From patchwork Wed Jun 10 22:54:52 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 89715 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id A9802CD98CF for ; Wed, 10 Jun 2026 22:55:19 +0000 (UTC) Received: from mail-wm1-f48.google.com (mail-wm1-f48.google.com [209.85.128.48]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.33475.1781132117958182744 for ; Wed, 10 Jun 2026 15:55:18 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=1nHFdi32; spf=pass (domain: smile.fr, ip: 209.85.128.48, mailfrom: yoann.congal@smile.fr) Received: by mail-wm1-f48.google.com with SMTP id 5b1f17b1804b1-490b64c8311so80564855e9.3 for ; Wed, 10 Jun 2026 15:55:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1781132116; x=1781736916; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=UAUXLjNrY67hCRbCkeh+YWOYWi7O75eECnKHHzVHSw8=; b=1nHFdi32jxyxRfqkVtbESfaGIeiTdBBFDU8AIoOZfg6dg/ngYU5PYrygpHBNldiCzM 4ZnUH0uKA02eWkFHBh7JTePI9g2Gj9/qSFs9FBLHGjyTST7BLKANqHaW0b9FTlVCkFBc KCMezpVLKqgQQ6/oDjijUD/QRltaT7L8nSoR4= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1781132116; x=1781736916; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=UAUXLjNrY67hCRbCkeh+YWOYWi7O75eECnKHHzVHSw8=; b=KZ0USy1q9R/10mRkDaGE+IvdSd6oku4Q2lGADIKMuUxRjDGVAqQuUdX5xjyf266M6s TyfFflu4329JyrwUJYqKJUFv6N2HWl1ERSwvuU5GxvlJbTyYeUyoo/QiWO8jAZTekQ6/ VOteUHliCEsCwPALDjUoiecyUwsEMavrKEfVd3SNQjOOrZI9gr/tUkDOxRLLIn+C+naA 6l0c9Bh1B89in8LYn+n36x2jmF047Xtzka8ZcT2tTlTiGIOHvwKsk3RQPUDtH8MD1Kdf TDiO+Ua9z+8M0JGQiM1ZDWBtJZjE1qFGqwvRMkne9eGQiFNGePu32kqM46lqrYbHLMmY 2M0Q== X-Gm-Message-State: AOJu0YzXGH7PBZN6OPYbtHbiEprJXm7ha53mLNipX5hjZyLwgwFIiCYG cTtcLtvDKX0XZzWLsb/eFyRF5ljL/O6TGYSF9xzeVFu+66ZgxZCJYyOOxmv8p40naVz4q0rL7X5 QlZ+q X-Gm-Gg: Acq92OFzbnrKuDrNpfI3erKoTSeYAcNomSne4dke1RzgZ1CjofGwFDTPApKrWfCuPIe AlWk63eW9WsHm2bbFlZ018aF4vQHX70yrx2qTQHhqoxPEA0H7pu83Fo8ao/JdHwvuvMe3znqSzl sV1XR31F8Coutftb7DVJ3g+tMAqLPWPooke3eBKbOLoZSIjBbYsCxXjhhIqOi2Z8/cjvzPP2EDG WlqXsYpzqKoVobyqR1Jy7W3JOZFFbDaIni8hcaMT62J1xmJm8rgz4fj0OL097LjR5boN3j78sbi wrbsEKKvD2KXXwFOVBss3N2zUPnkkN3oF1RcKn7u8E42CMGMVJQ/1hc4vkRjpX4XnDM7oajcnxZ 8xEdMyKf9kq+km12kImv2aKiEPSQie3khbe6l3swGlSSAs4SdRnkQvGiBOGyP5PtR0MCDnN2x1t 0lJSOGjqBCMhtmix69wa7ewQyGtd/Ag02FOuasXPaz76J0vnlGJxMSui+pEULjOUICoFHvM5zBQ cbiz7l28cYBrFVcqLCt0PuLwDM3kaMEt9TgNNM= X-Received: by 2002:a05:600c:83c3:b0:490:b355:9c70 with SMTP id 5b1f17b1804b1-490c25a5970mr456676775e9.11.1781132116310; Wed, 10 Jun 2026 15:55:16 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00bb749f54eeb85d7b.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:bb74:9f54:eeb8:5d7b]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4601f344148sm71599304f8f.19.2026.06.10.15.55.15 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 10 Jun 2026 15:55:15 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 01/21] libpcap: fix error message on 32-bit integer overflow Date: Thu, 11 Jun 2026 00:54:52 +0200 Message-ID: <727903962601708b2f5a2f18a57017627e83fd46.1781132051.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 10 Jun 2026 22:55:19 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/238397 From: Adarsh Jagadish Kamini Upstream fix: https://github.com/the-tcpdump-group/libpcap/commit/0d8bd2f67c16637c4d25d81fb24cdcebc35afce6 Signed-off-by: Adarsh Jagadish Kamini (cherry picked from commit e5a1ba482ffcccd04fc3efc7a3ab2bc8a4155f15) Signed-off-by: Yoann Congal --- ...ssages-about-32-bit-integer-overflow.patch | 158 ++++++++++++++++++ .../libpcap/libpcap_1.10.6.bb | 4 +- 2 files changed, 161 insertions(+), 1 deletion(-) create mode 100644 meta/recipes-connectivity/libpcap/libpcap/0001-Fix-error-messages-about-32-bit-integer-overflow.patch diff --git a/meta/recipes-connectivity/libpcap/libpcap/0001-Fix-error-messages-about-32-bit-integer-overflow.patch b/meta/recipes-connectivity/libpcap/libpcap/0001-Fix-error-messages-about-32-bit-integer-overflow.patch new file mode 100644 index 00000000000..4f2af537626 --- /dev/null +++ b/meta/recipes-connectivity/libpcap/libpcap/0001-Fix-error-messages-about-32-bit-integer-overflow.patch @@ -0,0 +1,158 @@ +From 217c3a07c7db694324b5c61eaaa07774735e2d7d Mon Sep 17 00:00:00 2001 +From: Denis Ovsienko +Date: Thu, 9 Oct 2025 20:51:45 +0100 +Subject: [PATCH] Fix error messages about 32-bit integer overflow. + +Since commit a5cac25 stoulen() takes a pointer to a string and a +length of the string and uses the length to report a problem about the +string. However, by that time it has already modified the length, so +the error message does not match the input: + +$ filtertest RAW '123456789012345' +filtertest: number 1234 overflows 32 bits +$ filtertest RAW '12345678901234567890' +filtertest: number 123456789 overflows 32 bits +$ filtertest RAW '123456789012345678901234567890' +filtertest: number 1234567890123456789 overflows 32 bits +$ filtertest RAW '0123456701234' +filtertest: number overflows 32 bits +$ filtertest RAW '0x100000000' +filtertest: number overflows 32 bits + +Consequently, if more than one number in the filter expression is out of +range, it can be not immediately obvious which one it is: + +$ filtertest RAW '4294967296 != 4294967297' +filtertest: number overflows 32 bits + +To fix this, in stoulen() keep a copy of the original string length and +use it for the error reporting. Ibid., factor the format string out and +show the base in the message. Simplify the forward declaration. Add +two comments to outline the clash space between certain MAC-48 addresses +and certain octal integers. Document this syntax peculiarity in the man +page and add a few basic reject tests. + +Upstream-Status: Backport [https://github.com/the-tcpdump-group/libpcap/commit/0d8bd2f67c16637c4d25d81fb24cdcebc35afce6] +Signed-off-by: Adarsh Jagadish Kamini +--- + pcap-filter.manmisc.in | 9 ++++++++- + scanner.l | 33 ++++++++++++++++++++++++--------- + 2 files changed, 32 insertions(+), 10 deletions(-) + +diff --git a/pcap-filter.manmisc.in b/pcap-filter.manmisc.in +index bfb692ff..929d668d 100644 +--- a/pcap-filter.manmisc.in ++++ b/pcap-filter.manmisc.in +@@ -18,7 +18,7 @@ + .\" WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF + .\" MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. + .\" +-.TH PCAP-FILTER @MAN_MISC_INFO@ "13 June 2023" ++.TH PCAP-FILTER @MAN_MISC_INFO@ "9 October 2025" + .SH NAME + pcap-filter \- packet filter syntax + .br +@@ -886,6 +886,13 @@ integer constants (expressed in standard C syntax), the normal binary operators + a length operator, and special packet data + accessors. Note that all comparisons are unsigned, so that, for example, + 0x80000000 and 0xffffffff are > 0. ++.LP ++Note that 32-bit octal integer constants in the [010000000000 .. 037777777777] ++interval, which includes 75% of all 32-bit integers, are interpreted as MAC-48 ++addresses when prepended with a single zero (e.g., 012345670123 means ++01:23:45:67:01:23). To disambiguate the expression, prepend such an octal ++number with more zeroes (0012345670123) or represent the same value using a ++decimal (1402433619) or hexadecimal (0x53977053) number. + .IP + The + .B % +diff --git a/scanner.l b/scanner.l +index 57779497..49aaeab2 100644 +--- a/scanner.l ++++ b/scanner.l +@@ -48,8 +48,8 @@ typedef enum { + STOULEN_ERROR + } stoulen_ret; + +-stoulen_ret stoulen(const char *string, size_t stringlen, bpf_u_int32 *val, +- compiler_state_t *cstate); ++stoulen_ret stoulen(const char *, const size_t, bpf_u_int32 *, ++ compiler_state_t *); + } + + /* +@@ -244,6 +244,12 @@ V6004 ::{N}\.{N}\.{N}\.{N} + + V6 ({V680}|{V670}|{V671}|{V672}|{V673}|{V674}|{V675}|{V676}|{V677}|{V660}|{V661}|{V662}|{V663}|{V664}|{V665}|{V666}|{V650}|{V651}|{V652}|{V653}|{V654}|{V655}|{V640}|{V641}|{V642}|{V643}|{V644}|{V630}|{V631}|{V632}|{V633}|{V620}|{V621}|{V622}|{V610}|{V611}|{V600}|{V6604}|{V6504}|{V6514}|{V6524}|{V6534}|{V6544}|{V6554}|{V6404}|{V6414}|{V6424}|{V6434}|{V6444}|{V6304}|{V6314}|{V6324}|{V6334}|{V6204}|{V6214}|{V6224}|{V6104}|{V6114}|{V6004}) + ++ /* ++ * In the regexp below the "{B2}{3}" form matches all octal numbers in ++ * the [010000000000 .. 077777777777] interval that use a single leading ++ * zero. The interval includes both integer values that fit into 32 ++ * bits and values that don't. ++ */ + MAC ({B}:{B}:{B}:{B}:{B}:{B}|{B}\-{B}\-{B}\-{B}\-{B}\-{B}|{B}\.{B}\.{B}\.{B}\.{B}\.{B}|{B2}\.{B2}\.{B2}|{B2}{3}) + + +@@ -486,13 +492,16 @@ tcp-cwr { yylval->h = 0x80; return NUM; } + */ + DIAG_ON_FLEX + ++#define FORMAT_OVERFLOWS_32_BITS "%s number %.*s overflows 32 bits" ++ + stoulen_ret +-stoulen(const char *string, size_t string_len, bpf_u_int32 *val, ++stoulen(const char *string, const size_t orig_string_len, bpf_u_int32 *val, + compiler_state_t *cstate) + { + bpf_u_int32 n = 0; + unsigned int digit; + const char *s = string; ++ size_t string_len = orig_string_len; + + /* + * string is guaranteed either to be a string of decimal digits +@@ -538,8 +547,8 @@ stoulen(const char *string, size_t string_len, bpf_u_int32 *val, + * in 32 bits. + */ + bpf_set_error(cstate, +- "number %.*s overflows 32 bits", +- (int)string_len, string); ++ FORMAT_OVERFLOWS_32_BITS, ++ "hexadecimal", (int)orig_string_len, string); + return STOULEN_ERROR; + } + n = (n << 4) + digit; +@@ -573,10 +582,16 @@ stoulen(const char *string, size_t string_len, bpf_u_int32 *val, + * number, and are about to add + * 3 more; that won't fit in + * 32 bits. ++ * ++ * This code path depends on using more ++ * than one leading zero for all values ++ * in the [040000000000 .. 077777777777] ++ * interval, otherwise the MAC regexp ++ * above consumes the string first. + */ + bpf_set_error(cstate, +- "number %.*s overflows 32 bits", +- (int)string_len, string); ++ FORMAT_OVERFLOWS_32_BITS, ++ "octal", (int)orig_string_len, string); + return STOULEN_ERROR; + } + n = (n << 3) + digit; +@@ -609,8 +624,8 @@ stoulen(const char *string, size_t string_len, bpf_u_int32 *val, + * number that won't fit in 32 bits. + */ + bpf_set_error(cstate, +- "number %.*s overflows 32 bits", +- (int)string_len, string); ++ FORMAT_OVERFLOWS_32_BITS, ++ "decimal", (int)orig_string_len, string); + return STOULEN_ERROR; + } + n = (n * 10) + digit; +-- +2.34.1 + diff --git a/meta/recipes-connectivity/libpcap/libpcap_1.10.6.bb b/meta/recipes-connectivity/libpcap/libpcap_1.10.6.bb index 9b259396f06..d381a4eb2fe 100644 --- a/meta/recipes-connectivity/libpcap/libpcap_1.10.6.bb +++ b/meta/recipes-connectivity/libpcap/libpcap_1.10.6.bb @@ -10,7 +10,9 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=5eb289217c160e2920d2e35bddc36453 \ file://pcap.h;beginline=1;endline=32;md5=39af3510e011f34b8872f120b1dc31d2" DEPENDS = "flex-native bison-native" -SRC_URI = "https://www.tcpdump.org/release/${BP}.tar.xz" +SRC_URI = "https://www.tcpdump.org/release/${BP}.tar.xz \ + file://0001-Fix-error-messages-about-32-bit-integer-overflow.patch \ + " SRC_URI[sha256sum] = "ec97d1206bdd19cb6bdd043eaa9f0037aa732262ec68e070fd7c7b5f834d5dfc" inherit autotools binconfig-disabled pkgconfig From patchwork Wed Jun 10 22:54:53 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 89711 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id A3240CD98C5 for ; Wed, 10 Jun 2026 22:55:19 +0000 (UTC) Received: from mail-wm1-f42.google.com (mail-wm1-f42.google.com [209.85.128.42]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.33643.1781132118369886933 for ; Wed, 10 Jun 2026 15:55:18 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=d4Imbs3V; spf=pass (domain: smile.fr, ip: 209.85.128.42, mailfrom: yoann.congal@smile.fr) Received: by mail-wm1-f42.google.com with SMTP id 5b1f17b1804b1-490ae94a89eso62082975e9.1 for ; Wed, 10 Jun 2026 15:55:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1781132117; x=1781736917; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=UJn85x3Iy3d21LowZLlfvlIJDXdPFRAYKkNgV1VnRk4=; b=d4Imbs3VKmhwfPF3lqSMvTNy9FO7HRkidy3LJ2HWSl6QzYsNEXXnK/Bj7Etd/aliks sRWTu8UaW2kl/6PmE+E12LuSF0SO/4jZcRSPf4t+suHFbXNWYdlS3CMf68EBbFs/4m8r LSDbEZXZmOz0M6iVJknaUsMS6x62cb7yvl/5w= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1781132117; x=1781736917; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=UJn85x3Iy3d21LowZLlfvlIJDXdPFRAYKkNgV1VnRk4=; b=qpq+nas5EIno6e39ZZtuRCzQLALtT6gmh1WjQsW6YCrLgOKQ/SKl7lIYnZx0bDZgdl LPQbBMTIVexP1G/QYQWwfEH0mqhgQbFzizpq794OQ/fl5VN2kXIclKI4ImuKR/usqZ6H aM0zMXO2LBsvrfMetc9RH+n43wnzqaND8hom/cKfTv8Xkl0N9zLO8MQ8pMkgfa9Soq7T aM8Y8A+HlnTIbTDMlV0jMjCegDZMoep1JEfBirBFw7LFDe0xTa4fTp1rUKsqR/n+om/Q MUkRDBzB7axkurvzO3ZjhbjineNlYGsEiVG1U/p0vHX1Dd7oBmAOqMTzHz4WPjcsUSGd BOFw== X-Gm-Message-State: AOJu0YwDwpXIkMNE4VFaR2B/ChYee7gHMmA+oPaqEc//ReO6+jocfKHG ukEFHH/bZRfXLn6+CbvBlSXCstZ4kUIQymDfbEFkPSd5RA9z7FvnjIYwdzqvGJobqF/18oflLK/ PPK+C X-Gm-Gg: Acq92OGPEsyqnhbi2MDM3d/mwI2qDVkBzc8PVmq6hY/HaZ12cPcVmIIgJiWAR/t9zxb 7Vi/jCcE91HG30mdS4k9ig5HuLGSBQmJNqAmgwqcNGvPL8cMjyWryGafDLNtI+qZv6j6DvsG2XE pOV+OwxKCOf1ttneL+jF4jsxXKY43oHQsSGg5lKwZfaAUKbpzAmFiUwr3CcyGnhgBAjHnrNslhs jb7GESD3NGS4WHCFLz8HQCMtKRZ6b8W7DAcs29J3j2P47LW3KxNKTyvWxJhJ/eRb4q75Gr/5Gto UjQqQU8jXxSoP1NW4RlRruJmURqtiQkngUIu2SbdEAmV8CFzRB93zpePgQ0DqMQHJieCmmM8/ov MKS2l+c1N0ypTk8MEEn4e+vdegw62mO8DQib3QLhbDaWHAztyb+XAtM1EtyOFkyVkMR4lFcaff4 ecB8Orj0weZRvdsHFltt+EtHBKyuO1YgYIVW0Xc4pLlWZKhthewRmXHY/fJH+NK5wOCqxWBPP4c ag8+JEijQRMupFjkkKqGLZdQ1gvPxiyavXSzwQ= X-Received: by 2002:a05:600c:8208:b0:490:bb37:9d49 with SMTP id 5b1f17b1804b1-490c25b136amr436936055e9.11.1781132116711; Wed, 10 Jun 2026 15:55:16 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00bb749f54eeb85d7b.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:bb74:9f54:eeb8:5d7b]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4601f344148sm71599304f8f.19.2026.06.10.15.55.16 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 10 Jun 2026 15:55:16 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 02/21] lttng-modules: Fix trace_hrtimer_start build failure Date: Thu, 11 Jun 2026 00:54:53 +0200 Message-ID: X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 10 Jun 2026 22:55:19 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/238398 From: He Zhe Fix the following build failure probes/../../include/lttng/tracepoint-event-impl.h:133:6: error: conflicting types for 'trace_hrtimer_start'; have 'void(struct hrtimer *, enum hrtimer_mode)' 133 | void trace_##_name(_proto); | ^~~~~~ Signed-off-by: He Zhe [YC: this is a partial backport of commit 7dae5f40e394 ("lttng-modules: fix build against kernel 7.1+")] Signed-off-by: Yoann Congal --- ...ce-trace-noise-in-hrtimer_start-v7.1.patch | 103 ++++++++++++++++++ .../lttng/lttng-modules_2.14.4.bb | 1 + 2 files changed, 104 insertions(+) create mode 100644 meta/recipes-kernel/lttng/lttng-modules/0001-fix-hrtimer-Reduce-trace-noise-in-hrtimer_start-v7.1.patch diff --git a/meta/recipes-kernel/lttng/lttng-modules/0001-fix-hrtimer-Reduce-trace-noise-in-hrtimer_start-v7.1.patch b/meta/recipes-kernel/lttng/lttng-modules/0001-fix-hrtimer-Reduce-trace-noise-in-hrtimer_start-v7.1.patch new file mode 100644 index 00000000000..a6fe47737ec --- /dev/null +++ b/meta/recipes-kernel/lttng/lttng-modules/0001-fix-hrtimer-Reduce-trace-noise-in-hrtimer_start-v7.1.patch @@ -0,0 +1,103 @@ +From b77f94c7a7109e70a97bf936b72d66d611187d61 Mon Sep 17 00:00:00 2001 +From: Michael Jeanson +Date: Mon, 25 May 2026 10:38:18 -0400 +Subject: [PATCH] fix: hrtimer: Reduce trace noise in hrtimer_start() (v7.1) + +See upstream commit: + + commit f2e388a019e4cf83a15883a3d1f1384298e9a6aa + Author: Thomas Gleixner + Date: Tue Feb 24 17:36:59 2026 +0100 + + hrtimer: Reduce trace noise in hrtimer_start() + + hrtimer_start() when invoked with an already armed timer traces like: + + -.. [032] d.h2. 5.002263: hrtimer_cancel: hrtimer= .... + -.. [032] d.h1. 5.002263: hrtimer_start: hrtimer= .... + + Which is incorrect as the timer doesn't get canceled. Just the expiry time + changes. The internal dequeue operation which is required for that is not + really interesting for trace analysis. But it makes it tedious to keep real + cancellations and the above case apart. + + Remove the cancel tracing in hrtimer_start() and add a 'was_armed' + indicator to the hrtimer start tracepoint, which clearly indicates what the + state of the hrtimer is when hrtimer_start() is invoked: + + -.. [032] d.h1. 6.200103: hrtimer_start: hrtimer= .... was_armed=0 + -.. [032] d.h1. 6.200558: hrtimer_start: hrtimer= .... was_armed=1 + +Change-Id: I37ee0ae0af665a51fd4f92adffb6b1dcb2ecd9d2 +Signed-off-by: Michael Jeanson +Signed-off-by: Mathieu Desnoyers +Upstream-Status: Backport [https://github.com/lttng/lttng-modules/commit/b77f94c7a7109e70a97bf936b72d66d611187d61] +Signed-off-by: He Zhe +--- + include/instrumentation/events/timer.h | 39 ++++++++++++++++++++++++-- + 1 file changed, 37 insertions(+), 2 deletions(-) + +diff --git a/include/instrumentation/events/timer.h b/include/instrumentation/events/timer.h +index f69e069b..dfc295e0 100644 +--- a/include/instrumentation/events/timer.h ++++ b/include/instrumentation/events/timer.h +@@ -220,12 +220,43 @@ LTTNG_TRACEPOINT_EVENT_MAP(hrtimer_init, + ) + ) + ++#if (LTTNG_LINUX_VERSION_CODE >= LTTNG_KERNEL_VERSION(7,1,0) || \ ++ LTTNG_KERNEL_RANGE(7,0,10, 7,1,0) || \ ++ LTTNG_KERNEL_RANGE(6,18,33, 6,19,0) || \ ++ LTTNG_KERNEL_RANGE(6,12,91, 6,13,0) || \ ++ LTTNG_KERNEL_RANGE(6,6,141, 6,7,0)) + /** + * hrtimer_start - called when the hrtimer is started +- * @timer: pointer to struct hrtimer ++ * @hrtimer: pointer to struct hrtimer ++ * @mode: the hrtimers mode ++ * @was_armed: Was armed when hrtimer_start*() was invoked + */ +-#if (LTTNG_LINUX_VERSION_CODE >= LTTNG_KERNEL_VERSION(4,16,0) || \ ++LTTNG_TRACEPOINT_EVENT_MAP(hrtimer_start, ++ ++ timer_hrtimer_start, ++ ++ TP_PROTO(struct hrtimer *hrtimer, enum hrtimer_mode mode, bool was_armed), ++ ++ TP_ARGS(hrtimer, mode, was_armed), ++ ++ TP_FIELDS( ++ ctf_integer_hex(void *, hrtimer, hrtimer) ++ ctf_integer_hex(void *, function, hrtimer->function) ++ ctf_integer(s64, expires, ++ lttng_ktime_get_tv64(hrtimer_get_expires(hrtimer))) ++ ctf_integer(s64, softexpires, ++ lttng_ktime_get_tv64(hrtimer_get_softexpires(hrtimer))) ++ ctf_enum(hrtimer_mode, unsigned int, mode, mode) ++ ctf_integer(bool, was_armed, was_armed) ++ ) ++) ++#elif (LTTNG_LINUX_VERSION_CODE >= LTTNG_KERNEL_VERSION(4,16,0) || \ + LTTNG_RT_KERNEL_RANGE(4,14,0,0, 4,15,0,0)) ++/** ++ * hrtimer_start - called when the hrtimer is started ++ * @hrtimer: pointer to struct hrtimer ++ * @mode: the hrtimers mode ++ */ + LTTNG_TRACEPOINT_EVENT_MAP(hrtimer_start, + + timer_hrtimer_start, +@@ -245,6 +276,10 @@ LTTNG_TRACEPOINT_EVENT_MAP(hrtimer_start, + ) + ) + #else ++/** ++ * hrtimer_start - called when the hrtimer is started ++ * @hrtimer: pointer to struct hrtimer ++ */ + LTTNG_TRACEPOINT_EVENT_MAP(hrtimer_start, + + timer_hrtimer_start, +-- +2.34.1 + diff --git a/meta/recipes-kernel/lttng/lttng-modules_2.14.4.bb b/meta/recipes-kernel/lttng/lttng-modules_2.14.4.bb index 722b1ac5ddd..b2c697d365d 100644 --- a/meta/recipes-kernel/lttng/lttng-modules_2.14.4.bb +++ b/meta/recipes-kernel/lttng/lttng-modules_2.14.4.bb @@ -15,6 +15,7 @@ SRC_URI = "https://lttng.org/files/${BPN}/${BPN}-${PV}.tar.bz2 \ # Use :append here so that the patch is applied also when using devupstream SRC_URI:append = " file://0001-src-Kbuild-change-missing-CONFIG_TRACEPOINTS-to-warn.patch \ file://0001-fix-adjust-range-in-btrfs-probe-for-v6.18.14.patch \ + file://0001-fix-hrtimer-Reduce-trace-noise-in-hrtimer_start-v7.1.patch \ " SRC_URI[sha256sum] = "63deefbc15d9ce7c43d858187533367b01dcb6e8469d6b69ccb757d6d3dbb0ad" From patchwork Wed Jun 10 22:54:54 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 89713 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 13AEDCD98CC for ; Wed, 10 Jun 2026 22:55:20 +0000 (UTC) Received: from mail-wm1-f45.google.com (mail-wm1-f45.google.com [209.85.128.45]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.33644.1781132118817727719 for ; Wed, 10 Jun 2026 15:55:19 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=FO6j6llj; spf=pass (domain: smile.fr, ip: 209.85.128.45, mailfrom: yoann.congal@smile.fr) Received: by mail-wm1-f45.google.com with SMTP id 5b1f17b1804b1-4903d730b1fso84513355e9.2 for ; Wed, 10 Jun 2026 15:55:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1781132117; x=1781736917; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=mBaCG0VcFeEeGKqhH8SQAqk0djZil2pLFTNLIxyLX+A=; b=FO6j6lljZJXrTz3R7yo9Ac4NdK2xq6EFDWUH70nqWgJheghGRGMCrQxYdduu0RsIxw 549FQAV22GL4WqKoPmKUlK/sRUXwBDebW6GeBa4z9yxvIcYYGPjEMPnJ6JTuus7x3XCn 6z+JDXbxVINDdZlqtvhoTnv6THla1iCO5v2ZE= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1781132117; x=1781736917; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=mBaCG0VcFeEeGKqhH8SQAqk0djZil2pLFTNLIxyLX+A=; b=lU0sQoprvJGskzAsExtrO/dkc8PDe95+Eqrn+y78J8NR1zV0yTUsM1XwgdIHfLrVzX hGbunZzQLY8RPA2wuGaTsJAtlpW8I86MQyNvm5s0BncylBDh1HPBjoFnZ5LkokFZySNB u3dXVrVDJk2YPAJxWe6LwXAJeQ7KwTid/V5ULaMJKfAWs01bYxchkajaO9OfplsPM26/ Uy9LBaPljq0AeLg0WIiG5L6MFKX/KRW3E4vnx9pSCXHKE5pyXeG8OZmFoIA9yE/bIN8H SotOaNKFf9PgBLpAKqBCiHeTZPCH1FVHWnbta5DvFvbxOLahaVg7Zo85kYi8EgVYMFAF qkqg== X-Gm-Message-State: AOJu0YylnSnSs8WN4V0CLD5ekRZ2Zk5x3Ekd9zcDxcLSPQXv+TAeMwsI WCENj3j4idzDfUByeRki4eBGVJvL8/z4CzjBTueGPEK5F4UFi0Af+LQSdFmIZLNEjbx9tUzBfer ZxVyB X-Gm-Gg: Acq92OGH83sNi5pHp8GMCHZhV0bwut4jvCsiPdDxflc21reuMfcef+Wxlq21S219UGM FD1/FVbyadvc/1VYV8fyLG0Ctz8lBR2HgaQsvldMLoRuBWjVManJzFuqvokf2yj8Z2JeFzQP5kA 2jFCPvYlKMdyZgPb5nzybdshGERUBd08HGGwso5dcPNJ/GZ4Wq8Qf+wx865/yw38Ak+PDQbvMdR SYWdix3R7lzuYztG7fpFoGSJkc1HOocba6psWUHxJPKqaOlViHljYiOcIVlQnD/NhssXoB99ryo bCGfDfWGWIQwVWnhE7B0JbLv/cmtOXD60eFhxX3vRfwMvhGrLrD644adGFfF6afLbIcweKf4yKh k7yN2qJ4v3J4zuI+/G/f9U39xiryDHRR1bxAD+6KvUJ3Pw9LFxDd4pE+AEKrd6N1eQ8+VWW7/PS JnUG9Lou5jH4lMpqip+ey6umRtzSB5MZNjPf8DaZvjFJn/hMifk/h+xjUMoG7BGQoPwTaHfWcF1 wX40TNssx6JnNPPluN/pUPseTqBC9E90gOjYCE= X-Received: by 2002:a05:600c:6206:b0:490:e18f:d0db with SMTP id 5b1f17b1804b1-490e18fd29cmr34213485e9.26.1781132117159; Wed, 10 Jun 2026 15:55:17 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00bb749f54eeb85d7b.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:bb74:9f54:eeb8:5d7b]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4601f344148sm71599304f8f.19.2026.06.10.15.55.16 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 10 Jun 2026 15:55:16 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 03/21] perf: make libraries for install_headers configurable Date: Thu, 11 Jun 2026 00:54:54 +0200 Message-ID: X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 10 Jun 2026 22:55:20 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/238399 From: Peter Marko Older kernels don't support install_headers for all libraries. For instance kernel 6.1 fails for two (api and symbol) with: make: *** No rule to make target 'install_headers'. Stop. Also sort the list when moving to variable. Signed-off-by: Peter Marko Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie (From OE-Core rev: 089e2571b1a220607b00a16c87c1a2dcdcde9792) Signed-off-by: Peter Marko Signed-off-by: Yoann Congal --- meta/recipes-kernel/perf/perf.bb | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/meta/recipes-kernel/perf/perf.bb b/meta/recipes-kernel/perf/perf.bb index f24b44954e7..c3ef25fd999 100644 --- a/meta/recipes-kernel/perf/perf.bb +++ b/meta/recipes-kernel/perf/perf.bb @@ -169,6 +169,9 @@ PERF_EXTRA_LDFLAGS:mipsarchn32el = "-m elf32ltsmipn32" PERF_EXTRA_LDFLAGS:mipsarchn64eb = "-m elf64btsmip" PERF_EXTRA_LDFLAGS:mipsarchn64el = "-m elf64ltsmip" +# override for older kernels which don't support installing headers for all libraries +REPRODUCIBLE_HEADERS_TARGETS ?= "api bpf perf subcmd symbol" + do_compile() { # Linux kernel build system is expected to do the right thing unset CFLAGS @@ -179,7 +182,7 @@ do_compile() { # There are two copies of internal headers such as: # libperf/include/internal/xyarray.h and tools/lib/perf/include/internal/xyarray.h # For reproducibile binaries, we need to find one copy, hence force libXXX to be created first - for i in api bpf subcmd symbol perf + for i in ${REPRODUCIBLE_HEADERS_TARGETS} do oe_runmake -C ${S}/tools/lib/$i DESTDIR=${B}/lib$i prefix= install_headers V=1 done From patchwork Wed Jun 10 22:54:55 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 89714 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 2854DCD98D0 for ; Wed, 10 Jun 2026 22:55:20 +0000 (UTC) Received: from mail-wr1-f46.google.com (mail-wr1-f46.google.com [209.85.221.46]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.33476.1781132119349364999 for ; Wed, 10 Jun 2026 15:55:19 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=XEwKL3EG; spf=pass (domain: smile.fr, ip: 209.85.221.46, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f46.google.com with SMTP id ffacd0b85a97d-45ef4223be7so4048756f8f.2 for ; Wed, 10 Jun 2026 15:55:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1781132118; x=1781736918; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=OZt/U68JikNjdlbA5Y3vOxsKAe7eErk2YRLBwQUtmJI=; b=XEwKL3EGTuSgInzCW3Xluyt6sH6UcOyagPnc46PS0Hz3Aso06KcblQIY2kMhrqNsLE NvZ0Oz3LzdmYNbD99rAjKMOUHkCMoXgckdqZtElxIXtzK5TzjUNHcQzt2sZRv91LDUff lImdy19h1ynnbQnOcyBLmTtuujVCRy5Q7pcB8= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1781132118; x=1781736918; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=OZt/U68JikNjdlbA5Y3vOxsKAe7eErk2YRLBwQUtmJI=; b=ou2z24/PNlMFyAcYA3sQ0EK8jlThiav1o0MbTjxmIgcqfVqOyddfcN1Fm7ITbuJQC2 XfqEiLWNXMoQuE+KLvnHAB+E9CMipQz9dJ/NXu8FkKXCA2RIDSKP9qjwzsRIDHUbIU1f CwogOkHvMm+PR5EAQqzVJuucYBaJa9ojZKIltjgDVHOiwdMJgjQBCGiniUJNxqkp/tR3 X47y7fIvMd+MD0RquI9NlpOVf343jXpBGz1JhWNU8UW1H0R5ekM5x7fU6RU/GwlTxqAL HVdxF/PQOGZ1lE1QOUcxVwfNo6ZQEF9SW2QJS1lcX38OponkxVPDDL7asOGhWZOYfNyK avzg== X-Gm-Message-State: AOJu0YzHiObqSdoY9uteSawSwEmjXLtyCvWleBGNhYJ2ZwxmevI31hti 9m+rBHjqPgIqOFdGU8XuNHl/Y54LyxspgGfd+wZMYaGbmC1cEfZMNBh7AcMf+q5Xaf3KrczO+pZ dKfbg X-Gm-Gg: Acq92OE/u931YEq1kwADz8UvStaLOGPMBWJ2KqJ0UMh/tvoFky6iOtgM5rRA0EdiMvF adqP8EGrZgUJtARmK2IvZV1mwlzqVYXwmvXc+oiS+PcaUevx+i7H2aJs8ge1VDWsKHkxoYl0yct 5RJljzNMi5UU/1YrPPOuSCehP9F7ICnX+XsFKB4DJm4Xy6u4+Lg7ijF0DbDLkCzRXzYBi8tredY mYR39NhB2wMZhufUPG+QIYYanC4rOB9oIWQQv6dA83MUyCcR2kH52lzTgzHrXKW6Ehl+bsQmmVC lJAad+ebImH1idJCLU5U8FV1oZAaASHQSs7aWpExJbG5xBLj6eluR0VksUAzRcv/slh++HYGahz cqR1Atg+SZ/01iHq7opo+YXlXG9vNrDoI3V2KjbDD1HEPW+ZQVZ33i1/jtUd5DQ+eW0xKxGnn0X ifvTN1SM8fiEFHfSTt4yJ8ONf7aEgM7+f60fHNpHnwoK6URV2QB0th63gv0KH6n46CptGgrc1eG TLLCkWguBh+n0tMrGB5+lHK3KoHqn2pFbPZYu4= X-Received: by 2002:adf:e008:0:10b0:460:e00:121d with SMTP id ffacd0b85a97d-4606758b140mr173243f8f.14.1781132117629; Wed, 10 Jun 2026 15:55:17 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00bb749f54eeb85d7b.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:bb74:9f54:eeb8:5d7b]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4601f344148sm71599304f8f.19.2026.06.10.15.55.17 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 10 Jun 2026 15:55:17 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 04/21] cups: fix CVE-2026-34978 Date: Thu, 11 Jun 2026 00:54:55 +0200 Message-ID: X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 10 Jun 2026 22:55:20 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/238400 From: Abhishek Bachiphale In CUPS versions 2.4.16 and prior, the RSS notifier allows path traversal in notify-recipient-uri (e.g., rss:///../job.cache), letting a remote IPP client write RSS XML bytes outside CacheDir/rss. Because CacheDir is group-writable by default, the notifier (running as lp) can overwrite root-managed state files via temp-file + rename(), leading to job cache corruption and loss of queued jobs after restart. Apply upstream fix to prevent path traversal in RSS notifier. Reference: [ https://nvd.nist.gov/vuln/detail/CVE-2026-34978 ] Signed-off-by: Abhishek Bachiphale Signed-off-by: Yoann Congal --- meta/recipes-extended/cups/cups.inc | 1 + .../cups/cups/CVE-2026-34978.patch | 120 ++++++++++++++++++ 2 files changed, 121 insertions(+) create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-34978.patch diff --git a/meta/recipes-extended/cups/cups.inc b/meta/recipes-extended/cups/cups.inc index 2724ce72fba..e739cfa5797 100644 --- a/meta/recipes-extended/cups/cups.inc +++ b/meta/recipes-extended/cups/cups.inc @@ -15,6 +15,7 @@ SRC_URI = "${GITHUB_BASE_URI}/download/v${PV}/cups-${PV}-source.tar.gz \ file://0004-cups-fix-multilib-install-file-conflicts.patch \ file://volatiles.99_cups \ file://cups-volatiles.conf \ + file://CVE-2026-34978.patch \ " GITHUB_BASE_URI = "https://github.com/OpenPrinting/cups/releases" diff --git a/meta/recipes-extended/cups/cups/CVE-2026-34978.patch b/meta/recipes-extended/cups/cups/CVE-2026-34978.patch new file mode 100644 index 00000000000..043cab86eab --- /dev/null +++ b/meta/recipes-extended/cups/cups/CVE-2026-34978.patch @@ -0,0 +1,120 @@ +From 730347c5bbd5e1271149c6739aa858c0c83a7568 Mon Sep 17 00:00:00 2001 +From: Michael R Sweet +Date: Tue, 31 Mar 2026 14:18:26 -0400 +Subject: [PATCH] Fix RSS notifier. + +OpenPrinting CUPS is an open source printing system for Linux and other +Unix-like operating systems. In versions 2.4.16 and prior, the RSS +notifier allows .. path traversal in notify-recipient-uri (e.g., +rss:///../job.cache), letting a remote IPP client write RSS XML bytes +outside CacheDir/rss (anywhere that is lp-writable). In particular, +because CacheDir is group-writable by default (typically root:lp and +mode 0770), the notifier (running as lp) can replace root-managed state +files via temp-file + rename(). This PoC clobbers CacheDir/job.cache +with RSS XML, and after restarting cupsd the scheduler fails to parse +the job cache and previously queued jobs disappear. + +CVE: CVE-2026-34978 + +Upstream-Status: Backport [ https://github.com/OpenPrinting/cups/commit/730347c5bbd5e1271149c6739aa858c0c83a7568 ] + +Signed-off-by: Abhishek Bachiphale + +--- + notifier/rss.c | 20 ++++++++++++++------ + scheduler/ipp.c | 14 +++++++++++++- + 3 files changed, 29 insertions(+), 7 deletions(-) + +diff --git a/notifier/rss.c b/notifier/rss.c +index f17e1494c6..250ad877e7 100644 +--- a/notifier/rss.c ++++ b/notifier/rss.c +@@ -1,11 +1,12 @@ + /* + * RSS notifier for CUPS. + * +- * Copyright © 2020-2024 by OpenPrinting. +- * Copyright 2007-2015 by Apple Inc. +- * Copyright 2007 by Easy Software Products. ++ * Copyright © 2020-2026 by OpenPrinting. ++ * Copyright © 2007-2015 by Apple Inc. ++ * Copyright © 2007 by Easy Software Products. + * +- * Licensed under Apache License v2.0. See the file "LICENSE" for more information. ++ * Licensed under Apache License v2.0. See the file "LICENSE" for more ++ * information. + */ + + /* +@@ -80,6 +81,7 @@ main(int argc, /* I - Number of command-line arguments */ + http_status_t status; /* HTTP GET/PUT status code */ + char filename[1024], /* Local filename */ + newname[1024]; /* filename.N */ ++ struct stat fileinfo; /* Local file information */ + cups_lang_t *language; /* Language information */ + ipp_attribute_t *printer_up_time, /* Timestamp on event */ + *notify_sequence_number,/* Sequence number */ +@@ -111,9 +113,9 @@ main(int argc, /* I - Number of command-line arguments */ + + if (httpSeparateURI(HTTP_URI_CODING_ALL, argv[1], scheme, sizeof(scheme), + username, sizeof(username), host, sizeof(host), &port, +- resource, sizeof(resource)) < HTTP_URI_OK) ++ resource, sizeof(resource)) < HTTP_URI_OK || strstr(resource, "../") != NULL) + { +- fprintf(stderr, "ERROR: Bad RSS URI \"%s\"!\n", argv[1]); ++ fprintf(stderr, "ERROR: Bad RSS URI \"%s\".\n", argv[1]); + return (1); + } + +@@ -209,6 +211,12 @@ main(int argc, /* I - Number of command-line arguments */ + snprintf(filename, sizeof(filename), "%s/rss%s", cachedir, resource); + snprintf(newname, sizeof(newname), "%s.N", filename); + ++ if (!lstat(filename, &fileinfo) && !S_ISREG(fileinfo.st_mode)) ++ { ++ fprintf(stderr, "ERROR: Local RSS path \"%s\" is not a file.\n", filename); ++ return (1); ++ } ++ + httpAssembleURIf(HTTP_URI_CODING_ALL, baseurl, sizeof(baseurl), "http", + NULL, server_name, atoi(server_port), "/rss%s", resource); + } +diff --git a/scheduler/ipp.c b/scheduler/ipp.c +index 174871741b..cb228b87c8 100644 +--- a/scheduler/ipp.c ++++ b/scheduler/ipp.c +@@ -1,7 +1,7 @@ + /* + * IPP routines for the CUPS scheduler. + * +- * Copyright © 2020-2025 by OpenPrinting ++ * Copyright © 2020-2026 by OpenPrinting + * Copyright © 2007-2021 by Apple Inc. + * Copyright © 1997-2007 by Easy Software Products, all rights reserved. + * +@@ -1997,6 +1997,12 @@ add_job_subscriptions( + "notify-status-code", IPP_ATTRIBUTES); + return; + } ++ else if (!strcmp(scheme, "rss") && strstr(resource, "../") != NULL) ++ { ++ send_ipp_status(con, IPP_STATUS_ERROR_NOT_POSSIBLE, _("Bad notify-recipient-uri URI \"%s\"."), recipient); ++ ippAddInteger(con->response, IPP_TAG_SUBSCRIPTION, IPP_TAG_ENUM, "notify-status-code", IPP_STATUS_ERROR_ATTRIBUTES_OR_VALUES); ++ return; ++ } + } + else if (!strcmp(attr->name, "notify-pull-method") && + attr->value_tag == IPP_TAG_KEYWORD) +@@ -6067,6 +6073,12 @@ create_subscriptions( + "notify-status-code", IPP_ATTRIBUTES); + return; + } ++ else if (!strcmp(scheme, "rss") && strstr(resource, "../") != NULL) ++ { ++ send_ipp_status(con, IPP_STATUS_ERROR_NOT_POSSIBLE, _("Bad notify-recipient-uri URI \"%s\"."), recipient); ++ ippAddInteger(con->response, IPP_TAG_SUBSCRIPTION, IPP_TAG_ENUM, "notify-status-code", IPP_STATUS_ERROR_ATTRIBUTES_OR_VALUES); ++ return; ++ } + } + else if (!strcmp(attr->name, "notify-pull-method") && + attr->value_tag == IPP_TAG_KEYWORD) From patchwork Wed Jun 10 22:54:56 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 89717 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 1FAE5CD98C5 for ; Wed, 10 Jun 2026 22:55:30 +0000 (UTC) Received: from mail-wr1-f43.google.com (mail-wr1-f43.google.com [209.85.221.43]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.33645.1781132120072717742 for ; Wed, 10 Jun 2026 15:55:20 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=fWoI84Ig; spf=pass (domain: smile.fr, ip: 209.85.221.43, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f43.google.com with SMTP id ffacd0b85a97d-45eedc94d37so3773747f8f.3 for ; Wed, 10 Jun 2026 15:55:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1781132118; x=1781736918; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=J0zvRY+X2mSAhtdN835TMIKGsAxpx4X9jFNgAHs1euc=; b=fWoI84Ig4KzhD0hJTWAw26EzqAj0z1BygmpK7dYcl2Qx4KMXsYaeRJmOOYr1JqG8UV bB2BH4UO3MLhAgz9SRmJNdXCqVBm1QP3r5vJrAdcH5qB7k13UY8tEXNmZ9kNdIFQwJwV ZXur0ysGxV063RQH1yvoMSz7CoJVUsW1SrhOc= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1781132118; x=1781736918; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=J0zvRY+X2mSAhtdN835TMIKGsAxpx4X9jFNgAHs1euc=; b=DpNN9aVtH+KPDHVhFn2jky5Us7+hKVzjDpS71N6LKYCzoma+rb4lD81Cn1zY33FEUM dv9JBZLSjapRs5gYFKd0j/kN6E/o56f1uUgmD7yVlOiC3v0GMs/7EvKSbwDVE9ZH+F/2 TqNzm0O5PoHT/56Myeu+B0mrrpXaV40vBLXULriIGR0ECNcaK6+pJ8ajd0KmkwAWyig2 tkRWzPZz4LP/cG2hJoemHZKdYsqWa6iaqG8F7Lmo3l7W7/GgSwEMo/DfgKT6wIb1NpxN dWIPrL9zVauyF/ZKD7HoKwmODTLNKLP0bOIPmIJjamR/yXnkuYBYJXkjCPS10Bq9/E/5 t5Ow== X-Gm-Message-State: AOJu0YyqN+LsYQiwKfaiBHpyPp0JazWvnzrRih3SrtsjkToeejWd4qve L9/2RUbnBYhaQDW1wqBiQy32PTGQ2Ym0BuUdxIpcg2gee54V3jgTt+wvKYCmhA7XK6uMxJCUSSW l+oVX X-Gm-Gg: Acq92OEZaWUwOyy6vBkcmtnOWDwBKMD/lnK6L/fzghpTXoJKzdI5il/x4GeS0ElDwh9 Z9YJEKegn7QAI6JZezWuLoPloyRRJqnNhTdX2YmFtT/FTn6dZFTpl6TINPiIDsyG866FQu6Ofx/ CH6i8ogr+wLyEufWeoO+Tnt2Php2a2QCUO0j9+EDXwlOU89uyZMZOEltcV20UWUeiiDE1r+JCCZ JZJSK2uQwp5qoissuyErRQsPYEX0O6ouhezok9KGX/jwsT0qwVyiXR9pLcE+aMDeKIRx6fE70HR exQxefDI+qnleAiccQND6MhLGMJ6fmxZXUfcDHa8kDKFGlyuzZ99pgv20kuDiKf7jz/dmfOxSUF MK+NIL1S1gmA2hYLvOCrYIK+1rJ2xwkk04a/0hJHQbzHydSD2QCikme4M2SgK3riRwB1vPN8aBI 5sM6OscfDx4OKkA28VMgdVO19q2FXT7Ea2qXanqIZ1W7Nn7aUgIi3aSwULgOPRxGOhMdASsfZQ4 cTypIlVTQ+MRXqyyKDWclMi81/h7vIP5SFP6DS65LyOd/2oxw== X-Received: by 2002:a5d:5848:0:b0:45d:817c:b8b2 with SMTP id ffacd0b85a97d-460677baf9fmr220097f8f.30.1781132118410; Wed, 10 Jun 2026 15:55:18 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00bb749f54eeb85d7b.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:bb74:9f54:eeb8:5d7b]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4601f344148sm71599304f8f.19.2026.06.10.15.55.17 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 10 Jun 2026 15:55:17 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 05/21] cups: fix CVE-2026-34979 Date: Thu, 11 Jun 2026 00:54:56 +0200 Message-ID: <6ddc509160bb1b6b68b7066883aeac80df42e373.1781132051.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 10 Jun 2026 22:55:30 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/238401 From: Abhishek Bachiphale In CUPS versions 2.4.16 and prior, a heap-based buffer overflow exists in the scheduler when building filter option strings from job attributes. A malicious IPP client can trigger this overflow, potentially leading to memory corruption and denial of service. Apply upstream fix to ensure safe handling of filter option strings and prevent buffer overflow. Signed-off-by: Abhishek Bachiphale Signed-off-by: Yoann Congal --- meta/recipes-extended/cups/cups.inc | 1 + .../cups/cups/CVE-2026-34979.patch | 57 +++++++++++++++++++ 2 files changed, 58 insertions(+) create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-34979.patch diff --git a/meta/recipes-extended/cups/cups.inc b/meta/recipes-extended/cups/cups.inc index e739cfa5797..78e0495d1c1 100644 --- a/meta/recipes-extended/cups/cups.inc +++ b/meta/recipes-extended/cups/cups.inc @@ -16,6 +16,7 @@ SRC_URI = "${GITHUB_BASE_URI}/download/v${PV}/cups-${PV}-source.tar.gz \ file://volatiles.99_cups \ file://cups-volatiles.conf \ file://CVE-2026-34978.patch \ + file://CVE-2026-34979.patch \ " GITHUB_BASE_URI = "https://github.com/OpenPrinting/cups/releases" diff --git a/meta/recipes-extended/cups/cups/CVE-2026-34979.patch b/meta/recipes-extended/cups/cups/CVE-2026-34979.patch new file mode 100644 index 00000000000..eefb2ed43b8 --- /dev/null +++ b/meta/recipes-extended/cups/cups/CVE-2026-34979.patch @@ -0,0 +1,57 @@ +From 0ff8897367c7341f2500770c3977038cdd7c0214 Mon Sep 17 00:00:00 2001 +From: Michael R Sweet +Date: Tue, 31 Mar 2026 14:50:06 -0400 +Subject: [PATCH] Expand allocation of options string. + +OpenPrinting CUPS is an open source printing system for Linux and other +Unix-like operating systems. In versions 2.4.16 and prior, there is a +heap-based buffer overflow in the CUPS scheduler when building filter +option strings from job attribute + +CVE: CVE-2026-34979 + +Upstream-Status: Backport [ https://github.com/OpenPrinting/cups/commit/0ff8897367c7341f2500770c3977038cdd7c0214 ] + +Signed-off-by: Abhishek Bachiphale +--- + scheduler/job.c | 16 ++++------------ + 1 files changed, 4 insertions(+), 12 deletions(-) + +diff --git a/scheduler/job.c b/scheduler/job.c +index af6390687..0494d7196 100644 +--- a/scheduler/job.c ++++ b/scheduler/job.c +@@ -4192,18 +4192,6 @@ ipp_length(ipp_t *ipp) /* I - IPP request */ + + for (attr = ipp->attrs; attr != NULL; attr = attr->next) + { +- /* +- * Skip attributes that won't be sent to filters... +- */ +- +- if (attr->value_tag == IPP_TAG_NOVALUE || +- attr->value_tag == IPP_TAG_MIMETYPE || +- attr->value_tag == IPP_TAG_NAMELANG || +- attr->value_tag == IPP_TAG_TEXTLANG || +- attr->value_tag == IPP_TAG_URI || +- attr->value_tag == IPP_TAG_URISCHEME) +- continue; +- + /* + * Add space for a leading space and commas between each value. + * For the first attribute, the leading space isn't used, so the +@@ -4279,10 +4267,14 @@ ipp_length(ipp_t *ipp) /* I - IPP request */ + + case IPP_TAG_TEXT : + case IPP_TAG_NAME : ++ case IPP_TAG_TEXTLANG : ++ case IPP_TAG_NAMELANG : ++ case IPP_TAG_MIMETYPE : + case IPP_TAG_KEYWORD : + case IPP_TAG_CHARSET : + case IPP_TAG_LANGUAGE : + case IPP_TAG_URI : ++ case IPP_TAG_URISCHEME : + /* + * Strings can contain characters that need quoting. We need + * at least 2 * len + 2 characters to cover the quotes and From patchwork Wed Jun 10 22:54:57 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 89729 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 1AD9FCD98D9 for ; Wed, 10 Jun 2026 22:55:31 +0000 (UTC) Received: from mail-wm1-f47.google.com (mail-wm1-f47.google.com [209.85.128.47]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.33647.1781132120631956094 for ; Wed, 10 Jun 2026 15:55:20 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=I44104xo; spf=pass (domain: smile.fr, ip: 209.85.128.47, mailfrom: yoann.congal@smile.fr) Received: by mail-wm1-f47.google.com with SMTP id 5b1f17b1804b1-490c1915793so52501385e9.2 for ; Wed, 10 Jun 2026 15:55:20 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1781132119; x=1781736919; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=ab/XDrmIEt0xDhhe22Srzmn+Rywjv9p6PvX8q6pFCq0=; b=I44104xoswpPkAsz6XuXMNgZ/Xyqk06mHrst9l4ONxVh8BgNlVAkHHHy1FkHaZbiDO DkSpunqyrNWvsuWxiO5DwGM/kCvnNCWTpYK2NE97n3/21JZPvuqwunXH4bTNoxXJkeJ4 JQUeHvsHKtLIX6jKHCoq7WdJNmQ2dG6d+RQog= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1781132119; x=1781736919; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=ab/XDrmIEt0xDhhe22Srzmn+Rywjv9p6PvX8q6pFCq0=; b=WTiKyvYcCksPTM5xzSkn6Q5FRco7tgxA3uN5OxcF2kZM0hgWWT4vndV69Mkm58wBOH RfWK4YttbRSepjA7MwrgzaXRPikXzc6lIIeg36Z7u0sCoIYevFWE6eTxUxAbmcgS+CUQ hZNGrRzUZwshRUJLpVjH7FWGV5AXoGnhlaXLPJ5uMPWrRzxApxtLkCSdw+ned07xW/1f c/7LClduYr5eHv3I8F+tEYWxBYsycOn5z+gTiWWYpdMofq1LeqEni7tZ7t+Asnyd3oAY 37Lz7xl4cufH4rVHlpsZ45S4pNqEVd2YOoO3ly1kGTx932hII4ZjbnNQ0LzL6cPdQfbO vWHQ== X-Gm-Message-State: AOJu0Yym6B4ew4u5IxV+bKyDMqDxtSoB8jdm/w7NWUIBqVDmhRXSKFip 4bZmF66LFrJZGnd9/IviU8ZuvY8nNdFTaxdcd7Prqn1OA8iX0eH3NmnKZB2iM/T7ljRnMIWUCYl zXnJn X-Gm-Gg: Acq92OFQSvhnVAh55klwDY6bmFlLrYpvhqxTynL3HaUU9wXdG7TM1wAMdwAoASjdKv2 NvK0wilfjC/AWqPo8wpfizz4JxB7FWlSRLSanAjpRtCwnxCaNjYOFuFdBAiERhY0imcqNuCqFQl EHRJm7Z1bUYjdsSuAcUm0i2wpv4C2cK/ng51Cmzx798KVztPb921cnA7wfgwrO7mEH/UqG58xNr MyKCJZ33gdHjIcTRET0wfnNAj1EKdaYzsu1Kk3s+/7e0iXg3RTmDypuUZbEyLGASEqF6W7b0mcA WvsBU7CLQvAy7d1nIDxphI7MtZu7JrgjWaQNcziHICpYMQw1Gis0gEuKlUbNe74xDyDAko4h1If +zlnU/KCyn49CRnqiZgW1uZ9JbTnCwGPhYsbiIlWZ2YBECuGgIz3e8jq3GkcZtaHHU+bUrsAgCH 4BhfdLqJNxr+skQE1+COUoi06Omz4QQRKNz8a7Z/VZBBVzDa9z+uOm6AyjYJRT1MR/EWM9hwamT ZIJmnUzHycyjz527XvcC8ipdnAO5oph6au6lU4= X-Received: by 2002:a05:6000:41ed:b0:460:3210:b6eb with SMTP id ffacd0b85a97d-460677c116amr248955f8f.43.1781132118982; Wed, 10 Jun 2026 15:55:18 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00bb749f54eeb85d7b.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:bb74:9f54:eeb8:5d7b]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4601f344148sm71599304f8f.19.2026.06.10.15.55.18 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 10 Jun 2026 15:55:18 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 06/21] cups: fix CVE-2026-34980 Date: Thu, 11 Jun 2026 00:54:57 +0200 Message-ID: X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 10 Jun 2026 22:55:31 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/238402 From: Abhishek Bachiphale In CUPS versions 2.4.16 and prior, a network-exposed cupsd with a shared target queue allows an unauthorized client to send a Print-Job without authentication. The server accepts a page-border value supplied as textWithoutLanguage, preserves an embedded newline through option escaping and reparse, and then reparses the resulting second-line PPD text as a trusted scheduler control record. A follow-up raw print job can therefore make the server execute an attacker-chosen existing binary (e.g., /usr/bin/vim) as lp. Apply upstream fix to prevent newline injection and unauthorized execution in shared PostScript queues. Signed-off-by: Abhishek Bachiphale Signed-off-by: Yoann Congal --- meta/recipes-extended/cups/cups.inc | 1 + .../cups/cups/CVE-2026-34980.patch | 88 +++++++++++++++++++ 2 files changed, 89 insertions(+) create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-34980.patch diff --git a/meta/recipes-extended/cups/cups.inc b/meta/recipes-extended/cups/cups.inc index 78e0495d1c1..f23411f44b5 100644 --- a/meta/recipes-extended/cups/cups.inc +++ b/meta/recipes-extended/cups/cups.inc @@ -17,6 +17,7 @@ SRC_URI = "${GITHUB_BASE_URI}/download/v${PV}/cups-${PV}-source.tar.gz \ file://cups-volatiles.conf \ file://CVE-2026-34978.patch \ file://CVE-2026-34979.patch \ + file://CVE-2026-34980.patch \ " GITHUB_BASE_URI = "https://github.com/OpenPrinting/cups/releases" diff --git a/meta/recipes-extended/cups/cups/CVE-2026-34980.patch b/meta/recipes-extended/cups/cups/CVE-2026-34980.patch new file mode 100644 index 00000000000..ebf7a3a353a --- /dev/null +++ b/meta/recipes-extended/cups/cups/CVE-2026-34980.patch @@ -0,0 +1,88 @@ +From 8d0f51cac24cb5bf949c5b6a221e51a150d982e3 Mon Sep 17 00:00:00 2001 +From: Michael R Sweet +Date: Tue, 31 Mar 2026 14:45:13 -0400 +Subject: [PATCH] Filter out control characters from option values. + +OpenPrinting CUPS is an open source printing system for Linux and other +Unix-like operating systems. In versions 2.4.16 and prior, in a +network-exposed cupsd with a shared target queue, an unauthorized client +can send a Print-Job to that shared PostScript queue without +authentication. The server accepts a page-border value supplied as +textWithoutLanguage, preserves an embedded newline through option +escaping and reparse, and then reparses the resulting second-line PPD: +text as a trusted scheduler control record. A follow-up raw print job +can therefore make the server execute an attacker-chosen existing binary +such as /usr/bin/vim as lp. + +CVE: CVE-2026-34980 + +Upstream-Status: Backport [ https://github.com/OpenPrinting/cups/commit/8d0f51cac24cb5bf949c5b6a221e51a150d982e3 ] + +Signed-off-by: Abhishek Bachiphale +--- + scheduler/job.c | 41 +++++++++++++++++++++++++++++++++++------ + 1 file changed, 37 insertions(+), 6 deletions(-) + +diff --git a/scheduler/job.c b/scheduler/job.c +index 1fef9d0cd..af6390687 100644 +--- a/scheduler/job.c ++++ b/scheduler/job.c +@@ -4118,9 +4118,21 @@ get_options(cupsd_job_t *job, /* I - Job */ + case IPP_TAG_URI : + for (valptr = attr->values[i].string.text; *valptr;) + { +- if (strchr(" \t\n\\\'\"", *valptr)) +- *optptr++ = '\\'; +- *optptr++ = *valptr++; ++ /* ++ * Convert tabs and newlines to spaces, filter out control chars, ++ * and escape \, ', and ". ++ */ ++ ++ if (isspace(*valptr & 255)) ++ { ++ *optptr++ = ' '; ++ } ++ else if ((*valptr & 255) >= ' ' && *valptr != 0x7f) ++ { ++ if (strchr("\\\'\"", *valptr)) ++ *optptr++ = '\\'; ++ *optptr++ = *valptr++; ++ } + } + + *optptr = '\0'; +@@ -5395,13 +5407,30 @@ update_job(cupsd_job_t *job) /* I - Job to check */ + else if (loglevel == CUPSD_LOG_PPD) + { + /* +- * Set attribute(s)... ++ * Set PPD keyword(s)/value(s)... + */ + ++ int i, /* Looping var */ ++ num_keywords; /* Number of keywords */ ++ cups_option_t *keywords, /* Keywords */ ++ *keyword; /* Current keyword */ ++ + cupsdLogJob(job, CUPSD_LOG_DEBUG, "PPD: %s", message); + +- job->num_keywords = cupsParseOptions(message, job->num_keywords, +- &job->keywords); ++ keywords = NULL; ++ num_keywords = cupsParseOptions(message, 0, &keywords); ++ ++ for (i = 0, keyword = keywords; i < num_keywords; i ++) ++ { ++ /* ++ * Filter out "special" PPD keywords... ++ */ ++ ++ if (strcmp(keyword->name, "cupsFilter") && strcmp(keyword->name, "cupsFilter2") && strcmp(keyword->name, "cupsFinishingTemplate") && strcmp(keyword->name, "cupsIPPFinishings") && strcmp(keyword->name, "cupsIPPReason") && strcmp(keyword->name, "cupsMarkerName") && strcmp(keyword->name, "cupsMaxSize") && strncmp(keyword->name, "cupsMediaQualifier", 18) && strcmp(keyword->name, "cupsMinSize") && strcmp(keyword->name, "cupsPageSizeCategory") && strcmp(keyword->name, "cupsPortMonitor") && strcmp(keyword->name, "cupsPreFilter") && strcmp(keyword->name, "cupsPrintQuality") && strcmp(keyword->name, "APPrinterPreset")) ++ job->num_keywords = cupsAddOption(keyword->name, keyword->value, job->num_keywords, &job->keywords); ++ } ++ ++ cupsFreeOptions(num_keywords, keywords); + } + else + { From patchwork Wed Jun 10 22:54:58 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 89732 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 3E152CD98DB for ; Wed, 10 Jun 2026 22:55:31 +0000 (UTC) Received: from mail-wr1-f54.google.com (mail-wr1-f54.google.com [209.85.221.54]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.33648.1781132121758372614 for ; Wed, 10 Jun 2026 15:55:22 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=AIL0hKOG; spf=pass (domain: smile.fr, ip: 209.85.221.54, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f54.google.com with SMTP id ffacd0b85a97d-45ef1629ff4so5075737f8f.0 for ; Wed, 10 Jun 2026 15:55:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1781132120; x=1781736920; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=nYWpywNLKtj/LZcPSEuXQ4RbH6z5qROuLQB7nQ36yQI=; b=AIL0hKOG3XPoklJ5SWcnqj+FdrUMZ2508f9/Ojced5p9pcOtFbWA/086Poheocev7A jKCNo7IV7oJOoVZOpCblxbig197Gbn+k7TbpUQmwIf31aJOMgcxxR1FHF5dgR4i8grzv DezaC8UedfCqiVgjI45SxWljVlFcC7wNSjwW4= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1781132120; x=1781736920; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=nYWpywNLKtj/LZcPSEuXQ4RbH6z5qROuLQB7nQ36yQI=; b=F2N4+QsemvxUMrx3bdma3OLIolGNOTqsRcJD7I+Q/gLGTtYym6evadyfZcF9zg1Dq3 7vpUEvdPMsFTdW1TRKXfsWShfNvUwqoBdRzvjIaVu1JYirDqgnd8nfQzRw8sM/rsEFAX JaJDJuAndI6n1yZzliCVWOkWcZZDLUK2uchuBL3hZjJGS9h1svZAqYEKTLpsxd4dcVAf S/zl9dTYHi8kQ15gp7dneDox2Y2hJuijnKoWNPqUyANLcheS47xRTdAGkhmPMkEjf8t8 XHBPa7S5gPZqpAcO9Am5Ry3YJvPVKhZLECLl7fKC/uSIQUnLiocEEmM+H4yryjgV+R9L wumA== X-Gm-Message-State: AOJu0Yz4idp1IJ8ZO0IOit0NLOFD+hPknKhcOFySz5pN4H7zrDsxKclJ 6aNTG/mGryKhBSiGg47rqyy6WP0CcC9isFU9MmjbGicPOl5hLUjN7zGo9fGPhhCGgTD++Gfngy5 pA3fL X-Gm-Gg: Acq92OFIueqVURM5SfjmaUDmfQcCuODShfaUy6OmHOlEK9SVJ+OIuXy598FskFeZV/h uG4vQo+AxtS1WYqZA9+GK7/rBEEH9yWkKa7ghEFUa+qZIZc9HjU0Jir8Th025XPtyB8tqTTfW54 3t8wBMV0DDG3q5qugkvytbS2pPHY9NH9TXKDFudBK/DVRvIc1MXUSK5t9v6o6WNXvis8jCGOlkK bTpKSj7m//px8lC8EX8GfKV4d7jGUA3trPGZvOD2U2y9vAgkVK6fTYEY/OKcdFNVUiG+jLZAIlE XzfaWBTg5bPQv4scjQYxKa7xlBPmByJcJCLLsIFLgwEyI+Lrtatob2fue6/FxzOIIxFmigSQfg/ 65fBjx+eOUASIIetkeywQfHh/hUdPbljNbz5NxcKevQkB7UNu6S6HpsN38ai/mSGdAXDI8Db73G 6ClXcbtCHeKvZT0QuVBqI8Prm0g2EEyCqKaYzCOIh3MKkVW3xHfr0YXrou/HAyKqPOqqB+qQusc yzj5Eode17WSd1BHxuM2/J4pqyqv3eR7qg+NRs= X-Received: by 2002:a05:6000:4213:b0:45e:ea46:ce14 with SMTP id ffacd0b85a97d-4606758d2f1mr276075f8f.8.1781132119765; Wed, 10 Jun 2026 15:55:19 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00bb749f54eeb85d7b.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:bb74:9f54:eeb8:5d7b]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4601f344148sm71599304f8f.19.2026.06.10.15.55.19 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 10 Jun 2026 15:55:19 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 07/21] cups: fix CVE-2026-34990 Date: Thu, 11 Jun 2026 00:54:58 +0200 Message-ID: <53357424ebf57dbb1699bce28e19f5f4ae0eff3c.1781132051.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 10 Jun 2026 22:55:31 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/238403 From: Abhishek Bachiphale In CUPS versions 2.4.16 and prior, a local unprivileged user can coerce cupsd into authenticating to an attacker- controlled localhost IPP service with a reusable Authorization: Local token. That token is sufficient to drive /admin/ requests on localhost. By combining CUPS-Create-Local-Printer with printer-is-shared=true, an attacker can persist a file:///... queue even though the normal FileDevice policy rejects such URIs. Printing to that queue allows arbitrary root file overwrite. A proof-of-concept demonstrates dropping a sudoers fragment to achieve root command execution. Apply upstream fix to prevent misuse of Local authorization tokens and block unauthorized file:/// queues. Signed-off-by: Abhishek Bachiphale Signed-off-by: Yoann Congal --- meta/recipes-extended/cups/cups.inc | 1 + .../cups/cups/CVE-2026-34990.patch | 348 ++++++++++++++++++ 2 files changed, 349 insertions(+) create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-34990.patch diff --git a/meta/recipes-extended/cups/cups.inc b/meta/recipes-extended/cups/cups.inc index f23411f44b5..42107774e4e 100644 --- a/meta/recipes-extended/cups/cups.inc +++ b/meta/recipes-extended/cups/cups.inc @@ -18,6 +18,7 @@ SRC_URI = "${GITHUB_BASE_URI}/download/v${PV}/cups-${PV}-source.tar.gz \ file://CVE-2026-34978.patch \ file://CVE-2026-34979.patch \ file://CVE-2026-34980.patch \ + file://CVE-2026-34990.patch \ " GITHUB_BASE_URI = "https://github.com/OpenPrinting/cups/releases" diff --git a/meta/recipes-extended/cups/cups/CVE-2026-34990.patch b/meta/recipes-extended/cups/cups/CVE-2026-34990.patch new file mode 100644 index 00000000000..3f7781c19ec --- /dev/null +++ b/meta/recipes-extended/cups/cups/CVE-2026-34990.patch @@ -0,0 +1,348 @@ +From e052dc44da9d12adfbebc51de4975fbadb2ce356 Mon Sep 17 00:00:00 2001 +From: Michael R Sweet +Date: Tue, 31 Mar 2026 15:55:50 -0400 +Subject: [PATCH] Don't allow local certificates over the loopback interface, + drop support for writing to plain files. + +OpenPrinting CUPS is an open source printing system for Linux and other +Unix-like operating systems. In versions 2.4.16 and prior, a local +unprivileged user can coerce cupsd into authenticating to an +attacker-controlled localhost IPP service with a reusable Authorization: +Local ... token. That token is enough to drive /admin/ requests on +localhost, and the attacker can combine CUPS-Create-Local-Printer with +printer-is-shared=true to persist a file: ///... queue even though the +normal FileDevice policy rejects such URIs. Printing to that queue gives +an arbitrary root file overwrite; the PoC below uses that primitive to +drop a sudoers fragment and demonstrate root command execution. + +CVE: CVE-2026-34990 + +Upstream-Status: Backport [ https://github.com/OpenPrinting/cups/commit/e052dc44da9d12adfbebc51de4975fbadb2ce356 ] + +Signed-off-by: Abhishek Bachiphale +--- + cups/auth.c | 30 ++++++---------------- + scheduler/auth.c | 6 ++--- + scheduler/client.c | 4 +-- + scheduler/ipp.c | 6 ++--- + scheduler/job.c | 46 ++++++++++++++++++---------------- + test/4.2-cups-printer-ops.test | 6 ++--- + test/5.1-lpadmin.sh | 14 +++++------ + 7 files changed, 52 insertions(+), 62 deletions(-) + +diff --git a/cups/auth.c b/cups/auth.c +index 5cb419458f..14661c7bef 100644 +--- a/cups/auth.c ++++ b/cups/auth.c +@@ -1,7 +1,7 @@ + /* + * Authentication functions for CUPS. + * +- * Copyright © 2020-2024 by OpenPrinting. ++ * Copyright © 2020-2026 by OpenPrinting. + * Copyright © 2007-2019 by Apple Inc. + * Copyright © 1997-2007 by Easy Software Products. + * +@@ -92,7 +92,6 @@ static void cups_gss_printf(OM_uint32 major_status, OM_uint32 minor_status, + # define cups_gss_printf(major, minor, message) + # endif /* DEBUG */ + #endif /* HAVE_GSSAPI */ +-static int cups_is_local_connection(http_t *http); + static int cups_local_auth(http_t *http); + + +@@ -948,14 +947,6 @@ cups_gss_printf(OM_uint32 major_status,/* I - Major status code */ + # endif /* DEBUG */ + #endif /* HAVE_GSSAPI */ + +-static int /* O - 0 if not a local connection */ +- /* 1 if local connection */ +-cups_is_local_connection(http_t *http) /* I - HTTP connection to server */ +-{ +- if (!httpAddrLocalhost(http->hostaddr) && _cups_strcasecmp(http->hostname, "localhost") != 0) +- return 0; +- return 1; +-} + + /* + * 'cups_local_auth()' - Get the local authorization certificate if +@@ -967,13 +958,7 @@ static int /* O - 0 if available */ + /* -1 error */ + cups_local_auth(http_t *http) /* I - HTTP connection to server */ + { +-#if defined(_WIN32) || defined(__EMX__) +- /* +- * Currently _WIN32 and OS-2 do not support the CUPS server... +- */ +- +- return (1); +-#else ++#if !_WIN32 && !__EMX__ && defined(AF_LOCAL) + int pid; /* Current process ID */ + FILE *fp; /* Certificate file */ + char trc[16], /* Try Root Certificate parameter */ +@@ -998,7 +983,7 @@ cups_local_auth(http_t *http) /* I - HTTP connection to server */ + * See if we are accessing localhost... + */ + +- if (!cups_is_local_connection(http)) ++ if (httpAddrFamily(httpGetAddress(http)) != AF_LOCAL) + { + DEBUG_puts("8cups_local_auth: Not a local connection!"); + return (1); +@@ -1072,15 +1057,14 @@ cups_local_auth(http_t *http) /* I - HTTP connection to server */ + } + # endif /* HAVE_AUTHORIZATION_H */ + +-# if defined(SO_PEERCRED) && defined(AF_LOCAL) ++# ifdef SO_PEERCRED + /* + * See if we can authenticate using the peer credentials provided over a + * domain socket; if so, specify "PeerCred username" as the authentication + * information... + */ + +- if (http->hostaddr->addr.sa_family == AF_LOCAL && +- !getenv("GATEWAY_INTERFACE") && /* Not via CGI programs... */ ++ if (!getenv("GATEWAY_INTERFACE") && /* Not via CGI programs... */ + cups_auth_find(www_auth, "PeerCred")) + { + /* +@@ -1104,7 +1088,7 @@ cups_local_auth(http_t *http) /* I - HTTP connection to server */ + return (0); + } + } +-# endif /* SO_PEERCRED && AF_LOCAL */ ++# endif /* SO_PEERCRED */ + + if ((schemedata = cups_auth_find(www_auth, "Local")) == NULL) + return (1); +@@ -1164,7 +1148,7 @@ cups_local_auth(http_t *http) /* I - HTTP connection to server */ + return (0); + } + } ++#endif /* !_WIN32 && !__EMX__ && AF_LOCAL */ + + return (1); +-#endif /* _WIN32 || __EMX__ */ + } +diff --git a/scheduler/auth.c b/scheduler/auth.c +index 471de0492f..3e7041e220 100644 +--- a/scheduler/auth.c ++++ b/scheduler/auth.c +@@ -318,7 +318,7 @@ cupsdAuthorize(cupsd_client_t *con) /* I - Client connection */ + } + #ifdef HAVE_AUTHORIZATION_H + else if (!strncmp(authorization, "AuthRef ", 8) && +- httpAddrLocalhost(httpGetAddress(con->http))) ++ httpAddrFamily(httpGetAddress(con->http)) == AF_LOCAL) + { + OSStatus status; /* Status */ + char authdata[HTTP_MAX_VALUE]; +@@ -399,7 +399,7 @@ cupsdAuthorize(cupsd_client_t *con) /* I - Client connection */ + #endif /* HAVE_AUTHORIZATION_H */ + #if defined(SO_PEERCRED) && defined(AF_LOCAL) + else if (PeerCred != CUPSD_PEERCRED_OFF && !strncmp(authorization, "PeerCred ", 9) && +- con->http->hostaddr->addr.sa_family == AF_LOCAL && con->best) ++ httpAddrFamily(httpGetAddress(con->http)) == AF_LOCAL && con->best) + { + /* + * Use peer credentials from domain socket connection... +@@ -489,7 +489,7 @@ cupsdAuthorize(cupsd_client_t *con) /* I - Client connection */ + } + #endif /* SO_PEERCRED && AF_LOCAL */ + else if (!strncmp(authorization, "Local", 5) && +- httpAddrLocalhost(httpGetAddress(con->http))) ++ httpAddrFamily(httpGetAddress(con->http)) == AF_LOCAL) + { + /* + * Get Local certificate authentication data... +diff --git a/scheduler/client.c b/scheduler/client.c +index 51be34f448..ab35bb7566 100644 +--- a/scheduler/client.c ++++ b/scheduler/client.c +@@ -2188,7 +2188,7 @@ cupsdSendHeader( + strlcpy(auth_str, "Negotiate", sizeof(auth_str)); + } + +- if (con->best && !con->is_browser && !_cups_strcasecmp(httpGetHostname(con->http, NULL, 0), "localhost")) ++ if (con->best && !con->is_browser && httpAddrFamily(httpGetAddress(con->http)) == AF_LOCAL) + { + /* + * Add a "trc" (try root certification) parameter for local +@@ -2208,7 +2208,7 @@ cupsdSendHeader( + auth_size = sizeof(auth_str) - (size_t)(auth_key - auth_str); + + #if defined(SO_PEERCRED) && defined(AF_LOCAL) +- if (PeerCred != CUPSD_PEERCRED_OFF && httpAddrFamily(httpGetAddress(con->http)) == AF_LOCAL) ++ if (PeerCred != CUPSD_PEERCRED_OFF) + { + strlcpy(auth_key, ", PeerCred", auth_size); + auth_key += 10; +diff --git a/scheduler/ipp.c b/scheduler/ipp.c +index cb228b87c8..9a280e7525 100644 +--- a/scheduler/ipp.c ++++ b/scheduler/ipp.c +@@ -5625,7 +5625,7 @@ create_local_printer( + * Require local access to create a local printer... + */ + +- if (!httpAddrLocalhost(httpGetAddress(con->http))) ++ if (httpAddrFamily(httpGetAddress(con->http)) != AF_LOCAL) + { + send_ipp_status(con, IPP_STATUS_ERROR_FORBIDDEN, _("Only local users can create a local printer.")); + return; +@@ -5685,9 +5685,9 @@ create_local_printer( + + ptr = ippGetString(device_uri, 0, NULL); + +- if (!ptr || !ptr[0]) ++ if (!ptr || !ptr[0] || (strncmp(ptr, "ipp://", 6) && strncmp(ptr, "ipps://", 7))) + { +- send_ipp_status(con, IPP_STATUS_ERROR_BAD_REQUEST, _("Attribute \"%s\" has empty value."), "device-uri"); ++ send_ipp_status(con, IPP_STATUS_ERROR_NOT_POSSIBLE, _("Bad device-uri \"%s\"."), ptr); + + return; + } +diff --git a/scheduler/job.c b/scheduler/job.c +index 0494d7196d..6599bfcf48 100644 +--- a/scheduler/job.c ++++ b/scheduler/job.c +@@ -1163,35 +1163,39 @@ cupsdContinueJob(cupsd_job_t *job) /* I - Job */ + } + else + { ++ char scheme[32], /* URI scheme */ ++ userpass[32], /* URI username:password */ ++ host[256], /* URI hostname */ ++ resource[1024]; /* URI resource path (filename) */ ++ int port; /* URI port number */ ++ ++ httpSeparateURI(HTTP_URI_CODING_ALL, job->printer->device_uri, scheme, sizeof(scheme), userpass, sizeof(userpass), host, sizeof(host), &port, resource, sizeof(resource)); ++ + job->print_pipes[0] = -1; +- if (!strcmp(job->printer->device_uri, "file:/dev/null") || +- !strcmp(job->printer->device_uri, "file:///dev/null")) +- job->print_pipes[1] = -1; +- else ++ job->print_pipes[1] = -1; ++ ++ if (strcmp(resource, "/dev/null")) + { +- if (!strncmp(job->printer->device_uri, "file:/dev/", 10)) +- job->print_pipes[1] = open(job->printer->device_uri + 5, +- O_WRONLY | O_EXCL); +- else if (!strncmp(job->printer->device_uri, "file:///dev/", 12)) +- job->print_pipes[1] = open(job->printer->device_uri + 7, +- O_WRONLY | O_EXCL); +- else if (!strncmp(job->printer->device_uri, "file:///", 8)) +- job->print_pipes[1] = open(job->printer->device_uri + 7, +- O_WRONLY | O_CREAT | O_TRUNC, 0600); +- else +- job->print_pipes[1] = open(job->printer->device_uri + 5, +- O_WRONLY | O_CREAT | O_TRUNC, 0600); ++ if (!FileDevice) ++ { ++ abort_message = "Stopping job because file: output is disabled."; + +- if (job->print_pipes[1] < 0) ++ goto abort_job; ++ } ++ else if ((job->print_pipes[1] = open(resource, O_WRONLY | O_EXCL)) < 0) + { +- abort_message = "Stopping job because the scheduler could not " +- "open the output file."; ++ abort_message = "Stopping job because the scheduler could not open the output file."; + + goto abort_job; + } ++ else ++ { ++ /* ++ * Close this file on execute... ++ */ + +- fcntl(job->print_pipes[1], F_SETFD, +- fcntl(job->print_pipes[1], F_GETFD) | FD_CLOEXEC); ++ fcntl(job->print_pipes[1], F_SETFD, fcntl(job->print_pipes[1], F_GETFD) | FD_CLOEXEC); ++ } + } + } + } +diff --git a/test/4.2-cups-printer-ops.test b/test/4.2-cups-printer-ops.test +index 1a011e011a..945a9bbd71 100644 +--- a/test/4.2-cups-printer-ops.test ++++ b/test/4.2-cups-printer-ops.test +@@ -1,7 +1,7 @@ + # + # Verify that the CUPS printer operations work. + # +-# Copyright © 2020-2024 by OpenPrinting. ++# Copyright © 2020-2026 by OpenPrinting. + # Copyright © 2007-2019 by Apple Inc. + # Copyright © 2001-2006 by Easy Software Products. All rights reserved. + # +@@ -180,7 +180,7 @@ + ATTR uri printer-uri $method://$hostname:$port/printers/Test2 + + GROUP printer +- ATTR uri device-uri file:/tmp/Test2 ++ ATTR uri device-uri file:///dev/null + ATTR enum printer-state 3 + ATTR boolean printer-is-accepting-jobs true + +@@ -206,7 +206,7 @@ + ATTR uri printer-uri $method://$hostname:$port/printers/Test1 + + GROUP printer +- ATTR uri device-uri file:/tmp/Test1 ++ ATTR uri device-uri file:///dev/null + ATTR enum printer-state 3 + ATTR boolean printer-is-accepting-jobs true + ATTR text printer-info "Test Printer 1" +diff --git a/test/5.1-lpadmin.sh b/test/5.1-lpadmin.sh +index aa398000a1..36f2822275 100644 +--- a/test/5.1-lpadmin.sh ++++ b/test/5.1-lpadmin.sh +@@ -2,7 +2,7 @@ + # + # Test the lpadmin command. + # +-# Copyright © 2020-2024 by OpenPrinting. ++# Copyright © 2020-2026 by OpenPrinting. + # Copyright © 2007-2018 by Apple Inc. + # Copyright © 1997-2005 by Easy Software Products, all rights reserved. + # +@@ -12,8 +12,8 @@ + + echo "Add Printer Test" + echo "" +-echo " lpadmin -p Test3 -v file:/dev/null -E -m drv:///sample.drv/deskjet.ppd" +-$runcups $VALGRIND ../systemv/lpadmin -p Test3 -v file:/dev/null -E -m drv:///sample.drv/deskjet.ppd 2>&1 ++echo " lpadmin -p Test3 -v file:///dev/null -E -m drv:///sample.drv/deskjet.ppd" ++$runcups $VALGRIND ../systemv/lpadmin -p Test3 -v file:///dev/null -E -m drv:///sample.drv/deskjet.ppd 2>&1 + if test $? != 0; then + echo " FAILED" + exit 1 +@@ -29,8 +29,8 @@ echo "" + + echo "Modify Printer Test" + echo "" +-echo " lpadmin -p Test3 -v file:/tmp/Test3 -o PageSize=A4" +-$runcups $VALGRIND ../systemv/lpadmin -p Test3 -v file:/tmp/Test3 -o PageSize=A4 2>&1 ++echo " lpadmin -p Test3 -v file:///dev/null -o PageSize=A4" ++$runcups $VALGRIND ../systemv/lpadmin -p Test3 -v file:///dev/null -o PageSize=A4 2>&1 + if test $? != 0; then + echo " FAILED" + exit 1 +@@ -65,8 +65,8 @@ echo "" + + echo "Add a printer for cupSNMP/IPPSupplies test" + echo "" +-echo " lpadmin -p Test4 -E -v file:/dev/null -m drv:///sample.drv/zebra.ppd" +-$runcups $VALGRIND ../systemv/lpadmin -p Test4 -E -v file:/dev/null -m drv:///sample.drv/zebra.ppd 2>&1 ++echo " lpadmin -p Test4 -E -v file:///dev/null -m drv:///sample.drv/zebra.ppd" ++$runcups $VALGRIND ../systemv/lpadmin -p Test4 -E -v file:///dev/null -m drv:///sample.drv/zebra.ppd 2>&1 + if test $? != 0; then + echo " FAILED" + exit 1 From patchwork Wed Jun 10 22:54:59 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 89731 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 68FF7CD98DD for ; Wed, 10 Jun 2026 22:55:31 +0000 (UTC) Received: from mail-wr1-f53.google.com (mail-wr1-f53.google.com [209.85.221.53]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.33649.1781132121955949160 for ; Wed, 10 Jun 2026 15:55:22 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=iIlMqDtq; spf=pass (domain: smile.fr, ip: 209.85.221.53, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f53.google.com with SMTP id ffacd0b85a97d-45ee5cdbd28so185399f8f.1 for ; Wed, 10 Jun 2026 15:55:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1781132120; x=1781736920; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=ch7g+P/1sinC6Qs3dn/T8ooMKHXrvre29E0ro3zdxe4=; b=iIlMqDtqzz4H8Lx6o6hOVKSbY1u1ZNUSFQXakgRSpnItwlj1fp95e5OQiRh6ZJcNfy XGRKoQovB/9csXNcpDIJxDr070M2rgr9b+tTDiLA1K982m1GJfgmy0JuZJSllyz7picr fOZMA5Bvs6dhFS5ZTkgb3+K5lEdx6u4qzJR4o= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1781132120; x=1781736920; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=ch7g+P/1sinC6Qs3dn/T8ooMKHXrvre29E0ro3zdxe4=; b=N/s+IgqeQdJU+WJH8tXdxM1/6qz/pVLEDXgr2b0ACmxR92ajqrHHEP43tPuiuJZKQL YWD18DEFzTj/DaRRtBYVoIax55q61W2eghEHIlEJ9oAOv9P91mrGCwc3xLI/JffDQHEf iTzH///7uoqTrLE1JYPtzPmNc1Rz2DQA3kFKuXsDGftwOiqAlrQfRWmSS+8J9BOBmQpy Sc3MT7DxLwGcfn60u3K7k72uMgfPsBsOODQs2tqkbT58IPqCBxqNUhLOZUESw5wLA9D/ WDCsb+aFmJbhtaTXJWOew+wa699kR72bf3ZgNDvwAQWticZaJ8G9bKuw6FgqOfGl/xeN H5sQ== X-Gm-Message-State: AOJu0Yzhs8PL/mEnFQSK5HTcNcuXriu6WKSTkhh+Xhpm5CW6G+Z0pK4B HnZhH9boZe0l782hM1W4eHw3PX7XPY7lWwv3OACLhIrv1P79pWNdQ5dnZAO1bxMMu5GCuZvUnQM G5P4l X-Gm-Gg: Acq92OH+9gb05ekpL7KgTADax4vNtxqQEIHia75ELBZPrB439PNQiyYSNvKnMUU7kEt AUGiGTc21IJi9faTHOc6atuJkxypI057kq+uwGo0EVSpEeKzSF9HnpwOZ/GzGuHnAyc6dJxJIo/ JFQ1qwtZ4ITtDhRffBzq/nrTZrxZBKLVyYj7FV3xjIYH094Dgn4UeHMJ/EWDVSkO6YMy0VIoDkq 3SKOf8D0fCOumJhWYQrXQc+73F9emyuMCsXIbCIVI5wHUPGuMMSp1nJcNUJ55gDd7u+I6pGVzG3 ce76XqiVPhkX10tTFPIokLtYLHNTDmgayimrFBC2fwaEbtxmgwHo3uEZ2YGfug2Og12BLyBDEt3 C3gYrhB3Vig56ANMZjPESV7vAVqXPfQrtDdOyy8rmWq5cry1xbYfB9lIpgme/Wv8zazJi030dHE joaAWO4Qz1WSwwQWHq3V3aFH+wbDd/VMQZdj2zs+3L3ndSKS+iWXao7owZPZGv252bNUYUWeH3r gN52EQqCgBKthu+HzMXzJufsAauCGJs7Y9mQ50= X-Received: by 2002:a05:6000:25ea:b0:44f:69f4:39b5 with SMTP id ffacd0b85a97d-46067c36927mr36519f8f.29.1781132120327; Wed, 10 Jun 2026 15:55:20 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00bb749f54eeb85d7b.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:bb74:9f54:eeb8:5d7b]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4601f344148sm71599304f8f.19.2026.06.10.15.55.19 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 10 Jun 2026 15:55:19 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 08/21] cups: fix CVE-2026-39314 Date: Thu, 11 Jun 2026 00:54:59 +0200 Message-ID: X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 10 Jun 2026 22:55:31 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/238404 From: Abhishek Bachiphale In CUPS versions 2.4.16 and prior, an integer underflow exists in _ppdCreateFromIPP() (cups/ppd-cache.c). A local unprivileged user can supply a negative job-password-supported IPP attribute. The bounds check only caps the upper bound, so a negative value passes validation, is cast to size_t (wrapping to ~2^64), and is used as the length argument to memset() on a 33-byte stack buffer. This causes an immediate SIGSEGV in the cupsd root process. Combined with systemd's Restart=on-failure, an attacker can repeat the crash for sustained denial of service. Apply upstream fix to validate negative values and prevent integer underflow in _ppdCreateFromIPP(). Signed-off-by: Abhishek Bachiphale Signed-off-by: Yoann Congal --- meta/recipes-extended/cups/cups.inc | 1 + .../cups/cups/CVE-2026-39314.patch | 47 +++++++++++++++++++ 2 files changed, 48 insertions(+) create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-39314.patch diff --git a/meta/recipes-extended/cups/cups.inc b/meta/recipes-extended/cups/cups.inc index 42107774e4e..a12965bb6e5 100644 --- a/meta/recipes-extended/cups/cups.inc +++ b/meta/recipes-extended/cups/cups.inc @@ -19,6 +19,7 @@ SRC_URI = "${GITHUB_BASE_URI}/download/v${PV}/cups-${PV}-source.tar.gz \ file://CVE-2026-34979.patch \ file://CVE-2026-34980.patch \ file://CVE-2026-34990.patch \ + file://CVE-2026-39314.patch \ " GITHUB_BASE_URI = "https://github.com/OpenPrinting/cups/releases" diff --git a/meta/recipes-extended/cups/cups/CVE-2026-39314.patch b/meta/recipes-extended/cups/cups/CVE-2026-39314.patch new file mode 100644 index 00000000000..8d25a1c2e39 --- /dev/null +++ b/meta/recipes-extended/cups/cups/CVE-2026-39314.patch @@ -0,0 +1,47 @@ +From 928a86b1b794f738f0a3dc87561b2e054bff7ce4 Mon Sep 17 00:00:00 2001 +From: Michael R Sweet +Date: Sun, 5 Apr 2026 10:45:25 -0400 +Subject: [PATCH] Range check job-password-supported. + +OpenPrinting CUPS is an open source printing system for Linux and other +Unix-like operating systems. In versions 2.4.16 and prior, an integer +underflow vulnerability in _ppdCreateFromIPP() (cups/ppd-cache.c) allows +any unprivileged local user to crash the cupsd root process by supplying +a negative job-password-supported IPP attribute. The bounds check only +caps the upper bound, so a negative value passes validation, is cast to +size_t (wrapping to ~2^64), and is used as the length argument to +memset() on a 33-byte stack buffer. This causes an immediate SIGSEGV in +the cupsd root process. Combined with systemd's Restart=on-failure, an +attacker can repeat the crash for sustained denial of service. + +CVE: CVE-2026-39314 + +Upstream-Status: Backport [ https://github.com/OpenPrinting/cups/commit/928a86b1b794f738f0a3dc87561b2e054bff7ce4 ] + +Signed-off-by: Abhishek Bachiphale +--- + cups/ppd-cache.c | 4 ++-- + 1 file changed, 3 insertions(+), 2 deletions(-) + +diff --git a/cups/ppd-cache.c b/cups/ppd-cache.c +index f5386532ca..ef6caa28a7 100644 +--- a/cups/ppd-cache.c ++++ b/cups/ppd-cache.c +@@ -1,7 +1,7 @@ + /* + * PPD cache implementation for CUPS. + * +- * Copyright © 2022-2025 by OpenPrinting. ++ * Copyright © 2022-2026 by OpenPrinting. + * Copyright © 2010-2021 by Apple Inc. + * + * Licensed under Apache License v2.0. See the file "LICENSE" for more +@@ -3530,7 +3530,7 @@ _ppdCreateFromIPP2( + * Password/PIN printing... + */ + +- if ((attr = ippFindAttribute(supported, "job-password-supported", IPP_TAG_INTEGER)) != NULL) ++ if ((attr = ippFindAttribute(supported, "job-password-supported", IPP_TAG_INTEGER)) != NULL && ippGetInteger(attr, 0) > 0) + { + char pattern[33]; /* Password pattern */ + int maxlen = ippGetInteger(attr, 0); From patchwork Wed Jun 10 22:55:00 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 89720 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 2C654CD98CC for ; Wed, 10 Jun 2026 22:55:30 +0000 (UTC) Received: from mail-wr1-f44.google.com (mail-wr1-f44.google.com [209.85.221.44]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.33650.1781132122556898808 for ; Wed, 10 Jun 2026 15:55:22 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=tXCkEekx; spf=pass (domain: smile.fr, ip: 209.85.221.44, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f44.google.com with SMTP id ffacd0b85a97d-45eecb8bf67so5522830f8f.2 for ; Wed, 10 Jun 2026 15:55:22 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1781132121; x=1781736921; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=biOOKaSpP1axSAEHd4Rouxb3Y67H0yYor+yDdR1BZcM=; b=tXCkEekxTQP9yYMOi41HqPotwFZK4OsghlcJojKRukOmtlTqoQ6LM3BKTErrLiFMz/ Q5jYqslnS9oZSw2Pzq61bClTB9lDi+E7HyoHjdYNHyUc20bzOXxCHWgtfvmxMYgBwhRX MkGKKjrq9X4BGk7m+BM4f6vW8VXwCyHbK/+Yw= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1781132121; x=1781736921; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=biOOKaSpP1axSAEHd4Rouxb3Y67H0yYor+yDdR1BZcM=; b=flz+JXVRjj3sviDTg4UwHOoTX7ecUlMWxIxC5HC1tv/QE5beh3a0ycDZhNANfILugC HzXIREzKz/3PNgHvWmfuugFvUJydIAHhJglgv0XWBB8Dhco51IF3dU1clIpajNhbC6P7 Cdv3qugSz3IY7Sh7pmHY4AHLH9SbpzVkNki8/PBsShWh4mbDMJ0hgELvi7lSUEob9Zjq cDddLZN23bje8AcOfjjyqTFnlbC0bjtexeZQ4m5MM88eQnf7wRxJKCKSLxG5SxO71p9S jMThalb3Z55fTTDZImw3QENjiNXNaAwgOUoUoGXwetuK29hZheakK/BWngPr149NDqXi yqzw== X-Gm-Message-State: AOJu0YyW7hjpdXQah4P9AIxfQmHl5hSyoSagNVLXel/IsL9QeAIngEIS lXSidnAk7gHLth9yo3TaQPWwhzaXSsZ2zRKGctGrA1NGceYoErWmQ7BSHNM9z8x6hZg1MVUQ6pb QqQAX X-Gm-Gg: Acq92OGB2+WgBJj68Z3tNMPF1Ep8sVKR2WFvWH6NEnnqgFnItSxsHLnhZJ5UzdWS1OJ luI2P2a8d9mP46p6dA2eJu+0RLJD50z0q5RebNoPHsx1PjS7yVxi9D9VKJMxdw5aTs+PMf8P2Tr 0xWLp4HjTK6UzeRRolkSO2gb2+S0FhMSbTrMjnQZDpNQyCIdfFZY52Hld2zB/2BlaHf9b9a32ql l1ZxB3MxuOraYC5EqQILFi12oR4ABTav5Fzbxlbye4m/1vgdpxtzEP7tDCNnCeNbUEvFr+XQOOP 1WRDYDGpFVB4uHG9mhuYbpTR9w7mtabaHW0KKHorCacTkJ3glBWbqNZ0bbrxHdYCPJ+qjPRpCNZ MlI06mtvB02budWUDnZIJbHkry0J3gVXP+9WyKGI9lfCj7TOovolR4R1VMT6W5vCkJ3XDeDQ5Zy 3Ko3plT1SsJ4O2Lzn7GxYDCvtqx5aopYaxK4aqUTUknVd9s04XC8rFwJvolaRnyE2HeWZznib5w Bl5gvoq9W37DHFnZ4ILv4VhOfC/hwwWvHo9wxQ= X-Received: by 2002:a05:6000:2409:b0:460:18cc:dcfe with SMTP id ffacd0b85a97d-460677dadfdmr252486f8f.34.1781132120979; Wed, 10 Jun 2026 15:55:20 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00bb749f54eeb85d7b.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:bb74:9f54:eeb8:5d7b]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4601f344148sm71599304f8f.19.2026.06.10.15.55.20 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 10 Jun 2026 15:55:20 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 09/21] cups: fix CVE-2026-39316 Date: Thu, 11 Jun 2026 00:55:00 +0200 Message-ID: X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 10 Jun 2026 22:55:30 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/238405 From: Abhishek Bachiphale In CUPS versions 2.4.16 and prior, a use-after-free vulnerability exists in the scheduler when temporary printers are automatically deleted. The function cupsdDeleteTemporaryPrinters() in scheduler/printers.c calls cupsdDeletePrinter() without first expiring subscriptions that reference the printer, leaving cupsd_subscription_t.dest as a dangling pointer to freed heap memory. The dangling pointer is subsequently dereferenced at multiple code sites, causing a crash (denial of service) of the cupsd daemon. With heap grooming, this issue can be leveraged for code execution. Apply upstream fix to expire subscriptions before deleting printers, preventing dangling pointers and use-after-free conditions. Signed-off-by: Abhishek Bachiphale Signed-off-by: Yoann Congal --- meta/recipes-extended/cups/cups.inc | 1 + .../cups/cups/CVE-2026-39316.patch | 42 +++++++++++++++++++ 2 files changed, 43 insertions(+) create mode 100644 meta/recipes-extended/cups/cups/CVE-2026-39316.patch diff --git a/meta/recipes-extended/cups/cups.inc b/meta/recipes-extended/cups/cups.inc index a12965bb6e5..194b9c2638f 100644 --- a/meta/recipes-extended/cups/cups.inc +++ b/meta/recipes-extended/cups/cups.inc @@ -20,6 +20,7 @@ SRC_URI = "${GITHUB_BASE_URI}/download/v${PV}/cups-${PV}-source.tar.gz \ file://CVE-2026-34980.patch \ file://CVE-2026-34990.patch \ file://CVE-2026-39314.patch \ + file://CVE-2026-39316.patch \ " GITHUB_BASE_URI = "https://github.com/OpenPrinting/cups/releases" diff --git a/meta/recipes-extended/cups/cups/CVE-2026-39316.patch b/meta/recipes-extended/cups/cups/CVE-2026-39316.patch new file mode 100644 index 00000000000..c8d7e10ac2e --- /dev/null +++ b/meta/recipes-extended/cups/cups/CVE-2026-39316.patch @@ -0,0 +1,42 @@ +From 0142eeb58e0d718b7d2e1f0d5dd214bd2192cc7f Mon Sep 17 00:00:00 2001 +From: Michael R Sweet +Date: Sun, 5 Apr 2026 11:33:23 -0400 +Subject: [PATCH] Expire per-printer subscriptions before deleting. + +OpenPrinting CUPS is an open source printing system for Linux and other +Unix-like operating systems. In versions 2.4.16 and prior, a +use-after-free vulnerability exists in the CUPS scheduler (cupsd) when +temporary printers are automatically deleted. +cupsdDeleteTemporaryPrinters() in scheduler/printers.c calls +cupsdDeletePrinter() without first expiring subscriptions that reference +the printer, leaving cupsd_subscription_t.dest as a dangling pointer to +freed heap memory. The dangling pointer is subsequently dereferenced at +multiple code sites, causing a crash (denial of service) of the cupsd +daemon. With heap grooming, this can be leveraged for code execution. + +CVE: CVE-2026-39316 + +Upstream-Status: Backport [ https://github.com/OpenPrinting/cups/commit/0142eeb58e0d718b7d2e1f0d5dd214bd2192cc7f ] + +Signed-off-by: Abhishek Bachiphale +--- + scheduler/printers.c | 6 ++++++ + 1 file changed, 7 insertions(+) + +diff --git a/scheduler/printers.c b/scheduler/printers.c +index 4aba6241c..50778b89a 100644 +--- a/scheduler/printers.c ++++ b/scheduler/printers.c +@@ -644,6 +644,12 @@ cupsdDeletePrinter( + update ? "Job stopped due to printer being deleted." : + "Job stopped."); + ++ /* ++ * Expire subscriptions on the printer... ++ */ ++ ++ cupsdExpireSubscriptions(p, /*job*/NULL); ++ + /* + * Remove the printer from the list... + */ From patchwork Wed Jun 10 22:55:01 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 89723 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id A6DDBCD98D5 for ; Wed, 10 Jun 2026 22:55:30 +0000 (UTC) Received: from mail-wm1-f50.google.com (mail-wm1-f50.google.com [209.85.128.50]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.33477.1781132123151233452 for ; Wed, 10 Jun 2026 15:55:23 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=f+eW+d1u; spf=pass (domain: smile.fr, ip: 209.85.128.50, mailfrom: yoann.congal@smile.fr) Received: by mail-wm1-f50.google.com with SMTP id 5b1f17b1804b1-490b211ee6aso56874855e9.3 for ; Wed, 10 Jun 2026 15:55:22 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1781132121; x=1781736921; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=ritVWg4TASIj+Gn8+h0ZRG4l2K4C05t6f5xlT8xBY3M=; b=f+eW+d1u2Lfycyb8LE6dXqXgPDjchDy9WKQlmrD2AoW/ZVDSlu/SPjmFbcMIPuGIDC pSPgpCcf87RH4rWTfgmfs06qHWoYw0yjjtuDSMnBKe1TYD4IwiDZf/3RoeRWA5pzsR9g WEhDEJIeNkPv9GJD2xV9KsTZPnSchrJvpuo2s= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1781132121; x=1781736921; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=ritVWg4TASIj+Gn8+h0ZRG4l2K4C05t6f5xlT8xBY3M=; b=LFze2DtfxLUQW1ORu+DAWCN0urj8fRa0FlEULY6dIaLqF0nyda/JLSuF7uiZhFYv+p 5qv+pjLTXTSRcwnwQkkQuCz1kwsB4gkMe8luDFlz5ZsQCNqjqR5Co4iIttsqFFhtq26Q XkUJNHEylkCSKK708PYNw0ZLdxUzZNbIeSbW+PGqLMcKjx4NGwSFgAWodeUcPvdwEz9/ P9vvEtNGtJ3y4Xm59Zp1jN5PmG70bl0rWTa3JhnpR6JJxt4yYONNlfW3HFDNir/5S1vB voWOgFN/74sWzQE5SLx3dW3V9P++Es5gIFkQ6KEJHk7Az1mD9pMBFVfKJQjDcVEESQFq fSLw== X-Gm-Message-State: AOJu0YxKuUVFDAlTZg7OQLssnYxQR65ZGgslkg6G4OCb/a9vOx0MYatt We4gMztoLLpdY0QPQgKTlZFEZWXfnqGcugWsw7O/OFnyuvv7TbP0RP5FyLn2ayyK45iTAhk1jPj DfmTm X-Gm-Gg: Acq92OF3erDi+oZyUxKGkOjTLsdS0PJDznHWvEhCP+Po7amFO9ebZVtBeAHyeKsZ/0M XZB57YmtGxriKDq/lju9i7zZ9h5+ZqHdv5FeThYKwO8DhU+BRfEdsj7acfr3KfyVncIjGh5VUhG rShOEbTJ6cQXzZXR2J9V10rdETjPdMNV8stqu7RZ0ZqPRPfQlI+Llr7RjYA2MSpPyaPcLvoHRNu RpvTCg2y1t/mPfe9HHLoPIbdT5H2Pan7Tw65q2em0V7j8e25FH1Xclf2WYlosWFrzZcPO7AsWus V/XTMSGmoXKJQIBvAPX+j5kur6kgj2s7JNytxTxQl5oNtWTqkBT/ufYvN+aE28OaGjMJJbqMqGQ vDTEXD3ENBPyPq0hPedLCkSfv+rVaY3AK4p7nX6CeQ5qiLvFdkN4MI7/EIJEyunWT6+4ZYQpouV Lknta/Yb2T0ScDoXEWHmcZ7XoZYDDKPjsZ9sCWNTLCA+JMVusKGE60quGK2iwf0v4Qt1C6Rsj2N s7u+unAa0c44/Ha4OdOCHWcNPoQpGZ/x4O3bxU= X-Received: by 2002:a05:600c:620c:b0:490:b28d:a6f9 with SMTP id 5b1f17b1804b1-490c256f1f1mr432850155e9.8.1781132121561; Wed, 10 Jun 2026 15:55:21 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00bb749f54eeb85d7b.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:bb74:9f54:eeb8:5d7b]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4601f344148sm71599304f8f.19.2026.06.10.15.55.21 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 10 Jun 2026 15:55:21 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 10/21] xserver-xorg: upgrade 21.1.21 -> 21.1.22 Date: Thu, 11 Jun 2026 00:55:01 +0200 Message-ID: <136aec02307bab80252ae0d0dc172120ee1243f5.1781132051.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 10 Jun 2026 22:55:30 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/238406 From: Wang Mingyu License-Update: add author to HPND-sell-MIT-disclaimer-xserver add missing paragraph to SGI-B-2.0 Release Notes: https://lists.x.org/archives/xorg-announce/2026-April/003678.html Includes fixes for CVE-2026-33999 CVE-2026-34000 CVE-2026-34001 CVE-2026-34002 and CVE-2026-34003 Signed-off-by: Wang Mingyu Signed-off-by: Mathieu Dubois-Briand (cherry picked from commit d4452b34849b4f06c979c394dc0c824958243861) Signed-off-by: Vijay Anusuri Signed-off-by: Yoann Congal --- meta/recipes-graphics/xorg-xserver/xserver-xorg.inc | 2 +- .../{xserver-xorg_21.1.21.bb => xserver-xorg_21.1.22.bb} | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) rename meta/recipes-graphics/xorg-xserver/{xserver-xorg_21.1.21.bb => xserver-xorg_21.1.22.bb} (92%) diff --git a/meta/recipes-graphics/xorg-xserver/xserver-xorg.inc b/meta/recipes-graphics/xorg-xserver/xserver-xorg.inc index 59c373280e9..0d8d7827124 100644 --- a/meta/recipes-graphics/xorg-xserver/xserver-xorg.inc +++ b/meta/recipes-graphics/xorg-xserver/xserver-xorg.inc @@ -2,7 +2,7 @@ SUMMARY = "The X.Org X server" HOMEPAGE = "http://www.x.org" SECTION = "x11/base" LICENSE = "MIT" -LIC_FILES_CHKSUM = "file://COPYING;md5=21e33dcccf2d5034f798a8ea62622939" +LIC_FILES_CHKSUM = "file://COPYING;md5=f8778cfcd90ece0e4b225f30182227ca" # xf86-*-* packages depend on an X server built with the xfree86 DDX # so we have a virtual to represent that: diff --git a/meta/recipes-graphics/xorg-xserver/xserver-xorg_21.1.21.bb b/meta/recipes-graphics/xorg-xserver/xserver-xorg_21.1.22.bb similarity index 92% rename from meta/recipes-graphics/xorg-xserver/xserver-xorg_21.1.21.bb rename to meta/recipes-graphics/xorg-xserver/xserver-xorg_21.1.22.bb index 3781234c84b..6a9826d959a 100644 --- a/meta/recipes-graphics/xorg-xserver/xserver-xorg_21.1.21.bb +++ b/meta/recipes-graphics/xorg-xserver/xserver-xorg_21.1.22.bb @@ -1,7 +1,7 @@ require xserver-xorg.inc SRC_URI += " file://0001-xf86pciBus.c-use-Intel-ddx-only-for-pre-gen4-hardwar.patch" -SRC_URI[sha256sum] = "c0cbe5545b3f645bae6024b830d1d1154a956350683a4e52b2fff5b0fa1ab519" +SRC_URI[sha256sum] = "1a242c8917c49ba29ccc1f6021613d8a2b9805dd0d271a66ae9d09f4b0bb06b3" # These extensions are now integrated into the server, so declare the migration # path for in-place upgrades. From patchwork Wed Jun 10 22:55:02 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 89726 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id D42CACD98D4 for ; Wed, 10 Jun 2026 22:55:30 +0000 (UTC) Received: from mail-wr1-f51.google.com (mail-wr1-f51.google.com [209.85.221.51]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.33652.1781132123720861384 for ; Wed, 10 Jun 2026 15:55:24 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=pu3efXfu; spf=pass (domain: smile.fr, ip: 209.85.221.51, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f51.google.com with SMTP id ffacd0b85a97d-45ef779c1c2so5031962f8f.1 for ; Wed, 10 Jun 2026 15:55:23 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1781132122; x=1781736922; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=YmexZbQtmTu+UxMcr76/aMvDGf1idNIoO8wWtMroHrs=; b=pu3efXfuk0GPUKqAwyeWlZcgxZV51GY3ljyf+ab3AYXf5R2pTnB8dDecSvyijuegqJ 8RoXcn5ZXUdF6kAs5AEbtlK6Uiax5/AXgKGaT+P+kWOPwapSF1X2ggXemrgEeD40sUwb U7ppOM7h+pkrsohEQ3cp8rliR2qzYgb4VFVUM= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1781132122; x=1781736922; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=YmexZbQtmTu+UxMcr76/aMvDGf1idNIoO8wWtMroHrs=; b=O4m5Fphut0hrzbXuAejaNQt/9eCEXxJVFq8l5OtXgKjHwu+5RIjD/C+FY6vzmEjhdr KhZ1Ae92rQ6iZm+6p2Ue1dn6U7xPfB/pIzHADOLtAd4cI01fdpucpICI0eOTSWQOKKp7 nC8Tq1m5wK8uTieEMqlko5hhKgD1Mnt7SIzU293nltKfc5XDPkWjYGssCqbPDr/uob8/ mexfQcTdxh3TeEjNSYVBPBhtIAi3jpTzdFoPJYjCvUM3dtfNJYDREX5WD2ButLUHtstn v8KlPg25FKpUiU9Uv5E1t5s63YPjIySz4riYFr7PS3TvhmSyi0x1wtQOvdJD3eWLyofi UFmw== X-Gm-Message-State: AOJu0YzUOchkayJIFEFWo8wNDLhLCyb1ncr9IPjM86ltoyNFHl8FOi/7 U8jZZIEPaXcm4AM4UHNy5W2ofQHAisYFSyqNB3GmJNkTsKnMPRkdWNFTVuaTsm4ioxXF9YE4dNH FGUDG X-Gm-Gg: Acq92OGSq3RpS52HXaSiPoRVt2GazABFw64gmt2hLGq42kMaVXCodEVlihljysIX0nE mPCGryWa2rX513XnFaP5x10NQL7nUNKLz0kms4gDFVBc5EK/YG+SGpvPMQCRnsBAqaxYUbZ2LNO LWNXuhKWgQFfz0i86UD8uHkHUgZ0DFZuyjk0N2uT+r6Bvh00u0Bc65huurTelnw7aiIaUT+ePO7 6f67uGVmhmYdRMMBP8knxPXhce1241Pzf3VdONpC+ivPBghpzR8tsankkgvJ8mQ3lXRKb48ksVt meh6F0ClYef4xjovlnHUKdusCZLb77ebkhiagxkJfAcCEQGXb1DW7+FhpZF+jEV27ODcMSOa7GQ qQDVhVTKtI2W5vDCpB9L9k5TSle9pFNF31yB4NBEQNqZu58CW70uKOhaXlFu6URsdeojzWAhWPP DP8Nxb8gJe0upV5ZdyVDSvjbw9pc1ritHjgUcbwLWh8PbWoB6QxGfG4JQsLcBIBxTqeqFlonywW gKBysw/X9aUt4Y16N7LkvlABRa5aiE/BKn03Nk= X-Received: by 2002:adf:f34f:0:b0:43d:7dcf:ae26 with SMTP id ffacd0b85a97d-460677b583bmr164189f8f.34.1781132122033; Wed, 10 Jun 2026 15:55:22 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00bb749f54eeb85d7b.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:bb74:9f54:eeb8:5d7b]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4601f344148sm71599304f8f.19.2026.06.10.15.55.21 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 10 Jun 2026 15:55:21 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 11/21] bind: upgrade 9.20.22 -> 9.20.23 Date: Thu, 11 Jun 2026 00:55:02 +0200 Message-ID: <736f6b50355081254147af7fd5f58536a256328b.1781132051.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 10 Jun 2026 22:55:30 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/238407 From: Jinfeng Wang Solves CVE-2026-3592, CVE-2026-3039, CVE-2026-5950, CVE-2026-5947, CVE-2026-3593, CVE-2026-5946. Release notes 9.20.23: [1] [1] https://bind9.readthedocs.io/en/stable/changelog.html#bind-9-20-23 Signed-off-by: Jinfeng Wang Signed-off-by: Mathieu Dubois-Briand (master rev: ef00c353d3c77fcfd70300fa25ed86555d011b34) Signed-off-by: Jinfeng Wang Signed-off-by: Yoann Congal --- .../bind/{bind_9.20.22.bb => bind_9.20.23.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-connectivity/bind/{bind_9.20.22.bb => bind_9.20.23.bb} (97%) diff --git a/meta/recipes-connectivity/bind/bind_9.20.22.bb b/meta/recipes-connectivity/bind/bind_9.20.23.bb similarity index 97% rename from meta/recipes-connectivity/bind/bind_9.20.22.bb rename to meta/recipes-connectivity/bind/bind_9.20.23.bb index 318412a62c0..ebc4422b674 100644 --- a/meta/recipes-connectivity/bind/bind_9.20.22.bb +++ b/meta/recipes-connectivity/bind/bind_9.20.23.bb @@ -21,7 +21,7 @@ SRC_URI = "https://ftp.isc.org/isc/bind9/${PV}/${BPN}-${PV}.tar.xz \ file://0001-m4-Backport-ax_prog_cc_for_build.m4-macros.patch \ " -SRC_URI[sha256sum] = "cba92ff631b949655f475fe4b54290f6860fd0070d399f2279f6437c0d383ec6" +SRC_URI[sha256sum] = "5d4475aed3f9e500ef554b2b14d972bdb83d33de214a9b3be92918ea46908371" UPSTREAM_CHECK_URI = "https://ftp.isc.org/isc/bind9/" # follow the ESV versions divisible by 2 From patchwork Wed Jun 10 22:55:03 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 89728 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id EDF36CD98D7 for ; Wed, 10 Jun 2026 22:55:30 +0000 (UTC) Received: from mail-wr1-f48.google.com (mail-wr1-f48.google.com [209.85.221.48]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.33480.1781132124598586498 for ; Wed, 10 Jun 2026 15:55:24 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=EoBUfzdC; spf=pass (domain: smile.fr, ip: 209.85.221.48, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f48.google.com with SMTP id ffacd0b85a97d-4601949975dso1471913f8f.0 for ; Wed, 10 Jun 2026 15:55:24 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1781132123; x=1781736923; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=fPadFaAF5Dc8tlPtRyfvXj6NZU+wNybB+votW2bkrG4=; b=EoBUfzdC6TS48WXF39KxpTP93HUUDvZ4M4ISr3WZv50DNgdfOau+xvG2M8Po9z+O0Q iiyo41K4P6bqgirqFgmq2u1zi5KzECvQwMj7VBvqBD0xLUWg7vg0sKM6frs/rkG2ozz/ DdpfUutgxeEw213aZCodAKHC502g6ntzm95qA= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1781132123; x=1781736923; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=fPadFaAF5Dc8tlPtRyfvXj6NZU+wNybB+votW2bkrG4=; b=nJep/hvS35Hjd994zQusu7ZnWs79Xa29pPp4HabEvzc2Gb3q+fEdfho51WZbVh/Le3 6RU3VaSllorf97sdAB7b5RCGzR4RzdSbVcT7UlEHEOg9ALMCieO4inmODGkdCvT8j9CE TzAiHoRmFl+AxjQc11EXsDdu3smuJlGOHOAkQvNXA3jPoiRueVX6WljVXQRRd4pGoYrE ZoVPgagmSRvClUb9kh4t5n0OOI5cbO/YURdXunBE1f8aRyGh+i9U5fbmopjwnYqhoNaI T5FXlEFXIoRVQ0cycJcXfJUxV1K7Hde/PC3xHK7oiLYIu8HVOrkqBwtOYRMfpMM+FYk5 cBRQ== X-Gm-Message-State: AOJu0YzWWC6Wmw0EQG5uBWqshaYDZfXSgnEi9hrbkun3C6TE5VDAFDCh noccSGQ9Fq3QoGWc+tVXAaEnd0VfmKzqsPzvSlLnvZQLPflLfNdZs5ko3L26stcJRT/MViv5zxb 8iuG+ X-Gm-Gg: Acq92OE1HHo53GFMAhk98OLV5RYG32d7TstVXn17JRx3MHwKKCX5cILXu0lJJbFtgka TlnzowxZJ9RvwGpnpmiI7K66GP/EOAiBDPUB9KtK460kdYZQ/R9dQHgEFJ1A65xRSYOkexkRqKu lSrEJKcJq38OFST4+vb2AV/lgvzCbUgLFh+AU5DLR09NaAJ4cpSvoclSQZdGrlPo7eti9n0frxI giKNghXTLZAIkUkZ32jQIBHKHe1NogloWg0MypEfWy1iIQpGWbI+hSO2HL8Dtw+q/ImXM0RMpwd 79pEwlgMVBGfRaP03Ek6PyZHGfewRrcnv8DaCAJ9VeWv1DVtxOSoko8bBlA1MpABKGyQtrkIdtp ax/adtnJVFghGmW9PwAjoAGxYMzV8U+CbaP0lf+BYeZJuS2SCA7lvmbbmjQYUanXbI3tNI9lPMo zJJVM1KUP3Qf08EkwiNvoyFwNFmVW5nwLqh+OzQrnvDs1sgqk6V5+dXcWmG4G7y5IkT772X3Eh1 XYrNjtBiLXQO3pXwPez5BlaQgNL//eVdh/4PWU= X-Received: by 2002:a05:6000:1449:b0:43d:1c4a:37c with SMTP id ffacd0b85a97d-4606746a20dmr278953f8f.4.1781132122987; Wed, 10 Jun 2026 15:55:22 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00bb749f54eeb85d7b.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:bb74:9f54:eeb8:5d7b]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4601f344148sm71599304f8f.19.2026.06.10.15.55.22 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 10 Jun 2026 15:55:22 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 12/21] libsdl2: Fix compilation error with DirectFB Date: Thu, 11 Jun 2026 00:55:03 +0200 Message-ID: X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 10 Jun 2026 22:55:30 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/238408 From: Mark Jonas Compiling libsdl2 with DirectFB as renderer results in a compilation error. Patch libsdl2 so DirectFB_CreateRenderer() uses the current SDL_RenderDriver API. Signed-off-by: Mark Jonas Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie (cherry picked from commit 7b989a60b10d4b1cf34b0705b64f842aaed7cdb3) [YC: fixed patch format] Signed-off-by: Yoann Congal --- ...ix-CreateRenderer-callback-signature.patch | 58 +++++++++++++++++++ .../libsdl2/libsdl2_2.32.10.bb | 5 +- 2 files changed, 62 insertions(+), 1 deletion(-) create mode 100644 meta/recipes-graphics/libsdl2/libsdl2/0001-directfb-Fix-CreateRenderer-callback-signature.patch diff --git a/meta/recipes-graphics/libsdl2/libsdl2/0001-directfb-Fix-CreateRenderer-callback-signature.patch b/meta/recipes-graphics/libsdl2/libsdl2/0001-directfb-Fix-CreateRenderer-callback-signature.patch new file mode 100644 index 00000000000..4fdec5ec5cc --- /dev/null +++ b/meta/recipes-graphics/libsdl2/libsdl2/0001-directfb-Fix-CreateRenderer-callback-signature.patch @@ -0,0 +1,58 @@ +From 1df9ae4338c43ad9dce4b27a77f807aa8d2b073b Mon Sep 17 00:00:00 2001 +From: Mark Jonas +Date: Sun, 10 May 2026 20:16:17 +0200 +Subject: [PATCH] directfb: Fix CreateRenderer callback signature + +Update DirectFB_CreateRenderer() to use the current SDL_RenderDriver +API. + +Signed-off-by: Mark Jonas + +Upstream-Status: Backport [https://github.com/libsdl-org/SDL/commit/bb65446578187f0dd1460d5ddf02636e8a7a3b8a] +--- + src/video/directfb/SDL_DirectFB_render.c | 11 ++++------- + 1 file changed, 4 insertions(+), 7 deletions(-) + +diff --git a/src/video/directfb/SDL_DirectFB_render.c b/src/video/directfb/SDL_DirectFB_render.c +index 3f353cce9..684f907ea 100644 +--- a/src/video/directfb/SDL_DirectFB_render.c ++++ b/src/video/directfb/SDL_DirectFB_render.c +@@ -1130,19 +1130,17 @@ static int DirectFB_RenderWritePixels(SDL_Renderer * renderer, const SDL_Rect * + #endif + + +-SDL_Renderer *DirectFB_CreateRenderer(SDL_Window * window, Uint32 flags) ++static int DirectFB_CreateRenderer(SDL_Renderer *renderer, SDL_Window * window, Uint32 flags) + { + IDirectFBSurface *winsurf = get_dfb_surface(window); + /*SDL_VideoDisplay *display = SDL_GetDisplayForWindow(window);*/ +- SDL_Renderer *renderer = NULL; + DirectFB_RenderData *data = NULL; + DFBSurfaceCapabilities scaps; + + if (!winsurf) { +- return NULL; ++ return -1; + } + +- SDL_DFB_ALLOC_CLEAR(renderer, sizeof(*renderer)); + SDL_DFB_ALLOC_CLEAR(data, sizeof(*data)); + + renderer->WindowEvent = DirectFB_WindowEvent; +@@ -1207,12 +1205,11 @@ SDL_Renderer *DirectFB_CreateRenderer(SDL_Window * window, Uint32 flags) + } + #endif + +- return renderer; ++ return 0; + + error: +- SDL_DFB_FREE(renderer); + SDL_DFB_FREE(data); +- return NULL; ++ return -1; + } + + +-- +2.43.0 diff --git a/meta/recipes-graphics/libsdl2/libsdl2_2.32.10.bb b/meta/recipes-graphics/libsdl2/libsdl2_2.32.10.bb index 834cf096b97..3e3c55af2f8 100644 --- a/meta/recipes-graphics/libsdl2/libsdl2_2.32.10.bb +++ b/meta/recipes-graphics/libsdl2/libsdl2_2.32.10.bb @@ -21,7 +21,10 @@ LIC_FILES_CHKSUM:append = " ${@bb.utils.contains('PACKAGECONFIG', 'arm-neon', 'f PROVIDES = "virtual/libsdl2" -SRC_URI = "https://www.libsdl.org/release/SDL2-${PV}.tar.gz" +SRC_URI = "\ + https://www.libsdl.org/release/SDL2-${PV}.tar.gz \ + file://0001-directfb-Fix-CreateRenderer-callback-signature.patch \ +" S = "${UNPACKDIR}/SDL2-${PV}" From patchwork Wed Jun 10 22:55:04 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 89725 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id D55B4CD98D6 for ; Wed, 10 Jun 2026 22:55:30 +0000 (UTC) Received: from mail-wr1-f50.google.com (mail-wr1-f50.google.com [209.85.221.50]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.33654.1781132125207225284 for ; Wed, 10 Jun 2026 15:55:25 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=WaOFmE7+; spf=pass (domain: smile.fr, ip: 209.85.221.50, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f50.google.com with SMTP id ffacd0b85a97d-46019b190b6so5493140f8f.3 for ; Wed, 10 Jun 2026 15:55:24 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1781132124; x=1781736924; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=Ox4w10OGz6jJvYC2oU4MVyvNnoZVTmZ+wLnvuj1CGFM=; b=WaOFmE7+AGSRu03uSlBQPC2D5YLB98gB49asuYBDuFIfzvKURG4+er25Vls+StoCmX egsKWWLyIg1Ew1BBd2kLQl7vcKKO+AjP3+DtrXy2tkx+vWoakpYJWj7tHHgDiJv0TNiZ d9vgFGrKnyvUMQWeTnvJ6K4Y5K+RywLnkTcgQ= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1781132124; x=1781736924; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=Ox4w10OGz6jJvYC2oU4MVyvNnoZVTmZ+wLnvuj1CGFM=; b=Ramh2/cm+8I2dhYc2HTelKD/rl6Je1F+jLPudh1CxAchgGl1LwISq+A5FoN5y0g3j2 uSM3eZY0E0bCmYqgkLd55d+91Rl/TSp1ruhBxiP7KJAIAbjRhFYW59GHIXVV9a8TDEKc jQHy1iHB+B/9CQPqY2NeC4UtzjJBphxt9lN/hd3Zh27HpCO+DV0kMzk07CDI15rzXRNf H6lU0GWR6Usn8dYhZcTbAedFS5vJvujWPfsk4uUoiD3rdvV9zX0DNKPOVyonD/2Qr2eD 3Ekh49wvBZ+1rUonJcA7/wjPmsWqRDpOZXcppEAn3jkvPP7+FAjokhy5nQn+9shdzR6J k0sQ== X-Gm-Message-State: AOJu0YzRrgFUIn+r1rJ67ZO9vlwRX/kO/J5EjlmXX1zxjNw0lFmAOUxF 4zxwX+HHQcisF7rCKbtxlIz/wTw+aK34gGJOrwjSFmN+XOV2oAUw0SK6ohTIBJqzpsDTcw94kjw oo30o X-Gm-Gg: Acq92OF2JnY4whCWz02QAoLLoA8G7a3r1d6R5eOLKac9kpKNZNA/Mti7Wzlwsgkr3OG qF+KBqo1mHvc/bPMDlzr2buUUOx4PXlnKcoI5UqntYKimYFjdZtqi3CpNQXVxJSXilouldUFAaH 6MSeg7jt4KMepaDzB4hPXW7lVuwxVf2HS8aKdqwtb1jQ5DZjUOI+WZgxRJmlEG3+k11t0KkfJng VTS9UYHeB4j0fBlEuZJk8xGG5kfGmGe5ebscIWR8b/1jriO7IYwFMXCtfrmMCTXZl3KNj24F9Km gZWTdJssE9gL1XdMjxF5FKK106Dkm+5B1X5Zp+b2FQW9HqUztQKyB1InQS/1IEQJCBCiNapjvce CJt0CuMWYWjMlBdjY8GdSwZ1AQ1vPD57eMWWoT/bpi6ZMl2amymW4HFZ4uYZr+6DZSYiPL8BYn9 Fj11jVxAj+OCf6b6Nc+pwRV/lOpP379C2SaKk5dRcuGoEUMcGYdrEeWQb51ooDA42u9OMlK8jJI Vol02rEiQcwlntIpiaLja1Q2ccnarSBRoZpIU0= X-Received: by 2002:a5d:5e08:0:b0:45e:e50e:3bc with SMTP id ffacd0b85a97d-460677db965mr236978f8f.29.1781132123553; Wed, 10 Jun 2026 15:55:23 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00bb749f54eeb85d7b.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:bb74:9f54:eeb8:5d7b]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4601f344148sm71599304f8f.19.2026.06.10.15.55.23 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 10 Jun 2026 15:55:23 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 13/21] libsolv: fix CVE-2026-9150 Date: Thu, 11 Jun 2026 00:55:04 +0200 Message-ID: <7c5d4b23b235355a46a8124bcafd8b54e4586291.1781132051.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 10 Jun 2026 22:55:30 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/238409 From: Adarsh Jagadish Kamini Backport patch to fix CVE-2026-9150. https://nvd.nist.gov/vuln/detail/CVE-2026-9150 Upstream fix: https://github.com/openSUSE/libsolv/pull/616 Tested with ptest: Before: PASSED: 29, FAILED: 0, SKIPPED: 0 After: PASSED: 29, FAILED: 0, SKIPPED: 0 Signed-off-by: Adarsh Jagadish Kamini Signed-off-by: Yoann Congal --- .../libsolv/libsolv/CVE-2026-9150.patch | 68 +++++++++++++++++++ .../libsolv/libsolv_0.7.36.bb | 1 + 2 files changed, 69 insertions(+) create mode 100644 meta/recipes-extended/libsolv/libsolv/CVE-2026-9150.patch diff --git a/meta/recipes-extended/libsolv/libsolv/CVE-2026-9150.patch b/meta/recipes-extended/libsolv/libsolv/CVE-2026-9150.patch new file mode 100644 index 00000000000..76c0c8e2586 --- /dev/null +++ b/meta/recipes-extended/libsolv/libsolv/CVE-2026-9150.patch @@ -0,0 +1,68 @@ +From 360fc223b57d5aa32bf700a94e75a5f49c30437f Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Petr=20P=C3=ADsa=C5=99?= +Date: Wed, 22 Apr 2026 09:18:29 +0200 +Subject: [PATCH] Fix a buffer overflow when copying SHA-384/512 checksum from + a Debian repository + +When parsing Debian repository, control2solvable() copies a package +checksum string from the repository into a stack-allocated "char +checksum[32 * 2 + 1]" array. + +If the repository defined a SHA384 or SHA512 tag, a buffer overflow +occured (as can be seen when compiling libsolv with CFLAGS='-O0 -g +-fsanitize=address') because those tag values are longer: + + $ cat /tmp/Packages + Package: p + Version: 1 + Architecture: all + SHA512: 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 + + $ /tmp/b/tools/deb2solv -r /tmp/Packages + ================================================================= + ==3695==ERROR: AddressSanitizer: stack-buffer-overflow on address 0x7b685ecf0071 at pc 0x7f6861683722 b + p 0x7fff37e3e7a0 sp 0x7fff37e3df60 + WRITE of size 129 at 0x7b685ecf0071 thread T0 + #0 0x7f6861683721 in strcpy.part.0 (/lib64/libasan.so.8+0x83721) (BuildId: 80bfc4ae44fdec6ef5fecfb01e2b57d28660991c) + #1 0x7f6861d7f34d in control2solvable /home/test/libsolv/ext/repo_deb.c:491 + #2 0x7f6861d804ea in repo_add_debpackages /home/test/libsolv/ext/repo_deb.c:622 + #3 0x000000400fd5 in main /home/test/libsolv/tools/deb2solv.c:134 + #4 0x7f686123c680 in __libc_start_call_main (/lib64/libc.so.6+0x3680) (BuildId: c04494d63bca865bedf571a4075ef8867ccf9fa9) + #5 0x7f686123c797 in __libc_start_main@GLIBC_2.2.5 (/lib64/libc.so.6+0x3797) (BuildId: c04494d63bca865bedf571a4075ef8867ccf9fa9) + #6 0x000000400694 in _start (/tmp/b/tools/deb2solv+0x400694) (BuildId: a3350337819a51edd0c75293970d3458b5033bc9) + + Address 0x7b685ecf0071 is located in stack of thread T0 at offset 113 in frame + #0 0x7f6861d7de2a in control2solvable /home/test/libsolv/ext/repo_deb.c:365 + + This frame has 1 object(s): + [48, 113) 'checksum' (line 371) <== Memory access at offset 113 overflows this variable + +This patch fixes it by enlarging the buffer to accomodate the longest +supported digest string. + +This flaw was introduced with c8164bfecf2ba8bcf4c24329534d3104f19da73c +commit ("[ABI BREAKAGE] add support for SHA224/384/512"). + +Reported by Aisle Research. + +CVE: CVE-2026-9150 +Upstream-Status: Backport [https://github.com/openSUSE/libsolv/commit/c5b5db52aebde00bdeacecf4d0569c217ab3187d] + +Signed-off-by: Adarsh Jagadish Kamini +--- + ext/repo_deb.c | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/ext/repo_deb.c b/ext/repo_deb.c +index d400f959..25eaf8cb 100644 +--- a/ext/repo_deb.c ++++ b/ext/repo_deb.c +@@ -368,7 +368,7 @@ control2solvable(Solvable *s, Repodata *data, char *control) + char *p, *q, *end, *tag; + int x, l; + int havesource = 0; +- char checksum[32 * 2 + 1]; ++ char checksum[64 * 2 + 1]; + Id checksumtype = 0; + Id newtype; + diff --git a/meta/recipes-extended/libsolv/libsolv_0.7.36.bb b/meta/recipes-extended/libsolv/libsolv_0.7.36.bb index 852e79c45e2..f3c3738d7c1 100644 --- a/meta/recipes-extended/libsolv/libsolv_0.7.36.bb +++ b/meta/recipes-extended/libsolv/libsolv_0.7.36.bb @@ -11,6 +11,7 @@ DEPENDS = "expat zlib zstd" SRC_URI = "git://github.com/openSUSE/libsolv.git;branch=master;protocol=https;tag=${PV} \ file://0001-compress_buf-fix-musl-segfaults.patch \ file://run-ptest \ + file://CVE-2026-9150.patch \ " SRCREV = "1e377699be108ec82bb798ec9c223d45d84a733c" From patchwork Wed Jun 10 22:55:05 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 89730 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 24C5ECD98D8 for ; Wed, 10 Jun 2026 22:55:31 +0000 (UTC) Received: from mail-wm1-f44.google.com (mail-wm1-f44.google.com [209.85.128.44]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.33655.1781132125981939896 for ; Wed, 10 Jun 2026 15:55:26 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=xVe6qo1+; spf=pass (domain: smile.fr, ip: 209.85.128.44, mailfrom: yoann.congal@smile.fr) Received: by mail-wm1-f44.google.com with SMTP id 5b1f17b1804b1-490b64c8311so80565505e9.3 for ; Wed, 10 Jun 2026 15:55:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1781132124; x=1781736924; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=pVukOoyDYi6iUC/PF1cRIj7v2P47GIJe8liNIEcDvB4=; b=xVe6qo1+ZnorJrz0+JSb4jeGpnoRX6nlvfujNDJf1EWskh7J+hBfN+84FGHc+uLbpY Gg308eRKWlLi8VLbXK1H+6Knk0HMX35d0X/9dmNunyT9Iu5GbUHAlTM4FHxBMIVpHZxI xGYOkoLbpQ3/+Bm/VA0Watcr1EhE5kA/AH8Ng= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1781132124; x=1781736924; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=pVukOoyDYi6iUC/PF1cRIj7v2P47GIJe8liNIEcDvB4=; b=ccI9bAwOqp7fo+kECeUia2Q19ggMMS4rgjz9UwkF60AGaY56C/IEcRQO1shkjFcPMH BhnmkA3Sp/ZlHFD09oH8bgDWW6frKqh9BwCnhPQrcv4dVFXh31fW8Ax9JL2VKDfVDwhT I2ncVZJN/pYHJYa/9cm7jItHteAIsEfu12Ou9A32NcTxOLZxLW6j7FbSvDCwf4NYJvGx m2wMTrRE8GwR4Gv2x8i0b9f0BBdIJ8Fg2hGDYLfnq9lCjEN9O2zZcxTsDWZHlrWAA9Uz Hzuq0Xg1vKjK40kB9MO2SPBeMS0e0l3JLprxCTCMBvpdqzdWSr0CzhlHLjmV/TquPt7G 5Qrg== X-Gm-Message-State: AOJu0YxZc/9nXxCuHohW4QnD/3rPagZ9Ude/1zNFdZ+Yy3OIflpGXUoI Khbxpu96NMnN8jUTlXGMumhKXcWk6yGyhxAOPHIPGPh5NzEeXj/rxTpmTdwT9x6R5MQLHMPJVe4 f0OnV X-Gm-Gg: Acq92OG2uv+54kL7laL4WjAVNvkAR+YjsUOHp1OVUf19/WOFz+VSRShw/f1VdZNdVSG DtlRrZ0sYwhbOyQNm/bMHxv2duCEUF9KlWo/Vc4VBxqHJ+sJIcN+4Aj9wjP+/Cdp0Bbprv8UaPX H/spA7tZ4LWiqQPSrfJXAxU0a5twIBDcLyWF24zjgdpXdNDjqRf1B1GNh0e45/sVoKKlB9zZ4Mj Ihdwj946GOwq0OSFmeO6KUxn0EEpTSXCS0tMY07j0fqBB5uzi/lHI1PqPWVrahCLx/3n7rV/eLe QDh3X3FMYaUKBSsG6vGO/f9tEXG2OQMf32x04NQjAtLozao0cXl0+8d65Cw8ZRmMYGenhByVogl mu1OUAaOnhImHlId/OWNbh/WJ8kNs3GrOs88DR924ZHUVhmb80XTF5nIRVjVv6Msfdf7pnc23pB HwiqAYGgyQBOW6JpDDpqG89bhRQ92e4pE1UPzAco3lc8K5rSdZWx7Epw2G7CS++6zMxQGUapUhs LtPfGxJcZTayTOe/YxGKNRCzJAfG0jOIjSbQNoM7W1kaZ/wzw== X-Received: by 2002:a05:600c:5248:b0:490:cb90:3e00 with SMTP id 5b1f17b1804b1-490cb903f1emr284042675e9.14.1781132124178; Wed, 10 Jun 2026 15:55:24 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00bb749f54eeb85d7b.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:bb74:9f54:eeb8:5d7b]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4601f344148sm71599304f8f.19.2026.06.10.15.55.23 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 10 Jun 2026 15:55:23 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 14/21] go: upgrade 1.26.2 -> 1.26.3 Date: Thu, 11 Jun 2026 00:55:05 +0200 Message-ID: <53dba55eb47db7f3a7f458cdf934709e7a9b4728.1781132051.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 10 Jun 2026 22:55:31 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/238410 From: Peter Marko Upgrade to latest 1.26.x release [1]: $ git --no-pager log --oneline go1.26.2..go1.26.3 2dc996f71b (tag: go1.26.3) [release-branch.go1.26] go1.26.3 8282c628a0 [release-branch.go1.26] cmd/go: reject sumdb response lacking module hash 3baf3eec3b [release-branch.go1.26] all: avoid unsafe StringToUTF16Ptr on Windows 0bec63330d [release-branch.go1.26] net/mail: fix quadratic consumePhrase behavior 7136366ebf [release-branch.go1.26] cmd/go: invalidate test cache when -coverpkg dependencies change 722b68ceca [release-branch.go1.26] cmd/compile: keep blank nodes alive in b.loop 3ae315a8cd [release-branch.go1.26] os: avoid panic when RemoveAll fails to remove a symlink c9f97f50c4 [release-branch.go1.26] html/template: fix escaping of URLs in meta content attributes 40fa774fff [release-branch.go1.26] cmd/pack: refuse to extract files with directory components d9389d318b [release-branch.go1.26] net/mail: fix quadratic complexity in consumeComment dd29b59a2b [release-branch.go1.26] cmd/compile: fix loopvar version detection with line directives 18fa391f45 [release-branch.go1.26] crypto/fips140: add package docs e0f5c054cb [release-branch.go1.26] net: avoid double-free of cgo pointer when handling large DNS response 2992086cf8 [release-branch.go1.26] lib/fips140: add certified pointing to v1.0.0-c2097c7c f43caf8712 [release-branch.go1.26] lib/fips140: update inprocess to v1.26.0 19d2ce3401 [release-branch.go1.26] runtime: fix timespec definition on 32bits systems e9df527f06 [release-branch.go1.26] crypto/tls: wrap ML-KEM hybrids in fips140.WithoutEnforcement 73f417a37c [release-branch.go1.26] go/types, types2: handle unconstrained type parameters correctly in a few places 50856a181c [release-branch.go1.26] cmd/go: use MkdirTemp to create temp directory for "go bug" e137885d68 [release-branch.go1.26] cmd/compile/internal/devirtualize: use pointer identity for type comparison c9712872cc [release-branch.go1.26] crypto/internal/fips140/drbg: build tag out entropy generation on Wasm cb994d85ff [release-branch.go1.26] cmd/fix: change -diff to exit 1 if diffs exist 95470667eb [release-branch.go1.26] net/http/httputil: reencode queries with many parameters in proxy 9b01c04815 [release-branch.go1.26] html/template: fix escaper bypass by treating empty script type as JavaScript be12fe151c [release-branch.go1.26] runtime: use uname version check for 64-bit time on 32-bit arch codepaths ec5ebece41 [release-branch.go1.26] all: update x/net to 705de46f 710f29a758 [release-branch.go1.26] runtime: add sysUnreserve to undo sysReserve efdc0fb354 [release-branch.go1.26] cmd/compile: handle min integer step in loop ba4554f03b [release-branch.go1.26] cmd/go: specify full path to go command when running go tool covdata f4e425d342 [release-branch.go1.26] fix incorrect loop trip counts 0b4d5f85e6 [release-branch.go1.26] cmd/link: use bfd ld 2.36+ on linux/arm64 instead of gold Fixes CVE-2026-42501, CVE-2026-39825, CVE-2026-39836, CVE-2026-42499, CVE-2026-39820, CVE-2026-39819, CVE-2026-39817, CVE-2026-33814, CVE-2026-39826, CVE-2026-33811 and CVE-2026-39823. Drop patch handling gold linker as upstream implemented gold linker availability autodetection with [3]. Release information: [2] [1] https://github.com/golang/go/compare/go1.26.2...go1.26.3 [2] https://groups.google.com/g/golang-announce/c/qcCIEXso47M [3] https://github.com/golang/go/commit/0b4d5f85e68ea79b61de9989f9f37a984eb11289 (From OE-Core rev: 3d8258a8d3d96dc1225172c2ff9e889fd12cf6bc) Signed-off-by: Peter Marko Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie Signed-off-by: Peter Marko Signed-off-by: Yoann Congal --- .../go/{go-1.26.2.inc => go-1.26.3.inc} | 3 +- ...e_1.26.2.bb => go-binary-native_1.26.3.bb} | 6 +- ..._1.26.2.bb => go-cross-canadian_1.26.3.bb} | 0 ...{go-cross_1.26.2.bb => go-cross_1.26.3.bb} | 0 ...osssdk_1.26.2.bb => go-crosssdk_1.26.3.bb} | 0 ...runtime_1.26.2.bb => go-runtime_1.26.3.bb} | 0 ...rcing-binutils-gold-dependency-on-aa.patch | 55 ------------------- .../go/{go_1.26.2.bb => go_1.26.3.bb} | 0 8 files changed, 4 insertions(+), 60 deletions(-) rename meta/recipes-devtools/go/{go-1.26.2.inc => go-1.26.3.inc} (83%) rename meta/recipes-devtools/go/{go-binary-native_1.26.2.bb => go-binary-native_1.26.3.bb} (80%) rename meta/recipes-devtools/go/{go-cross-canadian_1.26.2.bb => go-cross-canadian_1.26.3.bb} (100%) rename meta/recipes-devtools/go/{go-cross_1.26.2.bb => go-cross_1.26.3.bb} (100%) rename meta/recipes-devtools/go/{go-crosssdk_1.26.2.bb => go-crosssdk_1.26.3.bb} (100%) rename meta/recipes-devtools/go/{go-runtime_1.26.2.bb => go-runtime_1.26.3.bb} (100%) delete mode 100644 meta/recipes-devtools/go/go/0011-cmd-link-stop-forcing-binutils-gold-dependency-on-aa.patch rename meta/recipes-devtools/go/{go_1.26.2.bb => go_1.26.3.bb} (100%) diff --git a/meta/recipes-devtools/go/go-1.26.2.inc b/meta/recipes-devtools/go/go-1.26.3.inc similarity index 83% rename from meta/recipes-devtools/go/go-1.26.2.inc rename to meta/recipes-devtools/go/go-1.26.3.inc index 8bb10bc89fe..db7b18ed2d2 100644 --- a/meta/recipes-devtools/go/go-1.26.2.inc +++ b/meta/recipes-devtools/go/go-1.26.3.inc @@ -15,6 +15,5 @@ SRC_URI += "\ file://0008-src-cmd-dist-buildgo.go-do-not-hardcode-host-compile.patch \ file://0009-go-Filter-build-paths-on-staticly-linked-arches.patch \ file://0010-cmd-go-clear-GOROOT-for-func-ldShared-when-trimpath-.patch \ - file://0011-cmd-link-stop-forcing-binutils-gold-dependency-on-aa.patch \ " -SRC_URI[main.sha256sum] = "2e91ebb6947a96e9436fb2b3926a8802efe63a6d375dffec4f82aa9dbd6fd43b" +SRC_URI[main.sha256sum] = "1c646875d0aa8799133184ed57cf79ff24bdefe8c8820470602a9d3d6d9192b8" diff --git a/meta/recipes-devtools/go/go-binary-native_1.26.2.bb b/meta/recipes-devtools/go/go-binary-native_1.26.3.bb similarity index 80% rename from meta/recipes-devtools/go/go-binary-native_1.26.2.bb rename to meta/recipes-devtools/go/go-binary-native_1.26.3.bb index d9006373f6d..135c7fbf5ee 100644 --- a/meta/recipes-devtools/go/go-binary-native_1.26.2.bb +++ b/meta/recipes-devtools/go/go-binary-native_1.26.3.bb @@ -9,9 +9,9 @@ PROVIDES = "go-native" # Checksums available at https://go.dev/dl/ SRC_URI = "https://dl.google.com/go/go${PV}.${BUILD_GOOS}-${BUILD_GOARCH}.tar.gz;name=go_${BUILD_GOTUPLE}" -SRC_URI[go_linux_amd64.sha256sum] = "990e6b4bbba816dc3ee129eaeaf4b42f17c2800b88a2166c265ac1a200262282" -SRC_URI[go_linux_arm64.sha256sum] = "c958a1fe1b361391db163a485e21f5f228142d6f8b584f6bef89b26f66dc5b23" -SRC_URI[go_linux_ppc64le.sha256sum] = "62b7645dd2404052535617c59e91cf03c7aa28e332dbaddbe4c0d7de7bcc6736" +SRC_URI[go_linux_amd64.sha256sum] = "2b2cfc7148493da5e73981bffbf3353af381d5f93e789c82c79aff64962eb556" +SRC_URI[go_linux_arm64.sha256sum] = "9d89a3ea57d141c2b22d70083f2c8459ba3890f2d9e818e7e933b75614936565" +SRC_URI[go_linux_ppc64le.sha256sum] = "dbd82b50530ead2beb1fd72215117380df3cb16332b51467116dc35b3691dd75" UPSTREAM_CHECK_URI = "https://golang.org/dl/" UPSTREAM_CHECK_REGEX = "go(?P\d+(\.\d+)+)\.linux" diff --git a/meta/recipes-devtools/go/go-cross-canadian_1.26.2.bb b/meta/recipes-devtools/go/go-cross-canadian_1.26.3.bb similarity index 100% rename from meta/recipes-devtools/go/go-cross-canadian_1.26.2.bb rename to meta/recipes-devtools/go/go-cross-canadian_1.26.3.bb diff --git a/meta/recipes-devtools/go/go-cross_1.26.2.bb b/meta/recipes-devtools/go/go-cross_1.26.3.bb similarity index 100% rename from meta/recipes-devtools/go/go-cross_1.26.2.bb rename to meta/recipes-devtools/go/go-cross_1.26.3.bb diff --git a/meta/recipes-devtools/go/go-crosssdk_1.26.2.bb b/meta/recipes-devtools/go/go-crosssdk_1.26.3.bb similarity index 100% rename from meta/recipes-devtools/go/go-crosssdk_1.26.2.bb rename to meta/recipes-devtools/go/go-crosssdk_1.26.3.bb diff --git a/meta/recipes-devtools/go/go-runtime_1.26.2.bb b/meta/recipes-devtools/go/go-runtime_1.26.3.bb similarity index 100% rename from meta/recipes-devtools/go/go-runtime_1.26.2.bb rename to meta/recipes-devtools/go/go-runtime_1.26.3.bb diff --git a/meta/recipes-devtools/go/go/0011-cmd-link-stop-forcing-binutils-gold-dependency-on-aa.patch b/meta/recipes-devtools/go/go/0011-cmd-link-stop-forcing-binutils-gold-dependency-on-aa.patch deleted file mode 100644 index dda0f2bb715..00000000000 --- a/meta/recipes-devtools/go/go/0011-cmd-link-stop-forcing-binutils-gold-dependency-on-aa.patch +++ /dev/null @@ -1,55 +0,0 @@ -From 6d265b008e3d106b2706645e5a88cd8e2fb98953 Mon Sep 17 00:00:00 2001 -From: Dirk Müller -Date: Wed, 09 Mar 2022 17:47:23 +0100 -Subject: [PATCH 11/11] cmd/link: stop forcing binutils-gold dependency on - aarch64 - -The bfd linker appears to be working just fine at least in version -2.41 or above. Reject the known broken one instead, which -avoids an architecture specific linker dependency that -is cumbersome for distributions. - -Fixes #22040. - -Change-Id: I9f377e47c22ef20497479c0978c053ed5de46a38 - -Upstream-Status: Submitted [https://go-review.googlesource.com/c/go/+/391115] ---- - src/cmd/link/internal/ld/lib.go | 21 --------------------- - 1 file changed, 21 deletions(-) - -diff --git a/src/cmd/link/internal/ld/lib.go b/src/cmd/link/internal/ld/lib.go -index dfc72e02c0..2a2a304113 100644 ---- a/src/cmd/link/internal/ld/lib.go -+++ b/src/cmd/link/internal/ld/lib.go -@@ -1701,27 +1701,6 @@ func (ctxt *Link) hostlink() { - // Use lld to avoid errors from default linker (issue #38838) - altLinker = "lld" - } -- -- if ctxt.Arch.InFamily(sys.ARM64) && buildcfg.GOOS == "linux" { -- // On ARM64, the GNU linker will fail with -- // -znocopyreloc if it thinks a COPY relocation is -- // required. Switch to gold. -- // https://sourceware.org/bugzilla/show_bug.cgi?id=19962 -- // https://go.dev/issue/22040 -- altLinker = "gold" -- -- // If gold is not installed, gcc will silently switch -- // back to ld.bfd. So we parse the version information -- // and provide a useful error if gold is missing. -- name, args := flagExtld[0], flagExtld[1:] -- args = append(args, "-fuse-ld=gold", "-Wl,--version") -- cmd := exec.Command(name, args...) -- if out, err := cmd.CombinedOutput(); err == nil { -- if !bytes.Contains(out, []byte("GNU gold")) { -- log.Fatalf("ARM64 external linker must be gold (issue #15696, 22040), but is not: %s", out) -- } -- } -- } - } - if ctxt.Arch.Family == sys.ARM64 && buildcfg.GOOS == "freebsd" { - // Switch to ld.bfd on freebsd/arm64. --- -2.25.1 - diff --git a/meta/recipes-devtools/go/go_1.26.2.bb b/meta/recipes-devtools/go/go_1.26.3.bb similarity index 100% rename from meta/recipes-devtools/go/go_1.26.2.bb rename to meta/recipes-devtools/go/go_1.26.3.bb From patchwork Wed Jun 10 22:55:06 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 89724 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 95DE2CD98D3 for ; Wed, 10 Jun 2026 22:55:30 +0000 (UTC) Received: from mail-wr1-f46.google.com (mail-wr1-f46.google.com [209.85.221.46]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.33656.1781132126393873671 for ; Wed, 10 Jun 2026 15:55:26 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=JIvX/OiT; spf=pass (domain: smile.fr, ip: 209.85.221.46, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f46.google.com with SMTP id ffacd0b85a97d-45eecb8bf67so5522856f8f.2 for ; Wed, 10 Jun 2026 15:55:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1781132125; x=1781736925; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=SU9cmVSz8DeFJKydEumBU3QMy6WHKhhMCfXjwX5X23M=; b=JIvX/OiT/tyu4xO01KPVwpPyw7YHUfgfQGw2vbNI1njfoXrCQZ0RJRnMVktPPZwlHJ ytycAAJzO7/ZFP8A0YCVuplKqG6KSj3kLKOVWXea7zKFp88IwKFOhc5acJ75puQbDCtR Ymkr5Midex1H2UiLpuMWp9OijOVoZDcrV+piA= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1781132125; x=1781736925; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=SU9cmVSz8DeFJKydEumBU3QMy6WHKhhMCfXjwX5X23M=; b=QGH/UggbdvPbgq2o4Nl9wC+9yw+IAT7s1xVGDyPWcfzKZftRb15BIW/ef+Duy6GcuV Ko5w+S6yHExXhYlHCLhEeTf/hbUPEnz7kl9tcxDr1Vo8zNinJexcYabaLDuy4gJ8hJnW Y6q9KXEOcZqA9Kj/e8cymUIz3DXd4FwHbZXWfEnR4mHY82df5Y50gIEdi6w2fLIw88aB zMQHCDbxKnqfq3MxuyWDJ/z9PDa28Ngskf0U2Ot+1PMUuoj9FP9YQhJx/RuxL0VJ+M+K 6x3QcVUZD3tpBrWQb9tViaUUaHz5G2G71gPHbUmOc/HGqohAL7Tl2qhVsnfEgKJQCqtc SCmA== X-Gm-Message-State: AOJu0YykaVMKLpyWoqXSwLEcTEwZ+e1z5I56/yi7K7CZYTD3Xt1TWS/r ZfHGozD7ly0Ednb1iZgLk5ED0ugxxtLvOeUSIoVBzTEKjJ/QX+uSIbvRUxIc4VQPUFVAwR6ULAV evhuY X-Gm-Gg: Acq92OF399Y65n02/gfyEwUcpdSfqfleP99vIh3jmHOiCTpO2vBiuFi9e0mX4HULqpy rcAEMzKfKzjuqXlPpWSGZxIo0IXL/n0OyJWYexPST6e5++aYnsTL/e6LDLJH8+rtsDF6N3GwzD1 qJKKlGrOjeOGwvK5RG9UembH0+K07UfxI33C7xLSfJns0N9RS8QyOVEIGWxMlYoaWelU5r76bSK 7dbEhlPH+kdJTdk5LK+dUnJ7/Wr/1AYKo5QMTp+jbvW8KgajLvsGHlE8z2lDDPSgmhllyirzGCA /JxyBIRUxJ/KfSV4Sj14qoqEoEoHYT7wWUOUZ98B0RJMk+bvADzPPuv6MrzxMzREJ6bIZG4Y9MP BR2qaJUZ9J4hV8RxiIV+x+PhxRLrb3BeXdd5H8DMYD1QPnWscIDgwiHprnKPQJaz9TcTN2Deqs9 BK3+ClHPYN1IHc87exUNrFmiP/pckGogU7QTaXHW1Ady2mQxPlaDypio2S/1iZEqHMfjt0R0AXT jSmpRjj0+dVHkl4J13ryR+0I7phMvI20nolmIY= X-Received: by 2002:a05:6000:46d9:b0:45e:b215:12e9 with SMTP id ffacd0b85a97d-4606758d27emr165417f8f.6.1781132124699; Wed, 10 Jun 2026 15:55:24 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00bb749f54eeb85d7b.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:bb74:9f54:eeb8:5d7b]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4601f344148sm71599304f8f.19.2026.06.10.15.55.24 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 10 Jun 2026 15:55:24 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 15/21] go: upgrade 1.26.3 -> 1.26.4 Date: Thu, 11 Jun 2026 00:55:06 +0200 Message-ID: <00c4a3832a7320ec86708df95690d6c9e7911103.1781132051.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 10 Jun 2026 22:55:30 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/238411 From: Peter Marko Upgrade to latest 1.26.x release [1]: $ git --no-pager log --oneline go1.26.3..go1.26.4 a9ce111d58 (tag: go1.26.4) [release-branch.go1.26] go1.26.4 babc19e1ad [release-branch.go1.26] cmd/compile: do not misscompile x+x << 63 to x << 0 on amd64 7d24489b2b [release-branch.go1.26] runtime/race: build race detector linux/arm64 syso with no-outline-atomics ce5a3e718c [release-branch.go1.26] crypto/x509: split candidate hostname only once ec1c380418 [release-branch.go1.26] net/textproto: escape arbitrary input when including them in errors 7f24db453a [release-branch.go1.26] mime: avoid quadratic complexity in WordDecoder.DecodeHeader ccffd99f3c [release-branch.go1.26] cmd/fix: pull in CL 783960 26c2ac5f94 [release-branch.go1.26] crypto/internal/fips140/drbg: fix Wasm stub Fixes CVE-2026-42504, CVE-2026-42507 and CVE-2026-27145. Release information: [2] [1] https://github.com/golang/go/compare/go1.26.3...go1.26.4 [2] https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw (From OE-Core rev: b9b3b3098eece17d29d41b1923ae5a26511d9b4b) Signed-off-by: Peter Marko Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie Signed-off-by: Peter Marko Signed-off-by: Yoann Congal --- meta/recipes-devtools/go/{go-1.26.3.inc => go-1.26.4.inc} | 2 +- ...o-binary-native_1.26.3.bb => go-binary-native_1.26.4.bb} | 6 +++--- ...cross-canadian_1.26.3.bb => go-cross-canadian_1.26.4.bb} | 0 .../go/{go-cross_1.26.3.bb => go-cross_1.26.4.bb} | 0 .../go/{go-crosssdk_1.26.3.bb => go-crosssdk_1.26.4.bb} | 0 .../go/{go-runtime_1.26.3.bb => go-runtime_1.26.4.bb} | 0 meta/recipes-devtools/go/{go_1.26.3.bb => go_1.26.4.bb} | 0 7 files changed, 4 insertions(+), 4 deletions(-) rename meta/recipes-devtools/go/{go-1.26.3.inc => go-1.26.4.inc} (90%) rename meta/recipes-devtools/go/{go-binary-native_1.26.3.bb => go-binary-native_1.26.4.bb} (80%) rename meta/recipes-devtools/go/{go-cross-canadian_1.26.3.bb => go-cross-canadian_1.26.4.bb} (100%) rename meta/recipes-devtools/go/{go-cross_1.26.3.bb => go-cross_1.26.4.bb} (100%) rename meta/recipes-devtools/go/{go-crosssdk_1.26.3.bb => go-crosssdk_1.26.4.bb} (100%) rename meta/recipes-devtools/go/{go-runtime_1.26.3.bb => go-runtime_1.26.4.bb} (100%) rename meta/recipes-devtools/go/{go_1.26.3.bb => go_1.26.4.bb} (100%) diff --git a/meta/recipes-devtools/go/go-1.26.3.inc b/meta/recipes-devtools/go/go-1.26.4.inc similarity index 90% rename from meta/recipes-devtools/go/go-1.26.3.inc rename to meta/recipes-devtools/go/go-1.26.4.inc index db7b18ed2d2..8bc6f4d4def 100644 --- a/meta/recipes-devtools/go/go-1.26.3.inc +++ b/meta/recipes-devtools/go/go-1.26.4.inc @@ -16,4 +16,4 @@ SRC_URI += "\ file://0009-go-Filter-build-paths-on-staticly-linked-arches.patch \ file://0010-cmd-go-clear-GOROOT-for-func-ldShared-when-trimpath-.patch \ " -SRC_URI[main.sha256sum] = "1c646875d0aa8799133184ed57cf79ff24bdefe8c8820470602a9d3d6d9192b8" +SRC_URI[main.sha256sum] = "4f668a32fbfc1132e6a881fb968c2f1dada631492a339211735fbb255a42602d" diff --git a/meta/recipes-devtools/go/go-binary-native_1.26.3.bb b/meta/recipes-devtools/go/go-binary-native_1.26.4.bb similarity index 80% rename from meta/recipes-devtools/go/go-binary-native_1.26.3.bb rename to meta/recipes-devtools/go/go-binary-native_1.26.4.bb index 135c7fbf5ee..3757b9f6a52 100644 --- a/meta/recipes-devtools/go/go-binary-native_1.26.3.bb +++ b/meta/recipes-devtools/go/go-binary-native_1.26.4.bb @@ -9,9 +9,9 @@ PROVIDES = "go-native" # Checksums available at https://go.dev/dl/ SRC_URI = "https://dl.google.com/go/go${PV}.${BUILD_GOOS}-${BUILD_GOARCH}.tar.gz;name=go_${BUILD_GOTUPLE}" -SRC_URI[go_linux_amd64.sha256sum] = "2b2cfc7148493da5e73981bffbf3353af381d5f93e789c82c79aff64962eb556" -SRC_URI[go_linux_arm64.sha256sum] = "9d89a3ea57d141c2b22d70083f2c8459ba3890f2d9e818e7e933b75614936565" -SRC_URI[go_linux_ppc64le.sha256sum] = "dbd82b50530ead2beb1fd72215117380df3cb16332b51467116dc35b3691dd75" +SRC_URI[go_linux_amd64.sha256sum] = "1153d3d50e0ac764b447adfe05c2bcf08e889d42a02e0fe0259bd47f6733ad7f" +SRC_URI[go_linux_arm64.sha256sum] = "ef758ae7c6cf9267c9c0ef080b8965f453d89ab2d25d9eb22de4405925238768" +SRC_URI[go_linux_ppc64le.sha256sum] = "53f49b8c7eace2d30389327b4a516b13321f90377fdf5929a6b63174609bc22e" UPSTREAM_CHECK_URI = "https://golang.org/dl/" UPSTREAM_CHECK_REGEX = "go(?P\d+(\.\d+)+)\.linux" diff --git a/meta/recipes-devtools/go/go-cross-canadian_1.26.3.bb b/meta/recipes-devtools/go/go-cross-canadian_1.26.4.bb similarity index 100% rename from meta/recipes-devtools/go/go-cross-canadian_1.26.3.bb rename to meta/recipes-devtools/go/go-cross-canadian_1.26.4.bb diff --git a/meta/recipes-devtools/go/go-cross_1.26.3.bb b/meta/recipes-devtools/go/go-cross_1.26.4.bb similarity index 100% rename from meta/recipes-devtools/go/go-cross_1.26.3.bb rename to meta/recipes-devtools/go/go-cross_1.26.4.bb diff --git a/meta/recipes-devtools/go/go-crosssdk_1.26.3.bb b/meta/recipes-devtools/go/go-crosssdk_1.26.4.bb similarity index 100% rename from meta/recipes-devtools/go/go-crosssdk_1.26.3.bb rename to meta/recipes-devtools/go/go-crosssdk_1.26.4.bb diff --git a/meta/recipes-devtools/go/go-runtime_1.26.3.bb b/meta/recipes-devtools/go/go-runtime_1.26.4.bb similarity index 100% rename from meta/recipes-devtools/go/go-runtime_1.26.3.bb rename to meta/recipes-devtools/go/go-runtime_1.26.4.bb diff --git a/meta/recipes-devtools/go/go_1.26.3.bb b/meta/recipes-devtools/go/go_1.26.4.bb similarity index 100% rename from meta/recipes-devtools/go/go_1.26.3.bb rename to meta/recipes-devtools/go/go_1.26.4.bb From patchwork Wed Jun 10 22:55:07 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 89721 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 88DCDCD98D1 for ; Wed, 10 Jun 2026 22:55:30 +0000 (UTC) Received: from mail-wr1-f43.google.com (mail-wr1-f43.google.com [209.85.221.43]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.33481.1781132127003733006 for ; Wed, 10 Jun 2026 15:55:27 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=3NubVih1; spf=pass (domain: smile.fr, ip: 209.85.221.43, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f43.google.com with SMTP id ffacd0b85a97d-45ee5cdbd28so185417f8f.1 for ; Wed, 10 Jun 2026 15:55:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1781132125; x=1781736925; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=pKF1kRu5cREApXAWj3HIRbpZ+CtXwQCjFLVBszOuBhQ=; b=3NubVih1VlqOrLuzw5JyYnPPkKrvdTfOYIAmzUr19xb3/Oc32scIAIYmxTw7M7oHPn MNCaz6ZRvM/ee/7Uz9aqBX/cZsqjkHOngTF8qL3B5izvnbrBHtgK47iTFl6b1dhsawpj 70xva3U6RLGjE3dkzLde6hCdLfrS4oyVIXUIY= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1781132125; x=1781736925; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=pKF1kRu5cREApXAWj3HIRbpZ+CtXwQCjFLVBszOuBhQ=; b=E1MxKay5JIw8sFFhDlCWDRQD6LN6vhOYcxglOa2md12P7hI+4/DnL953Nh/ZNBLsT3 rvXGWou5FRFWfCMprMhXE7Vgqw9LaXre5TNR3zihnPXItxxcK/rOHWLkETVFSj3Ydysq ZSzrE9WHlGYV5Ja50svD3KoCQutYRt/SjGlQH2CEvq+qFV4Paqc5bgwYn0P4NJGBabUj 2rc0Bt8r2P3shyISVar4tdmkALj9ZeubK7Ohh48CrFf6qP21hO0qScvHku5woJkDYv5c VXBZ+NMRjf95yomcUwbzfTdJrqAKFHHCAkB2XVZdKLPyelQdd4BB1ZVcp5UkLG/cN0OX 5K+Q== X-Gm-Message-State: AOJu0YwddmvNBfSiE1AnGwXGIT9lFKckj+F99h5oI3ti2mPh2SmKH7N6 YRSSH68fnEv4xZt0FfFion1Y+EIvSkErd0QGSONoBIs2yevsKY6eoKaB/Knj2zqiyrYpjHAdsme EMAda X-Gm-Gg: Acq92OHj2A8P1MwNaHMfcacO4kF2vldzL9JHiD4K2pqD9/dLCyFEtSqvRdkxVNh8PPX mDjLnQwUB35XWbZkBZAeuystk3ukwvLbGxtrbhyZpOib81Vn+Y3P5hIfmbcY97jIVSpyk35e0kr g9vndw0SRbjO2kqX/7ysjsr8LGSfkvoMS+fyBum9oQNk6jk6Cdsp5ruQF+1IGw32x0oMDVP4Btk Hiw9T3qPm8GeDb8Tz5EyFMh6sw6exSIeMN5c98cY+dDeB78yL6EDckLwmDykK+oufAYxHeysgj2 0N9yCz3Z2CBQCao1dlYmwVYHJt5r0FXCLHDK8YLAb8WTYpC4/jBKu4uw+hLY/hj+b/pA5ohMhKy X6hnwr6CBMErcgaxCykXnO3F9E7xxwKiEvFb0hv41zrUZc9GGx40XyUvYOX1NHrghGMeN9ak7Fl JXO1ZotQH1Hm0/iJIw4yMeTaPAtcfL0oEehd/jIp2WlolmgdW5vSAt9YVusJ38tseSr3qYiPzs1 z3K+lCf4Z9fIdl0D3L9q32B1eAr++aBw5KjHZIG0CS0haHbFA== X-Received: by 2002:a05:6000:2f82:b0:45e:73a1:8d04 with SMTP id ffacd0b85a97d-46067bf5445mr58340f8f.1.1781132125172; Wed, 10 Jun 2026 15:55:25 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00bb749f54eeb85d7b.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:bb74:9f54:eeb8:5d7b]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4601f344148sm71599304f8f.19.2026.06.10.15.55.24 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 10 Jun 2026 15:55:24 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 16/21] python3: upgrade 3.14.4 -> 3.14.5 Date: Thu, 11 Jun 2026 00:55:07 +0200 Message-ID: <48f91fbb0143eac70846cd16b2001138a9319304.1781132051.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 10 Jun 2026 22:55:30 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/238412 From: Peter Marko Release notes: [1] and [2]. Resolves following CVEs from reports: * CVE-2026-1502 * CVE-2026-3087 (Windows specific) * CVE-2026-3298 (Windows specific) * CVE-2026-4786 (explicitly set, see Debian security tracker) * CVE-2026-5713 (explicitly set, see Debian security tracker) * CVE-2026-6019 (explicitly set, see Debian security tracker) * CVE-2026-6100 (explicitly set, see Debian security tracker) Also some security issues without CVE assignment. Refresh patches. [1] https://docs.python.org/3/whatsnew/changelog.html#python-3-14-5-final [2] https://docs.python.org/3/whatsnew/changelog.html#python-3-14-5-release-candidate-1 (From OE-Core rev: 0df68073ebaecb968448dcf516b9085efadc6d29) Signed-off-by: Peter Marko Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie Signed-off-by: Peter Marko Signed-off-by: Yoann Congal --- ...01-Avoid-shebang-overflow-on-python-config.py.patch | 2 +- ....py-handle-stdin-I-O-errors-same-way-as-maste.patch | 2 +- ...e.pre-use-qemu-wrapper-when-gathering-profile.patch | 2 +- ...ailing-tests-due-to-load-variability-on-YP-AB.patch | 10 +++++----- .../0001-Skip-flaky-test_default_timeout-tests.patch | 4 ++-- ...-Update-test_sysconfig-for-posix_user-purelib.patch | 2 +- ...no_stdout_fileno-test-due-to-load-variability.patch | 2 +- ...01-test_active_children-skip-problematic-test.patch | 2 +- .../0001-test_cmd-skip-bang-completion-test.patch | 2 +- ...-test_ctypes.test_find-skip-without-tools-sdk.patch | 2 +- ...test_locale.py-correct-the-test-output-format.patch | 2 +- ...test_only_active_thread-skip-problematic-test.patch | 2 +- ...repl-skip-test_unix_console.test_cursor_back_.patch | 2 +- .../0001-test_readline-skip-limited-history-test.patch | 6 +++--- ...sconfig-skip-test_sysconfig.test_sysconfigdat.patch | 2 +- meta/recipes-devtools/python/python3/makerace.patch | 2 +- .../python/{python3_3.14.4.bb => python3_3.14.5.bb} | 8 ++++++-- 17 files changed, 29 insertions(+), 25 deletions(-) rename meta/recipes-devtools/python/{python3_3.14.4.bb => python3_3.14.5.bb} (98%) diff --git a/meta/recipes-devtools/python/python3/0001-Avoid-shebang-overflow-on-python-config.py.patch b/meta/recipes-devtools/python/python3/0001-Avoid-shebang-overflow-on-python-config.py.patch index eaf5ea50496..c2106f94370 100644 --- a/meta/recipes-devtools/python/python3/0001-Avoid-shebang-overflow-on-python-config.py.patch +++ b/meta/recipes-devtools/python/python3/0001-Avoid-shebang-overflow-on-python-config.py.patch @@ -19,7 +19,7 @@ diff --git a/Makefile.pre.in b/Makefile.pre.in index 9ec3a71..f7d5382 100644 --- a/Makefile.pre.in +++ b/Makefile.pre.in -@@ -2585,6 +2585,8 @@ python-config: $(srcdir)/Misc/python-config.in Misc/python-config.sh +@@ -2829,6 +2829,8 @@ python-config: $(srcdir)/Misc/python-config.in Misc/python-config.sh @ # Substitution happens here, as the completely-expanded BINDIR @ # is not available in configure sed -e "s,@EXENAME@,$(EXENAME)," < $(srcdir)/Misc/python-config.in >python-config.py diff --git a/meta/recipes-devtools/python/python3/0001-Lib-pty.py-handle-stdin-I-O-errors-same-way-as-maste.patch b/meta/recipes-devtools/python/python3/0001-Lib-pty.py-handle-stdin-I-O-errors-same-way-as-maste.patch index 84ad2abb0bc..d9072a36f7b 100644 --- a/meta/recipes-devtools/python/python3/0001-Lib-pty.py-handle-stdin-I-O-errors-same-way-as-maste.patch +++ b/meta/recipes-devtools/python/python3/0001-Lib-pty.py-handle-stdin-I-O-errors-same-way-as-maste.patch @@ -32,7 +32,7 @@ diff --git a/Lib/pty.py b/Lib/pty.py index 1d97994..fa8821b 100644 --- a/Lib/pty.py +++ b/Lib/pty.py -@@ -178,7 +178,10 @@ def _copy(master_fd, master_read=_read, stdin_read=_read): +@@ -149,7 +149,10 @@ def _copy(master_fd, master_read=_read, stdin_read=_read): i_buf = i_buf[n:] if stdin_avail and STDIN_FILENO in rfds: diff --git a/meta/recipes-devtools/python/python3/0001-Makefile.pre-use-qemu-wrapper-when-gathering-profile.patch b/meta/recipes-devtools/python/python3/0001-Makefile.pre-use-qemu-wrapper-when-gathering-profile.patch index 39b62f6f26b..e25797f57ec 100644 --- a/meta/recipes-devtools/python/python3/0001-Makefile.pre-use-qemu-wrapper-when-gathering-profile.patch +++ b/meta/recipes-devtools/python/python3/0001-Makefile.pre-use-qemu-wrapper-when-gathering-profile.patch @@ -18,7 +18,7 @@ diff --git a/Makefile.pre.in b/Makefile.pre.in index 3bd4495f95b..8e8fc60bc76 100644 --- a/Makefile.pre.in +++ b/Makefile.pre.in -@@ -751,8 +751,7 @@ profile-run-stamp: +@@ -857,8 +857,7 @@ profile-run-stamp: # enabled. $(MAKE) profile-gen-stamp # Next, run the profile task to generate the profile information. diff --git a/meta/recipes-devtools/python/python3/0001-Skip-failing-tests-due-to-load-variability-on-YP-AB.patch b/meta/recipes-devtools/python/python3/0001-Skip-failing-tests-due-to-load-variability-on-YP-AB.patch index 4a35e8854e1..a236268efb2 100644 --- a/meta/recipes-devtools/python/python3/0001-Skip-failing-tests-due-to-load-variability-on-YP-AB.patch +++ b/meta/recipes-devtools/python/python3/0001-Skip-failing-tests-due-to-load-variability-on-YP-AB.patch @@ -30,7 +30,7 @@ diff --git a/Lib/test/_test_multiprocessing.py b/Lib/test/_test_multiprocessing. index 9a72362c022..008e6a505a5 100644 --- a/Lib/test/_test_multiprocessing.py +++ b/Lib/test/_test_multiprocessing.py -@@ -722,6 +722,7 @@ def test_close(self): +@@ -774,6 +774,7 @@ class _TestProcess(BaseTestCase): close_queue(q) @support.requires_resource('walltime') @@ -38,7 +38,7 @@ index 9a72362c022..008e6a505a5 100644 def test_many_processes(self): if self.TYPE == 'threads': self.skipTest('test not appropriate for {}'.format(self.TYPE)) -@@ -2345,6 +2346,7 @@ def _test_timeout_f(cls, barrier, results): +@@ -2398,6 +2399,7 @@ class _TestBarrier(BaseTestCase): except threading.BrokenBarrierError: results.append(True) @@ -46,7 +46,7 @@ index 9a72362c022..008e6a505a5 100644 def test_timeout(self): """ Test wait(timeout) -@@ -5459,6 +5461,7 @@ def signal_and_sleep(cls, sem, period): +@@ -5550,6 +5552,7 @@ class TestWait(unittest.TestCase): time.sleep(period) @support.requires_resource('walltime') @@ -58,7 +58,7 @@ diff --git a/Lib/test/test_time.py b/Lib/test/test_time.py index 5312faa5077..36873d9a400 100644 --- a/Lib/test/test_time.py +++ b/Lib/test/test_time.py -@@ -548,6 +548,7 @@ def test_monotonic(self): +@@ -548,6 +548,7 @@ class TimeTestCase(unittest.TestCase): def test_perf_counter(self): time.perf_counter() @@ -66,7 +66,7 @@ index 5312faa5077..36873d9a400 100644 @unittest.skipIf( support.is_wasi, "process_time not available on WASI" ) -@@ -567,6 +568,7 @@ def test_process_time(self): +@@ -567,6 +568,7 @@ class TimeTestCase(unittest.TestCase): self.assertTrue(info.monotonic) self.assertFalse(info.adjustable) diff --git a/meta/recipes-devtools/python/python3/0001-Skip-flaky-test_default_timeout-tests.patch b/meta/recipes-devtools/python/python3/0001-Skip-flaky-test_default_timeout-tests.patch index 4e1bd833b46..d41037f9ea9 100644 --- a/meta/recipes-devtools/python/python3/0001-Skip-flaky-test_default_timeout-tests.patch +++ b/meta/recipes-devtools/python/python3/0001-Skip-flaky-test_default_timeout-tests.patch @@ -27,7 +27,7 @@ diff --git a/Lib/test/_test_multiprocessing.py b/Lib/test/_test_multiprocessing. index e8064e7..9ab1f9e 100644 --- a/Lib/test/_test_multiprocessing.py +++ b/Lib/test/_test_multiprocessing.py -@@ -2259,6 +2259,7 @@ class _TestBarrier(BaseTestCase): +@@ -2424,6 +2424,7 @@ class _TestBarrier(BaseTestCase): """ Test the barrier's default timeout """ @@ -39,7 +39,7 @@ diff --git a/Lib/test/lock_tests.py b/Lib/test/lock_tests.py index 8c8f890..43e9b90 100644 --- a/Lib/test/lock_tests.py +++ b/Lib/test/lock_tests.py -@@ -1165,6 +1165,7 @@ class BarrierTests(BaseTestCase): +@@ -1215,6 +1215,7 @@ class BarrierTests(BaseTestCase): """ Test the barrier's default timeout """ diff --git a/meta/recipes-devtools/python/python3/0001-Update-test_sysconfig-for-posix_user-purelib.patch b/meta/recipes-devtools/python/python3/0001-Update-test_sysconfig-for-posix_user-purelib.patch index adaca4ff779..6a62c6dc5b9 100644 --- a/meta/recipes-devtools/python/python3/0001-Update-test_sysconfig-for-posix_user-purelib.patch +++ b/meta/recipes-devtools/python/python3/0001-Update-test_sysconfig-for-posix_user-purelib.patch @@ -25,7 +25,7 @@ diff --git a/Lib/test/test_sysconfig.py b/Lib/test/test_sysconfig.py index 1ade492..4e94889 100644 --- a/Lib/test/test_sysconfig.py +++ b/Lib/test/test_sysconfig.py -@@ -430,7 +430,7 @@ class TestSysConfig(unittest.TestCase): +@@ -434,7 +434,7 @@ class TestSysConfig(unittest.TestCase, VirtualEnvironmentMixin): expected = os.path.normpath(global_path.replace(base, user, 1)) # bpo-44860: platlib of posix_user doesn't use sys.platlibdir, # whereas posix_prefix does. diff --git a/meta/recipes-devtools/python/python3/0001-skip-no_stdout_fileno-test-due-to-load-variability.patch b/meta/recipes-devtools/python/python3/0001-skip-no_stdout_fileno-test-due-to-load-variability.patch index 9bc8b091cc6..b186bdcb880 100644 --- a/meta/recipes-devtools/python/python3/0001-skip-no_stdout_fileno-test-due-to-load-variability.patch +++ b/meta/recipes-devtools/python/python3/0001-skip-no_stdout_fileno-test-due-to-load-variability.patch @@ -19,7 +19,7 @@ diff --git a/Lib/test/test_builtin.py b/Lib/test/test_builtin.py index c5394de..ed17fb6 100644 --- a/Lib/test/test_builtin.py +++ b/Lib/test/test_builtin.py -@@ -2474,6 +2474,7 @@ class PtyTests(unittest.TestCase): +@@ -2738,6 +2738,7 @@ class PtyTests(unittest.TestCase): "byte 0xe9 in position 4: ordinal not in " "range(128)") diff --git a/meta/recipes-devtools/python/python3/0001-test_active_children-skip-problematic-test.patch b/meta/recipes-devtools/python/python3/0001-test_active_children-skip-problematic-test.patch index 80aa29faf0e..d7202aa5757 100644 --- a/meta/recipes-devtools/python/python3/0001-test_active_children-skip-problematic-test.patch +++ b/meta/recipes-devtools/python/python3/0001-test_active_children-skip-problematic-test.patch @@ -21,7 +21,7 @@ diff --git a/Lib/test/_test_multiprocessing.py b/Lib/test/_test_multiprocessing. index 008e6a505a5..746de8945f0 100644 --- a/Lib/test/_test_multiprocessing.py +++ b/Lib/test/_test_multiprocessing.py -@@ -615,6 +615,7 @@ def test_cpu_count(self): +@@ -667,6 +667,7 @@ class _TestProcess(BaseTestCase): self.assertIsInstance(cpus, int) self.assertGreaterEqual(cpus, 1) diff --git a/meta/recipes-devtools/python/python3/0001-test_cmd-skip-bang-completion-test.patch b/meta/recipes-devtools/python/python3/0001-test_cmd-skip-bang-completion-test.patch index d339e8c1981..f1ba044cc33 100644 --- a/meta/recipes-devtools/python/python3/0001-test_cmd-skip-bang-completion-test.patch +++ b/meta/recipes-devtools/python/python3/0001-test_cmd-skip-bang-completion-test.patch @@ -18,7 +18,7 @@ diff --git a/Lib/test/test_cmd.py b/Lib/test/test_cmd.py index dbfec42fc21..c33dab8d10d 100644 --- a/Lib/test/test_cmd.py +++ b/Lib/test/test_cmd.py -@@ -295,6 +295,7 @@ def do_tab_completion_test(self, args): +@@ -295,6 +295,7 @@ class CmdTestReadline(unittest.TestCase): self.assertIn(b'ab_completion_test', output) self.assertIn(b'tab completion success', output) diff --git a/meta/recipes-devtools/python/python3/0001-test_ctypes.test_find-skip-without-tools-sdk.patch b/meta/recipes-devtools/python/python3/0001-test_ctypes.test_find-skip-without-tools-sdk.patch index 68e277d662e..cdcd9302d61 100644 --- a/meta/recipes-devtools/python/python3/0001-test_ctypes.test_find-skip-without-tools-sdk.patch +++ b/meta/recipes-devtools/python/python3/0001-test_ctypes.test_find-skip-without-tools-sdk.patch @@ -18,7 +18,7 @@ diff --git a/Lib/test/test_ctypes/test_find.py b/Lib/test/test_ctypes/test_find. index 85b2861..b033203 100644 --- a/Lib/test/test_ctypes/test_find.py +++ b/Lib/test/test_ctypes/test_find.py -@@ -116,10 +116,12 @@ class FindLibraryLinux(unittest.TestCase): +@@ -117,10 +117,12 @@ class FindLibraryLinux(unittest.TestCase): # LD_LIBRARY_PATH) self.assertEqual(find_library(libname), 'lib%s.so' % libname) diff --git a/meta/recipes-devtools/python/python3/0001-test_locale.py-correct-the-test-output-format.patch b/meta/recipes-devtools/python/python3/0001-test_locale.py-correct-the-test-output-format.patch index 189246911b4..201271b0c07 100644 --- a/meta/recipes-devtools/python/python3/0001-test_locale.py-correct-the-test-output-format.patch +++ b/meta/recipes-devtools/python/python3/0001-test_locale.py-correct-the-test-output-format.patch @@ -34,7 +34,7 @@ diff --git a/Lib/test/test_locale.py b/Lib/test/test_locale.py index da4bd79..fd9e67d 100644 --- a/Lib/test/test_locale.py +++ b/Lib/test/test_locale.py -@@ -501,7 +501,7 @@ class TestRealLocales(unittest.TestCase): +@@ -500,7 +500,7 @@ class TestRealLocales(unittest.TestCase): self.skipTest('test needs Turkish locale') loc = locale.getlocale(locale.LC_CTYPE) if verbose: diff --git a/meta/recipes-devtools/python/python3/0001-test_only_active_thread-skip-problematic-test.patch b/meta/recipes-devtools/python/python3/0001-test_only_active_thread-skip-problematic-test.patch index 4886b7e3863..bc436e077a6 100644 --- a/meta/recipes-devtools/python/python3/0001-test_only_active_thread-skip-problematic-test.patch +++ b/meta/recipes-devtools/python/python3/0001-test_only_active_thread-skip-problematic-test.patch @@ -17,7 +17,7 @@ diff --git a/Lib/test/test_external_inspection.py b/Lib/test/test_external_inspe index a709b837161..7a87092c10e 100644 --- a/Lib/test/test_external_inspection.py +++ b/Lib/test/test_external_inspection.py -@@ -1111,6 +1111,7 @@ def test_self_trace(self): +@@ -1154,6 +1154,7 @@ class TestGetStackTrace(unittest.TestCase): ], ) diff --git a/meta/recipes-devtools/python/python3/0001-test_pyrepl-skip-test_unix_console.test_cursor_back_.patch b/meta/recipes-devtools/python/python3/0001-test_pyrepl-skip-test_unix_console.test_cursor_back_.patch index e886c046cb7..97f78712668 100644 --- a/meta/recipes-devtools/python/python3/0001-test_pyrepl-skip-test_unix_console.test_cursor_back_.patch +++ b/meta/recipes-devtools/python/python3/0001-test_pyrepl-skip-test_unix_console.test_cursor_back_.patch @@ -33,7 +33,7 @@ diff --git a/Lib/test/test_pyrepl/test_unix_console.py b/Lib/test/test_pyrepl/te index 3b0d2637dab..5a3c8952f61 100644 --- a/Lib/test/test_pyrepl/test_unix_console.py +++ b/Lib/test/test_pyrepl/test_unix_console.py -@@ -172,6 +172,7 @@ def test_cursor_up_down(self, _os_write): +@@ -186,6 +186,7 @@ class TestConsole(TestCase): _os_write.assert_any_call(ANY, TERM_CAPABILITIES["cud"] + b":1") con.restore() diff --git a/meta/recipes-devtools/python/python3/0001-test_readline-skip-limited-history-test.patch b/meta/recipes-devtools/python/python3/0001-test_readline-skip-limited-history-test.patch index a619d51c108..c59c6672e0c 100644 --- a/meta/recipes-devtools/python/python3/0001-test_readline-skip-limited-history-test.patch +++ b/meta/recipes-devtools/python/python3/0001-test_readline-skip-limited-history-test.patch @@ -20,7 +20,7 @@ diff --git a/Lib/test/test_readline.py b/Lib/test/test_readline.py index 537a9fb..ddf0323 100644 --- a/Lib/test/test_readline.py +++ b/Lib/test/test_readline.py -@@ -71,6 +71,7 @@ class TestHistoryManipulation (unittest.TestCase): +@@ -74,6 +74,7 @@ class TestHistoryManipulation (unittest.TestCase): @unittest.skipUnless(hasattr(readline, "append_history_file"), "append_history not available") @@ -28,7 +28,7 @@ index 537a9fb..ddf0323 100644 def test_write_read_append(self): hfile = tempfile.NamedTemporaryFile(delete=False) hfile.close() -@@ -142,6 +143,7 @@ class TestHistoryManipulation (unittest.TestCase): +@@ -145,6 +146,7 @@ class TestHistoryManipulation (unittest.TestCase): self.assertEqual(readline.get_history_item(1), "entrée 1") self.assertEqual(readline.get_history_item(2), "entrée 22") @@ -36,7 +36,7 @@ index 537a9fb..ddf0323 100644 def test_write_read_limited_history(self): previous_length = readline.get_history_length() self.addCleanup(readline.set_history_length, previous_length) -@@ -390,6 +392,7 @@ readline.write_history_file(history_file) +@@ -393,6 +395,7 @@ readline.write_history_file(history_file) self.assertIn(b"done", output) diff --git a/meta/recipes-devtools/python/python3/0001-test_sysconfig-skip-test_sysconfig.test_sysconfigdat.patch b/meta/recipes-devtools/python/python3/0001-test_sysconfig-skip-test_sysconfig.test_sysconfigdat.patch index 0fe9399bf1e..6dfba59a449 100644 --- a/meta/recipes-devtools/python/python3/0001-test_sysconfig-skip-test_sysconfig.test_sysconfigdat.patch +++ b/meta/recipes-devtools/python/python3/0001-test_sysconfig-skip-test_sysconfig.test_sysconfigdat.patch @@ -19,7 +19,7 @@ diff --git a/Lib/test/test_sysconfig.py b/Lib/test/test_sysconfig.py index 09eff11179e..14fcdedccba 100644 --- a/Lib/test/test_sysconfig.py +++ b/Lib/test/test_sysconfig.py -@@ -685,6 +685,7 @@ def test_makefile_overwrites_config_vars(self): +@@ -689,6 +689,7 @@ class TestSysConfig(unittest.TestCase, VirtualEnvironmentMixin): self.assertNotEqual(data['prefix'], data['base_prefix']) self.assertNotEqual(data['exec_prefix'], data['base_exec_prefix']) diff --git a/meta/recipes-devtools/python/python3/makerace.patch b/meta/recipes-devtools/python/python3/makerace.patch index bf73135e096..b29ea56cc34 100644 --- a/meta/recipes-devtools/python/python3/makerace.patch +++ b/meta/recipes-devtools/python/python3/makerace.patch @@ -20,7 +20,7 @@ diff --git a/Makefile.pre.in b/Makefile.pre.in index be1b9ea..9ec3a71 100644 --- a/Makefile.pre.in +++ b/Makefile.pre.in -@@ -2492,7 +2492,7 @@ COMPILEALL_OPTS=-j0 +@@ -2735,7 +2735,7 @@ COMPILEALL_OPTS=-j0 TEST_MODULES=@TEST_MODULES@ .PHONY: libinstall diff --git a/meta/recipes-devtools/python/python3_3.14.4.bb b/meta/recipes-devtools/python/python3_3.14.5.bb similarity index 98% rename from meta/recipes-devtools/python/python3_3.14.4.bb rename to meta/recipes-devtools/python/python3_3.14.5.bb index 71f590f630f..b5c1d6fb3e8 100644 --- a/meta/recipes-devtools/python/python3_3.14.4.bb +++ b/meta/recipes-devtools/python/python3_3.14.5.bb @@ -40,8 +40,7 @@ SRC_URI:append:class-native = " \ file://0001-Lib-sysconfig.py-use-prefix-value-from-build-configu.patch \ " -SRC_URI[sha256sum] = "a97d5549e9ad81fe17159ed02c68774ad5d266c72f8d9a0b5a9c371fe85d902b" -SRC_URI[sha256sum] = "d923c51303e38e249136fc1bdf3568d56ecb03214efdef48516176d3d7faaef8" +SRC_URI[sha256sum] = "7e32597b99e5d9a39abed35de4693fa169df3e5850d4c334337ffd6a19a36db6" # exclude pre-releases for both python 2.x and 3.x UPSTREAM_CHECK_REGEX = "[Pp]ython-(?P\d+(\.\d+)+).tar" @@ -522,3 +521,8 @@ SYSROOT_PREPROCESS_FUNCS += " py3_sysroot_cleanup" py3_sysroot_cleanup () { rm -rf ${SYSROOT_DESTDIR}${libdir}/python${PYTHON_MAJMIN}/test } + +CVE_STATUS[CVE-2026-4786] = "cpe-stable-backport: backported to v3.14.5" +CVE_STATUS[CVE-2026-5713] = "cpe-stable-backport: backported to v3.14.5" +CVE_STATUS[CVE-2026-6019] = "cpe-stable-backport: backported to v3.14.5" +CVE_STATUS[CVE-2026-6100] = "cpe-stable-backport: backported to v3.14.5" From patchwork Wed Jun 10 22:55:08 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 89718 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 6F855CD98D0 for ; Wed, 10 Jun 2026 22:55:30 +0000 (UTC) Received: from mail-wr1-f41.google.com (mail-wr1-f41.google.com [209.85.221.41]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.33482.1781132127441091381 for ; Wed, 10 Jun 2026 15:55:27 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=Zpf3MJQ/; spf=pass (domain: smile.fr, ip: 209.85.221.41, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f41.google.com with SMTP id ffacd0b85a97d-460662fcb4eso129186f8f.0 for ; Wed, 10 Jun 2026 15:55:27 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1781132126; x=1781736926; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=+bByv8hoKVVBWt07k0wkvzNkg0Rs9zm4lW3vnGlNBdI=; b=Zpf3MJQ/EqkNML4yl+3vguQWTGzwNG/W3/3ntj0IDim65atloQHFqo/yZwBfamK8rc 5LUcj57xlNJjHS7xkcp1uSh28ZerOs59EdiR0JFR5cPZ2z3+ODLNtI8icU6/8QdzXMca 3zCEsW4RQ4rRTYQIdWqfnZDWmJ9kuRznY8BtM= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1781132126; x=1781736926; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=+bByv8hoKVVBWt07k0wkvzNkg0Rs9zm4lW3vnGlNBdI=; b=HAvKyeRiZx98I+gixvLAoOyqZLEHDf3St3lRfnP2rBOZdXBHMD6XL9IXuv7dExOr7H 01LRWOM/NuaxTiUaWayLyYFJgAGs/j6rMDp+mMkJgDuQerSqcfc7p7kwB0B8+VfIXhbq zgLclbV/MIQw+bCUj2u/YRfPVFbMcVuJbI0xUGBiPgk4gRNVGW4Hor2mIci1cuYqM2LR gMYxpNEkOJ6KJQUsGjBkIMaia4hTak6Daz25dz9PSfbw8xOUJ0IyRhHVcJhCQHXXjm4O qnPw8MYv9vSvVAKjP+5FLP4+S+ef8fy3FDxhcEoG4HM5sS/aWnTxhOIx+BU90AdgJB12 gjZw== X-Gm-Message-State: AOJu0YyXEkBFxwbsRaDYBn9UKhiCbS4gcL4BjZ1qFG7qW4UGfvQDF4mr 9tUMgthlaZqT+Cu6zq6U7nS4n3CMIY90EyEHlicy7OQALMWW0rqnJJcjXmqk/aJ+TEsCHMM0RcY F/jkS X-Gm-Gg: Acq92OGuo1MURYgjDdY8YC6g8xGSB546JbburHyJkvSPqnEtdJuxmQ9SBqPeGFhBVif p2ktsemH1eCt8F0XvvrOhGaXIXdQjXhOx2HKfI7gu5TZX8HoFMEeSdfvarIH7PU7Gx7w48jir+k ImQlQy+dL7hQDI5Y92yi+MIKsvotFAYEZsCkV/A/dNo1cxeUxN7ZAnkil3PE+vlX/vG56OO+OsK QYt6D76mjsU3oHwvnPrFW/eRkvPivCOwpboVJxVLh+Z0MEV8sw+an2Bb1mnkH1wX/t1U39Msodc sT29FaBllfnyUNM9ZqRTxdtMhaqKe7piawWkMi+2eIsJ3oQsEXFy3qk9IeXz8b1t2xUTcbbW2IB YfHZbas+NxzQlojeXeyh1xPNDi7wlFs0hYUN9OHMb3yn7glBEp1mOKit47nyxW6S6Ceq/Fl6Z6G BFmbF9/qPGZaz+iJPby5B3AbNYUi5NAABopUxW9ogWda6L8LMh9w+gRnIdEL+/ZCO+J2ukFE3VQ 9i9NUn05/KTgr69B9YpuC3UnkQMw3v5Wv3yCOrFgQb7zQkI7w== X-Received: by 2002:a05:6000:480b:b0:45e:ebec:2542 with SMTP id ffacd0b85a97d-460677d4dfamr235771f8f.30.1781132125701; Wed, 10 Jun 2026 15:55:25 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00bb749f54eeb85d7b.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:bb74:9f54:eeb8:5d7b]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4601f344148sm71599304f8f.19.2026.06.10.15.55.25 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 10 Jun 2026 15:55:25 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 17/21] python3: Fix ThreadingMock call_count race condition Date: Thu, 11 Jun 2026 00:55:08 +0200 Message-ID: <8e4051bd56be7f399e51fbc7def518fa1270303c.1781132051.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 10 Jun 2026 22:55:30 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/238413 From: Sai Sneha ThreadingMock._increment_mock_call() was not thread-safe causing intermittent ptest failures on qemuarm64: FAIL: test_call_count_thread_safe AssertionError: 983 != 1000 Each time a mock is called, Python reads the call_count, adds 1, and writes it back. When multiple threads do this simultaneously, some increments get lost because two threads can read the same value before either writes back. The fix adds a lock around this operation in ThreadingMock so only one thread can update call_count at a time. Reproduction and testing: - x86 stress test (50 threads x 10000 calls x 30 runs): Before fix: 23/30 failures, missing up to 42095 calls After fix: 0/30 failures - qemuarm64 (10 threads x 100 calls x 20 runs): Before fix: 3/20 failures, missing up to 49 calls After fix: 0/20 failures - All 19 existing ThreadingMock tests pass Upstream fix merged into CPython main: https://github.com/python/cpython/pull/150176 Fixes [YOCTO #16213] (From OE-Core rev: 6f7af3f76c8ce0a77ddc779a850071a714caff33) Signed-off-by: Sai Sneha Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie Signed-off-by: Peter Marko Signed-off-by: Yoann Congal --- ...eadingMock-call-count-race-condition.patch | 37 +++++++++++++++++++ .../recipes-devtools/python/python3_3.14.5.bb | 1 + 2 files changed, 38 insertions(+) create mode 100644 meta/recipes-devtools/python/python3/0001-Fix-ThreadingMock-call-count-race-condition.patch diff --git a/meta/recipes-devtools/python/python3/0001-Fix-ThreadingMock-call-count-race-condition.patch b/meta/recipes-devtools/python/python3/0001-Fix-ThreadingMock-call-count-race-condition.patch new file mode 100644 index 00000000000..aba3188a59a --- /dev/null +++ b/meta/recipes-devtools/python/python3/0001-Fix-ThreadingMock-call-count-race-condition.patch @@ -0,0 +1,37 @@ +From 388e023fe1197c1ffed374520ed45df4ac72b8f5 Mon Sep 17 00:00:00 2001 +From: Sai Sneha +Date: Thu, 21 May 2026 13:08:07 +0530 +Subject: [PATCH] Fix ThreadingMock call_count race condition + +ThreadingMock._increment_mock_call() was not thread-safe. +Multiple threads calling the mock simultaneously could lose +increments due to race conditions on call_count and other +attributes. + +Fix by overriding _increment_mock_call in ThreadingMixin +and wrapping it with the existing _mock_calls_events_lock. + +Upstream-Status: Backport [https://github.com/python/cpython/pull/150176] + +Signed-off-by: Sai Sneha +--- + Lib/unittest/mock.py | 4 ++++ + 1 file changed, 4 insertions(+) + +diff --git a/Lib/unittest/mock.py b/Lib/unittest/mock.py +index 16f3699e89..56cdc37942 100644 +--- a/Lib/unittest/mock.py ++++ b/Lib/unittest/mock.py +@@ -3113,6 +3113,10 @@ def _mock_call(self, *args, **kwargs): + + return ret_value + ++ def _increment_mock_call(self, /, *args, **kwargs): ++ with self._mock_calls_events_lock: ++ super()._increment_mock_call(*args, **kwargs) ++ + def wait_until_called(self, *, timeout=_timeout_unset): + """Wait until the mock object is called. + +-- +2.34.1 diff --git a/meta/recipes-devtools/python/python3_3.14.5.bb b/meta/recipes-devtools/python/python3_3.14.5.bb index b5c1d6fb3e8..9e6738997d6 100644 --- a/meta/recipes-devtools/python/python3_3.14.5.bb +++ b/meta/recipes-devtools/python/python3_3.14.5.bb @@ -35,6 +35,7 @@ SRC_URI = "http://www.python.org/ftp/python/${PV}/Python-${PV}.tar.xz \ file://0001-Skip-flaky-test_default_timeout-tests.patch \ file://0001-test_only_active_thread-skip-problematic-test.patch \ file://0001-prefer-valid-entrypoints.patch \ + file://0001-Fix-ThreadingMock-call-count-race-condition.patch \ " SRC_URI:append:class-native = " \ file://0001-Lib-sysconfig.py-use-prefix-value-from-build-configu.patch \ From patchwork Wed Jun 10 22:55:09 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 89722 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 3FBFECD98CF for ; Wed, 10 Jun 2026 22:55:30 +0000 (UTC) Received: from mail-wr1-f47.google.com (mail-wr1-f47.google.com [209.85.221.47]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.33483.1781132128516521059 for ; Wed, 10 Jun 2026 15:55:28 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=mPGNg+ZN; spf=pass (domain: smile.fr, ip: 209.85.221.47, mailfrom: yoann.congal@smile.fr) Received: by mail-wr1-f47.google.com with SMTP id ffacd0b85a97d-4602e2a0372so5358520f8f.3 for ; Wed, 10 Jun 2026 15:55:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1781132127; x=1781736927; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=PNM0N3TpVH+oJUeThj0SeMfXD56GX2A7/KCskRmjd4E=; b=mPGNg+ZN6+QLoKwjdv5OdVmhPkkZasC+TLUbfjgur7y247XJYZIbl9V5huPC/l9v7t of+NzB+TZuPe3pD7zGo9MzLH++oYekQ2QrD52LCgpeXUEuWHcpcSiKr60EGgevGixauZ 9n6AnhMw1gu4INCrDYMiE1i+6u0/aatbF0QPQ= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1781132127; x=1781736927; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=PNM0N3TpVH+oJUeThj0SeMfXD56GX2A7/KCskRmjd4E=; b=d9RtH5CiomFhCca0x4JlQluGPUKxsXvl7WzDzp/oEqTH84unjrkx57SwDiNScDIeUY JzxKR46yWArLWywpi/6yr7lTcKxIMWmKu9ooV3dUtU9TlkRIqZDU5ObG2HdrsLbRww8I 39a0EW/sdQvCpSWtCv/wVXpNqFj3P813p0+2vDIfNPjA/rjC+xfvFgu5tVVTsPt8/zcX qR6LZEUPK0SL1IMGyhsaegQIek5OtCgQ0KDehR2xh40tekEbxhpnAwMuqI8fOzQFXUun T4rBReAFbraQjcca13n8hF9EAP/DL+V20QcxX6XxQAQexvgxR7vsQpJwehvQlDESpIFy N2tg== X-Gm-Message-State: AOJu0YxfC3c+2w9HFB2F0ry+2fQj4JVJx+StO1AkHqIqvZZzUEz0srQy 0IDrXr1nnDgU5w8MNrTGkPXpAoOYHOA+NKk5e9Rkq5xbwW7/D0mTSTx6Blrl3heYUTqvwYvmE3b qL3w1 X-Gm-Gg: Acq92OGCHbXrudeKDDNQCmmGqMyiQhyWEjkNyOTZ1wivfmzGPeN6fWU/M/p0xQS296j FZ+7zVX36ZTQ2Rx1NQwU3r1eGwUhkZp5Hgw1Y/3X3fmQF8t3HXd8ZU8PD1bCEgKSV67IAtd5U2r JMotpvw/5EbpAvOLjigk5vYM+aCVzdtxIMGEbAy6fTWyfIz2FuGtv3cxwA9EeUZ91nLFPRBQKfq Zq76gaHfcA9BWM+Yj3Pbt6GaJ+KgYjD5APqq/gd3t7v2CV+9UpaBrrX/hLr2ZUhGAw3tfpnbwRv ZK3jq3FERabI3ZZQ2oVad9GI24IsYYr7lX7c+rNYB/+9vCjlI8/r7RUSohO5ygy48VYHS3zJ/Lv UfXH9PKYrRgIBXwJH671VE0oN/qK17CaE8iUErC2XR4KnXxP8mnLZTfAP34VcYkHdYNRt091lBO HvUwNAfaNsdTcNKXXldxUz5lOEL0Td0QMTt8KAZGUKqW2vkUqgWEEI1ej7W6z6OUuVCbHfEou2r hS8lJ7iT85w2TG1mLvQJT5YIXf2FZena2HCb9k= X-Received: by 2002:a05:6000:43cc:20b0:460:42c:1133 with SMTP id ffacd0b85a97d-460674760f2mr197731f8f.14.1781132126405; Wed, 10 Jun 2026 15:55:26 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00bb749f54eeb85d7b.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:bb74:9f54:eeb8:5d7b]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4601f344148sm71599304f8f.19.2026.06.10.15.55.25 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 10 Jun 2026 15:55:25 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 18/21] python3: use SKIPPED_TESTS instead of test skip patches Date: Thu, 11 Jun 2026 00:55:09 +0200 Message-ID: X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 10 Jun 2026 22:55:30 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/238415 From: Trevor Gamblin Drop all 13 patches carried for skipping various known ptest failures and replace them with usage of the SKIPPED_TESTS variable, which we have started doing in recent commits (e.g. 40b0815dc9). Most but not all of the test skips are due to load variability, distinguish between them by using multiple SKIPPED_TESTS:append blocks with comments taken from the patch files indicating their purpose. This adds 62 lines to the Python 3 recipe, but it also means that we no longer have to maintain the patch files across version upgrades, where they often break due to changes in the test modules upstream. Results look the same as those from my last upgrade run: |== Tests result: SUCCESS == | |28 tests skipped: | test.test_asyncio.test_windows_events | test.test_asyncio.test_windows_utils test.test_gdb.test_backtrace | test.test_gdb.test_cfunction test.test_gdb.test_cfunction_full | test.test_gdb.test_misc test.test_gdb.test_pretty_print | test_android test_apple test_asdl_parser test_clinic test_devpoll | test_free_threading test_generated_cases test_idle test_kqueue | test_launcher test_msvcrt test_startfile test_tcl test_tkinter | test_ttk test_ttk_textonly test_turtle test_winapi | test_winconsoleio test_winreg test_wmi | |9 tests skipped (resource denied): | test_curses test_peg_generator test_smtpnet test_socketserver | test_urllib2net test_urllibnet test_winsound test_xpickle | test_zipfile64 | |455 tests OK. | |Total duration: 3 min 9 sec |Total tests: run=47,012 (filtered) skipped=2,336 |Total test files: run=483/492 (filtered) skipped=28 resource_denied=9 |Result: SUCCESS |DURATION: 190 |END: /usr/lib/python3/ptest |2026-05-29T02:22 |STOP: ptest-runner |TOTAL: 1 FAIL: 0 (From OE-Core rev: a8b2baa6020f96468a98200619ec37c460694c4c) Signed-off-by: Trevor Gamblin Signed-off-by: Richard Purdie Signed-off-by: Peter Marko Signed-off-by: Yoann Congal --- ...sts-due-to-load-variability-on-YP-AB.patch | 79 ----------------- ...kip-flaky-test_default_timeout-tests.patch | 49 ----------- ..._fileno-test-due-to-load-variability.patch | 29 ------- ...ctive_children-skip-problematic-test.patch | 34 -------- ...1-test_cmd-skip-bang-completion-test.patch | 31 ------- ...pes.test_find-skip-without-tools-sdk.patch | 33 -------- ...-test_deadlock-skip-problematic-test.patch | 27 ------ ..._active_thread-skip-problematic-test.patch | 30 ------- ...-test_unix_console.test_cursor_back_.patch | 46 ---------- ...t_readline-skip-limited-history-test.patch | 46 ---------- ...-test_shutdown-skip-problematic-test.patch | 43 ---------- ...orlines-skip-due-to-load-variability.patch | 29 ------- ...kip-test_sysconfig.test_sysconfigdat.patch | 32 ------- .../recipes-devtools/python/python3_3.14.5.bb | 84 +++++++++++++++---- 14 files changed, 70 insertions(+), 522 deletions(-) delete mode 100644 meta/recipes-devtools/python/python3/0001-Skip-failing-tests-due-to-load-variability-on-YP-AB.patch delete mode 100644 meta/recipes-devtools/python/python3/0001-Skip-flaky-test_default_timeout-tests.patch delete mode 100644 meta/recipes-devtools/python/python3/0001-skip-no_stdout_fileno-test-due-to-load-variability.patch delete mode 100644 meta/recipes-devtools/python/python3/0001-test_active_children-skip-problematic-test.patch delete mode 100644 meta/recipes-devtools/python/python3/0001-test_cmd-skip-bang-completion-test.patch delete mode 100644 meta/recipes-devtools/python/python3/0001-test_ctypes.test_find-skip-without-tools-sdk.patch delete mode 100644 meta/recipes-devtools/python/python3/0001-test_deadlock-skip-problematic-test.patch delete mode 100644 meta/recipes-devtools/python/python3/0001-test_only_active_thread-skip-problematic-test.patch delete mode 100644 meta/recipes-devtools/python/python3/0001-test_pyrepl-skip-test_unix_console.test_cursor_back_.patch delete mode 100644 meta/recipes-devtools/python/python3/0001-test_readline-skip-limited-history-test.patch delete mode 100644 meta/recipes-devtools/python/python3/0001-test_shutdown-skip-problematic-test.patch delete mode 100644 meta/recipes-devtools/python/python3/0001-test_storlines-skip-due-to-load-variability.patch delete mode 100644 meta/recipes-devtools/python/python3/0001-test_sysconfig-skip-test_sysconfig.test_sysconfigdat.patch diff --git a/meta/recipes-devtools/python/python3/0001-Skip-failing-tests-due-to-load-variability-on-YP-AB.patch b/meta/recipes-devtools/python/python3/0001-Skip-failing-tests-due-to-load-variability-on-YP-AB.patch deleted file mode 100644 index a236268efb2..00000000000 --- a/meta/recipes-devtools/python/python3/0001-Skip-failing-tests-due-to-load-variability-on-YP-AB.patch +++ /dev/null @@ -1,79 +0,0 @@ -From aa32aef19d3a54a25dc16b3b77e29e902ee8abd7 Mon Sep 17 00:00:00 2001 -From: Yi Fan Yu -Date: Thu, 1 Apr 2021 13:08:37 -0700 -Subject: [PATCH] Skip failing tests due to load variability on YP AB - -Skip these tests until AB-INT is solved. - -[YOCTO #14296] - -Upstream-Status: Inappropriate [OE-Specific] - -Signed-off-by: Yi Fan Yu - -Skip two additional tests due to suspected load variability failures. - -[YOCTO #15131] -[YOCTO #15177] - -Signed-off-by: Trevor Gamblin - -Refresh to apply on top of Python 3.14.0. - -Signed-off-by: Trevor Gamblin ---- - Lib/test/_test_multiprocessing.py | 3 +++ - Lib/test/test_time.py | 2 ++ - 2 files changed, 5 insertions(+) - -diff --git a/Lib/test/_test_multiprocessing.py b/Lib/test/_test_multiprocessing.py -index 9a72362c022..008e6a505a5 100644 ---- a/Lib/test/_test_multiprocessing.py -+++ b/Lib/test/_test_multiprocessing.py -@@ -774,6 +774,7 @@ class _TestProcess(BaseTestCase): - close_queue(q) - - @support.requires_resource('walltime') -+ @unittest.skip('timing related test, dependent on load') - def test_many_processes(self): - if self.TYPE == 'threads': - self.skipTest('test not appropriate for {}'.format(self.TYPE)) -@@ -2398,6 +2399,7 @@ class _TestBarrier(BaseTestCase): - except threading.BrokenBarrierError: - results.append(True) - -+ @unittest.skip('timing related test, dependent on load') - def test_timeout(self): - """ - Test wait(timeout) -@@ -5550,6 +5552,7 @@ class TestWait(unittest.TestCase): - time.sleep(period) - - @support.requires_resource('walltime') -+ @unittest.skip('timing related test, dependent on load') - def test_wait_integer(self): - from multiprocessing.connection import wait - -diff --git a/Lib/test/test_time.py b/Lib/test/test_time.py -index 5312faa5077..36873d9a400 100644 ---- a/Lib/test/test_time.py -+++ b/Lib/test/test_time.py -@@ -548,6 +548,7 @@ class TimeTestCase(unittest.TestCase): - def test_perf_counter(self): - time.perf_counter() - -+ @unittest.skip('timing related test, dependent on load') - @unittest.skipIf( - support.is_wasi, "process_time not available on WASI" - ) -@@ -567,6 +568,7 @@ class TimeTestCase(unittest.TestCase): - self.assertTrue(info.monotonic) - self.assertFalse(info.adjustable) - -+ @unittest.skip('timing related test, dependent on load') - def test_thread_time(self): - if not hasattr(time, 'thread_time'): - if sys.platform.startswith(('linux', 'android', 'win')): --- -2.52.0 - diff --git a/meta/recipes-devtools/python/python3/0001-Skip-flaky-test_default_timeout-tests.patch b/meta/recipes-devtools/python/python3/0001-Skip-flaky-test_default_timeout-tests.patch deleted file mode 100644 index d41037f9ea9..00000000000 --- a/meta/recipes-devtools/python/python3/0001-Skip-flaky-test_default_timeout-tests.patch +++ /dev/null @@ -1,49 +0,0 @@ -From baf2dda48e51fcb17a716e52cc5c4e162a6bb7d3 Mon Sep 17 00:00:00 2001 -From: Antonin Godard -Date: Mon, 19 Jan 2026 11:38:36 +0100 -Subject: [PATCH] Skip flaky test_default_timeout tests - -We have been observing issues with this test on the Autobuilder: -https://bugzilla.yoctoproject.org/show_bug.cgi?id=15885 - -The logs on the ticket above do not allow us to know which of the two -"test_default_timeout" tests is failing, so disable both with -self.skipTest(). - -Excerpt from `ptest-runner python3`: - - test_default_timeout (test.test_multiprocessing_fork.test_manager.WithManagerTestBarrier.test_default_timeout) - SKIP: Test the barrier's default timeout 'skip flaky timeout test' - -Upstream-Status: Inappropriate [OE specific, but might be related to https://github.com/python/cpython/issues/129266#issuecomment-2613058866] - -Signed-off-by: Antonin Godard ---- - Lib/test/_test_multiprocessing.py | 1 + - Lib/test/lock_tests.py | 1 + - 2 files changed, 2 insertions(+) - -diff --git a/Lib/test/_test_multiprocessing.py b/Lib/test/_test_multiprocessing.py -index e8064e7..9ab1f9e 100644 ---- a/Lib/test/_test_multiprocessing.py -+++ b/Lib/test/_test_multiprocessing.py -@@ -2424,6 +2424,7 @@ class _TestBarrier(BaseTestCase): - """ - Test the barrier's default timeout - """ -+ self.skipTest('skip flaky timeout test') - barrier = self.Barrier(self.N, timeout=0.5) - results = self.DummyList() - self.run_threads(self._test_default_timeout_f, (barrier, results)) -diff --git a/Lib/test/lock_tests.py b/Lib/test/lock_tests.py -index 8c8f890..43e9b90 100644 ---- a/Lib/test/lock_tests.py -+++ b/Lib/test/lock_tests.py -@@ -1215,6 +1215,7 @@ class BarrierTests(BaseTestCase): - """ - Test the barrier's default timeout - """ -+ self.skipTest('skip flaky timeout test') - timeout = 0.100 - barrier = self.barriertype(2, timeout=timeout) - def f(): diff --git a/meta/recipes-devtools/python/python3/0001-skip-no_stdout_fileno-test-due-to-load-variability.patch b/meta/recipes-devtools/python/python3/0001-skip-no_stdout_fileno-test-due-to-load-variability.patch deleted file mode 100644 index b186bdcb880..00000000000 --- a/meta/recipes-devtools/python/python3/0001-skip-no_stdout_fileno-test-due-to-load-variability.patch +++ /dev/null @@ -1,29 +0,0 @@ -From c5bdd39f8ebc4e6c58a47d7e424eac028eddb4ff Mon Sep 17 00:00:00 2001 -From: Trevor Gamblin -Date: Fri, 15 Sep 2023 08:48:33 -0400 -Subject: [PATCH] skip no_stdout_fileno test due to load variability - -Skip test_input_no_stdout_fileno so that it doesn't fail on systems -under heavy load. - -Upstream-Status: Inappropriate [OE-Specific] - -[YOCTO #15210] - -Signed-off-by: Trevor Gamblin ---- - Lib/test/test_builtin.py | 1 + - 1 file changed, 1 insertion(+) - -diff --git a/Lib/test/test_builtin.py b/Lib/test/test_builtin.py -index c5394de..ed17fb6 100644 ---- a/Lib/test/test_builtin.py -+++ b/Lib/test/test_builtin.py -@@ -2738,6 +2738,7 @@ class PtyTests(unittest.TestCase): - "byte 0xe9 in position 4: ordinal not in " - "range(128)") - -+ @unittest.skip("Test may fail under heavy load") - def test_input_no_stdout_fileno(self): - # Issue #24402: If stdin is the original terminal but stdout.fileno() - # fails, do not use the original stdout file descriptor diff --git a/meta/recipes-devtools/python/python3/0001-test_active_children-skip-problematic-test.patch b/meta/recipes-devtools/python/python3/0001-test_active_children-skip-problematic-test.patch deleted file mode 100644 index d7202aa5757..00000000000 --- a/meta/recipes-devtools/python/python3/0001-test_active_children-skip-problematic-test.patch +++ /dev/null @@ -1,34 +0,0 @@ -From 9c9aac87f48eaece5b99ea347b639c21eea84e6d Mon Sep 17 00:00:00 2001 -From: Trevor Gamblin -Date: Thu, 13 Jun 2024 10:54:31 -0400 -Subject: [PATCH] test_active_children: skip problematic test - -This test is failing in some tests on the Autobuilder. Since it's of a -similar nature to other failing/hanging tests, disable it for now. - -Upstream-Status: Inappropriate [OE-Specific] - -Signed-off-by: Trevor Gamblin - -Refresh to apply on top of Python 3.14.0. - -Signed-off-by: Trevor Gamblin ---- - Lib/test/_test_multiprocessing.py | 1 + - 1 file changed, 1 insertion(+) - -diff --git a/Lib/test/_test_multiprocessing.py b/Lib/test/_test_multiprocessing.py -index 008e6a505a5..746de8945f0 100644 ---- a/Lib/test/_test_multiprocessing.py -+++ b/Lib/test/_test_multiprocessing.py -@@ -667,6 +667,7 @@ class _TestProcess(BaseTestCase): - self.assertIsInstance(cpus, int) - self.assertGreaterEqual(cpus, 1) - -+ @unittest.skip("skipping problematic test") - def test_active_children(self): - self.assertEqual(type(self.active_children()), list) - --- -2.51.0 - diff --git a/meta/recipes-devtools/python/python3/0001-test_cmd-skip-bang-completion-test.patch b/meta/recipes-devtools/python/python3/0001-test_cmd-skip-bang-completion-test.patch deleted file mode 100644 index f1ba044cc33..00000000000 --- a/meta/recipes-devtools/python/python3/0001-test_cmd-skip-bang-completion-test.patch +++ /dev/null @@ -1,31 +0,0 @@ -From 614e3aefec85b51a611f85a55b6760f12e29b953 Mon Sep 17 00:00:00 2001 -From: Trevor Gamblin -Date: Mon, 27 Oct 2025 09:52:46 -0400 -Subject: [PATCH] test_cmd: skip bang completion test - -We compile Python3 with editline support by default, which has tab completion -but not bang completion. If building with readline, -test_bang_completion_without_do_shell() passes. Skip the test because of this. - -Upstream-Status: Inappropriate [embedded-specific] - -Signed-off-by: Trevor Gamblin ---- - Lib/test/test_cmd.py | 1 + - 1 file changed, 1 insertion(+) - -diff --git a/Lib/test/test_cmd.py b/Lib/test/test_cmd.py -index dbfec42fc21..c33dab8d10d 100644 ---- a/Lib/test/test_cmd.py -+++ b/Lib/test/test_cmd.py -@@ -295,6 +295,7 @@ class CmdTestReadline(unittest.TestCase): - self.assertIn(b'ab_completion_test', output) - self.assertIn(b'tab completion success', output) - -+ @unittest.skip('no bang completion without readline') - def test_bang_completion_without_do_shell(self): - script = textwrap.dedent(""" - import cmd --- -2.51.0 - diff --git a/meta/recipes-devtools/python/python3/0001-test_ctypes.test_find-skip-without-tools-sdk.patch b/meta/recipes-devtools/python/python3/0001-test_ctypes.test_find-skip-without-tools-sdk.patch deleted file mode 100644 index cdcd9302d61..00000000000 --- a/meta/recipes-devtools/python/python3/0001-test_ctypes.test_find-skip-without-tools-sdk.patch +++ /dev/null @@ -1,33 +0,0 @@ -From 0e9d0c58e77ef540d9601ce84a1aa79d9ce6ee9b Mon Sep 17 00:00:00 2001 -From: Tim Orling -Date: Fri, 18 Jun 2021 11:56:50 -0700 -Subject: [PATCH] test_ctypes.test_find: skip without tools-sdk - -These tests need full packagegroup-core-buildessential, the -easiest way to dynamically check for that is looking for -'tools-sdk' in IMAGE_FEATURES. - -Upstream-Status: Inappropriate [oe-specific] - -Signed-off-by: Tim Orling ---- - Lib/test/test_ctypes/test_find.py | 2 ++ - 1 file changed, 2 insertions(+) - -diff --git a/Lib/test/test_ctypes/test_find.py b/Lib/test/test_ctypes/test_find.py -index 85b2861..b033203 100644 ---- a/Lib/test/test_ctypes/test_find.py -+++ b/Lib/test/test_ctypes/test_find.py -@@ -117,10 +117,12 @@ class FindLibraryLinux(unittest.TestCase): - # LD_LIBRARY_PATH) - self.assertEqual(find_library(libname), 'lib%s.so' % libname) - -+ @unittest.skip("Needs IMAGE_FEATURE += \"tools-sdk\"") - def test_find_library_with_gcc(self): - with unittest.mock.patch("ctypes.util._findSoname_ldconfig", lambda *args: None): - self.assertNotEqual(find_library('c'), None) - -+ @unittest.skip("Needs IMAGE_FEATURE += \"tools-sdk\"") - def test_find_library_with_ld(self): - with unittest.mock.patch("ctypes.util._findSoname_ldconfig", lambda *args: None), \ - unittest.mock.patch("ctypes.util._findLib_gcc", lambda *args: None): diff --git a/meta/recipes-devtools/python/python3/0001-test_deadlock-skip-problematic-test.patch b/meta/recipes-devtools/python/python3/0001-test_deadlock-skip-problematic-test.patch deleted file mode 100644 index 3336e2913a1..00000000000 --- a/meta/recipes-devtools/python/python3/0001-test_deadlock-skip-problematic-test.patch +++ /dev/null @@ -1,27 +0,0 @@ -From 5a44f74549b32395109342e9299510c32db71068 Mon Sep 17 00:00:00 2001 -From: Trevor Gamblin -Date: Wed, 12 Jun 2024 10:29:03 -0400 -Subject: [PATCH] test_deadlock: skip problematic test - -This test hangs frequently when run on the Autobuilder. Disable it in -testing until the cause can be determined. - -Upstream-Status: Inappropriate [OE-Specific] - -Signed-off-by: Trevor Gamblin ---- - Lib/test/test_concurrent_futures/test_deadlock.py | 1 + - 1 file changed, 1 insertion(+) - -diff --git a/Lib/test/test_concurrent_futures/test_deadlock.py b/Lib/test/test_concurrent_futures/test_deadlock.py -index 3c30c45..008d6c0 100644 ---- a/Lib/test/test_concurrent_futures/test_deadlock.py -+++ b/Lib/test/test_concurrent_futures/test_deadlock.py -@@ -90,6 +90,7 @@ class ErrorAtUnpickle(object): - return _raise_error_ignore_stderr, (UnpicklingError, ) - - -+@unittest.skip("skipping problematic test") - class ExecutorDeadlockTest: - TIMEOUT = support.LONG_TIMEOUT - diff --git a/meta/recipes-devtools/python/python3/0001-test_only_active_thread-skip-problematic-test.patch b/meta/recipes-devtools/python/python3/0001-test_only_active_thread-skip-problematic-test.patch deleted file mode 100644 index bc436e077a6..00000000000 --- a/meta/recipes-devtools/python/python3/0001-test_only_active_thread-skip-problematic-test.patch +++ /dev/null @@ -1,30 +0,0 @@ -From 0524821f8fcbdea2fbd90f199e7fb4950f50530f Mon Sep 17 00:00:00 2001 -From: Trevor Gamblin -Date: Tue, 3 Mar 2026 09:27:10 -0500 -Subject: [PATCH] test_only_active_thread: skip problematic test - -This test hangs frequently when run on the Autobuilder. Disable it in -testing for now. - -Upstream-Status: Inappropriate [OE-Specific] - -Signed-off-by: Trevor Gamblin ---- - Lib/test/test_external_inspection.py | 1 + - 1 file changed, 1 insertion(+) - -diff --git a/Lib/test/test_external_inspection.py b/Lib/test/test_external_inspection.py -index a709b837161..7a87092c10e 100644 ---- a/Lib/test/test_external_inspection.py -+++ b/Lib/test/test_external_inspection.py -@@ -1154,6 +1154,7 @@ class TestGetStackTrace(unittest.TestCase): - ], - ) - -+ @unittest.skip("skipping problematic test") - @skip_if_not_supported - @unittest.skipIf( - sys.platform == "linux" and not PROCESS_VM_READV_SUPPORTED, --- -2.53.0 - diff --git a/meta/recipes-devtools/python/python3/0001-test_pyrepl-skip-test_unix_console.test_cursor_back_.patch b/meta/recipes-devtools/python/python3/0001-test_pyrepl-skip-test_unix_console.test_cursor_back_.patch deleted file mode 100644 index 97f78712668..00000000000 --- a/meta/recipes-devtools/python/python3/0001-test_pyrepl-skip-test_unix_console.test_cursor_back_.patch +++ /dev/null @@ -1,46 +0,0 @@ -From 66a806ea05ecaf483753de3719041944daae42b0 Mon Sep 17 00:00:00 2001 -From: Trevor Gamblin -Date: Mon, 27 Oct 2025 13:21:14 -0400 -Subject: [PATCH] test_pyrepl: skip test_unix_console.test_cursor_back_write - -This test was not run prior to 3.14 due to Python not having access to -the curses resource. In 3.14, PyREPL's dependency on curses has been -removed, instead relying on the terminfo module. This results in a -terminal capability list that does not include ICH1, resulting in an -"optimization" occurring from PyREPL's side that causes -test_cursor_back_write() to fail. Specifically, the test tests the -following writes in sequence: - -1. b"1" -2. TERM_CAPABILITIES["cub"] + b":1" -3. ANY, b"2" - -The first two writes are read correctly, but the result for the third -write is seeing the equivalent of: - -ANY, b"21" - -Skip this test. - -Upstream-Status: Inappropriate [embedded-specific] - -Signed-off-by: Trevor Gamblin ---- - Lib/test/test_pyrepl/test_unix_console.py | 1 + - 1 file changed, 1 insertion(+) - -diff --git a/Lib/test/test_pyrepl/test_unix_console.py b/Lib/test/test_pyrepl/test_unix_console.py -index 3b0d2637dab..5a3c8952f61 100644 ---- a/Lib/test/test_pyrepl/test_unix_console.py -+++ b/Lib/test/test_pyrepl/test_unix_console.py -@@ -186,6 +186,7 @@ class TestConsole(TestCase): - _os_write.assert_any_call(ANY, TERM_CAPABILITIES["cud"] + b":1") - con.restore() - -+ @unittest.skip('no ich1 support in vt102 terminfo') - def test_cursor_back_write(self, _os_write): - events = itertools.chain( - code_to_events("1"), --- -2.51.0 - diff --git a/meta/recipes-devtools/python/python3/0001-test_readline-skip-limited-history-test.patch b/meta/recipes-devtools/python/python3/0001-test_readline-skip-limited-history-test.patch deleted file mode 100644 index c59c6672e0c..00000000000 --- a/meta/recipes-devtools/python/python3/0001-test_readline-skip-limited-history-test.patch +++ /dev/null @@ -1,46 +0,0 @@ -From 1a0a145261ba4f97aaff3c0c656ac2e0ad9695a8 Mon Sep 17 00:00:00 2001 -From: Trevor Gamblin -Date: Tue, 13 Aug 2024 11:07:05 -0400 -Subject: [PATCH] test_readline: skip limited history test - -This test was added recently and is failing on the ptest image when -using the default PACKAGECONFIG settings (i.e. with editline instead of -readline).. Disable it until the proper fix is determined. - -A bug has been opened upstream: https://github.com/python/cpython/issues/123018 - -Upstream-Status: Inappropriate [OE-specific] - -Signed-off-by: Trevor Gamblin ---- - Lib/test/test_readline.py | 3 +++ - 1 file changed, 3 insertions(+) - -diff --git a/Lib/test/test_readline.py b/Lib/test/test_readline.py -index 537a9fb..ddf0323 100644 ---- a/Lib/test/test_readline.py -+++ b/Lib/test/test_readline.py -@@ -74,6 +74,7 @@ class TestHistoryManipulation (unittest.TestCase): - - @unittest.skipUnless(hasattr(readline, "append_history_file"), - "append_history not available") -+ @unittest.skip("Skipping problematic test") - def test_write_read_append(self): - hfile = tempfile.NamedTemporaryFile(delete=False) - hfile.close() -@@ -145,6 +146,7 @@ class TestHistoryManipulation (unittest.TestCase): - self.assertEqual(readline.get_history_item(1), "entrée 1") - self.assertEqual(readline.get_history_item(2), "entrée 22") - -+ @unittest.skip("Skipping problematic test") - def test_write_read_limited_history(self): - previous_length = readline.get_history_length() - self.addCleanup(readline.set_history_length, previous_length) -@@ -393,6 +395,7 @@ readline.write_history_file(history_file) - self.assertIn(b"done", output) - - -+ @unittest.skip("Skipping problematic test") - def test_write_read_limited_history(self): - previous_length = readline.get_history_length() - self.addCleanup(readline.set_history_length, previous_length) diff --git a/meta/recipes-devtools/python/python3/0001-test_shutdown-skip-problematic-test.patch b/meta/recipes-devtools/python/python3/0001-test_shutdown-skip-problematic-test.patch deleted file mode 100644 index 4e284de6137..00000000000 --- a/meta/recipes-devtools/python/python3/0001-test_shutdown-skip-problematic-test.patch +++ /dev/null @@ -1,43 +0,0 @@ -From b678363156b5d40e09c1d138840180e3ddc7d20b Mon Sep 17 00:00:00 2001 -From: Trevor Gamblin -Date: Wed, 8 May 2024 11:58:09 -0400 -Subject: [PATCH] test_shutdown: skip problematic test - -This test hangs frequently when run on the Autobuilder. Disable it in -testing until the cause can be determined. - -Upstream-Status: Inappropriate [OE-Specific] - -Signed-off-by: Trevor Gamblin ---- - Lib/test/test_concurrent_futures/test_shutdown.py | 3 +++ - 1 file changed, 3 insertions(+) - -diff --git a/Lib/test/test_concurrent_futures/test_shutdown.py b/Lib/test/test_concurrent_futures/test_shutdown.py -index 7a4065a..6b878a4 100644 ---- a/Lib/test/test_concurrent_futures/test_shutdown.py -+++ b/Lib/test/test_concurrent_futures/test_shutdown.py -@@ -20,6 +20,7 @@ def sleep_and_print(t, msg): - sys.stdout.flush() - - -+@unittest.skip("skipping problematic test") - class ExecutorShutdownTest: - def test_run_after_shutdown(self): - self.executor.shutdown() -@@ -156,6 +157,7 @@ class ExecutorShutdownTest: - signal.signal(signal.SIGALRM, old_handler) - - -+@unittest.skip("skipping problematic test") - class ThreadPoolShutdownTest(ThreadPoolMixin, ExecutorShutdownTest, BaseTestCase): - def test_threads_terminate(self): - def acquire_lock(lock): -@@ -252,6 +254,7 @@ class ThreadPoolShutdownTest(ThreadPoolMixin, ExecutorShutdownTest, BaseTestCase - self.assertIn(out.strip(), [b"apple", b""]) - - -+@unittest.skip("skipping problematic test") - class ProcessPoolShutdownTest(ExecutorShutdownTest): - def test_processes_terminate(self): - def acquire_lock(lock): diff --git a/meta/recipes-devtools/python/python3/0001-test_storlines-skip-due-to-load-variability.patch b/meta/recipes-devtools/python/python3/0001-test_storlines-skip-due-to-load-variability.patch deleted file mode 100644 index b452c6556fa..00000000000 --- a/meta/recipes-devtools/python/python3/0001-test_storlines-skip-due-to-load-variability.patch +++ /dev/null @@ -1,29 +0,0 @@ -From 9f252a691cd335341938489da32d6e2d4620d8ca Mon Sep 17 00:00:00 2001 -From: Trevor Gamblin -Date: Fri, 6 Oct 2023 10:59:44 -0400 -Subject: [PATCH] test_storlines: skip due to load variability - -This is yet another test that intermittently fails on the Yocto AB when -a worker is under heavy load, so skip it during testing. - -Upstream-Status: Inappropriate [OE-Specific] - -[YOCTO #14933] - -Signed-off-by: Trevor Gamblin ---- - Lib/test/test_ftplib.py | 1 + - 1 file changed, 1 insertion(+) - -diff --git a/Lib/test/test_ftplib.py b/Lib/test/test_ftplib.py -index bed0e6d..36602be 100644 ---- a/Lib/test/test_ftplib.py -+++ b/Lib/test/test_ftplib.py -@@ -630,6 +630,7 @@ class TestFTPClass(TestCase): - self.client.storbinary('stor', f, rest=r) - self.assertEqual(self.server.handler_instance.rest, str(r)) - -+ @unittest.skip('timing related test, dependent on load') - def test_storlines(self): - data = RETR_DATA.replace('\r\n', '\n').encode(self.client.encoding) - f = io.BytesIO(data) diff --git a/meta/recipes-devtools/python/python3/0001-test_sysconfig-skip-test_sysconfig.test_sysconfigdat.patch b/meta/recipes-devtools/python/python3/0001-test_sysconfig-skip-test_sysconfig.test_sysconfigdat.patch deleted file mode 100644 index 6dfba59a449..00000000000 --- a/meta/recipes-devtools/python/python3/0001-test_sysconfig-skip-test_sysconfig.test_sysconfigdat.patch +++ /dev/null @@ -1,32 +0,0 @@ -From ac5635821ed9bead45a5bcddc3828e50647fbe77 Mon Sep 17 00:00:00 2001 -From: Trevor Gamblin -Date: Mon, 27 Oct 2025 14:24:24 -0400 -Subject: [PATCH] test_sysconfig: skip test_sysconfig.test_sysconfigdata_json - -This test seems new as of 3.14.0 and fails due to various path and flag -differences in variables like CFLAGS. Since the test already has the -precedent of a skip put in place for Android builds due to prefix -changes, skip it for our situation too. - -Upstream-Status: Inappropriate [embedded-specific] - -Signed-off-by: Trevor Gamblin ---- - Lib/test/test_sysconfig.py | 1 + - 1 file changed, 1 insertion(+) - -diff --git a/Lib/test/test_sysconfig.py b/Lib/test/test_sysconfig.py -index 09eff11179e..14fcdedccba 100644 ---- a/Lib/test/test_sysconfig.py -+++ b/Lib/test/test_sysconfig.py -@@ -689,6 +689,7 @@ class TestSysConfig(unittest.TestCase, VirtualEnvironmentMixin): - self.assertNotEqual(data['prefix'], data['base_prefix']) - self.assertNotEqual(data['exec_prefix'], data['base_exec_prefix']) - -+ @unittest.skip('OE adds/modifies various flags and paths/prefixes') - @unittest.skipIf(os.name != 'posix', '_sysconfig-vars JSON file is only available on POSIX') - @unittest.skipIf(is_wasi, "_sysconfig-vars JSON file currently isn't available on WASI") - @unittest.skipIf(is_android or is_apple_mobile, 'Android and iOS change the prefix') --- -2.51.0 - diff --git a/meta/recipes-devtools/python/python3_3.14.5.bb b/meta/recipes-devtools/python/python3_3.14.5.bb index 9e6738997d6..2f821b130f0 100644 --- a/meta/recipes-devtools/python/python3_3.14.5.bb +++ b/meta/recipes-devtools/python/python3_3.14.5.bb @@ -15,25 +15,12 @@ SRC_URI = "http://www.python.org/ftp/python/${PV}/Python-${PV}.tar.xz \ file://reformat_sysconfig.py \ file://0001-Makefile.pre-use-qemu-wrapper-when-gathering-profile.patch \ file://0001-test_locale.py-correct-the-test-output-format.patch \ - file://0001-Skip-failing-tests-due-to-load-variability-on-YP-AB.patch \ - file://0001-test_ctypes.test_find-skip-without-tools-sdk.patch \ file://makerace.patch \ file://0001-sysconfig.py-use-platlibdir-also-for-purelib.patch \ file://0001-Lib-pty.py-handle-stdin-I-O-errors-same-way-as-maste.patch \ file://valid-dists.patch \ file://0001-Avoid-shebang-overflow-on-python-config.py.patch \ file://0001-Update-test_sysconfig-for-posix_user-purelib.patch \ - file://0001-skip-no_stdout_fileno-test-due-to-load-variability.patch \ - file://0001-test_storlines-skip-due-to-load-variability.patch \ - file://0001-test_shutdown-skip-problematic-test.patch \ - file://0001-test_deadlock-skip-problematic-test.patch \ - file://0001-test_active_children-skip-problematic-test.patch \ - file://0001-test_readline-skip-limited-history-test.patch \ - file://0001-test_cmd-skip-bang-completion-test.patch \ - file://0001-test_pyrepl-skip-test_unix_console.test_cursor_back_.patch \ - file://0001-test_sysconfig-skip-test_sysconfig.test_sysconfigdat.patch \ - file://0001-Skip-flaky-test_default_timeout-tests.patch \ - file://0001-test_only_active_thread-skip-problematic-test.patch \ file://0001-prefer-valid-entrypoints.patch \ file://0001-Fix-ThreadingMock-call-count-race-condition.patch \ " @@ -252,7 +239,76 @@ do_install:append:class-nativesdk () { create_wrapper ${D}${bindir}/python${PYTHON_MAJMIN} TERMINFO_DIRS='${sysconfdir}/terminfo:/etc/terminfo:/usr/share/terminfo:/usr/share/misc/terminfo:/lib/terminfo' PYTHONNOUSERSITE='1' } -SKIPPED_TESTS = "--ignore test.test_os.test_os.TimerfdTests.test_timerfd_TFD_TIMER_ABSTIME" +# Tests failing due to load variability. Bugs were opened at +# https://bugzilla.yoctoproject.org/ to track some of these: +# 14296 (test_many_processes, test_process_time, test_thread_time, test_wait_integer) +# 14933 (test_storlines) +# 15120 (test_input_no_stdout_fileno) +# 15131 (*TestBarrier.test_timeout) +# 15177 (test_thread_time) +# 15743 (test.test_os.test_os.TimerfdTests.test_timerfd_TFD_TIMER_ABSTIME) +# 15885 (test_default_timeout) +SKIPPED_TESTS = " \ + --ignore *TestBarrier.test_timeout \ + --ignore ExecutorDeadlockTest \ + --ignore ExecutorShutdownTest \ + --ignore ProcessPoolShutdownTest \ + --ignore ThreadPoolShutdownTest \ + --ignore test.test_os.test_os.TimerfdTests.test_timerfd_TFD_TIMER_ABSTIME \ + --ignore test_active_children \ + --ignore test_default_timeout \ + --ignore test_input_no_stdout_fileno \ + --ignore test_many_processes \ + --ignore test_only_active_thread \ + --ignore test_process_time \ + --ignore test_storlines \ + --ignore test_thread_time \ + --ignore test_wait_integer \ + --ignore test_write_read_append \ +" + +# We build Python3 with editline support by default, which has tab completion +# but not bang completion. test_bang_completion_without_do_shell() passes if +# building with readline, but we don't want to change the default, so skip the +# test. +SKIPPED_TESTS:append = " \ + --ignore test_bang_completion_without_do_shell \ +" + +# Also fails with editline instead of readline. See: +# https://github.com/python/cpython/issues/123018 +SKIPPED_TESTS:append = " \ + --ignore test_write_read_limited_history \ +" + +# In 3.14+ PyREPL's uses terminfo instead of curses. ICH1, is not in the +# resulting terminal capabilities, in an "optimization" occurring from PyREPL's +# side that causes test_cursor_back_write() to fail. Specifically, the test +# tests the following writes in sequence: +# +# 1. b"1" +# 2. TERM_CAPABILITIES["cub"] + b":1" +# 3. ANY, b"2" +# +# The first two writes are read correctly, but the result for the third +# write is seeing the equivalent of: +# +# ANY, b"21" +SKIPPED_TESTS:append = " \ + --ignore test_cursor_back_write \ +" + +# Needs IMAGE_FEATURE += \"tools-sdk\" +SKIPPED_TESTS:append = " \ + --ignore test_find_library_with_gcc \ + --ignore test_find_library_with_ld \ +" + +# Fails due to differences in CFLAGS as as modified during build +SKIPPED_TESTS:append = " \ + --ignore test_sysconfigdata_json \ +" + SKIPPED_TESTS:append:class-target:libc-musl = " \ -x test__locale \ -x test_c_locale_coercion \ From patchwork Wed Jun 10 22:55:10 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 89727 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 322FDCD98DA for ; Wed, 10 Jun 2026 22:55:31 +0000 (UTC) Received: from mail-wm1-f51.google.com (mail-wm1-f51.google.com [209.85.128.51]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.33657.1781132128602701282 for ; Wed, 10 Jun 2026 15:55:28 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=fA6dvBcS; spf=pass (domain: smile.fr, ip: 209.85.128.51, mailfrom: yoann.congal@smile.fr) Received: by mail-wm1-f51.google.com with SMTP id 5b1f17b1804b1-490be03d47bso64872405e9.0 for ; Wed, 10 Jun 2026 15:55:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1781132127; x=1781736927; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=KVJit5s6EhxCUmPY+Q0Dac9PN3xhT5WEMxX4SZ/GmmQ=; b=fA6dvBcSu3VspeThkhQKxO2ov+ImL2xSOonTc1v5pc/K/5bvQ2baCSa1PJ5XHtnN1k epwoTxnb+mHrQJRYdnTAyKrGcimm2Hn84UmO6lfGzatXVzZ07y3SWWte6hLqWd8dFsm6 wViSjxOfjBTfTbicMoyUaywxUJ4yozw+MlrjQ= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1781132127; x=1781736927; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=KVJit5s6EhxCUmPY+Q0Dac9PN3xhT5WEMxX4SZ/GmmQ=; b=fu2FF2xsTVaEwLBlYMVzqUR7vScDsnkQjgzPKONutq2rbXmi7IA4J4gweq67M1lL9a Osi25VjFZuC1DnU4ioRzNbl85xfoYHs1UHlVpZNDYn6/bQdq0L78gC2Fc+yplbvqpTrJ oMTktKgmBmnxDcyBDX56cnpSWTXT+8YgN7SfgrGgdAt/+2D30jGSrdWqib99lGxf2aQM aPYK+i6XodZk/XGvaC7oy6zXrrJutz0fOO/HGCp603jUw2FJO+oJNViSgApszrlJN9wv Qip5y4s6v3cTHfyNTyHf2abJqmQpYxfhlYbPc3KDJh5yfExCF9xAKPcA1bJqzDiIacVJ eaug== X-Gm-Message-State: AOJu0YyZUSeCpumOYHMLaj1QTH/wm9/aXu5quHtLKFaBgOnvRGBKSAHP CTCulcu1GMBdwdot4E15B0pW7D6agw5olL0okWU/HGV4pL9JhSZKY0ql1jbsUJpg88XcGUU/fke AVJq4 X-Gm-Gg: Acq92OEq/BIL5o8CEJTO2FjY8COdLv+6BpgTUNbIEdUujBs6db0NpmEPczhIiggPPZb 7zpxliJ6HC9m5cuW6TSSyaxBBPPsmEjVTr//wu6b0Ia//bInLjKJSLrzp3RY2H54vxXjxwDoUv5 IO+DrX7AxO3FMLp3kdDW0haQ15Rg7+CR5cVXjta4waGao8acNkb38RbxELNfV+J5IBan051reA4 U+xxTz+dvEawaFov2T0ZzLVDN/n6Ib0u5sBJkYPyYE/9pnL1NoMRfjbYZ+GhSNeUtaWwCiC3Jzr wSOo+tGQVTEhR+s2iU3Cr1PXR8GzSJ4PmX+Gj6H2p6erGQ6bo05AczQabNt0wAbgo7cvyua9+CL ilHMl+MwXE4j9Yia7VigoPJNaiUAsEe851ah/QtndxSAIFoUkDjy+dkats62Vj9X9Ohc358+7+d 9/xQRsLt8nrSESg4BLya0gsT7AaAXqYBnli3w282kSE19HdHzt4MtGBGY8c8IMh5mWCaqj23p1z 6fRKhWJCUinBougmxZCRjsFoeAt3iDHxJMTj+4= X-Received: by 2002:a05:600c:4e4b:b0:490:bfda:7d7e with SMTP id 5b1f17b1804b1-490c258999amr439140995e9.3.1781132127007; Wed, 10 Jun 2026 15:55:27 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00bb749f54eeb85d7b.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:bb74:9f54:eeb8:5d7b]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4601f344148sm71599304f8f.19.2026.06.10.15.55.26 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 10 Jun 2026 15:55:26 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 19/21] python3: use += instead of :append in SKIPPED_TESTS Date: Thu, 11 Jun 2026 00:55:10 +0200 Message-ID: X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 10 Jun 2026 22:55:31 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/238414 From: Ross Burton += is less computationally intensive than :append so use it unless the semantics of :append are needed. Also remove the class-target override, this is not required as ptests are only used in target builds. (From OE-Core rev: 8ba5db86ac364b85fa6c1ee36fa5a037c0ee818a) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie Signed-off-by: Peter Marko Signed-off-by: Yoann Congal --- meta/recipes-devtools/python/python3_3.14.5.bb | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/meta/recipes-devtools/python/python3_3.14.5.bb b/meta/recipes-devtools/python/python3_3.14.5.bb index 2f821b130f0..501de75fb18 100644 --- a/meta/recipes-devtools/python/python3_3.14.5.bb +++ b/meta/recipes-devtools/python/python3_3.14.5.bb @@ -271,13 +271,13 @@ SKIPPED_TESTS = " \ # but not bang completion. test_bang_completion_without_do_shell() passes if # building with readline, but we don't want to change the default, so skip the # test. -SKIPPED_TESTS:append = " \ +SKIPPED_TESTS += " \ --ignore test_bang_completion_without_do_shell \ " # Also fails with editline instead of readline. See: # https://github.com/python/cpython/issues/123018 -SKIPPED_TESTS:append = " \ +SKIPPED_TESTS += " \ --ignore test_write_read_limited_history \ " @@ -294,22 +294,22 @@ SKIPPED_TESTS:append = " \ # write is seeing the equivalent of: # # ANY, b"21" -SKIPPED_TESTS:append = " \ +SKIPPED_TESTS += " \ --ignore test_cursor_back_write \ " # Needs IMAGE_FEATURE += \"tools-sdk\" -SKIPPED_TESTS:append = " \ +SKIPPED_TESTS += " \ --ignore test_find_library_with_gcc \ --ignore test_find_library_with_ld \ " # Fails due to differences in CFLAGS as as modified during build -SKIPPED_TESTS:append = " \ +SKIPPED_TESTS += " \ --ignore test_sysconfigdata_json \ " -SKIPPED_TESTS:append:class-target:libc-musl = " \ +SKIPPED_TESTS:append:libc-musl = " \ -x test__locale \ -x test_c_locale_coercion \ -x test_locale \ From patchwork Wed Jun 10 22:55:11 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 89719 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 70C4BCD98D2 for ; Wed, 10 Jun 2026 22:55:30 +0000 (UTC) Received: from mail-wm1-f44.google.com (mail-wm1-f44.google.com [209.85.128.44]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.33658.1781132129090412307 for ; Wed, 10 Jun 2026 15:55:29 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=PqamUEVf; spf=pass (domain: smile.fr, ip: 209.85.128.44, mailfrom: yoann.congal@smile.fr) Received: by mail-wm1-f44.google.com with SMTP id 5b1f17b1804b1-490cf3000f0so46909905e9.1 for ; Wed, 10 Jun 2026 15:55:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1781132127; x=1781736927; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=2AX+GEd0JNzd1tTXI1BCJ2CV+gkQVZ8wX8hSHSBdqHA=; b=PqamUEVfG38cdqYUOI/ttjY1VFcB1RI8A2YA3byq8RxRW2Dg2pW0q9qLVcZSXArHj6 Fghm+KwSBa2JLYw+BL59KAU6aHeQUI+SGCRNDunypRicIy2F5Jh+0ayB4Ct8R07Y0vMC 8gXxa7BNagq0ofP0pTcISrV1OmwS1eZUw2MRo= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1781132127; x=1781736927; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=2AX+GEd0JNzd1tTXI1BCJ2CV+gkQVZ8wX8hSHSBdqHA=; b=i1f4x2dQrCjnYqB9YO4W2vwtsWPhfVbex0ibJQHfjFIfDqtVQ1/p3IJYKplIfDQs1R h4TE7gJBBHWD5GS6XgZP5BycaCJEqX4q0YtFFcaxJ3mBsaQEP0OvNr4Y827he9uXCZax G81kX6bxK+ZiZXjWNFcdaB/ttOJJLbJhCX+Co/n4WlIlGerCNLWOkDJneWIDmWwS92pr KrTIRluGyYuuOTJLre2C+cI54aRCEigs6LGHTVrcf/qUm0PzTr+AONYIEJC3Gv+Kvlks RwCdFMP2jdz5tlvxKBrfof1/HuqSl60Xu53XBLd66A0DurOzxcP8th905G4pw5sx1wmp xcZQ== X-Gm-Message-State: AOJu0YyIvu92kIvorxzUCRCJTs1Rbu5PNIWy7YguLMCofTN2i6rGYCYx Hr6C61dHmS9x91AAjAEQj4k0BZWfkyR2sqqWhVbgWCTNL83ioLmQAwxxzJFKw7LrKHJbN9IBJFL obxm/ X-Gm-Gg: Acq92OFYfbiiMgft/ZJbb2gilAAPBRteprFeWefPBXo0jYhcc4ljJyTEsS+cUbTCIAx 4vRFN3nUj/XtP/izP0KbQFn0Wz2wydicoobG7MAFZ32QGAdbep5C2b3LhSJe4LCms7kEhhYbOcO idfDTcfCb2UPyftKL7FgQv5Bg02l7/TRYQvLgBLCwUv2YyV3B05trVj3JSkdpp5Eul6wwFIdkdI SVAlnd3jyrfu1D9BlQdqj18CbGi1qLFTe8vVW0nqhyy41mD4XrkmJFoA/K3sToY+2GVapGlg5Ja QFw7ARrge+ybH+IfVVe7fZ3HEuycV5on4tgJHyu+L0kiMNaE/ObzoWMqUm+05mmpLs3PjtN+vcJ RvLdVYA6mkG4PSScfr4t0UZpZGBkaTG2ao0kHi9U4KtNPOdpxOrsku4nYCUoKIKMu9nXXCJNAFn pMNTDs6axsb35lkpCIHgLiVjAWpXVlTQ1uT/tDfVq0hrlsUyfspgwOr1YEs9sM0dbxDKrPWduTu LRUnCChF7vanQTGfvQc2tBpiPUb3GWbp719JHc= X-Received: by 2002:a05:600c:46c3:b0:490:625e:bb68 with SMTP id 5b1f17b1804b1-490e2d1c0a8mr10407985e9.3.1781132127517; Wed, 10 Jun 2026 15:55:27 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00bb749f54eeb85d7b.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:bb74:9f54:eeb8:5d7b]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4601f344148sm71599304f8f.19.2026.06.10.15.55.27 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 10 Jun 2026 15:55:27 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 20/21] python3: sanitize userbase in _sysconfig_vars JSON to avoid host path leak Date: Thu, 11 Jun 2026 00:55:11 +0200 Message-ID: <5cebc2470a9a9a3bba570b7ad63e9af7c7624534.1781132051.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 10 Jun 2026 22:55:30 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/238416 From: Bin Cao The _sysconfig_vars__linux_x86_64-linux-gnu.json file contains a "userbase" field that is populated from the build host user's $HOME at build time. This leaks the build host user's home directory path into the target rootfs. The existing py_package_preprocess() cleanup for this JSON file only strips known OE build path prefixes (STAGING_DIR_TARGET, RECIPE_SYSROOT, etc.), but the userbase value comes from the build user's $HOME environment variable which doesn't match any of those patterns. Set userbase to an empty string in the packaged JSON. This is safe because at runtime, sysconfig.get_config_vars() always recomputes userbase by calling _getuserbase(), which resolves the actual target user's ~/.local path dynamically. The static value in the JSON is never used for runtime path resolution. (From OE-Core rev: beb245ef60c63359cd4f5e285d2f31c5c572b51e) Signed-off-by: Bin Cao Signed-off-by: Richard Purdie Signed-off-by: Peter Marko Signed-off-by: Yoann Congal --- meta/recipes-devtools/python/python3_3.14.5.bb | 1 + 1 file changed, 1 insertion(+) diff --git a/meta/recipes-devtools/python/python3_3.14.5.bb b/meta/recipes-devtools/python/python3_3.14.5.bb index 501de75fb18..919cfde9aec 100644 --- a/meta/recipes-devtools/python/python3_3.14.5.bb +++ b/meta/recipes-devtools/python/python3_3.14.5.bb @@ -390,6 +390,7 @@ py_package_preprocess () { -e 's:${RECIPE_SYSROOT_NATIVE}::g' \ -e 's:${RECIPE_SYSROOT}::g' \ -e 's:${BASE_WORKDIR}/${MULTIMACH_TARGET_SYS}::g' \ + -e 's|"userbase": ".*"|"userbase": ""|g' \ ${PKGD}/${libdir}/python${PYTHON_MAJMIN}/_sysconfig_vars*.json } From patchwork Wed Jun 10 22:55:12 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 89716 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 17CC5CD98C7 for ; Wed, 10 Jun 2026 22:55:30 +0000 (UTC) Received: from mail-wm1-f51.google.com (mail-wm1-f51.google.com [209.85.128.51]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.33486.1781132129597652219 for ; Wed, 10 Jun 2026 15:55:29 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=knVA8vd9; spf=pass (domain: smile.fr, ip: 209.85.128.51, mailfrom: yoann.congal@smile.fr) Received: by mail-wm1-f51.google.com with SMTP id 5b1f17b1804b1-490b64c8311so80565775e9.3 for ; Wed, 10 Jun 2026 15:55:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1781132128; x=1781736928; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=3kvK7v8XdfaN5DfCnGBOgvKeAznSvQeDkpbq7y5OMlw=; b=knVA8vd9i4aVi7iK+JtON/OO/4wm6dROSd4/WWLSP0gUwe+AwJeVa7RijLG51Z20U/ 3rJPUt/6Jg5JsQ4vo5B5BntNpeNlplhLB3osVijLj0bLtqTfUbHOiAfqWWXEuKQKkHTx 1YpMA4oxYLt/5Jg8qNeI3Z/NI7DQbgZ7bMMw0= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1781132128; x=1781736928; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=3kvK7v8XdfaN5DfCnGBOgvKeAznSvQeDkpbq7y5OMlw=; b=D0ENJUk+Whdst4e6OAMDMVCm3j3eB7/RjnqqsZsGlHYCEpf+VLt9geN/U84SqEz6Q7 valn7sQMnGkoUIWi2NH6D0xzjWOxvdAgpXtAgpcaXOSls6TAsJa6lzFbc958N3NiCtcB 1X4whgalpTUMx4egIMXIlN7Rk3xf2A7cTTICJsNoyl4tgYx6YR1s/0mFt7fl8E/KGazT eyctwkdvbJHdjzhi5GO41Fh03GeOWThF51QBlURAjYvbPOfU7pWhkOJtL28MFzOWX3r5 19oXyMfiRv8wmpZYM1QGhsD1XsFDvSJDrGVYLJCEjIjtVkxywZYq15TI93IkVxobSZFw gA/A== X-Gm-Message-State: AOJu0Yz9dPBe0dCzFa6/J9EyJBHL/m6kVgP3kNjwUWy7y1w+JxDvApF1 DWGJePuC8AfmtfHjfVaA9oJGwVxXp2o9Jeeif+5z2DT4lihaj7c5h1WnqOdG20he0ThB3U0CyWQ dyfUd X-Gm-Gg: Acq92OEhHhcgJa4TWBiX36WuAqVzrfg5VK4WZNHcDYgcrz7czb6gLUsXI/gqmq0TLWN /lXJ6ItCBRfJtANSYUwjSMVBIALIiCLhsTE8r6VhPsmalZwyif7T6IAseGF86g6H5PsjjSXDw7r 4QzlGp/VorjfnFBwEWqmCfaxzVK9LaDP5AVMj4nNcH0uMn0WnW38n/1Fa1j3JFiY3t6WR9PRRIl l814LS0WwgAQbLs828P3WpIlTqmcrl5E2N7gdKoZqPURz63NTUYnQ0ocpsaGVum2so0pzCnZYEV v64Hea8OTJzkdzVetgvUZUqdvIlKTAr7MoC9WPf0Za2KJ9Rz20mjdULEuAVyH6WWLkB0G6n9udo ivMm35oFKeNTDTedeq80wUcscUiwmGGyPwyPbI/5bIsc4wqvDuTBPTqKzhxxmh/U8GpU1osnfD/ L8xXbtS7N2HG3aR49tR5jJjpUTocD/itDoXBZjaHG4kVp+o4roYJObLCShKWXRtetM4wlhNCLq9 mDLvg+/C7Qf7oOlJunXVcLtQuy87Akh/JKhraaUDr05si5QbQ== X-Received: by 2002:a05:600d:8444:20b0:490:c6c2:52 with SMTP id 5b1f17b1804b1-490c6c20071mr242352495e9.3.1781132128011; Wed, 10 Jun 2026 15:55:28 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00bb749f54eeb85d7b.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:bb74:9f54:eeb8:5d7b]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4601f344148sm71599304f8f.19.2026.06.10.15.55.27 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 10 Jun 2026 15:55:27 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 21/21] python3: reference upstream ticket in a test skip Date: Thu, 11 Jun 2026 00:55:12 +0200 Message-ID: <3ad25cdf47e75d2edc217727eb3f8bd01ed76e47.1781132051.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 10 Jun 2026 22:55:30 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/238417 From: Ross Burton I've filed a ticket upstream for the libedit-related test failure in test_bang_completion_without_do_shell(), add a reference to the comment. (From OE-Core rev: b5c24e1491dcb9ab0f782df6be6582fbd2151724) Signed-off-by: Ross Burton Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie Signed-off-by: Peter Marko Signed-off-by: Yoann Congal --- meta/recipes-devtools/python/python3_3.14.5.bb | 1 + 1 file changed, 1 insertion(+) diff --git a/meta/recipes-devtools/python/python3_3.14.5.bb b/meta/recipes-devtools/python/python3_3.14.5.bb index 919cfde9aec..02bda8ddcf5 100644 --- a/meta/recipes-devtools/python/python3_3.14.5.bb +++ b/meta/recipes-devtools/python/python3_3.14.5.bb @@ -271,6 +271,7 @@ SKIPPED_TESTS = " \ # but not bang completion. test_bang_completion_without_do_shell() passes if # building with readline, but we don't want to change the default, so skip the # test. +# https://github.com/python/cpython/issues/150922 SKIPPED_TESTS += " \ --ignore test_bang_completion_without_do_shell \ "