From patchwork Wed Oct 1 13:32:14 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: auh@yoctoproject.org X-Patchwork-Id: 71365 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 43D20CCD18A for ; Wed, 1 Oct 2025 13:32:23 +0000 (UTC) Received: from a27-23.smtp-out.us-west-2.amazonses.com (a27-23.smtp-out.us-west-2.amazonses.com [54.240.27.23]) by mx.groups.io with SMTP id smtpd.web11.18070.1759325535574003788 for ; Wed, 01 Oct 2025 06:32:15 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@yoctoproject.org header.s=j46ser6a2yusdzubpv7m7ewqgesde2ie header.b=pwRwI130; dkim=pass header.i=@amazonses.com header.s=gdwg2y3kokkkj5a55z2ilkup5wp5hhxx header.b=PXO/8gOI; spf=pass (domain: us-west-2.amazonses.com, ip: 54.240.27.23, mailfrom: 010101999ff93ac9-a5116b83-a413-4c5b-a88f-37aebf12c671-000000@us-west-2.amazonses.com) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=j46ser6a2yusdzubpv7m7ewqgesde2ie; d=yoctoproject.org; t=1759325535; h=Content-Type:MIME-Version:From:To:Cc:Subject:Message-Id:Date; bh=8o4qC4wA3X+h+tHIC3vgjI7fzGae7pVWDVbwp1yJ6bA=; b=pwRwI130uWbjk6Hx9dfXPCGLO0QkKG1ctVU9/FUmhMiop9NQviItdrvTAlkHI9ue y0owmze8i7iY9u/B7FIvhM7RF1v9gJyo9chqiHEHAEp1+bAr/5H7II+3hsY0qyWq4WP yy/aCZMxa+pU9h6Lh4wwCcfjM3mEUeDPVO9GJTps= DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=gdwg2y3kokkkj5a55z2ilkup5wp5hhxx; d=amazonses.com; t=1759325535; h=Content-Type:MIME-Version:From:To:Cc:Subject:Message-Id:Date:Feedback-ID; bh=8o4qC4wA3X+h+tHIC3vgjI7fzGae7pVWDVbwp1yJ6bA=; b=PXO/8gOI9TXetb+iv0OcSfsdX6vP4oYham6U0T/wFNnqHpUjdvNGwCjeg5Kx4POO 1hBTC94VA6Flu3x5uATHY/IY6FjTcvWs0hE8NoC93HtKmzIiHKFrXSjf54Q4GTlNTzL ldPubnv8JRAV3n/wuu0oLuzYBwsPlOAjc5jiYhvI= MIME-Version: 1.0 From: auh@yoctoproject.org To: Hongxu Jia Cc: openembedded-core@lists.openembedded.org Subject: [AUH] libxml2: upgrading to 2.15.0 FAILED Message-ID: <010101999ff93ac9-a5116b83-a413-4c5b-a88f-37aebf12c671-000000@us-west-2.amazonses.com> Date: Wed, 1 Oct 2025 13:32:14 +0000 Feedback-ID: ::1.us-west-2.9np3MYPs3fEaOBysGKSlUD4KtcmPijcmS9Az2Hwf7iQ=:AmazonSES X-SES-Outgoing: 2025.10.01-54.240.27.23 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 01 Oct 2025 13:32:23 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/224222 Hello, this email is a notification from the Auto Upgrade Helper that the automatic attempt to upgrade the recipe(s) *libxml2* to *2.15.0* has Failed(do_compile). Detailed error information: do_compile failed Next steps: - apply the patch: git am 0001-libxml2-upgrade-2.14.6-2.15.0.patch - check the changes to upstream patches and summarize them in the commit message, - compile an image that contains the package - perform some basic sanity tests - amend the patch and sign it off: git commit -s --reset-author --amend - send it to the appropriate mailing list Alternatively, if you believe the recipe should not be upgraded at this time, you can fill RECIPE_NO_UPDATE_REASON in respective recipe file so that automatic upgrades would no longer be attempted. Please review the attached files for further information and build/update failures. Any problem please file a bug at https://bugzilla.yoctoproject.org/enter_bug.cgi?product=Automated%20Update%20Handler Regards, The Upgrade Helper -- >8 -- From 78ac82c7ebed8c566d8aac9c31748681c4c3060e Mon Sep 17 00:00:00 2001 From: Upgrade Helper Date: Wed, 1 Oct 2025 08:24:58 +0000 Subject: [PATCH] libxml2: upgrade 2.14.6 -> 2.15.0 --- ...ake-Fix-installation-directories-in-libxml2.patch | 12 ++++++------ meta/recipes-core/libxml/libxml2/CVE-2025-6021.patch | 4 ++-- meta/recipes-core/libxml/libxml2/install-tests.patch | 6 +++--- .../libxml/{libxml2_2.14.6.bb => libxml2_2.15.0.bb} | 2 +- 4 files changed, 12 insertions(+), 12 deletions(-) rename meta/recipes-core/libxml/{libxml2_2.14.6.bb => libxml2_2.15.0.bb} (97%) diff --git a/meta/recipes-core/libxml/libxml2/0001-Revert-cmake-Fix-installation-directories-in-libxml2.patch b/meta/recipes-core/libxml/libxml2/0001-Revert-cmake-Fix-installation-directories-in-libxml2.patch index 627f8472c3..c9f23e4340 100644 --- a/meta/recipes-core/libxml/libxml2/0001-Revert-cmake-Fix-installation-directories-in-libxml2.patch +++ b/meta/recipes-core/libxml/libxml2/0001-Revert-cmake-Fix-installation-directories-in-libxml2.patch @@ -1,4 +1,4 @@ -From 1a7e177a7315c856a2f0e3c2a17ee0fd9e297bc9 Mon Sep 17 00:00:00 2001 +From daef8210314f7062e21d7466c065e79a3ca26084 Mon Sep 17 00:00:00 2001 From: Peter Marko Date: Mon, 26 May 2025 21:11:14 +0200 Subject: [PATCH] Revert "cmake: Fix installation directories in @@ -15,10 +15,10 @@ Signed-off-by: Peter Marko 3 files changed, 7 insertions(+), 18 deletions(-) diff --git a/configure.ac b/configure.ac -index aaa02e3..fb241bb 100644 +index 4eb629b..150e06e 100644 --- a/configure.ac +++ b/configure.ac -@@ -1065,17 +1065,6 @@ AC_SUBST(XML_PRIVATE_LIBS) +@@ -1006,17 +1006,6 @@ AC_SUBST(XML_PRIVATE_LIBS) AC_SUBST(XML_PRIVATE_CFLAGS) AC_SUBST(XML_INCLUDEDIR) @@ -37,7 +37,7 @@ index aaa02e3..fb241bb 100644 AC_DEFINE_UNQUOTED([XML_SYSCONFDIR], ["$XML_SYSCONFDIR"], [System configuration directory (/etc)]) diff --git a/libxml2-config.cmake.in b/libxml2-config.cmake.in -index e040a75..dc0d6b8 100644 +index ff6433f..b775cfe 100644 --- a/libxml2-config.cmake.in +++ b/libxml2-config.cmake.in @@ -24,17 +24,20 @@ @@ -66,10 +66,10 @@ index e040a75..dc0d6b8 100644 set(LIBXML2_LIBRARIES ${LIBXML2_LIBRARY}) set(LIBXML2_INCLUDE_DIRS ${LIBXML2_INCLUDE_DIR}) diff --git a/meson.build b/meson.build -index 98bc6e3..3ef0bd0 100644 +index 31c73b6..8728852 100644 --- a/meson.build +++ b/meson.build -@@ -599,9 +599,6 @@ config_cmake = configuration_data() +@@ -577,9 +577,6 @@ config_cmake = configuration_data() config_cmake.set('LIBXML_MAJOR_VERSION', v_maj) config_cmake.set('LIBXML_MINOR_VERSION', v_min) config_cmake.set('LIBXML_MICRO_VERSION', v_mic) diff --git a/meta/recipes-core/libxml/libxml2/CVE-2025-6021.patch b/meta/recipes-core/libxml/libxml2/CVE-2025-6021.patch index 0b73bceb24..e836170bd9 100644 --- a/meta/recipes-core/libxml/libxml2/CVE-2025-6021.patch +++ b/meta/recipes-core/libxml/libxml2/CVE-2025-6021.patch @@ -1,4 +1,4 @@ -From e546e423d69ec9b3c71167d3c3140fa1b9af93c7 Mon Sep 17 00:00:00 2001 +From b1251ec22786abbd1adadda3bd349d2078904bd2 Mon Sep 17 00:00:00 2001 From: Nick Wellnhofer Date: Tue, 27 May 2025 12:53:17 +0200 Subject: [PATCH] tree: Fix integer overflow in xmlBuildQName @@ -18,7 +18,7 @@ Signed-off-by: Hongxu Jia 1 file changed, 1 insertion(+) diff --git a/tree.c b/tree.c -index e14bc62..22ec11c 100644 +index e4fd0d6..e353c1f 100644 --- a/tree.c +++ b/tree.c @@ -23,6 +23,7 @@ diff --git a/meta/recipes-core/libxml/libxml2/install-tests.patch b/meta/recipes-core/libxml/libxml2/install-tests.patch index 4c1faa83cb..93dbd45e0e 100644 --- a/meta/recipes-core/libxml/libxml2/install-tests.patch +++ b/meta/recipes-core/libxml/libxml2/install-tests.patch @@ -1,4 +1,4 @@ -From 7e99fef6eae0642a3f1e511e4d24abf7d6d28f50 Mon Sep 17 00:00:00 2001 +From d90ac19aa6118c6bde2963bc11bc0ee73a11c673 Mon Sep 17 00:00:00 2001 From: Ross Burton Date: Mon, 5 Dec 2022 17:02:32 +0000 Subject: [PATCH] add yocto-specific install-ptest target @@ -12,10 +12,10 @@ Signed-off-by: Ross Burton 1 file changed, 10 insertions(+) diff --git a/Makefile.am b/Makefile.am -index 6f98144..ecb3b54 100644 +index 19ec305..9161af9 100644 --- a/Makefile.am +++ b/Makefile.am -@@ -26,6 +26,16 @@ check_PROGRAMS = \ +@@ -29,6 +29,16 @@ check_PROGRAMS = \ testparser \ testrecurse diff --git a/meta/recipes-core/libxml/libxml2_2.14.6.bb b/meta/recipes-core/libxml/libxml2_2.15.0.bb similarity index 97% rename from meta/recipes-core/libxml/libxml2_2.14.6.bb rename to meta/recipes-core/libxml/libxml2_2.15.0.bb index 6ed8760f4c..3eebe99a60 100644 --- a/meta/recipes-core/libxml/libxml2_2.14.6.bb +++ b/meta/recipes-core/libxml/libxml2_2.15.0.bb @@ -21,7 +21,7 @@ SRC_URI += "http://www.w3.org/XML/Test/xmlts20130923.tar;subdir=${BP};name=testt file://CVE-2025-6021.patch \ " -SRC_URI[archive.sha256sum] = "7ce458a0affeb83f0b55f1f4f9e0e55735dbfc1a9de124ee86fb4a66b597203a" +SRC_URI[archive.sha256sum] = "5abc766497c5b1d6d99231f662e30c99402a90d03b06c67b62d6c1179dedd561" SRC_URI[testtar.sha256sum] = "c6b2d42ee50b8b236e711a97d68e6c4b5c8d83e69a2be4722379f08702ea7273" CVE_STATUS[CVE-2025-6170] = "fixed-version: fixed in version 2.14.5"