From patchwork Mon Jan 12 11:20:12 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Gyorgy Sarvari X-Patchwork-Id: 78509 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 01CB0C9EC75 for ; Mon, 12 Jan 2026 11:20:23 +0000 (UTC) Received: from mail-wm1-f47.google.com (mail-wm1-f47.google.com [209.85.128.47]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.30997.1768216820518105786 for ; Mon, 12 Jan 2026 03:20:20 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20230601 header.b=Vpd6K9UE; spf=pass (domain: gmail.com, ip: 209.85.128.47, mailfrom: skandigraun@gmail.com) Received: by mail-wm1-f47.google.com with SMTP id 5b1f17b1804b1-477a2ab455fso57335345e9.3 for ; Mon, 12 Jan 2026 03:20:20 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1768216819; x=1768821619; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:message-id:date:subject:to :from:from:to:cc:subject:date:message-id:reply-to; bh=ErlCjQqFbdqS5hf+O8fGTQ7OI7V68OKpRAJVghi7KOc=; b=Vpd6K9UEZ98i6qRjuIC8+7sNvi2wAqVUOj7yssreTsmjriU4L5uM8/J1/0FJN63KAs qR+UzxQXXXsfLedy18bb8e2XTgk4iHFc0fFeBQql60eigKsvT/6m2k+YXT+T6K6bhY5Y C/NiALVR/u0bzwYp5FG23xecwAkKNYFs8jDTkzLvCZ1+++pFirz/613eMCHpiOSaFWfX AtC+isnFbNoNP8to8IwSo2SMAJuMgL+NO/xFMzU1S20T9JAJqi/lL2PtxceUvOZzllsv R1Mz7CoRXSfoYlnl5gNYreRM5358bXdOXwTMM/8EWg8QkwBv3WQjcYIBpLn728+f7Yma ZmPw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1768216819; x=1768821619; h=content-transfer-encoding:mime-version:message-id:date:subject:to :from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=ErlCjQqFbdqS5hf+O8fGTQ7OI7V68OKpRAJVghi7KOc=; b=RdHEQKW3faSpftmnKAJD7fenkA8aOAq0jrxQTeBpIXQf0yu1vAvlQ3hAdvl6Ors3n5 s+forE5PR9mARANnZXWImZQGRcH3fMrgOIj0fb1B2YGnAp7oDHbTfwrwFc1euJeAfxuD /9tTqRN2BtKbwG11TANfnDlJjKkvhYyp4wIE+DrmJBLylnfotB6CB/jvkhvsx8T1IvGE FGqlt/QQ95dIthZIGR+ZtCEuQ7UkD9MP/bCwcxDExPDYqaH+GchaiplFREDLWE+yfUTN 6FVt3Eb7OvZUgvCSM6LjoBzmISkg5EKJuTk1Q83X1oWorexTeUkfDuYIrYEENZU1YIfM US8A== X-Gm-Message-State: AOJu0Yw0ZW+vI4Yrgkql5OuXcR0MYQOLioXRkadzBlJnLTJvk2m4P6B0 jXG/tqv7Jm6oxHVHg50RqmTWq8UGNrR6viwCKr4oENgHpNZ7ZtAbDDh6ILj/Jw== X-Gm-Gg: AY/fxX4BJ2wWMLgZN6Zf0K1sPXYo7YsLdfrmDS9/fPksAExaSY0RvCJbM1cGr3Dqrvm gZloT0RJJpG7Mof/vHHUH03Gys/WZMxTWjElVVD+ijyTp8tgH+cHB/Ji5E7SxxJmVK+ZfKJffX9 OZkvg8poXYmY2XcKsg0+0c90xhZX5a1oPY42fNPQuGlZ9RoVTUWvM0fXE8KfMo0OzSuOLuMW3T1 KUFAdHNR0wVrfQ3CiHKOYWk8gAPDOJg1TjChG1JdpyoslAeV6esDhbDns+gWC3oShOwFSz+grGX cUWZ1BMk0Xt1dk+aZA4SEXpFOGOUl1nGJEbQTFqvNLCmsJ/FDCy2cZlS85XUimuTiMXlZ90qTbH 8Vuijc3vfTZl6gazjL/1YlpX3TX+tXM3n7Vvgq0HVCPFMxy8qe8vdhIPbrETyqgCTKqrvhP1qo6 QJqLbGVktRXD2G5q+bCOQ= X-Google-Smtp-Source: AGHT+IFBW7tm+JTMFPdwCj3jCLTYA5caLLdqYL9r58hx2SY/piXBzOquiIklPgOcso66pCb4YLsJQg== X-Received: by 2002:a05:600c:a08:b0:477:63b5:6f39 with SMTP id 5b1f17b1804b1-47d84b3477amr176611465e9.19.1768216818650; Mon, 12 Jan 2026 03:20:18 -0800 (PST) Received: from desktop ([51.154.145.205]) by smtp.gmail.com with ESMTPSA id 5b1f17b1804b1-47d7f695225sm351382935e9.4.2026.01.12.03.20.17 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 12 Jan 2026 03:20:17 -0800 (PST) From: Gyorgy Sarvari To: openembedded-devel@lists.openembedded.org Subject: [meta-oe][kirkstone][PATCH 1/5] raptor2: patch CVE-2017-18926 Date: Mon, 12 Jan 2026 12:20:12 +0100 Message-ID: <20260112112016.515266-1-skandigraun@gmail.com> X-Mailer: git-send-email 2.52.0 MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 12 Jan 2026 11:20:23 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/123377 Details: https://nvd.nist.gov/vuln/detail/CVE-2017-18926 NVD advisory mentions the original announcement on oss-security mailing list[1]. This mentions a bug link[2] related to this vulnerability. The bug mentions the revision of the fix - pick that patch from the project's git repository. [1]: https://www.openwall.com/lists/oss-security/2017/06/07/1 [2]: https://bugs.librdf.org/mantis/view.php?id=617 Signed-off-by: Gyorgy Sarvari --- .../raptor2/files/CVE-2017-18926.patch | 44 +++++++++++++++++++ .../recipes-support/raptor2/raptor2_2.0.15.bb | 8 ++-- 2 files changed, 48 insertions(+), 4 deletions(-) create mode 100644 meta-oe/recipes-support/raptor2/files/CVE-2017-18926.patch diff --git a/meta-oe/recipes-support/raptor2/files/CVE-2017-18926.patch b/meta-oe/recipes-support/raptor2/files/CVE-2017-18926.patch new file mode 100644 index 0000000000..f3211c899b --- /dev/null +++ b/meta-oe/recipes-support/raptor2/files/CVE-2017-18926.patch @@ -0,0 +1,44 @@ +From 686fc0608480f4b2d2f8c60717141ad8e3c5a849 Mon Sep 17 00:00:00 2001 +From: Dave Beckett +Date: Sun, 16 Apr 2017 23:15:12 +0100 +Subject: [PATCH] Calcualte max nspace declarations correctly for XML writer + +(raptor_xml_writer_start_element_common): Calculate max including for +each attribute a potential name and value. + +Fixes Issues #0000617 http://bugs.librdf.org/mantis/view.php?id=617 +and #0000618 http://bugs.librdf.org/mantis/view.php?id=618 + +CVE: CVE-2017-18926 +Upstream-Status: Backport [https://github.com/dajobe/raptor/commit/590681e546cd9aa18d57dc2ea1858cb734a3863f] +Signed-off-by: Gyorgy Sarvari +--- + src/raptor_xml_writer.c | 7 ++++--- + 1 file changed, 4 insertions(+), 3 deletions(-) + +diff --git a/src/raptor_xml_writer.c b/src/raptor_xml_writer.c +index 693b946..0d3a36a 100644 +--- a/src/raptor_xml_writer.c ++++ b/src/raptor_xml_writer.c +@@ -181,9 +181,10 @@ raptor_xml_writer_start_element_common(raptor_xml_writer* xml_writer, + size_t nspace_declarations_count = 0; + unsigned int i; + +- /* max is 1 per element and 1 for each attribute + size of declared */ + if(nstack) { +- int nspace_max_count = element->attribute_count+1; ++ int nspace_max_count = element->attribute_count * 2; /* attr and value */ ++ if(element->name->nspace) ++ nspace_max_count++; + if(element->declared_nspaces) + nspace_max_count += raptor_sequence_size(element->declared_nspaces); + if(element->xml_language) +@@ -237,7 +238,7 @@ raptor_xml_writer_start_element_common(raptor_xml_writer* xml_writer, + } + } + +- /* Add the attribute + value */ ++ /* Add the attribute's value */ + nspace_declarations[nspace_declarations_count].declaration= + raptor_qname_format_as_xml(element->attributes[i], + &nspace_declarations[nspace_declarations_count].length); diff --git a/meta-oe/recipes-support/raptor2/raptor2_2.0.15.bb b/meta-oe/recipes-support/raptor2/raptor2_2.0.15.bb index 577c6ee00a..193cf13b21 100644 --- a/meta-oe/recipes-support/raptor2/raptor2_2.0.15.bb +++ b/meta-oe/recipes-support/raptor2/raptor2_2.0.15.bb @@ -9,10 +9,10 @@ LIC_FILES_CHKSUM = " \ DEPENDS = "libxml2 libxslt curl yajl" -SRC_URI = " \ - http://download.librdf.org/source/${BPN}-${PV}.tar.gz \ - file://0001-configure.ac-do-additional-checks-on-libxml2-also-wh.patch \ -" +SRC_URI = "http://download.librdf.org/source/${BPN}-${PV}.tar.gz \ + file://0001-configure.ac-do-additional-checks-on-libxml2-also-wh.patch \ + file://CVE-2017-18926.patch \ + " SRC_URI[md5sum] = "a39f6c07ddb20d7dd2ff1f95fa21e2cd" SRC_URI[sha256sum] = "ada7f0ba54787b33485d090d3d2680533520cd4426d2f7fb4782dd4a6a1480ed" From patchwork Mon Jan 12 11:20:13 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Gyorgy Sarvari X-Patchwork-Id: 78511 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 14936C9EC77 for ; Mon, 12 Jan 2026 11:20:23 +0000 (UTC) Received: from mail-wm1-f48.google.com (mail-wm1-f48.google.com [209.85.128.48]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.30753.1768216821237687850 for ; Mon, 12 Jan 2026 03:20:21 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20230601 header.b=EwaNOFPr; spf=pass (domain: gmail.com, ip: 209.85.128.48, mailfrom: skandigraun@gmail.com) Received: by mail-wm1-f48.google.com with SMTP id 5b1f17b1804b1-477bf34f5f5so50105245e9.0 for ; Mon, 12 Jan 2026 03:20:21 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1768216820; x=1768821620; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=mC3Zorj5HvFzCgnZy23j+jtdnsKWZDOf8aCId+bCR2E=; b=EwaNOFPrQp5GAfeVWuBd0A/tzBw90NOVwMAT3JtYQZePp7fPmg79zbO0Z/zAN45tZk F6tkkjChY4GlkKCs8uEiN3IDNjmV0KzRk1i1iPii7Uw+cEjhqg9TqdmdAuACU5jPO4uK i2erXfwueahVOcdd89jzqL6uiBz9y3+0ZeF4tk0ADmdCtacZqmJLR+HlXXyhRrDCnnXI Tr047Ot2SIlUGkQgRGch38HLuLktp9963kNR3TJQ8591Zu7EmahVLZsPbowYmmkW+J+R F4n28zxoLGpiTwkwjOPv+SuDza6cPnKke0t0mpwMMRLaX6aCPoovQTlK6z7grj4AG+EP b5aQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1768216820; x=1768821620; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=mC3Zorj5HvFzCgnZy23j+jtdnsKWZDOf8aCId+bCR2E=; b=qZ0xorjCZc9oMtgn92dZe7DD7/jm6B+FgvgpCkN8TLyKgbV8XyHmqdmIrc/nUyIjT5 PaaaqpZJaaciR+r018HIH1SHh/Flp8u+hE6cDishwmzRhBodbxG3q71230Mvt86NeR5e VyibgLfMK6v5/gQApKSHBymUlQQrGuJQnDDrpNK1DVpKmASgrGkC4nE0KU1IMQchm8pK tgp81Wy6XJR9GJqW1wabnQcVwMyFdDRPVqX4W7B22rN8pB84X80rcZBBpd8jqXl9eUj/ huuNkpQJQaGY2GYu61CJEbJy4Y+XK2u0pr1FW/VrwrahzS/bzCI7370/UMRc7UIrtQoi 3K1g== X-Gm-Message-State: AOJu0Yx7i7Ux+DaznSTBRWf47ssH4kfEndVTbCYcsvy0aECa1Tzxn9Yk 2jjb5/rq9unO9h8F4hyZHxoiBhUuZL8JPqax0OF+C11VQC2GWEDyHgeoxazAAw== X-Gm-Gg: AY/fxX4t5e3uQtUQ4PVEyLNwZY0jJuGOjpYkuUwz3WU3rSqf6c/G4rZHTtTovDfeuTA kX/Jc7adhk/elo/52SM+3wVd5dl5nblMeR9DJv3+EZL2smrEinCvbp/f94wnC5+q4bAN2oi4m5E DurXdEbFgRgoAPiDE8U3v1RfBZwly1eb22mNGCkjnQ7QJiX+gvx3YPD31hgKEmtbUnFIBmQWEZs 2zYR3xGXY9WXAk/OFSTE8B0xxh+VsKSMhT/Yb3hsZeKEjw2YfXwHw/FmJ3uqOxUJeGVlG+za1xq DzHvfIQXJoyJIEqbELZUcWLUg3zGhzBPh62d1R6/vPCDxa3aRFBKabhv+Pk2y2IlpBCJbMOdfLv zVIsa553j9WS+ikIUlqz2x1XuirjK2cUVTp6sh0cAq8iPeKxmAUfZC8GbVCnlsVxI4Dr/Ik5L+v uBLyl8+KnAKO+9rfvxPAc= X-Google-Smtp-Source: AGHT+IFuah87ypyR1nr1hdgD4wKBh3vntjriLfu+lDiytC5shhhwmNId1/M2NhXNdy9NAMakslMmGg== X-Received: by 2002:a05:600c:1d0c:b0:471:14b1:da13 with SMTP id 5b1f17b1804b1-47d84b1fcf9mr188632945e9.14.1768216819420; Mon, 12 Jan 2026 03:20:19 -0800 (PST) Received: from desktop ([51.154.145.205]) by smtp.gmail.com with ESMTPSA id 5b1f17b1804b1-47d7f695225sm351382935e9.4.2026.01.12.03.20.18 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 12 Jan 2026 03:20:18 -0800 (PST) From: Gyorgy Sarvari To: openembedded-devel@lists.openembedded.org Subject: [meta-oe][kirkstone][PATCH 2/5] raptor2: patch CVE-2020-25713 Date: Mon, 12 Jan 2026 12:20:13 +0100 Message-ID: <20260112112016.515266-2-skandigraun@gmail.com> X-Mailer: git-send-email 2.52.0 In-Reply-To: <20260112112016.515266-1-skandigraun@gmail.com> References: <20260112112016.515266-1-skandigraun@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 12 Jan 2026 11:20:23 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/123378 Details: https://nvd.nist.gov/vuln/detail/CVE-2020-25713 Pick the git cmmit that is mentioned as a solution in the related bug[1] from the NVD advisory. [1]: https://bugs.librdf.org/mantis/view.php?id=650 Signed-off-by: Gyorgy Sarvari --- .../raptor2/files/CVE-2020-25713.patch | 33 +++++++++++++++++++ .../recipes-support/raptor2/raptor2_2.0.15.bb | 1 + 2 files changed, 34 insertions(+) create mode 100644 meta-oe/recipes-support/raptor2/files/CVE-2020-25713.patch diff --git a/meta-oe/recipes-support/raptor2/files/CVE-2020-25713.patch b/meta-oe/recipes-support/raptor2/files/CVE-2020-25713.patch new file mode 100644 index 0000000000..a2694135e2 --- /dev/null +++ b/meta-oe/recipes-support/raptor2/files/CVE-2020-25713.patch @@ -0,0 +1,33 @@ +From 00fa124e379fab85217ac62bdd0feddfd9510ae5 Mon Sep 17 00:00:00 2001 +From: Dave Beckett +Date: Sat, 18 Sep 2021 17:40:00 -0700 +Subject: [PATCH] XML Writer : compare namespace declarations correctly + +Apply patch from +0001-CVE-2020-25713-raptor2-malformed-input-file-can-lead.patch.1 +that fixes Issue#0000650 https://bugs.librdf.org/mantis/view.php?id=650 +which overwrote heap during XML writing in parse type literal +content. This was detected with clang asan. + +Thanks to Michael Stahl / mst2 for the fix. + +CVE: CVE-2020-25713 +Upstream-Status: Backport [https://github.com/dajobe/raptor/commit/4f5dbbffcc1c6cf0398bd03450453289a0979dea] +Signed-off-by: Gyorgy Sarvari +--- + src/raptor_xml_writer.c | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/src/raptor_xml_writer.c b/src/raptor_xml_writer.c +index 0d3a36a..17b1c44 100644 +--- a/src/raptor_xml_writer.c ++++ b/src/raptor_xml_writer.c +@@ -221,7 +221,7 @@ raptor_xml_writer_start_element_common(raptor_xml_writer* xml_writer, + + /* check it wasn't an earlier declaration too */ + for(j = 0; j < nspace_declarations_count; j++) +- if(nspace_declarations[j].nspace == element->attributes[j]->nspace) { ++ if(nspace_declarations[j].nspace == element->attributes[i]->nspace) { + declare_me = 0; + break; + } diff --git a/meta-oe/recipes-support/raptor2/raptor2_2.0.15.bb b/meta-oe/recipes-support/raptor2/raptor2_2.0.15.bb index 193cf13b21..7ee097b6ce 100644 --- a/meta-oe/recipes-support/raptor2/raptor2_2.0.15.bb +++ b/meta-oe/recipes-support/raptor2/raptor2_2.0.15.bb @@ -12,6 +12,7 @@ DEPENDS = "libxml2 libxslt curl yajl" SRC_URI = "http://download.librdf.org/source/${BPN}-${PV}.tar.gz \ file://0001-configure.ac-do-additional-checks-on-libxml2-also-wh.patch \ file://CVE-2017-18926.patch \ + file://CVE-2020-25713.patch \ " SRC_URI[md5sum] = "a39f6c07ddb20d7dd2ff1f95fa21e2cd" SRC_URI[sha256sum] = "ada7f0ba54787b33485d090d3d2680533520cd4426d2f7fb4782dd4a6a1480ed" From patchwork Mon Jan 12 11:20:14 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Gyorgy Sarvari X-Patchwork-Id: 78510 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 01C7BC9EC74 for ; Mon, 12 Jan 2026 11:20:23 +0000 (UTC) Received: from mail-wr1-f45.google.com (mail-wr1-f45.google.com [209.85.221.45]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.30999.1768216822049402806 for ; Mon, 12 Jan 2026 03:20:22 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20230601 header.b=J1xuJoNg; spf=pass (domain: gmail.com, ip: 209.85.221.45, mailfrom: skandigraun@gmail.com) Received: by mail-wr1-f45.google.com with SMTP id ffacd0b85a97d-430f3ef2d37so5391460f8f.3 for ; Mon, 12 Jan 2026 03:20:21 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1768216820; x=1768821620; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=LjNu46rEm3PlXXgQWcRtGqPnCqtPlblxbE/FJmBleiQ=; b=J1xuJoNgM9er4MaSl2VKJfqFTXMnVDaTRmvZeSGfeDaAxsun8ecF+y4kNXOY+vbqo4 Vi+TIzsmnpRVy53JhQXEZOPI+6hPFLEhEwWow0J4r6XHPq8Cs7/saRXiSXiPaZpgE5Zn wjyI6ND36HfHWP8YkkogE4AycBxFIxSnCVX0qo9MNdWrMqoKQsewEe8ChcpHjbPyQdNy CmHuwxxYS1AOZuDoZHshfK5yXoZmmRlRaopnYbofAIC62qgkHSuirDc+xYUJz6gd6Lam lrG7X1jW2DG+NUxt617u1rysLruCmZE8rPivYOPypxudGzMYvETwdfN/jUDxIpLIJ5g3 31zw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1768216820; x=1768821620; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=LjNu46rEm3PlXXgQWcRtGqPnCqtPlblxbE/FJmBleiQ=; b=CjSIYHD6YRFV30QSo+LiqXnSYmN/CveDYf03wTXrUICygIygHBAS/RbRqC4UNyQP4e AiJFVL+y5c7H6tJamD8ct7pyShToqPDiy6UIJizTtRLz5yOLBiv59N1Mv4pTjXQ5n99x OWUXPTlFFK4naPIJ0E9FzP7S+4BZRnonUVTZ9DmX/SjH4LMCNIj9blHpfTIh83PFE6Xn TFhUEsw5w05glGzksJOLzdlxlwa7xQK8Ah0X4B8Pjt9wCsE64kd87+VQmuKFHJwqLLim +brZM7DLOEprBDVJZqX2x+eZh8xLKVf+yw/k+oK8nWybx6x8/OaiJ6UTqTSMjZNLdJ1a NHmQ== X-Gm-Message-State: AOJu0Yzcko36TpA9nm8EvSbbqjar5t6n0zrlWoZA9qqNFoCSZsT5aEN2 ueeyB3liuXyUBGNJPPZ/iqh9NeXXQmB9oq1nvcnc9NFDaHHek0hGnNChFDn9SA== X-Gm-Gg: AY/fxX5//Mgzx5k9nCpxFYoZgfaPJkatDyeYfviVHOjBAJGF9MKLLiaK6YYv4autFbA QqQXAFDZNqZsEVs5CkK78aIkBRuea2NmmV32eDCq5zcEsAWGqLlgaYi8vcMStySIQjhAAR4bf+k xOE8KUnio2wqG08Q+yS0RaxhaQJoF9+hilybb1HOsX0tvleFNrw+8C490R/YdcdXude7o9MOpaR 4Ju6qBiJgN1wS+4Tuq+ZuuYMvT9XW8yBslPJLhn7ahVyvf6SAwbgC5VA3G1rLi0j7Ya/8GnQMX+ elK1WdRvadFObNb2ldneQo4stu96WdZdtDsUwpaWlGJivb4jrV7B95uh3ivcvCGiAW1fQqERI7l LqfEKpgrZdmjFsqa9CD9Ie7waHC56/vYA3I0SGLPfrwfHIO4R690fY8TKi03nUbHfGvS5xRUIRl z7lYdaQTx4 X-Google-Smtp-Source: AGHT+IFUzlaJqjALJP0m6evJrifAz34jCocm8JA/BFBuEGQzGot7vaEBsWY5sBI+vuaS3grQUq67lQ== X-Received: by 2002:a05:600c:1393:b0:477:55ce:f3bc with SMTP id 5b1f17b1804b1-47d84b3bad4mr193129765e9.19.1768216820163; Mon, 12 Jan 2026 03:20:20 -0800 (PST) Received: from desktop ([51.154.145.205]) by smtp.gmail.com with ESMTPSA id 5b1f17b1804b1-47d7f695225sm351382935e9.4.2026.01.12.03.20.19 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 12 Jan 2026 03:20:19 -0800 (PST) From: Gyorgy Sarvari To: openembedded-devel@lists.openembedded.org Subject: [meta-oe][kirkstone][PATCH 3/5] raptor2: patch CVE-2024-57822 Date: Mon, 12 Jan 2026 12:20:14 +0100 Message-ID: <20260112112016.515266-3-skandigraun@gmail.com> X-Mailer: git-send-email 2.52.0 In-Reply-To: <20260112112016.515266-1-skandigraun@gmail.com> References: <20260112112016.515266-1-skandigraun@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 12 Jan 2026 11:20:23 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/123379 Details: https://nvd.nist.gov/vuln/detail/CVE-2024-57822 Pick the patch mentioned in the related github issue[1]. The issue contains fixes for 2 issues, but only the first patch is related to this vulnerability. [1]: https://github.com/dajobe/raptor/issues/70 Signed-off-by: Gyorgy Sarvari --- .../raptor2/files/CVE-2024-57822.patch | 42 +++++++++++++++++++ .../recipes-support/raptor2/raptor2_2.0.15.bb | 1 + 2 files changed, 43 insertions(+) create mode 100644 meta-oe/recipes-support/raptor2/files/CVE-2024-57822.patch diff --git a/meta-oe/recipes-support/raptor2/files/CVE-2024-57822.patch b/meta-oe/recipes-support/raptor2/files/CVE-2024-57822.patch new file mode 100644 index 0000000000..ee31474cf9 --- /dev/null +++ b/meta-oe/recipes-support/raptor2/files/CVE-2024-57822.patch @@ -0,0 +1,42 @@ +From 9dc72f9534df6e2b94ce22ceb3d90224c1153184 Mon Sep 17 00:00:00 2001 +From: Dave Beckett +Date: Thu, 6 Feb 2025 21:12:37 -0800 +Subject: [PATCH] Fix Github issue 70 A) Integer Underflow in + raptor_uri_normalize_path() + +(raptor_uri_normalize_path): Return empty buffer if path gets to 0 +length + +CVE: CVE-2024-57822 +Upstream-Status: Backport [https://github.com/dajobe/raptor/commit/da7a79976bd0314c23cce55d22495e7d29301c44] +Signed-off-by: Gyorgy Sarvari +--- + src/raptor_rfc2396.c | 8 ++++++++ + 1 file changed, 8 insertions(+) + +diff --git a/src/raptor_rfc2396.c b/src/raptor_rfc2396.c +index 89183d9..2f0195f 100644 +--- a/src/raptor_rfc2396.c ++++ b/src/raptor_rfc2396.c +@@ -351,6 +351,10 @@ raptor_uri_normalize_path(unsigned char* path_buffer, size_t path_len) + *dest++ = *s++; + *dest = '\0'; + path_len -= len; ++ if(path_len <= 0) { ++ *path_buffer = '\0'; ++ return 0; ++ } + + if(p && p < prev) { + /* We know the previous prev path component and we didn't do +@@ -390,6 +394,10 @@ raptor_uri_normalize_path(unsigned char* path_buffer, size_t path_len) + /* Remove /.. at the end of the path */ + *prev = '\0'; + path_len -= (s-prev); ++ if(path_len <= 0) { ++ *path_buffer = '\0'; ++ return 0; ++ } + } + + diff --git a/meta-oe/recipes-support/raptor2/raptor2_2.0.15.bb b/meta-oe/recipes-support/raptor2/raptor2_2.0.15.bb index 7ee097b6ce..d110b8475f 100644 --- a/meta-oe/recipes-support/raptor2/raptor2_2.0.15.bb +++ b/meta-oe/recipes-support/raptor2/raptor2_2.0.15.bb @@ -13,6 +13,7 @@ SRC_URI = "http://download.librdf.org/source/${BPN}-${PV}.tar.gz \ file://0001-configure.ac-do-additional-checks-on-libxml2-also-wh.patch \ file://CVE-2017-18926.patch \ file://CVE-2020-25713.patch \ + file://CVE-2024-57822.patch \ " SRC_URI[md5sum] = "a39f6c07ddb20d7dd2ff1f95fa21e2cd" SRC_URI[sha256sum] = "ada7f0ba54787b33485d090d3d2680533520cd4426d2f7fb4782dd4a6a1480ed" From patchwork Mon Jan 12 11:20:15 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Gyorgy Sarvari X-Patchwork-Id: 78513 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id D45CFC9EC76 for ; Mon, 12 Jan 2026 11:20:32 +0000 (UTC) Received: from mail-wm1-f52.google.com (mail-wm1-f52.google.com [209.85.128.52]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.30754.1768216822924118732 for ; Mon, 12 Jan 2026 03:20:23 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20230601 header.b=acpXe97H; spf=pass (domain: gmail.com, ip: 209.85.128.52, mailfrom: skandigraun@gmail.com) Received: by mail-wm1-f52.google.com with SMTP id 5b1f17b1804b1-47775fb6c56so59594845e9.1 for ; Mon, 12 Jan 2026 03:20:22 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1768216821; x=1768821621; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=PjJ8YIZs647qDmYpa9qaGRPMb+00zIHbpwo1bMEjel0=; b=acpXe97HOpcwZbtPsTCTynV+sWWQlEwWsRA8NC3mpN6cQNjXL8cCpb76kicIujhEp+ fH7HcCHSDAdLfrX5thKJZwFNOA2h/BU4A68sgK83SV05DZbxZo3VcVVO3xp5wZlDx6QN q6Y4E9g5VilR5/Vpe26v3C7TRTxv//wXabipP3T3YMIlxZerKLNp1C6u8Ln8ZflUdW5S w8Bw++MZA+W1AmBIo2daW+3Pz3nX+aptNmVy1PTbBCD+9Ws06GIcjI8w6DZ662L70bRe IgPRI//3W2vlLZZ6u60oPsyVhgU50MoOupW8/x0bbZ456WVKA/ju4jd4VSOcjCx5+1zy 0Prg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1768216821; x=1768821621; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=PjJ8YIZs647qDmYpa9qaGRPMb+00zIHbpwo1bMEjel0=; b=ZDOsULnUyKONmEaVlg0ERMYwsXdBBR+bdTQ0cSoOoZomvUmVA0YkwXxidjzPj1PCj7 kwm4tFE+uffgTRw7wYaFaa0qhYOMflFiUFcbCEqkIKz7k4cFxj1zuOqGzOUYG5mADvvz 5Kax5TpdgT8p2WlbiVRoxxUiuPoHXsE0xIx6OyPWh261yrhX4OhUEXcLSGc1n4sWMGM1 NK5f1P4sCGojkliHMCJEER87bhsrldB9VM8wSbLGaUlXw6sp+R8VLY+puVJBF/8H1wye CdL6WBlwZQJuTaQJ/vuA7FGUXJvtviWmZENbYplVnVYZo3XLaDhEH5SmhbhfAiIbws2m nhuA== X-Gm-Message-State: AOJu0YyZyj5Z1HEp+Tt4/iLCWL/LunztOG0uADUgGZK/AfxB3W7LUR0u Q3nkzZA+3tJCwFc0D32Il7CUBaTiobd7GbuQLDyy02CJWwVFiQ8866VxqQwBRA== X-Gm-Gg: AY/fxX7SMuL7otKfALtUcOnt05ERRIM8ul8O/LKa2RaufkmxcWKYdEokb/QC8cfc4Rb bJrT9GD/aNlm9dIYEXdGU33lpmsIq2S7fUsFACSkzPPSSTPY11oZJe+TXnhK7d4tTPSHydxygcT rjAHOmWnmOe9J+DhI+YxvJT+5f3Gz2IawiBoNjL8ZbLxkQKnuwPmls3wcHXQh3Tr/9tgoocIvtZ XFLG2pWvpvPm9SK6l8wfgauzTC8oSkdqsNeMUMJKF8POl8UMcf02Fvy4NzvgjTn/QAgPug4BEx2 BwEw8Y0YUKywNDLX9O5AC6kTjmplOFAMf+AszGeGrvUNVn0TN3vXtcpnjT3ePy+hgCiv1uwznHx wETNsgosdIw3QJBY8n29vx0g8UzseVqv41Q/Tix8EyTnFu5FqzXhTkcgSk4GILYhRoOyki+du+5 an9TZPsvSYgNo9paU9Ook= X-Google-Smtp-Source: AGHT+IGE2DVQqKBD5IaeTBbYND/G5XL5QiL5jqzQD7/kgxs+s8ndHx/MIi4YV6Gowtj3NHbhlszRTg== X-Received: by 2002:a05:600c:a47:b0:477:54cd:200e with SMTP id 5b1f17b1804b1-47d8e56624emr149841465e9.1.1768216821113; Mon, 12 Jan 2026 03:20:21 -0800 (PST) Received: from desktop ([51.154.145.205]) by smtp.gmail.com with ESMTPSA id 5b1f17b1804b1-47d7f695225sm351382935e9.4.2026.01.12.03.20.20 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 12 Jan 2026 03:20:20 -0800 (PST) From: Gyorgy Sarvari To: openembedded-devel@lists.openembedded.org Subject: [meta-oe][kirkstone][PATCH 4/5] raptor2: patch CVE-2024-57823 Date: Mon, 12 Jan 2026 12:20:15 +0100 Message-ID: <20260112112016.515266-4-skandigraun@gmail.com> X-Mailer: git-send-email 2.52.0 In-Reply-To: <20260112112016.515266-1-skandigraun@gmail.com> References: <20260112112016.515266-1-skandigraun@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 12 Jan 2026 11:20:32 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/123380 Details: https://nvd.nist.gov/vuln/detail/CVE-2024-57822 Pick the patch mentioned in the related github issue[1]. The issue contains fixes for 2 issues, but only the second patch is related to this vulnerability. [1]: https://github.com/dajobe/raptor/issues/70 Signed-off-by: Gyorgy Sarvari --- .../raptor2/files/CVE-2024-57823.patch | 29 +++++++++++++++++++ .../recipes-support/raptor2/raptor2_2.0.15.bb | 1 + 2 files changed, 30 insertions(+) create mode 100644 meta-oe/recipes-support/raptor2/files/CVE-2024-57823.patch diff --git a/meta-oe/recipes-support/raptor2/files/CVE-2024-57823.patch b/meta-oe/recipes-support/raptor2/files/CVE-2024-57823.patch new file mode 100644 index 0000000000..8e5a03379c --- /dev/null +++ b/meta-oe/recipes-support/raptor2/files/CVE-2024-57823.patch @@ -0,0 +1,29 @@ +From 8071a8c4f379831d2c975e04a3197d13ec4d44a3 Mon Sep 17 00:00:00 2001 +From: Dave Beckett +Date: Fri, 7 Feb 2025 11:38:34 -0800 +Subject: [PATCH] Fix Github issue 70 B) Heap read buffer overflow in ntriples + bnode + +(raptor_ntriples_parse_term_internal): Only allow looking at the last +character of a bnode ID only if bnode length >0 + +CVE: CVE-2024-57823 +Upstream-Status: Backport [https://github.com/dajobe/raptor/commit/ece2c79df43091686a538b8231cf387d84bfa60e] +Signed-off-by: Gyorgy Sarvari +--- + src/raptor_ntriples.c | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/src/raptor_ntriples.c b/src/raptor_ntriples.c +index 60fd3aa..c44f8c4 100644 +--- a/src/raptor_ntriples.c ++++ b/src/raptor_ntriples.c +@@ -208,7 +208,7 @@ raptor_ntriples_parse_term_internal(raptor_world* world, + locator->column--; + locator->byte--; + } +- if(term_class == RAPTOR_TERM_CLASS_BNODEID && dest[-1] == '.') { ++ if(term_class == RAPTOR_TERM_CLASS_BNODEID && position > 0 && dest[-1] == '.') { + /* If bnode id ended on '.' move back one */ + dest--; + diff --git a/meta-oe/recipes-support/raptor2/raptor2_2.0.15.bb b/meta-oe/recipes-support/raptor2/raptor2_2.0.15.bb index d110b8475f..422326d2b6 100644 --- a/meta-oe/recipes-support/raptor2/raptor2_2.0.15.bb +++ b/meta-oe/recipes-support/raptor2/raptor2_2.0.15.bb @@ -14,6 +14,7 @@ SRC_URI = "http://download.librdf.org/source/${BPN}-${PV}.tar.gz \ file://CVE-2017-18926.patch \ file://CVE-2020-25713.patch \ file://CVE-2024-57822.patch \ + file://CVE-2024-57823.patch \ " SRC_URI[md5sum] = "a39f6c07ddb20d7dd2ff1f95fa21e2cd" SRC_URI[sha256sum] = "ada7f0ba54787b33485d090d3d2680533520cd4426d2f7fb4782dd4a6a1480ed" From patchwork Mon Jan 12 11:20:16 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Gyorgy Sarvari X-Patchwork-Id: 78512 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id D4601C9EC77 for ; Mon, 12 Jan 2026 11:20:32 +0000 (UTC) Received: from mail-wm1-f54.google.com (mail-wm1-f54.google.com [209.85.128.54]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.31000.1768216823711861000 for ; Mon, 12 Jan 2026 03:20:24 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20230601 header.b=Egs5KB2O; spf=pass (domain: gmail.com, ip: 209.85.128.54, mailfrom: skandigraun@gmail.com) Received: by mail-wm1-f54.google.com with SMTP id 5b1f17b1804b1-47d5e021a53so45718325e9.3 for ; Mon, 12 Jan 2026 03:20:23 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1768216822; x=1768821622; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=gu2Cky51lqz5Gcq0WdV2UWfA1/HdBe0me2pproHykw0=; b=Egs5KB2Op4tsNX0ZfWQNWKwoqlz305nftIIUihwJ6XrrZ2q0vrsQWeqLBTsYO9Xjce 2R2iyjsyV464cLxz2o+U+oZGuA8KX4XurlAlXjXzUGiMCBReDceBrE35ybbaRDZDQ6zO kvXBLjU3CJ2TO1Dn2F9JTNTnlFa22qWHFSa3qgQ0XmiYGdqKFfNwYO0WJ1WuMOrq0Ryz zG76t4WJWTMp5P/tQsLz429cxf1K220X+Mmt1le8xQw10V+jurlqU7AAUJKivPw/up6/ GepLu/Lw6j6bSoByaFQkiVNOOveq11fsK6KxeE0N2e+mg9zeYENTwWbNaEk/azlzuYFE PofA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1768216822; x=1768821622; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=gu2Cky51lqz5Gcq0WdV2UWfA1/HdBe0me2pproHykw0=; b=SBZ6VZ/nZfqVirJ3EGvqXSqtOg0xJ1J75gw7tJsgg8yrTzhy02ZwhI1ev5HlCAiUd7 c+vmb8iWn5gH9N1xQ3ldk+cTIlE0v1hoZeKAQfB20++2wz3hjNpI3WYcjEEDfiHpSJB3 X+Wv/NHgFpryrHotfdGo2D9XWq06nrBIu4X6lHvYhQ0zTFWj8I/t0Mgyr/kDiFpJxa0m Xgo/eAcoc8jTRfYFKntO+A5abWZS/BnATPjdm1BFBUPM6XxXk7QD1Zl6IZ4bdWF0NKHZ //7QsO5UlxEnxzlBKIxiqgHGFE0WnQKLJX1wjLF2ISD/dGz98SFfFGU4A0tx7Fkk3JmS WDAw== X-Gm-Message-State: AOJu0YxTbPkVaNdP0Tt3669c2ulQkeP/eyIaMrvxUHV4mZz1ihm1yAg0 hZOYzCZrUAFO6H9z2FHS9mKUYvS0TBHaH6ySqTi0pamyddUDRGE+YlNjcepXXg== X-Gm-Gg: AY/fxX6/+sRErylyXAx1tAZT7DhXL6MF1hLFlNB0PAaOJAAcgGoWaeIW/7rsxFdOkI/ GGZ0ZbUhzQBMMH2SiCqPSEGCdSVsbyaNU3V4H7YWRePhrrjY/rx4Wtpv0IZVfOE4/L7sBgiH4LD cAD00Vv1wHxaQVMGqPoWsRbZTkMWYuIZSq4C2uFbSbNhCFpTASFesh6XSBWz/nkghE/OfzTWPDi H4YWOw0WH1i6PAu366M0hYdVUZCs+g+XMDAZsz3JRVPDlltZi4NeuOSmxPk+4osxQBFJ0tr/WW7 R6qALbV0bWpO10YORHXYvh3j+aXdBW9FT2um9YD215QeWBc3AMvLm3epmxUi7hECQnEwTmeZD0c htHE811H2CsZ0kWwlog8I0SUsJZmjL70JBXquLFJ4190FaRyZWy5pBQ56nSvPNUU4aXsR3OJY1n ibf913ol+iI3P3rbCXTiA= X-Google-Smtp-Source: AGHT+IHucfZKuD45FoDenCJVLoFjeXwYIAZg7ZRXEBBgt7W/ibJDIpzm7DASR11m3pDnO+WmilWRvA== X-Received: by 2002:a05:600c:4ed3:b0:477:afc5:fb02 with SMTP id 5b1f17b1804b1-47d84b34785mr220161925e9.21.1768216822038; Mon, 12 Jan 2026 03:20:22 -0800 (PST) Received: from desktop ([51.154.145.205]) by smtp.gmail.com with ESMTPSA id 5b1f17b1804b1-47d7f695225sm351382935e9.4.2026.01.12.03.20.21 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 12 Jan 2026 03:20:21 -0800 (PST) From: Gyorgy Sarvari To: openembedded-devel@lists.openembedded.org Subject: [meta-networking][kirkstone][PATCH 5/5] squid: upgrade 4.15 -> 4.17 Date: Mon, 12 Jan 2026 12:20:16 +0100 Message-ID: <20260112112016.515266-5-skandigraun@gmail.com> X-Mailer: git-send-email 2.52.0 In-Reply-To: <20260112112016.515266-1-skandigraun@gmail.com> References: <20260112112016.515266-1-skandigraun@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 12 Jan 2026 11:20:32 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/123381 These are bugfix releases. Changelogs: 4.17: - WCCP: Validate packets better 4.16: - Regression Fix: --with-valgrind-debug build broken since 4.15 - Bug 5129 pt1: remove Lock use from HttpRequestMethod - Bug 5128: Translation: Fix '% i' typo in es/ERR_FORWARDING_DENIED - Bug 4528: ICAP transactions quit on async DNS lookups Signed-off-by: Gyorgy Sarvari --- .../recipes-daemons/squid/{squid_4.15.bb => squid_4.17.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-networking/recipes-daemons/squid/{squid_4.15.bb => squid_4.17.bb} (98%) diff --git a/meta-networking/recipes-daemons/squid/squid_4.15.bb b/meta-networking/recipes-daemons/squid/squid_4.17.bb similarity index 98% rename from meta-networking/recipes-daemons/squid/squid_4.15.bb rename to meta-networking/recipes-daemons/squid/squid_4.17.bb index 575ad76ad3..b0b13f72d5 100644 --- a/meta-networking/recipes-daemons/squid/squid_4.15.bb +++ b/meta-networking/recipes-daemons/squid/squid_4.17.bb @@ -43,7 +43,7 @@ SRC_URI = "http://www.squid-cache.org/Versions/v${MAJ_VER}/${BPN}-${PV}.tar.bz2 SRC_URI:remove:toolchain-clang = "file://0001-configure-Check-for-Wno-error-format-truncation-comp.patch" -SRC_URI[sha256sum] = "71635811e766ce8b155225a9e3c7757cfc7ff93df26b28d82e5e6fc021b9a605" +SRC_URI[sha256sum] = "acf5c3c1707695147226742d1d6cef8993bb32536a622743b51514c3cb501da5" LIC_FILES_CHKSUM = "file://COPYING;md5=b234ee4d69f5fce4486a80fdaf4a4263 \ file://errors/COPYRIGHT;md5=0e03cd976052c45697ad5d96e7dff8dc \