From patchwork Wed Jul 1 10:48:05 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: tgaige.opensource@witekio.com X-Patchwork-Id: 91488 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id C743FC43458 for ; Wed, 1 Jul 2026 10:48:28 +0000 (UTC) Received: from mx-relay48-hz1-if1.hornetsecurity.com (mx-relay48-hz1-if1.hornetsecurity.com [94.100.128.58]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.41942.1782902907001711511 for ; Wed, 01 Jul 2026 03:48:27 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@witekio.com header.s=selector1 header.b=QYmP+s4V; spf=permerror, err=parse error for token &{10 18 spf.hornetsecurity.com}: limit exceeded (domain: witekio.com, ip: 94.100.128.58, mailfrom: tgaige@witekio.com) ARC-Authentication-Results: i=2; mx-gate48-hz1.hornetsecurity.com 1; spf=pass reason=mailfrom (ip=40.107.159.129, headerfrom=witekio.com) smtp.mailfrom=witekio.com smtp.helo=osppr02cu001.outbound.protection.outlook.com; dkim=pass header.d=witekio.com header.s=selector1 header.a=rsa-sha256; dmarc=pass header.from=witekio.com orig.disposition=pass ARC-Message-Signature: a=rsa-sha256; bh=XL2YQ91X8+cwb5UnG6S2mQwVLjHdPVUv2U9cOtEVcdk=; c=relaxed/relaxed; d=hornetsecurity.com; h=from:to:date:subject:mime-version:; i=2; s=hse1; t=1782902904; b=Xbt5rysOGgR2panhKnsBLQ/Hhib0k1sT50hGDA7muF+IRwyG1UAIRHgOo4mfLUkuowHlhOqF ekoPRQXlX1/n9x6trAA6tst4CMao7sVfE2vLDS04MMvdmEfN9iGiLFmEH69R2yW3XWfap8F6iZ5 Du+nLZye2vWrB8y7wwKNPlW3QBBJlUgRDmBKYcWLwRYoEhzB3L+0O5cqa93kX71VkEZmy9iVjJh U0fKzb5FaQGSIU74/bETQmfN2X6EeG/vNUeKfh7/pLz1r4mX6ha3C2QDcCyNLBFvn3sKISFtXS8 UcPcpfp5dvMQG3mbtE9QIoZ8rhYdu9Is8yDqUINwPl12w== ARC-Seal: a=rsa-sha256; cv=pass; d=hornetsecurity.com; i=2; s=hse1; t=1782902904; b=RFbfDw/YYAv2vZs4k83pDoqJ63BFiugeD2F1cvmm3DE2EhMjBqrLZ/GlUKhukPHBGklypZAo ob0iWq0rHpdjaxAq8bRhW71eKtiDE1luyGCFL0Lmt7vzNKLSbph0mVCg5pWNDZFbkk/b/qGx24j 71TxZ4hKGmkKojsWRl9jU47D8F9usI9MRSnNw6v7mdD9lAjnq+kPBOnSKz004kC4IfRqo7IDbWp kRDtfYjLp9ZO6kDNbe+7YbZdY7RcEgm1KRwtr5r1wVhmhdPx288iNQvgNU+X5RCVv1m7xKWNiJ+ SGaavFFyRAEbjqDGczAuSwT4fqRu9hVz21gXZXriKJKMg== Received: from mail-norwayeastazon11023129.outbound.protection.outlook.com ([40.107.159.129]) by mx-gate48-hz1; Wed, 01 Jul 2026 12:48:24 +0200 ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=tbjFyr8fVJUrtEQeNsBPtI2iNdaFOszZiOKB2gKLfuHRwY4Xcft965n4xHjcXmbKfBZpmS8lmqAyM0LZ148zFcdHTxjvv3ucxa1gjoHfd3kKULohfmvMI5sqArqJjyXYwg2MuYffkwZ8fV2briJGM/g6A/XNrfOtVXIpzEMEJxdg24+iTa5qRWJnArm0/2vHQB1aGWSwaFp8CVY2yyuC39geYw9z+wL2gvRWFCLyYxL90riyXoqp7NIf8yaafqMKk08r3idOcgmj0bZSuFIqrnWtf8sCIhjVjdcXtXT6g9Btj7mttKnc0whICs3jIY0cHSnyv9+pNt2dhhLOsUmPrw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=XL2YQ91X8+cwb5UnG6S2mQwVLjHdPVUv2U9cOtEVcdk=; b=kIGHFu7JSFMHPfQhOWVd9tLCk5Ez2fhwgbjhFGpPLbxRIsGAoeNSZ+injTnbwhrrEsROyU2/D5XZ1G/WUybMuPKS1/RFeb6iVAuO7VU9R/IMIUs+vTQQDvrZCLZ0Fk3bhMWcvzt6wY6lATq/ScznZ23bkNsY3ZFNZs3QCYXhXKJ3r0o9V4ystSi25x3TSjOfunA252In3qu0HCv7gxNnt2LGO17TUAPiUQFfUiwAGJWiYf6gKkeMGk8BUemozojilSgKSLqt2iQYR+s1dNsWUoXHZlRfphMiQr0+icEhfILS4nwq1+ajgZ1Ul1Du4xJOzAFLP1SxS/h0bl1doXO8Nw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=witekio.com; dmarc=pass action=none header.from=witekio.com; dkim=pass header.d=witekio.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=witekio.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=XL2YQ91X8+cwb5UnG6S2mQwVLjHdPVUv2U9cOtEVcdk=; b=QYmP+s4V/NZQLUJBJ35y+ZKuBvk1c0Mb54lPjrPex8ntIRp5+4KzCRrrNdioM84S84N5atoBZsEQp9q8QdTCIu+/Qt8aUnoDc1AqosZjm6eDFYJaPXpymMXJvo9kykUxvus/x69kqqC7hQXSXRpAGujvyTm+5a4eehyvxltTJbMRnBwujxOP7G9UmvRjx1XKIIPHIWSSIekYXS9TRfHxxBhjVCqXtKvWMqTCi6J4UUHfXAYJdKAvT8nhoF2Fvd7PuAkXw5ItkUaL33jfNsxM9KOGNzOKjKj/RG9nPXaR9d+p4d9D0ZFs2AhWvytT1vM9Wv4ACi7Q6B0mh5rjHNlIdg== Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=witekio.com; Received: from PAXP192MB1405.EURP192.PROD.OUTLOOK.COM (2603:10a6:102:1ad::24) by DU2PPF9A909934E.EURP192.PROD.OUTLOOK.COM (2603:10a6:18:3::99c) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.8; Wed, 1 Jul 2026 10:48:17 +0000 Received: from PAXP192MB1405.EURP192.PROD.OUTLOOK.COM ([fe80::a160:226a:5870:e1d6]) by PAXP192MB1405.EURP192.PROD.OUTLOOK.COM ([fe80::a160:226a:5870:e1d6%5]) with mapi id 15.21.0181.008; Wed, 1 Jul 2026 10:48:17 +0000 From: tgaige.opensource@witekio.com To: openembedded-core@lists.openembedded.org Cc: hsimeliere.opensource@witekio.com, "Theo Gaige (Schneider Electric)" Subject: [wrynose][PATCH 1/4] dhcpcd: patch CVE-2026-56113 Date: Wed, 1 Jul 2026 12:48:05 +0200 Message-ID: <20260701104808.3577244-1-tgaige.opensource@witekio.com> X-Mailer: git-send-email 2.43.0 X-ClientProxiedBy: LO4P265CA0091.GBRP265.PROD.OUTLOOK.COM (2603:10a6:600:2bc::8) To PAXP192MB1405.EURP192.PROD.OUTLOOK.COM (2603:10a6:102:1ad::24) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: PAXP192MB1405:EE_|DU2PPF9A909934E:EE_ X-MS-Office365-Filtering-Correlation-Id: 1a92beb1-1105-4d37-6104-08ded75e4284 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|10070799003|23010399003|52116014|376014|366016|1800799024|13003099007|18002099003|3023799007|56012099006|6133799003; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:PAXP192MB1405.EURP192.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(10070799003)(23010399003)(52116014)(376014)(366016)(1800799024)(13003099007)(18002099003)(3023799007)(56012099006)(6133799003);DIR:OUT;SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 2 X-MS-Exchange-AntiSpam-MessageData-0: AQ2I2vAWQW8bWuD+VCDmzuWCoBrkBA4vAsoXBN5xoZaGGztivLSEXrWhdiCYlSGReRcGQExZa3YmVvjs0cqVXpluL4GtZgfHJ5Wsaq6/q4PRzsfGQFv4gkRBxOwB3vNgIpE1qRNNOc2hKOU0uXX+Ndbnn9eBm6PI0EC96TNd+CZgbvEzEDrBUSkCTGgNwtfnkDd58nn0+N4f5RHu8vp7eOKgq++4KNFYxRpKjlzBWaELE3t2ZFiW0y8RImfHftMOhQxkvqqi0ZJscACqTpxuRQUGnKj3dnbNLTmVbbnjW2WvKRVEuR0NSkgWz2xgpORrG6yCQVVHhFfQHEtj43uBTYZKV+MVEYbpMNtidOQQZeoMqigTz74yDkhd9Yr6YiKYKudCICyY+z3c5JwTsiK8vproB2DPf//Hl34Vj2QpEOnj1tq98L1gp7vKwu71OcprrABTuURSt4DllULFh9jJxRXDOM9Hh3LcnZlGJ0Ve4oj0iOakDJuT1V/3QDhbiDJMdkojYEsDY1DESg+gXn8VcCQGg7m32S6aBMUyoUANwrIyaOzUI5XkaRx8h4gQJQzR7xwvMgWYBGB0gB+l4OlDU8DBJtB9oMKrRgm0COBKrm9TN7X+yGmGb7ENyjsu7VHAqta9xko6oBwLgukTO21pXiHv5L4LP9JO/w9yZzRCphGwIJZa+4sowBIArSYTCcjGUsIMGWtcsyRDCZFPehdWbwUd5tByjesiQ3WO3FSwKmaHarhk8o9EQ0UXO9LatgEUGDX5QWjIVTJleV+ClUs1hgF/N+8EwNd/FH7dHn/ki90cqOEZ3RQl58hEBnlgD5sdkXukiWICufqovUieeacUcbMV2BMGKo8HRjNmO7D0ZXFQvbyHR2OMiN/b89fnCTKbRm8B7oFvUshCrhSZjy8NWsGeNx37eQH1JCEYKpoTzU+kXhQ31aQOEYevqq5k8d89r3YYE+EKEmXHzUUrhjBPPK5+vCIEEkAYn5Mpp+N40Hjh/c/WL2/tX0clgBI4SD3voXtnCyuPT8al7yPHU+AL71SiPEjO5YKFFbMoE2Eeim7qr680r1q+H3PX0NPO07I2EA0FnoSbqv/t9wQWhKfV0xXUhbciSGf+b6C3QEo6WZovI2P8IDRvZNCHghVzjjahpLrTr17CIhTvxn8RpD108W4p9si+Hg/WWGcP0Ro5eU8JuCNyMLVGzPjwIwI60ny/u4Y/pqgD+//hiIveJ4a96VBDc4tHNnCPO77/Jg7BYZ0hL+1cr37zpfwBvyL0rvUff8xWuKVzfJZPOAlvGQ9mELnJBQwT18d6PUexlszhBWnoTG7bxu2FboPSwKmGV5ngwf2CC62iH1M8XAztqEWheDlZIzZQ8Glmc8lXhzaJVmbHGOKPZy9rJ7jMAMaMEMoUT6RYQCAfTX8qC4bsvUgxCk/qDd6ZG254y7KI9AEWiprJRyh25AGOAOihSOECeGFtHBXl3RLv+7hybIr//YSdPeaMfVsPs3fw7vH1JAqmPxii6bOzvK059+9G1fkOK1Bck4apb4DR6c/X8Sej0TwGqAMkePWCaoLM/vVEGzrnC+lYVW8C39DqdHTFkAcRrj6q3On9aSiLyH8Xu21jGqtB0TTPCtyX2a4GVVXUqjCyRRidyseIpeWe3wAdo8muLI36K9GkwGMrHFIgtEoNlIty1V+HcXGXo8pBwBtD0WfqQVPiFb2ppHGYdpbPmxTemgyM8keG8U7yTDD6dYO/CpymUSaCjQondtPVQvmVtPzWQQ6QVYItJDOVjKGa92G5QRtCSiqh6SNa X-MS-Exchange-AntiSpam-MessageData-1: NHQmIVT65nX9Fw== X-Exchange-RoutingPolicyChecked: pYp8nIK7RcXp+Xs4xODke5I5jCFQD1ARCv4e2DPGXQIkjz9d3cLR82HnGdiYQekd2gc+9nFRmUES30PHOhFQ2nimq5skIOQ6lxf9Ufh7dOhl/hLumtLOC5qxMUvjSdsvdLvNXStr0g4XK1j1+uon765h4eilSq1sdGBiBC8HBX3l/nXy9xVHpF28XoWsh6oxGbyluWOlGP2rIVSLhMSnHvncQp2xbBEsDD8XRNudscLp7Iyjd7zvZTHBIbeXWCsM/85agHnRr/cjQn25NY7WiSUY7CbV5MNW7zsiyfONih3N5mqYaL2GxfklVd3vCoSE+ho/kBSUaHMss1W5ybyJOw== X-MS-Exchange-AntiSpam-ExternalHop-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-ExternalHop-MessageData-0: 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 X-OriginatorOrg: witekio.com X-MS-Exchange-CrossTenant-Network-Message-Id: 1a92beb1-1105-4d37-6104-08ded75e4284 X-MS-Exchange-CrossTenant-AuthSource: PAXP192MB1405.EURP192.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 01 Jul 2026 10:48:17.6962 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 317e086a-301a-49af-9ea4-48a1c458b903 X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: 3vdnydW+oqK337gnUWz6qIOUdI3u3qSquNGCbo+qeWq4uJ0EehqUiUqbRvOlSaRp1LZ8e6i1Yo39mOK7QVjXBg== X-MS-Exchange-Transport-CrossTenantHeadersStamped: DU2PPF9A909934E X-cloud-security-sender: tgaige@witekio.com X-cloud-security-recipient: openembedded-core@lists.openembedded.org X-cloud-security-crypt: load encryption module X-cloud-security-Mailarchiv: E-Mail archived for: tgaige.opensource@witekio.com X-cloud-security-Mailarchivtype: outbound X-cloud-security-Virusscan: CLEAN X-cloud-security-disclaimer: This E-Mail was scanned by E-Mailservice on mx-gate48-hz1 with 4gqxZD5Y2xz1wsnH X-cloud-security-connect: mail-norwayeastazon11023129.outbound.protection.outlook.com[40.107.159.129], TLS=1, IP=40.107.159.129 X-cloud-security-Digest: 22b050a32b4a1e894e997782e2d9781f X-cloud-security: scantime:1.376 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 01 Jul 2026 10:48:28 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/239967 From: "Theo Gaige (Schneider Electric)" Backport patch [1] mentionned in [2] [1] https://github.com/NetworkConfiguration/dhcpcd/commit/5733d3c59a5651f64357ac11c98b4f39895c8d25 [2] https://security-tracker.debian.org/tracker/CVE-2026-56113 Signed-off-by: Theo Gaige (Schneider Electric) --- .../dhcpcd/dhcpcd_10.3.1.bb | 1 + .../dhcpcd/files/CVE-2026-56113.patch | 92 +++++++++++++++++++ 2 files changed, 93 insertions(+) create mode 100644 meta/recipes-connectivity/dhcpcd/files/CVE-2026-56113.patch diff --git a/meta/recipes-connectivity/dhcpcd/dhcpcd_10.3.1.bb b/meta/recipes-connectivity/dhcpcd/dhcpcd_10.3.1.bb index c940d6806a..b348c895e8 100644 --- a/meta/recipes-connectivity/dhcpcd/dhcpcd_10.3.1.bb +++ b/meta/recipes-connectivity/dhcpcd/dhcpcd_10.3.1.bb @@ -15,6 +15,7 @@ SRC_URI = "git://github.com/NetworkConfiguration/dhcpcd;protocol=https;branch=ma file://dhcpcd.service \ file://dhcpcd@.service \ file://0001-dhcpcd.8-Fix-conflict-error-when-enable-multilib.patch \ + file://CVE-2026-56113.patch \ " SRCREV = "42ff6d2548209af3185473e6cb6f9d235c48bbf4" diff --git a/meta/recipes-connectivity/dhcpcd/files/CVE-2026-56113.patch b/meta/recipes-connectivity/dhcpcd/files/CVE-2026-56113.patch new file mode 100644 index 0000000000..602fb7979e --- /dev/null +++ b/meta/recipes-connectivity/dhcpcd/files/CVE-2026-56113.patch @@ -0,0 +1,92 @@ +From 7c4a5dbae8ff99f8d3c2d8c1d3be95b60ffb4485 Mon Sep 17 00:00:00 2001 +From: Roy Marples +Date: Tue, 23 Jun 2026 02:17:10 +0100 +Subject: [PATCH] DHCPv6: When deprecating addresses, restart on prefix + deletions + +As that might invalidate the next address to iterate on. + +Reported-by: CuB3y0nd + +(cherry picked from commit 5733d3c59a5651f64357ac11c98b4f39895c8d25) + +CVE: CVE-2026-56113 +Upstream-Status: Backport [https://github.com/NetworkConfiguration/dhcpcd/commit/5733d3c59a5651f64357ac11c98b4f39895c8d25] +Signed-off-by: Theo Gaige (Schneider Electric) +--- + src/dhcp6.c | 21 ++++++++++++++++++--- + 1 file changed, 18 insertions(+), 3 deletions(-) + +diff --git a/src/dhcp6.c b/src/dhcp6.c +index 91341994..8a8a20a0 100644 +--- a/src/dhcp6.c ++++ b/src/dhcp6.c +@@ -2593,12 +2593,13 @@ dhcp6_findia(struct interface *ifp, struct dhcp6_message *m, size_t l, + } + + #ifndef SMALL +-static void ++static bool + dhcp6_deprecatedele(struct ipv6_addr *ia) + { + struct ipv6_addr *da, *dan, *dda; + struct timespec now; + struct dhcp6_state *state; ++ bool freed = false; + + timespecclear(&now); + TAILQ_FOREACH_SAFE(da, &ia->pd_pfxs, pd_next, dan) { +@@ -2624,11 +2625,14 @@ dhcp6_deprecatedele(struct ipv6_addr *ia) + if (IN6_ARE_ADDR_EQUAL(&dda->addr, &da->addr)) + break; + } +- if (dda != NULL) { ++ if (dda != ia && dda != NULL) { + TAILQ_REMOVE(&state->addrs, dda, next); + ipv6_freeaddr(dda); ++ freed = true; + } + } ++ ++ return freed; + } + #endif + +@@ -2636,7 +2640,11 @@ static void + dhcp6_deprecateaddrs(struct ipv6_addrhead *addrs) + { + struct ipv6_addr *ia, *ian; ++#ifndef SMALL ++ bool again; ++#endif + ++again: + TAILQ_FOREACH_SAFE(ia, addrs, next, ian) { + if (ia->flags & IPV6_AF_EXTENDED) + ; +@@ -2658,7 +2666,9 @@ dhcp6_deprecateaddrs(struct ipv6_addrhead *addrs) + /* If we delegated from this prefix, deprecate or remove + * the delegations. */ + if (ia->flags & IPV6_AF_PFXDELEGATION) +- dhcp6_deprecatedele(ia); ++ again = dhcp6_deprecatedele(ia); ++ else ++ again = false; + #endif + + if (ia->flags & IPV6_AF_REQUEST) { +@@ -2671,6 +2681,11 @@ dhcp6_deprecateaddrs(struct ipv6_addrhead *addrs) + if (!(ia->flags & IPV6_AF_EXTENDED)) + ipv6_deleteaddr(ia); + ipv6_freeaddr(ia); ++#ifndef SMALL ++ /* Deletion may invalidate the next pointer so restart */ ++ if (again) ++ goto again; ++#endif + } + } + +-- +2.43.0 + From patchwork Wed Jul 1 10:48:06 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: tgaige.opensource@witekio.com X-Patchwork-Id: 91490 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id C8789C43458 for ; Wed, 1 Jul 2026 10:48:38 +0000 (UTC) Received: from mx-relay48-hz1-if1.hornetsecurity.com (mx-relay48-hz1-if1.hornetsecurity.com [94.100.128.58]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.41943.1782902910636740344 for ; Wed, 01 Jul 2026 03:48:30 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@witekio.com header.s=selector1 header.b=dBfcRCja; spf=permerror, err=parse error for token &{10 18 spf.hornetsecurity.com}: limit exceeded (domain: witekio.com, ip: 94.100.128.58, mailfrom: tgaige@witekio.com) ARC-Authentication-Results: i=2; mx-gate48-hz1.hornetsecurity.com 1; spf=pass reason=mailfrom (ip=40.107.159.129, headerfrom=witekio.com) smtp.mailfrom=witekio.com smtp.helo=osppr02cu001.outbound.protection.outlook.com; dkim=pass header.d=witekio.com header.s=selector1 header.a=rsa-sha256; dmarc=pass header.from=witekio.com orig.disposition=pass ARC-Message-Signature: a=rsa-sha256; bh=RcnhjLd/1JBcmuJwRiGP7ABE/azG3PDDmEVLTiTLrJ4=; c=relaxed/relaxed; d=hornetsecurity.com; h=from:to:date:subject:mime-version:; i=2; s=hse1; t=1782902908; b=PbfL6gX5bb+gMWiDbBESC4SCBpGLdF5agGPNU24laE8og3M2Gs9JprCwlxXeUxgdAMkgbhjw GJTFTqnh9rGXCVnjbiBqvG6MHn64zXeueJW1pGdIZS2684BXfPvW+wwNTHRlis/on1q5seyLZt4 0cilfLAOSWYQXHkGYuQP2/QfGeAVf69uXvPuK6bbDpmGHtjMoJIxPlzp/8hyx1aY9dEyG9NM+0q wBnI1yIVT20PZxumtGyj3OK3FFq6ZmzOO9FyZvkYnCJHsLrkMSII0gp83qfJDFGyKAxIPsAzAPP SMVnxTh3qteEThLSUiOb0/KKiBaTVkSokH0/8s/GR2XMw== ARC-Seal: a=rsa-sha256; cv=pass; d=hornetsecurity.com; i=2; s=hse1; t=1782902908; b=OHF8VXJ5aXrUH4EPo8sq8UWZPbrq+FxvxuH04O9SOrUY71c+DsqGdDngXskD2rDSgdWsrq/A vPozwQwrDcNSdEu7JONLYWVUiDhvP2rC/PXiXU8vZQ3TmD8E0QUqbC7TCrQwyHEciKi41fhohqi RuDhq5rYQj4B2THqynC8ORhi8zvka08vINflzLwPbw8A40jTXJIwFuQOlhbHwLO+NaegNYL13lv 7rllknN99PLjUJ3+Bkv+F9vcc3HsyPrqWVcMi864Xc60juHOF6PhZnR4l/qzRLi0WiGNrssIc/p rNjmYT8ZxJWW4+2q/WIzl8HoWP7aDp+DXFR6UCTzb3i3Q== Received: from mail-norwayeastazon11023129.outbound.protection.outlook.com ([40.107.159.129]) by mx-gate48-hz1; Wed, 01 Jul 2026 12:48:28 +0200 ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=sBqvZ+s6hEo3AmQmdxebY3Uui9XnUQgtEyJ6CReS1Dfao3EQ/XGa1gAG6pflTpxWdiqm/GRa1Z9szoLhuuSUYh3VURQ4hTg5wvmZGPKam1VF0cJdRfc7E7DaSzVPDVId2B8Nf4vkMNc+v/NlqjptRfyIT1e+MbYPu/AzDcgeBT4X2BIRdXwrCCG3jliMDnJrgrlf2IYPKLGmcgr6t7nOs9tW+OKyS8DQxQAnI7mkeCeYcluVxSJjLCY/hVIghXMI6w7nCKbnQO12mFvCpTxItN/WycVLY8CIN/kt7x51KOROYv2oyxmVzURFYaicXoMIhc9tAA6Q+ORruGLYEE/Z9g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=RcnhjLd/1JBcmuJwRiGP7ABE/azG3PDDmEVLTiTLrJ4=; b=WVyvA7nJe9GDjiSijFCGr6pX8NDEuXRSTTf9R9WcCDfbYynP6pqDTe+6Tt8K5QuDBK53ZSKNP0m471e5n1o7cC3Au7Yh0G/6EYssdoBWErR6E4XqHkI/kAiO3hUC6PY6SDvLl4h/+Rx+4cuCN3XQ04nOY7Uut2bjoMkVZRLKvP+OdTKyAqMG8tH1QG6mVj9pEE7H5bvj6YylAnrC0RWgNa9r5bGcm5v917Ch0drYCsypGENRYvfyj8yvQ3L4j0APeJIBdo2u076rK3srlwfr5+M1X6gWmKHzXlbbVR9bB0mKDvDkDPJ8oSQr3hut7A7f97FvAFAaDT6iLr2YAxW9kg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=witekio.com; dmarc=pass action=none header.from=witekio.com; dkim=pass header.d=witekio.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=witekio.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=RcnhjLd/1JBcmuJwRiGP7ABE/azG3PDDmEVLTiTLrJ4=; b=dBfcRCjaomiRQROAVu159BfeOnbvGRmlC4GcTZw3wOZ/UCq23WPgonam9aZletpPMrgt1R6+u1f9360vgchB8XuGyO5YSKNBseHXmElKRJXuzHqOIhXkHOeTF3DLq7/Zyyl1o/J+IjRiNwKlksWQATo9rAtnOTDLxBRt/XTLZLdbpL8Q+pzfyCP5KsEBF7xUxKjuHcOYeKj8+0mBiM9OyMS6TbZWG1cvMOlIhNUl9d+P0+lvJapUEktBY4hyXpoId11Da7/nxYSPiByXgokdZiF7R4AGalRqaqmBYsKpc++Mun2Zed8U3Z/xvUinUaRod9qOol9ngcArejH31IukLg== Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=witekio.com; Received: from PAXP192MB1405.EURP192.PROD.OUTLOOK.COM (2603:10a6:102:1ad::24) by DU2PPF9A909934E.EURP192.PROD.OUTLOOK.COM (2603:10a6:18:3::99c) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.8; Wed, 1 Jul 2026 10:48:19 +0000 Received: from PAXP192MB1405.EURP192.PROD.OUTLOOK.COM ([fe80::a160:226a:5870:e1d6]) by PAXP192MB1405.EURP192.PROD.OUTLOOK.COM ([fe80::a160:226a:5870:e1d6%5]) with mapi id 15.21.0181.008; Wed, 1 Jul 2026 10:48:19 +0000 From: tgaige.opensource@witekio.com To: openembedded-core@lists.openembedded.org Cc: hsimeliere.opensource@witekio.com, "Theo Gaige (Schneider Electric)" Subject: [wrynose][PATCH 2/4] dhcpcd: patch CVE-2026-56114 Date: Wed, 1 Jul 2026 12:48:06 +0200 Message-ID: <20260701104808.3577244-2-tgaige.opensource@witekio.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20260701104808.3577244-1-tgaige.opensource@witekio.com> References: <20260701104808.3577244-1-tgaige.opensource@witekio.com> X-ClientProxiedBy: LO4P265CA0091.GBRP265.PROD.OUTLOOK.COM (2603:10a6:600:2bc::8) To PAXP192MB1405.EURP192.PROD.OUTLOOK.COM (2603:10a6:102:1ad::24) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: PAXP192MB1405:EE_|DU2PPF9A909934E:EE_ X-MS-Office365-Filtering-Correlation-Id: 46df89fa-b5d9-482b-e64e-08ded75e4351 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|10070799003|23010399003|52116014|376014|366016|1800799024|13003099007|18002099003|22082099003|3023799007|56012099006|6133799003; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:PAXP192MB1405.EURP192.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(10070799003)(23010399003)(52116014)(376014)(366016)(1800799024)(13003099007)(18002099003)(22082099003)(3023799007)(56012099006)(6133799003);DIR:OUT;SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 2 X-MS-Exchange-AntiSpam-MessageData-0: SgU1vpY1ft53qa6KxwFYij8vrXuYeOnoR4sy3kjvN/22m9QYBIV09lI+II8Bgq1XsO0YiSAipml0dfQsamh5+jT6yy/+0LE8E4aXZmCtGCFkEcmrb00jSPIY8bTbOFc5+NnNjrHOstcrYbWUiuLoLlH7Fko4rXLdE9YHZennKCSEFPCGUx8LsBoH/aWHhzSYg6sIEecqR9gwNP722dDtX/qoD/20FKJ9sO1AtqiqHzYdFbgJdBYwUu9B7PkmVMn6JZpi4hfwZYwHGtPg2j1rmcvca7DfZflIvZ1P2R9Xt7qCyiofgcJOh6Ys75WZdTItJ8puVRVdTqpWLOHULvNity25iNiyQzorCPffnKVZYG5Pz3umAkt7XeyAUdUuiPAIOJ1IgzNn7W1W1PIv3njYSfXxVn12gLDzEpRVF+/6PFXhnauqhGFahd78y9Ti2pni2zh6K+yoIN8i4Y/FxFzFkYJKdgrGmIO+imj4Gq17xvEKQjx1+P9LXKCB60JJX6bvDeS+MOzJD+/jXMLzKXaHoV/ovKJuCYQhuEdiM/6a1K4mFmsD4juA10dmOysDen5yMCgV1YdRpNa8zs2G5hr3vb0hu0vyu6rGik2sNieUFt25RCL3q74nPez8ajH9cOiFFTG831M5qmx6lGtd83UqNTWrF4crYX3aeUrHI6MhU8V/8wOO6RiYc9Vn3FKhYeocNLDQXMpxwbzacmLnjyVyuHdCgWCld0D+qMyXWFL/176Z2QQyN5g85Ej2UgbNc28BHGOiRIJE5/jXMVkwlZE8bj2e65fUhOhsasBoi6dtkyQ021GfgmWqH9w3VsvPHxddTwJ+oPPT0UAY4nefdJh0klRxuXDqovpVrZu9WfqgsYnCzD/Cup7Kv/9YdLkFzReQCB9aLyohk5k2r+XzGPAa3+/aaR4mMvPLYdZdnkKyw38fRKcrPZAhXKtlOKKvHEqniD7PPQNpNJPDgfZFRSNJuvX3QHGXv50BmoWZMoASJVb6993FIcoLzZMh3eF+yxR5IoNzgB64lSY6+Vfx61m/Xttl2KVlIP2CVokvs6yPRdGAnNUnyIcfSURy4pqiHIBB/he+CIiQauuvot3N2/ge9QzSOrDSVTrd/FcXpo0jIpG7IT7g03vz6Dxer8r3TN2yMq6x8l7WUeUFAco2GFGpLlhqfksCqYkP509GWQyVp22/1MkTl4Muato8toB/B5soENqy3KkoasZKBeccYb9TC8tjfXGnTTkXbCceK9MDdENhoj9mNeKS+q3DOk8XcJcqHG4jPwLpmuJdZzb+r70vVgKK/n3NyTt2mnRG4sPljfxGu7M5JNYv68v+PLqiNKPZSVTSOWFL3nItmZT5eLYHoHmNROCtZ+FBpsySyexOEl/ABGZucNS0aXKekOjcpLRwEkdgdM5/Suiwrnw5nV5AF92xVyyyqCozLmHECkSCtsmZVKIizHaBXCPpfLfMFAicCcKTFnwfXRAOVhd4MHrhpYXL93IyrdOncsYq73yeuH72nE8hIR8YeHqRSHqp1Ie0Og2bjCRcQmbED8qo5xg0V8aIFdcINVWkGH/aKwJwUaCOtBrze5+i+WON17yM5QJjBeoJ5FcIJUdChg8gmRiiasbypSvHLz/Qh1yZ59y4X+2i/BPyDYd0za2UVxytEwYiWDpqooNJzFgic/tInxvW2Q/4xNM00ogGrgufvVaWn3Z5g7uJS3waEo0KkuuQKpJxm4IzknVgwTFVCIhSLTP7Oz8JMFG8XC/HgLQWQ7PCNhjFD5ZRvrADVota4aaxtLwY2Si+okHm X-MS-Exchange-AntiSpam-MessageData-1: 5OuKTQVwOmQ7zA== X-Exchange-RoutingPolicyChecked: naz5Xihcf57oyiS0B42Mq7Z3qwoEt8RRljEnlRzgzYI/NZyPve3KnTr9JfwWvi6KHolTyWlVfYuZbXV119UphmdjCjxQTZ2euSDM3Z00zXKTazYdK3LgsR+Z6/dV6thamdHkcw3khbm/2b8a6+d8o9M988nDweC/Ivsm3W9sL4/lymEah3NouOceMOv/2HE1sJPx53IsQcoc2/qQGjlJxajE7ko4GjQWgWxYQXG4ZZK42JPwvb+pvIXNXLr77pEhZ6cH7u5lTdU/cO0D3Sal5UHyZNRPj5RnqvC5amnS1TXXaIYXkckOXxNX4DVF3lCAo7GMcPJi+IaEFZlpVqCKXA== X-MS-Exchange-AntiSpam-ExternalHop-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-ExternalHop-MessageData-0: wLZ52pIvqMmqIlQCSCydgfsJsIDyla8VcoDIwbEsu2hvxsvHLZ0nKNKlriGYu6fugj5y3N0sDaLr3GJFeDBeng5uv4OCOoAeWkH81YRcrgjoYs9+Zsq500DYg0/iGXEp2MrdwI3IMDTYzA0mhMVsaAfWL0ijQUm6OEa86hO7ED5cphb+7misAU8AXctxlp3FojiiaPbr+ZJwS52wQirbopt7Ph/XIUg/xD7b40HP6ubK1oZGPvSbMiV1akUPTkYuIlZyoptPEqS+KT46xd4gVXjPGe7qftPdV+q/aj7VTJJr2JtuFRfG5cBdoqe0+RbGGwyQP0CReLETD1loCs9PLzLj2tzx9e1RTCKyBwpEOpwm/KDExBrF91nkTvMi5I9vawZVnPJ+PKhq6Svi+3RU0rmjOWtkZExtH1+/7ch0eIl0NYTn1m59lOuAkos7BNjmMC0ZcXfIseW6b+WbI0s+P0Nz6Qu6JT42VpVPVRs/ZlRWBncgcDcGSJ68Wer8hYmiBcNsmh/jiewg2vrDoj7yiFWJ6lkh/AnMOSY1Hwq/4CAVX8U3wRvOvQ5RNY7pYQlUwCf88X+A+ORaMmlHq1W/4DdwRtcti3BVstlM44wr4uPFo5VrFg01uryOgpxVKgfq X-OriginatorOrg: witekio.com X-MS-Exchange-CrossTenant-Network-Message-Id: 46df89fa-b5d9-482b-e64e-08ded75e4351 X-MS-Exchange-CrossTenant-AuthSource: PAXP192MB1405.EURP192.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 01 Jul 2026 10:48:19.0563 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 317e086a-301a-49af-9ea4-48a1c458b903 X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: WhPMiJGtDbUBNs4hypa34lvwS4qdt7qDyddPud+pLcgbe0kU2unMpkgcM34fZim6dAMdKmnHyW7OKn5V95Qmug== X-MS-Exchange-Transport-CrossTenantHeadersStamped: DU2PPF9A909934E X-cloud-security-sender: tgaige@witekio.com X-cloud-security-recipient: openembedded-core@lists.openembedded.org X-cloud-security-crypt: load encryption module X-cloud-security-Mailarchiv: E-Mail archived for: tgaige.opensource@witekio.com X-cloud-security-Mailarchivtype: outbound X-cloud-security-Virusscan: CLEAN X-cloud-security-disclaimer: This E-Mail was scanned by E-Mailservice on mx-gate48-hz1 with 4gqxZK0dRcz1wsnV X-cloud-security-connect: mail-norwayeastazon11023129.outbound.protection.outlook.com[40.107.159.129], TLS=1, IP=40.107.159.129 X-cloud-security-Digest: 867109f42f86a8faf4df0e83121ab9e0 X-cloud-security: scantime:1.345 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 01 Jul 2026 10:48:38 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/239968 From: "Theo Gaige (Schneider Electric)" Backport patch [1] mentionned in [2] [1] https://github.com/NetworkConfiguration/dhcpcd/commit/2f00c7bfc408b6582d331932dfa47829c4819029 [2] https://security-tracker.debian.org/tracker/CVE-2026-56114 Signed-off-by: Theo Gaige (Schneider Electric) --- .../dhcpcd/dhcpcd_10.3.1.bb | 1 + .../dhcpcd/files/CVE-2026-56114.patch | 34 +++++++++++++++++++ 2 files changed, 35 insertions(+) create mode 100644 meta/recipes-connectivity/dhcpcd/files/CVE-2026-56114.patch diff --git a/meta/recipes-connectivity/dhcpcd/dhcpcd_10.3.1.bb b/meta/recipes-connectivity/dhcpcd/dhcpcd_10.3.1.bb index b348c895e8..8195cea029 100644 --- a/meta/recipes-connectivity/dhcpcd/dhcpcd_10.3.1.bb +++ b/meta/recipes-connectivity/dhcpcd/dhcpcd_10.3.1.bb @@ -16,6 +16,7 @@ SRC_URI = "git://github.com/NetworkConfiguration/dhcpcd;protocol=https;branch=ma file://dhcpcd@.service \ file://0001-dhcpcd.8-Fix-conflict-error-when-enable-multilib.patch \ file://CVE-2026-56113.patch \ + file://CVE-2026-56114.patch \ " SRCREV = "42ff6d2548209af3185473e6cb6f9d235c48bbf4" diff --git a/meta/recipes-connectivity/dhcpcd/files/CVE-2026-56114.patch b/meta/recipes-connectivity/dhcpcd/files/CVE-2026-56114.patch new file mode 100644 index 0000000000..0c2be7edfc --- /dev/null +++ b/meta/recipes-connectivity/dhcpcd/files/CVE-2026-56114.patch @@ -0,0 +1,34 @@ +From 94766be134a053d88670377c70d3bdfc68b5db4a Mon Sep 17 00:00:00 2001 +From: Roy Marples +Date: Tue, 23 Jun 2026 02:06:55 +0100 +Subject: [PATCH] DHCPv6: Prefix exclude option can be 17 octets (#671) + +Well that's a simple off by one error + +Reported-by: CuB3y0nd + +(cherry picked from commit 2f00c7bfc408b6582d331932dfa47829c4819029) + +CVE: CVE-2026-56114 +Upstream-Status: Backport [https://github.com/NetworkConfiguration/dhcpcd/commit/2f00c7bfc408b6582d331932dfa47829c4819029] +Signed-off-by: Theo Gaige (Schneider Electric) +--- + src/dhcp6.c | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/src/dhcp6.c b/src/dhcp6.c +index 8a8a20a0..5e497cfd 100644 +--- a/src/dhcp6.c ++++ b/src/dhcp6.c +@@ -1093,7 +1093,7 @@ dhcp6_makemessage(struct interface *ifp) + + /* RFC6603 Section 4.2 */ + if (ap->prefix_exclude_len) { +- uint8_t exb[16], *ep, u8; ++ uint8_t exb[17], *ep, u8; + const uint8_t *pp; + + n = (size_t)((ap->prefix_exclude_len - +-- +2.43.0 + From patchwork Wed Jul 1 10:48:07 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: tgaige.opensource@witekio.com X-Patchwork-Id: 91489 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id E461BC43327 for ; Wed, 1 Jul 2026 10:48:38 +0000 (UTC) Received: from mx-relay48-hz1-if1.hornetsecurity.com (mx-relay48-hz1-if1.hornetsecurity.com [94.100.128.58]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.41944.1782902914602869295 for ; Wed, 01 Jul 2026 03:48:35 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@witekio.com header.s=selector1 header.b=do+S/c8k; spf=permerror, err=parse error for token &{10 18 spf.hornetsecurity.com}: limit exceeded (domain: witekio.com, ip: 94.100.128.58, mailfrom: tgaige@witekio.com) ARC-Authentication-Results: i=2; mx-gate48-hz1.hornetsecurity.com 1; spf=pass reason=mailfrom (ip=40.107.159.129, headerfrom=witekio.com) smtp.mailfrom=witekio.com smtp.helo=osppr02cu001.outbound.protection.outlook.com; dkim=pass header.d=witekio.com header.s=selector1 header.a=rsa-sha256; dmarc=pass header.from=witekio.com orig.disposition=pass ARC-Message-Signature: a=rsa-sha256; bh=URJUHNX7XmdfFhf8t2rQOO06oIcEXQku/CGc+vLQ7K8=; c=relaxed/relaxed; d=hornetsecurity.com; h=from:to:date:subject:mime-version:; i=2; s=hse1; t=1782902912; b=iGPIAMUqM6JXDlI/GnJ7e6yBm31J0eCXfcmMBGF9yD3QBN3qlr/5Y3SfZVQ4jfXyheBs1CdL f+X2MgboBeSRamcRE5DQ+AHvQUj2v7FYz1QROnO9M4qOoN1IbOkb+1IhhpApS2BYg2L4nExwnfT QFpY6DUQPexKHC5RFG/RuImbkb90qA2ObtLb32n4kNTYzrpxypOPOReuRa9xddqyk92Ivah82/T ZLFEiQawswptsH1iYbsP5AOcXww0Ouqn6YnzRwtGa0IOFOtmAX0B8Ila0mQiIq9Q4jtMeRtBaGj YcdRVYtfO+dtpSs/kYEnYmnYUWq8DUJ2am/BT55od+2TQ== ARC-Seal: a=rsa-sha256; cv=pass; d=hornetsecurity.com; i=2; s=hse1; t=1782902912; b=UiFL882sg03WGagTxppvkxcT6nBNOV1xfHy3Ugd7+J2qspxoaXlvPWHAJwADBjbQ0csOboh8 Qdi5of5pKCSR+snIWqWYYcuxTljSNgEkOBE/Yd3uIya413+8beQq+ByESXjF3sEC+WtLrE1uLf8 w+7M+ShITXPb4nHx2G3sdHXYCCBF9KrEgjxfq0vQelL37MJAszPl50PZwKYTS2Mdr6GciQAjn8A UNIVQ0G3yyf2cSQUbjP5R1jvu+864Ob5XEyZ6b2JaoM8oueuzGkcGqwlxnTgD+kfPtZPSQev1hG xpL4foVgqBsO2ckJKaNj1849g0wt9TPuUC7scIKXgUj2g== Received: from mail-norwayeastazon11023129.outbound.protection.outlook.com ([40.107.159.129]) by mx-gate48-hz1; Wed, 01 Jul 2026 12:48:32 +0200 ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=c/opg7/shJllwXf9QGBdXULbkEHDaFO2GiYfYoAdWlvWDjs7C6iAJ1xisJ6u68vz2xo7V8ygoXH3dasYBevRWXcg1573W7N1L4lXoKGqhvOFkMHuWf79/2Yrmq5cwaqfYXKcyPLHQM8yayVuugcEUjXN7+FXwue9UiYJHBdH0W0226FLr6KNbi4t/4DD4c7dkk6VT724jJNRZ7D8GB+gJdA+tt8KA4kGPEu+goVlcUuWnjr04Tig40TRpDL4GLjINDBpsfdiYRRYt9tuHrL9sJ5BbuFv5z5zf46VO4Isy1efe5glmWL3/GW+Xgiz/2HYSkdUU1HbGsrJvE8wH+eRrQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=URJUHNX7XmdfFhf8t2rQOO06oIcEXQku/CGc+vLQ7K8=; b=E0N5kZfxgXKpPL1qsxilWdIbH1rggU2M1/rpUtmPhPFrj/3oc8MYhSs3koT2YbmEiCI6Q6OdeJUg4uhPhY1efXjqyHGSEXHcZXmXOVrpOss9//9ZjJ69hmH7qmTta9kZ3sQ9PISzsZrTtOpuothzXP6GmWy1nrWKBamHosAuVjSm15wglVFDdA9D+yh1bfIH9OYiaiBksA0Au/hA+lJlF1C/EbRR/0wcz5oPsFAe20JB0sSbuUhFh3yYZHO/v6G8qxYs4FfSKK3s3bAQMh0NzGixNDavPFrGbBkTJVDLdwpYzImzsBw+GqGiV2hKRCiFtlMtFHbibuJOoFK9Vb+U6A== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=witekio.com; dmarc=pass action=none header.from=witekio.com; dkim=pass header.d=witekio.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=witekio.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=URJUHNX7XmdfFhf8t2rQOO06oIcEXQku/CGc+vLQ7K8=; b=do+S/c8ksR1dCENuDnZL2BAF2pVPRrRvKE37YS8o/0iCq6mikpxz+0p/KBZj5g3/S09lPNSZmUcl1+ifvfFy6TAhJKhZHIL169V6SfsLY7ClqRrSDpr3t+iu4vrjqJY8RpYKD0Co56xMscf28oaKqOlAyNtjxfCogv2IjRgpyCELHWSTZBaXP/JQDl9I7+x1uZvfu9dKce5V8JZrzL5mld2q3Bx01/cyJtYW3ZykQCu/2Ey9smNhPLv6Uo1jghQ9nS7xwqmf1J4Md8wIIqC6R8WgYHT8jgmfdJ0WgZUAHR4W2/bYkQcqxHK7m7QdareX+WKbt8TXqIgBeyv/DMrNKw== Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=witekio.com; Received: from PAXP192MB1405.EURP192.PROD.OUTLOOK.COM (2603:10a6:102:1ad::24) by DU2PPF9A909934E.EURP192.PROD.OUTLOOK.COM (2603:10a6:18:3::99c) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.8; Wed, 1 Jul 2026 10:48:20 +0000 Received: from PAXP192MB1405.EURP192.PROD.OUTLOOK.COM ([fe80::a160:226a:5870:e1d6]) by PAXP192MB1405.EURP192.PROD.OUTLOOK.COM ([fe80::a160:226a:5870:e1d6%5]) with mapi id 15.21.0181.008; Wed, 1 Jul 2026 10:48:20 +0000 From: tgaige.opensource@witekio.com To: openembedded-core@lists.openembedded.org Cc: hsimeliere.opensource@witekio.com, "Theo Gaige (Schneider Electric)" Subject: [wrynose][PATCH 3/4] dhcpcd: patch CVE-2026-56116 Date: Wed, 1 Jul 2026 12:48:07 +0200 Message-ID: <20260701104808.3577244-3-tgaige.opensource@witekio.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20260701104808.3577244-1-tgaige.opensource@witekio.com> References: <20260701104808.3577244-1-tgaige.opensource@witekio.com> X-ClientProxiedBy: LO4P265CA0091.GBRP265.PROD.OUTLOOK.COM (2603:10a6:600:2bc::8) To PAXP192MB1405.EURP192.PROD.OUTLOOK.COM (2603:10a6:102:1ad::24) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: PAXP192MB1405:EE_|DU2PPF9A909934E:EE_ X-MS-Office365-Filtering-Correlation-Id: 1ac6cb00-e23c-4aea-55f9-08ded75e43fc X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|10070799003|23010399003|52116014|376014|366016|1800799024|13003099007|18002099003|22082099003|3023799007|56012099006|6133799003; X-Microsoft-Antispam-Message-Info: HJSkrW0/o2fwWWlL67Z76REp4yp7IqB/ubXt9hABATT/gytekYiVZifsXVLhdVKYeoMa6fZ5/UuFhMC4yXrmqXF8j2PBLSmf5FjazyTllrJgEMitFXZ/+OBONJavBpBNUSqW8Qs1jK+41WDyvO6OzPNSvNEX79lcLCcvgN2PSE21GOB5yMM65ikMeecfpix85+8G4g1AQVSACmyaBbNxAZANA9KCIiSHlQ209zCNp09/1xGzK5ks32JSUZXXGIqSlp3vRrrc6QNH5r+rsecWuxUPlxO6EZdI0rwgz/yqd9RoVehbWHdM3gm4mlUGsa+NPhMN96NHiwUM9EI2pLoZ4K9UPikiBO9ew4FWPm6FjkhOLdmkyizdpTAMnu5DvwhHd7LB93wLavZItnKH31DSaB0l+TjfNu9lHVN99rRUGiUEAPZWpMhPNjXFfJly8o2GXiwuiW4sqp3VNomPZvIOc4os4k1H+0BEH8n2EUT7uS/MGnUA/fk6I4aIsDIetR7nq2QU8Z6QonTfv6utlkh6PxSJCiQq9uS6dVikNasU2nzBD9qffLSxgKs/wTRe1cqxZQaZMRiLn2HijRFe0mv/KbBDIgg61S/Ec6SpMKz26PaMXQgi1EYrR61KDHlvxsnf2Olbo9cvJ4Ns+Ym1hH7AnNICqcORyomSvz89GPJGUEo= X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:PAXP192MB1405.EURP192.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(10070799003)(23010399003)(52116014)(376014)(366016)(1800799024)(13003099007)(18002099003)(22082099003)(3023799007)(56012099006)(6133799003);DIR:OUT;SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 2 X-MS-Exchange-AntiSpam-MessageData-0: xShS8muhHga29YJJVwAwKP371RBZEEqKhejlSJEJZ9TqE08b0JPRLtAsqACSaddF5+TwtyiKcDyg0SKlmE0xY07pD9FVyx73MCePbcFStXHvJmTgBxUzBaX80m1Aau7s2r2LRoX2S3WKxsr8CDTEIG+uUEdrmhHl5eqpxunVkVAE9H+dVpOoeyGLEwSvpRoY4pBEv8GNC4Mei7ZpV4F5uwkGY+TLH+vWkSV90g6PYlKij3o41kRmsT+tPRdijyvy8ygeMB5x9hbrSDFt4qbyLVmZGJhzbt8CEhYFPXjdIzTaPO2aLnABUcEVCkKo9ZP2KgAWzvfZS/cXkvntr6q9zU1xe9yHxIENes5+f3XRqZj7x97hdikWC8dvpw+gT1HxiC5kpu9XbjONjxa7mex9l4yLp3tj5tIAUIZ4fx/VWVxfl4Ei7yGrwCszPkj994a7OoyMgI7UfMg7Kw8KuJuF90pbhKIHTcU1bijRmLEoiqAtTyA9AScn2P02AM2jQc/mRwb7CGQtLACbx211I+hyMqkCdIRfYnf8psaG2K2b7+NFUut2Omj6dwRAIl5/Jje+TLhHmjc/69tq6BEhyaSZR/fT723oNnt5b73VYtIcvFjdfUo82NEXFOOCjd83OB+02SPOjQgoMPIpg740HP8g28uk08KqGWC5PsGOr1lsli7VVZxkWMZaeFl6bWz2R61mNCpEAxnxgUqH14LmfXkYsjD9F6cLdqGP8puY/2tF3/exn/zrUfUtwbuai2WhoVDTnU6SAC19UYIXPqgYd7LQzZEcAY/+P34s/++MZ0HkTr2SANHH12W4EBY6IoZBMvG/OEwSidOkcHdMBR6ZiEYKxw3QtilmnIEKI1gs8kgLZahV/ByDvwIZiWkCl2rhbXd4Mq9NT2a+455+X9e/MdaJH9Z94v6+oVSN3EvPWdEFFpSVjGzFqmcp5IVwacVApspdPFkeZqot1swu0/7Mn0o8q5tT10ZzcLn9gXCKp/li+XLxQyV1mbrHBOn84CStOOSoskeL8fISA2+3aiJyszJhiEQ+7a2xMW0qS4fLz9k4eilSTTqBoxp7z/W5ng9PMVrnJTYTsDtZ8m9dI6Ct5gTnEWhMqmOkG6++eDp2ZyapnPJwXxYTHfqEIvwNkLTIqpOh3QlD0VZHGzC7Nt+alkLi8QA3Q84LYUoYHNNuqFZbh+Ieg1sfRCOk/E39RF4F8IVwot3ubLluEjeAo0TWIUXXIu2bOvc57XlfUy5Va192cRaicnNF4gTpyWOH1I/VusOX9eGgMKQxj4/L0PjE2dOlCsHr4eRYoeUwXApzDiDpWCv9atSaZ7E/s0cqhF1fbDwRbqImyGEHRVItgmUMhpvedxLrkkLGpF1b2RWMtdp/r7CS/khjadQZOOfzrIhYz8jNONGmW4sEAjI9t+i9booP7cuVyuBtrZw85BC2t6eTQQWYnKpukkJIs4SM4jdPc2+iEq7gyzRtfmyspnmOUpkgUniVuVbHM1pM+A2RgGanrJi2qbxCIJEQgZvnLeIzXiufODJVwq1YhLKunf/DIzq4XtGSGDX5p0LrEpWYCrmC7gzgzX0VxpvCxL38Si7OBI5bD2C9tYh1T2H+5XDPNg9IaXKEzrJlFhNbYhZxsWqmSTBkyFJFw/Zgc5cdvY3W9gy8HhztRn1VV8G6/Qa2bpKqmqRu0zVxHRZ4elJPde7RkgwYNo+FnsZOcQRSi304uluI9W7Qg4FKPFhfGnXwS3283h4DdLgBHTzACS7NHMhXs4slE51h7qC+f5JHKnTVpAIAMhWnsMvq X-MS-Exchange-AntiSpam-MessageData-1: bDw9EqMq/9OfvQ== X-Exchange-RoutingPolicyChecked: RSbOsVq/ziq3HMAlfWa6s9Fn58qh1Er8p64NsWr/3dFDn3WopxxZoLwVGWW8UfieY9JbfXBPDTzoKTa5u2xRlh9kL2K0G6CWy9jvWWTVj4OEGQ6XvAxLSg4z79mHqlABNp//5PYeOGvmCkYMG96TQfYFhpgiPM/dQrLeNVNEZ+9l3aNIpuF9bIfkVC+U5W68TjlUuOl5M16j0RMb67QYGEhqtwv06T4WT72WzFp7cN6GfK57rELXtnz9ixsjUqSSFat0AydTVft05zqO/KhZGgJclb0vlSPrklBbDH98issHB7jP9cX/et06Cbh/BtVMGPvJLGKx3T2F3O0csWtRXw== X-MS-Exchange-AntiSpam-ExternalHop-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-ExternalHop-MessageData-0: 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 X-OriginatorOrg: witekio.com X-MS-Exchange-CrossTenant-Network-Message-Id: 1ac6cb00-e23c-4aea-55f9-08ded75e43fc X-MS-Exchange-CrossTenant-AuthSource: PAXP192MB1405.EURP192.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 01 Jul 2026 10:48:20.1554 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 317e086a-301a-49af-9ea4-48a1c458b903 X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: xU5qAqJ73+lerkuKBs7TUi9HaulfN0G7Ib4DvYIPGDSC4BB70LG352LcsylrBNvkmvETjMMGsIclxAug1Tu4xg== X-MS-Exchange-Transport-CrossTenantHeadersStamped: DU2PPF9A909934E X-cloud-security-sender: tgaige@witekio.com X-cloud-security-recipient: openembedded-core@lists.openembedded.org X-cloud-security-crypt: load encryption module X-cloud-security-Mailarchiv: E-Mail archived for: tgaige.opensource@witekio.com X-cloud-security-Mailarchivtype: outbound X-cloud-security-Virusscan: CLEAN X-cloud-security-disclaimer: This E-Mail was scanned by E-Mailservice on mx-gate48-hz1 with 4gqxZP00Hkz1wqT5 X-cloud-security-connect: mail-norwayeastazon11023129.outbound.protection.outlook.com[40.107.159.129], TLS=1, IP=40.107.159.129 X-cloud-security-Digest: 7b410cccf1018d0ca3eeef69d3058755 X-cloud-security: scantime:1.286 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 01 Jul 2026 10:48:38 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/239969 From: "Theo Gaige (Schneider Electric)" Backport patch [1] mentionned in [2] [1] https://github.com/NetworkConfiguration/dhcpcd/commit/708b4a56bae080a5b18c2e0c4c6fbe103131a2b0 [2] https://security-tracker.debian.org/tracker/CVE-2026-56116 Signed-off-by: Theo Gaige (Schneider Electric) --- .../dhcpcd/dhcpcd_10.3.1.bb | 1 + .../dhcpcd/files/CVE-2026-56116.patch | 31 +++++++++++++++++++ 2 files changed, 32 insertions(+) create mode 100644 meta/recipes-connectivity/dhcpcd/files/CVE-2026-56116.patch diff --git a/meta/recipes-connectivity/dhcpcd/dhcpcd_10.3.1.bb b/meta/recipes-connectivity/dhcpcd/dhcpcd_10.3.1.bb index 8195cea029..e214c03416 100644 --- a/meta/recipes-connectivity/dhcpcd/dhcpcd_10.3.1.bb +++ b/meta/recipes-connectivity/dhcpcd/dhcpcd_10.3.1.bb @@ -17,6 +17,7 @@ SRC_URI = "git://github.com/NetworkConfiguration/dhcpcd;protocol=https;branch=ma file://0001-dhcpcd.8-Fix-conflict-error-when-enable-multilib.patch \ file://CVE-2026-56113.patch \ file://CVE-2026-56114.patch \ + file://CVE-2026-56116.patch \ " SRCREV = "42ff6d2548209af3185473e6cb6f9d235c48bbf4" diff --git a/meta/recipes-connectivity/dhcpcd/files/CVE-2026-56116.patch b/meta/recipes-connectivity/dhcpcd/files/CVE-2026-56116.patch new file mode 100644 index 0000000000..a329f92e6f --- /dev/null +++ b/meta/recipes-connectivity/dhcpcd/files/CVE-2026-56116.patch @@ -0,0 +1,31 @@ +From d37f45a39aed5fd5d0d2c87f62b22f5eed7495bd Mon Sep 17 00:00:00 2001 +From: Roy Marples +Date: Tue, 23 Jun 2026 00:34:58 +0100 +Subject: [PATCH] IPv6ND: Free routeinfo when it expires (#670) + +Reported-by: CuB3y0nd + +(cherry picked from commit 708b4a56bae080a5b18c2e0c4c6fbe103131a2b0) + +CVE: CVE-2026-56116 +Upstream-Status: Backport [https://github.com/NetworkConfiguration/dhcpcd/commit/708b4a56bae080a5b18c2e0c4c6fbe103131a2b0] +Signed-off-by: Theo Gaige (Schneider Electric) +--- + src/ipv6nd.c | 1 + + 1 file changed, 1 insertion(+) + +diff --git a/src/ipv6nd.c b/src/ipv6nd.c +index ccf71241..557ff50e 100644 +--- a/src/ipv6nd.c ++++ b/src/ipv6nd.c +@@ -1789,6 +1789,7 @@ ipv6nd_expirera(void *arg) + logwarnx("%s: expired route %s", + rap->iface->name, rinfo->sprefix); + TAILQ_REMOVE(&rap->rinfos, rinfo, next); ++ free(rinfo); + } + } + +-- +2.43.0 + From patchwork Wed Jul 1 10:48:08 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: tgaige.opensource@witekio.com X-Patchwork-Id: 91491 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id E5484C43458 for ; Wed, 1 Jul 2026 10:48:48 +0000 (UTC) Received: from mx-relay48-hz1-if1.hornetsecurity.com (mx-relay48-hz1-if1.hornetsecurity.com [94.100.128.58]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.42191.1782902918570903814 for ; Wed, 01 Jul 2026 03:48:39 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@witekio.com header.s=selector1 header.b=e4cdNiwM; spf=permerror, err=parse error for token &{10 18 spf.hornetsecurity.com}: limit exceeded (domain: witekio.com, ip: 94.100.128.58, mailfrom: tgaige@witekio.com) ARC-Authentication-Results: i=2; mx-gate48-hz1.hornetsecurity.com 1; spf=pass reason=mailfrom (ip=40.107.159.129, headerfrom=witekio.com) smtp.mailfrom=witekio.com smtp.helo=osppr02cu001.outbound.protection.outlook.com; dkim=pass header.d=witekio.com header.s=selector1 header.a=rsa-sha256; dmarc=pass header.from=witekio.com orig.disposition=pass ARC-Message-Signature: a=rsa-sha256; bh=HXbvQH12eDbnLFxXzk+8PJ7zY3XnK97abBSyocKID1E=; c=relaxed/relaxed; d=hornetsecurity.com; h=from:to:date:subject:mime-version:; i=2; s=hse1; t=1782902916; b=kHbipxVFJBVfY/2rkL+E2MnK6o5lt6shEtJKLlXzrXRTxuLd4L++a7hCpX/jTIDxqzoOqx/R 2Yj/fh4kQ3+F4WEz+uWvFkpXUELUqkQ6yTkEEqTUf4lH2w7XOYQi9j0/ohDeFy27+/d1ZgEw7Qg DrH5mRbszLDF7rqBGma7SgkCDh6CBVPQV8SRK3C+KWtOmpKJJorpHo8P/jffBNMrFnNNTEkWTPN iI1qcCv9LYb2VbPcjPubMJO3BgJ/rmmYmd3MCq1A20LaXhKo65aKKHd/gcxvI6qeGJhFoe40M34 yIrCYNnFZ4X2zYscRcQqR/RLT1ZFL72sWLOxeEWIkvLvQ== ARC-Seal: a=rsa-sha256; cv=pass; d=hornetsecurity.com; i=2; s=hse1; t=1782902916; b=aPH2STP+FSopfSVEkYqRU5Gav1cMXX9bBQUA+uHY15I5Ja0kCJC/LH2IjSw77P0mrluls1o7 lHwGjWHjuSypX0OKUpGdBQFs81G7Kwq2k8NymHzZ2Qa5WFCDXozioXwGFdhsPKQFxRBM5L91mt2 qYuPI3sv/twtZcA4PtS/XNIY3cFcAez+Ur2L7Z5CGoEu+nek80Q7/KE3TbW1lE/ej/F/PfRX+J2 7oDSogNt9AjZc7YX9206o+nKEaKuDtYvvX//H3X6KD3oC1s0RUAcNqbo8GqEF/w/vSThHiGgWg/ y6PCRsxDDo2OrMHeO/1Kv6uBjxjIQ0MFkyNWPDu4KpfhQ== Received: from mail-norwayeastazon11023129.outbound.protection.outlook.com ([40.107.159.129]) by mx-gate48-hz1; Wed, 01 Jul 2026 12:48:36 +0200 ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=YfX47o/F0+t6l/ULhNz0Z+w8ARLTxxVvWuAXw6Zuo7Vie2XhuI5f48Qfh/JLiBEsEMgXAvg/WjNT1mCP4qCFnAgGzJTnecSlWquU/fSyMsXiGtmPI271Lp+59TVClQiyOwPtBvdaWqpY+xZa3kWlz3pFtLvJJ8YQpN7kbEjZuhWX+m3m4HQewaMIP6ANSOgu9LKM+DMv5igtWsd6hRMDBxAS7xnMZUtnoRCqO3TkZCrhoo7bHhx28fShTXi/4mkIJscAWD06o0oshYq070rk0lAjkNspOSRS02Dolz1s79kaannN3RVEUMfbbPJxLCPcTSQnQk7YbhLFZN6wrQHydw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=HXbvQH12eDbnLFxXzk+8PJ7zY3XnK97abBSyocKID1E=; b=DJSU1mKBkVmHKVJso8CRE8cLepIgU7lLMY84MZCXwxmYWeH9jZomGXZmuGl04vhlBOP1roQt7CVTjAm35iOJAfdwNdodBPR5Z5HffF89xs1pklfnEVvqC18jrpirQyxPP1iSWZjAfjRiRM5S/98DFZpAWJMltybGjTMxasJ0OXDSHebgSfY0shV4mU1BEJ/8fE8xwD5+Dycd4e/I6/EACqVCYIpkFZtq6LiK9SubFBHyhzYr477A3r0uUajMX6lL6HScF70KJTSjAusgtX4Ab1c3gFE1BMnuEBcKbzEcd3Qel1K9U4p/9zwnRi+9gK7zvMqHh08HJxfprYC7A0xYJA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=witekio.com; dmarc=pass action=none header.from=witekio.com; dkim=pass header.d=witekio.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=witekio.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=HXbvQH12eDbnLFxXzk+8PJ7zY3XnK97abBSyocKID1E=; b=e4cdNiwMIyNl/3DUrh6SCI+jwUbEJUJA3+FAVdtUzpDFt0x0eadqYPhj34Yyi6Duf/SOrYUEKtvlyp+6a74YL32f36Zy2zMoDbsM5kLWhordz6eGaCNlCPOS8e7m6VGjicHM6brV3kepkA7orb3iqrnV/h/B5C0+qpb5lhhtzKLrdQK3pCATzZDYJ5WW6/aUxll4ZBmy8sQxMdgLj/3m5OdEIkBnwqwoJrKO9VJuPcTE8FLZEFli2g1Cec9VjwYv2y/owI5OlpM2/3nnHk+oYjeX73TN1UahsWYz3D876taSz9UMx1IWkuWH+7Sa1Tn4Eh/nasUK0e09bL9j4hKP4A== Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=witekio.com; Received: from PAXP192MB1405.EURP192.PROD.OUTLOOK.COM (2603:10a6:102:1ad::24) by DU2PPF9A909934E.EURP192.PROD.OUTLOOK.COM (2603:10a6:18:3::99c) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.8; Wed, 1 Jul 2026 10:48:21 +0000 Received: from PAXP192MB1405.EURP192.PROD.OUTLOOK.COM ([fe80::a160:226a:5870:e1d6]) by PAXP192MB1405.EURP192.PROD.OUTLOOK.COM ([fe80::a160:226a:5870:e1d6%5]) with mapi id 15.21.0181.008; Wed, 1 Jul 2026 10:48:21 +0000 From: tgaige.opensource@witekio.com To: openembedded-core@lists.openembedded.org Cc: hsimeliere.opensource@witekio.com, "Theo Gaige (Schneider Electric)" Subject: [wrynose][PATCH 4/4] dhcpcd: patch CVE-2026-56117 Date: Wed, 1 Jul 2026 12:48:08 +0200 Message-ID: <20260701104808.3577244-4-tgaige.opensource@witekio.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20260701104808.3577244-1-tgaige.opensource@witekio.com> References: <20260701104808.3577244-1-tgaige.opensource@witekio.com> X-ClientProxiedBy: LO4P265CA0091.GBRP265.PROD.OUTLOOK.COM (2603:10a6:600:2bc::8) To PAXP192MB1405.EURP192.PROD.OUTLOOK.COM (2603:10a6:102:1ad::24) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: PAXP192MB1405:EE_|DU2PPF9A909934E:EE_ X-MS-Office365-Filtering-Correlation-Id: 432eee06-10d9-4419-5dc8-08ded75e44a7 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|10070799003|23010399003|52116014|376014|366016|1800799024|13003099007|18002099003|22082099003|3023799007|56012099006|6133799003; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:PAXP192MB1405.EURP192.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(10070799003)(23010399003)(52116014)(376014)(366016)(1800799024)(13003099007)(18002099003)(22082099003)(3023799007)(56012099006)(6133799003);DIR:OUT;SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 2 X-MS-Exchange-AntiSpam-MessageData-0: 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 X-MS-Exchange-AntiSpam-MessageData-1: OADlQ5UDrMBm3g== X-Exchange-RoutingPolicyChecked: A+NTuZy9x7Z/EC4PveaLin1PvMpZ6hXV6paaUHLKiDENRXfjGoJ8yO2dchajxnOUOxqJnLhPuPz59s2pDNt26p3cvf0YJeHx+yF4Hq0H+MuIdO+ZZ2LtETKOiMKGudhs2a/75oExVWdurUySOu2a470qrcbPEKLeY0vGlj89R5r/jSYFXVaex75um2ReAzOZEJ3/R/RulXG+ga5m4UZLFOVmpulrzPKKpkpy4cWcALAR9QmSo19lAySaILbz4ZiUFMqMDqarrz0IiMCjJ5/dYnKJy1zm5y86dsKcZYzYHLIxfx2UoGCbxIJ12FiNtru5MWrDnMmGMFY63lmFOT8a9Q== X-MS-Exchange-AntiSpam-ExternalHop-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-ExternalHop-MessageData-0: JmaK24bRik1D8hsyiYEutL3veJKko8MmH2M5T+ClL3mNc05SS7h2HKdVLVcCioxEi4WHtNclKPSn8MEVK4boIebXE7aPkwgYaJiTbbsfw1tYWrw+QnGeKfRpQvwrdTvNTydMXIxdeJj+ZVbsbbC451lTIg7muXFpCfn9eholA5+xueiSY8gItfnyX/5bcBbpkXfBy0bLqhRMDxfrnomPZ6WJ4yiimX9+I3PfzEYjPjwsd5sgCnNg/vHpqd08APr8qkGvjYEiB054ONYms7ysps5SIBDWgFDmpnqrBu+eilG6/zAEweZb7m+jILJdA6VgwoLkpqD31FawAn/sOgFDljz62EHkyuC/FgCqGUFaKV6zgkLqlcGP4k8+7+Jaoxc94WcAFPC19PaG/QSttMoS8j0dnBSLoecstss/4eMks3EPqxyIb2VymQlNUGK2LjTX+b+nbAFnbO+XBi++rsqtdNT5WscAWDb0qRA+cjmtLwX4Ut7XyNZRrhrFOaFKzZy+qLOn5EWrq2/gfyupBueJ3pHtYsyRRWZDtOyXM3zlMepkc+2GnYnVOr0pbh6qpRR9dFehB13eG6FaFy1V7o8uUzUVoBqrDylqxP60INLE+lhnjJdsPN2G27zcy1X0erqd X-OriginatorOrg: witekio.com X-MS-Exchange-CrossTenant-Network-Message-Id: 432eee06-10d9-4419-5dc8-08ded75e44a7 X-MS-Exchange-CrossTenant-AuthSource: PAXP192MB1405.EURP192.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 01 Jul 2026 10:48:21.2941 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 317e086a-301a-49af-9ea4-48a1c458b903 X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: oSZzApNCkSFguYUkQOnFnZ0uQA7Xg8MBvHAeIbEv0XDWV8pJQPXh7pthP5y34yZQOrksKbp+rCA+/z/UmaoiGw== X-MS-Exchange-Transport-CrossTenantHeadersStamped: DU2PPF9A909934E X-cloud-security-sender: tgaige@witekio.com X-cloud-security-recipient: openembedded-core@lists.openembedded.org X-cloud-security-crypt: load encryption module X-cloud-security-Mailarchiv: E-Mail archived for: tgaige.opensource@witekio.com X-cloud-security-Mailarchivtype: outbound X-cloud-security-Virusscan: CLEAN X-cloud-security-disclaimer: This E-Mail was scanned by E-Mailservice on mx-gate48-hz1 with 4gqxZS6X5Xz1wshH X-cloud-security-connect: mail-norwayeastazon11023129.outbound.protection.outlook.com[40.107.159.129], TLS=1, IP=40.107.159.129 X-cloud-security-Digest: 622207450390023b0330261a4d8a14a7 X-cloud-security: scantime:1.329 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 01 Jul 2026 10:48:48 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/239970 From: "Theo Gaige (Schneider Electric)" Backport patch [1] mentionned in [2] [1] https://github.com/NetworkConfiguration/dhcpcd/commit/78ea09ed1633a583dbcde6e7bab9df4639ec8a34 [2] https://security-tracker.debian.org/tracker/CVE-2026-56117 Signed-off-by: Theo Gaige (Schneider Electric) --- .../dhcpcd/dhcpcd_10.3.1.bb | 1 + .../dhcpcd/files/CVE-2026-56117.patch | 167 ++++++++++++++++++ 2 files changed, 168 insertions(+) create mode 100644 meta/recipes-connectivity/dhcpcd/files/CVE-2026-56117.patch diff --git a/meta/recipes-connectivity/dhcpcd/dhcpcd_10.3.1.bb b/meta/recipes-connectivity/dhcpcd/dhcpcd_10.3.1.bb index e214c03416..eb257cb27c 100644 --- a/meta/recipes-connectivity/dhcpcd/dhcpcd_10.3.1.bb +++ b/meta/recipes-connectivity/dhcpcd/dhcpcd_10.3.1.bb @@ -18,6 +18,7 @@ SRC_URI = "git://github.com/NetworkConfiguration/dhcpcd;protocol=https;branch=ma file://CVE-2026-56113.patch \ file://CVE-2026-56114.patch \ file://CVE-2026-56116.patch \ + file://CVE-2026-56117.patch \ " SRCREV = "42ff6d2548209af3185473e6cb6f9d235c48bbf4" diff --git a/meta/recipes-connectivity/dhcpcd/files/CVE-2026-56117.patch b/meta/recipes-connectivity/dhcpcd/files/CVE-2026-56117.patch new file mode 100644 index 0000000000..2aabced897 --- /dev/null +++ b/meta/recipes-connectivity/dhcpcd/files/CVE-2026-56117.patch @@ -0,0 +1,167 @@ +From d4b53e813f6119a4f090f6ba10a91778ce3cd1d5 Mon Sep 17 00:00:00 2001 +From: Roy Marples +Date: Mon, 22 Jun 2026 23:41:53 +0100 +Subject: [PATCH] control: Avoid hangup in the recvdata path + +Instead return an error and bubble it up where it can be +hangup / freed more cleanly. + +Reported-by: CuB3y0nd + +(cherry picked from commit 78ea09ed1633a583dbcde6e7bab9df4639ec8a34) + +CVE: CVE-2026-56117 +Upstream-Status: Backport [https://github.com/NetworkConfiguration/dhcpcd/commit/78ea09ed1633a583dbcde6e7bab9df4639ec8a34] +Signed-off-by: Theo Gaige (Schneider Electric) +--- + src/control.c | 47 ++++++++++++++++++++++++------------------- + src/control.h | 2 +- + src/privsep-control.c | 7 ++++++- + 3 files changed, 33 insertions(+), 23 deletions(-) + +diff --git a/src/control.c b/src/control.c +index ec1c633c..e6115f66 100644 +--- a/src/control.c ++++ b/src/control.c +@@ -115,10 +115,8 @@ control_handle_read(struct fd_list *fd) + bytes = read(fd->fd, buffer, sizeof(buffer) - 1); + if (bytes == -1) + logerr(__func__); +- if (bytes == -1 || bytes == 0) { +- control_hangup(fd); +- return -1; +- } ++ if (bytes == -1 || bytes == 0) ++ return (int)bytes; + + #ifdef PRIVSEP + if (IN_PRIVSEP(fd->ctx)) { +@@ -134,15 +132,13 @@ control_handle_read(struct fd_list *fd) + if (err == 1 && + ps_ctl_sendargs(fd, buffer, (size_t)bytes) == -1) { + logerr(__func__); +- control_free(fd); + return -1; + } +- return 0; ++ return 1; + } + #endif + +- control_recvdata(fd, buffer, (size_t)bytes); +- return 0; ++ return control_recvdata(fd, buffer, (size_t)bytes); + } + + static int +@@ -205,23 +201,31 @@ static void + control_handle_data(void *arg, unsigned short events) + { + struct fd_list *fd = arg; ++ int err; + + if (!(events & (ELE_READ | ELE_WRITE | ELE_HANGUP))) + logerrx("%s: unexpected event 0x%04x", __func__, events); + + if (events & ELE_WRITE && !(events & ELE_HANGUP)) { +- if (control_handle_write(fd) == -1) +- return; ++ err = control_handle_write(fd); ++ if (err == -1) ++ goto hangup; + } + if (events & ELE_READ) { +- if (control_handle_read(fd) == -1) +- return; ++ err = control_handle_read(fd); ++ if (err == -1 || err == 0) ++ goto hangup; + } + if (events & ELE_HANGUP) +- control_hangup(fd); ++ goto hangup; ++ ++ return; ++ ++hangup: ++ control_hangup(fd); + } + +-void ++int + control_recvdata(struct fd_list *fd, char *data, size_t len) + { + char *p = data, *e; +@@ -243,12 +247,13 @@ control_recvdata(struct fd_list *fd, char *data, size_t len) + if (e == NULL) { + errno = EINVAL; + logerrx("%s: no terminator", __func__); +- return; ++ return -1; + } +- if ((size_t)argc >= sizeof(argvp) / sizeof(argvp[0])) { ++ if ((size_t)argc + 1 >= ++ sizeof(argvp) / sizeof(argvp[0])) { + errno = ENOBUFS; + logerrx("%s: no arg buffer", __func__); +- return; ++ return -1; + } + *ap++ = p; + argc++; +@@ -268,12 +273,12 @@ control_recvdata(struct fd_list *fd, char *data, size_t len) + *ap = NULL; + if (dhcpcd_handleargs(fd->ctx, fd, argc, argvp) == -1) { + logerr(__func__); +- if (errno != EINTR && errno != EAGAIN) { +- control_free(fd); +- return; +- } ++ if (errno != EINTR && errno != EAGAIN) ++ return -1; + } + } ++ ++ return 1; + } + + struct fd_list * +diff --git a/src/control.h b/src/control.h +index ef592268..1f09fc8f 100644 +--- a/src/control.h ++++ b/src/control.h +@@ -76,5 +76,5 @@ struct fd_list *control_new(struct dhcpcd_ctx *, int, unsigned int); + void control_free(struct fd_list *); + void control_delete(struct fd_list *); + int control_queue(struct fd_list *, void *, size_t); +-void control_recvdata(struct fd_list *fd, char *, size_t); ++int control_recvdata(struct fd_list *fd, char *, size_t); + #endif +diff --git a/src/privsep-control.c b/src/privsep-control.c +index b9ea7f9c..3cdeedea 100644 +--- a/src/privsep-control.c ++++ b/src/privsep-control.c +@@ -110,6 +110,7 @@ ps_ctl_dispatch(void *arg, struct ps_msghdr *psm, struct msghdr *msg) + struct iovec *iov = msg->msg_iov; + struct fd_list *fd; + unsigned int fd_flags = FD_SENDLEN; ++ int err; + + switch (psm->ps_flags) { + case PS_CTL_PRIV: +@@ -133,7 +134,11 @@ ps_ctl_dispatch(void *arg, struct ps_msghdr *psm, struct msghdr *msg) + if (fd == NULL) + return -1; + ctx->ps_control_client = fd; +- control_recvdata(fd, iov->iov_base, iov->iov_len); ++ err = control_recvdata(fd, iov->iov_base, iov->iov_len); ++ if (err == -1 || err == 0) { ++ control_free(fd); ++ ctx->ps_control_client = NULL; ++ } + break; + case PS_CTL_EOF: + ctx->ps_control_client = NULL; +-- +2.43.0 +