From patchwork Tue Feb 24 14:40:54 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 81788 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id AE7D1F3C991 for ; Tue, 24 Feb 2026 14:41:13 +0000 (UTC) Received: from mail-wr1-f49.google.com (mail-wr1-f49.google.com [209.85.221.49]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.21847.1771944068395919792 for ; Tue, 24 Feb 2026 06:41:08 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=nsV6louT; spf=pass (domain: smile.fr, ip: 209.85.221.49, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f49.google.com with SMTP id ffacd0b85a97d-4375d4fb4d4so3590540f8f.0 for ; Tue, 24 Feb 2026 06:41:08 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1771944066; x=1772548866; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=EXOTLuGTlkU3C+b2lplBCc6iV3Az6hrv3VyLd8UqJe0=; b=nsV6louTKMP1jqu71ffb2TPM1cRy8Q01MqEkOsuMOCdVoFWyvt4jAymNcbL2zTj2zA uoYYjZEhCk3MVn9DVc/701dyWT2T+kUkJpQ9uVq6ZhB3+XnakwaSk35kdYnMSjZMbCGg nzIJRb4pDVKW0zC22CaJSDRnTsFST9gjb+3Dc= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1771944066; x=1772548866; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=EXOTLuGTlkU3C+b2lplBCc6iV3Az6hrv3VyLd8UqJe0=; b=JFJ3AqyHZZoKfWN4opUlHCPIK0LyAMkREARWYUijZQ2rhwL0Do2WXCkNPc23SlTA65 RZjmV/CJh4t3pK2VLiIMECUs5P1xo9iS3hcYpTLm9hkDQBuHvmJU76sqkMiiyEWNo4iq bDbTiNo8Hgij7iKruAjrjDbmJ0c6WC0GiSM7wKRVbNb4+WVTFOxTXznddsoULH8Q+3QI Bw0Rv1an2xOYkVf5SPuk7X1EiaCXy2ha0xdp5WzXXzS4LoeyUg6mYtJIMzS5fau0i6ZW MrR0ezU+myLdmC/2TPkUuoxXo//AxUDvqH4CufnWj6yJhxog7GMd3+o+lkLYtOlKC4rP tdGQ== X-Gm-Message-State: AOJu0YyKCCL7D7Z5GcoEuixAQdaefoEERkS8Ve2hMuKomtC6/+drhSEM TrEuUsWGcf65nty277jgdXqfzxy1Ae53LyCdp816wfX4GcXxWAXciVU5fD3HBnSktSyvIVytEE/ n8C5e X-Gm-Gg: ATEYQzxpc6mmFnkBacGBI69jslJnunZXaBE+nezuTkkyvDoZ/einXWqq6JvszX+BXJh kTpyA+fAtsXNPv5cl7cvfbbUKkPiMuJs4ffWZp1kV/QDt/2QeGzl7sa9/ZTNIEywlag/CaWx2IH YXaZjm59+qJmm23N80xvjFpiECh9GkkIIixkae9ZG/+RwnbaO5q4ay8Fc7Dn+WS/gBqjFCyXwak zi+uJVeQe/WIuIM7TTm4Lf8a3EepapB46KEJLxfb8vm6GyzSLwPPo/JJ15nJiDRFgQ3y+FoU9Je /eHxxi4LLoWigVij852xshV7iaQM6Us7gDub6UwGMx/1yne26X9a4tmr/gjclDGbq4S2o+iGQg5 rTpjA3QKyBon0xiHDi+bdI2/qw6CJmLzJ2YleQ07XvN6g+DscBC/r+EdMMIovVoctfK0WcReT3a XMRQ7FxlXSRhgN50r+DXE6oThG+0cyVxnXqMsDgoGSSeI1o+5JoHxQu9+iQLsICXb5LXa+Zv5CV 0tAkeb35k3qNoXoGSw= X-Received: by 2002:a05:6000:2002:b0:435:95ce:84cd with SMTP id ffacd0b85a97d-4396f188017mr21959267f8f.54.1771944066136; Tue, 24 Feb 2026 06:41:06 -0800 (PST) Received: from FRSMI25-LASER.idf.intranet (static-css-ccs-204145.business.bouyguestelecom.com. [176.157.204.145]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-43970d3ff6dsm28711195f8f.25.2026.02.24.06.41.05 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 24 Feb 2026 06:41:05 -0800 (PST) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][whinlatter 1/9] pseudo: Update to include a fix for systems with kernel <5.6 Date: Tue, 24 Feb 2026 15:40:54 +0100 Message-ID: <527babecf00982686e8bebb1419b197395de9824.1771943829.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Tue, 24 Feb 2026 14:41:13 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/231853 From: Yoann Congal $ git log --oneline --no-decorate 9ab513512d8b5180a430ae4fa738cb531154cdef..43cbd8fb4914328094ccdb4bb827d74b1bac2046 43cbd8f ports/linux: define __NR_openat2 if missing Signed-off-by: Yoann Congal --- meta/recipes-devtools/pseudo/pseudo_git.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-devtools/pseudo/pseudo_git.bb b/meta/recipes-devtools/pseudo/pseudo_git.bb index 2dc5eabf2cb..a26a205a160 100644 --- a/meta/recipes-devtools/pseudo/pseudo_git.bb +++ b/meta/recipes-devtools/pseudo/pseudo_git.bb @@ -12,7 +12,7 @@ SRC_URI:append:class-nativesdk = " \ file://older-glibc-symbols.patch" SRC_URI[prebuilt.sha256sum] = "ed9f456856e9d86359f169f46a70ad7be4190d6040282b84c8d97b99072485aa" -SRCREV = "9ab513512d8b5180a430ae4fa738cb531154cdef" +SRCREV = "43cbd8fb4914328094ccdb4bb827d74b1bac2046" PV = "1.9.3+git" # largefile and 64bit time_t support adds these macros via compiler flags globally From patchwork Tue Feb 24 14:40:55 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 81787 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 9CDA9F3C98A for ; Tue, 24 Feb 2026 14:41:13 +0000 (UTC) Received: from mail-wr1-f51.google.com (mail-wr1-f51.google.com [209.85.221.51]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.21848.1771944068701258503 for ; Tue, 24 Feb 2026 06:41:09 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=bB/4HauP; spf=pass (domain: smile.fr, ip: 209.85.221.51, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f51.google.com with SMTP id ffacd0b85a97d-436234ef0f0so3695212f8f.1 for ; Tue, 24 Feb 2026 06:41:08 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1771944067; x=1772548867; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=tEDkYr68XXiM8F2X/8AfYaxxbkJhIDZ58bG5tIJGidY=; b=bB/4HauPOKRCbOtzhqWB1TgDXei9BZz17P81NofI87+ir1fA71OQaylmfP0zZHGvpR W+3BhCl9AWyjueLoz+V91Z43mAS4wVmwb04Fj0g+vpGIO6oBBpDRb2vCbweXyEB1/8Sr AWyGz73z68pMZE6qEbjU50jEBYv0mmdTTbDAY= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1771944067; x=1772548867; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=tEDkYr68XXiM8F2X/8AfYaxxbkJhIDZ58bG5tIJGidY=; b=Xv0JGI4cM2c3ASS6KRw7bqDSo5pZFF9Iuw03tFISuWDfLrEZWTMM0hyzBDvTeryZOl /qqi7ZlNyyWplLWWYy8EBLTtZQ7UdxT+UEZ0RGv2ChmFIDld2DiLbjCt2EiQatl6fmu/ 4adTdhDro7LF9hpOXb8+w4/EB66NDEKU+3RS0U/Knp/+ESVaPU1hze5rNApEklfDsOuZ gTI3/qOY/uDZAmUH28+nfaJbbwe17L/JPNf17oM78AjRstF8Dte8mOiOR0/wRP1JD2rC wT5EcpdP4GF7wlL5seJwgDcYRokJEbFo4QO9hoIdoJH+WgSfFXpeoB1X4Q69MROyjihb etcA== X-Gm-Message-State: AOJu0Yw0GMCq9o4hlc3DpqVCXfqtmr3wUIEOhV1vq3SpGAU3C98dw5Fa mc35IyuUKC++igb4uXAX939yB7YMafh1fMO5PPEqphu3SuujUSzFLWutg9AdqYTDv5lKfJy7H/U ECOFs X-Gm-Gg: ATEYQzwqcEEowtw5gBKlecSm+hoWWZxzyaXITuJVFLnuBPJx2hy/gjfAeJIoY35FCH4 ORO40/LzWoxU1x5BjHyXyDcgBNrEsxWqeUvxfcprPni64UFq5p9MzMbFLroldMNuEZyXKtT9ycy 5+STANtiPH9D6KVVprYAKO2jo75MfKSoUWU+NGthBsZNMbXHa/OChf3hNP6HHpuE0pIGyC+MQTW fQKVJPZWVt/vQ3Rb4ZOYVMt1pyYNo7BdBG0NGroLngbE1LM4vyGNaK/ZDA8Dmb75NYrpU0iu7xX bWSmYODUUWAhnJYe5qZb/3D17al9BsMLG+pSJswxMzhh/5XMjrQWwD26o99DGGjiV6Tdaq/MNsv x+Q361L8kjgimPV1/+ear7TedlfPW9/ENXs3YGCTEgHY+PS90q7PSwBzD78kzvM3xVq6dwaLF2V c7jjezH2w9TDCIB03mhM10JGCiiaJfPopDKoO0V1guxbt/tbAnhSVzQ8C1ZKRNW0p009wsPbns5 DwB4QArWWgInJcTM+0y9HhfcI+pMYLyDw== X-Received: by 2002:a5d:4c4b:0:b0:439:8bee:b985 with SMTP id ffacd0b85a97d-4398beebf33mr1732257f8f.54.1771944066739; Tue, 24 Feb 2026 06:41:06 -0800 (PST) Received: from FRSMI25-LASER.idf.intranet (static-css-ccs-204145.business.bouyguestelecom.com. [176.157.204.145]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-43970d3ff6dsm28711195f8f.25.2026.02.24.06.41.06 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 24 Feb 2026 06:41:06 -0800 (PST) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][whinlatter 2/9] gnutls: fix postinst script for ${PN}-fips for multilibs Date: Tue, 24 Feb 2026 15:40:55 +0100 Message-ID: <46c5252a2b787b1672ab8fc8e7fcffe798179b75.1771943829.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Tue, 24 Feb 2026 14:41:13 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/231854 From: Liu Yiding Append "-p" parameter to mkdir to fix failure like following: When use "gnutls-cli --fips140-mode" command in multilib environment, it shows library not found error. root@qemux86-64:~# gnutls-cli --fips140-mode library is NOT in FIPS140-2 mode And it was caused by lacking hmac files. root@qemux86-64:~# ls /usr/lib64/.*hmac ls: cannot access '/usr/lib64/.libgnutl*': No such file or directory The reason is as following: When '${sysconfdir}/gnutls' was created by 'mkdir' with lib32-gnutls, the dir will not be created again by 'mkdir' with lib-gnutls again, and the subsequent command will not be executed, so hmac files were missing in lib64 environment. ${bindir}/fipshmac ${libdir}/libgnutls.so.30.*.* > ${libdir}/.libgnutls.so.30.hmac So append "-p" parameter can avoid this error. [RP: The -p option doesn't error if the directory already exists] Signed-off-by: Liu Yiding Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie (From OE-Core rev: 7b51969967e13779ed2f5a3134ff89f9f4ad8af5) Signed-off-by: Vijay Anusuri Signed-off-by: Yoann Congal --- meta/recipes-support/gnutls/gnutls_3.8.10.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-support/gnutls/gnutls_3.8.10.bb b/meta/recipes-support/gnutls/gnutls_3.8.10.bb index b07c166c0e9..d4722f084fd 100644 --- a/meta/recipes-support/gnutls/gnutls_3.8.10.bb +++ b/meta/recipes-support/gnutls/gnutls_3.8.10.bb @@ -91,7 +91,7 @@ BBCLASSEXTEND = "native nativesdk" pkg_postinst_ontarget:${PN}-fips () { if test -x ${bindir}/fipshmac then - mkdir ${sysconfdir}/gnutls + mkdir -p ${sysconfdir}/gnutls touch ${sysconfdir}/gnutls/config ${bindir}/fipshmac ${libdir}/libgnutls.so.30.*.* > ${libdir}/.libgnutls.so.30.hmac ${bindir}/fipshmac ${libdir}/libnettle.so.8.* > ${libdir}/.libnettle.so.8.hmac From patchwork Tue Feb 24 14:40:56 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 81785 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 73D97F3C985 for ; Tue, 24 Feb 2026 14:41:13 +0000 (UTC) Received: from mail-wr1-f53.google.com (mail-wr1-f53.google.com [209.85.221.53]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.21675.1771944069692100797 for ; Tue, 24 Feb 2026 06:41:09 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=mU50dk7k; spf=pass (domain: smile.fr, ip: 209.85.221.53, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f53.google.com with SMTP id ffacd0b85a97d-436309f1ad7so4325262f8f.3 for ; Tue, 24 Feb 2026 06:41:09 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1771944068; x=1772548868; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=BMZxVMY6WUKKbAqdm29skI2ipmMDKSK261pftI8jRos=; b=mU50dk7kPQiXbDuxRiKSM5LvzO/G5K5/hbeDopRYyX+eZZGqige9S2PNySZ7UVGvO4 hUcqj3ulp3DBbKERhqX4cMMNVMcjXb9dJHsmj+QPE6x/onaf65NnijIC9IPsz+GUdE9a bzgs32nfe3Ms7vYd7Awtz35ot55fUfJhWwcqo= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1771944068; x=1772548868; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=BMZxVMY6WUKKbAqdm29skI2ipmMDKSK261pftI8jRos=; b=Rc5pODOWcn7cjXjgWzpvgmbxM1slDbCyswcUJdOZf+YnLRqfd37mGfaDKR9RFPwk/8 oMLLYXNsJ4LQjYDhjKT3IJHpEDN/o1s5pUbFKfbkYsRrfqc1/PUkGR8PDptigpeQdPdy WFo0BJoGCxAs8IkEn7QP0FCvutQWCxDQblAGiFID0kA4/ajjItW5CN4z+bKtfdwmjgmg F2d12/jKe9vEoPPxmOgLhYQ4CBOdgLlK8G04woZcyHmA0Dsukg+lfF0izrkehmuKdyX9 hzuAofa0qj8eWYKRgMLR/2iEM6mnrPNw1hqIKcxxWgvwDpIb68qevXwnQ9xtqbjfLdZy zjiA== X-Gm-Message-State: AOJu0YzsAR1daPTb4A6XiZYTyV+3neF1pIv5VkQQmVSPoaMqyZgnWnMB afqv52CQEUMYh/YKmDNTTHtfQIt5qttMHU+dlotN6TaRL5uHiffwThsPkrjqtQQMpZ7Juarn1zG 0xWHw X-Gm-Gg: ATEYQzwMGBGc9NA1+5UPLTd+Pl7cX0opzMisC/b3AcEUwh8Tjf2HodWx3ceWl+9r6cG eB9wfrQuj4C38Y0emhIicC7PF4YtXDxlx11FWbWSVy8AvLiTNFzg5ZhYJI6H4y926jYPrK2Wi8G CLnrGTj7ELA8ZzXrVf9mx2TooDgjnL3h3JuaBFqdr7dMyXCbjy3Yi0LhM7wtCXPhe6Gany8RZiO UC91CXJs8/tP3SaMXz3VNRbC+7uQY/BDJbawKDnnsb30TZWmt5qUCBHVzi9/wtujP81DDwlcV2L CiVRGmmd6FZrX7oIRYMmGbhu1yQ9UM0CQJ8Yozp6N9c1l0/KGsrLugpjXVensdJrHUdhYkfzbrv MyjhljkEP3/90jVvEE+eRbEmMIS5rIHJ3CG2I4auSx2hVEC48iAZfjPwqPOGG0cFVnuOpeezMEw c8hYJi1/O3jkhuHT260jBPoB75XXoycvm6R32T1r886ZxtytL+ABHnreM39O7r9E+KZe3lMvB+N g17uTUmJ9WDE5nu363FEjaoifq9yFLHcjqGbq2AbNLW X-Received: by 2002:adf:e346:0:b0:437:6efe:94c5 with SMTP id ffacd0b85a97d-4396f1564b2mr17103262f8f.2.1771944067700; Tue, 24 Feb 2026 06:41:07 -0800 (PST) Received: from FRSMI25-LASER.idf.intranet (static-css-ccs-204145.business.bouyguestelecom.com. [176.157.204.145]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-43970d3ff6dsm28711195f8f.25.2026.02.24.06.41.07 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 24 Feb 2026 06:41:07 -0800 (PST) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][whinlatter 3/9] gnutls: use libtool to install test binaries Date: Tue, 24 Feb 2026 15:40:56 +0100 Message-ID: <9c8e75b1ccca70e5ce12f0c0fb3c48354c194088.1771943829.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Tue, 24 Feb 2026 14:41:13 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/231855 From: Ross Burton If libtool builds a binary it's best to use libtool to install it, as otherwise you might install a wrapper script or need to make assumptions about where libtool has put the real binary (as this isn't always .libs) Signed-off-by: Ross Burton Signed-off-by: Antonin Godard Signed-off-by: Richard Purdie (From OE-Core rev: 675e8c730132ae02092400a0f4f170782afdbb60) Signed-off-by: Vijay Anusuri Signed-off-by: Yoann Congal --- meta/recipes-support/gnutls/gnutls_3.8.10.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-support/gnutls/gnutls_3.8.10.bb b/meta/recipes-support/gnutls/gnutls_3.8.10.bb index d4722f084fd..5430ee20856 100644 --- a/meta/recipes-support/gnutls/gnutls_3.8.10.bb +++ b/meta/recipes-support/gnutls/gnutls_3.8.10.bb @@ -71,7 +71,7 @@ do_compile_ptest() { do_install:append:class-target() { if ${@bb.utils.contains('PACKAGECONFIG', 'fips', 'true', 'false', d)}; then install -d ${D}${bindir}/bin - install -m 0755 ${B}/lib/.libs/fipshmac ${D}/${bindir}/ + ${B}/libtool --mode=install install -m 0755 ${B}/lib/fipshmac ${D}/${bindir}/ fi } From patchwork Tue Feb 24 14:40:57 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 81793 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 9CE44F3C98F for ; Tue, 24 Feb 2026 14:41:13 +0000 (UTC) Received: from mail-wr1-f51.google.com (mail-wr1-f51.google.com [209.85.221.51]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.21849.1771944070178357003 for ; Tue, 24 Feb 2026 06:41:10 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=ZZH8L4IS; spf=pass (domain: smile.fr, ip: 209.85.221.51, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f51.google.com with SMTP id ffacd0b85a97d-439857ec679so712171f8f.2 for ; Tue, 24 Feb 2026 06:41:09 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1771944068; x=1772548868; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=sDkW5ODhVrqXD7MjNdpJj1fNWsAcqk/rBHNetCQrZbo=; b=ZZH8L4ISqddzDkoEOrk9AdMmg9angFKHOkSR9i4Ytc3YVIcP5xf33JvHZaLlmfCd16 8vefx3+Uug10uZDQxKPafFHsO2wsHk4w3Y8PAhLekMDRu2Ck47p5yt4ZB4Enj6TGZUXt zGemuREBraiPkTVc/+eWGDfWaAnmiZa4ezAvM= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1771944068; x=1772548868; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=sDkW5ODhVrqXD7MjNdpJj1fNWsAcqk/rBHNetCQrZbo=; b=sS2F4ERKwEclz0bSSBM+tEdI5r0hwjAwgFWQfVthEVQjD2/OiwUG6Ah4U76AhCRGWg UixT2K97x65f3CYeV0U1qFjth1yUqO7fxhL1E6oRNi4wC6j74Zcc0sOIovvSxVs8MuSn K+gmQTPLGPNk9PEUp4gpoHbim2IrqAVhEHyhPwrVjtx34w1cAqVeR+GU/ZffluuN44Uo wEYDLn2jcPZamlcwO/XVeLWFTNzxtrngza6qewhsImX82SU6wpxHlueUxSlzHIy/p3t0 KFS4fyTpEcL74yfaPeUdaTyx7uj+hpnrvL16ScPgKqyxvNnAZUJINsaNcASt8GMIOjSl eEtA== X-Gm-Message-State: AOJu0YxuScW20q9o2B8dAt73D5TlrLhoPJ4PQ+P4Wtp/0zo2sy5UUYXe woGNpGTLAmkMP0cacyIzwKpF3Zcvx3o8Z0VUhHhyCqq4lbobmhqzaS897p+th83W0gB9GjEDtO6 TAeU8 X-Gm-Gg: ATEYQzzwBqznbw+iWAJ01A0aWBHYOmGCm6nONCPfa+yLp9ZUhRSmX7XM8LGxdEzxUBa v6Xg8e4As6XmYpsOQ15tf91NkQgyQBvyVZADBl+Bh/0Gpi3YCPjxn68UpIeH88rcPSuO2QtzrNX xaU+XKhngBf5AtwCpiozEAIyjX5YyKB05qqFgKPPV7OYfivIvMxWnmzDWGc7GJFVRlZxgKX22PS 15hnQVGYWwaa/ZbT4mMmLXq6PLL+cfLppUONm/IzitTd4H1qHD/rwBGg72p5/6FFO1VqcNeTtiP tzmZjV/zQoKw+qMB+spO9JohCzg4+R+J3mD4tbYAnnWpQh/z1pKDS4otnRmCcaPh/w70rL0BOHT 0Y9j49IxBawu+Xx57KZCCbbSjdO29W2vmB6Q+ySYvXs8V1bHtxMTbGTWQ6dcr8rVf2EZCp3T9zp bRSn+Z+7Vm3waWFcyTMIQWtln+kTa5CKNMOa1VrOTj3SOK23kQIX0l5jt3wz+oqlmHFzkSUNLhG u7e/iKCEITGc87ssnqVmkMfqnrtuva9cQ== X-Received: by 2002:a5d:428b:0:b0:439:7e17:c5f6 with SMTP id ffacd0b85a97d-4397e17c64emr7839919f8f.33.1771944068306; Tue, 24 Feb 2026 06:41:08 -0800 (PST) Received: from FRSMI25-LASER.idf.intranet (static-css-ccs-204145.business.bouyguestelecom.com. [176.157.204.145]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-43970d3ff6dsm28711195f8f.25.2026.02.24.06.41.07 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 24 Feb 2026 06:41:08 -0800 (PST) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][whinlatter 4/9] libpng: upgrade 1.6.54 -> 1.6.55 Date: Tue, 24 Feb 2026 15:40:57 +0100 Message-ID: X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Tue, 24 Feb 2026 14:41:13 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/231856 From: Peter Marko Release notes [1]: * Fixed CVE-2026-25646 (high severity): Heap buffer overflow in `png_set_quantize`. (Reported and fixed by Joshua Inscoe.) * Resolved an oss-fuzz build issue involving nalloc. (Contributed by Philippe Antoine.) [1] https://github.com/pnggroup/libpng/blob/v1.6.55/ANNOUNCE Signed-off-by: Peter Marko Signed-off-by: Yoann Congal --- .../libpng/{libpng_1.6.54.bb => libpng_1.6.55.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-multimedia/libpng/{libpng_1.6.54.bb => libpng_1.6.55.bb} (97%) diff --git a/meta/recipes-multimedia/libpng/libpng_1.6.54.bb b/meta/recipes-multimedia/libpng/libpng_1.6.55.bb similarity index 97% rename from meta/recipes-multimedia/libpng/libpng_1.6.54.bb rename to meta/recipes-multimedia/libpng/libpng_1.6.55.bb index 3f2b80a060f..18ecc9d855a 100644 --- a/meta/recipes-multimedia/libpng/libpng_1.6.54.bb +++ b/meta/recipes-multimedia/libpng/libpng_1.6.55.bb @@ -14,7 +14,7 @@ SRC_URI = "${SOURCEFORGE_MIRROR}/${BPN}/${BPN}${LIBV}/${BP}.tar.xz \ file://run-ptest \ " -SRC_URI[sha256sum] = "01c9d8a303c941ec2c511c14312a3b1d36cedb41e2f5168ccdaa85d53b887805" +SRC_URI[sha256sum] = "d925722864837ad5ae2a82070d4b2e0603dc72af44bd457c3962298258b8e82d" MIRRORS += "${SOURCEFORGE_MIRROR}/project/${BPN}/${BPN}${LIBV}/ ${SOURCEFORGE_MIRROR}/project/${BPN}/${BPN}${LIBV}/older-releases/" From patchwork Tue Feb 24 14:40:58 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 81789 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 82E1EF3C989 for ; Tue, 24 Feb 2026 14:41:13 +0000 (UTC) Received: from mail-wm1-f44.google.com (mail-wm1-f44.google.com [209.85.128.44]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.21850.1771944070801130992 for ; Tue, 24 Feb 2026 06:41:11 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=zhA0We8r; spf=pass (domain: smile.fr, ip: 209.85.128.44, mailfrom: yoann.congal@smile.fr) Received: by mail-wm1-f44.google.com with SMTP id 5b1f17b1804b1-48372efa020so44844595e9.2 for ; Tue, 24 Feb 2026 06:41:10 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1771944069; x=1772548869; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=sCNp3qdsewFay75JVx8FtciQZDBvOm0yTwMlnr6aoMQ=; b=zhA0We8r+JhEQ+jX0p7uawwmdIzmc+Si1iUFh/+VV8vxVHLHPT7CQCKYQSxKh+3Zvj iz/oMDsl58ydUVx+/pXtxZiXL1K+tIGwe95agv57e7SobpeqrJ9D2DDc8z65fkBrfg8f izBni6TS7RhHnVeoof5xV40KdBwwFxx8I9z+8= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1771944069; x=1772548869; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=sCNp3qdsewFay75JVx8FtciQZDBvOm0yTwMlnr6aoMQ=; b=VKEE9M0tUaO8ZZBtC0v4MHzpXdFUh2WyD9d0R9iLAhsZD1EnKqxjn6ImnnI2TPmH24 LiIcwYcc7+Y3/JQOA9yqfoRPmwmERRXPoFCEva2WS18i/9ric0WDWEL9xLeT/aXpb/Gm gw12XSkeuxmZLsRyR83kWpcQm1nom0w7jBvAMDn7xHF4G48g+pFhEBPy0XdsClXl0uVZ Fun2JdEeHIEch+QJIQdvxaVaWsCrWnb61HXGD7+XM7yQiYlpsKEn/sQfLXydlwSK9H/K 5jkJ48ue2N1a1S3NAEocWJwsgqvx2klf4itEJX5iS+84mlPp9s8pemaZ8BV0v8FLBUer YX4A== X-Gm-Message-State: AOJu0YzdAbUECcq+rHj9dCdiHM/NZBq1JMeUQaLToRQGrj50VLEd+l3Z fa98iQzUxIvVhBSkFG9Wv118BdiJGiBf1YYv7rH6M6QhQSuZbfSuyxifoZMSVhqfituoWqP/NKx VmlSn X-Gm-Gg: AZuq6aJ1hYJXC3Chp9j1Pkg1ORpenp/jkE9RlV3eAE/Ss9vG/0kZ7oDSDlq9WpWhRZD vtFsbFIULJWLVbcD8qZVwsCY3Pr9uKSYMy9xYg+sg7VbaicIiKWdSDfS36YW6EFHi5hFEuxX3YA WHNh1/2MKwuZAeg7OH06I41iA5oOL9JS1qmyYwu095GASdiNtImfhLL6k2Cl2i8A6o2NM5ZlSqi 8UFKoGSwWDYBB03szblbFogFxBJZZaANXU5Z74QiN31prz0D7A1rkSF9P5l1O1LZe9F+Hzv2XpS IKsAHCfEr0AOPspINRAf2S1Zq1w3IhnJeXpH6x4l6aaqNd9WmQgJAbfvyerx5Ja2ZcR6MdDblPc tRsOjKGTy5XLNZ3FqiJ3HxURKRoBPKrrDkUf8yEJgIbv64+4AqLGoM1a28lkDht3AFm0Fy4efs4 mcS1OLpXNxhGDIpkTp4BgWT/aFxp2ubQcdSD5JNWVa/kxulw/EtZFuX6mNxsf0b/OzTRDvTwE2R dQMNGD665cYwUre2SEtErcCYW5hm83fyQ== X-Received: by 2002:a05:600c:8211:b0:483:885:f0b0 with SMTP id 5b1f17b1804b1-483a963c196mr258491565e9.35.1771944068834; Tue, 24 Feb 2026 06:41:08 -0800 (PST) Received: from FRSMI25-LASER.idf.intranet (static-css-ccs-204145.business.bouyguestelecom.com. [176.157.204.145]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-43970d3ff6dsm28711195f8f.25.2026.02.24.06.41.08 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 24 Feb 2026 06:41:08 -0800 (PST) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][whinlatter 5/9] libevent: merge inherit statements Date: Tue, 24 Feb 2026 15:40:58 +0100 Message-ID: X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Tue, 24 Feb 2026 14:41:13 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/231857 From: Pratik Farkase Merge the separate inherit statements into a single one for improved readability and consistency with OE style. No functional change intended. Signed-off-by: Pratik Farkase Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked from commit 99792ab6ba188a7623804e587edf8de23690ad3f) Signed-off-by: Yoann Congal --- meta/recipes-support/libevent/libevent_2.1.12.bb | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/meta/recipes-support/libevent/libevent_2.1.12.bb b/meta/recipes-support/libevent/libevent_2.1.12.bb index 2fadf109432..4fed0506db4 100644 --- a/meta/recipes-support/libevent/libevent_2.1.12.bb +++ b/meta/recipes-support/libevent/libevent_2.1.12.bb @@ -28,13 +28,11 @@ S = "${UNPACKDIR}/${BPN}-${PV}-stable" PACKAGECONFIG ??= "" PACKAGECONFIG[openssl] = "--enable-openssl,--disable-openssl,openssl" -inherit autotools github-releases +inherit autotools github-releases ptest multilib_header # Needed for Debian packaging LEAD_SONAME = "libevent-2.1.so" -inherit ptest multilib_header - DEPENDS = "zlib" PACKAGES_DYNAMIC = "^${PN}-.*$" From patchwork Tue Feb 24 14:40:59 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 81791 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id C5E56F3C993 for ; Tue, 24 Feb 2026 14:41:13 +0000 (UTC) Received: from mail-wm1-f67.google.com (mail-wm1-f67.google.com [209.85.128.67]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.21677.1771944072060577906 for ; Tue, 24 Feb 2026 06:41:12 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=lwrI0zSP; spf=pass (domain: smile.fr, ip: 209.85.128.67, mailfrom: yoann.congal@smile.fr) Received: by mail-wm1-f67.google.com with SMTP id 5b1f17b1804b1-4806ce0f97bso45329945e9.0 for ; Tue, 24 Feb 2026 06:41:11 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1771944070; x=1772548870; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=ZkRzwdqJOOPIFvuK37LsmMNGeyv2Mn8Ms8icZ/07Isg=; b=lwrI0zSPyU9RwpBW8yl0gfsGF9mwuVaFYuoEfidY/6NGR9V0D26wjQbEAZa+1KKKYp J7/NcX0F5sWIMwU8zWSY/PZy7Yi1t+bB6KFVxHQNduT8GsKtjQN3r8SfBP2qIJvi9qYa e/QEB2B1LWKYXTPVjceNVeuFI+x8Y2mYNUWZ4= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1771944070; x=1772548870; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=ZkRzwdqJOOPIFvuK37LsmMNGeyv2Mn8Ms8icZ/07Isg=; b=DIWXSaOeLKy7JPjP6QQG1akrBVeJMMd2WrXgJzYsD2jBJX7wkkJVfnz64gKS2xnG2y vw7uy+IwzpC6Guj5AIodSDy5Chx/U8T29H9dji2H56smqUfpR2xozxcYzjjePJa+EeXi CLyLU/UI/ZNsFmaLvTmXFsFnNmywcVZJeVdkLm0fg4RsfkzsKCB6uz92jflUxOHVlvBo mg2cbZdPjKYdwmbQt2SkKvu4pc5ausB806jclEqJA0hkVBGJmta1c+qsHcxWMHYs4v/B xISf31h0zWurcLNKDBh2cAJfdqHHx3IkFMD6I5yCclUgxsZlxyj0H3kMvDBNcKU5CPhT +oYA== X-Gm-Message-State: AOJu0YzN0fvohjOdDLs2tPU/IxKAuSApKT62EHcIIPfO3pydSZSPFh7i UhH6hfy8H6cmwFKZxfghaCM85F1TuC9JUVpMmF6ihUYI7+NkPj/OkbxisxwUz6Qji2G0yacZAtd G+47Ctxw= X-Gm-Gg: ATEYQzyNfi2FOgd7hduHo9I5xPpIDiwaVuESWNk821fItiZOwYmOe9EumZynZreKAot b+3HlHd3MjsMSrliSSaTrWg1EwUM4p1jdjZPGJI6jtqqcEkUlHRqf2707dt7PiCpJGlTp6HaOSN cjwmu4zFwlNhzmNp3fSNyk3eTCW4LOvg+jk0wIwnQnJ1cM9Wfc1jdIhNY3yj8R4MH8N7fMDKnHE L4PLprivbXI7tQkRfj2M/EIhPaEeRVLD44YQdIB1w6RbxLrtg4x7j103zmxyZWrb/oSr9GSlD7k HYsD16bkIujixbsteK0u2QLvamGRDNF0Gdla2cowe3JnjrrVwZUefVNPtNE6P0O5/HUecINzwU5 l2gvPhsEIaWqpm7bGIhTZZCKXLELdsgXgzw+TmgNcW1V4glmVacTeQrqkX4lsmPywpsQJ/rb0K3 h5p0EFJ4xmZu6Tp/OFRa6vdvbnKAZkAtQg/LXBV9zbaXgdz0ECkPmmZpR4MIEFkDGDPfa62TpSQ iM9/ax/WYOuPZ7F2Xmb2n6TiNK2R1arJA== X-Received: by 2002:a05:6000:2f86:b0:437:6efe:94d2 with SMTP id ffacd0b85a97d-4396f153ad3mr23040020f8f.4.1771944069396; Tue, 24 Feb 2026 06:41:09 -0800 (PST) Received: from FRSMI25-LASER.idf.intranet (static-css-ccs-204145.business.bouyguestelecom.com. [176.157.204.145]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-43970d3ff6dsm28711195f8f.25.2026.02.24.06.41.08 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 24 Feb 2026 06:41:09 -0800 (PST) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][whinlatter 6/9] classes/buildhistory: Do not sign buildhistory commits Date: Tue, 24 Feb 2026 15:40:59 +0100 Message-ID: X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Tue, 24 Feb 2026 14:41:13 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/231859 From: Fabio Berton This change adds the --no-gpg-sign option to prevent buildhistory commits from failing due to GPG signing issues. Depending on the setup, buildhistory may fail to create a commit if the user has the commit.gpgsign option enabled. For example, if the user creates a signing key that requires a password, the commit won't be created and will fail with the following error: / |error: Enter passphrase: Load key "/home//.ssh/id_ed25519": |incorrect passphrase supplied to decrypt private key? |fatal: failed to write commit object \ The bitbake command won't fail, but buildhistory won't have a commit. Also, the commit may silently fail when building inside a container due to missing packages or issues with accessing the GPG agent. This is similar to [1], and signing the buildhistory commit should be avoided to prevent such issues. 1 - https://git.openembedded.org/openembedded-core/commit/?id=7595a0a63a933af9dd9d1e458dc34a4ba80d9eae Signed-off-by: Fabio Berton Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Ross Burton Signed-off-by: Richard Purdie (cherry picked from commit a5e18714aee52db898aaf9d222fb5a4168bde96e) Signed-off-by: Yoann Congal --- meta/classes/buildhistory.bbclass | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/classes/buildhistory.bbclass b/meta/classes/buildhistory.bbclass index 4a380c10c6d..f8ef3d029ff 100644 --- a/meta/classes/buildhistory.bbclass +++ b/meta/classes/buildhistory.bbclass @@ -797,7 +797,7 @@ result: $result metadata revisions: END cat ${BUILDHISTORY_DIR}/metadata-revs >> $commitmsgfile - git commit $commitopts -F $commitmsgfile --author "${BUILDHISTORY_COMMIT_AUTHOR}" > /dev/null + git commit --no-gpg-sign $commitopts -F $commitmsgfile --author "${BUILDHISTORY_COMMIT_AUTHOR}" > /dev/null rm $commitmsgfile } From patchwork Tue Feb 24 14:41:00 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 81790 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 907A5F3C98B for ; Tue, 24 Feb 2026 14:41:13 +0000 (UTC) Received: from mail-wr1-f46.google.com (mail-wr1-f46.google.com [209.85.221.46]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.21676.1771944071852805017 for ; Tue, 24 Feb 2026 06:41:12 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=NH19cA72; spf=pass (domain: smile.fr, ip: 209.85.221.46, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f46.google.com with SMTP id ffacd0b85a97d-4376de3f128so3998460f8f.0 for ; Tue, 24 Feb 2026 06:41:11 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1771944070; x=1772548870; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=8uchGvVweXdNAenMW6YbHRnTOzewxS6PtcAvyGiTeKM=; b=NH19cA72QVU1SLiRSs2IcGdEVgclXHdctpS7EIEefnlWjr7NZ5D1zIGZgUKIDsmbal pR+pCAanuhDUky7TyGzzbuJ1BWvli2tau6IcZ68pShFl5Sk6112t9ZQeju39Bj0aIu8r MDP8u+FPyzTn8w+XcehFRpErf726/jvwYZYj8= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1771944070; x=1772548870; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=8uchGvVweXdNAenMW6YbHRnTOzewxS6PtcAvyGiTeKM=; b=MmDqJXQRRm3W6aQnd7veJ+0P9RvshdARlPM+NyrVnEqwD6rTiYd/t3E/CWKbne2xQm eh9o7UMHlmF6zhBhELF4IWXG1+NBKY9ZSqgSRQmV2ncm00/D1gJ4hRqi2l3vQbiPxx2X xz+b5OZALArLMGgA6mF1HxPXN42xjoOuywXGYga4744RnpLpOmKl5wyajl066G/4BJNY Yg+YFPh5JWTcFsiOB41BqpjijjdPbTwgZ/GN9ZSZDwJXtNibyyQFoXrLViAG1YS+Vbm9 46Qr8TSyinJ7tCj+CzQhGQzcq58oNz8U0CuEEZ939b4HOofnjYaoMSaoi9NANjySHeuh 9oZg== X-Gm-Message-State: AOJu0YwSFznfBJnhWRxqWcSGNX541dw5R77+6QYvFNnh5PohRcP7qEot GJkjjeXCwZkU+qDKU4POr706JRM2Y/Rig6ucvuAfhjAiYRw+pWgFKemIkSof/UgTI4ykUOfWsG0 7338q X-Gm-Gg: ATEYQzycK3JGI4kLduIcVO7q3o681LpKD1i+PrFm87xUWyu9W5tXQwLDkB5O9lC9NRu H8zST/T5kDwemTtaeQupFj+IpGf1D+leE9eLp6KISvMYpiEjkn2a2ZTXE4qcBIOTSuALz+mVqtF lBqvJTAS2vzoRQPrBgCKnv+3XLHc8BdT5WfKDI5fKjKxifD047qOljr2o2O2CjGtR27jZeLZdJF SPIvMD9sDaddpcpJ12vndWJwsUhyjhfjhgwvHI5ryN5bPIp6INaAJvallctcf5pDh454MeIjFua ShAHW+5cdlMRwUVzqLAdmUkNz1/wxtFhentw01Vva3X+e+pKwfUDkZso7QhhhoVSAqFbmNJvudn MoMgLumotTHhpBvlHH0DI5CJ39HlfcAMLdU0GdHQhDmDrF7n4nY8g2FEyzcF/ZiHMJeYOSjTDRy lJoy4qRNa6IlSBkZmEzH2ideqb1mKD6tOqy3GV4Q1SqIMmZgfKAPz1MhWfGRTruSKk4BQmqiO+i jxTc4coRzQZ/BvDyJ+GCg0HY7XL2bhaHg== X-Received: by 2002:a05:6000:310b:b0:437:6c1f:de27 with SMTP id ffacd0b85a97d-4396f17e514mr23232520f8f.37.1771944069973; Tue, 24 Feb 2026 06:41:09 -0800 (PST) Received: from FRSMI25-LASER.idf.intranet (static-css-ccs-204145.business.bouyguestelecom.com. [176.157.204.145]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-43970d3ff6dsm28711195f8f.25.2026.02.24.06.41.09 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 24 Feb 2026 06:41:09 -0800 (PST) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][whinlatter 7/9] wic/engine: error on old host debugfs for standalone directory copy Date: Tue, 24 Feb 2026 15:41:00 +0100 Message-ID: X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Tue, 24 Feb 2026 14:41:13 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/231858 From: Daniel Dragomir When wic is used in standalone mode, it relies on host tools such as debugfs. For directory host->image copies into ext* partitions, wic uses scripted debugfs "-f" input with multiple mkdir/write commands. Older host debugfs versions (< 1.46.5) may behave unreliably in this mode and can silently miss files. This does not affect builds using debugfs from OE where the version is known to be sufficiently new. Add a debugfs version check and emit an error when an older host debugfs is detected. The error is shown once per run and halts execution. Signed-off-by: Daniel Dragomir Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie (cherry picked from commit cb536737bee95d5a5072b501bda9554705e8cd13) [YC: removed patch changelog] Signed-off-by: Yoann Congal --- scripts/lib/wic/engine.py | 29 +++++++++++++++++++++++++++++ 1 file changed, 29 insertions(+) diff --git a/scripts/lib/wic/engine.py b/scripts/lib/wic/engine.py index 9d596be3a72..8682ca3176c 100644 --- a/scripts/lib/wic/engine.py +++ b/scripts/lib/wic/engine.py @@ -222,6 +222,34 @@ def wic_list(args, scripts_path): return False +_DEBUGFS_VERSION = None + +def debugfs_version_check(debugfs_path, min_ver=(1, 46, 5)): + global _DEBUGFS_VERSION + + if _DEBUGFS_VERSION is None: + out = "" + for flag in ("-V", "-v"): + try: + out = exec_cmd(f"{debugfs_path} {flag}") + break + except Exception: + continue + + import re + m = re.search(r"(\d+)\.(\d+)\.(\d+)", out or "") + _DEBUGFS_VERSION = tuple(map(int, m.groups())) if m else None + + ver = _DEBUGFS_VERSION + + if ver is not None and ver < min_ver: + raise WicError( + "Sorry, debugfs 1.46.5 or later is required for this script. " + "Older versions of debugfs can make directory copies into ext* partitions " + "via scripted debugfs (-f) unreliable or broken. Detected version: %s" + % (".".join(map(str, ver)) if ver else "unknown") + ) + class Disk: def __init__(self, imagepath, native_sysroot, fstypes=('fat', 'ext')): @@ -352,6 +380,7 @@ class Disk: if self.partitions[pnum].fstype.startswith('ext'): if isinstance(src, str): # host to image case if os.path.isdir(src): + debugfs_version_check(self.debugfs) base = os.path.abspath(src) base_parent = os.path.dirname(base) cmds = [] From patchwork Tue Feb 24 14:41:01 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 81786 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 75339F3C986 for ; Tue, 24 Feb 2026 14:41:13 +0000 (UTC) Received: from mail-wm1-f45.google.com (mail-wm1-f45.google.com [209.85.128.45]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.21851.1771944072467727196 for ; Tue, 24 Feb 2026 06:41:12 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=CT0PEjFl; spf=pass (domain: smile.fr, ip: 209.85.128.45, mailfrom: yoann.congal@smile.fr) Received: by mail-wm1-f45.google.com with SMTP id 5b1f17b1804b1-4834826e5a0so69702215e9.2 for ; Tue, 24 Feb 2026 06:41:12 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1771944070; x=1772548870; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=uunZ7kLlG6U1WfBKfGI+530BWPBmgkWwEPlKexkTC8A=; b=CT0PEjFlB7TIaj34Fm5sW2i29GDcyFajibl/CBjpcrnWIvxFF4S1Xhls6pv69eeI4N sa+youVkJI31pbrLHWNITOHWb24OFeTZpOtVbhaXGHE29HtX6ZErE/4Ul27+crUpS1DZ Y/E8s+bVcRT9vBcQJ0sPcW2HGLElNksv/r3vc= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1771944070; x=1772548870; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=uunZ7kLlG6U1WfBKfGI+530BWPBmgkWwEPlKexkTC8A=; b=Ebg0vGBlEV1zvmvv7RB6XgpELrYHLs6/IHzqF+ja8I4yfhffZfDIUrda4SFrLtpVCK gwmn9GBXlEF2asvPk6W82+3YH9qVncETKwIN8wu7JcPyYEDSeUuyc+aoT9Bj+0goJQHE YMkjT+cBYkEEF2WpV8Wu16qiy+jeBtdN31+mqwRezfMJTSyhdHZfu/5qCVPDlinsjds+ nDUtX/GjQ36dQGdXKIzkXwUW8vWvb1RmNg7x9OyorVygwfqdchrcYT7etqSGhk3E+Yf0 x79Vo8vJydGAb0HLD87mbGjf+qEB4D1/AEJ/MGXVvdPwf+FGdkyrV/aCSq+5XbhgT1Sp twqQ== X-Gm-Message-State: AOJu0Yyr3wlicRtVD1bVXocPzBe9msiNHNyat5j7SbXwyktxfEUXykgv 1xv7JkJ+IngbCbR3bm3PYjs9ohuf95bAl+t4nQ+Wu5wPqKruXxhcf5NYYLSpnRtKrH7WtK0hoyH pG7yl X-Gm-Gg: ATEYQzxf57HUrM062TaqW4wRMWQKPYpg2WbxsZNdAriSbzQ+UAarUPhyifaPYzZe8V8 /6c/X0a+texiUGbHvSsod0iFvpUuPo+3gyJR/HKGIdB80hnI0I1OeVMKMOzlkSrcVwyuUHqWMvQ uJ6dSiubag4c0ZR9b7Tx5HraoBEAH96HxrL2PCNdELil78WC8sI+pcY9ze7Oeacz2+YVIMYTJm2 iT9NPHff6yNzwcm4Cnje93TtBAzJAQXC5lOAvayX4LLvxkuxFvb8rW65gBzjv2l2q+rDHIksP2E OeAbEl/THRPLcexIUuCqumOhfKjaU8Ss5jMIoUnUEaBGiSrVjDM5vxzWHC003Wdg906ac2ViXGT IIMZIHjCJNVCX9fFTZ+23xJpGo7tVXtS4DXKkJpVP5Pcd6P1S2k0bBh3VcjF1IN5+btKwy2F+Ej EApKwTERUQKP+zbtp7Sxo4iKgnrpGbcj6Qef0hLX3KeXMGhDVdWQFqKXO2xpCH1qQtqEyOr/4oS O7ZXIvHfKRNU15E1NtNrrCBBquH478XtQ== X-Received: by 2002:a05:6000:4310:b0:437:4872:fc83 with SMTP id ffacd0b85a97d-4396f17b92bmr22690931f8f.33.1771944070430; Tue, 24 Feb 2026 06:41:10 -0800 (PST) Received: from FRSMI25-LASER.idf.intranet (static-css-ccs-204145.business.bouyguestelecom.com. [176.157.204.145]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-43970d3ff6dsm28711195f8f.25.2026.02.24.06.41.10 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 24 Feb 2026 06:41:10 -0800 (PST) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][whinlatter 8/9] glib-2.0: upgrade 2.86.3 -> 2.86.4 Date: Tue, 24 Feb 2026 15:41:01 +0100 Message-ID: X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Tue, 24 Feb 2026 14:41:13 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/231860 From: Peter Marko Fixes CVE-2026-1484, CVE-2026-1485 and CVE-2026-1489. Release notes [1]: Overview of changes in GLib 2.86.4, 2026-02-13 * Fix several security vulnerabilities of varying severity (see below for details) * Bugs fixed: * #3858 (closed) glib-compile-resources: Incorrect compiler detection on Windows when building GTK causes a DoS (L. E. Segovia) * #3863 (closed) Iterating over a short (preallocated) GVariant bytestring invalidly refs a NULL GBytes (Christian Hergert) * #3870 (closed) (CVE-2026-1484) (YWH-PGM9867-168) Integer Overflow -> Buffer Underflow on Glib through glib/gbase64.c via g_base64_encode_close() leads to OOB Write (Marco Trevisan) * #3871 (closed) (CVE-2026-1485) (#YWH-PGM9867-169) Buffer underflow on Glib through gio/gcontenttype-fdo.c via parse_header() lead to OOB Read/Write (Marco Trevisan) * #3872 (closed) (CVE-2026-1489) (#YWH-PGM9867-171) Integer Overflow on Glib through glib/guniprop.c via output_marks() lead to OOB Write in glib/gutf8.c:g_unichar_to_utf8() (Marco Trevisan (Treviño)) * !4946 (merged) Update Romanian translation glib-2-86 * !4955 (merged) Backport !4954 (merged) “glib-compile-resources: Always assume MSVC compiler if VCINSTALLDIR is set” to glib-2-86 * !4961 (merged) Backport !4960 (merged) “glib/gvariant: add failing test for bytestring and fix it” to glib-2-86 * !4979 (merged) [glib-2-86] gbase64: Use gsize to prevent potential overflow * !4981 (merged) [glib-2-86] gio/gcontenttype-fdo: Do not overflow if header is longer than MAXINT * !4984 (merged) [glib-2-86] guniprop: Use size_t for output_marks length * !5010 (merged) Update Kazakh translation * Translation updates: * Kazakh (Baurzhan Muftakhidinov) * Romanian (Antonio Marin) [1] https://gitlab.gnome.org/GNOME/glib/-/releases/2.86.4 Signed-off-by: Peter Marko Signed-off-by: Yoann Congal --- .../{glib-2.0-initial_2.86.3.bb => glib-2.0-initial_2.86.4.bb} | 0 .../glib-2.0/{glib-2.0_2.86.3.bb => glib-2.0_2.86.4.bb} | 0 meta/recipes-core/glib-2.0/glib.inc | 2 +- 3 files changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-core/glib-2.0/{glib-2.0-initial_2.86.3.bb => glib-2.0-initial_2.86.4.bb} (100%) rename meta/recipes-core/glib-2.0/{glib-2.0_2.86.3.bb => glib-2.0_2.86.4.bb} (100%) diff --git a/meta/recipes-core/glib-2.0/glib-2.0-initial_2.86.3.bb b/meta/recipes-core/glib-2.0/glib-2.0-initial_2.86.4.bb similarity index 100% rename from meta/recipes-core/glib-2.0/glib-2.0-initial_2.86.3.bb rename to meta/recipes-core/glib-2.0/glib-2.0-initial_2.86.4.bb diff --git a/meta/recipes-core/glib-2.0/glib-2.0_2.86.3.bb b/meta/recipes-core/glib-2.0/glib-2.0_2.86.4.bb similarity index 100% rename from meta/recipes-core/glib-2.0/glib-2.0_2.86.3.bb rename to meta/recipes-core/glib-2.0/glib-2.0_2.86.4.bb diff --git a/meta/recipes-core/glib-2.0/glib.inc b/meta/recipes-core/glib-2.0/glib.inc index 2e15cc7675b..d1f25ef8f21 100644 --- a/meta/recipes-core/glib-2.0/glib.inc +++ b/meta/recipes-core/glib-2.0/glib.inc @@ -237,7 +237,7 @@ SRC_URI:append:class-native = " file://relocate-modules.patch \ file://0001-meson.build-do-not-enable-pidfd-features-on-native-g.patch \ " -SRC_URI[archive.sha256sum] = "b3211d8d34b9df5dca05787ef0ad5d7ca75dec998b970e1aab0001d229977c65" +SRC_URI[archive.sha256sum] = "d4e2b5d791d5015ffd8c6971ad8e975a0a55c1a14926cdb25cf843ff00682260" # Find any meson cross files in FILESPATH that are relevant for the current # build (using siteinfo) and add them to EXTRA_OEMESON. From patchwork Tue Feb 24 14:41:02 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 81792 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id D4F7AF3C995 for ; Tue, 24 Feb 2026 14:41:13 +0000 (UTC) Received: from mail-wr1-f48.google.com (mail-wr1-f48.google.com [209.85.221.48]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.21678.1771944073301990042 for ; Tue, 24 Feb 2026 06:41:13 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=CbQKzOTz; spf=pass (domain: smile.fr, ip: 209.85.221.48, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f48.google.com with SMTP id ffacd0b85a97d-4376c0bffc1so4230164f8f.0 for ; Tue, 24 Feb 2026 06:41:13 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1771944071; x=1772548871; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=D3Tylk3PpUHtgLTgkY+1S3R0NruZMObVYPIbk++MQ1Q=; b=CbQKzOTzTo7yjJmtuYO8OQOK/kQWZbxCVF4HqEbCU9oZjTrmzZwszQpvg8cW9OWPCO CX40G3nSLwjJEN5RL1ijydrE3I95DXkRxe7rWLRCNA+iO3klAotSIqR5vvAT9H/jVEpD Kq3oFNyi6X4gJ7rfsVVo/+0PJMMonaD8zHWQc= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1771944071; x=1772548871; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=D3Tylk3PpUHtgLTgkY+1S3R0NruZMObVYPIbk++MQ1Q=; b=A+3rjpcqQ7NBriZPrZpIfXVRqmVHowNDWjPMktw1dTquFkRRBujFEwJGG2hgraW2PG kEIQTjlUSnVZa5xy7KZgT1weqnWDPI725+y73PGKX7IVtHyBgivyU4xedlFY0ISgfa0g eRBKlBTMgl9w/0IXP72XO2wfx1nNjbbupXXVK7uw0hP37VEbuXyngEBQH78ZuvToHmIN 4MlODgoCfWjFx7lBTAr8KoJLU1yq0hY8BqFXwE9s7ZG/r4Frmi26+rIpPDQZd5JXgBMo mr2yz30RKW55gqmOqXNVO88VubrMtNQNAhLnPpJrLKoSiFQ3qlui8rVxjGAWJvJambnH BZgg== X-Gm-Message-State: AOJu0Yz+qxV3SdYZ6PNAxFiRkCvtJ36+oZVgW7lXiB6M7EnNlqsISAOr CwMS7Jn7aOzSXC6y0aCbhVtOXWCPnlj4AhL2Rp3l9WzoiU9IJtJLJUdXt837BiRRWzpQTwg5H2C iFQT/ X-Gm-Gg: ATEYQzx1wl2C4xb7ox78bG7NgeLqrNAFby05eUAaR2+xKPf79vttxAGN2BMF2HNOtcs pJsZ+pL4AXEHXBSlptgl9E7c6Z1pQ2nsiA1zWfTnaqB2Qy2NR6uRINpU8lT3nxkJx+zxq0q3hhD 5K1ObpHxiEvExQmpn+YS622ARdFG0TPnCE4iFIw1znSDbzOKqGQjYsBWOQHPVdjuIUYbR0Qi7Sm IKDt/2VUDyoujTP6civVav3jrJ5O2G2bV0jcF0xUDG49DzcsfzMYGjO2rygyXqfALFptpaENzXA iGSL/TtJAhZuyG/e0dNtXTYEcNNKjhXX2ozifyBDoI7vU3knR/Lc0pQ5fh894XBw/OzKmfsy6tF 2IU7EjHgPZSwb2TAVqkqv0tv/Z7oxL8d9XBc3ldVUryGBjTBYpBCE6AMZcEkwxoYYRV85i2QVHx x8UBlL2lsVTsmEjFT8m+gn9oulaP3BDQ61UPO4b0nzIJzywNq9XpYL53jZshXUqb983+3I6FSDv 3bpw9x5vbBBmTxh303IqzQlwVyyJ0aIwg== X-Received: by 2002:a05:6000:230b:b0:439:56ec:4f33 with SMTP id ffacd0b85a97d-4396f166779mr20582054f8f.13.1771944071091; Tue, 24 Feb 2026 06:41:11 -0800 (PST) Received: from FRSMI25-LASER.idf.intranet (static-css-ccs-204145.business.bouyguestelecom.com. [176.157.204.145]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-43970d3ff6dsm28711195f8f.25.2026.02.24.06.41.10 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 24 Feb 2026 06:41:10 -0800 (PST) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][whinlatter 9/9] alsa-lib: patch CVE-2026-25068 Date: Tue, 24 Feb 2026 15:41:02 +0100 Message-ID: X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Tue, 24 Feb 2026 14:41:13 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/231861 From: Peter Marko Pick patch mentioned in NVD report. It also includes CVE ID in commit message. Use older SNDERR funtion as new one is not yet available. This was copied from Debian patch. Signed-off-by: Peter Marko Signed-off-by: Yoann Congal --- .../alsa/alsa-lib/CVE-2026-25068.patch | 34 +++++++++++++++++++ .../alsa/alsa-lib_1.2.14.bb | 1 + 2 files changed, 35 insertions(+) create mode 100644 meta/recipes-multimedia/alsa/alsa-lib/CVE-2026-25068.patch diff --git a/meta/recipes-multimedia/alsa/alsa-lib/CVE-2026-25068.patch b/meta/recipes-multimedia/alsa/alsa-lib/CVE-2026-25068.patch new file mode 100644 index 00000000000..5ecefc5aae0 --- /dev/null +++ b/meta/recipes-multimedia/alsa/alsa-lib/CVE-2026-25068.patch @@ -0,0 +1,34 @@ +From 5f7fe33002d2d98d84f72e381ec2cccc0d5d3d40 Mon Sep 17 00:00:00 2001 +From: Jaroslav Kysela +Date: Thu, 29 Jan 2026 16:51:09 +0100 +Subject: [PATCH] topology: decoder - add boundary check for channel mixer + count + +Malicious binary topology file may cause heap corruption. + +CVE: CVE-2026-25068 + +Signed-off-by: Jaroslav Kysela + +Upstream-Status: Backport [https://github.com/alsa-project/alsa-lib/commit/5f7fe33002d2d98d84f72e381ec2cccc0d5d3d40] +Signed-off-by: Peter Marko +--- + src/topology/ctl.c | 5 +++++ + 1 file changed, 5 insertions(+) + +diff --git a/src/topology/ctl.c b/src/topology/ctl.c +index a0c24518..322c461c 100644 +--- a/src/topology/ctl.c ++++ b/src/topology/ctl.c +@@ -1247,6 +1247,11 @@ int tplg_decode_control_mixer1(snd_tplg_t *tplg, + if (mc->num_channels > 0) { + map = tplg_calloc(heap, sizeof(*map)); + map->num_channels = mc->num_channels; ++ if (map->num_channels > SND_TPLG_MAX_CHAN || ++ map->num_channels > SND_SOC_TPLG_MAX_CHAN) { ++ SNDERR("mixer: unexpected channel count %d", map->num_channels); ++ return -EINVAL; ++ } + for (i = 0; i < map->num_channels; i++) { + map->channel[i].reg = mc->channel[i].reg; + map->channel[i].shift = mc->channel[i].shift; diff --git a/meta/recipes-multimedia/alsa/alsa-lib_1.2.14.bb b/meta/recipes-multimedia/alsa/alsa-lib_1.2.14.bb index 41a42f9ecc3..c13f9b786b2 100644 --- a/meta/recipes-multimedia/alsa/alsa-lib_1.2.14.bb +++ b/meta/recipes-multimedia/alsa/alsa-lib_1.2.14.bb @@ -10,6 +10,7 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=a916467b91076e631dd8edb7424769c7 \ " SRC_URI = "https://www.alsa-project.org/files/pub/lib/${BP}.tar.bz2" +SRC_URI += "file://CVE-2026-25068.patch" SRC_URI[sha256sum] = "be9c88a0b3604367dd74167a2b754a35e142f670292ae47a2fdef27a2ee97a32" inherit autotools pkgconfig