From patchwork Wed Sep 24 19:35:17 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Jeroen Hofstee X-Patchwork-Id: 70953 X-Patchwork-Delegate: steve@sakoman.com Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id BEFFACAC5AE for ; Wed, 24 Sep 2025 19:36:10 +0000 (UTC) Received: from outbound4.mail.transip.nl (outbound4.mail.transip.nl [136.144.136.2]) by mx.groups.io with SMTP id smtpd.web10.23277.1758742568184874213 for ; Wed, 24 Sep 2025 12:36:10 -0700 Authentication-Results: mx.groups.io; dkim=fail reason="dkim: body hash did not verify" header.i=@myspectrum.nl header.s=transip-a header.b=TvbPaL/j; spf=pass (domain: myspectrum.nl, ip: 136.144.136.2, mailfrom: jeroen@myspectrum.nl) Received: from submission8.mail.transip.nl (unknown [10.103.8.159]) by outbound4.mail.transip.nl (Postfix) with ESMTP id 4cX6XP58wWzwPN6; Wed, 24 Sep 2025 21:36:05 +0200 (CEST) Received: from yellow.myspectrum.nl (yellow.myspectrum.nl [136.144.146.76]) by submission8.mail.transip.nl (Postfix) with ESMTPSA id 4cX6XJ6Hl5z2npc7y; Wed, 24 Sep 2025 21:36:00 +0200 (CEST) Received: from yellow.myspectrum.nl (82-75-103-118.cable.dynamic.v4.ziggo.nl [82.75.103.118]) (Authenticated sender: sendmail@myspectrum.nl) by yellow.myspectrum.nl (Postfix) with ESMTPSA id D4E0F2007B; Wed, 24 Sep 2025 19:35:58 +0000 (UTC) Authentication-Results: yellow.myspectrum.nl; auth=pass smtp.auth=sendmail@myspectrum.nl smtp.mailfrom=jeroen@myspectrum.nl Received: by yellow.myspectrum.nl (sSMTP sendmail emulation); Wed, 24 Sep 2025 21:35:57 +0200 From: jeroen@myspectrum.nl To: openembedded-core@lists.openembedded.org Cc: Markus Kurz , Mathieu Dubois-Briand , Richard Purdie , Jeroen Hofstee Subject: [walnascar][PATCH] libpcre2: upgrade 10.45 -> 10.46 Date: Wed, 24 Sep 2025 21:35:17 +0200 Message-ID: <20250924193517.1753094-1-jeroen@myspectrum.nl> X-Mailer: git-send-email 2.43.0 MIME-Version: 1.0 X-Scanned-By: ClueGetter at submission8.mail.transip.nl DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; s=transip-a; d=myspectrum.nl; t=1758742560; h=from:subject:to:cc:date: mime-version; bh=4IP4UqK3+B9AonJZJ/FIP6RZ5wZ45Tvkct0dWUkwfnI=; b=TvbPaL/jmxyBZOCg33UalEcoba2emuBENvKKtoBH05wTfyPfIXGmW3NFYfQc3ycD4jCpqO rNUfNVEacjwhINHCmL+ts+5mmwssCZfkS4ewkUFsrUs33hTEBWcYoyHryiY/ym3Bx411F2 Imec2m1a7ZQq3cjdzKTMFX23Hs8BdMG8To1kLp6F6DTVqhGPM3e+6fc2MaL+PLdX8i3dr+ C4tigZLkx9orkBrObHdWTiiMsN9ok0iKEXc6YRNlJRc4xjRknHgznC6GcQOdW84R4DrJu3 jpsAivWPg3cDPmfQrjODAjJTOGXuwHmPyS9DR1mOdfmBQ+6hjRSH1IM3MQBE2w== X-Report-Abuse-To: abuse@transip.nl List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 24 Sep 2025 19:36:10 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/223980 From: Markus Kurz For the changelog see: https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.46 This is a security-only release, to address CVE-2025-58050: https://nvd.nist.gov/vuln/detail/CVE-2025-58050 Signed-off-by: Markus Kurz Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie (cherry picked from commit d5b45d0db9ed40b3eef2e6a076c94da3ecc48acf) Signed-off-by: Jeroen Hofstee --- .../libpcre/{libpcre2_10.45.bb => libpcre2_10.46.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-support/libpcre/{libpcre2_10.45.bb => libpcre2_10.46.bb} (95%) diff --git a/meta/recipes-support/libpcre/libpcre2_10.45.bb b/meta/recipes-support/libpcre/libpcre2_10.46.bb similarity index 95% rename from meta/recipes-support/libpcre/libpcre2_10.45.bb rename to meta/recipes-support/libpcre/libpcre2_10.46.bb index e82de0fa5b..023ae4041b 100644 --- a/meta/recipes-support/libpcre/libpcre2_10.45.bb +++ b/meta/recipes-support/libpcre/libpcre2_10.46.bb @@ -15,7 +15,7 @@ SRC_URI = "${GITHUB_BASE_URI}/download/pcre2-${PV}/pcre2-${PV}.tar.bz2" GITHUB_BASE_URI = "https://github.com/PCRE2Project/pcre2/releases" UPSTREAM_CHECK_REGEX = "releases/tag/pcre2-(?P\d+(\.\d+)+)$" -SRC_URI[sha256sum] = "21547f3516120c75597e5b30a992e27a592a31950b5140e7b8bfde3f192033c4" +SRC_URI[sha256sum] = "15fbc5aba6beee0b17aecb04602ae39432393aba1ebd8e39b7cabf7db883299f" CVE_PRODUCT = "pcre2"