p5-Mozilla-CA: update to 20261020.
20261020
- Update from Mozilla repository to 2026-10-20
- Denylisted certificates:
- emSign ECC Root CA - G3
sha256: 86a1ecba089c4a8d3bbe2734c612ba341d813e043cf9e8a862cd5c57a36bbe6b
Additionally apply patch to pullup the following, requested by
riastradh in ticket #1383:
distrib/sets/lists/base/mi 1.1394
mark two removed certs as obsolete
Pull up following revision(s) (requested by riastradh in ticket #537):
distrib/sets/lists/base/mi: revision 1.1394
mozilla-certdata: Mark two nixed certs as obsolete.
Missed a spot, must not have had a clean destdir somehow.
PR security/60908: mozilla-certdata: update for compromised CA
[SPIRV][NFC] Clean up unnecessary code (#233133)
Local variable `SrcType` is not read at any point in the remainder of
the if block which returns at the end, so remove this unneeded assign.
sysutils/u-boot: Update to 2026.10
The project does not publish release tarballs on ftp.denx.de anymore, fetch
newer releases from its GitLab instance. Older slave ports can still pin a
tarball release.
Use the new rkbin blobs for the RK3568 and RK3588 boards.
Mark u-boot-beaglebone as broken: am335x does not resolve SYS_LOAD_ADDR and
TEXT_BASE through the kconfig merge and the build hangs.
Gate webshare units on the licence via systemd
This commit makes some changes where instead of keeping the webshare unit disabled in systemd when unlicensed, we ship a drop-in for the webshare units that checks the WEBSHARE entitlement through middleware before starting, so boot, upgrades and manual starts are all covered and the rc/config upload paths go back to master. Truesearch also stops indexing webshare directories when webshare is not entitled.
smb client: fix mis-merge with fileattr_set taking a const idmap
The danger of doing the merge window while on vacation and traveling
with just the laptop: I only do full builds a couple of times a day
because they are so slow on my poor little laptop.
As a result, I missed the conflict between the newly added smb client
fileattr_set function (commit 273913b7c33a: "smb: client: implement
fileattr_set for compression flags") and the vfs layer having in the
meantime made the idmap argument 'const' (commit 025756ee7b47: "fs: port
mnt_idmap() and file_mnt_idmap() to const mnt_idmap")
Mea culpa.
Fixes: 32543b09681a ("Merge tag 'cifs-for-7.4' of https://git.manguebit.org/linux")
Signed-off-by: Linus Torvalds <torvalds at linux-foundation.org>
[clang-tidy] Allow use of decltype(nullptr) for defining nullptr_t (#231637)
Otherwise we end up emitting a warning when trying to compile libc++
given it defines std::nullptr_t (and ::nullptr_t in stddef.h). It
doesn't make sense to emit this warning inside of the standard library
and the fix also ends up being circular.
Assisted-By: LLM
[CIR][SPIR-V] Use the program address space for global ctors and dtors (#233927)
llvm.global_ctors and llvm.global_dtors entries used addrspace(0)
pointers, which asserted on targets with a non-zero program address
space
firefox153: update to 153.5.1
Mozilla Foundation Security Advisory 2026-112
Security Vulnerabilities fixed in Firefox ESR 153.5.1
Announced
October 20, 2026
Impact
high
Products
Firefox ESR
Fixed in
Firefox ESR 153.5.1
Note: We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug.
#CVE-2026-113470: Cryptographic issue in the Security Block-lists, Allow-lists, and other State component
[11 lines not shown]
