b Prevent int underflow when parsing exponents

Details:
https://nvd.nist.gov/vuln/detail/cve-2024-38517

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
 2026-10-19 00:13:53 +13:00
Ankur Tyagi babb18114e samba: ignore CVE-2026-2340 
Also confirmed in the release notes[1]

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-2340

[1]https://www.samba.org/samba/history/samba-4.23.8.html

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
 2026-10-17 12:06:28 +13:00
Ankur Tyagi bc11cbea9e python3-cbor2: upgrade 6.1.4 -> 6.1.5 
Changelog:
https://github.com/agronholm/cbor2/releases/tag/6.1.5

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
 2026-10-16 18:37:03 +13:00
Ankur Tyagi 2b5240d701 python3-pyjwt: upgrade 2.13.0 -> 2.14.0 
Changelog:
https://github.com/jpadilla/pyjwt/blob/2.14.0/CHANGELOG.rst

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
 2026-10-16 18:36:57 +13:00
Ankur Tyagi 6894d75451 libxmp: upgrade 4.7.3 -> 4.7.4 
Changelog:
https://github.com/libxmp/libxmp/releases/tag/libxmp-4.7.4

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
 2026-10-14 22:35:24 +13:00
Ankur Tyagi 3fb79999f2 libmikmod: upgrade 3.3.14 -> 3.3.15 
Changelog:
https://sourceforge.net/p/mikmod/mikmod/ci/libmikmod-3.3.15/tree/libmikmod/NEWS

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
 2026-10-14 22:35:19 +13:00
Ankur Tyagi 6cb8fca0bc libspdm: upgrade 3.8.2 -> 3.8.3 
Changelog:
https://github.com/DMTF/libspdm/releases/tag/3.8.3

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
 2026-10-14 22:35:09 +13:00
Ankur Tyagi b598e510a5 spitools: upgrade 1.1.0 -> 1.1.1 
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
 2026-10-14 22:35:01 +13:00
Ankur Tyagi 63837fd4bd freerdp3: upgrade 3.32.1 -> 3.32.2 
Dropped patch that is part of the upstream version.

Changelog:
https://github.com/FreeRDP/FreeRDP/releases/tag/3.32.2

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
 2026-10-14 22:34:44 +13:00
Ankur Tyagi 492ba8a3af swagger-ui: upgrade 5.33.1 -> 5.33.2 
Changelog:
https://github.com/swagger-api/swagger-ui/releases/tag/v5.33.2

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
 2026-10-14 22:34:28 +13:00
Ankur Tyagi 991d096781 xdg-dbus-proxy: upgrade 0.1.7 -> 0.1.9 
Changelog:
https://github.com/flatpak/xdg-dbus-proxy/blob/0.1.9/NEWS

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
 2026-10-14 17:28:24 +13:00
Ankur Tyagi 79d9892d59 flatpak: upgrade 1.18.0 -> 1.18.4 
Changelog:
https://github.com/flatpak/flatpak/blob/1.18.4/NEWS

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
 2026-10-14 17:18:39 +13:00
Ankur Tyagi fca616e1ef tinyproxy: patch CVE-2026-54388 
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-54388

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
 2026-10-14 16:30:55 +13:00
Ankur Tyagi a145655a58 tmate: patch CVE-2026-4751 
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-4751

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
 2026-10-14 16:22:21 +13:00
Ankur Tyagi f3215567dc udisks2: patch CVE-2026-7867 
Backport commits from the PR[1].

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-7867

[1]https://github.com/storaged-project/udisks/pull/1530

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
 2026-10-14 16:16:01 +13:00
Ankur Tyagi 975c06326d zeroconf: ignore CVEs 
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-47180
https://nvd.nist.gov/vuln/detail/cve-2026-47183
https://nvd.nist.gov/vuln/detail/cve-2026-47184
https://nvd.nist.gov/vuln/detail/cve-2026-48045
https://nvd.nist.gov/vuln/detail/cve-2026-48487

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
 2026-10-14 09:59:48 +13:00
Ankur Tyagi a9d69bc066 lvgl-demo-fb: fix SRCREV 
Previous SRCREV does not belong to any branch on this repository and build
fails with error:

ERROR: lvgl-demo-fb-9.5.0+git-r0 do_fetch: Fetcher failure: Unable to find revision 045137cf0fa1781483cb796261a11b5eb21e99d9 in branch release/v9.5 even from upstream
ERROR: lvgl-demo-fb-9.5.0+git-r0 do_fetch: Bitbake Fetcher Error: FetchError('Unable to fetch URL from any source.', 'git://github.com/lvgl/lv_port_linux_frame_buffer.git;protocol=https;branch=release/v9.5;name=demo')

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
 2026-10-14 09:26:03 +13:00
Markus Volk db22543b54 apache2: fix build with OpenSSL 4 
ASN1_STRING is opaque in OpenSSL 4, so mod_md fails to compile in
md_ocsp.c. Backport the httpd 2.4.x commit that switches to the getter
functions. The fix is part of httpd 2.4.69, which master gets through the
upgrade.

Upstream-Status: Backport [https://github.com/apache/httpd/commit/6cd9ea8dcb5bf68a195e90578c7f05e12eba5468]

AI-Generated: Uses Claude Code (Claude Opus 5.5)
Signed-off-by: Markus Volk <f_l_k@t-online.de>
 2026-10-13 21:43:06 +13:00
Ankur Tyagi c7f1f03d1b gpsd: patch CVE-2026-60122 
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-60122

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
(cherry picked from commit da527bb6ba)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
 2026-10-13 21:32:54 +13:00
Ankur Tyagi 68a702ac5d tesseract: patch CVE-2026-88054 
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-88054

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
(cherry picked from commit 4c00053135)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
 2026-10-13 21:32:54 +13:00
Ankur Tyagi 9ca7f33f69 tesseract: patch CVE-2026-88051 
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-88051

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
(cherry picked from commit 727354dae2)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
 2026-10-13 21:32:54 +13:00
Ankur Tyagi 21dc40e65a tesseract: patch CVE-2026-88047 
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-88047

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
(cherry picked from commit b8fa7aac91)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
 2026-10-13 21:32:54 +13:00
Ankur Tyagi 08a6852a7e tesseract: patch CVE-2026-88050 
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-88050

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
(cherry picked from commit 4aab0847c2)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
 2026-10-13 21:32:54 +13:00
Ankur Tyagi 8f56f67a2f tesseract: patch CVE-2026-88049 
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-88049

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
(cherry picked from commit 218b6a19b1)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
 2026-10-13 21:32:54 +13:00
Ankur Tyagi 221a1e49f4 tesseract: patch CVE-2026-88048 
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-88048

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
(cherry picked from commit 9e544d6e50)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
 2026-10-13 21:32:54 +13:00
Ankur Tyagi 3d862201ff tesseract: patch CVE-2026-88052 
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-88052

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
(cherry picked from commit 251dd7f80d)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
 2026-10-13 21:32:54 +13:00
Ankur Tyagi f12cb02421 strongswan: patch CVE-2026-78134 
Use patch[1] provided by strongSwan[2]

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-78134

[1]https://download.strongswan.org/security/CVE-2026-78134/strongswan-5.9.10-6.0.7_eap_inner_auth_cfg.patch
[2]https://www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-(cve-2026-78134).html

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
(cherry picked from commit 2352f80100)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
 2026-10-13 21:32:54 +13:00
Ankur Tyagi 991006d982 strongswan: patch CVE-2026-78135 
Use patch[1] provided by strongSwan[2]

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-78135

[1]https://download.strongswan.org/security/CVE-2026-78135/strongswan-5.9.7-6.0.7_early_create_child_sa.patch
[2]https://www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-(cve-2026-78135).html

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
(cherry picked from commit 9b02fe4850)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
 2026-10-13 21:32:54 +13:00
Ankur Tyagi 2afc7f40c8 strongswan: patch CVE-2026-78132 
Use patch[1] provided by strongSwan[2]

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-78132

[1]https://download.strongswan.org/security/CVE-2026-78132/strongswan-5.1.3-6.0.7_x509_ac_ietfattr_loop.patch
[2]https://www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-(cve-2026-78132).html

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
(cherry picked from commit dd3053a1a3)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
 2026-10-13 21:32:54 +13:00
Ankur Tyagi 359b6fb067 strongswan: patch CVE-2026-78130 
Use patch[1] provided by strongSwan[2]

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-78130

[1]https://download.strongswan.org/security/CVE-2026-78130/strongswan-5.1.3-6.0.7_x509_ac_issuer_null.patch
[2]https://www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-(cve-2026-78130).html

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
(cherry picked from commit d831ff4ac9)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
 2026-10-13 21:32:54 +13:00
Ankur Tyagi fd21700848 strongswan: patch CVE-2026-78131 
Use patch[1] provided by strongSwan[2]

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-78131

[1]https://download.strongswan.org/security/CVE-2026-78131/strongswan-5.5.3-6.0.7_x509_ac_leaks.patch
[2]https://www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-(cve-2026-78131).html

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
(cherry picked from commit 41cb8cca46)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
 2026-10-13 21:32:54 +13:00
Ankur Tyagi 036fde2bb0 strongswan: patch CVE-2026-78133 
Use patch[1] provided by strongSwan[2]

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-78133

[1]https://download.strongswan.org/security/CVE-2026-78133/strongswan-6.0.0-6.0.7_ikev2_rekey_collision.patch
[2]https://www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-(cve-2026-78133).html

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
(cherry picked from commit 7a55891633)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
 2026-10-13 21:32:54 +13:00
Ankur Tyagi 7004be1e63 strongswan: patch CVE-2026-78129 
Use patch[1] provided by strongSwan[2]

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-78129

[1]https://download.strongswan.org/security/CVE-2026-78129/strongswan-5.6.3-6.0.7_pkcs5_params_dos.patch
[2]https://www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-(cve-2026-78129).html

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
(cherry picked from commit 9ea8363e30)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
 2026-10-13 21:32:54 +13:00
Ankur Tyagi 22d52d3b42 strongswan: patch CVE-2026-78127 
Use patch[1] provided by strongSwan[2]

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-78127

[1]https://download.strongswan.org/security/CVE-2026-78127/strongswan-5.3.1-6.0.7_message_log_leak.patch
[2]https://www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-(cve-2026-78127).html

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
(cherry picked from commit 7b8fd4df2e)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
 2026-10-13 21:32:54 +13:00
Ankur Tyagi 9b00eaf6ee strongswan: patch CVE-2026-78126 
Use patch[1] provided by strongSwan[2]

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-78126

[1]https://download.strongswan.org/security/CVE-2026-78126/strongswan-4.4.0-6.0.7_eap_aka_sync_fail.patch
[2]https://www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-(cve-2026-78126).html

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
(cherry picked from commit e228e7711e)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
 2026-10-13 21:32:54 +13:00
Ankur Tyagi a6397902ba strongswan: patch CVE-2026-78124 
Use patch[1] provided by strongSwan[2]

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-78124

[1]https://download.strongswan.org/security/CVE-2026-78124/strongswan-5.0.2-6.0.7_openssl_pkcs7_certs_leak.patch
[2]https://www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-(cve-2026-78124).html

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
(cherry picked from commit dd0ba33ed2)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
 2026-10-13 21:32:54 +13:00
Ankur Tyagi 8ccc60a8be strongswan: patch CVE-2026-78123 
Use patch[1] provided by strongSwan[2]

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-78123

[1]https://download.strongswan.org/security/CVE-2026-78123/strongswan-5.0.2-6.0.7_openssl_pkcs7_info_init.patch
[2]https://www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-(cve-2026-78123).html

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
(cherry picked from commit aa064e512a)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
 2026-10-13 21:32:54 +13:00
Ankur Tyagi a369135b46 sngrep: patch CVE-2026-90558 
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-90558

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
(cherry picked from commit 36ddee53b1)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
 2026-10-13 21:32:54 +13:00
Ankur Tyagi 8527b6772d ntopng: patch CVE-2026-86090 and CVE-2026-86091 
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-86090
https://nvd.nist.gov/vuln/detail/cve-2026-86091

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
(cherry picked from commit ae180302f4)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
 2026-10-13 21:32:54 +13:00
Ankur Tyagi 151f9c3204 ntopng: patch CVE-2026-84990 
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-84990

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
(cherry picked from commit 2d932fa4e3)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
 2026-10-13 21:32:54 +13:00
Ankur Tyagi 95be90acc0 smarty: mark CVE-2026-82531 patched 
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-82531

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
 2026-10-13 21:32:54 +13:00
Ankur Tyagi 1964bbc475 cjson: patch CVE-2026-87933 
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-87933

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
(cherry picked from commit 2b3f5cbbd8)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
 2026-10-13 21:32:54 +13:00
Ankur Tyagi 183033afe8 python3-eventlet: mark CVE-2023-29483 fixed 
Fix[1] for the CVE is part of the upstream version.

Details:
https://nvd.nist.gov/vuln/detail/cve-2023-29483

[1]https://github.com/eventlet/eventlet/commit/51e3c4928d4938beb576eff34f3bf97e6e64e6b4

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
(cherry picked from commit 47b2ce9cc7)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
 2026-10-13 21:32:54 +13:00
Ankur Tyagi 6df0b8c576 openvpn: patch CVE-2026-84790 
Backport commit identified by Debian[1], also mentioned in the release note
https://github.com/OpenVPN/openvpn/releases/tag/v2.7.8

[1]https://security-tracker.debian.org/tracker/CVE-2026-84790

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
 2026-10-13 21:32:54 +13:00
Ankur Tyagi 7bd75dc53f openvpn: patch CVE-2026-88964 
Backport commit identified by Debian[1], also mentioned in the release note
https://github.com/OpenVPN/openvpn/releases/tag/v2.7.8

[1]https://security-tracker.debian.org/tracker/CVE-2026-88964

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
 2026-10-13 21:32:54 +13:00
Ankur Tyagi 2f0a62d30c openvpn: ignore CVE-2026-84256 
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-84256

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
 2026-10-13 21:32:54 +13:00
Ankur Tyagi 41441be1ce swagger-ui: upgrade 5.33.0 -> 5.33.1 
Changelog:
https://github.com/swagger-api/swagger-ui/releases/tag/v5.33.1

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
(cherry picked from commit 50c590bebc)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
 2026-10-13 11:50:55 +13:00