Hugo SIMELIERE (Schneider Electric) 5bfb71633f libarchive: Fix CVE-2026-4424 ...

Pick patches from [1] and [2] as mentioned in Debian report in [3].

[1] d379dc0b29
[2] e1907c5832
[3] https://security-tracker.debian.org/tracker/CVE-2026-4424

(From OE-Core rev: 7fa280872275e194152cc2d355ad39c81a477d50)

Signed-off-by: Hugo SIMELIERE (Schneider Electric) <hsimeliere.opensource@witekio.com>
Reviewed-by: Bruno VERNAY <bruno.vernay@se.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>

2026-06-10 14:35:20 +01:00

..

acpica

acpica: fix CVE-2024-24856

2024-12-06 05:50:24 -08:00

asciidoc

…

at

…

baremetal-example

baremetal-helloworld: Pull in fix for race condition on x86-64

2023-11-05 08:44:06 +00:00

bash

bash: use -std=gnu17 also for native CFLAGS

2025-08-22 05:59:55 -07:00

bc

…

blktool

…

bzip2

…

cpio

cpio: Pin to use C17 std

2025-09-01 08:30:56 -07:00

cracklib

cracklib: Modify patch to compile with GCC 14

2024-06-19 08:34:58 -07:00

cronie

cronie: upgrade 1.7.1 -> 1.7.2

2024-06-19 08:34:57 -07:00

cups

cups: allow unknown directives in conf files

2026-01-26 09:45:39 +00:00

cwautomacros

…

diffutils

…

ed

ed: upgrade 1.20.1 -> 1.20.2

2024-07-17 05:36:13 -07:00

ethtool

ethtool: upgrade 6.6 -> 6.7

2024-02-03 22:08:25 +00:00

findutils

…

gawk

gawk: Remove References to /usr/local/bin/gawk

2024-08-01 06:08:09 -07:00

ghostscript

ghostscript: fix build with gcc-15 on host

2026-05-12 21:31:34 +01:00

go-examples

go-helloworld: fix license

2025-08-20 07:37:19 -07:00

gperf

…

grep

…

groff

groff: Fix race issues for parallel build

2025-01-18 06:26:45 -08:00

gzip

nativesdk-gzip: fix reproducibility issues

2024-04-12 17:27:53 +01:00

hdparm

…

images

core-image-full-cmdline: add package-management

2024-03-03 16:25:20 +00:00

iptables

iptables: remove /etc/ethertypes

2025-11-03 07:17:02 -08:00

iputils

iputils: patch CVE-2025-48964

2025-07-21 09:07:21 -07:00

less

less: fix CVE-2024-32487

2024-07-23 06:05:47 -07:00

libaio

…

libarchive

libarchive: Fix CVE-2026-4424

2026-06-10 14:35:20 +01:00

libidn

libidn2: upgrade 2.3.4 -> 2.3.7

2024-02-03 22:08:26 +00:00

libmnl

examples: genl: fix wrong attribute size

2025-09-30 08:01:59 -07:00

libnsl

libnsl2: upgrade 2.0.0 -> 2.0.1

2023-11-05 11:28:40 +00:00

libnss-nis

…

libpipeline

…

libsolv

libsolv: upgrade 0.7.27 -> 0.7.28

2024-02-03 22:08:26 +00:00

libtirpc

libtirpc: Fix build with gcc-15/C23

2025-09-01 08:30:56 -07:00

lighttpd

lighttpd: Fix trailing slash on files in mod_dirlisting

2026-02-16 09:52:35 +00:00

logrotate

…

lsb

lsb-release: fix Distro Codename shell escaping

2024-10-30 08:30:00 -07:00

lsof

lsof: upgrade 4.98.0 -> 4.99.3

2024-03-07 17:25:02 +00:00

ltp

ltp: fix epoll_ctl04 failed

2026-05-04 13:57:32 +01:00

lzip

lzlib: add a recipe

2024-02-08 10:59:06 +00:00

man-db

man-db: 2.11.2 -> 2.12.0

2023-12-08 16:58:34 +00:00

man-pages

man-pages: use env from coreutils-native

2024-03-18 12:21:45 +00:00

mc

mc: set ac_cv_path_ZIP to avoid buildpaths QA issues

2025-04-07 06:34:44 -07:00

mdadm

mdadm: Disable 10ddf-fail-spare and 10ddf-fail-stop-readd testcases

2024-01-15 21:42:15 +00:00

mingetty

…

minicom

minicom: correct the SRC_URI

2025-07-11 08:11:53 -07:00

msmtp

msmtp: upgrade 1.8.24 -> 1.8.25

2023-11-05 11:28:40 +00:00

net-tools

net-tools: patch CVE-2025-46836

2025-06-20 08:38:12 -07:00

newt

libnewt: upgrade 0.52.23 -> 0.52.24

2023-11-05 11:28:39 +00:00

packagegroups

mc: upgrade 4.8.30 -> 4.8.31

2024-03-07 17:25:02 +00:00

pam

libpam: mark CVE-2025-6018 as not applicable

2025-11-03 07:17:01 -08:00

parted

parted: Fix build with GCC 15

2025-08-22 05:59:55 -07:00

pbzip2

…

perl

…

pigz

…

procps

procps: fix build with new glibc but old kernel headers

2024-06-19 08:34:58 -07:00

psmisc

…

quota

…

rpcbind

rpcbind: Specify state directory under /run

2023-12-20 07:47:00 +00:00

rpcsvc-proto

…

screen

screen: fix CVE-2025-46804

2025-06-11 08:17:34 -07:00

sed

…

shadow

shadow: don't install libattr.so.* when xattr not in DISTRO_FEATURES

2024-03-23 10:18:20 +00:00

slang

…

stress-ng

stress-ng: upgrade 0.17.04 -> 0.17.05

2024-02-17 18:19:19 +00:00

sudo

sudo: fix for CVE-2026-35535

2026-05-12 21:31:34 +01:00

sysklogd

…

sysstat

sysstat: upgrade 12.7.4 -> 12.7.5

2023-12-23 08:46:00 +00:00

tar

tar: add ptest support

2023-09-28 12:37:46 +01:00

tcp-wrappers

tcp-wrappers: mark all patches as inactive-upstream

2024-08-01 06:08:09 -07:00

texinfo

texinfo: Backport patches for hosts with newer GCC

2026-05-04 13:57:33 +01:00

texinfo-dummy-native

…

time

…

timezone

tzdata/tzcode-native: upgrade 2025c -> 2026a

2026-05-04 13:57:30 +01:00

unzip

unzip: Fix build with GCC-15

2025-09-01 08:30:56 -07:00

watchdog

watchdog: Set watchdog_module in default config

2024-08-06 19:11:18 -07:00

wget

wget: fix CVE-2024-10524

2025-01-24 07:59:38 -08:00

which

…

xdg-utils

…

xinetd

…

xz

xz: ignore CVE-2024-47611

2025-08-22 05:59:54 -07:00

zip

zip: Fix LICENSE

2024-09-19 05:11:35 -07:00

zstd

zstd: fix LICENSE statement

2023-12-08 16:58:34 +00:00