From patchwork Mon Aug 3 22:01:41 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Peter Marko X-Patchwork-Id: 94330 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 52476C55182 for ; Mon, 3 Aug 2026 22:02:40 +0000 (UTC) Received: from mta-64-225.siemens.flowmailer.net (mta-64-225.siemens.flowmailer.net [185.136.64.225]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.4364.1785794551735366202 for ; Mon, 03 Aug 2026 15:02:32 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=peter.marko@siemens.com header.s=fm1 header.b=FV3hHS6i; spf=pass (domain: rts-flowmailer.siemens.com, ip: 185.136.64.225, mailfrom: fm-256628-202608032202274cc514a3270002072d-5vqcz7@rts-flowmailer.siemens.com) Received: by mta-64-225.siemens.flowmailer.net with ESMTPSA id 202608032202274cc514a3270002072d for ; Tue, 04 Aug 2026 00:02:27 +0200 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; s=fm1; d=siemens.com; i=peter.marko@siemens.com; h=Date:From:Subject:To:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding:Cc; bh=bHFQODvSdB2w7Dgu+VdiY5ku+Wes9OjJwbNAFBr+bR4=; b=FV3hHS6i6npdhTXMF1+guA3ToPIw//yM6dBiaCnKN3+mKEN3qrYJsH1QDcIz0A+M9p7fc8 ftXNaPVQcA80ZCmrUM68dMNuyAx54IxInR/RwO47gvJPfolCO9yKMVjD8vyIp3wQDVpsHKYq PQ0R1EWGjKIWzBTsY2mFhwVH+Ru6zelkhz/aCf5zMQWEn9DXa+Y5isJAA+cOAOiw/rB8X1LV rDV2JeRQP92JqhqtYL534LBKL5VocDA2gqNkRbLrXF+XqWpbCyaFbgGa4qwSpXjSPFESFzCO 1wKmXWUBb3mEPoblmz/DlXl0JBhZ2y9vh65ZPvy6LSR96NdsBa2UAKhg==; From: Peter Marko To: openembedded-core@lists.openembedded.org Cc: peter.marko@siemens.com Subject: [wrynose][PATCH 01/15] xserver-xorg: upgrade 21.1.22 -> 21.1.23 Date: Tue, 4 Aug 2026 00:01:41 +0200 Message-ID: <20260803220157.1520377-1-peter.marko@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-256628:519-21489:flowmailer List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 03 Aug 2026 22:02:40 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/242657 From: Richard Purdie Signed-off-by: Richard Purdie (From OE-Core rev: ad22af929c5928ac202cb84ef07ee25689f928b4) Release notes: * https://lists.x.org/archives/xorg-announce/2026-June/003702.html * https://lists.x.org/archives/xorg-announce/2026-June/003703.html Signed-off-by: Peter Marko --- ...1-xf86pciBus.c-use-Intel-ddx-only-for-pre-gen4-hardwar.patch | 2 +- .../{xserver-xorg_21.1.22.bb => xserver-xorg_21.1.23.bb} | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) rename meta/recipes-graphics/xorg-xserver/{xserver-xorg_21.1.22.bb => xserver-xorg_21.1.23.bb} (92%) diff --git a/meta/recipes-graphics/xorg-xserver/xserver-xorg/0001-xf86pciBus.c-use-Intel-ddx-only-for-pre-gen4-hardwar.patch b/meta/recipes-graphics/xorg-xserver/xserver-xorg/0001-xf86pciBus.c-use-Intel-ddx-only-for-pre-gen4-hardwar.patch index 7d151aaa63..4a5bf4ba43 100644 --- a/meta/recipes-graphics/xorg-xserver/xserver-xorg/0001-xf86pciBus.c-use-Intel-ddx-only-for-pre-gen4-hardwar.patch +++ b/meta/recipes-graphics/xorg-xserver/xserver-xorg/0001-xf86pciBus.c-use-Intel-ddx-only-for-pre-gen4-hardwar.patch @@ -1,4 +1,4 @@ -From 6d23037f48f3d534286fc2bda927c9b6ee5d1445 Mon Sep 17 00:00:00 2001 +From fec2a3c8922ee7526d59e9fa2c6ad0943018b7b0 Mon Sep 17 00:00:00 2001 From: California Sullivan Date: Fri, 16 Mar 2018 17:23:11 -0700 Subject: [PATCH] xf86pciBus.c: use Intel ddx only for pre-gen4 hardware diff --git a/meta/recipes-graphics/xorg-xserver/xserver-xorg_21.1.22.bb b/meta/recipes-graphics/xorg-xserver/xserver-xorg_21.1.23.bb similarity index 92% rename from meta/recipes-graphics/xorg-xserver/xserver-xorg_21.1.22.bb rename to meta/recipes-graphics/xorg-xserver/xserver-xorg_21.1.23.bb index 6a9826d959..d3c00e087e 100644 --- a/meta/recipes-graphics/xorg-xserver/xserver-xorg_21.1.22.bb +++ b/meta/recipes-graphics/xorg-xserver/xserver-xorg_21.1.23.bb @@ -1,7 +1,7 @@ require xserver-xorg.inc SRC_URI += " file://0001-xf86pciBus.c-use-Intel-ddx-only-for-pre-gen4-hardwar.patch" -SRC_URI[sha256sum] = "1a242c8917c49ba29ccc1f6021613d8a2b9805dd0d271a66ae9d09f4b0bb06b3" +SRC_URI[sha256sum] = "e39832e5617dadaf072fdf9f0e19e5d2e1c2a13607ac280bac1aba9f8fe14634" # These extensions are now integrated into the server, so declare the migration # path for in-place upgrades. From patchwork Mon Aug 3 22:01:42 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Peter Marko X-Patchwork-Id: 94331 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id B2AB8C55196 for ; Mon, 3 Aug 2026 22:02:39 +0000 (UTC) Received: from mta-64-226.siemens.flowmailer.net (mta-64-226.siemens.flowmailer.net [185.136.64.226]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.4229.1785794553884270537 for ; Mon, 03 Aug 2026 15:02:34 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=peter.marko@siemens.com header.s=fm1 header.b=EqTs4jh5; spf=pass (domain: rts-flowmailer.siemens.com, ip: 185.136.64.226, mailfrom: fm-256628-20260803220231276bb685b50002078e-qhuuj0@rts-flowmailer.siemens.com) Received: by mta-64-226.siemens.flowmailer.net with ESMTPSA id 20260803220231276bb685b50002078e for ; Tue, 04 Aug 2026 00:02:31 +0200 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; s=fm1; d=siemens.com; i=peter.marko@siemens.com; h=Date:From:Subject:To:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding:Cc:References:In-Reply-To; bh=JxgYSuZUmd6RtgTAnR7vZIuDrLQaAnNSirCasNfEb+s=; b=EqTs4jh5VThvyHPc9G0Y7y6qreEjzKF71s0R+brQ46EA2aH9K4ROQ3ocPckBz7QOGzxbnv s7Blm8WqMPQ9GrKvthagIRSzJAEOQ9i5+IYzzCUyyjiHxoCr9/xLJUawbcdDi7ZDgxZoFJ9v BGvG/rxtu6YqXsCBA+pjfGj9xLHvSVeQcpGTZAxS5FMv8/ZTVmYsqymzpQ0SvmXV2N54JGQS C05uG4nqT9Jlu/TqjpfFoZbTfcFUUy2kC0dNaF5d+8Vv4dHeuXPFj6OujCshXlr/bpL2GP+x dWqtopp3SUfr5IdKnBstDb/QdoF7e2FcBM0p5cilYwxR7q5/8XfPWBGQ==; From: Peter Marko To: openembedded-core@lists.openembedded.org Cc: peter.marko@siemens.com Subject: [wrynose][PATCH 02/15] xserver-xorg: upgrade 21.1.23 -> 21.1.24 Date: Tue, 4 Aug 2026 00:01:42 +0200 Message-ID: <20260803220157.1520377-2-peter.marko@siemens.com> In-Reply-To: <20260803220157.1520377-1-peter.marko@siemens.com> References: <20260803220157.1520377-1-peter.marko@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-256628:519-21489:flowmailer List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 03 Aug 2026 22:02:39 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/242658 From: Richard Purdie Signed-off-by: Richard Purdie (From OE-Core rev: a0bcc350b93bee2217cb723ccd6baba6fa252e0d) Release notes: * https://lists.x.org/archives/xorg-announce/2026-July/003716.html * https://lists.x.org/archives/xorg-announce/2026-July/003718.html Signed-off-by: Peter Marko --- ...1-xf86pciBus.c-use-Intel-ddx-only-for-pre-gen4-hardwar.patch | 2 +- .../{xserver-xorg_21.1.23.bb => xserver-xorg_21.1.24.bb} | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) rename meta/recipes-graphics/xorg-xserver/{xserver-xorg_21.1.23.bb => xserver-xorg_21.1.24.bb} (92%) diff --git a/meta/recipes-graphics/xorg-xserver/xserver-xorg/0001-xf86pciBus.c-use-Intel-ddx-only-for-pre-gen4-hardwar.patch b/meta/recipes-graphics/xorg-xserver/xserver-xorg/0001-xf86pciBus.c-use-Intel-ddx-only-for-pre-gen4-hardwar.patch index 4a5bf4ba43..14831b1a9b 100644 --- a/meta/recipes-graphics/xorg-xserver/xserver-xorg/0001-xf86pciBus.c-use-Intel-ddx-only-for-pre-gen4-hardwar.patch +++ b/meta/recipes-graphics/xorg-xserver/xserver-xorg/0001-xf86pciBus.c-use-Intel-ddx-only-for-pre-gen4-hardwar.patch @@ -1,4 +1,4 @@ -From fec2a3c8922ee7526d59e9fa2c6ad0943018b7b0 Mon Sep 17 00:00:00 2001 +From d387580194e91ad73f896a9669757612c8601c92 Mon Sep 17 00:00:00 2001 From: California Sullivan Date: Fri, 16 Mar 2018 17:23:11 -0700 Subject: [PATCH] xf86pciBus.c: use Intel ddx only for pre-gen4 hardware diff --git a/meta/recipes-graphics/xorg-xserver/xserver-xorg_21.1.23.bb b/meta/recipes-graphics/xorg-xserver/xserver-xorg_21.1.24.bb similarity index 92% rename from meta/recipes-graphics/xorg-xserver/xserver-xorg_21.1.23.bb rename to meta/recipes-graphics/xorg-xserver/xserver-xorg_21.1.24.bb index d3c00e087e..8d7f9ae14d 100644 --- a/meta/recipes-graphics/xorg-xserver/xserver-xorg_21.1.23.bb +++ b/meta/recipes-graphics/xorg-xserver/xserver-xorg_21.1.24.bb @@ -1,7 +1,7 @@ require xserver-xorg.inc SRC_URI += " file://0001-xf86pciBus.c-use-Intel-ddx-only-for-pre-gen4-hardwar.patch" -SRC_URI[sha256sum] = "e39832e5617dadaf072fdf9f0e19e5d2e1c2a13607ac280bac1aba9f8fe14634" +SRC_URI[sha256sum] = "1a4eb36ca65cc3b1b936566d677a9786e13c11cd5806e951ac55f3f5ce3984af" # These extensions are now integrated into the server, so declare the migration # path for in-place upgrades. From patchwork Mon Aug 3 22:01:43 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Peter Marko X-Patchwork-Id: 94332 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 61E73C55822 for ; Mon, 3 Aug 2026 22:02:40 +0000 (UTC) Received: from mta-65-226.siemens.flowmailer.net (mta-65-226.siemens.flowmailer.net [185.136.65.226]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.4367.1785794556879185485 for ; Mon, 03 Aug 2026 15:02:37 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=peter.marko@siemens.com header.s=fm1 header.b=eGzLmUMo; spf=pass (domain: rts-flowmailer.siemens.com, ip: 185.136.65.226, mailfrom: fm-256628-20260803220234c4086411e500020706-g_ycdv@rts-flowmailer.siemens.com) Received: by mta-65-226.siemens.flowmailer.net with ESMTPSA id 20260803220234c4086411e500020706 for ; Tue, 04 Aug 2026 00:02:34 +0200 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; s=fm1; d=siemens.com; i=peter.marko@siemens.com; h=Date:From:Subject:To:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding:Cc:References:In-Reply-To; bh=0cycqHjOmFrSj1G1DJ61M8qwyRtt+rBzPRBJzWq0ehk=; b=eGzLmUMoZJ/JiJ1JckaYibMdtisJ+oSTJqopeAsry/3I60ahLleAOt0/qpPzE0haVszHfk 2aPT7y6yU6KTXuhrFHvGN3ZQkdSDGmkSmtvgHw2B7xjh3BYM9o2jdyPW1qCsBNKvq2jVjy74 JMtTBfRbeZVtWK5E5RODU9qMcfGf/vSSjJA4Dk1lQpLJgrEMpg7YkAYzoS+GIxmOxAu0nfv5 H3yWs4IWsvdNiouyB/d3zjpXiO/UGWCNX1smp0nQGi6kpykkaTwe+s+94b+bXklTm+T1dVtc wLdJ5Qi6FzdgoVAyLK/xo8ikyQnlhytckoYx4q2T5f03es96goOAm42g==; From: Peter Marko To: openembedded-core@lists.openembedded.org Cc: peter.marko@siemens.com Subject: [wrynose][PATCH 03/15] ffmpeg: upgrade 8.0.1 -> 8.0.3 Date: Tue, 4 Aug 2026 00:01:43 +0200 Message-ID: <20260803220157.1520377-3-peter.marko@siemens.com> In-Reply-To: <20260803220157.1520377-1-peter.marko@siemens.com> References: <20260803220157.1520377-1-peter.marko@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-256628:519-21489:flowmailer List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 03 Aug 2026 22:02:40 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/242659 From: Peter Marko Changelog: * https://github.com/FFmpeg/FFmpeg/blob/n8.0.2/Changelog * https://github.com/FFmpeg/FFmpeg/blob/n8.0.3/Changelog Resolves CVEs: * CVE-2025-69693 * CVE-2026-30997 * CVE-2026-30998 * CVE-2026-30999 * CVE-2026-40962 * CVE-2026-8461 Signed-off-by: Peter Marko --- .../ffmpeg/{ffmpeg_8.0.1.bb => ffmpeg_8.0.3.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-multimedia/ffmpeg/{ffmpeg_8.0.1.bb => ffmpeg_8.0.3.bb} (99%) diff --git a/meta/recipes-multimedia/ffmpeg/ffmpeg_8.0.1.bb b/meta/recipes-multimedia/ffmpeg/ffmpeg_8.0.3.bb similarity index 99% rename from meta/recipes-multimedia/ffmpeg/ffmpeg_8.0.1.bb rename to meta/recipes-multimedia/ffmpeg/ffmpeg_8.0.3.bb index b6d3ceb6dc..f2a729fc41 100644 --- a/meta/recipes-multimedia/ffmpeg/ffmpeg_8.0.1.bb +++ b/meta/recipes-multimedia/ffmpeg/ffmpeg_8.0.3.bb @@ -28,7 +28,7 @@ SRC_URI = "https://www.ffmpeg.org/releases/${BP}.tar.xz \ file://0002-ffbuild-common.mak-ensure-target-directories-are-cre.patch \ " -SRC_URI[sha256sum] = "05ee0b03119b45c0bdb4df654b96802e909e0a752f72e4fe3794f487229e5a41" +SRC_URI[sha256sum] = "6136812ea6d4e68bdba27e33c2a94382711cdf4f8602ffef056ff792bd6f9818" # Build fails when thumb is enabled: https://bugzilla.yoctoproject.org/show_bug.cgi?id=7717 ARM_INSTRUCTION_SET:armv4 = "arm" From patchwork Mon Aug 3 22:01:44 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Peter Marko X-Patchwork-Id: 94336 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 039DFC55843 for ; Mon, 3 Aug 2026 22:02:50 +0000 (UTC) Received: from mta-64-228.siemens.flowmailer.net (mta-64-228.siemens.flowmailer.net [185.136.64.228]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.4232.1785794560997683277 for ; Mon, 03 Aug 2026 15:02:41 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=peter.marko@siemens.com header.s=fm1 header.b=Stg97gKc; spf=pass (domain: rts-flowmailer.siemens.com, ip: 185.136.64.228, mailfrom: fm-256628-202608032202389a2749f38a000207a6-5qxbrm@rts-flowmailer.siemens.com) Received: by mta-64-228.siemens.flowmailer.net with ESMTPSA id 202608032202389a2749f38a000207a6 for ; Tue, 04 Aug 2026 00:02:38 +0200 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; s=fm1; d=siemens.com; i=peter.marko@siemens.com; h=Date:From:Subject:To:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding:Cc:References:In-Reply-To; bh=v/CQWxwsZn2OlQzLRIL4YpVVfNrLzhXiKVNtgD8kq8I=; b=Stg97gKcDsM/1m29jyoF6sFBtjM6w2UiltQhqEYInOx6e1WJq35fMdKwcfGnLkI9fb1trK Wz+9CoFYYwTv2VW9d0LvTnYVzw4ZOivsN0exwUGM9JmPBKhfra6boVA5U2yFMvNyrZYuz1AA 3kh19MeEO336RbckZAHe/Vg0jkjDW+vkbIhaQmiaTrx2Qpj6iotqgrCea6J26UNczPW5FLOt 9TT5uJMaVne5pH4MioiYaI8DWF0rsonzd0HNYXvJZkWoNZSFpPwvOi/iqlq+uf+xnDVomjzb U6iiK1Z0QK3jT3G27U55X6RlnmcAY4rXEhuUv/4aycW6c0FMw/3hAyew==; From: Peter Marko To: openembedded-core@lists.openembedded.org Cc: peter.marko@siemens.com Subject: [wrynose][PATCH 04/15] ffmpeg: set status for CVE-2026-8461 and CVE-2026-40962 Date: Tue, 4 Aug 2026 00:01:44 +0200 Message-ID: <20260803220157.1520377-4-peter.marko@siemens.com> In-Reply-To: <20260803220157.1520377-1-peter.marko@siemens.com> References: <20260803220157.1520377-1-peter.marko@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-256628:519-21489:flowmailer List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 03 Aug 2026 22:02:50 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/242660 From: Peter Marko [1] shows that CVE-2026-8461 was fixed by [2] backported as [3]. [4] shows that CVE-2026-40962 was fixed by [4] backported as [4]. [1] https://security-tracker.debian.org/tracker/CVE-2026-8461 [2] https://git.ffmpeg.org/gitweb/ffmpeg.git/c23d4da3128c279b714b282e6ec292e8755007e3 [3] https://git.ffmpeg.org/gitweb/ffmpeg.git/3e8f3537f957da011d7360acacc9941f3ce5c306 [4] https://security-tracker.debian.org/tracker/CVE-2026-40962 [5] https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/e392fb8c9c3949d975531d2b23c645d2465a7ebc [6] https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/2b14ba12669d75f5f73d8634c6db36e704144532 Signed-off-by: Peter Marko --- meta/recipes-multimedia/ffmpeg/ffmpeg_8.0.3.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/recipes-multimedia/ffmpeg/ffmpeg_8.0.3.bb b/meta/recipes-multimedia/ffmpeg/ffmpeg_8.0.3.bb index f2a729fc41..8a6eb4eb86 100644 --- a/meta/recipes-multimedia/ffmpeg/ffmpeg_8.0.3.bb +++ b/meta/recipes-multimedia/ffmpeg/ffmpeg_8.0.3.bb @@ -183,3 +183,5 @@ CVE_STATUS[CVE-2025-25469] = "fixed-version: these CVEs are fixed since v8.0" CVE_STATUS[CVE-2025-12343] = "fixed-version: this CVE are fixed since v8.0" CVE_STATUS[CVE-2025-59729] = "fixed-version: this CVE are fixed since v8.0" CVE_STATUS[CVE-2025-59730] = "fixed-version: this CVE are fixed since v8.0" +CVE_STATUS[CVE-2026-8461] = "cpe-stable-backport: this CVE are fixed since v8.0.3" +CVE_STATUS[CVE-2026-40962] = "cpe-stable-backport: this CVE are fixed since v8.0.2" From patchwork Mon Aug 3 22:01:45 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Peter Marko X-Patchwork-Id: 94333 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id DB155C55182 for ; Mon, 3 Aug 2026 22:02:49 +0000 (UTC) Received: from mta-64-226.siemens.flowmailer.net (mta-64-226.siemens.flowmailer.net [185.136.64.226]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.4234.1785794563470740401 for ; Mon, 03 Aug 2026 15:02:43 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=peter.marko@siemens.com header.s=fm1 header.b=f+kQHTQz; spf=pass (domain: rts-flowmailer.siemens.com, ip: 185.136.64.226, mailfrom: fm-256628-202608032202416ce89c9e4e00020762-eqxc6q@rts-flowmailer.siemens.com) Received: by mta-64-226.siemens.flowmailer.net with ESMTPSA id 202608032202416ce89c9e4e00020762 for ; Tue, 04 Aug 2026 00:02:41 +0200 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; s=fm1; d=siemens.com; i=peter.marko@siemens.com; h=Date:From:Subject:To:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding:Cc:References:In-Reply-To; bh=0bt/w6HnsQjesI6FWY9dcen6wNft8Fv906Utull7Iug=; b=f+kQHTQzIucZ9d4V4uvIWo3mojwACO0reD4Ka+k878gTZ1vJ1ixxeoTjVshWm9BdjeB3U2 7tXEquW94BRKwipE8fI27553o8AiNo2HaLhqudeiScumeA8dx+cbbc+sygIuZc447rE9I6FF ROcsdD77Q+D1lbT8D8MBOiRbhDKMVIHd9dQ6lXdPbbUy80/GM0uW+i5ZSvg74oyoaiaAHoiF Qf1OhJZR77NI725ffvZHt+pguIqhRYy7a2Gr3U7ysxrrXQQKFutMjFj666Ml1xqdS/Cpn0A/ 6RESq5VJtwtgz4FYlwmN25UxI+kNQFS2Mqic7JR8wYP+mYgg6WuWriSg==; From: Peter Marko To: openembedded-core@lists.openembedded.org Cc: peter.marko@siemens.com Subject: [wrynose][PATCH 05/15] rsync: upgrade 3.4.1 -> 3.4.2 Date: Tue, 4 Aug 2026 00:01:45 +0200 Message-ID: <20260803220157.1520377-5-peter.marko@siemens.com> In-Reply-To: <20260803220157.1520377-1-peter.marko@siemens.com> References: <20260803220157.1520377-1-peter.marko@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-256628:519-21489:flowmailer List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 03 Aug 2026 22:02:49 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/242661 From: Richard Purdie Drop backported CVE patch included in this release. Parts of the prototypes patch were fixed upstream (in zlib) but some sections were not, drop the merged sections of the patch. Signed-off-by: Richard Purdie (From OE-Core rev: 7ae818a6c3635bff7701c339174b6d281a507462) Release notes: * https://github.com/RsyncProject/rsync/releases/tag/v3.4.3 * packaging: remove old release system * runtests.py: error early when test helper programs are missing * ci: add OpenBSD and NetBSD build jobs * testsuite/xattrs: ignore SUNWattr_* in the Solaris xls helper * use openat2 RESOLVE_BENEATH for secure_relative_open when available (this is a regression fix) * Start 3.4.3dev going. * testsuite: run protected-regular test as non-root using unshare * ci: add Ubuntu 22.04 and AlmaLinux 8 workflows for backporting * combined security fixes for 3.4.3 release * https://www.cve.org/CVERecord?id=CVE-2026-43617 * https://www.cve.org/CVERecord?id=CVE-2026-43618 * https://www.cve.org/CVERecord?id=CVE-2026-43619 * https://www.cve.org/CVERecord?id=CVE-2026-43620 * https://www.cve.org/CVERecord?id=CVE-2026-45232 * https://www.cve.org/CVERecord?id=CVE-2026-29518 Signed-off-by: Peter Marko --- ...-prototypes-to-function-declarations.patch | 68 +++---------------- .../rsync/files/CVE-2025-10158.patch | 36 ---------- .../rsync/files/determism.patch | 4 +- .../rsync/files/makefile-no-rebuild.patch | 6 +- .../rsync/{rsync_3.4.1.bb => rsync_3.4.2.bb} | 3 +- 5 files changed, 16 insertions(+), 101 deletions(-) delete mode 100644 meta/recipes-devtools/rsync/files/CVE-2025-10158.patch rename meta/recipes-devtools/rsync/{rsync_3.4.1.bb => rsync_3.4.2.bb} (95%) diff --git a/meta/recipes-devtools/rsync/files/0001-Add-missing-prototypes-to-function-declarations.patch b/meta/recipes-devtools/rsync/files/0001-Add-missing-prototypes-to-function-declarations.patch index 3011308c61..e6d3578e85 100644 --- a/meta/recipes-devtools/rsync/files/0001-Add-missing-prototypes-to-function-declarations.patch +++ b/meta/recipes-devtools/rsync/files/0001-Add-missing-prototypes-to-function-declarations.patch @@ -1,4 +1,4 @@ -From 073caa67f2aa221de113a21f8105940421a2da90 Mon Sep 17 00:00:00 2001 +From 46cbe5b70b5cbf981cf693137ac081cacbbb2e2a Mon Sep 17 00:00:00 2001 From: Khem Raj Date: Mon, 29 Aug 2022 19:53:28 -0700 Subject: [PATCH] Add missing prototypes to function declarations @@ -17,20 +17,17 @@ Upstream-Status: Submitted [https://lists.samba.org/archive/rsync/2022-August/03 Signed-off-by: Khem Raj Signed-off-by: Archana Polampalli --- - checksum.c | 2 +- - exclude.c | 2 +- - log.c | 2 +- - main.c | 2 +- - zlib/crc32.c | 2 +- - zlib/trees.c | 2 +- - zlib/zutil.c | 4 ++-- - 7 files changed, 8 insertions(+), 8 deletions(-) + checksum.c | 2 +- + exclude.c | 2 +- + log.c | 2 +- + main.c | 2 +- + 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/checksum.c b/checksum.c -index 66e8089..b24b202 100644 +index 24e46bf..6ae3178 100644 --- a/checksum.c +++ b/checksum.c -@@ -779,7 +779,7 @@ static void verify_digest(struct name_num_item *nni, BOOL check_auth_list) +@@ -778,7 +778,7 @@ static void verify_digest(struct name_num_item *nni, BOOL check_auth_list) } #endif @@ -40,7 +37,7 @@ index 66e8089..b24b202 100644 #if defined SUPPORT_XXH3 || defined USE_OPENSSL struct name_num_item *nni; diff --git a/exclude.c b/exclude.c -index 87edbcf..ae0de2f 100644 +index 24de64f..a787488 100644 --- a/exclude.c +++ b/exclude.c @@ -363,7 +363,7 @@ void implied_include_partial_string(const char *s_start, const char *s_end) @@ -66,7 +63,7 @@ index e4ba1cc..8482b71 100644 int options = LOG_PID; diff --git a/main.c b/main.c -index 4f070ac..f59eaec 100644 +index ccad28a..bbb09ba 100644 --- a/main.c +++ b/main.c @@ -246,7 +246,7 @@ void read_del_stats(int f) @@ -78,48 +75,3 @@ index 4f070ac..f59eaec 100644 { char *gname; uid_t uid; -diff --git a/zlib/crc32.c b/zlib/crc32.c -index 05733f4..50c6c02 100644 ---- a/zlib/crc32.c -+++ b/zlib/crc32.c -@@ -187,7 +187,7 @@ local void write_table(out, table) - /* ========================================================================= - * This function can be used by asm versions of crc32() - */ --const z_crc_t FAR * ZEXPORT get_crc_table() -+const z_crc_t FAR * ZEXPORT get_crc_table(void) - { - #ifdef DYNAMIC_CRC_TABLE - if (crc_table_empty) -diff --git a/zlib/trees.c b/zlib/trees.c -index 9c66770..0d9047e 100644 ---- a/zlib/trees.c -+++ b/zlib/trees.c -@@ -231,7 +231,7 @@ local void send_bits(s, value, length) - /* =========================================================================== - * Initialize the various 'constant' tables. - */ --local void tr_static_init() -+local void tr_static_init(void) - { - #if defined(GEN_TREES_H) || !defined(STDC) - static int static_init_done = 0; -diff --git a/zlib/zutil.c b/zlib/zutil.c -index bbba7b2..61f8dc9 100644 ---- a/zlib/zutil.c -+++ b/zlib/zutil.c -@@ -27,12 +27,12 @@ z_const char * const z_errmsg[10] = { - ""}; - - --const char * ZEXPORT zlibVersion() -+const char * ZEXPORT zlibVersion(void) - { - return ZLIB_VERSION; - } - --uLong ZEXPORT zlibCompileFlags() -+uLong ZEXPORT zlibCompileFlags(void) - { - uLong flags; - diff --git a/meta/recipes-devtools/rsync/files/CVE-2025-10158.patch b/meta/recipes-devtools/rsync/files/CVE-2025-10158.patch deleted file mode 100644 index 1c5661d35b..0000000000 --- a/meta/recipes-devtools/rsync/files/CVE-2025-10158.patch +++ /dev/null @@ -1,36 +0,0 @@ -From c2ff1647b1d9a0b92b73af106ce133490306e886 Mon Sep 17 00:00:00 2001 -From: Andrew Tridgell -Date: Sat, 23 Aug 2025 17:26:53 +1000 -Subject: [PATCH] fixed an invalid access to files array - -this was found by Calum Hutton from Rapid7. It is a real bug, but -analysis shows it can't be leverged into an exploit. Worth fixing -though. - -Many thanks to Calum and Rapid7 for finding and reporting this - -CVE: CVE-2025-10158 - -Upstream-Status: Backport [https://github.com/RsyncProject/rsync/commit/797e17fc4a6f15e3b1756538a9f812b63942686f] - -Signed-off-by: Liyin Zhang ---- - sender.c | 2 ++ - 1 file changed, 2 insertions(+) - -diff --git a/sender.c b/sender.c -index a4d46c39..b1588b70 100644 ---- a/sender.c -+++ b/sender.c -@@ -262,6 +262,8 @@ void send_files(int f_in, int f_out) - - if (ndx - cur_flist->ndx_start >= 0) - file = cur_flist->files[ndx - cur_flist->ndx_start]; -+ else if (cur_flist->parent_ndx < 0) -+ exit_cleanup(RERR_PROTOCOL); - else - file = dir_flist->files[cur_flist->parent_ndx]; - if (F_PATHNAME(file)) { --- -2.51.2 - diff --git a/meta/recipes-devtools/rsync/files/determism.patch b/meta/recipes-devtools/rsync/files/determism.patch index f915d658c8..fd96b873c8 100644 --- a/meta/recipes-devtools/rsync/files/determism.patch +++ b/meta/recipes-devtools/rsync/files/determism.patch @@ -1,4 +1,4 @@ -From 41b859a9df9611b7b3f6cbe28af47118d947080f Mon Sep 17 00:00:00 2001 +From b810d78a9327b5b313ebc0aa1a0b155de7c10afd Mon Sep 17 00:00:00 2001 From: Richard Purdie Date: Sun, 21 Feb 2021 09:45:48 +0000 Subject: [PATCH] rsync: Fix a file sorting determinism issue @@ -25,7 +25,7 @@ https://github.com/WayneD/rsync/commit/d3085f7add38a5cf833a0b31cb0637ff46c80f8d 1 file changed, 5 insertions(+) diff --git a/Makefile.in b/Makefile.in -index 1d13e8c..2c5cf99 100644 +index 80e9d72..a7d313c 100644 --- a/Makefile.in +++ b/Makefile.in @@ -27,6 +27,11 @@ MKDIR_P=@MKDIR_P@ diff --git a/meta/recipes-devtools/rsync/files/makefile-no-rebuild.patch b/meta/recipes-devtools/rsync/files/makefile-no-rebuild.patch index 42af4c55d0..fb195b1e68 100644 --- a/meta/recipes-devtools/rsync/files/makefile-no-rebuild.patch +++ b/meta/recipes-devtools/rsync/files/makefile-no-rebuild.patch @@ -1,4 +1,4 @@ -From 603e5862cca832ae925d0c92a8654a57caff5910 Mon Sep 17 00:00:00 2001 +From 0608f5ebb26e2e474867bec6c3d67dfd0a7663f0 Mon Sep 17 00:00:00 2001 From: Ross Burton Date: Tue, 12 Apr 2016 15:51:54 +0100 Subject: [PATCH] rsync: remove upstream's rebuild logic @@ -13,10 +13,10 @@ Signed-off-by: Ross Burton 1 file changed, 54 deletions(-) diff --git a/Makefile.in b/Makefile.in -index 7c75c26..1d13e8c 100644 +index c2fe775..80e9d72 100644 --- a/Makefile.in +++ b/Makefile.in -@@ -184,60 +184,6 @@ conf: configure.sh config.h.in +@@ -185,60 +185,6 @@ conf: configure.sh config.h.in .PHONY: gen gen: conf proto.h man git-version.h diff --git a/meta/recipes-devtools/rsync/rsync_3.4.1.bb b/meta/recipes-devtools/rsync/rsync_3.4.2.bb similarity index 95% rename from meta/recipes-devtools/rsync/rsync_3.4.1.bb rename to meta/recipes-devtools/rsync/rsync_3.4.2.bb index 509be486b8..5fe1bc2c2b 100644 --- a/meta/recipes-devtools/rsync/rsync_3.4.1.bb +++ b/meta/recipes-devtools/rsync/rsync_3.4.2.bb @@ -15,9 +15,8 @@ SRC_URI = "https://download.samba.org/pub/${BPN}/src/${BP}.tar.gz \ file://makefile-no-rebuild.patch \ file://determism.patch \ file://0001-Add-missing-prototypes-to-function-declarations.patch \ - file://CVE-2025-10158.patch \ " -SRC_URI[sha256sum] = "2924bcb3a1ed8b551fc101f740b9f0fe0a202b115027647cf69850d65fd88c52" +SRC_URI[sha256sum] = "ff10aa2c151cd4b2dbbe6135126dbc854046113d2dfb49572a348233267eb315" # Out-of-tree builds don't install the documentation currently # https://github.com/RsyncProject/rsync/issues/846 From patchwork Mon Aug 3 22:01:46 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Peter Marko X-Patchwork-Id: 94335 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 11E7BC55822 for ; Mon, 3 Aug 2026 22:02:50 +0000 (UTC) Received: from mta-64-226.siemens.flowmailer.net (mta-64-226.siemens.flowmailer.net [185.136.64.226]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.4234.1785794563470740401 for ; Mon, 03 Aug 2026 15:02:45 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=peter.marko@siemens.com header.s=fm1 header.b=XgUyDVEp; spf=pass (domain: rts-flowmailer.siemens.com, ip: 185.136.64.226, mailfrom: fm-256628-20260803220245f19263a0b700020747-cdmteh@rts-flowmailer.siemens.com) Received: by mta-64-226.siemens.flowmailer.net with ESMTPSA id 20260803220245f19263a0b700020747 for ; Tue, 04 Aug 2026 00:02:45 +0200 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; s=fm1; d=siemens.com; i=peter.marko@siemens.com; h=Date:From:Subject:To:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding:Cc:References:In-Reply-To; bh=FQQX9yRIHXq4KyIgAYcuP/Yp9DPBuUoNkfioMpJnOM4=; b=XgUyDVEpGUj7OJEbdi8r7NftLZLlRTrLGuCklvxxLztbKMcUGIeKckKUzeTTeldMkx8jsA WJOz7q4h/PRsaO3f9fyJ6gSyueyCp21wDz09NKenbg8PFLzSqEgG6fK01zMJivzFxBUrqVF2 qMEQ8vw1vwWI4lZcXpxvECDCvz33kQz6g5A7vIahpr3IpzpuFuXGSLVBGWr4S5vCQBlqG/4J UacCX3rfThDEMLfpjgGhKDPXb28hU0COEHnN01cJSGyRRc/avZTwXnAn23eBhdNpy/hG2EDz ra5WjbPnuFQd9tBriTa3oa6XTx3EJH7xWefRurqGehopFB0dYE1LeFbQ==; From: Peter Marko To: openembedded-core@lists.openembedded.org Cc: peter.marko@siemens.com Subject: [wrynose][PATCH 06/15] rsync: upgrade 3.4.2 -> 3.4.4 Date: Tue, 4 Aug 2026 00:01:46 +0200 Message-ID: <20260803220157.1520377-6-peter.marko@siemens.com> In-Reply-To: <20260803220157.1520377-1-peter.marko@siemens.com> References: <20260803220157.1520377-1-peter.marko@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-256628:519-21489:flowmailer List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 03 Aug 2026 22:02:50 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/242662 From: Richard Purdie Signed-off-by: Richard Purdie (From OE-Core rev: 3f583855eece3b022dec3703e6622eedac0159e9) Release notes: * https://github.com/RsyncProject/rsync/releases/tag/v3.4.4 * Backport regression fixes ready for a 3.4.4 release Signed-off-by: Peter Marko --- ...-Add-missing-prototypes-to-function-declarations.patch | 8 ++++---- meta/recipes-devtools/rsync/files/determism.patch | 4 ++-- .../rsync/files/makefile-no-rebuild.patch | 6 +++--- .../rsync/{rsync_3.4.2.bb => rsync_3.4.4.bb} | 2 +- 4 files changed, 10 insertions(+), 10 deletions(-) rename meta/recipes-devtools/rsync/{rsync_3.4.2.bb => rsync_3.4.4.bb} (97%) diff --git a/meta/recipes-devtools/rsync/files/0001-Add-missing-prototypes-to-function-declarations.patch b/meta/recipes-devtools/rsync/files/0001-Add-missing-prototypes-to-function-declarations.patch index e6d3578e85..ede0238b2e 100644 --- a/meta/recipes-devtools/rsync/files/0001-Add-missing-prototypes-to-function-declarations.patch +++ b/meta/recipes-devtools/rsync/files/0001-Add-missing-prototypes-to-function-declarations.patch @@ -1,4 +1,4 @@ -From 46cbe5b70b5cbf981cf693137ac081cacbbb2e2a Mon Sep 17 00:00:00 2001 +From c05cc113f925bda645c8e51b83e9dc30b0543bad Mon Sep 17 00:00:00 2001 From: Khem Raj Date: Mon, 29 Aug 2022 19:53:28 -0700 Subject: [PATCH] Add missing prototypes to function declarations @@ -50,7 +50,7 @@ index 24de64f..a787488 100644 if (partial_string_buf) { if (partial_string_len) diff --git a/log.c b/log.c -index e4ba1cc..8482b71 100644 +index b948f16..afca81d 100644 --- a/log.c +++ b/log.c @@ -131,7 +131,7 @@ static void logit(int priority, const char *buf) @@ -63,11 +63,11 @@ index e4ba1cc..8482b71 100644 int options = LOG_PID; diff --git a/main.c b/main.c -index ccad28a..bbb09ba 100644 +index 229a889..aa158ad 100644 --- a/main.c +++ b/main.c @@ -246,7 +246,7 @@ void read_del_stats(int f) - stats.deleted_files += stats.deleted_specials = read_varint(f); + stats.deleted_files += stats.deleted_specials = read_varint_bounded(f, 0, MAX_WIRE_DEL_STAT, "deleted_specials"); } -static void become_copy_as_user() diff --git a/meta/recipes-devtools/rsync/files/determism.patch b/meta/recipes-devtools/rsync/files/determism.patch index fd96b873c8..a8fee5ba0a 100644 --- a/meta/recipes-devtools/rsync/files/determism.patch +++ b/meta/recipes-devtools/rsync/files/determism.patch @@ -1,4 +1,4 @@ -From b810d78a9327b5b313ebc0aa1a0b155de7c10afd Mon Sep 17 00:00:00 2001 +From 32852028e95cdf78d09f1bd867f3b46b4728f9e3 Mon Sep 17 00:00:00 2001 From: Richard Purdie Date: Sun, 21 Feb 2021 09:45:48 +0000 Subject: [PATCH] rsync: Fix a file sorting determinism issue @@ -25,7 +25,7 @@ https://github.com/WayneD/rsync/commit/d3085f7add38a5cf833a0b31cb0637ff46c80f8d 1 file changed, 5 insertions(+) diff --git a/Makefile.in b/Makefile.in -index 80e9d72..a7d313c 100644 +index 0ba2d5c..b9c5438 100644 --- a/Makefile.in +++ b/Makefile.in @@ -27,6 +27,11 @@ MKDIR_P=@MKDIR_P@ diff --git a/meta/recipes-devtools/rsync/files/makefile-no-rebuild.patch b/meta/recipes-devtools/rsync/files/makefile-no-rebuild.patch index fb195b1e68..914b50a7b7 100644 --- a/meta/recipes-devtools/rsync/files/makefile-no-rebuild.patch +++ b/meta/recipes-devtools/rsync/files/makefile-no-rebuild.patch @@ -1,4 +1,4 @@ -From 0608f5ebb26e2e474867bec6c3d67dfd0a7663f0 Mon Sep 17 00:00:00 2001 +From 50ef5ccd9149cee27bae29e767ff1c2e76bdc879 Mon Sep 17 00:00:00 2001 From: Ross Burton Date: Tue, 12 Apr 2016 15:51:54 +0100 Subject: [PATCH] rsync: remove upstream's rebuild logic @@ -13,10 +13,10 @@ Signed-off-by: Ross Burton 1 file changed, 54 deletions(-) diff --git a/Makefile.in b/Makefile.in -index c2fe775..80e9d72 100644 +index 79060b3..0ba2d5c 100644 --- a/Makefile.in +++ b/Makefile.in -@@ -185,60 +185,6 @@ conf: configure.sh config.h.in +@@ -200,60 +200,6 @@ conf: configure.sh config.h.in .PHONY: gen gen: conf proto.h man git-version.h diff --git a/meta/recipes-devtools/rsync/rsync_3.4.2.bb b/meta/recipes-devtools/rsync/rsync_3.4.4.bb similarity index 97% rename from meta/recipes-devtools/rsync/rsync_3.4.2.bb rename to meta/recipes-devtools/rsync/rsync_3.4.4.bb index 5fe1bc2c2b..fa9a61778f 100644 --- a/meta/recipes-devtools/rsync/rsync_3.4.2.bb +++ b/meta/recipes-devtools/rsync/rsync_3.4.4.bb @@ -16,7 +16,7 @@ SRC_URI = "https://download.samba.org/pub/${BPN}/src/${BP}.tar.gz \ file://determism.patch \ file://0001-Add-missing-prototypes-to-function-declarations.patch \ " -SRC_URI[sha256sum] = "ff10aa2c151cd4b2dbbe6135126dbc854046113d2dfb49572a348233267eb315" +SRC_URI[sha256sum] = "bd88cf82fa653da32314fb229136407c5c90f80d1758d8f4b091767877d8fa96" # Out-of-tree builds don't install the documentation currently # https://github.com/RsyncProject/rsync/issues/846 From patchwork Mon Aug 3 22:01:47 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Peter Marko X-Patchwork-Id: 94334 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id CBE9EC55196 for ; Mon, 3 Aug 2026 22:02:49 +0000 (UTC) Received: from mta-64-226.siemens.flowmailer.net (mta-64-226.siemens.flowmailer.net [185.136.64.226]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.4234.1785794563470740401 for ; Mon, 03 Aug 2026 15:02:48 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=peter.marko@siemens.com header.s=fm1 header.b=QLbI3HSZ; spf=pass (domain: rts-flowmailer.siemens.com, ip: 185.136.64.226, mailfrom: fm-256628-20260803220247d06c7dac52000207f3-lhqdd2@rts-flowmailer.siemens.com) Received: by mta-64-226.siemens.flowmailer.net with ESMTPSA id 20260803220247d06c7dac52000207f3 for ; Tue, 04 Aug 2026 00:02:48 +0200 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; s=fm1; d=siemens.com; i=peter.marko@siemens.com; h=Date:From:Subject:To:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding:Cc:References:In-Reply-To; bh=gTwv+K61S9ITZJWJoYRxslMmfOHGqLVRH4FXC5INAFY=; b=QLbI3HSZIw+t4JupMH9qCXtcUbPM8AeMHXMFIxH0Pk7HKGPqd2TboNjRIqb5XhEp6A5YjQ pzSzD2QIEqzmvuSOncpJlgfgi+ozxJZTFPzWRAC0cSU/aCsdqvYkRpMlXln7PWj1IxNLkEjE uADjO5/RHmKxNreBxFKaav5gHjBq2av8SJtAqruTC/fQGVzZS3F0yACTLzKcaHl6CN30oAZu qdelpS4JB2c7OnJA/rmptINJ4wt7mvChIlsq7lzZZYXJ0Oicdu1IszU0d4Ndyl9iijxOacMh GRPUfDWXs8RaZXiS7X1p/Z1ZZfkRD0GP5OVqoA8C5tmeJ1NJKnbqwPdg==; From: Peter Marko To: openembedded-core@lists.openembedded.org Cc: peter.marko@siemens.com Subject: [wrynose][PATCH 07/15] libsoup: patch CVE-2026-4271 Date: Tue, 4 Aug 2026 00:01:47 +0200 Message-ID: <20260803220157.1520377-7-peter.marko@siemens.com> In-Reply-To: <20260803220157.1520377-1-peter.marko@siemens.com> References: <20260803220157.1520377-1-peter.marko@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-256628:519-21489:flowmailer List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 03 Aug 2026 22:02:49 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/242663 From: Peter Marko Pick patch which has closed gitlab issue for the CVE [1]. The issue is also referenced in [2] [1] https://gitlab.gnome.org/GNOME/libsoup/-/work_items/496 [2] https://security-tracker.debian.org/tracker/CVE-2026-4271 Signed-off-by: Peter Marko Signed-off-by: Richard Purdie (From OE-Core rev: 704a1cd0b88ddea0fa790054c3752e82d3d4403d) Signed-off-by: Peter Marko --- .../libsoup/libsoup/CVE-2026-4271.patch | 362 ++++++++++++++++++ meta/recipes-support/libsoup/libsoup_3.6.6.bb | 1 + 2 files changed, 363 insertions(+) create mode 100644 meta/recipes-support/libsoup/libsoup/CVE-2026-4271.patch diff --git a/meta/recipes-support/libsoup/libsoup/CVE-2026-4271.patch b/meta/recipes-support/libsoup/libsoup/CVE-2026-4271.patch new file mode 100644 index 0000000000..ca377e0355 --- /dev/null +++ b/meta/recipes-support/libsoup/libsoup/CVE-2026-4271.patch @@ -0,0 +1,362 @@ +From 489affa74c8a229b8a4dd541710d4a5debedb7b4 Mon Sep 17 00:00:00 2001 +From: Carlos Garcia Campos +Date: Mon, 16 Feb 2026 12:09:08 +0100 +Subject: [PATCH] server: protect message io while reading and writing + +Ensure the nghttp2 session is not destroyed while being used. + +Closes #496 + +CVE: CVE-2026-4271 +Upstream-Status: Backport [https://gitlab.gnome.org/GNOME/libsoup/-/commit/489affa74c8a229b8a4dd541710d4a5debedb7b4] +Signed-off-by: Peter Marko +--- + .../http2/soup-server-message-io-http2.c | 117 +++++++++++++----- + tests/http2-test.c | 54 ++++++++ + 2 files changed, 141 insertions(+), 30 deletions(-) + +diff --git a/libsoup/server/http2/soup-server-message-io-http2.c b/libsoup/server/http2/soup-server-message-io-http2.c +index 913afb46..6f8d1bb6 100644 +--- a/libsoup/server/http2/soup-server-message-io-http2.c ++++ b/libsoup/server/http2/soup-server-message-io-http2.c +@@ -69,6 +69,8 @@ typedef struct { + GHashTable *messages; + + guint in_callback; ++ guint protected; ++ gboolean destroyed; + } SoupServerMessageIOHTTP2; + + static void soup_server_message_io_http2_send_response (SoupServerMessageIOHTTP2 *io, +@@ -146,6 +148,8 @@ soup_server_message_io_http2_destroy (SoupServerMessageIO *iface) + { + SoupServerMessageIOHTTP2 *io = (SoupServerMessageIOHTTP2 *)iface; + ++ io->destroyed = TRUE; ++ + if (io->read_source) { + g_source_destroy (io->read_source); + g_source_unref (io->read_source); +@@ -160,10 +164,14 @@ soup_server_message_io_http2_destroy (SoupServerMessageIO *iface) + } + + g_clear_object (&io->iostream); +- g_clear_pointer (&io->session, nghttp2_session_del); +- g_clear_pointer (&io->messages, g_hash_table_unref); ++ io->istream = NULL; ++ io->ostream = NULL; + +- g_free (io); ++ if (io->protected == 0) { ++ g_clear_pointer (&io->session, nghttp2_session_del); ++ g_clear_pointer (&io->messages, g_hash_table_unref); ++ g_free (io); ++ } + } + + static void +@@ -321,7 +329,33 @@ static const SoupServerMessageIOFuncs io_funcs = { + soup_server_message_io_http2_is_paused + }; + ++static void ++soup_server_message_io_http2_protect (SoupServerMessageIOHTTP2 *io) ++{ ++ io->protected++; ++ g_object_ref (io->conn); ++} ++ + static gboolean ++soup_server_message_io_http2_unprotect (SoupServerMessageIOHTTP2 *io) ++{ ++ g_object_unref (io->conn); ++ ++ if (--io->protected > 0) ++ return FALSE; ++ ++ if (io->destroyed) { ++ g_clear_pointer (&io->session, nghttp2_session_del); ++ g_clear_pointer (&io->messages, g_hash_table_unref); ++ g_free (io); ++ ++ return TRUE; ++ } ++ ++ return FALSE; ++} ++ ++static void + io_write (SoupServerMessageIOHTTP2 *io, + GError **error) + { +@@ -336,51 +370,57 @@ io_write (SoupServerMessageIOHTTP2 *io, + if (io->write_buffer_size == 0) { + /* Done */ + io->write_buffer = NULL; +- return TRUE; ++ return; + } + } + ++ if (!io->ostream) ++ return; ++ + gssize ret = g_pollable_stream_write (io->ostream, + io->write_buffer + io->written_bytes, + io->write_buffer_size - io->written_bytes, + FALSE, NULL, error); +- if (ret < 0) +- return FALSE; +- +- io->written_bytes += ret; +- return TRUE; ++ if (ret > 0) ++ io->written_bytes += ret; + } + + static gboolean + io_write_ready (GObject *stream, + SoupServerMessageIOHTTP2 *io) + { +- SoupServerConnection *conn = io->conn; + GError *error = NULL; + +- g_object_ref (conn); ++ soup_server_message_io_http2_protect (io); ++ ++ while (!error) { ++ if (io->destroyed) ++ break; ++ ++ if (!nghttp2_session_want_write (io->session)) ++ break; + +- while (!error && soup_server_connection_get_io_data (conn) == (SoupServerMessageIO *)io && nghttp2_session_want_write (io->session)) + io_write (io, &error); ++ } + + if (g_error_matches (error, G_IO_ERROR, G_IO_ERROR_WOULD_BLOCK)) { + g_error_free (error); +- g_object_unref (conn); ++ soup_server_message_io_http2_unprotect (io); + return G_SOURCE_CONTINUE; + } + +- if (soup_server_connection_get_io_data (conn) == (SoupServerMessageIO *)io) { ++ if (!io->destroyed) { + if (error) + h2_debug (io, NULL, "[SESSION] IO error: %s", error->message); + + g_clear_pointer (&io->write_source, g_source_unref); + + if (error || (!nghttp2_session_want_read (io->session) && !nghttp2_session_want_write (io->session))) +- soup_server_connection_disconnect (conn); ++ soup_server_connection_disconnect (io->conn); + } + + g_clear_error (&error); +- g_object_unref (conn); ++ soup_server_message_io_http2_unprotect (io); + + return G_SOURCE_REMOVE; + } +@@ -390,13 +430,12 @@ static gboolean io_write_idle_cb (SoupServerMessageIOHTTP2* io); + static void + io_try_write (SoupServerMessageIOHTTP2 *io) + { +- SoupServerConnection *conn = io->conn; + GError *error = NULL; + + if (io->write_source) + return; + +- if (io->in_callback && soup_server_connection_get_io_data (conn) == (SoupServerMessageIO *)io) { ++ if (io->in_callback && !io->destroyed) { + if (!nghttp2_session_want_write (io->session)) + return; + +@@ -416,12 +455,19 @@ io_try_write (SoupServerMessageIOHTTP2 *io) + g_clear_pointer (&io->write_idle_source, g_source_unref); + } + +- g_object_ref (conn); ++ soup_server_message_io_http2_protect (io); ++ ++ while (!error) { ++ if (io->destroyed) ++ break; ++ ++ if (!nghttp2_session_want_write (io->session)) ++ break; + +- while (!error && soup_server_connection_get_io_data (conn) == (SoupServerMessageIO *)io && !io->in_callback && nghttp2_session_want_write (io->session)) + io_write (io, &error); ++ } + +- if (soup_server_connection_get_io_data (conn) == (SoupServerMessageIO *)io) { ++ if (!io->destroyed) { + if (g_error_matches (error, G_IO_ERROR, G_IO_ERROR_WOULD_BLOCK)) { + g_clear_error (&error); + io->write_source = g_pollable_output_stream_create_source (G_POLLABLE_OUTPUT_STREAM (io->ostream), NULL); +@@ -434,11 +480,11 @@ io_try_write (SoupServerMessageIOHTTP2 *io) + h2_debug (io, NULL, "[SESSION] IO error: %s", error->message); + + if (error || (!nghttp2_session_want_read (io->session) && !nghttp2_session_want_write (io->session))) +- soup_server_connection_disconnect (conn); ++ soup_server_connection_disconnect (io->conn); + } + + g_clear_error (&error); +- g_object_unref (conn); ++ soup_server_message_io_http2_unprotect (io); + } + + static gboolean +@@ -481,31 +527,37 @@ static gboolean + io_read_ready (GObject *stream, + SoupServerMessageIOHTTP2 *io) + { +- SoupServerConnection *conn = io->conn; + gboolean progress = TRUE; + GError *error = NULL; + +- g_object_ref (conn); ++ soup_server_message_io_http2_protect (io); ++ ++ while (progress) { ++ if (io->destroyed) ++ break; ++ ++ if (!nghttp2_session_want_read (io->session)) ++ break; + +- while (progress && soup_server_connection_get_io_data (conn) == (SoupServerMessageIO *)io && nghttp2_session_want_read (io->session)) + progress = io_read (io, &error); ++ } + + if (g_error_matches (error, G_IO_ERROR, G_IO_ERROR_WOULD_BLOCK)) { + g_error_free (error); +- g_object_unref (conn); ++ soup_server_message_io_http2_unprotect (io); + return G_SOURCE_CONTINUE; + } + +- if (soup_server_connection_get_io_data (conn) == (SoupServerMessageIO *)io) { ++ if (!io->destroyed) { + if (error) + h2_debug (io, NULL, "[SESSION] IO error: %s", error->message); + + if (error || (!nghttp2_session_want_read (io->session) && !nghttp2_session_want_write (io->session))) +- soup_server_connection_disconnect (conn); ++ soup_server_connection_disconnect (io->conn); + } + + g_clear_error (&error); +- g_object_unref (conn); ++ soup_server_message_io_http2_unprotect (io); + + return G_SOURCE_REMOVE; + } +@@ -931,5 +983,10 @@ soup_server_message_io_http2_new (SoupServerConnection *conn, + nghttp2_submit_settings (io->session, NGHTTP2_FLAG_NONE, settings, G_N_ELEMENTS (settings)); + io_try_write (io); + ++#ifdef __clang_analyzer__ ++ // Suppress false positive about io being destroyed here, since at this point we have only ++ // send the initial settings and not callback is called. ++ [[clang::suppress]] ++#endif + return (SoupServerMessageIO *)io; + } +diff --git a/tests/http2-test.c b/tests/http2-test.c +index 0846a0a6..d12b4bf7 100644 +--- a/tests/http2-test.c ++++ b/tests/http2-test.c +@@ -1268,6 +1268,40 @@ do_broken_pseudo_header_test (Test *test, gconstpointer data) + g_uri_unref (uri); + } + ++static void ++disconnect_on_got_headers (SoupServerMessage *msg, gpointer user_data) ++{ ++ GUri *uri; ++ SoupServerConnection *conn; ++ ++ uri = soup_server_message_get_uri (msg); ++ if (!g_str_equal (g_uri_get_path (uri), "/close-on-got-headers")) ++ return; ++ ++ conn = soup_server_message_get_connection (msg); ++ soup_server_connection_disconnect (conn); ++} ++ ++static void ++do_server_disconnect_on_got_headers_test (Test *test, gconstpointer data) ++{ ++ SoupMessage *msg; ++ GUri *uri; ++ GBytes *response; ++ GError *error = NULL; ++ ++ uri = g_uri_parse_relative (base_uri, "/close-on-got-headers", SOUP_HTTP_URI_FLAGS, NULL); ++ msg = soup_message_new_from_uri (SOUP_METHOD_GET, uri); ++ ++ response = soup_test_session_async_send (test->session, msg, NULL, &error); ++ g_assert_error (error, G_IO_ERROR, G_IO_ERROR_PARTIAL_INPUT); ++ ++ g_clear_error (&error); ++ g_bytes_unref (response); ++ g_object_unref (msg); ++ g_uri_unref (uri); ++} ++ + static gboolean + unpause_message (SoupServerMessage *msg) + { +@@ -1396,12 +1430,26 @@ server_handler (SoupServer *server, + shutdown (fd, SHUT_WR); + #endif + ++ soup_server_message_set_response (msg, "text/plain", ++ SOUP_MEMORY_STATIC, ++ "Success!", 8); ++ } else if (strcmp (path, "/close-on-got-headers") == 0) { + soup_server_message_set_response (msg, "text/plain", + SOUP_MEMORY_STATIC, + "Success!", 8); + } + } + ++static void ++server_request_started (SoupServer *server, ++ SoupServerMessage *msg, ++ SoupServerConnection *conn, ++ gpointer user_data) ++{ ++ g_signal_connect (msg, "got-headers", ++ G_CALLBACK (disconnect_on_got_headers), NULL); ++} ++ + static gboolean + server_basic_auth_callback (SoupAuthDomain *auth_domain, + SoupServerMessage *msg, +@@ -1428,6 +1476,8 @@ main (int argc, char **argv) + return 0; + + server = soup_test_server_new (SOUP_TEST_SERVER_IN_THREAD | SOUP_TEST_SERVER_HTTP2); ++ g_signal_connect (server, "request-started", ++ G_CALLBACK (server_request_started), NULL); + auth = soup_auth_domain_basic_new ("realm", "http2-test", + "auth-callback", server_basic_auth_callback, + NULL); +@@ -1584,6 +1634,10 @@ main (int argc, char **argv) + setup_session, + do_broken_pseudo_header_test, + teardown_session); ++ g_test_add ("/http2/server-disconnect-on-got-headers", Test, NULL, ++ setup_session, ++ do_server_disconnect_on_got_headers_test, ++ teardown_session); + + ret = g_test_run (); + diff --git a/meta/recipes-support/libsoup/libsoup_3.6.6.bb b/meta/recipes-support/libsoup/libsoup_3.6.6.bb index d18a16379b..e5c2d18ded 100644 --- a/meta/recipes-support/libsoup/libsoup_3.6.6.bb +++ b/meta/recipes-support/libsoup/libsoup_3.6.6.bb @@ -20,6 +20,7 @@ SRC_URI += "file://CVE-2025-32049-1.patch \ file://CVE-2026-1539.patch \ file://CVE-2026-5119.patch \ file://CVE-2026-2708.patch \ + file://CVE-2026-4271.patch \ " PROVIDES = "libsoup-3.0" From patchwork Mon Aug 3 22:01:48 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Peter Marko X-Patchwork-Id: 94337 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 2B129C55822 for ; Mon, 3 Aug 2026 22:03:00 +0000 (UTC) Received: from mta-64-226.siemens.flowmailer.net (mta-64-226.siemens.flowmailer.net [185.136.64.226]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.4236.1785794573281833994 for ; Mon, 03 Aug 2026 15:02:53 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=peter.marko@siemens.com header.s=fm1 header.b=M82r5mzS; spf=pass (domain: rts-flowmailer.siemens.com, ip: 185.136.64.226, mailfrom: fm-256628-20260803220251f6e92baeaf00020711-aw5kg2@rts-flowmailer.siemens.com) Received: by mta-64-226.siemens.flowmailer.net with ESMTPSA id 20260803220251f6e92baeaf00020711 for ; Tue, 04 Aug 2026 00:02:51 +0200 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; s=fm1; d=siemens.com; i=peter.marko@siemens.com; h=Date:From:Subject:To:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding:Cc:References:In-Reply-To; bh=n9UeH510KsufpwALH8d0ITttcixxpPAuG1v0Zj61Eak=; b=M82r5mzS43QCyQPCvTbd0+csKgKEbX+vBaSTk5HOlxtjtq8XQAiegmNp++lthQh1w3888y 7D6gqVzQ6piKUCkbcoSDAujR8I5gRvMAeoMI/TRhja9KQBtEVzOPrtEK0W7GTpqenFGLiXwA A7/34+SkCQstT6vZ1pXa5JdwoCC5rAd+09zEh2XC5ID7Ddqh5ZHZiYgFaW8TBMLzg0ZNQARN gFbuwV06YMbPPEW5/lE2Qqj519IS49TJKVwqCJu6UWzKo6rw7l5tR307QfhVQHcmS4plIFYm JcuWgJ+L8Y/bBVs9fTw0rY1sQDgCYwSfzyPuhDDqDf37rsIJaeD4KPXA==; From: Peter Marko To: openembedded-core@lists.openembedded.org Cc: peter.marko@siemens.com Subject: [wrynose][PATCH 08/15] python3-pyasn1: upgrade 0.6.2 -> 0.6.3 Date: Tue, 4 Aug 2026 00:01:48 +0200 Message-ID: <20260803220157.1520377-8-peter.marko@siemens.com> In-Reply-To: <20260803220157.1520377-1-peter.marko@siemens.com> References: <20260803220157.1520377-1-peter.marko@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-256628:519-21489:flowmailer List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 03 Aug 2026 22:03:00 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/242664 From: Wang Mingyu Changelog: ========== - CVE-2026-30922 (GHSA-jr27-m4p2-rc6r): Added nesting depth limit to ASN.1 decoder to prevent stack overflow from deeply nested structures - Fixed OverflowError from oversized BER length field - Fixed DeprecationWarning stacklevel for deprecated attributes - Fixed asDateTime incorrect fractional seconds parsing Signed-off-by: Wang Mingyu Signed-off-by: Mathieu Dubois-Briand (From OE-Core rev: a82592f0a7d104f617f206fe0b9bcaf7f9df3efc) Release notes: * https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst#revision-063-released-16-03-2026 * CVE-2026-30922 (GHSA-jr27-m4p2-rc6r): Added nesting depth limit to ASN.1 decoder to prevent stack overflow from deeply nested structures (thanks for reporting, romanticpragmatism) * Fixed OverflowError from oversized BER length field * Fixed DeprecationWarning stacklevel for deprecated attributes * Fixed asDateTime incorrect fractional seconds parsing Signed-off-by: Peter Marko --- .../python/{python3-pyasn1_0.6.2.bb => python3-pyasn1_0.6.3.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-devtools/python/{python3-pyasn1_0.6.2.bb => python3-pyasn1_0.6.3.bb} (83%) diff --git a/meta/recipes-devtools/python/python3-pyasn1_0.6.2.bb b/meta/recipes-devtools/python/python3-pyasn1_0.6.3.bb similarity index 83% rename from meta/recipes-devtools/python/python3-pyasn1_0.6.2.bb rename to meta/recipes-devtools/python/python3-pyasn1_0.6.3.bb index b44e877447..60b38c57c5 100644 --- a/meta/recipes-devtools/python/python3-pyasn1_0.6.2.bb +++ b/meta/recipes-devtools/python/python3-pyasn1_0.6.3.bb @@ -3,7 +3,7 @@ HOMEPAGE = "http://pyasn1.sourceforge.net/" LICENSE = "BSD-2-Clause" LIC_FILES_CHKSUM = "file://LICENSE.rst;md5=190f79253908c986e6cacf380c3a5f6d" -SRC_URI[sha256sum] = "9b59a2b25ba7e4f8197db7686c09fb33e658b98339fadb826e9512629017833b" +SRC_URI[sha256sum] = "697a8ecd6d98891189184ca1fa05d1bb00e2f84b5977c481452050549c8a72cf" inherit pypi python_setuptools_build_meta ptest-python-pytest From patchwork Mon Aug 3 22:01:49 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Peter Marko X-Patchwork-Id: 94338 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 1F135C55196 for ; Mon, 3 Aug 2026 22:03:00 +0000 (UTC) Received: from mta-65-228.siemens.flowmailer.net (mta-65-228.siemens.flowmailer.net [185.136.65.228]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.4378.1785794576532324649 for ; Mon, 03 Aug 2026 15:02:56 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=peter.marko@siemens.com header.s=fm1 header.b=RgcK6lng; spf=pass (domain: rts-flowmailer.siemens.com, ip: 185.136.65.228, mailfrom: fm-256628-2026080322025436d350ff5f000207a5-kdvrzv@rts-flowmailer.siemens.com) Received: by mta-65-228.siemens.flowmailer.net with ESMTPSA id 2026080322025436d350ff5f000207a5 for ; Tue, 04 Aug 2026 00:02:54 +0200 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; s=fm1; d=siemens.com; i=peter.marko@siemens.com; h=Date:From:Subject:To:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding:Cc:References:In-Reply-To; bh=BTR8JfofwhniYvsUjbiH/kkKYOxh2SCwGWDURJVwhL8=; b=RgcK6lngX+WKODn2syBY/bQxa9fSvzWilFXy9FyrfR/9RJir6Uhha4k70gGQh5UFhr7Kkp Vy1WZrbHzaNz6xwNac5svCKakPXNZzf5YNUN1qbKSVE1WslLDhY6UxBPaNds2fg9hgsFOMcp ryMFXaYKfqIX9ys890crf9swFaHvxIm4BDalu4EJwcrYxFF5Lc5ywWIaD4MmOXMV/uuyfkcd tVeYJxQPAkwTwjCd1WxsJonAgQrh/oS1EM4alpmow0FpJOl8gg76807uAMnKOuceb+8gZAva ozUZJ+psVr01JzFbBFU4anfCz+wYdv3ya93r0ZRNFUSChYeTswdlcbbw==; From: Peter Marko To: openembedded-core@lists.openembedded.org Cc: peter.marko@siemens.com Subject: [wrynose][PATCH 09/15] python3-pyasn1: upgrade 0.6.3 -> 0.6.4 Date: Tue, 4 Aug 2026 00:01:49 +0200 Message-ID: <20260803220157.1520377-9-peter.marko@siemens.com> In-Reply-To: <20260803220157.1520377-1-peter.marko@siemens.com> References: <20260803220157.1520377-1-peter.marko@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-256628:519-21489:flowmailer List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 03 Aug 2026 22:03:00 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/242665 From: Tim Orling Upstream release notes: https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst#revision-064-released-08-07-2026 Revision 0.6.4, released 08-07-2026 * CVE-2026-59885 (GHSA-8ppf-4f7h-5ppj): Fixed quadratic time complexity in the OBJECT IDENTIFIER and RELATIVE-OID decoders. A small crafted substrate encoding many arcs could consume excessive CPU. Arcs are now accumulated in linear time; decoded values are unchanged (thanks for reporting, tynus2) * CVE-2026-59884 (GHSA-m4p7-r5rc-7g4j): Limited BER long-form tag IDs to 20 octets (140 bits), matching the OID arc limit introduced in 0.6.2. Unbounded tag IDs allowed a crafted substrate to consume excessive CPU and memory; longer tag IDs are now rejected with PyAsn1Error. Also fixed Tag and TagSet repr() failing on huge tag (thanks for reporting, mikeappsec) IDs due to the integer-to-string conversion limit (Python 3.11+) * CVE-2026-59886 (GHSA-hm4w-wwcw-mr6r): Fixed excessive memory and CPU consumption in Real.__float__() for values with large base-10 exponents. Conversion no longer materializes huge intermediate integers; values too large to represent as a Python float raise OverflowError promptly, and prettyPrint() renders them as '' as before. Also fixed base-10 mantissa normalization to use exact integer arithmetic; mantissas larger than 2**53 could previously lose precision through float division (thanks for reporting, gvozdila) * Pinned PyPI publish GitHub Action to an immutable commit For full comparison of changes, see: https://github.com/pyasn1/pyasn1/compare/v0.6.3...v0.6.4 Signed-off-by: Tim Orling Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie (From OE-Core rev: 3654efbe3e732b0ae0f44e4c71c2473e719f83ef) Signed-off-by: Peter Marko --- .../python/{python3-pyasn1_0.6.3.bb => python3-pyasn1_0.6.4.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-devtools/python/{python3-pyasn1_0.6.3.bb => python3-pyasn1_0.6.4.bb} (83%) diff --git a/meta/recipes-devtools/python/python3-pyasn1_0.6.3.bb b/meta/recipes-devtools/python/python3-pyasn1_0.6.4.bb similarity index 83% rename from meta/recipes-devtools/python/python3-pyasn1_0.6.3.bb rename to meta/recipes-devtools/python/python3-pyasn1_0.6.4.bb index 60b38c57c5..086a21ffe8 100644 --- a/meta/recipes-devtools/python/python3-pyasn1_0.6.3.bb +++ b/meta/recipes-devtools/python/python3-pyasn1_0.6.4.bb @@ -3,7 +3,7 @@ HOMEPAGE = "http://pyasn1.sourceforge.net/" LICENSE = "BSD-2-Clause" LIC_FILES_CHKSUM = "file://LICENSE.rst;md5=190f79253908c986e6cacf380c3a5f6d" -SRC_URI[sha256sum] = "697a8ecd6d98891189184ca1fa05d1bb00e2f84b5977c481452050549c8a72cf" +SRC_URI[sha256sum] = "9c447d8431c947fe4c8febc4ed9e760bc29011a5b01e5c74b67025bd9fb8ce81" inherit pypi python_setuptools_build_meta ptest-python-pytest From patchwork Mon Aug 3 22:01:50 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: Peter Marko X-Patchwork-Id: 94339 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 36BAEC55182 for ; Mon, 3 Aug 2026 22:03:00 +0000 (UTC) Received: from mta-65-228.siemens.flowmailer.net (mta-65-228.siemens.flowmailer.net [185.136.65.228]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.4378.1785794576532324649 for ; Mon, 03 Aug 2026 15:02:57 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=peter.marko@siemens.com header.s=fm1 header.b=L+TCuMaa; spf=pass (domain: rts-flowmailer.siemens.com, ip: 185.136.65.228, mailfrom: fm-256628-202608032202577bac28d72000020741-8cmuli@rts-flowmailer.siemens.com) Received: by mta-65-228.siemens.flowmailer.net with ESMTPSA id 202608032202577bac28d72000020741 for ; Tue, 04 Aug 2026 00:02:57 +0200 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; s=fm1; d=siemens.com; i=peter.marko@siemens.com; h=Date:From:Subject:To:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding:Cc:References:In-Reply-To; bh=Iz5Yx+X8Tx15BuXEwIY7Js3Ggi/fGnqNX/etOKc1N+s=; b=L+TCuMaadBAdlGLNrVigUHz+yInrZ7fCagsickrRtPnFMb6EdgJFVTnZxcPxsLzJ+0SygC IV6Dw0813QkDop6kDrg3zsSDKnC6+L3Bi82oXojJQSPPZvX5QZl4YS4ouDnIBWEsiDBY8RQQ 1CYFNc4L+Aj/Gjh6j34ZrP9VTmt/pEzYmra6x1m/58HJ2wwLkvpYnyZXRz5XB0AU0r+iOxRl +ixIXbI8cizDcYrLNLEPjnbc0jKNJXbldbgKRHvwT3OPf5jMRcHIniWW8XWP2aje9Z4R9wju CQu3slbuRqZAf51lkA/kjDaE5P60K0mE0RJVHsaQMUeP/qMKds13GWeA==; From: Peter Marko To: openembedded-core@lists.openembedded.org Cc: peter.marko@siemens.com Subject: [wrynose][PATCH 10/15] diffutils: patch CVE-2026-53910 Date: Tue, 4 Aug 2026 00:01:50 +0200 Message-ID: <20260803220157.1520377-10-peter.marko@siemens.com> In-Reply-To: <20260803220157.1520377-1-peter.marko@siemens.com> References: <20260803220157.1520377-1-peter.marko@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-256628:519-21489:flowmailer List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 03 Aug 2026 22:03:00 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/242666 From: Peter Marko Pick patches mentioned in NVD CVE report. Adapt NEWS file to apply one of the patches. Add special code to prevent build error dues to rebuild of manpage. Signed-off-by: Peter Marko Signed-off-by: Richard Purdie (From OE-Core rev: 3406d85634e5d793eb5c4f5ec9b7f03774a86d65) Signed-off-by: Peter Marko --- .../diffutils/CVE-2026-53910-01.patch | 67 +++++++++++++++++++ .../diffutils/CVE-2026-53910-02.patch | 35 ++++++++++ .../diffutils/diffutils_3.12.bb | 9 +++ 3 files changed, 111 insertions(+) create mode 100644 meta/recipes-extended/diffutils/diffutils/CVE-2026-53910-01.patch create mode 100644 meta/recipes-extended/diffutils/diffutils/CVE-2026-53910-02.patch diff --git a/meta/recipes-extended/diffutils/diffutils/CVE-2026-53910-01.patch b/meta/recipes-extended/diffutils/diffutils/CVE-2026-53910-01.patch new file mode 100644 index 0000000000..b2da72b04c --- /dev/null +++ b/meta/recipes-extended/diffutils/diffutils/CVE-2026-53910-01.patch @@ -0,0 +1,67 @@ +From 73ed7ce85cc78effb94daf028c9af6b4e5252e50 Mon Sep 17 00:00:00 2001 +From: Collin Funk +Date: Mon, 20 Apr 2026 23:43:51 -0700 +Subject: [PATCH] diff3: check for integer overflows when reading line numbers + from diff +MIME-Version: 1.0 +Content-Type: text/plain; charset=UTF-8 +Content-Transfer-Encoding: 8bit + +Reported by Michał Majchrowicz. +* NEWS: Mention the bug fix. +* src/diff3.c (readnum): Return nullptr if the line number would +overflow. + +CVE: CVE-2026-53910 +Upstream-Status: Backport [https://cgit.git.savannah.gnu.org/cgit/diffutils.git/commit/?id=73ed7ce85cc78effb94daf028c9af6b4e5252e50] +Signed-off-by: Peter Marko +--- + NEWS | 8 ++++++++ + THANKS | 1 + + src/diff3.c | 3 ++- + 3 files changed, 11 insertions(+), 1 deletion(-) + +diff --git a/NEWS b/NEWS +index a8115f7..bfe20d4 100644 +--- a/NEWS ++++ b/NEWS +@@ -1,5 +1,13 @@ + GNU diffutils NEWS -*- outline -*- + ++ * Noteworthy changes in release ?.? (????-??-??) [?] ++ ++** Bug fixes ++ ++ diff3 no longer overflows integers when reading line numbers from the ++ diff program. ++ [bug present since "the beginning"] ++ + * Noteworthy changes in release 3.12 (2025-04-08) [stable] + + ** Bug fixes +diff --git a/THANKS b/THANKS +index a96b68d..a372954 100644 +--- a/THANKS ++++ b/THANKS +@@ -13,6 +13,7 @@ Chris Hanson + Jim Kingdon + Tom Lord + David J. MacKenzie ++Michał Majchrowicz + Roland McGrath + Jim Meyering + Gene Myers +diff --git a/src/diff3.c b/src/diff3.c +index 1dfba37..1a74407 100644 +--- a/src/diff3.c ++++ b/src/diff3.c +@@ -1020,7 +1020,8 @@ readnum (char *s, lin *pnum) + + do + { +- num = c - '0' + num * 10; ++ if (ckd_mul (&num, num, 10) || ckd_add (&num, num, c - '0')) ++ return nullptr; + c = *++s; + } + while (c_isdigit (c)); diff --git a/meta/recipes-extended/diffutils/diffutils/CVE-2026-53910-02.patch b/meta/recipes-extended/diffutils/diffutils/CVE-2026-53910-02.patch new file mode 100644 index 0000000000..7f87893f51 --- /dev/null +++ b/meta/recipes-extended/diffutils/diffutils/CVE-2026-53910-02.patch @@ -0,0 +1,35 @@ +From 9ff04d5b84743e331e80b589335a52c5480d1815 Mon Sep 17 00:00:00 2001 +From: Paul Eggert +Date: Tue, 21 Apr 2026 00:30:50 -0700 +Subject: [PATCH] diff3: prevent overflow in line offsets +MIME-Version: 1.0 +Content-Type: text/plain; charset=UTF-8 +Content-Transfer-Encoding: 8bit + +Problem reported by Michał Majchrowicz. +* src/diff3.c (readnum): Limit line numbers to LIN_MAX / 2. + +CVE: CVE-2026-53910 +Upstream-Status: Backport [https://cgit.git.savannah.gnu.org/cgit/diffutils.git/commit/?id=9ff04d5b84743e331e80b589335a52c5480d1815] +Signed-off-by: Peter Marko +--- + src/diff3.c | 6 ++++++ + 1 file changed, 6 insertions(+) + +diff --git a/src/diff3.c b/src/diff3.c +index 4fed6a8..d32e6ad 100644 +--- a/src/diff3.c ++++ b/src/diff3.c +@@ -1026,6 +1026,12 @@ readnum (char *s, lin *pnum) + } + while (c_isdigit (c)); + ++ /* Simplify overflow checking later, so that we can always add a ++ line number and a line count, or subtract two line numbers and ++ add 1 to the result, without worrying about overflow. */ ++ if (LIN_MAX / 2 < num) ++ return nullptr; ++ + *pnum = num; + return s; + } diff --git a/meta/recipes-extended/diffutils/diffutils_3.12.bb b/meta/recipes-extended/diffutils/diffutils_3.12.bb index d00dd772ad..5bf0540eab 100644 --- a/meta/recipes-extended/diffutils/diffutils_3.12.bb +++ b/meta/recipes-extended/diffutils/diffutils_3.12.bb @@ -6,6 +6,8 @@ require diffutils.inc SRC_URI = "${GNU_MIRROR}/diffutils/diffutils-${PV}.tar.xz \ file://run-ptest \ file://0001-Skip-strip-trailing-cr-test-case.patch \ + file://CVE-2026-53910-01.patch \ + file://CVE-2026-53910-02.patch \ " SRC_URI[sha256sum] = "7c8b7f9fc8609141fdea9cece85249d308624391ff61dedaf528fcb337727dfd" @@ -21,6 +23,13 @@ inherit ptest RDEPENDS:${PN}-ptest += "make perl" +# patch for CVE-2026-53910 touches source file, so build is trying to +# refresh the manual, which is failing in cross-compile environment; +# remove this code on next upgrade +do_compile:prepend() { + touch ${S}/man/diff3.1 +} + do_install_ptest() { t=${D}${PTEST_PATH} install -D ${S}/build-aux/test-driver $t/build-aux/test-driver From patchwork Mon Aug 3 22:01:51 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: Peter Marko X-Patchwork-Id: 94340 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 590B4C55822 for ; Mon, 3 Aug 2026 22:03:10 +0000 (UTC) Received: from mta-65-226.siemens.flowmailer.net (mta-65-226.siemens.flowmailer.net [185.136.65.226]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.4382.1785794581422211734 for ; Mon, 03 Aug 2026 15:03:01 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=peter.marko@siemens.com header.s=fm1 header.b=eJcExS2J; spf=pass (domain: rts-flowmailer.siemens.com, ip: 185.136.65.226, mailfrom: fm-256628-2026080322025925c6846607000207f5-9kbuct@rts-flowmailer.siemens.com) Received: by mta-65-226.siemens.flowmailer.net with ESMTPSA id 2026080322025925c6846607000207f5 for ; Tue, 04 Aug 2026 00:02:59 +0200 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; s=fm1; d=siemens.com; i=peter.marko@siemens.com; h=Date:From:Subject:To:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding:Cc:References:In-Reply-To; bh=SWxbMwPmbS34yLCAESaxfxKFtTIx5cKa9olff2hH0kU=; b=eJcExS2JWOlgB0WL9peBGJzJVfTPeUwIyTaPniO2M5v4NM0RwS2JDaUjAs/oJ5Uq7JSeyG wRFlHV34dQ2Qa0JNXS4r9DwNRaMtX0ClamKydZn/sjc5XVAVrAoxkWpJG4dhjCb9fG9F9Uq/ KlTHjAvqod/l/3BA9nUO347GrJ2zDiW5yxnIuDXPmzatS5i29O3/g/4yeX9Trf3SXha89W2l w24Ev5HWfgQWyXvTzX3eO01MBYFN/A6fSoQ9P8uvriiYFnwYHzqf+TyGgQxnQCRHk4xuvP0w 795SgmvUA2hX5D6Oe/7KjqZQ+amglTuPlcQYS7YbinFCcjRZQSOsw+5g==; From: Peter Marko To: openembedded-core@lists.openembedded.org Cc: peter.marko@siemens.com Subject: [wrynose][PATCH 11/15] bison: patch CVE-2026-56389 Date: Tue, 4 Aug 2026 00:01:51 +0200 Message-ID: <20260803220157.1520377-11-peter.marko@siemens.com> In-Reply-To: <20260803220157.1520377-1-peter.marko@siemens.com> References: <20260803220157.1520377-1-peter.marko@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-256628:519-21489:flowmailer List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 03 Aug 2026 22:03:10 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/242667 From: Peter Marko Pick patch mentioned in NVD CVE report. Signed-off-by: Peter Marko Signed-off-by: Richard Purdie (From OE-Core rev: 6c99410bd7f0bc4e2ed41ef5afe7d6b5fcb99837) Signed-off-by: Peter Marko --- .../bison/bison/CVE-2026-56389.patch | 56 +++++++++++++++++++ meta/recipes-devtools/bison/bison_3.8.2.bb | 1 + 2 files changed, 57 insertions(+) create mode 100644 meta/recipes-devtools/bison/bison/CVE-2026-56389.patch diff --git a/meta/recipes-devtools/bison/bison/CVE-2026-56389.patch b/meta/recipes-devtools/bison/bison/CVE-2026-56389.patch new file mode 100644 index 0000000000..ac827f6314 --- /dev/null +++ b/meta/recipes-devtools/bison/bison/CVE-2026-56389.patch @@ -0,0 +1,56 @@ +From 3169c1e7a2c6acc4c59dfcf8b089896d6881925b Mon Sep 17 00:00:00 2001 +From: Paul Eggert +Date: Thu, 23 Apr 2026 09:20:43 -0700 +Subject: [PATCH] html: use xsltproc from PATH +MIME-Version: 1.0 +Content-Type: text/plain; charset=UTF-8 +Content-Transfer-Encoding: 8bit + +* src/print-xml.c (print_html): +* src/reader.c (prepare_percent_define_front_end_variables): +Drop undocumented support for lines like ‘%define tool.xsltproc +"whatever"’, as this can cause more trouble than it cures. + +CVE: CVE-2026-56389 +Upstream-Status: Backport [https://cgit.git.savannah.gnu.org/cgit/bison.git/commit/?id=3169c1e7a2c6acc4c59dfcf8b089896d6881925b] +Signed-off-by: Peter Marko +--- + src/print-xml.c | 4 +--- + src/reader.c | 1 - + 2 files changed, 1 insertion(+), 4 deletions(-) + +diff --git a/src/print-xml.c b/src/print-xml.c +index 8da6da0d..79bfa88d 100644 +--- a/src/print-xml.c ++++ b/src/print-xml.c +@@ -543,10 +543,9 @@ print_html (void) + assert (xml_flag); + + char *xml2html = xpath_join (pkgdatadir (), "xslt/xml2xhtml.xsl"); +- char *xsltproc = muscle_percent_define_get ("tool.xsltproc"); + char const *argv[11]; + int i = 0; +- argv[i++] = xsltproc; ++ argv[i++] = "xsltproc"; + argv[i++] = "-o"; + argv[i++] = spec_html_file; + argv[i++] = xml2html; +@@ -572,6 +571,5 @@ print_html (void) + /* termsigp */ NULL); + if (status) + complain (NULL, complaint, _("%s failed with status %d"), argv[0], status); +- free (xsltproc); + free (xml2html); + } +diff --git a/src/reader.c b/src/reader.c +index 862d7293..cb2a7f69 100644 +--- a/src/reader.c ++++ b/src/reader.c +@@ -788,7 +788,6 @@ prepare_percent_define_front_end_variables (void) + muscle_percent_define_default ("lr.default-reduction", "accepting"); + free (lr_type); + } +- muscle_percent_define_default ("tool.xsltproc", "xsltproc"); + + /* Check %define front-end variables. */ + { diff --git a/meta/recipes-devtools/bison/bison_3.8.2.bb b/meta/recipes-devtools/bison/bison_3.8.2.bb index 513d7ec287..03d3cffe2a 100644 --- a/meta/recipes-devtools/bison/bison_3.8.2.bb +++ b/meta/recipes-devtools/bison/bison_3.8.2.bb @@ -12,6 +12,7 @@ DEPENDS = "bison-native flex-native" SRC_URI = "${GNU_MIRROR}/bison/bison-${PV}.tar.xz \ file://autoconf-2.73.patch \ file://add-with-bisonlocaledir.patch \ + file://CVE-2026-56389.patch \ " SRC_URI[sha256sum] = "9bba0214ccf7f1079c5d59210045227bcf619519840ebfa80cd3849cff5a5bf2" From patchwork Mon Aug 3 22:01:52 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: Peter Marko X-Patchwork-Id: 94341 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 4AACAC55196 for ; Mon, 3 Aug 2026 22:03:10 +0000 (UTC) Received: from mta-64-227.siemens.flowmailer.net (mta-64-227.siemens.flowmailer.net [185.136.64.227]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.4388.1785794584752321388 for ; Mon, 03 Aug 2026 15:03:05 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=peter.marko@siemens.com header.s=fm1 header.b=F9/YZGvw; spf=pass (domain: rts-flowmailer.siemens.com, ip: 185.136.64.227, mailfrom: fm-256628-202608032203029c7c2a4b60000207d4-q6sisq@rts-flowmailer.siemens.com) Received: by mta-64-227.siemens.flowmailer.net with ESMTPSA id 202608032203029c7c2a4b60000207d4 for ; Tue, 04 Aug 2026 00:03:02 +0200 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; s=fm1; d=siemens.com; i=peter.marko@siemens.com; h=Date:From:Subject:To:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding:Cc:References:In-Reply-To; bh=UEcrKsHo4HKdxVYDtHUD8G2Es5JMqpV/rSLWdGqbj2E=; b=F9/YZGvwk9YIaEelAWYPSY0UhF+ZdZuWXZhFpp8jPGyDx3kMXDCIXo2nEeZ78DGPNjRz+/ 3T/6j3gK+jt1iT61g2N8oqlnon0OVCgIbh6NAk7OyStHZBydZLORYw+u8GVOZ3lEgSfdvnr3 NFfarezg/y0c0OFDs2Bi/W2sZaTfamTAF3HPm5K5pbvwFymXbRhYi62JT4yrB1FzVgO0W6+i g7oGHF8aMUnrtNyFdD2SbKfa8D3dA++FvGi8r75niONXnxrMNd6sT1Zr7QQni0zzkoBu5P0C ufPbn+86XOEQI7oKr2e+Bcj7acNd7xL2WXdRohlBbvHxG4gbPJMvhgcQ==; From: Peter Marko To: openembedded-core@lists.openembedded.org Cc: peter.marko@siemens.com Subject: [wrynose][PATCH 12/15] ruby: upgrade 4.0.2 -> 4.0.3 Date: Tue, 4 Aug 2026 00:01:52 +0200 Message-ID: <20260803220157.1520377-12-peter.marko@siemens.com> In-Reply-To: <20260803220157.1520377-1-peter.marko@siemens.com> References: <20260803220157.1520377-1-peter.marko@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-256628:519-21489:flowmailer List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 03 Aug 2026 22:03:10 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/242668 From: Richard Purdie Signed-off-by: Richard Purdie (From OE-Core rev: 783704523898316721b8fe0a74b47c69fd0b46d9) Release notes: * https://www.ruby-lang.org/en/news/2026/04/21/ruby-4-0-3-released/ * This release only contains ERB 6.0.1.1, which fixes CVE-2026-41316. Signed-off-by: Peter Marko --- .../0001-Don-t-save-the-original-name-and-timestamp.patch | 5 +---- .../0001-extmk-fix-cross-compilation-of-external-gems.patch | 6 +++--- ...-vm_dump.c-Define-REG_S1-and-REG_S2-for-musl-riscv.patch | 4 ++-- .../ruby/0002-Obey-LDFLAGS-for-the-link-of-libruby.patch | 6 +++--- .../ruby/0003-rdoc-build-reproducible-documentation.patch | 5 +---- ...b-mkmf.rb-sort-list-of-object-files-in-generated-M.patch | 6 +++--- ...Mark-Gemspec-reproducible-change-fixing-784225-too.patch | 6 +++--- .../ruby/ruby/0006-Make-gemspecs-reproducible.patch | 5 +---- ...0007-Skip-test_rm_r_no_permissions-test-under-root.patch | 4 ++-- meta/recipes-devtools/ruby/{ruby_4.0.2.bb => ruby_4.0.3.bb} | 2 +- 10 files changed, 20 insertions(+), 29 deletions(-) rename meta/recipes-devtools/ruby/{ruby_4.0.2.bb => ruby_4.0.3.bb} (98%) diff --git a/meta/recipes-devtools/ruby/ruby/0001-Don-t-save-the-original-name-and-timestamp.patch b/meta/recipes-devtools/ruby/ruby/0001-Don-t-save-the-original-name-and-timestamp.patch index 0f24d2ea0b..2c48ca184d 100644 --- a/meta/recipes-devtools/ruby/ruby/0001-Don-t-save-the-original-name-and-timestamp.patch +++ b/meta/recipes-devtools/ruby/ruby/0001-Don-t-save-the-original-name-and-timestamp.patch @@ -1,4 +1,4 @@ -From 2cedad6b2beb908a8fb80da0e45e5055dca65e99 Mon Sep 17 00:00:00 2001 +From 73edbaf1a89e05e92f91ed97348a65c4ce740cea Mon Sep 17 00:00:00 2001 From: Changqing Li Date: Fri, 27 Feb 2026 16:59:24 +0800 Subject: [PATCH] Don't save the original name and timestamp @@ -28,6 +28,3 @@ index 874c3ef..eb99a70 100755 def Compressors.for(type) ext = File.extname(type) if compress = fetch(ext, nil) --- -2.34.1 - diff --git a/meta/recipes-devtools/ruby/ruby/0001-extmk-fix-cross-compilation-of-external-gems.patch b/meta/recipes-devtools/ruby/ruby/0001-extmk-fix-cross-compilation-of-external-gems.patch index dc33fa9d80..3bf80b1613 100644 --- a/meta/recipes-devtools/ruby/ruby/0001-extmk-fix-cross-compilation-of-external-gems.patch +++ b/meta/recipes-devtools/ruby/ruby/0001-extmk-fix-cross-compilation-of-external-gems.patch @@ -1,4 +1,4 @@ -From 2d19806e1d221df9400b25bd67f3e0b7a21bb702 Mon Sep 17 00:00:00 2001 +From f2ea81d4707614309cda02be59dd6ccbde9b2441 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Andr=C3=A9=20Draszik?= Date: Mon, 30 Sep 2019 16:57:01 +0100 Subject: [PATCH] extmk: fix cross-compilation of external gems @@ -16,10 +16,10 @@ Signed-off-by: André Draszik 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ext/extmk.rb b/ext/extmk.rb -index 1d16545..ad971ea 100755 +index 8f847f4..c8a8d9f 100755 --- a/ext/extmk.rb +++ b/ext/extmk.rb -@@ -434,8 +434,8 @@ else +@@ -427,8 +427,8 @@ else end $ruby = [$ruby] $ruby << "-I'$(topdir)'" diff --git a/meta/recipes-devtools/ruby/ruby/0001-vm_dump.c-Define-REG_S1-and-REG_S2-for-musl-riscv.patch b/meta/recipes-devtools/ruby/ruby/0001-vm_dump.c-Define-REG_S1-and-REG_S2-for-musl-riscv.patch index 4f81d0a19d..32d55cde9f 100644 --- a/meta/recipes-devtools/ruby/ruby/0001-vm_dump.c-Define-REG_S1-and-REG_S2-for-musl-riscv.patch +++ b/meta/recipes-devtools/ruby/ruby/0001-vm_dump.c-Define-REG_S1-and-REG_S2-for-musl-riscv.patch @@ -1,4 +1,4 @@ -From a5c27826e7561eafcb8dab061e07349232457f10 Mon Sep 17 00:00:00 2001 +From 875543f1bc5da190543e2696a47cfaaf939e1549 Mon Sep 17 00:00:00 2001 From: Khem Raj Date: Tue, 25 Jan 2022 20:29:14 -0800 Subject: [PATCH] vm_dump.c: Define REG_S1 and REG_S2 for musl/riscv @@ -14,7 +14,7 @@ Signed-off-by: Khem Raj 1 file changed, 5 insertions(+) diff --git a/vm_dump.c b/vm_dump.c -index 99339fd..8c5bb03 100644 +index e2b4804..0b7d868 100644 --- a/vm_dump.c +++ b/vm_dump.c @@ -40,6 +40,11 @@ diff --git a/meta/recipes-devtools/ruby/ruby/0002-Obey-LDFLAGS-for-the-link-of-libruby.patch b/meta/recipes-devtools/ruby/ruby/0002-Obey-LDFLAGS-for-the-link-of-libruby.patch index 8ef0c903e8..11aec87934 100644 --- a/meta/recipes-devtools/ruby/ruby/0002-Obey-LDFLAGS-for-the-link-of-libruby.patch +++ b/meta/recipes-devtools/ruby/ruby/0002-Obey-LDFLAGS-for-the-link-of-libruby.patch @@ -1,4 +1,4 @@ -From 3949b3ff01c642b6b9ada9b12dd3083cc930544a Mon Sep 17 00:00:00 2001 +From c460fce052e04a8126f5e0554f68359ef986c5f8 Mon Sep 17 00:00:00 2001 From: Christopher Larson Date: Thu, 5 May 2016 10:59:07 -0700 Subject: [PATCH] Obey LDFLAGS for the link of libruby @@ -10,10 +10,10 @@ Upstream-Status: Pending 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/template/Makefile.in b/template/Makefile.in -index 6b97279..a49b53d 100644 +index 443c394..5f706db 100644 --- a/template/Makefile.in +++ b/template/Makefile.in -@@ -120,7 +120,7 @@ ENABLE_SHARED = @ENABLE_SHARED@ +@@ -129,7 +129,7 @@ ENABLE_SHARED = @ENABLE_SHARED@ LDSHARED = @LIBRUBY_LDSHARED@ DLDSHARED = @DLDSHARED@ XDLDFLAGS = @DLDFLAGS@ diff --git a/meta/recipes-devtools/ruby/ruby/0003-rdoc-build-reproducible-documentation.patch b/meta/recipes-devtools/ruby/ruby/0003-rdoc-build-reproducible-documentation.patch index bf57f97d7e..863960839d 100644 --- a/meta/recipes-devtools/ruby/ruby/0003-rdoc-build-reproducible-documentation.patch +++ b/meta/recipes-devtools/ruby/ruby/0003-rdoc-build-reproducible-documentation.patch @@ -1,4 +1,4 @@ -From 02cd20470448676d97d77c2e6789ecce43f0e21c Mon Sep 17 00:00:00 2001 +From 3a335538594d0eb3da6155a64b473a46fd06ce76 Mon Sep 17 00:00:00 2001 From: Christian Hofstaedtler Date: Tue, 10 Oct 2017 15:04:34 -0300 Subject: [PATCH] rdoc: build reproducible documentation @@ -38,6 +38,3 @@ index 065caa4..cfa1f33 100644 gz.orig_name = dest.basename.to_s gz.write data gz.close --- -2.34.1 - diff --git a/meta/recipes-devtools/ruby/ruby/0004-lib-mkmf.rb-sort-list-of-object-files-in-generated-M.patch b/meta/recipes-devtools/ruby/ruby/0004-lib-mkmf.rb-sort-list-of-object-files-in-generated-M.patch index 5ca182313b..2c1f857d75 100644 --- a/meta/recipes-devtools/ruby/ruby/0004-lib-mkmf.rb-sort-list-of-object-files-in-generated-M.patch +++ b/meta/recipes-devtools/ruby/ruby/0004-lib-mkmf.rb-sort-list-of-object-files-in-generated-M.patch @@ -1,4 +1,4 @@ -From 932489b67ce9cdf5590a17927ea40d9ea6623668 Mon Sep 17 00:00:00 2001 +From e94b898d11e3bd5c412aa3b772040870cddf36c7 Mon Sep 17 00:00:00 2001 From: Reiner Herrmann Date: Tue, 10 Oct 2017 15:06:13 -0300 Subject: [PATCH] lib/mkmf.rb: sort list of object files in generated Makefile @@ -17,10 +17,10 @@ Signed-off-by: Reiner Herrmann 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/mkmf.rb b/lib/mkmf.rb -index 99f3764..62377b6 100644 +index 38a5a15..ead7f0c 100644 --- a/lib/mkmf.rb +++ b/lib/mkmf.rb -@@ -2480,7 +2480,7 @@ LOCAL_LIBS = #{$LOCAL_LIBS} +@@ -2493,7 +2493,7 @@ LOCAL_LIBS = #{$LOCAL_LIBS} LIBS = #{$LIBRUBYARG} #{$libs} #{$LIBS} ORIG_SRCS = #{orig_srcs.collect(&File.method(:basename)).join(' ')} SRCS = $(ORIG_SRCS) #{(srcs - orig_srcs).collect(&File.method(:basename)).join(' ')} diff --git a/meta/recipes-devtools/ruby/ruby/0005-Mark-Gemspec-reproducible-change-fixing-784225-too.patch b/meta/recipes-devtools/ruby/ruby/0005-Mark-Gemspec-reproducible-change-fixing-784225-too.patch index fd7d3340f3..746d102292 100644 --- a/meta/recipes-devtools/ruby/ruby/0005-Mark-Gemspec-reproducible-change-fixing-784225-too.patch +++ b/meta/recipes-devtools/ruby/ruby/0005-Mark-Gemspec-reproducible-change-fixing-784225-too.patch @@ -1,4 +1,4 @@ -From 410331577481f331074405e9629ca8db5303aaa8 Mon Sep 17 00:00:00 2001 +From f21e09b9c8f5975887cd85e3ec4dcf9838f62575 Mon Sep 17 00:00:00 2001 From: Lucas Kanashiro Date: Fri, 1 Nov 2019 15:25:17 -0300 Subject: [PATCH] Make gemspecs reproducible @@ -12,10 +12,10 @@ Upstream-Status: Backport [debian] 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/lib/rubygems/specification.rb b/lib/rubygems/specification.rb -index 0b905a7..a102e3c 100644 +index 503f0a4..5d33b09 100644 --- a/lib/rubygems/specification.rb +++ b/lib/rubygems/specification.rb -@@ -1709,7 +1709,9 @@ class Gem::Specification < Gem::BasicSpecification +@@ -1705,7 +1705,9 @@ class Gem::Specification < Gem::BasicSpecification raise(Gem::InvalidSpecificationException, "invalid date format in specification: #{date.inspect}") end diff --git a/meta/recipes-devtools/ruby/ruby/0006-Make-gemspecs-reproducible.patch b/meta/recipes-devtools/ruby/ruby/0006-Make-gemspecs-reproducible.patch index aac2bc1502..cdfa2144d7 100644 --- a/meta/recipes-devtools/ruby/ruby/0006-Make-gemspecs-reproducible.patch +++ b/meta/recipes-devtools/ruby/ruby/0006-Make-gemspecs-reproducible.patch @@ -1,4 +1,4 @@ -From 4d25e9ce0b2795009dd066d7959cf51c4292a343 Mon Sep 17 00:00:00 2001 +From 2a18efc076a20bc270215a802d72618ad0605f91 Mon Sep 17 00:00:00 2001 From: Lucas Kanashiro Date: Fri, 1 Nov 2019 15:25:17 -0300 Subject: [PATCH] Make gemspecs reproducible @@ -78,6 +78,3 @@ index cabc916..f9581b8 100644 spec.authors = ["Akinori MUSHA", "Hajimu UMEMOTO"] spec.email = ["knu@idaemons.org", "ume@mahoroba.org"] --- -2.34.1 - diff --git a/meta/recipes-devtools/ruby/ruby/0007-Skip-test_rm_r_no_permissions-test-under-root.patch b/meta/recipes-devtools/ruby/ruby/0007-Skip-test_rm_r_no_permissions-test-under-root.patch index 780b59092f..93b7406858 100644 --- a/meta/recipes-devtools/ruby/ruby/0007-Skip-test_rm_r_no_permissions-test-under-root.patch +++ b/meta/recipes-devtools/ruby/ruby/0007-Skip-test_rm_r_no_permissions-test-under-root.patch @@ -1,4 +1,4 @@ -From eb5a5db74d29fd6369e9871ba1bb254aa0f22f42 Mon Sep 17 00:00:00 2001 +From 4a48511f45606eff4e03f004fb6aea6f8ccd1eaf Mon Sep 17 00:00:00 2001 From: Jiaying Song Date: Mon, 7 Jul 2025 15:05:57 +0800 Subject: [PATCH] Skip test_rm_r_no_permissions test under root @@ -13,7 +13,7 @@ Signed-off-by: Jiaying Song 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/test/fileutils/test_fileutils.rb b/test/fileutils/test_fileutils.rb -index d2096a0..80e3368 100644 +index 92308d9..5db74f4 100644 --- a/test/fileutils/test_fileutils.rb +++ b/test/fileutils/test_fileutils.rb @@ -768,8 +768,8 @@ class TestFileUtils < Test::Unit::TestCase diff --git a/meta/recipes-devtools/ruby/ruby_4.0.2.bb b/meta/recipes-devtools/ruby/ruby_4.0.3.bb similarity index 98% rename from meta/recipes-devtools/ruby/ruby_4.0.2.bb rename to meta/recipes-devtools/ruby/ruby_4.0.3.bb index 89d8d5b155..56f167379c 100644 --- a/meta/recipes-devtools/ruby/ruby_4.0.2.bb +++ b/meta/recipes-devtools/ruby/ruby_4.0.3.bb @@ -48,7 +48,7 @@ do_configure:prepend() { DEPENDS:append:libc-musl = " libucontext" -SRC_URI[sha256sum] = "51502b26b50b68df4963336ca41e368cde92c928faf91654de4c4c1791f82aac" +SRC_URI[sha256sum] = "77964acc370d5c8375b9502e5ba6c13c03ef91ab9eb9f521c84fb42b9c9a6b0f" PACKAGECONFIG ??= "" PACKAGECONFIG += "${@bb.utils.filter('DISTRO_FEATURES', 'ipv6', d)}" From patchwork Mon Aug 3 22:01:53 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Peter Marko X-Patchwork-Id: 94342 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 9CA98C55AB9 for ; Mon, 3 Aug 2026 22:03:10 +0000 (UTC) Received: from mta-64-227.siemens.flowmailer.net (mta-64-227.siemens.flowmailer.net [185.136.64.227]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.4388.1785794584752321388 for ; Mon, 03 Aug 2026 15:03:05 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=peter.marko@siemens.com header.s=fm1 header.b=cW8I5P5U; spf=pass (domain: rts-flowmailer.siemens.com, ip: 185.136.64.227, mailfrom: fm-256628-202608032203053a2879c7e100020711-3a9jbj@rts-flowmailer.siemens.com) Received: by mta-64-227.siemens.flowmailer.net with ESMTPSA id 202608032203053a2879c7e100020711 for ; Tue, 04 Aug 2026 00:03:05 +0200 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; s=fm1; d=siemens.com; i=peter.marko@siemens.com; h=Date:From:Subject:To:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding:Cc:References:In-Reply-To; bh=FRDMWGR6PyJ/tghDAec/UN4O+K7AcD4Tg3YXzcoV7uc=; b=cW8I5P5U5Ya+EqvSRRR3rNDkdCzLC+FE8q89AS9ruFdE8LKY0Zg4fPIn/4dR/S6itcwtwK NeO+ny5IVmvTZT8PHiJ0gWMdUp2FwrsWytJdDfbyptHju4KdMbxa2hBcFlqV4+1FKQHlQb20 bkYwNKSMWHPwJtgeC7uGkC/pjWhmD39c+3SHNeFPxIqYgpHbIP3q8LwSlMWinX2JIfLSLOdv A8dg0IjcUOM8xJocTollubNijq5m7BXJrReYRtpi2CMg7ii8GsZtPvJUbYjFnXHvrgHpXCVo xUaidcSFB+Kd7//GbhBamnoatBZK2vu0u1zd5HlQaXHjMYhz2boAQeHQ==; From: Peter Marko To: openembedded-core@lists.openembedded.org Cc: peter.marko@siemens.com Subject: [wrynose][PATCH 13/15] ruby: upgrade 4.0.3 -> 4.0.5 Date: Tue, 4 Aug 2026 00:01:53 +0200 Message-ID: <20260803220157.1520377-13-peter.marko@siemens.com> In-Reply-To: <20260803220157.1520377-1-peter.marko@siemens.com> References: <20260803220157.1520377-1-peter.marko@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-256628:519-21489:flowmailer List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 03 Aug 2026 22:03:10 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/242669 From: Richard Purdie Signed-off-by: Richard Purdie (From OE-Core rev: e176e2295bb6c4ac186c6c7187606827fbd5ffee) Release notes: * https://www.ruby-lang.org/en/news/2026/05/11/ruby-4-0-4-released/ * This is a routine update that includes bugfixes. * https://www.ruby-lang.org/en/news/2026/05/20/ruby-4-0-5-released/ * This release only contains a security fix for CVE-2026-46727: Use-after-free in pthread-based getaddrinfo timeout handler and a build system regression in Ruby 4.0.4 under C locale Signed-off-by: Peter Marko --- ...-Don-t-save-the-original-name-and-timestamp.patch | 2 +- ...xtmk-fix-cross-compilation-of-external-gems.patch | 2 +- ...p.c-Define-REG_S1-and-REG_S2-for-musl-riscv.patch | 2 +- .../0002-Obey-LDFLAGS-for-the-link-of-libruby.patch | 2 +- .../0003-rdoc-build-reproducible-documentation.patch | 12 ++++++------ ...rb-sort-list-of-object-files-in-generated-M.patch | 2 +- ...mspec-reproducible-change-fixing-784225-too.patch | 6 +++--- .../ruby/ruby/0006-Make-gemspecs-reproducible.patch | 10 +++++----- ...ip-test_rm_r_no_permissions-test-under-root.patch | 2 +- .../ruby/{ruby_4.0.3.bb => ruby_4.0.5.bb} | 2 +- 10 files changed, 21 insertions(+), 21 deletions(-) rename meta/recipes-devtools/ruby/{ruby_4.0.3.bb => ruby_4.0.5.bb} (98%) diff --git a/meta/recipes-devtools/ruby/ruby/0001-Don-t-save-the-original-name-and-timestamp.patch b/meta/recipes-devtools/ruby/ruby/0001-Don-t-save-the-original-name-and-timestamp.patch index 2c48ca184d..b5bcfab924 100644 --- a/meta/recipes-devtools/ruby/ruby/0001-Don-t-save-the-original-name-and-timestamp.patch +++ b/meta/recipes-devtools/ruby/ruby/0001-Don-t-save-the-original-name-and-timestamp.patch @@ -1,4 +1,4 @@ -From 73edbaf1a89e05e92f91ed97348a65c4ce740cea Mon Sep 17 00:00:00 2001 +From efd3a6d0f0cef4b2313a106f1a00e7d4a597d510 Mon Sep 17 00:00:00 2001 From: Changqing Li Date: Fri, 27 Feb 2026 16:59:24 +0800 Subject: [PATCH] Don't save the original name and timestamp diff --git a/meta/recipes-devtools/ruby/ruby/0001-extmk-fix-cross-compilation-of-external-gems.patch b/meta/recipes-devtools/ruby/ruby/0001-extmk-fix-cross-compilation-of-external-gems.patch index 3bf80b1613..e00ce7bb73 100644 --- a/meta/recipes-devtools/ruby/ruby/0001-extmk-fix-cross-compilation-of-external-gems.patch +++ b/meta/recipes-devtools/ruby/ruby/0001-extmk-fix-cross-compilation-of-external-gems.patch @@ -1,4 +1,4 @@ -From f2ea81d4707614309cda02be59dd6ccbde9b2441 Mon Sep 17 00:00:00 2001 +From 7c1f11416499ce7cd1e6874840df2498e922ab78 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Andr=C3=A9=20Draszik?= Date: Mon, 30 Sep 2019 16:57:01 +0100 Subject: [PATCH] extmk: fix cross-compilation of external gems diff --git a/meta/recipes-devtools/ruby/ruby/0001-vm_dump.c-Define-REG_S1-and-REG_S2-for-musl-riscv.patch b/meta/recipes-devtools/ruby/ruby/0001-vm_dump.c-Define-REG_S1-and-REG_S2-for-musl-riscv.patch index 32d55cde9f..8ae4202e60 100644 --- a/meta/recipes-devtools/ruby/ruby/0001-vm_dump.c-Define-REG_S1-and-REG_S2-for-musl-riscv.patch +++ b/meta/recipes-devtools/ruby/ruby/0001-vm_dump.c-Define-REG_S1-and-REG_S2-for-musl-riscv.patch @@ -1,4 +1,4 @@ -From 875543f1bc5da190543e2696a47cfaaf939e1549 Mon Sep 17 00:00:00 2001 +From 4b66682db87a92d20c5ef0a00ea6eef41526d0cc Mon Sep 17 00:00:00 2001 From: Khem Raj Date: Tue, 25 Jan 2022 20:29:14 -0800 Subject: [PATCH] vm_dump.c: Define REG_S1 and REG_S2 for musl/riscv diff --git a/meta/recipes-devtools/ruby/ruby/0002-Obey-LDFLAGS-for-the-link-of-libruby.patch b/meta/recipes-devtools/ruby/ruby/0002-Obey-LDFLAGS-for-the-link-of-libruby.patch index 11aec87934..af4f768442 100644 --- a/meta/recipes-devtools/ruby/ruby/0002-Obey-LDFLAGS-for-the-link-of-libruby.patch +++ b/meta/recipes-devtools/ruby/ruby/0002-Obey-LDFLAGS-for-the-link-of-libruby.patch @@ -1,4 +1,4 @@ -From c460fce052e04a8126f5e0554f68359ef986c5f8 Mon Sep 17 00:00:00 2001 +From e1cb706a8653c632419803f8d36f3dd2d787face Mon Sep 17 00:00:00 2001 From: Christopher Larson Date: Thu, 5 May 2016 10:59:07 -0700 Subject: [PATCH] Obey LDFLAGS for the link of libruby diff --git a/meta/recipes-devtools/ruby/ruby/0003-rdoc-build-reproducible-documentation.patch b/meta/recipes-devtools/ruby/ruby/0003-rdoc-build-reproducible-documentation.patch index 863960839d..5c038a50cc 100644 --- a/meta/recipes-devtools/ruby/ruby/0003-rdoc-build-reproducible-documentation.patch +++ b/meta/recipes-devtools/ruby/ruby/0003-rdoc-build-reproducible-documentation.patch @@ -1,4 +1,4 @@ -From 3a335538594d0eb3da6155a64b473a46fd06ce76 Mon Sep 17 00:00:00 2001 +From 8476953b735fabad857ddfe78dd3ffcbef4028c5 Mon Sep 17 00:00:00 2001 From: Christian Hofstaedtler Date: Tue, 10 Oct 2017 15:04:34 -0300 Subject: [PATCH] rdoc: build reproducible documentation @@ -13,13 +13,13 @@ Signed-off-by: Christian Hofstaedtler rebase to version 4.0.1 Signed-off-by: Changqing Li --- - .bundle/gems/rdoc-7.0.3/lib/rdoc/generator/json_index.rb | 4 ++-- + .bundle/gems/rdoc-7.0.4/lib/rdoc/generator/json_index.rb | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) -diff --git a/.bundle/gems/rdoc-7.0.3/lib/rdoc/generator/json_index.rb b/.bundle/gems/rdoc-7.0.3/lib/rdoc/generator/json_index.rb -index 065caa4..cfa1f33 100644 ---- a/.bundle/gems/rdoc-7.0.3/lib/rdoc/generator/json_index.rb -+++ b/.bundle/gems/rdoc-7.0.3/lib/rdoc/generator/json_index.rb +diff --git a/.bundle/gems/rdoc-7.0.4/lib/rdoc/generator/json_index.rb b/.bundle/gems/rdoc-7.0.4/lib/rdoc/generator/json_index.rb +index c61391d..9115dbd 100644 +--- a/.bundle/gems/rdoc-7.0.4/lib/rdoc/generator/json_index.rb ++++ b/.bundle/gems/rdoc-7.0.4/lib/rdoc/generator/json_index.rb @@ -176,7 +176,7 @@ class RDoc::Generator::JsonIndex debug_msg "Writing gzipped search index to %s" % outfile diff --git a/meta/recipes-devtools/ruby/ruby/0004-lib-mkmf.rb-sort-list-of-object-files-in-generated-M.patch b/meta/recipes-devtools/ruby/ruby/0004-lib-mkmf.rb-sort-list-of-object-files-in-generated-M.patch index 2c1f857d75..0ba10724cb 100644 --- a/meta/recipes-devtools/ruby/ruby/0004-lib-mkmf.rb-sort-list-of-object-files-in-generated-M.patch +++ b/meta/recipes-devtools/ruby/ruby/0004-lib-mkmf.rb-sort-list-of-object-files-in-generated-M.patch @@ -1,4 +1,4 @@ -From e94b898d11e3bd5c412aa3b772040870cddf36c7 Mon Sep 17 00:00:00 2001 +From 9fa6d40d1f7eed5be981c034c3f36bd4a3b5efab Mon Sep 17 00:00:00 2001 From: Reiner Herrmann Date: Tue, 10 Oct 2017 15:06:13 -0300 Subject: [PATCH] lib/mkmf.rb: sort list of object files in generated Makefile diff --git a/meta/recipes-devtools/ruby/ruby/0005-Mark-Gemspec-reproducible-change-fixing-784225-too.patch b/meta/recipes-devtools/ruby/ruby/0005-Mark-Gemspec-reproducible-change-fixing-784225-too.patch index 746d102292..4a10f861dc 100644 --- a/meta/recipes-devtools/ruby/ruby/0005-Mark-Gemspec-reproducible-change-fixing-784225-too.patch +++ b/meta/recipes-devtools/ruby/ruby/0005-Mark-Gemspec-reproducible-change-fixing-784225-too.patch @@ -1,4 +1,4 @@ -From f21e09b9c8f5975887cd85e3ec4dcf9838f62575 Mon Sep 17 00:00:00 2001 +From 265381bc616fa281a58b3761c33620c465884ca8 Mon Sep 17 00:00:00 2001 From: Lucas Kanashiro Date: Fri, 1 Nov 2019 15:25:17 -0300 Subject: [PATCH] Make gemspecs reproducible @@ -12,10 +12,10 @@ Upstream-Status: Backport [debian] 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/lib/rubygems/specification.rb b/lib/rubygems/specification.rb -index 503f0a4..5d33b09 100644 +index 2db9352..925b7a0 100644 --- a/lib/rubygems/specification.rb +++ b/lib/rubygems/specification.rb -@@ -1705,7 +1705,9 @@ class Gem::Specification < Gem::BasicSpecification +@@ -1714,7 +1714,9 @@ class Gem::Specification < Gem::BasicSpecification raise(Gem::InvalidSpecificationException, "invalid date format in specification: #{date.inspect}") end diff --git a/meta/recipes-devtools/ruby/ruby/0006-Make-gemspecs-reproducible.patch b/meta/recipes-devtools/ruby/ruby/0006-Make-gemspecs-reproducible.patch index cdfa2144d7..92439ffd7a 100644 --- a/meta/recipes-devtools/ruby/ruby/0006-Make-gemspecs-reproducible.patch +++ b/meta/recipes-devtools/ruby/ruby/0006-Make-gemspecs-reproducible.patch @@ -1,4 +1,4 @@ -From 2a18efc076a20bc270215a802d72618ad0605f91 Mon Sep 17 00:00:00 2001 +From 40236d16b640b0c522a550b628cbfb6ee0cdc972 Mon Sep 17 00:00:00 2001 From: Lucas Kanashiro Date: Fri, 1 Nov 2019 15:25:17 -0300 Subject: [PATCH] Make gemspecs reproducible @@ -13,7 +13,7 @@ Signed-off-by: Changqing Li --- .bundle/gems/bigdecimal-4.0.1/bigdecimal.gemspec | 1 + .bundle/gems/fiddle-1.1.8/fiddle.gemspec | 1 + - .bundle/gems/rdoc-7.0.3/rdoc.gemspec | 1 + + .bundle/gems/rdoc-7.0.4/rdoc.gemspec | 1 + ext/io/console/io-console.gemspec | 1 + lib/ipaddr.gemspec | 1 + 5 files changed, 5 insertions(+) @@ -42,10 +42,10 @@ index 0092f52..f77c224 100644 spec.authors = ["Aaron Patterson", "SHIBATA Hiroshi"] spec.email = ["aaron@tenderlovemaking.com", "hsbt@ruby-lang.org"] -diff --git a/.bundle/gems/rdoc-7.0.3/rdoc.gemspec b/.bundle/gems/rdoc-7.0.3/rdoc.gemspec +diff --git a/.bundle/gems/rdoc-7.0.4/rdoc.gemspec b/.bundle/gems/rdoc-7.0.4/rdoc.gemspec index ada9341..5871ec2 100644 ---- a/.bundle/gems/rdoc-7.0.3/rdoc.gemspec -+++ b/.bundle/gems/rdoc-7.0.3/rdoc.gemspec +--- a/.bundle/gems/rdoc-7.0.4/rdoc.gemspec ++++ b/.bundle/gems/rdoc-7.0.4/rdoc.gemspec @@ -7,6 +7,7 @@ end Gem::Specification.new do |s| diff --git a/meta/recipes-devtools/ruby/ruby/0007-Skip-test_rm_r_no_permissions-test-under-root.patch b/meta/recipes-devtools/ruby/ruby/0007-Skip-test_rm_r_no_permissions-test-under-root.patch index 93b7406858..cb77fffe56 100644 --- a/meta/recipes-devtools/ruby/ruby/0007-Skip-test_rm_r_no_permissions-test-under-root.patch +++ b/meta/recipes-devtools/ruby/ruby/0007-Skip-test_rm_r_no_permissions-test-under-root.patch @@ -1,4 +1,4 @@ -From 4a48511f45606eff4e03f004fb6aea6f8ccd1eaf Mon Sep 17 00:00:00 2001 +From ccb40b4715abfb6c53d431bf421ccfbcdbc4ff93 Mon Sep 17 00:00:00 2001 From: Jiaying Song Date: Mon, 7 Jul 2025 15:05:57 +0800 Subject: [PATCH] Skip test_rm_r_no_permissions test under root diff --git a/meta/recipes-devtools/ruby/ruby_4.0.3.bb b/meta/recipes-devtools/ruby/ruby_4.0.5.bb similarity index 98% rename from meta/recipes-devtools/ruby/ruby_4.0.3.bb rename to meta/recipes-devtools/ruby/ruby_4.0.5.bb index 56f167379c..a0981bf622 100644 --- a/meta/recipes-devtools/ruby/ruby_4.0.3.bb +++ b/meta/recipes-devtools/ruby/ruby_4.0.5.bb @@ -48,7 +48,7 @@ do_configure:prepend() { DEPENDS:append:libc-musl = " libucontext" -SRC_URI[sha256sum] = "77964acc370d5c8375b9502e5ba6c13c03ef91ab9eb9f521c84fb42b9c9a6b0f" +SRC_URI[sha256sum] = "7d6149079a63f8ae1d326c9fa65c6019ba2dc3155eae7b39159817911c88958e" PACKAGECONFIG ??= "" PACKAGECONFIG += "${@bb.utils.filter('DISTRO_FEATURES', 'ipv6', d)}" From patchwork Mon Aug 3 22:01:54 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Peter Marko X-Patchwork-Id: 94343 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 65C7FC55822 for ; Mon, 3 Aug 2026 22:03:20 +0000 (UTC) Received: from mta-65-227.siemens.flowmailer.net (mta-65-227.siemens.flowmailer.net [185.136.65.227]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.4393.1785794590181808857 for ; Mon, 03 Aug 2026 15:03:10 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=peter.marko@siemens.com header.s=fm1 header.b=BGEaVgcf; spf=pass (domain: rts-flowmailer.siemens.com, ip: 185.136.65.227, mailfrom: fm-256628-20260803220307986c6a77bf0002076c-i2uhzd@rts-flowmailer.siemens.com) Received: by mta-65-227.siemens.flowmailer.net with ESMTPSA id 20260803220307986c6a77bf0002076c for ; Tue, 04 Aug 2026 00:03:07 +0200 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; s=fm1; d=siemens.com; i=peter.marko@siemens.com; h=Date:From:Subject:To:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding:Cc:References:In-Reply-To; bh=aNSDqwP5H1+Ztx86uZRwZAXECpA0SAS0WgfuSL+EzgM=; b=BGEaVgcf8+jZgTOXTr0Nj99wPDuQoXM6JIGcs2RTw+hWMeo3eKMOtds6fef3v4uG0/d6ZM Saz5+qKMYfFWyQUyJpxH/HTL1UJVhwBc/tpHC1yLyt7SUzR7q3Z+BkGFH+EKYygyfded+fwP /Gy3hdNmfxbnIAOsfcUR6v1ZG+GP259l8zbwSOUSg6QvvVRrN2u+o7l0IXa64C9WVJfZ9tUF aJo/rTDrycN8Y4BCE8JuzaRreVvx1QITNG7dVvm06Vo45SK7h8DJ+vZFeLC2xEblvJJjm0RO 1vQDsogUe5r51Q/xPLIUK0NoLOWrMLZAW9orBLVg9FbvobiV7/XeEfRA==; From: Peter Marko To: openembedded-core@lists.openembedded.org Cc: peter.marko@siemens.com Subject: [wrynose][PATCH 14/15] xwayland: upgrade 24.1.11 -> 24.1.12 Date: Tue, 4 Aug 2026 00:01:54 +0200 Message-ID: <20260803220157.1520377-14-peter.marko@siemens.com> In-Reply-To: <20260803220157.1520377-1-peter.marko@siemens.com> References: <20260803220157.1520377-1-peter.marko@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-256628:519-21489:flowmailer List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 03 Aug 2026 22:03:20 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/242670 From: Richard Purdie Signed-off-by: Richard Purdie (From OE-Core rev: c8b621ec16840082b31cf76378b9940851a9d45c) Release Notes: * https://lists.x.org/archives/xorg-announce/2026-June/003702.html * https://lists.x.org/archives/xorg-announce/2026-June/003704.html Signed-off-by: Peter Marko --- .../xwayland/{xwayland_24.1.11.bb => xwayland_24.1.12.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-graphics/xwayland/{xwayland_24.1.11.bb => xwayland_24.1.12.bb} (96%) diff --git a/meta/recipes-graphics/xwayland/xwayland_24.1.11.bb b/meta/recipes-graphics/xwayland/xwayland_24.1.12.bb similarity index 96% rename from meta/recipes-graphics/xwayland/xwayland_24.1.11.bb rename to meta/recipes-graphics/xwayland/xwayland_24.1.12.bb index eabf66ffec..52572bfd21 100644 --- a/meta/recipes-graphics/xwayland/xwayland_24.1.11.bb +++ b/meta/recipes-graphics/xwayland/xwayland_24.1.12.bb @@ -10,7 +10,7 @@ LICENSE = "MIT & Adobe-Display-PostScript & BSD-3-Clause & DEC-3-Clause & HPND & LIC_FILES_CHKSUM = "file://COPYING;md5=f8778cfcd90ece0e4b225f30182227ca" SRC_URI = "https://www.x.org/archive/individual/xserver/xwayland-${PV}.tar.xz" -SRC_URI[sha256sum] = "27115a1a8819078409bf6fecfeb7724e8137bd36426de7005a5b3aae0a2138ff" +SRC_URI[sha256sum] = "6df02c511b92c1b9848734d9d1b03a4c24f8375ba3cada44e9684a21b5f78e21" UPSTREAM_CHECK_REGEX = "xwayland-(?P\d+(\.(?!90\d)\d+)+)\.tar" From patchwork Mon Aug 3 22:01:55 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Peter Marko X-Patchwork-Id: 94344 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 4D3FDC55196 for ; Mon, 3 Aug 2026 22:03:20 +0000 (UTC) Received: from mta-65-227.siemens.flowmailer.net (mta-65-227.siemens.flowmailer.net [185.136.65.227]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.4253.1785794591535925060 for ; Mon, 03 Aug 2026 15:03:11 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=peter.marko@siemens.com header.s=fm1 header.b=XUOJg7Gg; spf=pass (domain: rts-flowmailer.siemens.com, ip: 185.136.65.227, mailfrom: fm-256628-20260803220309586a78b56500020781-rfbiig@rts-flowmailer.siemens.com) Received: by mta-65-227.siemens.flowmailer.net with ESMTPSA id 20260803220309586a78b56500020781 for ; Tue, 04 Aug 2026 00:03:09 +0200 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; s=fm1; d=siemens.com; i=peter.marko@siemens.com; h=Date:From:Subject:To:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding:Cc:References:In-Reply-To; bh=V6/tMIMvy07p3D35gNA5PiC2ofT9Zegk3P3EElMowcM=; b=XUOJg7GgjGQG+UJ4ECSctn36J2MKgPFCjFSvrCJdNMt4gMzHcoX7wQ0l3eF/+vUqGy0h5+ 7u6F8FiZKCprqkHdXRZ6TdhKSSao9urct06qZ4eijcqUXIVqoDRk8IE1Wx3mKGR5A4qwjd0y nNFQ7kK9wOVrfW4X/NHP1Xlshsv40nzK0sppHPXMOKSloWutpA2pNBIA4juPODeVJ2B/SsTX 0pM8eQVOR5MRvTgpeI+7axcjRdJofX6Xqr6AKeeZD413xQSWuYxNknMq+YFoRHgGX2VDKWpw 5WOcrhJudWDL4zZJajk7fji0xSGbbM2SPn60WfPgqKAD+x8c1YLHnfPw==; From: Peter Marko To: openembedded-core@lists.openembedded.org Cc: peter.marko@siemens.com Subject: [wrynose][PATCH 15/15] xwayland: upgrade 24.1.12 -> 24.1.13 Date: Tue, 4 Aug 2026 00:01:55 +0200 Message-ID: <20260803220157.1520377-15-peter.marko@siemens.com> In-Reply-To: <20260803220157.1520377-1-peter.marko@siemens.com> References: <20260803220157.1520377-1-peter.marko@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-256628:519-21489:flowmailer List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 03 Aug 2026 22:03:20 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/242671 From: Richard Purdie Signed-off-by: Richard Purdie (From OE-Core rev: f93929ba6cae77b6e28dce24c63a7501bdbd4cda) Release: * https://lists.x.org/archives/xorg-announce/2026-July/003716.html * https://lists.x.org/archives/xorg-announce/2026-July/003717.html Signed-off-by: Peter Marko --- .../xwayland/{xwayland_24.1.12.bb => xwayland_24.1.13.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-graphics/xwayland/{xwayland_24.1.12.bb => xwayland_24.1.13.bb} (96%) diff --git a/meta/recipes-graphics/xwayland/xwayland_24.1.12.bb b/meta/recipes-graphics/xwayland/xwayland_24.1.13.bb similarity index 96% rename from meta/recipes-graphics/xwayland/xwayland_24.1.12.bb rename to meta/recipes-graphics/xwayland/xwayland_24.1.13.bb index 52572bfd21..41bf1687a2 100644 --- a/meta/recipes-graphics/xwayland/xwayland_24.1.12.bb +++ b/meta/recipes-graphics/xwayland/xwayland_24.1.13.bb @@ -10,7 +10,7 @@ LICENSE = "MIT & Adobe-Display-PostScript & BSD-3-Clause & DEC-3-Clause & HPND & LIC_FILES_CHKSUM = "file://COPYING;md5=f8778cfcd90ece0e4b225f30182227ca" SRC_URI = "https://www.x.org/archive/individual/xserver/xwayland-${PV}.tar.xz" -SRC_URI[sha256sum] = "6df02c511b92c1b9848734d9d1b03a4c24f8375ba3cada44e9684a21b5f78e21" +SRC_URI[sha256sum] = "173aea3d6f79609164c04528e1c8e4c9b60fcd59391c3c9dad4667297d727fb6" UPSTREAM_CHECK_REGEX = "xwayland-(?P\d+(\.(?!90\d)\d+)+)\.tar"