Repository navigation
Backports/v2026.10.1 - #7201
Open
kwryankrattiger wants to merge 15 commits into
Open
Backports/v2026.10.1#7201kwryankrattiger wants to merge 15 commits into
kwryankrattiger wants to merge 15 commits into
Conversation
This was referenced Oct 22, 2026
kwryankrattiger
force-pushed
the
backports/v2026.10
branch
from
October 23, 2026 15:31
75299b0 to
a6d5cb4
Compare
Deprecate 8.3.12 and 7.4.33 over CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) and CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp). Signed-off-by: Ryan Krattiger <ryan.krattiger@kitware.com>
buildconf only runs autoconf/autoheader and libtool.m4 is bundled, so automake, libtool and m4 are not needed. C++ is only used by intl, pdo_firebird and the fuzzer SAPI, none of which are enabled. Add the minimum autoconf and bison versions configure checks for. Signed-off-by: Ryan Krattiger <ryan.krattiger@kitware.com>
Signed-off-by: Ryan Krattiger <ryan.krattiger@kitware.com>
The 2026-10-20 bundle drops the emSign C1, ECC C3 and ECC G3 roots (Mozilla bug 2018979). Older bundles still trust roots Mozilla has since removed, so deprecate them. Signed-off-by: Ryan Krattiger <ryan.krattiger@kitware.com>
Signed-off-by: Ryan Krattiger <ryan.krattiger@kitware.com>
Signed-off-by: Ryan Krattiger <ryan.krattiger@kitware.com> Signed-off-by: Ryan Krattiger <ryan.krattiger@kitware.com>
Signed-off-by: Adam J. Stewart <ajstewart426@gmail.com>
Signed-off-by: Ryan Krattiger <ryan.krattiger@kitware.com> Signed-off-by: Ryan Krattiger <ryan.krattiger@kitware.com>
Signed-off-by: Ryan Krattiger <ryan.krattiger@kitware.com> Signed-off-by: Ryan Krattiger <ryan.krattiger@kitware.com>
Signed-off-by: Ryan Krattiger <ryan.krattiger@kitware.com>
Signed-off-by: Ryan Krattiger <ryan.krattiger@kitware.com> Signed-off-by: Ryan Krattiger <ryan.krattiger@kitware.com>
Signed-off-by: Ryan Krattiger <ryan.krattiger@kitware.com>
Backport note: Additional CVE backports also done for 3.10.22, 3.11.17, 3.12.15. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Signed-off-by: Priyanshi Sharma <hiiuiuiabi@gmail.com>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Signed-off-by: Priyanshi Sharma <hiiuiuiabi@gmail.com>
kwryankrattiger
force-pushed
the
backports/v2026.10
branch
from
October 23, 2026 15:34
a6d5cb4 to
8fce72e
Compare
kwryankrattiger
force-pushed
the
backports/v2026.10
branch
from
October 23, 2026 15:42
8fce72e to
1a66195
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
CVE emSign certs cherry-pick deprecation
Bugfixes: