From patchwork Mon Mar 9 08:03:23 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Martin Jansa X-Patchwork-Id: 82843 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id A3DB0EF3705 for ; Mon, 9 Mar 2026 08:03:32 +0000 (UTC) Received: from mail-wm1-f50.google.com (mail-wm1-f50.google.com [209.85.128.50]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.9188.1773043409392996453 for ; Mon, 09 Mar 2026 01:03:29 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20230601 header.b=YVN6aHWp; spf=pass (domain: gmail.com, ip: 209.85.128.50, mailfrom: martin.jansa@gmail.com) Received: by mail-wm1-f50.google.com with SMTP id 5b1f17b1804b1-483487335c2so94100965e9.2 for ; Mon, 09 Mar 2026 01:03:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1773043408; x=1773648208; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc:subject:date:message-id:reply-to; bh=O8w30QYFFCicJqCK41GsFnxo9FQusrmSjOzMfp11vQY=; b=YVN6aHWpHAfiL6MpILwz/Ek24jX4mNTfcE/R4+biaDbV8MOEPHT113Z/ayRhQMJIM2 Ge10lqeHxbfc1TZ5MGOXVMkhTroKcbsCO0r6E3N3lvi8B9GBvbqTSYmj+LCc2ehyXB9M 1Jd5s0/R5fADHeeRHnSYMk1Vl/pguR7u1VKvKeeXGHWi/6Afn0oqMfROm9NtiW8fNd1E z3RQeTBaWLKyIXCTfb587FTSxbC4nlBFP3/2n6SF+fmxvqdP9A1M9cD/w9WlQ/FTIqpE cFdjgL1qEJjXBQX7wjFf9qU1+zPDchM2Vv9sL3sgP8OlelhWvMC37W/IwfKaNg9QnK05 85hg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1773043408; x=1773648208; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=O8w30QYFFCicJqCK41GsFnxo9FQusrmSjOzMfp11vQY=; b=Ut1FhSGWKMiZVPcpELJxESaXQTdXT6WBIWgSknsxIzsWMWO6LFQ/6/3iqblf4CbL2s 6rENox5y+t+d0Ps9TQhsMoljopYO2OBqTUOccWcN19C9hBM2SXGGSxMmcXJqCYinuLgG DKCBLj5FjrB1agpgl42NKohV7T4Nqh2dQlMGgkovCXmsndOdFRuJKVgM9RzGI1jYzfba KW8hUWV9OM69HXyC3yvSQOHQHwK8mPz9VhcKdCpvvCuXie61mfQ5yOtAt7YhqcLqOj3d QOfjSOku5EBZOt5I/HKojmutwT5HAyD0bxvoEF+LsOVLJIj40vfKdo6OmxeE6RNXVosq fUPQ== X-Gm-Message-State: AOJu0Yyu7ZJel09Nv7wQBNeHTFqWIyKG74WhnCTQTzYAagWzQd/cv3qj bsqljn6w5zD5dIgSBM9Ggx4vrWV9ef8JRhXtKC1JUlwyE4Se/PO6d0D5Vj4m+wq/ X-Gm-Gg: ATEYQzxruy1o6FcZBlwT7Mjt6cmXIVsjD7No8iVzDdrEAqlUDbvj6QcaEGDLk5xwHp8 NHbDmRmND8S2ePbDtKs8egW3CJeI+l091Zb4jEb4S5NKuSf/i6G0JOP6jfVohqWVez1aCcdPgIX ARB6TplLjrPp1q6uQwk9rijC6evOsq6da5cUgWTGZkBhJa2m8LtY+1FQzCXcYZ9lkYAmahlP7cj XNP1rZprIg+WZMb6JX5qQLHLqAeoj24G7IvnQOmbtjwKfYYEyeyQtfGJQnGJcJ4oRwVCXRB2aQS Rp4MHFCbxPSTv6A5xmKQkjiAUwQ8FgMEaln52Y/9mFA7Na0T6EhmZBXerQz78fSmWWSlZzdVYUv oXDk6uyy4kQWUQ+5/xxV+meZO/kyFOZrOz9+8OKPwXFbpo+6+2ulXCYhXac8SQyoiAL7pf9wN8A 1c0Yc3ZbUc2Z3RJNJv2FDWkIN11w== X-Received: by 2002:a05:600c:3b0c:b0:480:3ad0:93bf with SMTP id 5b1f17b1804b1-48526979668mr170689535e9.24.1773043407338; Mon, 09 Mar 2026 01:03:27 -0700 (PDT) Received: from localhost ([109.238.218.228]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-439dae45786sm26778545f8f.32.2026.03.09.01.03.26 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 09 Mar 2026 01:03:26 -0700 (PDT) From: martin.jansa@gmail.com To: openembedded-core@lists.openembedded.org Cc: Martin Jansa , Steve Sakoman Subject: [kirkstone][PATCH 1/2] libpam: re-add missing libgen include Date: Mon, 9 Mar 2026 09:03:23 +0100 Message-ID: <20260309080324.470847-1-martin.jansa@gmail.com> X-Mailer: git-send-email 2.53.0 MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 09 Mar 2026 08:03:32 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/232687 From: Martin Jansa It was added by original commit for CVE-2025-6020-01.patch https://github.com/linux-pam/linux-pam/commit/475bd60c552b98c7eddb3270b0b4196847c0072e#diff-05f443e6acbe32a148a45648148739bf6f02f13acc5c20c6037bf933223d4d77 but removed here in the rebase, causing: ../../../Linux-PAM-1.5.3/modules/pam_namespace/pam_namespace.c:326:11: error: call to undeclared function 'dirname'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration] 326 | parent = dirname(buf); | ^ ../../../Linux-PAM-1.5.3/modules/pam_namespace/pam_namespace.c:326:9: error: incompatible integer to pointer conversion assigning to 'char*' from 'int' [-Wint-conversion] 326 | parent = dirname(buf); | ^ ~~~~~~~~~~~~ Backport 6d88a28ac7b6ff61808eb46e5c85dabd17c77f2e from scarthgap. It's reproducible with clang-18 from kirkstone-clang18 branch of meta-clang. Signed-off-by: Steve Sakoman Signed-off-by: Martin Jansa --- meta/recipes-extended/pam/libpam/CVE-2025-6020-01.patch | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/meta/recipes-extended/pam/libpam/CVE-2025-6020-01.patch b/meta/recipes-extended/pam/libpam/CVE-2025-6020-01.patch index 4f5f780f9c..53ae2bd2ee 100644 --- a/meta/recipes-extended/pam/libpam/CVE-2025-6020-01.patch +++ b/meta/recipes-extended/pam/libpam/CVE-2025-6020-01.patch @@ -1528,7 +1528,7 @@ diff --git a/modules/pam_namespace/pam_namespace.h b/modules/pam_namespace/pam_n index b51f284..abd570d 100644 --- a/modules/pam_namespace/pam_namespace.h +++ b/modules/pam_namespace/pam_namespace.h -@@ -44,21 +44,16 @@ +@@ -44,21 +44,17 @@ #include #include #include @@ -1542,7 +1542,7 @@ index b51f284..abd570d 100644 -#include #include #include --#include + #include #include #include #include From patchwork Mon Mar 9 08:03:24 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Martin Jansa X-Patchwork-Id: 82844 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id A4F7CEF3706 for ; Mon, 9 Mar 2026 08:03:32 +0000 (UTC) Received: from mail-wm1-f47.google.com (mail-wm1-f47.google.com [209.85.128.47]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.9189.1773043411529883341 for ; Mon, 09 Mar 2026 01:03:31 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20230601 header.b=K4cjwzON; spf=pass (domain: gmail.com, ip: 209.85.128.47, mailfrom: martin.jansa@gmail.com) Received: by mail-wm1-f47.google.com with SMTP id 5b1f17b1804b1-4852a8482fcso20009785e9.3 for ; Mon, 09 Mar 2026 01:03:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1773043410; x=1773648210; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to; bh=Ro592whFbFolqkdxMA2JY3Em96aOociDo5U9HaQCBAs=; b=K4cjwzONo6jnFsYlsri+ITe7hyjQ78lbOlKwHGMs4hdvK+mdDv605JUAyxWmV5/B7F 7pxQD+YP/faYw2+uBxDp/Q0p28/goPP1ErTA5AKL7nOwTbUZ3/A9Z+iT01tjABIA08CJ RlJhDA6yA7JRmVH25Tm35PoCZb8LG5BxznduX9ObXVRJF/lHGfmnCZyPe1OQ7gUWO4on EQwaZ9vesEGMl/viw0XTJPLZz1rm8A39hpvQQXFdB2AvPF3lgJrxx9sF+BWRBtDaFNOL 9SAVIQv9jBgUfzqfjn/Dghz/gbGzzbLXqc5zUSZhB4Iq4fJsjhEd/fquMX2kZthNvCv6 tbRw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1773043410; x=1773648210; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to; bh=Ro592whFbFolqkdxMA2JY3Em96aOociDo5U9HaQCBAs=; b=Oj3Es9MgBHHbYQZ/0ORqDDxJfK7BZkNWqVKeAwq874AVaKtiBzvtCaddoN5BYa7BpV 1wLOmsL70fN4drw+l1qW2bzZ9tW+fuCzGXh1ctzZ6YLaXzgoelQpS+ySFbnZaJ3mToUG EZ6ByLiccmpX+jyHQm+5ZsolPluEekX0l4ExvG1StNMg2lTpCBB0GUoraYUD7HtovOGx mR3BTKnhJa/LGjnOyZ8/FgovIkfCQf3ARwc37zX18PTmStEcZUcVVssKppEtZi5bUtlz 6cw2YeZ3PAetKYCjJTYeMTsLiB0U71VHJ+y2Y9r4HQ97fBM4JI3RAwlyrbJXVEZbBbSl TrBQ== X-Gm-Message-State: AOJu0YxEFM2LYL/E8gD1do4KiEX/9I610efLv4DusF0XL4yhidHmnmsc sREKHIw/BDsokqPNi4M6ivsHsnwkVjFqn11xXEqg7qqNIureoBhDK8M/VHlWveBn X-Gm-Gg: ATEYQzyQhFQa1LKJsjyoBoyO939/GqwXujNFlL/xjCls4DuPuRvfuD7LpiP3gxnrci2 jfN7oWtTYdwnJ0La9X0XTTKoWWZHvPMkhyA0ZkVzD58CduQu9+fukRKDuuNr13IT0leZ53O4B/X DDwas0Q9AERNQz5UaaTi9Mu0U2++n/AEHrw+sTkc1Ckhu5DQKAU6pdSNImeWO832JTRe7Xo1rVV 7/FHggQ1c0yErocxJ//tgzfN3hnvBe6Wph/YU34kVXQ2m5hoL3SBiCGU3umMi/ZWYlm5ckqiGiQ 1eu6rFaQGvnu5Q4DDEHdxI3g0W8ZkHJsbKmlY940+bgLGx1mORTka1FY0ZSAYx2gu0q2NwO3ZEI f3BVsFYEAAdJQ9ANfJcH7IXC3AqznuuSoXz6DK9HlBTXVY/Q+lkm1r+9EDvkf7x8UpmB0fu9uZa wbXyP+EcRe1IbjcVa6qnjCQH+lzNOWoWoagJzl X-Received: by 2002:a05:600c:3f19:b0:485:3e6c:aabc with SMTP id 5b1f17b1804b1-4853e6caf6emr14138605e9.19.1773043409835; Mon, 09 Mar 2026 01:03:29 -0700 (PDT) Received: from localhost ([109.238.218.228]) by smtp.gmail.com with ESMTPSA id 5b1f17b1804b1-485237e8095sm145030615e9.2.2026.03.09.01.03.29 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 09 Mar 2026 01:03:29 -0700 (PDT) From: martin.jansa@gmail.com To: openembedded-core@lists.openembedded.org Cc: Martin Jansa Subject: [kirkstone][PATCH 2/2] lsb.py: strip ' from os-release file Date: Mon, 9 Mar 2026 09:03:24 +0100 Message-ID: <20260309080324.470847-2-martin.jansa@gmail.com> X-Mailer: git-send-email 2.53.0 In-Reply-To: <20260309080324.470847-1-martin.jansa@gmail.com> References: <20260309080324.470847-1-martin.jansa@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 09 Mar 2026 08:03:32 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/232688 From: Martin Jansa In gentoo the file looks like this: NAME='Gentoo' ID='gentoo' PRETTY_NAME='Gentoo Linux' VERSION='2.18' VERSION_ID='2.18' HOME_URL='https://www.gentoo.org/' SUPPORT_URL='https://www.gentoo.org/support/' BUG_REPORT_URL='https://bugs.gentoo.org/' ANSI_COLOR='1;32' ' were added with: https://github.com/gentoo/gentoo/commit/2f590e35c9d3d13d5673163527120b2de97fdc80 before that the os-release file looked like this: NAME=Gentoo ID=gentoo PRETTY_NAME="Gentoo Linux" ANSI_COLOR="1;32" HOME_URL="https://www.gentoo.org/" SUPPORT_URL="https://www.gentoo.org/support/" BUG_REPORT_URL="https://bugs.gentoo.org/" VERSION_ID="2.18" The ' is stripped from the ID later in distro_identifier with: # Filter out any non-alphanumerics and convert to lowercase distro_id = re.sub(r'\W', '', distro_id).lower() but not from version which results in a weird NATIVELSBSTRING like: NATIVELSBSTRING = "gentoo-'2.18'" And similarly the directory name in sstate-cache: oe-core $ ls -d sstate-cache/gentoo-* "sstate-cache/gentoo-'2.18'" sstate-cache/gentoo-2.18 Signed-off-by: Martin Jansa --- meta/lib/oe/lsb.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/lib/oe/lsb.py b/meta/lib/oe/lsb.py index 43e46380d7..f2c3c0ff56 100644 --- a/meta/lib/oe/lsb.py +++ b/meta/lib/oe/lsb.py @@ -14,7 +14,7 @@ def get_os_release(): key, val = line.rstrip().split('=', 1) except ValueError: continue - data[key.strip()] = val.strip('"') + data[key.strip()] = val.strip('"\'') return data def release_dict_osr():