From patchwork Wed Aug 26 05:59:47 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: auh@yoctoproject.org X-Patchwork-Id: 96372 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 13C64C61DBD for ; Wed, 26 Aug 2026 05:59:58 +0000 (UTC) Received: from a27-191.smtp-out.us-west-2.amazonses.com (a27-191.smtp-out.us-west-2.amazonses.com [54.240.27.191]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.6427.1787723988971337945 for ; Tue, 25 Aug 2026 22:59:49 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@yoctoproject.org header.s=lvjh2tk576v2ro5mi6k4dt3mc6wpqbky header.b=qL1VvkxK; dkim=pass header.i=@amazonses.com header.s=hsbnp7p3ensaochzwyq5wwmceodymuwv header.b=Gl6YXYzT; spf=pass (domain: us-west-2.amazonses.com, ip: 54.240.27.191, mailfrom: 010101a03ca73bb9-f9a4f838-08c0-4ec4-b42c-7d8e63d1e226-000000@us-west-2.amazonses.com) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=lvjh2tk576v2ro5mi6k4dt3mc6wpqbky; d=yoctoproject.org; t=1787723988; h=Content-Type:MIME-Version:From:To:Subject:Message-Id:Date; bh=skFfJ5OstdHCZcOyIsxxb+e6s+aSzIhRZzjD8p2GAek=; b=qL1VvkxKRrw5A4ka31JU8ttjlfzzyBMTMqFUkBsm05s7jwY2ztnUV6w/ePX/VDkC /b1etHHdQocT3+x/IdAX1E8XAkdH1p4DczLgO8NrCEd5jQitzcmGUPLW9oY80kPojqj q63/LDd49vc1dfbNkT/Xyj46raDQn5nNNe7YQofo= DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=hsbnp7p3ensaochzwyq5wwmceodymuwv; d=amazonses.com; t=1787723988; h=Content-Type:MIME-Version:From:To:Subject:Message-Id:Date:Feedback-ID; bh=skFfJ5OstdHCZcOyIsxxb+e6s+aSzIhRZzjD8p2GAek=; b=Gl6YXYzTd8ndCd0gW/oqJt6NQAe0nEfxLk9/qUhJnQlNYz0IKHjg2zlQKKtqvvCv iBG1cG4pY9C56tenuMXKOaX3jS5n9cQUWaI+joypZYjJJptVHaMa9PrYDXKzrKPo4ou H2NLB3BwZOfBVBNDBZzxkw9GImwGzAOPIi4502eI= MIME-Version: 1.0 From: auh@yoctoproject.org To: openembedded-core@lists.openembedded.org Subject: [AUH] libslirp: upgrading to 4.9.4 SUCCEEDED Message-ID: <010101a03ca73bb9-f9a4f838-08c0-4ec4-b42c-7d8e63d1e226-000000@us-west-2.amazonses.com> Date: Wed, 26 Aug 2026 05:59:47 +0000 Feedback-ID: ::1.us-west-2.9np3MYPs3fEaOBysGKSlUD4KtcmPijcmS9Az2Hwf7iQ=:AmazonSES X-SES-Outgoing: 2026.08.26-54.240.27.191 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 26 Aug 2026 05:59:58 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/244307 Hello, this email is a notification from the Auto Upgrade Helper that the automatic attempt to upgrade the recipe(s) *libslirp* to *4.9.4* has Succeeded. Next steps: - apply the patch: git am 0001-libslirp-upgrade-4.9.3-4.9.4.patch - check the changes to upstream patches and summarize them in the commit message, - compile an image that contains the package - perform some basic sanity tests - amend the patch and sign it off: git commit -s --reset-author --amend - send it to the appropriate mailing list Alternatively, if you believe the recipe should not be upgraded at this time, you can fill RECIPE_NO_UPDATE_REASON in respective recipe file so that automatic upgrades would no longer be attempted. Please review the attached files for further information and build/update failures. Any problem please file a bug at https://bugzilla.yoctoproject.org/enter_bug.cgi?product=Automated%20Update%20Handler Regards, The Upgrade Helper -- >8 -- From 4d944bfa36b4e100da62b8ce62f637befd05668e Mon Sep 17 00:00:00 2001 From: Upgrade Helper Date: Wed, 26 Aug 2026 05:40:34 +0000 Subject: [PATCH] libslirp: upgrade 4.9.3 -> 4.9.4 Source: CHANGELOG.md ## [4.9.4] - 2026-08-25 ## Security - Fix information leak on fragmented packets with different header lengths ### Fixed - Fix reporting oob output #95 - Fix buffer trimming to ip6-announced length #96 ## Changed - slirp: permit guestfwd to vhost_addr/vnameserver_addr #81 #140 - oob: cap urgent data count to what is actually available #93 (CVE-2026-9539) [Unreleased]: https://gitlab.freedesktop.org/slirp/libslirp/compare/v4.9.4...master [4.9.4]: https://gitlab.freedesktop.org/slirp/libslirp/compare/v4.9.3...v4.9.4 --- .../slirp/{libslirp_4.9.3.bb => libslirp_4.9.4.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-connectivity/slirp/{libslirp_4.9.3.bb => libslirp_4.9.4.bb} (92%) diff --git a/meta/recipes-connectivity/slirp/libslirp_4.9.3.bb b/meta/recipes-connectivity/slirp/libslirp_4.9.4.bb similarity index 92% rename from meta/recipes-connectivity/slirp/libslirp_4.9.3.bb rename to meta/recipes-connectivity/slirp/libslirp_4.9.4.bb index be13cbc1fc..79a24f3037 100644 --- a/meta/recipes-connectivity/slirp/libslirp_4.9.3.bb +++ b/meta/recipes-connectivity/slirp/libslirp_4.9.4.bb @@ -6,7 +6,7 @@ LIC_FILES_CHKSUM = "file://COPYRIGHT;md5=f95a9bf4a7e411164fe843697ccda59e \ file://LICENSE;md5=cfea6044642fd63b90ce9d79f5db64d9" SRC_URI = "git://gitlab.freedesktop.org/slirp/libslirp.git;protocol=https;branch=master;tag=v${PV}" -SRCREV = "dd76415fce457e319d665eb8210d05c5731360ba" +SRCREV = "d09dc9a70360ee7838acccbd234ab83f3b9b37a5" UPSTREAM_CHECK_GITTAGREGEX = "v(?P\d+(\.\d+)+)" DEPENDS = "glib-2.0"