Hitendra Prajapati 9ed096d15f sudo: fix for CVE-2026-35535 ...

Pick patch from [1] also mentioned at Debian report in [2]

[1] https://github.com/sudo-project/sudo/commit/3e474c2f201484be83d994ae10a4e20e8c81bb69
[2] https://security-tracker.debian.org/tracker/CVE-2026-35535
[3] https://nvd.nist.gov/vuln/detail/CVE-2026-35535

(From OE-Core rev: ddf8325a5b791dfcb0fdf129274deea8ad7eb90a)

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>

2026-05-12 21:31:34 +01:00

..

acpica

acpica: fix CVE-2024-24856

2024-12-06 05:50:24 -08:00

asciidoc

…

at

…

baremetal-example

baremetal-helloworld: Pull in fix for race condition on x86-64

2023-11-05 08:44:06 +00:00

bash

bash: use -std=gnu17 also for native CFLAGS

2025-08-22 05:59:55 -07:00

bc

…

blktool

…

bzip2

…

cpio

cpio: Pin to use C17 std

2025-09-01 08:30:56 -07:00

cracklib

cracklib: Modify patch to compile with GCC 14

2024-06-19 08:34:58 -07:00

cronie

cronie: upgrade 1.7.1 -> 1.7.2

2024-06-19 08:34:57 -07:00

cups

cups: allow unknown directives in conf files

2026-01-26 09:45:39 +00:00

cwautomacros

…

diffutils

diffutils: update 3.9 -> 3.10

2023-06-27 16:23:40 +01:00

ed

ed: upgrade 1.20.1 -> 1.20.2

2024-07-17 05:36:13 -07:00

ethtool

ethtool: upgrade 6.6 -> 6.7

2024-02-03 22:08:25 +00:00

findutils

autoconf: Upgrade to 2.72c

2023-07-30 07:54:44 +01:00

gawk

gawk: Remove References to /usr/local/bin/gawk

2024-08-01 06:08:09 -07:00

ghostscript

ghostscript: fix build with gcc-15 on host

2026-05-12 21:31:34 +01:00

go-examples

go-helloworld: fix license

2025-08-20 07:37:19 -07:00

gperf

…

grep

…

groff

groff: Fix race issues for parallel build

2025-01-18 06:26:45 -08:00

gzip

nativesdk-gzip: fix reproducibility issues

2024-04-12 17:27:53 +01:00

hdparm

…

images

core-image-full-cmdline: add package-management

2024-03-03 16:25:20 +00:00

iptables

iptables: remove /etc/ethertypes

2025-11-03 07:17:02 -08:00

iputils

iputils: patch CVE-2025-48964

2025-07-21 09:07:21 -07:00

less

less: fix CVE-2024-32487

2024-07-23 06:05:47 -07:00

libaio

…

libarchive

libarchive: fix for CVE-2026-4426

2026-05-12 21:31:34 +01:00

libidn

libidn2: upgrade 2.3.4 -> 2.3.7

2024-02-03 22:08:26 +00:00

libmnl

examples: genl: fix wrong attribute size

2025-09-30 08:01:59 -07:00

libnsl

libnsl2: upgrade 2.0.0 -> 2.0.1

2023-11-05 11:28:40 +00:00

libnss-nis

libnss-nis: upgrade 3.1 -> 3.2

2023-07-17 15:30:04 +01:00

libpipeline

autoconf: Upgrade to 2.72c

2023-07-30 07:54:44 +01:00

libsolv

libsolv: upgrade 0.7.27 -> 0.7.28

2024-02-03 22:08:26 +00:00

libtirpc

libtirpc: Fix build with gcc-15/C23

2025-09-01 08:30:56 -07:00

lighttpd

lighttpd: Fix trailing slash on files in mod_dirlisting

2026-02-16 09:52:35 +00:00

logrotate

oeqa/selftest/cve_check: rework test to new cve status handling

2023-07-19 23:25:01 +01:00

lsb

lsb-release: fix Distro Codename shell escaping

2024-10-30 08:30:00 -07:00

lsof

lsof: upgrade 4.98.0 -> 4.99.3

2024-03-07 17:25:02 +00:00

ltp

ltp: fix epoll_ctl04 failed

2026-05-04 13:57:32 +01:00

lzip

lzlib: add a recipe

2024-02-08 10:59:06 +00:00

man-db

man-db: 2.11.2 -> 2.12.0

2023-12-08 16:58:34 +00:00

man-pages

man-pages: use env from coreutils-native

2024-03-18 12:21:45 +00:00

mc

mc: set ac_cv_path_ZIP to avoid buildpaths QA issues

2025-04-07 06:34:44 -07:00

mdadm

mdadm: Disable 10ddf-fail-spare and 10ddf-fail-stop-readd testcases

2024-01-15 21:42:15 +00:00

mingetty

recipes: Drop remaining PR values from recipes

2023-09-22 07:45:17 +01:00

minicom

minicom: correct the SRC_URI

2025-07-11 08:11:53 -07:00

msmtp

msmtp: upgrade 1.8.24 -> 1.8.25

2023-11-05 11:28:40 +00:00

net-tools

net-tools: patch CVE-2025-46836

2025-06-20 08:38:12 -07:00

newt

libnewt: upgrade 0.52.23 -> 0.52.24

2023-11-05 11:28:39 +00:00

packagegroups

mc: upgrade 4.8.30 -> 4.8.31

2024-03-07 17:25:02 +00:00

pam

libpam: mark CVE-2025-6018 as not applicable

2025-11-03 07:17:01 -08:00

parted

parted: Fix build with GCC 15

2025-08-22 05:59:55 -07:00

pbzip2

…

perl

libconvert-asn1-perl: upgrade 0.33 -> 0.34

2023-09-02 18:23:05 +01:00

pigz

pigz: upgrade 2.7 -> 2.8

2023-09-02 18:23:06 +01:00

procps

procps: fix build with new glibc but old kernel headers

2024-06-19 08:34:58 -07:00

psmisc

…

quota

…

rpcbind

rpcbind: Specify state directory under /run

2023-12-20 07:47:00 +00:00

rpcsvc-proto

rpcsvc-proto: Upgrade to 1.4.4

2023-06-19 13:18:56 +01:00

screen

screen: fix CVE-2025-46804

2025-06-11 08:17:34 -07:00

sed

…

shadow

shadow: don't install libattr.so.* when xattr not in DISTRO_FEATURES

2024-03-23 10:18:20 +00:00

slang

…

stress-ng

stress-ng: upgrade 0.17.04 -> 0.17.05

2024-02-17 18:19:19 +00:00

sudo

sudo: fix for CVE-2026-35535

2026-05-12 21:31:34 +01:00

sysklogd

sysklogd: upgrade 2.5.0 -> 2.5.2

2023-09-02 18:23:06 +01:00

sysstat

sysstat: upgrade 12.7.4 -> 12.7.5

2023-12-23 08:46:00 +00:00

tar

tar: add ptest support

2023-09-28 12:37:46 +01:00

tcp-wrappers

tcp-wrappers: mark all patches as inactive-upstream

2024-08-01 06:08:09 -07:00

texinfo

texinfo: Backport patches for hosts with newer GCC

2026-05-04 13:57:33 +01:00

texinfo-dummy-native

…

time

…

timezone

tzdata/tzcode-native: upgrade 2025c -> 2026a

2026-05-04 13:57:30 +01:00

unzip

unzip: Fix build with GCC-15

2025-09-01 08:30:56 -07:00

watchdog

watchdog: Set watchdog_module in default config

2024-08-06 19:11:18 -07:00

wget

wget: fix CVE-2024-10524

2025-01-24 07:59:38 -08:00

which

recipes: Drop remaining PR values from recipes

2023-09-22 07:45:17 +01:00

xdg-utils

…

xinetd

cve_check: convert CVE_CHECK_IGNORE to CVE_STATUS

2023-07-21 11:52:26 +01:00

xz

xz: ignore CVE-2024-47611

2025-08-22 05:59:54 -07:00

zip

zip: Fix LICENSE

2024-09-19 05:11:35 -07:00

zstd

zstd: fix LICENSE statement

2023-12-08 16:58:34 +00:00