Commit Graph
38523 Commits
Author SHA1 Message Date
Ankur Tyagi e4f07cb75d python3-django: upgrade 6.0.7 -> 6.0.8
Also revert bump in the minimum setuptools version.

Release Notes:
https://docs.djangoproject.com/en/dev/releases/6.0.8/

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-10-05 14:40:42 +05:30
Peter Marko 5f4b6c3c61 polkit: patch CVE-2026-4897 and CVE-2026-85498
Pick patches mentioning these CVEs in their commit messages.
Note that patch for CVE-2026-4897 introduces CVE-2026-85498.
Also pick additional patch introduced between these commits which
touches the added code so the final patch applies cleanly.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-10-05 14:40:41 +05:30
Peter Marko 46f6e32a2e recipes: correct homepage
Leading space leads to SPDX document validation errors for url in
some tools.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
(From meta-oe rev: 64dcb55dc5)
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-10-05 14:40:40 +05:30
Peter Marko 53f2c85097 msgpack-c: patch CVE-2026-72854
Pick patch from [1] linked from [2] mentioned in [3].
Drop version bump related changes.

[1] https://github.com/msgpack/msgpack-c/pull/1182/commits
[2] https://github.com/msgpack/msgpack-c/issues/1181
[3] https://nvd.nist.gov/vuln/detail/cve-2026-72854

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-10-05 14:40:39 +05:30
Devansh Patel 9ca5620389 python3-py: correct CVE_PRODUCT mapping
The product-only "py" mapping generates a wildcard-vendor identity
instead of the exact NVD identity for the packaged pytest-dev py
source. Use "pytest:py" for its NVD dictionary CPE and configuration
matches.

This changes the generated product identity. With sbom-cve-check 1.3.3,
the current CVE report is unchanged using the pinned database snapshots;
both mappings report CVE-2020-29651 and CVE-2022-42969.

Signed-off-by: Devansh Patel <devanshp@cisco.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
(cherry picked from commit 26fa8b053b)
Signed-off-by: Darsh Kelaiya <dkelaiya@cisco.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-10-05 14:40:38 +05:30
Khem Raj 4ee9312479 openvpn: upgrade 2.7.0 -> 2.7.5
Upgrade openvpn from 2.7.0 to 2.7.5.

Changes:
* Drop 0001-tests-skip-test-execution-when-cross-compiling.patch
  This release already guards the auth-pam unit test TESTS assignment with
  "if !CROSS_COMPILING" in tests/unit_tests/plugins/auth-pam/Makefile.am
* Drop CVE-2026-40215.patch - fixed upstream in 2.7.2.
* Drop CVE-2026-13117.patch - fixed upstream in 2.7.5.

Security fixes included in this upgrade:

Fixed in 2.7.2:
* CVE-2026-40215: race condition in TLS handshake that could leak
  packet data from a previous handshake
* CVE-2026-35058: server ASSERT() on a malformed packet with a valid
  tls-crypt-v2 key

Fixed in 2.7.5:
* CVE-2026-13379: openvpnserv (Windows) DNS SearchList state pollution
* CVE-2026-12996: use-after-free in ack_write_buf()
* CVE-2026-13117: use-after-free in tls_wrap_reneg()
* CVE-2026-13122: server crash on malformed auth-token
* CVE-2026-12932: memory leak in tls-crypt-v2 client key handling
* CVE-2026-11771: 1-byte buffer overrun on NTLMv2 proxy responses
* CVE-2026-13698: memory leak on tls-crypt-v2 packets

Release notes:
https://github.com/openvpn/openvpn/releases

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Signed-off-by: Omkar Patil <OmkarAbaji.Patil@windriver.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-10-05 14:40:36 +05:30
Louis Rannou b1740f6665 openvpn: create an extra package for the dns-updown script
The dns-updown script is written in bash which is under the GPLv3
license. As this script is optional, it is preferred to have it in an extra
package.

Signed-off-by: Louis Rannou <louis.rannou@non.se.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Signed-off-by: Omkar Patil <OmkarAbaji.Patil@windriver.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-10-05 14:40:35 +05:30
Ankur Tyagi 47d7dbdd10 unbound: patch CVE-2026-56444
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-56444

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:14:05 +05:30
Ankur Tyagi b03acb631b unbound: patch CVE-2026-56416
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-56416

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:14:04 +05:30
Ankur Tyagi 5401a83771 unbound: patch CVE-2026-55991
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-55991

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:14:04 +05:30
Ankur Tyagi b18b97d782 unbound: patch CVE-2026-55990
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-55990

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:14:03 +05:30
Ankur Tyagi 5d932adbde unbound: patch CVE-2026-55973
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-55973

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:14:03 +05:30
Ankur Tyagi 44c0618c07 unbound: patch CVE-2026-55717
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-55717

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:14:02 +05:30
Ankur Tyagi 7f1398a6c4 unbound: patch CVE-2026-55708
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-55708

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:14:02 +05:30
Ankur Tyagi 1cede7d75e unbound: patch CVE-2026-54478
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-54478

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:14:01 +05:30
Ankur Tyagi e88cf8a339 unbound: patch CVE-2026-52863
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-52863

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:14:01 +05:30
Ankur Tyagi 9cf83c6ad4 unbound: patch CVE-2026-50252
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-50252

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:14:01 +05:30
Ankur Tyagi ad6d182534 unbound: patch CVE-2026-50251
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-50251

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:14:00 +05:30
Ankur Tyagi 252dc099d1 unbound: patch CVE-2026-50248
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-50248

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:14:00 +05:30
Ankur Tyagi a20f5dc9d3 unbound: patch CVE-2026-50243
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-50243

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:59 +05:30
Ankur Tyagi 394ec2adfb unbound: patch CVE-2026-50046
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-50046

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:59 +05:30
Ankur Tyagi 5333e61d4f unbound: patch CVE-2026-50045
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-50045

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:58 +05:30
Ankur Tyagi 04efaf8876 unbound: patch CVE-2026-44687
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-44687

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:58 +05:30
Ankur Tyagi 83e98ed1a1 unbound: patch CVE-2026-44621
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-44621

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:57 +05:30
Ankur Tyagi c805d76db2 unbound: patch CVE-2026-42955
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-42955

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:57 +05:30
Ankur Tyagi 8792c7f818 unbound: patch CVE-2026-32665
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-32665

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:56 +05:30
Ankur Tyagi e7aac6e2ec unbound: patch CVE-2026-46582
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-46582

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:56 +05:30
Ankur Tyagi 9af75c4481 unbound: patch CVE-2026-44608
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-44608

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:55 +05:30
Ankur Tyagi e9a946d263 unbound: patch CVE-2026-44390
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-44390

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:55 +05:30
Ankur Tyagi 1c4d899d2d unbound: patch CVE-2026-42960
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-42960

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:55 +05:30
Ankur Tyagi 5d793b6ca9 unbound: patch CVE-2026-42923
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-42923

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:54 +05:30
Ankur Tyagi 11bc965378 unbound: patch CVE-2026-42534
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-42534

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:54 +05:30
Ankur Tyagi 565166d088 unbound: patch CVE-2026-41292
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-41292

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:53 +05:30
Ankur Tyagi 7e47245343 unbound: patch CVE-2026-40622
Also backport TTL_IS_EXPIRED macro introduced by commit:
https://github.com/NLnetLabs/unbound/commit/73e408f1d0792267429e9f5f89537cda61297952

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-40622

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:53 +05:30
Ankur Tyagi e5bdfcd5ed unbound: patch CVE-2026-32792
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-32792

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:52 +05:30
Ankur Tyagi 115d62e043 unbound: patch CVE-2026-42959
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-42959

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:52 +05:30
Ankur Tyagi 47db00bd59 unbound: patch CVE-2026-42944
Backport commit[1] needed to cherry-pick the fix.

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-42944

[1]https://github.com/NLnetLabs/unbound/commit/44659cb3bf4601d2daa19a0d51ac5af54bc698bc

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:51 +05:30
Ankur Tyagi 4dce0f9343 unbound: patch CVE-2026-33278
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-33278

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:51 +05:30
Ankur Tyagi 6b4b2f8f80 zabbix: ignore multiple CVEs
CVE-2026-23922
https://support.zabbix.com/browse/ZBX-28067
https://nvd.nist.gov/vuln/detail/cve-2026-23922

CVE-2026-23924
https://support.zabbix.com/browse/ZBX-27642
https://nvd.nist.gov/vuln/detail/cve-2026-23924
https://github.com/zabbix/zabbix/blob/7.4.14/ChangeLog#L1856

CVE-2026-23926
https://support.zabbix.com/browse/ZBX-27758
https://nvd.nist.gov/vuln/detail/cve-2026-23926
https://github.com/zabbix/zabbix/blob/7.4.14/ChangeLog#L1787

CVE-2026-23927
https://support.zabbix.com/browse/ZBX-27759
https://nvd.nist.gov/vuln/detail/cve-2026-23927
https://github.com/zabbix/zabbix/blob/7.4.14/ChangeLog#L1785

CVE-2026-23928
https://support.zabbix.com/browse/ZBX-27760
https://nvd.nist.gov/vuln/detail/cve-2026-23928
https://github.com/zabbix/zabbix/blob/7.4.14/ChangeLog#L1786

CVE-2026-23931
https://support.zabbix.com/browse/ZBX-28070
https://nvd.nist.gov/vuln/detail/cve-2026-23931

CVE-2026-23933
https://support.zabbix.com/browse/ZBX-28071
https://nvd.nist.gov/vuln/detail/cve-2026-23933

CVE-2026-23934
https://support.zabbix.com/browse/ZBX-28072
https://nvd.nist.gov/vuln/detail/cve-2026-23934

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:50 +05:30
Deepak Rathore a536b38899 rsyslog: Fix CVE-2026-19654
This patch applies the fix backported to rsyslog 8.2402.0 for
CVE-2026-19654. The upstream fix commit is referenced in [1], and
the public CVE advisory is referenced in [2]. The regression-test
commit is included in the same upstream pull request and referenced
in [3] and the individual commit is reference in [4].

[1] https://github.com/rsyslog/rsyslog/commit/07b3c40a5a78c79ed9109251f842ca7e955dd586
[2] https://github.com/rsyslog/rsyslog/security/advisories/GHSA-cj5r-wh2m-7w29
[3] https://github.com/rsyslog/rsyslog/pull/7410
[4] https://github.com/rsyslog/rsyslog/commit/8e67ae69539153e4e80547dfb5f07ed17222e292

Signed-off-by: Deepak Rathore <deeratho@cisco.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:50 +05:30
Omkar Patil 2e1246f397 postgresql: upgrade 17.10 -> 17.11
Minor security release.

Refreshed the context of 0003-configure.ac-bypass-autoconf-2.69-version-check.patch
for the 17.11 sources (context/version line only, no functional change).
All other patches apply cleanly and are unchanged.

PostgreSQL 17.11 fixes several CVEs;
see the release notes: https://www.postgresql.org/docs/17/release-17-11.html

Ran ptest on qemux86-64: all tests passed.

Signed-off-by: Omkar Patil <OmkarAbaji.Patil@windriver.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:49 +05:30
Ankur Tyagi 24b8b4b3f1 python3-h11: mark CVE-2025-43859 patched
Details:
https://nvd.nist.gov/vuln/detail/cve-2025-43859

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:49 +05:30
Ankur Tyagi 2cb622eea6 python3-gunicorn: mark CVE-2024-1135 patched
Debian[1] also identified the commit.

Details:
https://nvd.nist.gov/vuln/detail/cve-2024-1135

[1]https://security-tracker.debian.org/tracker/CVE-2024-1135

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:49 +05:30
Ankur Tyagi 933d86804a freerdp3: patch CVE-2026-67288
Backport commit matching GitHub advisory[1] also identified by Debian[2]

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-67288

[1]https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-ph3q-f9w8-7jf3
[2]https://security-tracker.debian.org/tracker/CVE-2026-67288

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:48 +05:30
Ankur Tyagi 11f2bab405 freerdp3: patch CVE-2026-66401
Backport commit matching GitHub advisory[1]

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-66401

[1]https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-8jj2-67pg-j6mg

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:48 +05:30
Ankur Tyagi ee9265dada freerdp3: patch CVE-2026-64621
Backport commit matching GitHub advisory[1]

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-64621

[1]https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-f27x-frr8-j9hc

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:47 +05:30
Ankur Tyagi 4964784627 freerdp3: patch CVE-2026-64620
Backport commit matching GitHub advisory[1]

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-64620

[1]https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-pjqx-v446-x7fc

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:47 +05:30
Ankur Tyagi a8c04cf8d2 freerdp3: patch CVE-2026-63652
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-63652

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:46 +05:30
Ankur Tyagi 5900c0fece freerdp3: patch CVE-2026-63633
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-63633

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:46 +05:30
Ankur Tyagi d6868b566a freerdp3: patch CVE-2026-55648
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-55648

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:45 +05:30