From patchwork Wed Jul 22 05:49:57 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: auh@yoctoproject.org X-Patchwork-Id: 93101 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 5316BC4452D for ; Wed, 22 Jul 2026 05:50:01 +0000 (UTC) Received: from a27-192.smtp-out.us-west-2.amazonses.com (a27-192.smtp-out.us-west-2.amazonses.com [54.240.27.192]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.41715.1784699398183946688 for ; Tue, 21 Jul 2026 22:49:58 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@yoctoproject.org header.s=lvjh2tk576v2ro5mi6k4dt3mc6wpqbky header.b=XfTr2mGa; dkim=pass header.i=@amazonses.com header.s=hsbnp7p3ensaochzwyq5wwmceodymuwv header.b=4WQMLclN; spf=pass (domain: us-west-2.amazonses.com, ip: 54.240.27.192, mailfrom: 0101019f885fa438-88ecf2e8-0d54-4c1f-9a6e-7da6e6ae6c1e-000000@us-west-2.amazonses.com) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=lvjh2tk576v2ro5mi6k4dt3mc6wpqbky; d=yoctoproject.org; t=1784699397; h=Content-Type:MIME-Version:From:To:Cc:Subject:Message-Id:Date; bh=TQxwzCC7YAZsTlJhMgz6wSompAIYlEOYMNkOe1LB3yI=; b=XfTr2mGagiKTleuqSM37D1gjNKw7eM4Z0Z4Z0zV7W+3s5q7Zoyr3lx+6/ZegNzTl THRN/0XqzJT6qZ1KB8U4/jKPPD55sWMQUE4eWi/3QefpZGd/x1j+1QhAVm+FsBFaQ17 S0X3gnvA8SGc5caOBOyhbEkO/7tlCgrigtI6Yzr4= DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=hsbnp7p3ensaochzwyq5wwmceodymuwv; d=amazonses.com; t=1784699397; h=Content-Type:MIME-Version:From:To:Cc:Subject:Message-Id:Date:Feedback-ID; bh=TQxwzCC7YAZsTlJhMgz6wSompAIYlEOYMNkOe1LB3yI=; b=4WQMLclNro6/pv8Yvv7u/wxYh078FPQpd5q/6p7iSO7/8t+g2a4aRXL6il0NMSJt iYHzrjGQgLQOAHgyURqwklNJnd2yB/TAmDIUttPvKFMW+2oTgq1xgKPfIhxq4Ky9h32 01bcA5UgKDZr/O60pSrgD/7lduoWVtp31tIEtzuY= MIME-Version: 1.0 From: auh@yoctoproject.org To: Yi Zhao Cc: openembedded-core@lists.openembedded.org Subject: [AUH] dropbear: upgrading to 2026.93 FAILED Message-ID: <0101019f885fa438-88ecf2e8-0d54-4c1f-9a6e-7da6e6ae6c1e-000000@us-west-2.amazonses.com> Date: Wed, 22 Jul 2026 05:49:57 +0000 Feedback-ID: ::1.us-west-2.9np3MYPs3fEaOBysGKSlUD4KtcmPijcmS9Az2Hwf7iQ=:AmazonSES X-SES-Outgoing: 2026.07.22-54.240.27.192 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 22 Jul 2026 05:50:01 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/241587 Hello, this email is a notification from the Auto Upgrade Helper that the automatic attempt to upgrade the recipe(s) *dropbear* to *2026.93* has Failed(do_compile). Detailed error information: do_compile failed Next steps: - apply the patch: git am 0001-dropbear-upgrade-2026.92-2026.93.patch - check the changes to upstream patches and summarize them in the commit message, - compile an image that contains the package - perform some basic sanity tests - amend the patch and sign it off: git commit -s --reset-author --amend - send it to the appropriate mailing list Alternatively, if you believe the recipe should not be upgraded at this time, you can fill RECIPE_NO_UPDATE_REASON in respective recipe file so that automatic upgrades would no longer be attempted. Please review the attached files for further information and build/update failures. Any problem please file a bug at https://bugzilla.yoctoproject.org/enter_bug.cgi?product=Automated%20Update%20Handler Regards, The Upgrade Helper -- >8 -- From 1038b93b3b4b96bf93bf522a9254010d5203938e Mon Sep 17 00:00:00 2001 From: Upgrade Helper Date: Wed, 22 Jul 2026 05:11:32 +0000 Subject: [PATCH] dropbear: upgrade 2026.92 -> 2026.93 Source: CHANGES 2026.93 - 21 July 2026 Note >> for compatibility/configuration changes - Security: Fix a use-after-free in X11 forwarding that could possibly lead to memory corruption. This is vulnerable to authenticated users if X11 forwarding is enabled. By default X11 forwarding is not built. In 2026.89 the server is running as the authenticated user for X11 forwarding, in earlier versions it runs as root. This removes X11 "single connection" which has probably never been used. Reported by @peter-pe https://github.com/mkj/dropbear/commit/882f83806d5e133037cd28e954a878984ef7b9c4 - >> "permitlisten" authorized_keys lines will now be ignored if the port is invalid (>65536). From Basavaraj S Maneppagol. - >> In 2026.92, the configure option --enable-plugin-deprecated wasn't correctly renamed. This is now implemented. Patch from Alexander Dahl - Two factor auth "-t" is no longer deprecated, it will be kept. The "DEPRECATED_TWO_FACTOR" option is ignored, and no longer required. - Fix out of bounds read during utmp/wtmp log file handling, reported by Basavaraj S Maneppagol. - More robust handling of ascii inputs for some platforms. From Basavaraj S Maneppagol - Convert manpages to mdoc format, from shrub [Updated 16 July: This is no longer planned to be removed, future releases will ignore DEPRECATED_TWO_FACTOR and always enable it, like previously] --- .../dropbear/0001-urandom-xauth-changes-to-options.h.patch | 4 ++-- .../dropbear/dropbear/0005-dropbear-enable-pam.patch | 4 ++-- .../dropbear/dropbear/0006-dropbear-configuration-file.patch | 4 ++-- .../dropbear/{dropbear_2026.92.bb => dropbear_2026.93.bb} | 2 +- 4 files changed, 7 insertions(+), 7 deletions(-) rename meta/recipes-core/dropbear/{dropbear_2026.92.bb => dropbear_2026.93.bb} (98%) diff --git a/meta/recipes-core/dropbear/dropbear/0001-urandom-xauth-changes-to-options.h.patch b/meta/recipes-core/dropbear/dropbear/0001-urandom-xauth-changes-to-options.h.patch index b0f8e61998..bda26f9446 100644 --- a/meta/recipes-core/dropbear/dropbear/0001-urandom-xauth-changes-to-options.h.patch +++ b/meta/recipes-core/dropbear/dropbear/0001-urandom-xauth-changes-to-options.h.patch @@ -1,4 +1,4 @@ -From e5f6c6e8d2b6315e509c610e7d13e7dd2b465a85 Mon Sep 17 00:00:00 2001 +From e76584f01916b185ad6356994e3d9e90d3badfa4 Mon Sep 17 00:00:00 2001 From: Richard Purdie Date: Wed, 31 Aug 2005 10:45:47 +0000 Subject: [PATCH] urandom-xauth-changes-to-options.h @@ -9,7 +9,7 @@ Upstream-Status: Inappropriate [configuration] 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/default_options.h b/src/default_options.h -index ffaf062..2eb7de1 100644 +index 2a5ebc0..3047c09 100644 --- a/src/default_options.h +++ b/src/default_options.h @@ -347,7 +347,7 @@ group1 in Dropbear server too */ diff --git a/meta/recipes-core/dropbear/dropbear/0005-dropbear-enable-pam.patch b/meta/recipes-core/dropbear/dropbear/0005-dropbear-enable-pam.patch index bfb78b1ee1..6a3aeb708d 100644 --- a/meta/recipes-core/dropbear/dropbear/0005-dropbear-enable-pam.patch +++ b/meta/recipes-core/dropbear/dropbear/0005-dropbear-enable-pam.patch @@ -1,4 +1,4 @@ -From dce5d03ed4d28c6374e593b7ef2cc4688f795fbd Mon Sep 17 00:00:00 2001 +From 94167f75b6752d349661adaa0b2e247858ee7446 Mon Sep 17 00:00:00 2001 From: Jussi Kukkonen Date: Wed, 2 Dec 2015 11:36:02 +0200 Subject: [PATCH] Enable pam @@ -15,7 +15,7 @@ Signed-off-by: Jussi Kukkonen 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/default_options.h b/src/default_options.h -index 2eb7de1..be85bee 100644 +index 3047c09..db53262 100644 --- a/src/default_options.h +++ b/src/default_options.h @@ -240,7 +240,7 @@ group1 in Dropbear server too */ diff --git a/meta/recipes-core/dropbear/dropbear/0006-dropbear-configuration-file.patch b/meta/recipes-core/dropbear/dropbear/0006-dropbear-configuration-file.patch index 7509efb88c..84a1142bb0 100644 --- a/meta/recipes-core/dropbear/dropbear/0006-dropbear-configuration-file.patch +++ b/meta/recipes-core/dropbear/dropbear/0006-dropbear-configuration-file.patch @@ -1,4 +1,4 @@ -From 50d64008f722f0f9719fc6c1b44582316022b93e Mon Sep 17 00:00:00 2001 +From e3a1ed88c75c6177d8e7240d0922a663cc4d8c9b Mon Sep 17 00:00:00 2001 From: Mingli Yu Date: Thu, 6 Sep 2018 15:54:00 +0800 Subject: [PATCH] dropbear configuration file @@ -16,7 +16,7 @@ Signed-off-by: Mingli Yu 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/svr-authpam.c b/src/svr-authpam.c -index ec14632..026102f 100644 +index 6bbf820..d8d383d 100644 --- a/src/svr-authpam.c +++ b/src/svr-authpam.c @@ -224,7 +224,7 @@ void svr_auth_pam(int valid_user) { diff --git a/meta/recipes-core/dropbear/dropbear_2026.92.bb b/meta/recipes-core/dropbear/dropbear_2026.93.bb similarity index 98% rename from meta/recipes-core/dropbear/dropbear_2026.92.bb rename to meta/recipes-core/dropbear/dropbear_2026.93.bb index 4d9a9e10eb..a776e11705 100644 --- a/meta/recipes-core/dropbear/dropbear_2026.92.bb +++ b/meta/recipes-core/dropbear/dropbear_2026.93.bb @@ -27,7 +27,7 @@ SRC_URI = "http://matt.ucc.asn.au/dropbear/releases/dropbear-${PV}.tar.bz2 \ ${@bb.utils.contains('DISTRO_FEATURES', 'pam', '${PAM_SRC_URI}', '', d)} \ " -SRC_URI[sha256sum] = "91dcb5234de8dea68dd82c55411c9fc986b457ab58372a780ee8a870419c2f7e" +SRC_URI[sha256sum] = "310a6087952897c182efbe16088fa0c4d07c467e850a22699472137278fabf09" MIRRORS += "http://matt.ucc.asn.au/dropbear/releases/ https://dropbear.nl/mirror/releases/" PAM_SRC_URI = "file://0005-dropbear-enable-pam.patch \