From patchwork Sun Sep 13 15:22:50 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Peter Marko X-Patchwork-Id: 98110 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 50C05C88E65 for ; Sun, 13 Sep 2026 15:23:39 +0000 (UTC) Received: from mta-65-226.siemens.flowmailer.net (mta-65-226.siemens.flowmailer.net [185.136.65.226]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.969.1789313016944459693 for ; Sun, 13 Sep 2026 08:23:38 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=peter.marko@siemens.com header.s=fm1 header.b=m7cGeb+J; spf=pass (domain: rts-flowmailer.siemens.com, ip: 185.136.65.226, mailfrom: fm-256628-202609131523336a4fc5140a0002074b-11fkdl@rts-flowmailer.siemens.com) Received: by mta-65-226.siemens.flowmailer.net with ESMTPSA id 202609131523336a4fc5140a0002074b for ; Sun, 13 Sep 2026 17:23:33 +0200 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; s=fm1; d=siemens.com; i=peter.marko@siemens.com; h=Date:From:Subject:To:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding:Cc; bh=NwsyG0vRqi6drIlb2sq63+GJrWgdeIMMN2pCXh8zgLw=; b=m7cGeb+JT+MoLO0hbetUEs7e57cY0ANKECbAtSwG8eLzuldSuJ0fpJib1he97KJCoUuz2t MVQW1PREvD7tf180/EszrE6GtQb+AzllBu9mJ/KNoK0NU3ne0oLlFllnvg9FHzOWRXN7H5jW 7mfIJ+4WHJC4kq2C+w21CCU3VhnKpmLZidu0tUmQDFoa3Tw0hwZg5dXSKLo6S5fIhS6shCQ1 ZLK/Eq1YNQ7Nhlr9WcCvFL+btqTdNacLWpUGlX9FakT3h2/MwnKL07ibCSRzSanP7HXBZG+q bwIQURZyG9vyPN99T4A8VHeRFhEU1U7QEfzTpXMU0Y/jh1VgR85b1AUA==; From: Peter Marko To: openembedded-devel@lists.openembedded.org Cc: Peter Marko Subject: [meta-oe][PATCH 1/4] msgpack-c: fix upstream check Date: Sun, 13 Sep 2026 17:22:50 +0200 Message-ID: <20260913152253.3201491-1-peter.marko@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-256628:519-21489:flowmailer List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Sun, 13 Sep 2026 15:23:39 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/129995 From: Peter Marko By default it picks the highest version, which for this repository is for msgpack-cpp. Set GITTAGREGEX to pick msgpack-c tag. Signed-off-by: Peter Marko --- meta-oe/recipes-devtools/msgpack/msgpack-c_6.1.0.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta-oe/recipes-devtools/msgpack/msgpack-c_6.1.0.bb b/meta-oe/recipes-devtools/msgpack/msgpack-c_6.1.0.bb index b7f3625c2a..1061c37345 100644 --- a/meta-oe/recipes-devtools/msgpack/msgpack-c_6.1.0.bb +++ b/meta-oe/recipes-devtools/msgpack/msgpack-c_6.1.0.bb @@ -10,6 +10,8 @@ LIC_FILES_CHKSUM = "file://NOTICE;md5=7a858c074723608e08614061dc044352 \ SRC_URI = "git://github.com/msgpack/msgpack-c;branch=c_master;protocol=https" SRCREV = "445880108a1d171f755ff6ac77e03fbebbb23729" +UPSTREAM_CHECK_GITTAGREGEX = "c-(?P\d+(\.\d+)+)" + inherit cmake pkgconfig EXTRA_OECMAKE += "-DMSGPACK_BUILD_TESTS=off" From patchwork Sun Sep 13 15:22:51 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Peter Marko X-Patchwork-Id: 98111 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 274F3C88E5C for ; Sun, 13 Sep 2026 15:23:49 +0000 (UTC) Received: from mta-65-227.siemens.flowmailer.net (mta-65-227.siemens.flowmailer.net [185.136.65.227]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.999.1789313026233200567 for ; Sun, 13 Sep 2026 08:23:47 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=peter.marko@siemens.com header.s=fm1 header.b=PYGazPbI; spf=pass (domain: rts-flowmailer.siemens.com, ip: 185.136.65.227, mailfrom: fm-256628-202609131523433dd60f5d5d000207fe-6kx0d_@rts-flowmailer.siemens.com) Received: by mta-65-227.siemens.flowmailer.net with ESMTPSA id 202609131523433dd60f5d5d000207fe for ; Sun, 13 Sep 2026 17:23:44 +0200 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; s=fm1; d=siemens.com; i=peter.marko@siemens.com; h=Date:From:Subject:To:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding:Cc:References:In-Reply-To; bh=EZsy5D8zPVcDoOM++JTiUDtHWMplzfcxHtqDQJ/Mqx4=; b=PYGazPbIjp11aa0CBpX2nPdEK6CX8lBCvYJgXmH5u+MLiPlh7Qe+qgp5C3BwoE0d4+jeUS hXO7fkPFZv5G3g3Xrx2+5IWKuX3NFyyxdQ/elOr6NvB4j+LvOWm4AEBJZ/Fr4uePK4XyKB/7 8T2QOxm69UBMov8Tw1SDZWHLLF7e2I0nL2CLdRdVWKBFuw55vo1Hwk2tiIFHSJNFsOOtmsb+ xF5TTABbatkrz7n/ecXhmbb1WpHAme6WF+uHpTCN8MR3EnnuevFhjnDYYNZB46h0FL7JClDY cUTcKLebwRRfIcWx7TrDzub/uItbGpcKw3JieWg7RffVY+2/jgOwlIJQ==; From: Peter Marko To: openembedded-devel@lists.openembedded.org Cc: Peter Marko Subject: [meta-oe][PATCH 2/4] msgpack-c: upgrade 6.1.0 -> 7.0.2 Date: Sun, 13 Sep 2026 17:22:51 +0200 Message-ID: <20260913152253.3201491-2-peter.marko@siemens.com> In-Reply-To: <20260913152253.3201491-1-peter.marko@siemens.com> References: <20260913152253.3201491-1-peter.marko@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-256628:519-21489:flowmailer List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Sun, 13 Sep 2026 15:23:49 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/129996 From: Peter Marko Handles CVE-2026-72854 (in 7.0.2). Release notes: * https://github.com/msgpack/msgpack-c/releases/tag/c-7.0.0 Refine CI (#1152) << breaking changes >> Updated cmake minimum required to 3.5-4.0 (#1160) * https://github.com/msgpack/msgpack-c/releases/tag/c-7.0.1 Set INSTALL_INTERFACE to CMAKE_INSTALL_INCLUDEDIR (#1177) * https://github.com/msgpack/msgpack-c/releases/tag/c-7.0.2 Fix integer overflow on msgpack_unpacker_expand_buffer(). (#1182) Signed-off-by: Peter Marko --- .../msgpack/{msgpack-c_6.1.0.bb => msgpack-c_7.0.2.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-oe/recipes-devtools/msgpack/{msgpack-c_6.1.0.bb => msgpack-c_7.0.2.bb} (93%) diff --git a/meta-oe/recipes-devtools/msgpack/msgpack-c_6.1.0.bb b/meta-oe/recipes-devtools/msgpack/msgpack-c_7.0.2.bb similarity index 93% rename from meta-oe/recipes-devtools/msgpack/msgpack-c_6.1.0.bb rename to meta-oe/recipes-devtools/msgpack/msgpack-c_7.0.2.bb index 1061c37345..b5ff5d9780 100644 --- a/meta-oe/recipes-devtools/msgpack/msgpack-c_6.1.0.bb +++ b/meta-oe/recipes-devtools/msgpack/msgpack-c_7.0.2.bb @@ -8,7 +8,7 @@ LIC_FILES_CHKSUM = "file://NOTICE;md5=7a858c074723608e08614061dc044352 \ " SRC_URI = "git://github.com/msgpack/msgpack-c;branch=c_master;protocol=https" -SRCREV = "445880108a1d171f755ff6ac77e03fbebbb23729" +SRCREV = "e17beb371b59459a13b48e166a11e123bda5bf93" UPSTREAM_CHECK_GITTAGREGEX = "c-(?P\d+(\.\d+)+)" From patchwork Sun Sep 13 15:22:52 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Peter Marko X-Patchwork-Id: 98112 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 2C0F5C88E65 for ; Sun, 13 Sep 2026 15:23:59 +0000 (UTC) Received: from mta-65-227.siemens.flowmailer.net (mta-65-227.siemens.flowmailer.net [185.136.65.227]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.999.1789313026233200567 for ; Sun, 13 Sep 2026 08:23:49 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=peter.marko@siemens.com header.s=fm1 header.b=qpEoBY3U; spf=pass (domain: rts-flowmailer.siemens.com, ip: 185.136.65.227, mailfrom: fm-256628-20260913152348f9e6806da80002073c-3nzjlj@rts-flowmailer.siemens.com) Received: by mta-65-227.siemens.flowmailer.net with ESMTPSA id 20260913152348f9e6806da80002073c for ; Sun, 13 Sep 2026 17:23:48 +0200 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; s=fm1; d=siemens.com; i=peter.marko@siemens.com; h=Date:From:Subject:To:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding:Cc:References:In-Reply-To; bh=5fDq8QiRVH+NnaUfeGqRY5Luy8gy3MBCxw5xfNQ2+Vk=; b=qpEoBY3Uk5HRSMZ8fIWHJX+nUbtzj0G4uutzkZizMOsg9L+g1t29FHjWyUFgdZcD32liqn 4WH5MNYpqzbvcGvuWj8Xn2q65Rj+BMsLG/9G13fPmUpMuejdi9/WSxiRFYh3X/tryi18baSo vvtBu+14tM+bSiRGhY1DUYr77VMDV4CQbypUCF4OeCn1sTjoiS0wkaZiTCSMspuQn3J5bZ/K tlRz0Oqj0t6IQ/IR9ku2on12WCLp1IambjjbeKFWYcuja7ungHYNA++9Gc0qGuuiGKsQ2Yt+ LmZlzuLej7tZHU2DgilUdbzRup3nAUXVzWnHmCDaAXm/zebWC6dgI+5g==; From: Peter Marko To: openembedded-devel@lists.openembedded.org Cc: Peter Marko Subject: [meta-oe][PATCH 3/4] msgpack-cpp: fix upstream check Date: Sun, 13 Sep 2026 17:22:52 +0200 Message-ID: <20260913152253.3201491-3-peter.marko@siemens.com> In-Reply-To: <20260913152253.3201491-1-peter.marko@siemens.com> References: <20260913152253.3201491-1-peter.marko@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-256628:519-21489:flowmailer List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Sun, 13 Sep 2026 15:23:59 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/129997 From: Peter Marko Without any prefix/suffix, it picks the highest version-like string. Set REGEX to pick msgpack-cpp version. Signed-off-by: Peter Marko --- meta-oe/recipes-devtools/msgpack/msgpack-cpp_8.0.0.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-oe/recipes-devtools/msgpack/msgpack-cpp_8.0.0.bb b/meta-oe/recipes-devtools/msgpack/msgpack-cpp_8.0.0.bb index 87f11d279b..0d741c5212 100644 --- a/meta-oe/recipes-devtools/msgpack/msgpack-cpp_8.0.0.bb +++ b/meta-oe/recipes-devtools/msgpack/msgpack-cpp_8.0.0.bb @@ -11,7 +11,7 @@ SRC_URI = "https://github.com/msgpack/msgpack-c/releases/download/cpp-${PV}/msgp SRC_URI[sha256sum] = "4a3c0c0ac55ef4456c2d0b93c21b5d105aa3a8f21ef8fa9758550feaf989b92f" UPSTREAM_CHECK_URI = "https://github.com/msgpack/msgpack-c/releases" -UPSTREAM_CHECK_REGEX = "(?P\d+(\.\d+)+)" +UPSTREAM_CHECK_REGEX = "(?P\d+(\.\d+)+) C++" S = "${UNPACKDIR}/msgpack-cxx-${PV}" From patchwork Sun Sep 13 15:22:53 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Peter Marko X-Patchwork-Id: 98114 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 4C79FC88E5C for ; Sun, 13 Sep 2026 15:25:49 +0000 (UTC) Received: from mta-65-225.siemens.flowmailer.net (mta-65-225.siemens.flowmailer.net [185.136.65.225]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.998.1789313142810571879 for ; Sun, 13 Sep 2026 08:25:43 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=peter.marko@siemens.com header.s=fm1 header.b=HDE9rdbr; spf=pass (domain: rts-flowmailer.siemens.com, ip: 185.136.65.225, mailfrom: fm-256628-2026091315254016370101aa00020739-ty5b1d@rts-flowmailer.siemens.com) Received: by mta-65-225.siemens.flowmailer.net with ESMTPSA id 2026091315254016370101aa00020739 for ; Sun, 13 Sep 2026 17:25:41 +0200 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; s=fm1; d=siemens.com; i=peter.marko@siemens.com; h=Date:From:Subject:To:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding:Cc:References:In-Reply-To; bh=kQfShKlzrDBtQQrBsnDupRe6vGpDxPURFcSmzunPVUM=; b=HDE9rdbr9WANZ7rKZQEjhVBv2vjiLY1VWiHhyBjFM9CnJ4RjW5ABfENhX2BrYO+0V0KysM Dv9IP6ztKkQ3PF+lXHlupgYhzYFP94vZDsK5ChudtbgY77bbJ/Y/PJwAPfiXZq5Eyrdx84Xf F5+1ew8F339e6arIC8pQnMoWoLz2T9a8/+tok0ZLcsn1Ph7eDojJwkuxK9Isovn2s80dV+za KfHy1iBO/myKictTAo1McBARw8JN/KKvRO9T5aL0TGN2ijop+oCbwkg2FsRJNNWILdUp/DK0 bxpmUA5IhCSR5JfEfQZCPvLvE3x+aTpRRtsn67toDF6JAc0B77wlpliQ==; From: Peter Marko To: openembedded-devel@lists.openembedded.org Cc: Peter Marko Subject: [meta-oe][PATCH 4/4] msgpack-cpp: upgrade 8.0.0 -> 9.0.0 Date: Sun, 13 Sep 2026 17:22:53 +0200 Message-ID: <20260913152253.3201491-4-peter.marko@siemens.com> In-Reply-To: <20260913152253.3201491-1-peter.marko@siemens.com> References: <20260913152253.3201491-1-peter.marko@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-256628:519-21489:flowmailer List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Sun, 13 Sep 2026 15:25:49 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/129999 From: Peter Marko Release notes: * https://github.com/msgpack/msgpack-c/releases/tag/cpp-9.0.0 2026-08-25 version 9.0.0 Add regression tests for the fixes below. (#1183) Fix ext_ref comparison operators ignoring the last payload byte. (#1183) Fix out-of-bounds write on self-move-assignment of the create object visitor. (#1183) Fix broken array_ref comparison operators. (#1183) Fix heap buffer overflow in vrefbuffer::migrate() caused by a wrong growth check. (#1183) Fix v1 unpacker not applying str/bin/ext size limits on the reference path. (#1183) Fix x3 parser treating uint8 values as negative integers. (#1183) Fix double free / use-after-free in zone::swap() (C++03 only). (#1183) Fix use-after-free from wrong member destruction order in zone move-assignment. (#1183) Fix use-after-free after moving an unpacker (dangling referenced buffer hook). (#1183) Fix out-of-bounds read converting a short STR into std::array / . (#1183) Fix out-of-bounds read and null dereference converting an array whose size differs from the tuple arity. (#1183) Fix null pointer dereference converting an empty array into a C array T[N]. (#1183) Fix integer overflow in the unpacker buffer expansion size arithmetic. (#1183) << breaking changes >> Fix ext32 max size truncation on 64bit by widening visit_ext size to size_t. (#1183) * If you have a custom visitor that implements visit_ext(), widen its size parameter from uint32_t to std::size_t: Before: bool visit_ext(const char* v, uint32_t size) After : bool visit_ext(const char* v, std::size_t size) Signed-off-by: Peter Marko --- .../msgpack/{msgpack-cpp_8.0.0.bb => msgpack-cpp_9.0.0.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-oe/recipes-devtools/msgpack/{msgpack-cpp_8.0.0.bb => msgpack-cpp_9.0.0.bb} (90%) diff --git a/meta-oe/recipes-devtools/msgpack/msgpack-cpp_8.0.0.bb b/meta-oe/recipes-devtools/msgpack/msgpack-cpp_9.0.0.bb similarity index 90% rename from meta-oe/recipes-devtools/msgpack/msgpack-cpp_8.0.0.bb rename to meta-oe/recipes-devtools/msgpack/msgpack-cpp_9.0.0.bb index 0d741c5212..95e8bfe71e 100644 --- a/meta-oe/recipes-devtools/msgpack/msgpack-cpp_8.0.0.bb +++ b/meta-oe/recipes-devtools/msgpack/msgpack-cpp_9.0.0.bb @@ -8,7 +8,7 @@ LIC_FILES_CHKSUM = "file://NOTICE;md5=7a858c074723608e08614061dc044352 \ " SRC_URI = "https://github.com/msgpack/msgpack-c/releases/download/cpp-${PV}/msgpack-cxx-${PV}.tar.gz" -SRC_URI[sha256sum] = "4a3c0c0ac55ef4456c2d0b93c21b5d105aa3a8f21ef8fa9758550feaf989b92f" +SRC_URI[sha256sum] = "303d3a7321aee65eb9450db8a6c973954e00af34b88ba0c0aca236bc50bfb8a9" UPSTREAM_CHECK_URI = "https://github.com/msgpack/msgpack-c/releases" UPSTREAM_CHECK_REGEX = "(?P\d+(\.\d+)+) C++"