diff mbox series

[AUH] libslirp: upgrading to 4.9.6 SUCCEEDED

Message ID 010101a1717eac70-3c13bd49-ff3e-4c77-bee7-7bca09449bfc-000000@us-west-2.amazonses.com
State New
Headers show
Series [AUH] libslirp: upgrading to 4.9.6 SUCCEEDED | expand

Commit Message

auh@yoctoproject.org Oct. 25, 2026, 5:18 a.m. UTC
Hello,

this email is a notification from the Auto Upgrade Helper
that the automatic attempt to upgrade the recipe(s) *libslirp* to *4.9.6* has Succeeded.

Next steps:
    - apply the patch: git am 0001-libslirp-upgrade-4.9.5-4.9.6.patch
    - check the changes to upstream patches and summarize them in the commit message,
    - compile an image that contains the package
    - perform some basic sanity tests
    - amend the patch and sign it off: git commit -s --reset-author --amend
    - send it to the appropriate mailing list

Alternatively, if you believe the recipe should not be upgraded at this time,
you can fill RECIPE_NO_UPDATE_REASON in respective recipe file so that
automatic upgrades would no longer be attempted.

Please review the attached files for further information and build/update failures.
Any problem please file a bug at https://bugzilla.yoctoproject.org/enter_bug.cgi?product=Automated%20Update%20Handler

Regards,
The Upgrade Helper

-- >8 --
From dbfb42c57dbfac4828bfc3c7410ec1684783bc28 Mon Sep 17 00:00:00 2001
From: Upgrade Helper <auh@yoctoproject.org>
Date: Sun, 25 Oct 2026 05:11:13 +0000
Subject: [PATCH] libslirp: upgrade 4.9.5 -> 4.9.6

## [4.9.6] - 2026-10-25
## Security

  - Fix Buffer Underflow in `tftp_handle_rrq()` When Handling Empty Filename
    #100
  - Fix Echo Reply Length Desynchronization in `icmp_receive()` and
    `icmp6_receive()` #105
  - Reject martians
  - tftp: check actual available room

## Fixed

  - Fix memory leak of tftp_server_name #99
  - Fix Protocol Type Mismatch in `icmp6_receive()`: IPv4 `ICMP_UNREACH` Emitted
    as ICMPv6 #101
  - Fix Double Socket Descriptor Leak in `fork_exec()` on Argument Parsing
    Failure #102
  - Fix Socket Heap Memory & Buffer Leak in `slirp_state_load()` on
    Deserialization or Validation Failure #103
  - Avoid Non-Reentrant Static Variable in `tcp_emu()` #104
  - pingtest: use SLIRP_CONFIG_VERSION_MAX
  - icmp: preserve guest TTL and forward traceroute ICMP errors !166
  - dns: proxy DNS queries sent to the virtual gateway address !163
  - tftp: Drop TFTP_BLOCKSIZE_MAX

  - Fix bounds-check in processing OEM commands (CVE-2026-95507)
  - Fix bounds-check in dhcpv6 against MTU (CVE-2026-95508)
[Unreleased]:
https://gitlab.freedesktop.org/slirp/libslirp/compare/v4.9.6...master
[4.9.5]: https://gitlab.freedesktop.org/slirp/libslirp/compare/v4.9.5...v4.9.6
---
 .../slirp/{libslirp_4.9.5.bb => libslirp_4.9.6.bb}              | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-connectivity/slirp/{libslirp_4.9.5.bb => libslirp_4.9.6.bb} (92%)
diff mbox series

Patch

diff --git a/meta/recipes-connectivity/slirp/libslirp_4.9.5.bb b/meta/recipes-connectivity/slirp/libslirp_4.9.6.bb
similarity index 92%
rename from meta/recipes-connectivity/slirp/libslirp_4.9.5.bb
rename to meta/recipes-connectivity/slirp/libslirp_4.9.6.bb
index d77121bf30..9d231f111d 100644
--- a/meta/recipes-connectivity/slirp/libslirp_4.9.5.bb
+++ b/meta/recipes-connectivity/slirp/libslirp_4.9.6.bb
@@ -6,7 +6,7 @@  LIC_FILES_CHKSUM = "file://COPYRIGHT;md5=f95a9bf4a7e411164fe843697ccda59e \
                     file://LICENSE;md5=cfea6044642fd63b90ce9d79f5db64d9"
 
 SRC_URI = "git://gitlab.freedesktop.org/slirp/libslirp.git;protocol=https;branch=master;tag=v${PV}"
-SRCREV = "390848f47391f412451b2d259d8527fabb51e5e3"
+SRCREV = "392af90207fc51dd9f9044ee9b1f963f3c851c2c"
 UPSTREAM_CHECK_GITTAGREGEX = "v(?P<pver>\d+(\.\d+)+)"
 
 DEPENDS = "glib-2.0"