From patchwork Wed Oct 14 10:22:07 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 100654 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id D2118CC6B1F for ; Wed, 14 Oct 2026 10:22:29 +0000 (UTC) Received: from mail-pg1-f180.google.com (mail-pg1-f180.google.com [209.85.215.180]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.10218.1791973346395830966 for ; Wed, 14 Oct 2026 03:22:26 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=dZDrb9b5; spf=pass (domain: gmail.com, ip: 209.85.215.180, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pg1-f180.google.com with SMTP id 41be03b00d2f7-cc52c1b8286so2352256a12.1 for ; Wed, 14 Oct 2026 03:22:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1791973346; x=1792578146; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc:subject:date:message-id:reply-to:content-type; bh=tGaMwdjGGZrWPqsYH53C5tQW5vQ9gFN9ttJjOD9nT4s=; b=dZDrb9b5nEcLeY03E7P4kb7UGCrh/hInr9Y6Bgh+VyQGmx8Pdx0oArWuoo45B2aa0U ZXBZyszsE+ZGsN8vy7aS1/SYA7YA4exJE5cUVILJITpD0VQwMLFDIbE9P9HRXl0knhYg cq66dH1/pcYO4dDMBwkRPAlg/00xxY6ev97Dr03Vn6tS5NTJ6r11bIe+c7rmEovwXkTj CT/0CjYwJMy+mYeyCxJsxXB5T2FwaAe/C2AWDjyfAOmX/UJRpkGdvcd6lIYVrtmtVWrf mmfNx7Uo62j92YQaqmnZulHYNQWv7t2P1lRIoxqQ62FNflPmmeFYh084Q8KwbJiuMqZw WFdA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1791973346; x=1792578146; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to:content-type; bh=tGaMwdjGGZrWPqsYH53C5tQW5vQ9gFN9ttJjOD9nT4s=; b=hRZm7nAq9KzhRtJuWAyIaFTHRVofGG6rwjikjhsjfyQqeZtBP7DrNhpWxgpRDEUCN2 f5sQndlNkWsDikEJDx/7N6r5DuAod4WYfgSiBFOJhVP2gUgWu2ojGxgRfw94efFr+H9M 8wxEGAk7WzLn7AYByckGV/W2gmFeDDhTkyjDL18KoLhkHSF35Dc5xkc1hsRW0NMemYRE /ccz2uZ7//jTF38uHKLbByvmaGxhQxeTUohcppuqyd9sRmdlbII1r5efj97LxGcw1Apq Zl6LXxwgBXMNAQggQ9WMOxGxZC4tiWBNf2gI7PSaj+EA+b4B+5HVQLDxRDv5NcjEvV8U g2SQ== X-Gm-Message-State: AFq9FYKBOTE3rHcvK86FVpItE/SuCaxn0Kg1dYlF1G68VRcS3SRAkDXn 3cjFznbxOQ+YRAz0V4YUgSNGBUJ02ZWh6vKXRxH4WgRrDuPeTa7drSGhot3Hxg== X-Gm-Gg: AYBFou2c+BImkjosSZUo/UTaKa2gzs4vWi+p40BKGy+SngjipeJ+uJLzSkAa0W3v9uk G3yq7ImGAxWuDfK7JHMQs9oBPJYxAfWHspuwD1VoSCKKxyR0Co9rtmh5Msg26tQ3CUEOkCUENDK I1l+28G4o1O521bT8P53LwpCUgIfAHR3FK7dOTVayyhyFLELGNhAuy9M6X0AgwoLhvyKNBejBeJ ULmfRF5xGQTE9pxupUacfdQyk2DNyEng4QjmFdQzyHQu4yGEAkuJtKhgLlIPNHLrpJ6iKjuWUkj x1RTnr4397pn24NoqQ0HtaGJqEX0UZxIm9rxmDaX7hkb7p7BIiV4pg/P3X87YeChNHLOigwXeCC DC5aQJR72F+asNNDEKTtleBrSnNkYfwyFWz2kHEEzYx9BHycWjYk+GMTv6/C34NxB4HNk2xB0iv FvKUJrRkav6D4upAHYvYmgm3JcSQfIB+qRCtV5K8Wr00VMl0YK58cXxsbnHNw9YnMhPzEzTCB0s QUTbl+VCMG5rOGPDXzZmtV9u7SqtdYatAyQoOg= X-Received: by 2002:a17:90b:498f:b0:3ab:d26b:c2df with SMTP id 98e67ed59e1d1-3abd26bc4e0mr5417400a91.27.1791973345698; Wed, 14 Oct 2026 03:22:25 -0700 (PDT) Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ac61170b7bsm4017740a91.16.2026.10.14.03.22.23 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 14 Oct 2026 03:22:25 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-oe][wrynose][PATCH 1/11] xdg-dbus-proxy: upgrade 0.1.7 -> 0.1.9 Date: Wed, 14 Oct 2026 23:22:07 +1300 Message-ID: <20261014102218.880640-1-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 14 Oct 2026 10:22:29 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/130887 From: Ankur Tyagi Changelog: https://github.com/flatpak/xdg-dbus-proxy/blob/0.1.9/NEWS Signed-off-by: Ankur Tyagi --- .../{xdg-dbus-proxy_0.1.7.bb => xdg-dbus-proxy_0.1.9.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-oe/recipes-support/xdg-dbus-proxy/{xdg-dbus-proxy_0.1.7.bb => xdg-dbus-proxy_0.1.9.bb} (93%) diff --git a/meta-oe/recipes-support/xdg-dbus-proxy/xdg-dbus-proxy_0.1.7.bb b/meta-oe/recipes-support/xdg-dbus-proxy/xdg-dbus-proxy_0.1.9.bb similarity index 93% rename from meta-oe/recipes-support/xdg-dbus-proxy/xdg-dbus-proxy_0.1.7.bb rename to meta-oe/recipes-support/xdg-dbus-proxy/xdg-dbus-proxy_0.1.9.bb index a8e0a651ad..53781d3d61 100644 --- a/meta-oe/recipes-support/xdg-dbus-proxy/xdg-dbus-proxy_0.1.7.bb +++ b/meta-oe/recipes-support/xdg-dbus-proxy/xdg-dbus-proxy_0.1.9.bb @@ -16,7 +16,7 @@ SRC_URI = " \ file://run-ptest \ " -SRCREV = "6a170fa77e3cbecb48f9dd2478fe5c0a119eb467" +SRCREV = "72b40c8f6d9d585cfbdb249690724f740d207087" CVE_STATUS[CVE-2026-34080] = "fixed-version: fixed in 0.1.7" From patchwork Wed Oct 14 10:22:08 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 100655 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id D0391CC6B1D for ; Wed, 14 Oct 2026 10:22:29 +0000 (UTC) Received: from mail-pg1-f180.google.com (mail-pg1-f180.google.com [209.85.215.180]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.10219.1791973348889876951 for ; Wed, 14 Oct 2026 03:22:28 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=CHMxYiAV; spf=pass (domain: gmail.com, ip: 209.85.215.180, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pg1-f180.google.com with SMTP id 41be03b00d2f7-cd61cef87f1so627072a12.0 for ; Wed, 14 Oct 2026 03:22:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1791973348; x=1792578148; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=FQzQfdIgmo6wmChrjnmmVoUDd8CduXKDBYBOGJoOOUs=; b=CHMxYiAVi9EmvxIG7R2RcWnARjsNCX6SIBT+Tf8FLNYlqHY5tuiPWcPjpUIBwc0BZb 5czPc0VDd0ivhcEC5T9Gjj/+nXg1sZYD+Dyo3IloWI4cqbfFgonuVDhkqKKE4+j6jgRE 7RRyKGPbmntdhEccQSh0XliypkwanEG6XoNvBivQzaEDPAM3XeQzUocf0bICi5ZuUqj+ 5vIPq2S262nGmnq9zYpPQQqKEqDT8Pa1gxTRcDUd3+fcIvsTLCZxazaA3CTcZxMJyz/+ mJ/JE7DDjwGMwNucSortiPB2CV4C+b72t474ag/ZYiLVUw8e31TXqWkj60fJEeJHdpna fO1w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1791973348; x=1792578148; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=FQzQfdIgmo6wmChrjnmmVoUDd8CduXKDBYBOGJoOOUs=; b=aE32SQ/KGCNG6J037Jdeo1ayrwaMfvb41rIwvw0wFozTZKHEYri3tnZNePTqpp7xxc 9Q1wR5LJO233t8JDkXePRcMxfvP5ySJNmrtuZP0aiO1/J6xncKJL/DRIxE8BoJ/5bhBa gKgFOJlGws1FdGqCuIMkIQKv+kVycGmADgB3WqL+Sx5Fv6RXB9XDN80Gh0syCG5TR3oi nK/mh5XvhBWY2W9KW20cw5G1Bl5miTyyDOXI6pijBXzB7xXOpwOOWXBYjObBXSeZxoE1 C2puQZcmcCIBvBQLiHAcZqk8xMMP4maaxxsbOAy+odxjqOsbhPhBqQ+B6TY8O14tiSoR FUUA== X-Gm-Message-State: AFq9FYJx9aYha8opypcBkxEjlZDpIO40G/y62Iu9AXxThDRomugCq30P RLdISZcKKg2VljCORIMPaASGHq3PjdkSO04IXkOMDnJCZ6dHrWCLY047X8z/3Q== X-Gm-Gg: AYBFou3FDbnaDkpqb5NvpogZ4EIbm1+kSSUPupNGQe7oV4LtIbZDh85QwfK+/mQJycC lum21Rnk2hOptrJ5Z/3j28BU7KC4W8Rptz4JHLB5aZB57Xv8SlIOQ/0fbMS93lXkxZyoe86gHAx t7oG2QF3iFTTGLZm/OyEBKCFh1Mj4TgdXpT2A+wMqTPE1rkK/ujh7ouO0TLSLYjEjPTaOU+PMiM SGNQhStk37zRT53tSP6Ptiwr0j1DDZveNDUAkbfV8PrzpYrgC2Li9aspp20biyj5T5UjAASYQUt sZswh/dnbBF8DYYZDc0m6MG0p7Xipmg/viIv/domKKifhs/IqGZaNUpXCG40K7/gx2DpBGzNXrt gH5uWoe0l8nef1Pzsl/f4S8G/0+NGgXm1XVzgpv6k2BhviuQ7vfBQ4J+LMPJGAYxeKvAFwYK5sG t2EO/ZZFAkn9qfOM7zRsz5hmUQBrwsTkkWuM6oxKn2JlbFH0niI7Dq8cYI08e6WeuEQ+tvVdAyb NvVjzYXQyiFwjUMoQ2en3AqmEVarkCGBVOF5Ng= X-Received: by 2002:a17:90b:5807:b0:3a4:9dd7:296f with SMTP id 98e67ed59e1d1-3ab3a9dfda0mr11847180a91.40.1791973348167; Wed, 14 Oct 2026 03:22:28 -0700 (PDT) Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ac61170b7bsm4017740a91.16.2026.10.14.03.22.26 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 14 Oct 2026 03:22:27 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi , Khem Raj Subject: [oe][meta-python][wrynose][PATCH 2/11] python3-tzdata: upgrade 2026.4 -> 2026.5 Date: Wed, 14 Oct 2026 23:22:08 +1300 Message-ID: <20261014102218.880640-2-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261014102218.880640-1-ankur.tyagi85@gmail.com> References: <20261014102218.880640-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 14 Oct 2026 10:22:29 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/130888 From: Ankur Tyagi Changelog: https://github.com/python/tzdata/releases/tag/2026.5 Signed-off-by: Ankur Tyagi Signed-off-by: Khem Raj (cherry picked from commit 01bd918ea8c7a391e977b9ab409605fa7fc5d953) Signed-off-by: Ankur Tyagi --- .../{python3-tzdata_2026.4.bb => python3-tzdata_2026.5.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-python/recipes-devtools/python/{python3-tzdata_2026.4.bb => python3-tzdata_2026.5.bb} (86%) diff --git a/meta-python/recipes-devtools/python/python3-tzdata_2026.4.bb b/meta-python/recipes-devtools/python/python3-tzdata_2026.5.bb similarity index 86% rename from meta-python/recipes-devtools/python/python3-tzdata_2026.4.bb rename to meta-python/recipes-devtools/python/python3-tzdata_2026.5.bb index 91679e8bee..ef78b4c2fe 100644 --- a/meta-python/recipes-devtools/python/python3-tzdata_2026.4.bb +++ b/meta-python/recipes-devtools/python/python3-tzdata_2026.5.bb @@ -5,7 +5,7 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=804220b73c90950be376e7ff7b2066bb \ file://licenses/LICENSE_APACHE;md5=86d3f3a95c324c9479bd8986968f4327 \ " -SRC_URI[sha256sum] = "f1b8bd365d8d210c55353f4d7f8d6d8561c0ba50d704b700d195a9424bba0d79" +SRC_URI[sha256sum] = "8cc73c0a0bfca7dbfa59235d60b2eff82231dee33f53d206db1acd9173cfc0a7" inherit pypi python_setuptools_build_meta ptest-python-pytest From patchwork Wed Oct 14 10:22:09 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 100658 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 13433CC6B1A for ; Wed, 14 Oct 2026 10:22:40 +0000 (UTC) Received: from mail-pg1-f177.google.com (mail-pg1-f177.google.com [209.85.215.177]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.10220.1791973351054671676 for ; Wed, 14 Oct 2026 03:22:31 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=QKGLngPx; spf=pass (domain: gmail.com, ip: 209.85.215.177, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pg1-f177.google.com with SMTP id 41be03b00d2f7-cbedd5aece4so2863167a12.0 for ; Wed, 14 Oct 2026 03:22:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1791973350; x=1792578150; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=j9BJ9oM7viTQh1lJEHjSgG95tVepqR5Nz32DKdqnDD0=; b=QKGLngPxDf1Nm3criSctCGA+YY7PlqyRgFZkwEqiDlbUEn0R6wVJ38JMSK/Pi5guq3 3Bl86VOrt/hheBnbWkpHUwk5DM//XMsvkfERrlSe00Gu8iOj6dCIn/mU8FCKk4crvi+g 0NI8Z0bIsYUnfJfsvRcv+4aCuyJ129a9r/XaUk9nL3bJiLcPx1nNO6RCXOxmWv26K9mO wcUAg0iQ3LwbOVVDrLwwo+LCpCg+CMANByGFxvk2eGMlcPlBz+1wts7TGtw1NosQdcXx CYd/uZS8Nosa8sTBQsY4/7nEhb3eTw2ihq0xJkWdJUyJcxmHTSzc5lC2mX+lEQEGIUaz E3Jg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1791973350; x=1792578150; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=j9BJ9oM7viTQh1lJEHjSgG95tVepqR5Nz32DKdqnDD0=; b=fHVM65PbwKVduzCVlKiiuxObk3HBrICM/hXG7xabCXRDHUB69cO1ycMEYbVUtzw+7B EF2Ca5FVd07WI14PFwhDzJioUlrSj2qNR4cRo2SC4VJx/JyNkI7VBnajFfLA0JVOFIDf iuQBeWJh+vYUJM0SQAWuU1q9BSstVx5s8IxVPCUQUuZU3I6/7mXW/gSjC2DrY3XIBsdx cI6+wh94Kyn6JuHdzk3vgUFzIbQzfAVdEev2FXZ0lRW3omaBHVP7HNya0tfxMf6RLfAJ i1Yn7uyDcHp1dd2U7Mu4bOfBhtN68n0KQpkGSBkVhe6ThRj72kesi/RYssn3ZfUNerUp 3lrA== X-Gm-Message-State: AFq9FYLCFfJd6kbjk3zerEt7F5I2N8N2wtAuWYSnrFPcs6oBxSSYUaGo /SzR6rUmcnBjk37qVPZIuRZkaqPOgICf1E7NEtY3i54g5vRX5v3/ctsFCdN/3g== X-Gm-Gg: AYBFou0o/0nsfk2Q0uwD/ile/MJYuLP4yPpMJ9y0CxDyCuGGePiQaecCAofeGIJ1kap CJ5fwtbWUvXeDPrpLODr1/P5d5lzXCTcu4BOh810j1ACkUF3jVCh8D8xN/ua2ESWRXVvapXmOeZ +3nVrMbNN1P8i7AzJr3p2HmZdmugaBS5sjzt36FDH89m+cfcjqY9eOfOSziyBqisMgsu32I8lyU nScmXBqiOCWX3FdgedcxTNy5n6F9tsOpTrGs9IPRZpzGtzAkHUvEeUQkYcLrHbXRgiu0VdLRcEC cs6o+ZcdVZcA0rym31dT8IdjvtYjF4sYlJaHWqsstpCjKMMCC1ne/RjeOVOFh4qYiLOC/rZCFDR rVe0DFlcgWG2H8qvxLWEKF9qOQOWk/cQj6Y3O/Y6U6f8pYz8Z+GP772OwTt8Nu7Y9WE48G3nTcV dpr2nh2Rnd0yCB1wu2fQHlC5eJ4kGzgsVU9eBwgwX2hSJzADg67dhsr7eaDQZP/EhHFGxIyBHGF KFHojtMhQjVIIv0TOBWbXmh0+A1nR5ipA2KMTZ6VtwJ/2w1ow== X-Received: by 2002:a17:90b:4e8b:b0:3ab:be66:ddd3 with SMTP id 98e67ed59e1d1-3abbe66dfa9mr6250895a91.32.1791973350378; Wed, 14 Oct 2026 03:22:30 -0700 (PDT) Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ac61170b7bsm4017740a91.16.2026.10.14.03.22.28 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 14 Oct 2026 03:22:30 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-webserver][wrynose][PATCH 3/11] swagger-ui: upgrade 5.32.14 -> 5.32.15 Date: Wed, 14 Oct 2026 23:22:09 +1300 Message-ID: <20261014102218.880640-3-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261014102218.880640-1-ankur.tyagi85@gmail.com> References: <20261014102218.880640-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 14 Oct 2026 10:22:40 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/130889 From: Ankur Tyagi Changelog: https://github.com/swagger-api/swagger-ui/releases/tag/v5.32.15 Signed-off-by: Ankur Tyagi --- .../swagger-ui/{swagger-ui_5.32.14.bb => swagger-ui_5.32.15.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-webserver/recipes-devtools/swagger-ui/{swagger-ui_5.32.14.bb => swagger-ui_5.32.15.bb} (94%) diff --git a/meta-webserver/recipes-devtools/swagger-ui/swagger-ui_5.32.14.bb b/meta-webserver/recipes-devtools/swagger-ui/swagger-ui_5.32.15.bb similarity index 94% rename from meta-webserver/recipes-devtools/swagger-ui/swagger-ui_5.32.14.bb rename to meta-webserver/recipes-devtools/swagger-ui/swagger-ui_5.32.15.bb index 5bb5a66021..1c1a625c2a 100644 --- a/meta-webserver/recipes-devtools/swagger-ui/swagger-ui_5.32.14.bb +++ b/meta-webserver/recipes-devtools/swagger-ui/swagger-ui_5.32.15.bb @@ -12,7 +12,7 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=3b83ef96387f14655fc854ddc3c6bd57" SRC_URI = "git://github.com/swagger-api/swagger-ui;branch=main;protocol=https;tag=v${PV}" -SRCREV = "6e8ce248db64190e4113676aba996943c56f2491" +SRCREV = "eb37d16243388857e5b7c68c93fd04635c7c96fa" CVE_STATUS[CVE-2016-1000229] = "fixed-version: fixed since 2.2.1" From patchwork Wed Oct 14 10:22:10 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 100656 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id D787BCC6B1D for ; Wed, 14 Oct 2026 10:22:39 +0000 (UTC) Received: from mail-pj1-f53.google.com (mail-pj1-f53.google.com [209.85.216.53]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.10221.1791973353561509865 for ; Wed, 14 Oct 2026 03:22:33 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=sp8XoCNM; spf=pass (domain: gmail.com, ip: 209.85.216.53, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pj1-f53.google.com with SMTP id 98e67ed59e1d1-3ab8309dcbaso2872140a91.1 for ; Wed, 14 Oct 2026 03:22:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1791973353; x=1792578153; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=uBrBBaGvlLx7cs/O9JYmR82nNSWML2ymO0rqcN6BQsQ=; b=sp8XoCNMnoGqkAp2MKdUZmvGDZ+KdpAShw1i0J2tmh3blqFvxAGiCDKTg8xyn4ZFC1 kdrlZqBmQc88fWtu6zlKwmjsSb+1Z1H/Tvi1nkCUpf5pSAQRltkSm6XajGwsVG01G6Fw xnoSwSyBUR+8czPI63Rqu53cXsVEgQCCU+lljaTtkgad7AQjmIJTHDvo2GolBzMhdSob LRMEV+hsPq5GB3mSGx6u2QZK2qEAPKXV6FGI9hZWIIu016SsXPprw0Dmisf6tF7vbMtT Y/Hlas11c2ZiEl/IJoU49hf/mnE9arNDXJ1JPL4LQvNE4WcvQavoqv8R2t0AuN4pr+pS utxw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1791973353; x=1792578153; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=uBrBBaGvlLx7cs/O9JYmR82nNSWML2ymO0rqcN6BQsQ=; b=asB7OuqKvvGSVQvsueolbioCvMbehrOwipGA5ho5Ujc5Hs1EmWLodtrQmTfVQQLlf+ bM67aqSOM65PtFN6/fmBSNOmVDMDMlfcQTpxBoH4QVfTSXHftSKJBmQ/7AhXNDPXZPto Wl8kqqh6r57x7JAbeua9mZCgES9bwX1W5PxziXPlqBybt4QnV31WN92gpyCFKZwonfVe VU72ta0VF+Fb+qazm73gS469LoKytI1UwCj9gJgCNqJR9/2c+/+9e4UTt8sRaEPBrqqg 1NaVOryHFsoIpSLmuAn8NbUtILubfUxTeqb23eiw9PXDg9s8mGmPWiARyIDievc6djZn t5rA== X-Gm-Message-State: AFq9FYLgl1bCMNXBsj73BnKS4QIPZ0Ps8bwh36Zxuq2ipTTgpeTjhSHo jz5oi6mFEhevPq2hxzirIx0Wyqg4M02Rxl96Gz0H4uyPeHwiAbH5eAP1L4NgPA== X-Gm-Gg: AYBFou0AR3ocCRN5bvthPq9uNwCKbNMyOblSL5rAs0uuxkCqYrUoLmOPP7Jwnyv9Daq RhV2RtQGhUZZKMyiU9Tc3kJlDzToQSCpsw5jCgZlEjCW3RgNGGqAB6qA9/6ulYRTPjrOsf3krpM zByzDWxsTa3UW5KT9i9GIInSAdqyrxgD4gVfziKrKj3XGtX125FD/1POQlpoex2MfBWFBA7Iha9 1NaFOigKkWC4iMG6nrg4GNOOV39A47skDPIOmTaZYO896bK5GY/bRjAO8llfwKKDBetkYc8RWW2 5IOXyLtRPXhpCINxNiCUgtsFR+/Hi8jMaX9qb8T0HN4ug5BTT3UoGezii1ouj6x6Kw6DBEmZNuz 9BukR4o7KPkopDPnvAR6FvdQssIcGDsfjOZyUjoCE+0P8fFRNxzAa14cGUOk8Q0T3e9GqFEaJyi oNn3rjv13aUmmtp6aW/HLehbPOFdOecbanNGjNfy2qc0DUwufYmj7I/w5Njfc0kVLGW8muqiaDg uC8GcOmNKHSm+mGnwgOOsTAG2WM53pAyjZ+6hk= X-Received: by 2002:a17:90b:4b82:b0:3ab:a09c:f858 with SMTP id 98e67ed59e1d1-3aba09d4a0cmr6260876a91.33.1791973352800; Wed, 14 Oct 2026 03:22:32 -0700 (PDT) Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ac61170b7bsm4017740a91.16.2026.10.14.03.22.30 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 14 Oct 2026 03:22:32 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi , Khem Raj Subject: [oe][meta-python][wrynose][PATCH 4/11] python3-django: upgrade 5.2.17 -> 5.2.18 Date: Wed, 14 Oct 2026 23:22:10 +1300 Message-ID: <20261014102218.880640-4-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261014102218.880640-1-ankur.tyagi85@gmail.com> References: <20261014102218.880640-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 14 Oct 2026 10:22:39 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/130890 From: Ankur Tyagi Changelog: https://docs.djangoproject.com/en/dev/releases/5.2.18/ Signed-off-by: Ankur Tyagi Signed-off-by: Khem Raj (cherry picked from commit 0640fa901df7783fc9f544a6bbfde5b771e22b96) Signed-off-by: Ankur Tyagi --- .../{python3-django_5.2.17.bb => python3-django_5.2.18.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-python/recipes-devtools/python/{python3-django_5.2.17.bb => python3-django_5.2.18.bb} (70%) diff --git a/meta-python/recipes-devtools/python/python3-django_5.2.17.bb b/meta-python/recipes-devtools/python/python3-django_5.2.18.bb similarity index 70% rename from meta-python/recipes-devtools/python/python3-django_5.2.17.bb rename to meta-python/recipes-devtools/python/python3-django_5.2.18.bb index 7f4ed2c92e..4e3d0b431d 100644 --- a/meta-python/recipes-devtools/python/python3-django_5.2.17.bb +++ b/meta-python/recipes-devtools/python/python3-django_5.2.18.bb @@ -3,4 +3,4 @@ inherit python_setuptools_build_meta SRC_URI += "file://0001-fix-test_msgfmt_error_including_non_ascii-test.patch \ file://0001-pyproject-lower-setuptools-requirement.patch" -SRC_URI[sha256sum] = "9d4d93be539a18ab80d058eb515900e10951e04c537c5a6b394fc49528d3251f" +SRC_URI[sha256sum] = "461c5dd06d2ea16bd5ca37d3f46e4def1d6b0fe7588c6f4e2119517bb0af8b2d" From patchwork Wed Oct 14 10:22:11 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 100657 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id E543FCC6B1F for ; Wed, 14 Oct 2026 10:22:39 +0000 (UTC) Received: from mail-pg1-f174.google.com (mail-pg1-f174.google.com [209.85.215.174]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.10239.1791973356791732857 for ; Wed, 14 Oct 2026 03:22:36 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=FJDSWNxt; spf=pass (domain: gmail.com, ip: 209.85.215.174, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pg1-f174.google.com with SMTP id 41be03b00d2f7-cc7cc8aafe6so1566978a12.3 for ; Wed, 14 Oct 2026 03:22:36 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1791973356; x=1792578156; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=srO94dqdUJfJTrB4MkToFCedIFVJBKBtnqJs8zFy/UI=; b=FJDSWNxtKkpYKHuLcHsBzycoUF8JMG+B1glapZzjSKWnK9Qp+zVQfLRYtp8VVZy4R7 GAF9h/axPdX5XcS3wFVYfsYULey9XiQfTqxq7KV14kobucMHmwmy+c9FO4aJnFeoXIwB MxfeCR04RxAumWne+mAw1CP0lNGAL6/1lvH6AlZmyeOMBm8+Q6TLbD1n0Ti5m5jTiFyf i5ekWe39eKUD1ZAvsgf1hrUgmIschKjWK12dLcOdgiwcEbLP1Z6bRuxkP+kjoJJpwNuh HhaUsL4REXZcy0qYT5QIy3Jpa7F2tgk2XjOhRKpL/r6KsywSvfqFUDcdsqyu+dXxxhtf m4dg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1791973356; x=1792578156; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=srO94dqdUJfJTrB4MkToFCedIFVJBKBtnqJs8zFy/UI=; b=nhC22udIsiMTsa/syxVcPkKnJwJSALLSuaMcTqj597MHm6YfE3J3ZsPeJuADv+hwNN QvbILmbq0HHKYbRgYjrmvHHhFg4tGCzC0gaRIv30vtAVkyBpKDyJ9Qb5g0VUggVOl3gi JG0pNwKRMmCv1qGh32ZWW/4HFT+YbWgb85sPQeVfaS4smyG+2t6fZkQh0ke5ml+gjOHf fBYnIzRSp2nPPiRTdySWhIHk7b99fhwDiCB6NtxKfcFPRsO7y9TvLW02CLgBAyc/Rvfc Wre5TfvtBiIVcl+Resd64atPh+3qNx/HbJn48jbDyMyQbebLPWiSu4lvyJh6TPyknFCK 6tyA== X-Gm-Message-State: AFq9FYJHLlgSf9wlzPm3+SNeCzid41M5BCIKaqfgRel/qCL2q4ucecpb 8QkutZK17WCeP5WtHJ4dFsexKoaId3W1ZCXln94QelmKDZ/meQ/Sf/+X46Yx2g== X-Gm-Gg: AYBFou0pWmQZIuYqlb+F9XpOaz+5yvbBPOghsnlBd0kYvUWkjR/9ogFYMzhGHHFvLix TBh8i07HRsxDoSTX+KMaCNbT+34WyOIP6PH1Y+oclm0UijxBt7igt+Bz/dLW9DJzvJa4ZkNdMr+ 1tVPQS+S7A6YfPkmXFbj34yCmsXMgRX9FCFP31uvNys4+nTDdk5QcY0rxBJcPD6YRJlatywfUWK WRptr0oo6Iux8v9dtX5I1B1ze/vMDk81z6JSWZBFU9LVmtJdnxUTFjTIeHzZn5d+o2Ldbn0ODtd 5MDopoH2B1YfXWLjeiIcBtZaDbVK035apaHqSwjaHUG3Cs6lI7a+fTJ+c9Hj+NDeuE6JfAhglTN z5lV22iiOjebSp1hK5oFOIwbKYajEYIsTPMukhWDx7N6CBcLg6PTnEwnuxDXFHplNkNanYIG+M6 WobcsU7e7J0gLLaPJc7J3FvcNKKFVO59IYX4RC6T+vQFiYiPW++wYcXlpnYgDfWoroZZ30jWbAw EOP/mBwaE6hqNnkOqJ1pRR7+cJziBljFk03ulU= X-Received: by 2002:a17:90b:4c42:b0:3ac:80dc:f419 with SMTP id 98e67ed59e1d1-3ac80dd01bcmr479394a91.25.1791973355986; Wed, 14 Oct 2026 03:22:35 -0700 (PDT) Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ac61170b7bsm4017740a91.16.2026.10.14.03.22.33 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 14 Oct 2026 03:22:35 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi , Khem Raj Subject: [oe][meta-python][wrynose][PATCH 5/11] python3-django: upgrade 6.0.8 -> 6.0.9 Date: Wed, 14 Oct 2026 23:22:11 +1300 Message-ID: <20261014102218.880640-5-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261014102218.880640-1-ankur.tyagi85@gmail.com> References: <20261014102218.880640-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 14 Oct 2026 10:22:39 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/130891 From: Ankur Tyagi Changelog: https://docs.djangoproject.com/en/dev/releases/6.0.9/ Signed-off-by: Ankur Tyagi Signed-off-by: Khem Raj (cherry picked from commit c39562d398bdde11ba32c9144a8189f87ef922d7) Signed-off-by: Ankur Tyagi --- .../python/{python3-django_6.0.8.bb => python3-django_6.0.9.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-python/recipes-devtools/python/{python3-django_6.0.8.bb => python3-django_6.0.9.bb} (79%) diff --git a/meta-python/recipes-devtools/python/python3-django_6.0.8.bb b/meta-python/recipes-devtools/python/python3-django_6.0.9.bb similarity index 79% rename from meta-python/recipes-devtools/python/python3-django_6.0.8.bb rename to meta-python/recipes-devtools/python/python3-django_6.0.9.bb index f8a5d6962c..f4e29dc645 100644 --- a/meta-python/recipes-devtools/python/python3-django_6.0.8.bb +++ b/meta-python/recipes-devtools/python/python3-django_6.0.9.bb @@ -1,7 +1,7 @@ require python3-django.inc inherit python_setuptools_build_meta -SRC_URI[sha256sum] = "cb0bd962d27fc866f3c514b20aae6a7df56ec80b488f9899da46d675cd051526" +SRC_URI[sha256sum] = "8ce037c971f421cfb47d38c097ca233a8f6dd42d9e9501a37e02dd7d08c5cb3f" SRC_URI += "file://0001-Revert-Bumped-minimum-setuptools-version-to-83.patch" # Set DEFAULT_PREFERENCE so that the LTS version of django is built by From patchwork Wed Oct 14 10:22:12 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 100659 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 136B9CC6B2C for ; Wed, 14 Oct 2026 10:22:40 +0000 (UTC) Received: from mail-pg1-f181.google.com (mail-pg1-f181.google.com [209.85.215.181]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.10226.1791973358967315638 for ; Wed, 14 Oct 2026 03:22:39 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=oiCLE5sm; spf=pass (domain: gmail.com, ip: 209.85.215.181, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pg1-f181.google.com with SMTP id 41be03b00d2f7-cc4dbda1e5dso1460318a12.2 for ; Wed, 14 Oct 2026 03:22:38 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1791973358; x=1792578158; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=/vHbvayGHu6W/Ve9I6tBnDBcTfFiTwvQUhhnB3sj67s=; b=oiCLE5smN/ZTHVQRSgsnE8p2kaDUgknGygQMb3hp+d70yfEf+aPKZ7avxIQoTSTdtd m7pxKYXDq1wvE4dmGG8oq5aIV3RSOsv7RtHufFhjfxgyeSWa24YrMM1D9ygrPenD4g0W aJyTNFfns3SmndtBh78mc6I5O0TRdSC8IoBZYdYdw4GzSc69B0TSrz6VBjVufQod5UAC P3Ejg6IbNn/ezjEhh7ehT1ydcI0ov7+TR5nxnZNSl8xbl1tenGbmwl4NwG1yKbs3j/ke mOm6Qj6yH1xi27TMgXhL4+1WSwyerILHEsEjXSvAce1u/csHbo6pO0bHuBIpyoQP4l29 Z2mQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1791973358; x=1792578158; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=/vHbvayGHu6W/Ve9I6tBnDBcTfFiTwvQUhhnB3sj67s=; b=CiDajK2J9uvesT8jluF1DCQUqKWrBcavvj0p7W1qK5XCNRHLsthASfxucb0ewdQHNJ 2qz4R8AKHCW/6HaGaMYjOqHaholKHio2eFvSj/TWtCLecgm5f010zdJ6Ru5v0xgqWHjY R28GjidrvG9ljHlb8eZYET8q5njQMgbkeaBthB5oZ0HnXOuK/nDQKTGoI/m4PF69VU30 ZgtDnsgMQzCInKszeG1ecw0I0nxfKequAoZL8oigaFvF3hd4DspgN2mLJ5lvwOEdK+IO vCtitzmHwuLLGdeM3Prprhy//VeQaLwkEhoyRZvDfaDZf2g5Zou5ZplFDFCADKPuUmFV zhfA== X-Gm-Message-State: AFq9FYKYhH6Wa5xQA4yCU1mFJ222dZ4OZMABnXuV1BsxzS/Kooxba3o2 xWhuY1B6kRrTOdFZ7Dh10spAsNKRX5CXnwPvM4NMeD8Ml6X261wLe+F13ACrzg== X-Gm-Gg: AYBFou1/0uzsIuBKqkfYzSqxzUGLxGiC5lOoKsWwPbyCWpV81HYkTIxvdSGxd18Uzbn SSj4ZwwnSDfdvZo7gBVZEDHXRw70fEV6FGUwxHY4xFTXXR15TEDsExHNvaPsUdFIAqO6ZIURjtG dBRZ0Uh30OWkdvDePfdBWkks5Zjo0kMSEuFUFEmnoW6phipHQibcRu3L71MXgtGcQIAbqGpewd7 YLjNO+7eQONAC2LxggcF1FshpsXu/yML5CE5q9qulA6mf3OKzTxDC9S+bS7zK5eKbwqiL7jOnoU STQe/nq31rAmzPsrEQLQXtDrJ2CbZLQZaujpVjAV+bfsXikHWLqqHFDr26gd/Vp6lQgW0sGZDif K2q8nvnouipNMeWynwmjznYjCKVII05n5ZsMqq6SJJ4rtFS7PBHcE/T5SSUjF04I7oWcB4owKTX k+0klpUtfL/mWFCbQGqBwDy9+C2fMeuZtV/hbp/2NnrECvQGUcRHW/KRYCuxG/nbwiOrecrIXjt 9HAqB8Kze38BENIbnkX6b91Gqly2JX9jwYTuK32Cw== X-Received: by 2002:a17:90b:1e47:b0:3a4:ee64:b82c with SMTP id 98e67ed59e1d1-3ab3b06bb4bmr12074816a91.66.1791973358334; Wed, 14 Oct 2026 03:22:38 -0700 (PDT) Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ac61170b7bsm4017740a91.16.2026.10.14.03.22.36 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 14 Oct 2026 03:22:38 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-networking][wrynose][PATCH 6/11] tinyproxy: patch CVE-2026-54388 Date: Wed, 14 Oct 2026 23:22:12 +1300 Message-ID: <20261014102218.880640-6-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261014102218.880640-1-ankur.tyagi85@gmail.com> References: <20261014102218.880640-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 14 Oct 2026 10:22:40 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/130892 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-54388 Signed-off-by: Ankur Tyagi --- .../tinyproxy/tinyproxy/CVE-2026-54388.patch | 32 +++++++++++++++++++ .../tinyproxy/tinyproxy_1.11.3.bb | 1 + 2 files changed, 33 insertions(+) create mode 100644 meta-networking/recipes-support/tinyproxy/tinyproxy/CVE-2026-54388.patch diff --git a/meta-networking/recipes-support/tinyproxy/tinyproxy/CVE-2026-54388.patch b/meta-networking/recipes-support/tinyproxy/tinyproxy/CVE-2026-54388.patch new file mode 100644 index 0000000000..4dc7f88310 --- /dev/null +++ b/meta-networking/recipes-support/tinyproxy/tinyproxy/CVE-2026-54388.patch @@ -0,0 +1,32 @@ +From 2639058707dd9d199196b167823ba1865a60ea08 Mon Sep 17 00:00:00 2001 +From: rofl0r +Date: Thu, 7 May 2026 16:39:48 +0000 +Subject: [PATCH] reqs: prevent multiple content-lengths getting emitted + +addressing point 2 of #609 + +(cherry picked from commit 364cdb67e0ea00a8e4a7037e2693e0711e816adb) + +CVE: CVE-2026-54388 +Upstream-Status: Backport [https://github.com/tinyproxy/tinyproxy/commit/364cdb67e0ea00a8e4a7037e2693e0711e816adb] +Signed-off-by: Ankur Tyagi +--- + src/reqs.c | 5 +++++ + 1 file changed, 5 insertions(+) + +diff --git a/src/reqs.c b/src/reqs.c +index d5037cf..117d755 100644 +--- a/src/reqs.c ++++ b/src/reqs.c +@@ -681,6 +681,11 @@ add_header_to_connection (pseudomap *hashofheaders, char *header, size_t len) + /* Calculate the new length of just the data */ + len -= sep - header - 1; + ++ /* prevent multiple content-length headers from being inserted */ ++ if (!strcasecmp(header, "content-length") && ++ pseudomap_find (hashofheaders, "content-length")) ++ return 0; ++ + return pseudomap_append (hashofheaders, header, sep); + } + diff --git a/meta-networking/recipes-support/tinyproxy/tinyproxy_1.11.3.bb b/meta-networking/recipes-support/tinyproxy/tinyproxy_1.11.3.bb index f9d425b45a..cadddffa18 100644 --- a/meta-networking/recipes-support/tinyproxy/tinyproxy_1.11.3.bb +++ b/meta-networking/recipes-support/tinyproxy/tinyproxy_1.11.3.bb @@ -12,6 +12,7 @@ SRC_URI = "https://github.com/${BPN}/${BPN}/releases/download/${PV}/${BP}.tar.gz file://CVE-2026-31842.patch \ file://CVE-2026-54387.patch \ file://CVE-2026-55202.patch \ + file://CVE-2026-54388.patch \ " SRC_URI[sha256sum] = "9bcf46db1a2375ff3e3d27a41982f1efec4706cce8899ff9f33323a8218f7592" From patchwork Wed Oct 14 10:22:13 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 100662 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 771E8CC6B1D for ; Wed, 14 Oct 2026 10:22:50 +0000 (UTC) Received: from mail-pj1-f45.google.com (mail-pj1-f45.google.com [209.85.216.45]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.10241.1791973361297149107 for ; Wed, 14 Oct 2026 03:22:41 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=EB7N8fyQ; spf=pass (domain: gmail.com, ip: 209.85.216.45, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pj1-f45.google.com with SMTP id 98e67ed59e1d1-3ab8309dcbaso2872234a91.1 for ; Wed, 14 Oct 2026 03:22:41 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1791973361; x=1792578161; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=dcDQN3b53a6MHz1FFFFYGmijN0jK+jJ9QC8CTjP1Sus=; b=EB7N8fyQnrCXn+T/bARmjMQGnrP9WmyPar/oHGdt65vWXlGBJXyrYtrSbdPEyJgALN jLW0D4ND4PkJJAmx8pCPq0eShezw1aaZqoBiF1bceHRXEzUA713SNOTib4nbwgMYmWir 2KvSr/rfGPV5d3rCWCb2Pjtcbmva6P4roC/HfK61O8iD2/g3GnPOhvydhCFLIoKPIWU9 WZ8PStSOPlV73kIdDoORLy5+N0a2KmcUF0FZkZb0iXZSdFqaqlKgIpx0QY3OSJevsWZY M29PmSh3kCp19q9HK32fGabTfTaA6Y/x24+H0LgVBVQb5ApwaH+Eu9oagOMEhdsELURP S9gw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1791973361; x=1792578161; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=dcDQN3b53a6MHz1FFFFYGmijN0jK+jJ9QC8CTjP1Sus=; b=M7y0LG5XWSKEyko9qO+R/HLBn63gsrcVuTCyaTDiqTN2TvPwodjiBfyrTuniqHLLlj l3dgPxubfGtEeIQ00iA/mxwyCr2P3/z1lNnaLn2zN7Jaf6tB4MYK7Nk2lBptnMfEUWHp XixxrQufymlEXEc2V3GkqJEtJu9U/hUPlZ6ArQpx/HQdjoHOkJm5wYgOWOUPncvxFz3t Ve6pZu01Muga2tAs8CUNBrbe8/JDqiXzrN8LxMV+v3Z0nFNEt99q9XzXMxuG2Kv6+kPb mGU2GIYOfkTgBBrP6ksUuH2L0dbaRLbxrVPa1bWWzgsNI104BaKpnDs/iM1IBqQKf+Fv MbjQ== X-Gm-Message-State: AFq9FYIQYzOOL3x1sbnwOYk3GcEBacM8lUWPN4SEZnMW3LMOAt+nlGDm TwOzGOHa8Qpo/tcnJMOA7F0HHY7dtJ8i+b/uoQbLSouD8ioIEBJlE1lHNisMoA== X-Gm-Gg: AYBFou3DWOO11sTXdc3joCc8xGMsXpbIJYbbvmqAwenQ2rU9vllKKnsycck+Rsm91Y7 47T0s7gMrOElmk9oqNO+kFErAgo0FOlTKFZGlnmCHdbbLhcy3DX3RRyYCpaXx4S4ipniOniobXv AI+4ONqLI2dofJjZSe0oBWbWCt0ZBB/HV556fqQOWkHD39K03E3F8/IvXkGEG2dZjSQOppzPUca RKyqSPrDlKJzkk4eTWm4OqBKiQRWZQANDX56VUI7o5Ay/S5Xf8hGaceN7bBT8EXSUQxFTQGCvhF tDjYXIqvoAhcaK7mBEd3rAw4R+lPH/kQrSNXrJd96ujxp0nObQRS8zu6j0AlKFrGFmTIA3sOo29 Q+3TnadlSaHx+sfotg8HR7xy7faVdyiHVMs2N/TKMPmzAz4OlT4WW6b6vcun3ii8b/wUYRq0ORX fCKBzpz+2QU5byQiqRAbZlwgs1Wi8HN1/n9Jy8ao7s8nvgN19GaKQVZaVRAWF2XglFu3ANKNUn7 gxOCXnew8N49CzFva6/Q+NHpLl5V1WwSrIFuKw= X-Received: by 2002:a17:90b:4e8b:b0:3ab:be66:ddd3 with SMTP id 98e67ed59e1d1-3abbe66dfa9mr6251096a91.32.1791973360474; Wed, 14 Oct 2026 03:22:40 -0700 (PDT) Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ac61170b7bsm4017740a91.16.2026.10.14.03.22.38 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 14 Oct 2026 03:22:40 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-networking][wrynose][PATCH 7/11] zeroconf: ignore CVEs Date: Wed, 14 Oct 2026 23:22:13 +1300 Message-ID: <20261014102218.880640-7-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261014102218.880640-1-ankur.tyagi85@gmail.com> References: <20261014102218.880640-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 14 Oct 2026 10:22:50 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/130893 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-47180 https://nvd.nist.gov/vuln/detail/cve-2026-47183 https://nvd.nist.gov/vuln/detail/cve-2026-47184 https://nvd.nist.gov/vuln/detail/cve-2026-48045 https://nvd.nist.gov/vuln/detail/cve-2026-48487 Signed-off-by: Ankur Tyagi --- meta-networking/recipes-protocols/zeroconf/zeroconf_0.9.bb | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/meta-networking/recipes-protocols/zeroconf/zeroconf_0.9.bb b/meta-networking/recipes-protocols/zeroconf/zeroconf_0.9.bb index cb26699212..a9c19cb38f 100644 --- a/meta-networking/recipes-protocols/zeroconf/zeroconf_0.9.bb +++ b/meta-networking/recipes-protocols/zeroconf/zeroconf_0.9.bb @@ -35,3 +35,9 @@ do_install () { install -c -m 755 ${UNPACKDIR}/debian-zeroconf ${D}${sysconfdir}/network/if-up.d/zeroconf install -c ${UNPACKDIR}/zeroconf-default ${D}${sysconfdir}/default/zeroconf } + +CVE_STATUS[CVE-2026-47180] = "cpe-incorrect: this vulnerability is for Python Zeroconf library" +CVE_STATUS[CVE-2026-47183] = "cpe-incorrect: this vulnerability is for Python Zeroconf library" +CVE_STATUS[CVE-2026-47184] = "cpe-incorrect: this vulnerability is for Python Zeroconf library" +CVE_STATUS[CVE-2026-48045] = "cpe-incorrect: this vulnerability is for Python Zeroconf library" +CVE_STATUS[CVE-2026-48487] = "cpe-incorrect: this vulnerability is for Python Zeroconf library" From patchwork Wed Oct 14 10:22:14 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 100660 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 576A2CC6B1A for ; Wed, 14 Oct 2026 10:22:50 +0000 (UTC) Received: from mail-pj1-f44.google.com (mail-pj1-f44.google.com [209.85.216.44]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.10242.1791973363259192866 for ; Wed, 14 Oct 2026 03:22:43 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=PXsBleJy; spf=pass (domain: gmail.com, ip: 209.85.216.44, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pj1-f44.google.com with SMTP id 98e67ed59e1d1-3ab3260b35dso2479778a91.1 for ; Wed, 14 Oct 2026 03:22:43 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1791973363; x=1792578163; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=SFKa95pacYmxD4fyvvH7JpYlJS5wAUEwj2Ix4xN8Gm0=; b=PXsBleJyh2q5oem4WKMsSKoybpPhCVfS5pzUiWYmjWOf7SjDAaMuy51Dyw5n5/z0cC KcRgt7wvQM5UyP6Iq0vTK/lR12tMfRIT9HOnEEesZi9AYuj9xOesABbHy+FEbsPGyGNO MHgfNgVaxbOGaT6cfp/4WZNKjorDrLK8r2UgRkWrXABui+DXHETzWlDxf4DCvpLcjpT3 Adv+nEcwGnZrANtJY4NYPcvDerhBPUCeawrqtquHw44prliyh1xMRPSRRn5G7CSqAxLE zH9K49GvUeauYRLYASc0eHISKNN5RtYxsMmXu/jo5AIbL6OsG963IuiW4RgF13Flfo8c Vahw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1791973363; x=1792578163; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=SFKa95pacYmxD4fyvvH7JpYlJS5wAUEwj2Ix4xN8Gm0=; b=PFgdd+fxdI5TwL8lR12TpMxO4dAUNuV6q8TpDZhLBB+DyiXdgiVw/3WDG4QWP4B66c 8rhdm8iySCbTHX1dgJbz8A2HsV0RNesc3zpIxh7yZGePmBQ2pPZKhSQzoisTEoLIj/FU sgLvAle0gs4bv/cei5zek4MqHAMSEewCAFXNGPTGLPgUqrexOrD23VaEVHIOpBV67TRI IZPOADw8Mb0IQSv6z2y5klarrXlWROx2QZF080sxSsTyx+P5L31KoMANxJjOhU035wCS /kZ86mb0okzmqbRTpVI484OSZWaCbrrePIIimANUx2/2MVqAZCs1ng4kA6Zb6rRm14OE aO2A== X-Gm-Message-State: AFq9FYLcu0I9PC5SAr31R56h+U9zazq5SJE1sNCSVHJT/lndVV1YtdPp nezxmNMGyY05vYlmiUgczOoI6Lm6hZY9hX5q3saIEtnLTr1d2NsjRcMRexc6UQ== X-Gm-Gg: AYBFou2APdB7SEiQXf7vdhGEUwJ3qLjK/6z1B1BOivnc2olfq3v/vJUmomW5jHztByN qV8wzx1WrBF3zdMHpMV6KR/7EuGyJwnsAG43CPxFU3yg4Pr4Fbb+YssW+yAuatdlttZGBc0rvEi w3tYskWx2Un/eLJva29nwI7x1JC48HivYfagv+O/A2c0NaiMd7kRWAy56Z83TbvL4NO0meTZe2g J5Pb8Py3z+OPoK50QEEml7dNj75JsqzQW6K2AWB0XrC2D/griqfUC92D/JLcELe+sErhyoZtNHP mwx+9WI0XXHv0m2fTcqhxlo+QOH2M2cyRqj6vgFFTManH1mlJRu0wa/YvGo5r1yE7QhxbL8PE9l 60nLF69BR0GyoK9OgqUa1Xzl1dRSY9OZMRb2rnJ8jrjL0nK2X+Ajuj+tlzBwQ6i++GzVO7D6VEB tXLVeCBgkINErmvIdiF4dnTGuLwpauntXsWrAE8W8Hct24kALtkb5cb7i2I1c+S/Zf59Wqfyx8b j+5YfMxeBwQa5FNCN4dLakWtN8B+nK79PKOa/8= X-Received: by 2002:a17:90b:3143:b0:3ab:e588:c29b with SMTP id 98e67ed59e1d1-3abe588fa64mr8323348a91.5.1791973362604; Wed, 14 Oct 2026 03:22:42 -0700 (PDT) Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ac61170b7bsm4017740a91.16.2026.10.14.03.22.40 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 14 Oct 2026 03:22:42 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-oe][wrynose][PATCH 8/11] tmate: patch CVE-2026-4751 Date: Wed, 14 Oct 2026 23:22:14 +1300 Message-ID: <20261014102218.880640-8-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261014102218.880640-1-ankur.tyagi85@gmail.com> References: <20261014102218.880640-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 14 Oct 2026 10:22:50 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/130894 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-4751 Signed-off-by: Ankur Tyagi --- .../tmate/files/CVE-2026-4751.patch | 75 +++++++++++++++++++ meta-oe/recipes-extended/tmate/tmate_2.4.0.bb | 1 + 2 files changed, 76 insertions(+) create mode 100644 meta-oe/recipes-extended/tmate/files/CVE-2026-4751.patch diff --git a/meta-oe/recipes-extended/tmate/files/CVE-2026-4751.patch b/meta-oe/recipes-extended/tmate/files/CVE-2026-4751.patch new file mode 100644 index 0000000000..faf3d2a3ae --- /dev/null +++ b/meta-oe/recipes-extended/tmate/files/CVE-2026-4751.patch @@ -0,0 +1,75 @@ +From 27f07d414949259f17aebc02a61f103629d547f1 Mon Sep 17 00:00:00 2001 +From: npt-1707 +Date: Tue, 10 Mar 2026 00:19:33 +0800 +Subject: [PATCH] Fix CVE-2018-19387 + +(cherry picked from commit 3e12f558c7b71b7135403cdd2df77d38538a695c) + +CVE: CVE-2026-4751 +Upstream-Status: Backport [https://github.com/tmate-io/tmate/commit/3e12f558c7b71b7135403cdd2df77d38538a695c] +Signed-off-by: Ankur Tyagi +--- + format.c | 2 ++ + input.c | 2 ++ + server-client.c | 6 ++++++ + window.c | 2 ++ + 4 files changed, 12 insertions(+) + +diff --git a/format.c b/format.c +index f771c85f..3bbb8cf1 100644 +--- a/format.c ++++ b/format.c +@@ -468,6 +468,8 @@ format_cb_pane_tabs(struct format_tree *ft, struct format_entry *fe) + return; + + buffer = evbuffer_new(); ++ if (buffer == NULL) ++ fatalx("out of memory"); + for (i = 0; i < wp->base.grid->sx; i++) { + if (!bit_test(wp->base.tabs, i)) + continue; +diff --git a/input.c b/input.c +index 18c8eb9a..8a66d89e 100644 +--- a/input.c ++++ b/input.c +@@ -766,6 +766,8 @@ input_init(struct window_pane *wp) + ictx->input_buf = xmalloc(INPUT_BUF_START); + + ictx->since_ground = evbuffer_new(); ++ if (ictx->since_ground == NULL) ++ fatalx("out of memory"); + + input_reset(wp, 0); + } +diff --git a/server-client.c b/server-client.c +index 21cccc85..e8614d40 100644 +--- a/server-client.c ++++ b/server-client.c +@@ -121,8 +121,14 @@ server_client_create(int fd) + c->cmdq->client_exit = 1; + + c->stdin_data = evbuffer_new(); ++ if (c->stdin_data == NULL) ++ fatalx("out of memory"); + c->stdout_data = evbuffer_new(); ++ if (c->stdout_data == NULL) ++ fatalx("out of memory"); + c->stderr_data = evbuffer_new(); ++ if (c->stderr_data == NULL) ++ fatalx("out of memory"); + + c->tty.fd = -1; + c->title = NULL; +diff --git a/window.c b/window.c +index 45ec7790..9d95bb77 100644 +--- a/window.c ++++ b/window.c +@@ -945,6 +945,8 @@ window_pane_spawn(struct window_pane *wp, int argc, char **argv, + + wp->event = bufferevent_new(wp->fd, window_pane_read_callback, NULL, + window_pane_error_callback, wp); ++ if (wp->event == NULL) ++ fatalx("out of memory"); + + bufferevent_setwatermark(wp->event, EV_READ, 0, READ_SIZE); + bufferevent_enable(wp->event, EV_READ|EV_WRITE); diff --git a/meta-oe/recipes-extended/tmate/tmate_2.4.0.bb b/meta-oe/recipes-extended/tmate/tmate_2.4.0.bb index 5fb28b0085..9027826ea6 100644 --- a/meta-oe/recipes-extended/tmate/tmate_2.4.0.bb +++ b/meta-oe/recipes-extended/tmate/tmate_2.4.0.bb @@ -8,6 +8,7 @@ DEPENDS:append = " libevent libssh msgpack-c ncurses" SRC_URI = "\ git://github.com/tmate-io/tmate.git;protocol=https;branch=master \ file://0001-fix-finding-msgpack.patch \ + file://CVE-2026-4751.patch \ " SRCREV = "5e00bfa5e137e76c81888727712ced2b3fd99f5b" From patchwork Wed Oct 14 10:22:15 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 100663 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 6D7C4CC6B1F for ; Wed, 14 Oct 2026 10:22:50 +0000 (UTC) Received: from mail-pj1-f49.google.com (mail-pj1-f49.google.com [209.85.216.49]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.10229.1791973366247494845 for ; Wed, 14 Oct 2026 03:22:46 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=BDMofLiC; spf=pass (domain: gmail.com, ip: 209.85.216.49, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pj1-f49.google.com with SMTP id 98e67ed59e1d1-3ab450c0873so3296330a91.3 for ; Wed, 14 Oct 2026 03:22:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1791973366; x=1792578166; darn=lists.openembedded.org; h=content-transfer-encoding:content-type:mime-version:references :in-reply-to:message-id:date:subject:cc:to:from:from:to:cc:subject :date:message-id:reply-to:content-type; bh=P7xCRufdoNTQSJKEJd6k24lNF+Ju0liKCTuy5BZrqi4=; b=BDMofLiC9Hs2IR5T/2kdaHuv1O3dQUYq9u0ZY6YiTip2toBc8Kx/+tghWdkECQPn/x ngb506xzUgOO7tU9BfR2aDZvH/WQ/jH0uD1aW6EgDsjU28WXSaNWG3reYga5gk4ra5nV Vz3ZtnleggzHeUp0t+qZgRcvQaRquRLy6ZRb/YUw07d7Le4rL+Jp6wumkurRfxl0Y9al YyoA7gy+052Pzb1hm+fSfWhQULkUh+CLyK7yAL2QhX3st5ABmc+mfbdZCuAoyDDiIiBp UwDJayuuLIKuLYHkspvZ2p8T41lOpZQ5Fay8e7va5KTmydjWdZ8yQx8g5Mgjhv2JGS64 LyVA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1791973366; x=1792578166; h=content-transfer-encoding:content-type:mime-version:references :in-reply-to:message-id:date:subject:cc:to:from:x-gm-gg :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=P7xCRufdoNTQSJKEJd6k24lNF+Ju0liKCTuy5BZrqi4=; b=SspejKZ6sOB2b3fGwbo/LOjQnfpH+8w0BG7Ri6h8piNMYjWQEgv9zmnnpF4F6xv2YM eY0LJqGk6I41+cn3DA3JcrD/jo5gygnc/Ffifn3wOdYV94jrnYufkFK1Jlk9nzNO0IE2 mEBhskeTNAgkzmsiQJgivvIEb+ludN6ECq0HdGHI4LsTTT8GwshiOzVo1/KY2pUw/+pX ZIAj/vsaZiwJflWqEynVaRe7XXNo3v6N19aNwyF3NjX3JcN5L34JoRRofRoNaWgNUtYq 46nds+qV5e7D8Uzb6zv0QVaj+FisKRiQzZFxNcc3AXrqm+dqkwVLtbc0UjnO5HciBUqZ Jphw== X-Gm-Message-State: AFq9FYJ9/yBt9Oe+eHfIao6bss7Ud9ukDiXx4u8y0idyi90BL4En60CU hpX7MrVNCdsp3MXEWnz2pcTQQM5DE4YqpKE9jhmo2rp3UkfNTW2h08mvabuhdA== X-Gm-Gg: AYBFou39L5ejQ9LIFaV4IJVDfAcMeJe4P8Kz33vCveRetnmFa0z9qq028u/O+WrPTj7 +R1L7AIcP9QYk5V8qn7l+Z4Tw0YNDayFBdPsIaAw9n4cIvB5PIVzEw6PvWyEKhXdP6KMhPlJkfN a+LluxBk/0Le0pzmKT+bpBJl1187EFJjfh1cuKWKFkQ0hmzW98uBL/Wfp2iWY8WI7JkAg7+chXX 20c73POMg90HUFebHoWSqt71fIQj2wsCIrwk7g9BFyHXQK+urK3uGUUIT6tXikU1PG/u8vpfEc+ ws5gcxHfTQoKkGwCXvzWyHRG90pCK+QtvG8qexWd2S0NhSEYJ6feyQ0FC6WYLJI9GgyAhU2K4No k3HkVQq7ruNmHC+sCTf5pM3SNAg/fMMvVOr6/Tnc4Rkiuik7o7J1W2ajs1vPCFCm46VnueKtjIf 6slzuMdYqF89CKHyFLB5r5j3HpAnf7xfIlf19o2BRSSWtUMUCLTUTEuS3fprZPknUhK4qXErPuS zQJ1Qvo1DWVaOEXF9+SUVt3DeYrmFk8Q4UOSYg= X-Received: by 2002:a17:90b:3c04:b0:3ab:39e5:6268 with SMTP id 98e67ed59e1d1-3ab3a92f39fmr13309514a91.53.1791973365183; Wed, 14 Oct 2026 03:22:45 -0700 (PDT) Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ac61170b7bsm4017740a91.16.2026.10.14.03.22.43 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 14 Oct 2026 03:22:44 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-oe][wrynose][PATCH 9/11] udisks2: patch CVE-2026-7867 Date: Wed, 14 Oct 2026 23:22:15 +1300 Message-ID: <20261014102218.880640-9-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261014102218.880640-1-ankur.tyagi85@gmail.com> References: <20261014102218.880640-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 14 Oct 2026 10:22:50 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/130895 From: Ankur Tyagi Backport commits from the PR[1]. Details: https://nvd.nist.gov/vuln/detail/cve-2026-7867 [1]https://github.com/storaged-project/udisks/pull/1530 Signed-off-by: Ankur Tyagi --- .../udisks/udisks2/CVE-2026-7867-1.patch | 249 +++++++++++++ .../udisks/udisks2/CVE-2026-7867-2.patch | 208 +++++++++++ .../udisks/udisks2/CVE-2026-7867-3.patch | 53 +++ .../udisks/udisks2/CVE-2026-7867-4.patch | 40 ++ .../udisks/udisks2/CVE-2026-7867-5.patch | 348 ++++++++++++++++++ .../recipes-support/udisks/udisks2_2.10.2.bb | 9 +- 6 files changed, 905 insertions(+), 2 deletions(-) create mode 100644 meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-1.patch create mode 100644 meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-2.patch create mode 100644 meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-3.patch create mode 100644 meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-4.patch create mode 100644 meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-5.patch diff --git a/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-1.patch b/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-1.patch new file mode 100644 index 0000000000..e7a5704f6c --- /dev/null +++ b/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-1.patch @@ -0,0 +1,249 @@ +From 1b417fd9a69e7141927a03bfb39d4d5a78b891b4 Mon Sep 17 00:00:00 2001 +From: Tomas Bzatek +Date: Tue, 28 Apr 2026 19:10:09 +0200 +Subject: [PATCH] udiskslinuxfilesystem: Separate real caller identity from + as-user target +MIME-Version: 1.0 +Content-Type: text/plain; charset=UTF-8 +Content-Transfer-Encoding: 8bit + +When the 'as-user' option is specified in Filesystem.Mount(), the code +previously overwrote caller_uid/caller_gid with the target user's identity. +This meant downstream functions received a uid they believed was the +D-Bus caller's, but was actually the target's. + +Introduce effective_uid/effective_gid/effective_user_name to hold the +as-user target identity (or the caller's identity when as-user is not +set). The real D-Bus caller identity is now always resolved into +caller_uid/caller_gid and used for authorization-related decisions +(setup_by_user, on_user_seat checks), while effective_* is used for +mount point calculation, run_as_uid/run_as_gid, and state tracking. + +Reported-by: Azizcan Daştan +Reported-by: Özlem Ozan +Co-Authored-By: Claude Opus 4.6 +(cherry picked from commit 397eea88d58f77f6e02d537c4c961201b9245943) +(cherry picked from commit 2d97818f41fbeb645fbb7b0373ed448bd26503f6) + +CVE: CVE-2026-7867 +Upstream-Status: Backport [https://github.com/storaged-project/udisks/commit/2d97818f41fbeb645fbb7b0373ed448bd26503f6] +Signed-off-by: Ankur Tyagi +--- + src/udiskslinuxfilesystem.c | 93 +++++++++++++++++++++---------------- + 1 file changed, 53 insertions(+), 40 deletions(-) + +diff --git a/src/udiskslinuxfilesystem.c b/src/udiskslinuxfilesystem.c +index 9f4880ad..ebdd2e05 100644 +--- a/src/udiskslinuxfilesystem.c ++++ b/src/udiskslinuxfilesystem.c +@@ -905,7 +905,8 @@ handle_mount_fstab (UDisksDaemon *daemon, + UDisksObject *object, + uid_t caller_uid, + gid_t caller_gid, +- gboolean mount_other_user, ++ uid_t effective_uid, ++ gid_t effective_gid, + const gchar *mount_point_to_use, + const gchar *fstab_mount_options, + GDBusMethodInvocation *invocation, +@@ -936,7 +937,7 @@ handle_mount_fstab (UDisksDaemon *daemon, + * will be replaced by the name of the drive/device in question + */ + message = N_("Authentication is required to mount $(drive)"); +- if (mount_other_user) ++ if (caller_uid != effective_uid) + { + action_id = "org.freedesktop.udisks2.filesystem-mount-other-user"; + } +@@ -981,14 +982,14 @@ handle_mount_fstab (UDisksDaemon *daemon, + job = udisks_daemon_launch_simple_job (daemon, + UDISKS_OBJECT (object), + "filesystem-mount", +- mount_fstab_as_root ? 0 : caller_uid, ++ mount_fstab_as_root ? 0 : effective_uid, + NULL /* cancellable */); + + /* XXX: using run_as_uid for root doesn't work even if the caller is already root */ +- if (!mount_fstab_as_root && caller_uid != 0) ++ if (!mount_fstab_as_root && effective_uid != 0) + { +- BDExtraArg uid_arg = { g_strdup ("run_as_uid"), g_strdup_printf ("%d", caller_uid) }; +- BDExtraArg gid_arg = { g_strdup ("run_as_gid"), g_strdup_printf ("%d", caller_gid) }; ++ BDExtraArg uid_arg = { g_strdup ("run_as_uid"), g_strdup_printf ("%d", effective_uid) }; ++ BDExtraArg gid_arg = { g_strdup ("run_as_gid"), g_strdup_printf ("%d", effective_gid) }; + const BDExtraArg *extra_args[3] = { &uid_arg, &gid_arg, NULL }; + + success = bd_fs_mount (NULL, mount_point_to_use, NULL, NULL, extra_args, &error); +@@ -1066,8 +1067,9 @@ handle_mount_dynamic (UDisksDaemon *daemon, + UDisksObject *object, + uid_t caller_uid, + gid_t caller_gid, +- const gchar *caller_user_name, +- gboolean mount_other_user, ++ uid_t effective_uid, ++ gid_t effective_gid, ++ const gchar *effective_user_name, + gchar **mount_point_to_use, + gboolean *mpoint_persistent, + GDBusMethodInvocation *invocation, +@@ -1127,7 +1129,7 @@ handle_mount_dynamic (UDisksDaemon *daemon, + * will be replaced by the name of the drive/device in question + */ + message = N_("Authentication is required to mount $(drive)"); +- if (mount_other_user) ++ if (caller_uid != effective_uid) + { + action_id = "org.freedesktop.udisks2.filesystem-mount-other-user"; + } +@@ -1161,9 +1163,9 @@ handle_mount_dynamic (UDisksDaemon *daemon, + /* Calculate mount point (guaranteed to be valid UTF-8) */ + *mount_point_to_use = calculate_mount_point (daemon, + block, +- caller_uid, +- caller_gid, +- caller_user_name, ++ effective_uid, ++ effective_gid, ++ effective_user_name, + fs_type_to_use, + mpoint_persistent, + &error); +@@ -1178,7 +1180,7 @@ handle_mount_dynamic (UDisksDaemon *daemon, + /* Calculate mount options (guaranteed to be valid UTF-8) */ + mount_options = udisks_linux_calculate_mount_options (daemon, + block, +- caller_uid, ++ effective_uid, + fs_signature, + fs_type_to_use, + options, +@@ -1258,14 +1260,16 @@ handle_mount (UDisksFilesystem *filesystem, + UDisksBlock *block; + UDisksDaemon *daemon; + UDisksState *state = NULL; +- gchar *opt_as_user = NULL; ++ const gchar *opt_as_user = NULL; + uid_t caller_uid; + gid_t caller_gid; ++ uid_t effective_uid = 0; ++ gid_t effective_gid = 0; ++ gchar *effective_user_name = NULL; + const gchar * const *existing_mount_points; + gchar *mount_point_to_use = NULL; + gboolean mpoint_persistent = TRUE; + gchar *fstab_mount_options = NULL; +- gchar *caller_user_name = NULL; + GError *error = NULL; + gboolean system_managed = FALSE; + gchar *device = NULL; +@@ -1323,35 +1327,42 @@ handle_mount (UDisksFilesystem *filesystem, + goto out; + } + ++ /* Always resolve the real D-Bus caller identity */ ++ if (!udisks_daemon_util_get_caller_uid_sync (daemon, ++ invocation, ++ NULL /* GCancellable */, ++ &caller_uid, ++ &error)) ++ { ++ g_dbus_method_invocation_return_gerror (invocation, error); ++ g_clear_error (&error); ++ goto out; ++ } ++ ++ if (!udisks_daemon_util_get_user_info (caller_uid, ++ &caller_gid, ++ opt_as_user ? NULL : &effective_user_name, ++ &error)) ++ { ++ g_dbus_method_invocation_return_gerror (invocation, error); ++ g_clear_error (&error); ++ goto out; ++ } ++ + if (opt_as_user) + { +- if (!udisks_daemon_util_get_user_info_by_name (opt_as_user, &caller_uid, &caller_gid, &error)) ++ if (!udisks_daemon_util_get_user_info_by_name (opt_as_user, &effective_uid, &effective_gid, &error)) + { + g_dbus_method_invocation_return_gerror (invocation, error); + g_clear_error (&error); + goto out; + } +- caller_user_name = g_strdup (opt_as_user); ++ effective_user_name = g_strdup (opt_as_user); + } + else + { +- if (!udisks_daemon_util_get_caller_uid_sync (daemon, +- invocation, +- NULL /* GCancellable */, +- &caller_uid, +- &error)) +- { +- g_dbus_method_invocation_return_gerror (invocation, error); +- g_clear_error (&error); +- goto out; +- } +- +- if (!udisks_daemon_util_get_user_info (caller_uid, &caller_gid, &caller_user_name, &error)) +- { +- g_dbus_method_invocation_return_gerror (invocation, error); +- g_clear_error (&error); +- goto out; +- } ++ effective_uid = caller_uid; ++ effective_gid = caller_gid; + } + + /* Mount it */ +@@ -1361,7 +1372,8 @@ handle_mount (UDisksFilesystem *filesystem, + object, + caller_uid, + caller_gid, +- opt_as_user != NULL, ++ effective_uid, ++ effective_gid, + mount_point_to_use, + fstab_mount_options, + invocation, +@@ -1374,8 +1386,9 @@ handle_mount (UDisksFilesystem *filesystem, + object, + caller_uid, + caller_gid, +- caller_user_name, +- opt_as_user != NULL, ++ effective_uid, ++ effective_gid, ++ effective_user_name, + &mount_point_to_use, + &mpoint_persistent, + invocation, +@@ -1387,7 +1400,7 @@ handle_mount (UDisksFilesystem *filesystem, + udisks_state_add_mounted_fs (state, + mount_point_to_use, + udisks_block_get_device_number (block), +- caller_uid, ++ effective_uid, + system_managed, + system_managed ? FALSE : mpoint_persistent); + +@@ -1395,7 +1408,7 @@ handle_mount (UDisksFilesystem *filesystem, + device, + system_managed ? " (system)" : "", + mount_point_to_use, +- caller_uid); ++ effective_uid); + + udisks_linux_block_object_trigger_uevent_sync (UDISKS_LINUX_BLOCK_OBJECT (object), + UDISKS_DEFAULT_WAIT_TIMEOUT); +@@ -1409,7 +1422,7 @@ handle_mount (UDisksFilesystem *filesystem, + udisks_state_check (state); + g_free (mount_point_to_use); + g_free (fstab_mount_options); +- g_free (caller_user_name); ++ g_free (effective_user_name); + g_free (device); + g_clear_object (&object); + diff --git a/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-2.patch b/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-2.patch new file mode 100644 index 0000000000..dff53c87d8 --- /dev/null +++ b/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-2.patch @@ -0,0 +1,208 @@ +From 53a3e81a90fa6d71cfb59d63ffffa22bbe071886 Mon Sep 17 00:00:00 2001 +From: Tomas Bzatek +Date: Tue, 28 Apr 2026 19:29:14 +0200 +Subject: [PATCH] udiskslinuxfilesystem: Rework fstab mount authorization for + as-user +MIME-Version: 1.0 +Content-Type: text/plain; charset=UTF-8 +Content-Transfer-Encoding: 8bit + +The polkit authorization logic in handle_mount_fstab() had two problems +when 'as-user' was combined with fstab entries containing 'user', +'users' or 'x-udisks-auth' mount options: + +1. The 'filesystem-mount-other-user' polkit check was inside the code + block that is skipped when 'user'/'users'/'x-udisks-auth' options + are present, allowing an unprivileged caller to mount on behalf of + another user without any authorization. + +2. When 'user' or 'users' fstab options were present and the initial + mount attempt failed with a permission error, the code would fall + back to mounting as root. This fallback should only be available + when 'x-udisks-auth' is explicitly specified. + +Restructure the authorization flow so that: + - The 'filesystem-mount-other-user' check is evaluated first, + independently of fstab mount options, and is always enforced + when caller_uid != effective_uid. + - The root fallback on BD_FS_ERROR_AUTH is gated on 'x-udisks-auth' + being present, not just any of the user-level mount options. + - When root uses 'as-user' without 'user'/'users' fstab options, + the root fallback is implicitly enabled. + - Regular polkit checks (filesystem-mount, mount-system, + mount-other-seat) only apply for same-user mounts without + 'user'/'users'/'x-udisks-auth'. + +Update the D-Bus API documentation to reflect the new behavior. + +Reported-by: Azizcan Daştan +Reported-by: Özlem Ozan +Co-Authored-By: Claude Opus 4.6 +(cherry picked from commit 68108081aa9049cf3bb2fb0044cb4de83f962390) +(cherry picked from commit 0050f51d40e468f6a3197ccdc77b5bd59c923a37) + +CVE: CVE-2026-7867 +Upstream-Status: Backport [https://github.com/storaged-project/udisks/commit/0050f51d40e468f6a3197ccdc77b5bd59c923a37] +Signed-off-by: Ankur Tyagi +--- + data/org.freedesktop.UDisks2.xml | 24 ++++++----- + src/udiskslinuxfilesystem.c | 73 ++++++++++++++++++++++++-------- + 2 files changed, 70 insertions(+), 27 deletions(-) + +diff --git a/data/org.freedesktop.UDisks2.xml b/data/org.freedesktop.UDisks2.xml +index 53194c70..f7201adc 100644 +--- a/data/org.freedesktop.UDisks2.xml ++++ b/data/org.freedesktop.UDisks2.xml +@@ -2654,7 +2654,8 @@ + filesystem is mounted on behalf of the specified user instead + of the calling one. This has usually an effect on the returned + @mount_path and it also allows that user to unmount the +- filesystem later. This option expects a user name, not a UID. ++ filesystem later. This option expects a user name, not a UID ++ and always performs an authorization check. + + If the device in question is referenced in the + /etc/fstab file, the +@@ -2662,15 +2663,18 @@ + and the given options or filesystem type given in @options are + ignored. + +- If x-udisks-auth is specified as an option +- for the device in the /etc/fstab file, +- then the mount command is run as the +- calling user, without performing any authorization check +- mentioned above. If this fails because of insufficient +- permissions, an authorization check is performed (which +- typically results in the user having to authenticate as an +- administrator). If authorized, the mount +- command is then run as root. ++ If x-udisks-auth, user or ++ users are specified as options for the ++ device in the /etc/fstab file, then the ++ mount command is run as the calling user ++ (or the effective user of the as-user ++ option respectively), without performing any authorization check ++ mentioned above. If this fails because of insufficient permissions ++ and x-udisks-auth is specified, an ++ authorization check is performed (which typically results in ++ the user having to authenticate as an administrator). If ++ authorized, the mount command is then run ++ as root. + + The filesystem should be unmounted using the + org.freedesktop.UDisks2.Filesystem.Unmount() method. +diff --git a/src/udiskslinuxfilesystem.c b/src/udiskslinuxfilesystem.c +index ebdd2e05..eb2a3f21 100644 +--- a/src/udiskslinuxfilesystem.c ++++ b/src/udiskslinuxfilesystem.c +@@ -918,30 +918,60 @@ handle_mount_fstab (UDisksDaemon *daemon, + const gchar *message = NULL; + gboolean success = FALSE; + gboolean mount_fstab_as_root = FALSE; ++ gboolean x_udisks_auth = FALSE; ++ gboolean user_mount = FALSE; + UDisksBaseJob *job = NULL; + GError *error = NULL; + + block = udisks_object_peek_block (object); + device = udisks_block_get_device (block); + +- if (!has_option (fstab_mount_options, "x-udisks-auth") && +- !has_option (fstab_mount_options, "user") && +- !has_option (fstab_mount_options, "users")) ++ x_udisks_auth = has_option (fstab_mount_options, "x-udisks-auth"); ++ user_mount = x_udisks_auth || ++ has_option (fstab_mount_options, "user") || ++ has_option (fstab_mount_options, "users"); ++ ++ /* 'as-user' rules: ++ * - when caller is root: ++ * - if 'user'/'users' present, do not fall back to mounting as root, unless 'x-udisks-auth' is specified ++ * - if 'user'/'users' not present, try as effective user first and allow fallback to mounting as root (implies 'x-udisks-auth') ++ * - when caller is unprivileged: ++ * - always require polkit auth to prevent identity spoofing ++ * - do not fall back to mounting as root, unless 'x-udisks-auth' is specified ++ * - if neither 'user'/'users'/'x-udisks-auth' present, failure is expected by nature (unless 'as-user=root') ++ * ++ * general fstab mounting rules: ++ * - when caller is root, mount as root, allow anything ++ * - when caller is unprivileged: ++ * - if 'user'/'users' present, do not fall back to mounting as root, unless 'x-udisks-auth' is specified ++ * - if only 'x-udisks-auth' present, mount as user and fall back to mounting as root if not successful ++ * - if neither 'user'/'users'/'x-udisks-auth' present, require polkit auth and mount as root ++ * ++ * Further assumptions: ++ * - when 'user'/'users' not present and mounting as unprivileged, this typically fails but it is still beneficial to try that e.g. for FUSE mounts ++ * - assuming libblockdev mount error code mapping works reliably (for the BD_FS_ERROR_AUTH check) ++ */ ++ ++ if (caller_uid != effective_uid) ++ { ++ /* Always require authorization when mounting on behalf of another user, ++ * regardless of fstab mount options. ++ */ ++ action_id = "org.freedesktop.udisks2.filesystem-mount-other-user"; ++ ++ /* When 'user'/'users' not present and the caller is root, allow ++ * fallback mounting as root. ++ */ ++ if (caller_uid == 0 && !user_mount) ++ x_udisks_auth = TRUE; ++ } ++ else ++ if (!user_mount) + { + mount_fstab_as_root = TRUE; ++ + action_id = "org.freedesktop.udisks2.filesystem-mount"; +- /* Translators: Shown in authentication dialog when the user +- * requests mounting a filesystem. +- * +- * Do not translate $(drive), it's a placeholder and +- * will be replaced by the name of the drive/device in question +- */ +- message = N_("Authentication is required to mount $(drive)"); +- if (caller_uid != effective_uid) +- { +- action_id = "org.freedesktop.udisks2.filesystem-mount-other-user"; +- } +- else if (!udisks_daemon_util_setup_by_user (daemon, object, caller_uid)) ++ if (!udisks_daemon_util_setup_by_user (daemon, object, caller_uid)) + { + if (udisks_block_get_hint_system (block)) + { +@@ -952,7 +982,17 @@ handle_mount_fstab (UDisksDaemon *daemon, + action_id = "org.freedesktop.udisks2.filesystem-mount-other-seat"; + } + } ++ } + ++ if (action_id) ++ { ++ /* Translators: Shown in authentication dialog when the user ++ * requests mounting a filesystem. ++ * ++ * Do not translate $(drive), it's a placeholder and ++ * will be replaced by the name of the drive/device in question ++ */ ++ message = N_("Authentication is required to mount $(drive)"); + if (!udisks_daemon_util_check_authorization_sync (daemon, + object, + action_id, +@@ -962,7 +1002,6 @@ handle_mount_fstab (UDisksDaemon *daemon, + return FALSE; + } + +- + if (!g_file_test (mount_point_to_use, G_FILE_TEST_IS_DIR)) + { + if (g_mkdir_with_parents (mount_point_to_use, 0755) != 0) +@@ -1011,7 +1050,7 @@ handle_mount_fstab (UDisksDaemon *daemon, + + if (!success) + { +- if (!mount_fstab_as_root && g_error_matches (error, BD_FS_ERROR, BD_FS_ERROR_AUTH)) ++ if (!mount_fstab_as_root && g_error_matches (error, BD_FS_ERROR, BD_FS_ERROR_AUTH) && x_udisks_auth) + { + g_clear_error (&error); + action_id = "org.freedesktop.udisks2.filesystem-fstab"; diff --git a/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-3.patch b/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-3.patch new file mode 100644 index 0000000000..245e46ac00 --- /dev/null +++ b/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-3.patch @@ -0,0 +1,53 @@ +From 68a82f2afb3a5ca0da207cdd5bbd55e777940e12 Mon Sep 17 00:00:00 2001 +From: Tomas Bzatek +Date: Sun, 3 May 2026 14:00:01 +0200 +Subject: [PATCH] udiskslinuxfilesystem: Log real caller uid for as-user mounts + +When a mount is performed with the as-user option targeting a different +user, log both the effective (target) uid and the real caller uid to +provide an audit trail of who authorized the operation. + +Co-Authored-By: Claude Opus 4.6 +(cherry picked from commit 98e5a76c155640d155280cdb642791f00def736a) +(cherry picked from commit 132ebab4a196f7fbd01fa28283627b2227eb399b) + +CVE: CVE-2026-7867 +Upstream-Status: Backport [https://github.com/storaged-project/udisks/commit/132ebab4a196f7fbd01fa28283627b2227eb399b] +Signed-off-by: Ankur Tyagi +--- + src/udiskslinuxfilesystem.c | 22 +++++++++++++++++----- + 1 file changed, 17 insertions(+), 5 deletions(-) + +diff --git a/src/udiskslinuxfilesystem.c b/src/udiskslinuxfilesystem.c +index eb2a3f21..5e2508cc 100644 +--- a/src/udiskslinuxfilesystem.c ++++ b/src/udiskslinuxfilesystem.c +@@ -1443,11 +1443,23 @@ handle_mount (UDisksFilesystem *filesystem, + system_managed, + system_managed ? FALSE : mpoint_persistent); + +- udisks_notice ("Mounted %s%s at %s on behalf of uid %u", +- device, +- system_managed ? " (system)" : "", +- mount_point_to_use, +- effective_uid); ++ if (effective_uid != caller_uid) ++ { ++ udisks_notice ("Mounted %s%s at %s on behalf of uid %u (requested by uid %u)", ++ device, ++ system_managed ? " (system)" : "", ++ mount_point_to_use, ++ effective_uid, ++ caller_uid); ++ } ++ else ++ { ++ udisks_notice ("Mounted %s%s at %s on behalf of uid %u", ++ device, ++ system_managed ? " (system)" : "", ++ mount_point_to_use, ++ effective_uid); ++ } + + udisks_linux_block_object_trigger_uevent_sync (UDISKS_LINUX_BLOCK_OBJECT (object), + UDISKS_DEFAULT_WAIT_TIMEOUT); diff --git a/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-4.patch b/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-4.patch new file mode 100644 index 0000000000..726f3271dc --- /dev/null +++ b/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-4.patch @@ -0,0 +1,40 @@ +From a17202ed591f07109ce978e5abb999c67de9b3f1 Mon Sep 17 00:00:00 2001 +From: Tomas Bzatek +Date: Tue, 28 Apr 2026 19:10:38 +0200 +Subject: [PATCH] udisksdaemonutil: Pass as-user target to polkit details + +When the 'as-user' D-Bus method option is present, propagate the +target username to polkit details as 'mount.as-user'. This allows +polkit rules to make fine-grained authorization decisions based on +who the mount is being performed for. + +Co-Authored-By: Claude Opus 4.6 +(cherry picked from commit 681d58a76f6aaa5045eb43e665c65f497d35b810) +(cherry picked from commit 3b016cc881b1d3c3d843ec13e35102beaaac7023) + +CVE: CVE-2026-7867 +Upstream-Status: Backport [https://github.com/storaged-project/udisks/commit/3b016cc881b1d3c3d843ec13e35102beaaac7023] +Signed-off-by: Ankur Tyagi +--- + src/udisksdaemonutil.c | 8 ++++++++ + 1 file changed, 8 insertions(+) + +diff --git a/src/udisksdaemonutil.c b/src/udisksdaemonutil.c +index 3db92f58..36e3184b 100644 +--- a/src/udisksdaemonutil.c ++++ b/src/udisksdaemonutil.c +@@ -797,6 +797,14 @@ udisks_daemon_util_check_authorization_sync_with_error (UDisksDaemon * + polkit_details_insert (details, "polkit.message", message); + polkit_details_insert (details, "polkit.gettext_domain", "udisks2"); + ++ if (options != NULL && ++ g_strcmp0 (action_id, "org.freedesktop.udisks2.filesystem-mount-other-user") == 0) ++ { ++ const gchar *as_user = NULL; ++ g_variant_lookup (options, "as-user", "&s", &as_user); ++ _safe_polkit_details_insert (details, "mount.as-user", as_user); ++ } ++ + /* Find drive associated with the block device, if any */ + if (object != NULL) + { diff --git a/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-5.patch b/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-5.patch new file mode 100644 index 0000000000..6901e71d37 --- /dev/null +++ b/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-5.patch @@ -0,0 +1,348 @@ +From 7e77f3cb5c6658f5522d8d56e882e8df02978d76 Mon Sep 17 00:00:00 2001 +From: Tomas Bzatek +Date: Wed, 29 Apr 2026 16:36:45 +0200 +Subject: [PATCH] tests: Add security tests for as-user mount authorization + +Add tests verifying that an unprivileged D-Bus caller cannot exploit +the 'as-user' option in Filesystem.Mount() to mount on behalf of +another user without polkit authorization. Use a dedicated +'udisks_test_target' user instead of 'nobody' to avoid OS-level +special treatment of system users that could mask real behavior. + +Dynamic mount tests (in UdisksFSTestCase, inherited by all FS types): +- test_mount_as_user_denied: as-user= is denied +- test_mount_as_user_root_denied: as-user=root is denied +- test_mount_as_user_self: as-user= behaves like plain mount + +Fstab mount tests (in NonPOSIXTestCase, inherited by VFAT/EXFAT): +- test_mount_fstab_{users,user,x-udisks-auth}_as_user_denied: + fstab entries that normally allow unprivileged mounting must still + require authorization when as-user is specified +- test_mount_fstab_{users,user,x-udisks-auth}_as_root_denied: + same but with as-user=root +- test_mount_fstab_defaults_as_user_from_root: root can mount + fstab 'defaults' device with as-user targeting a non-root user +- test_mount_fstab_defaults_as_user_denied: unprivileged user + cannot mount fstab 'defaults' device with as-user + +Co-Authored-By: Claude Opus 4.6 +(cherry picked from commit 5ec20c9d5719ead510d800bc3eb5a731e5712f39) +(cherry picked from commit 36231768dde088c8b4d4796ff2d311d089d84052) + +CVE: CVE-2026-7867 +Upstream-Status: Backport [https://github.com/storaged-project/udisks/commit/36231768dde088c8b4d4796ff2d311d089d84052] +Signed-off-by: Ankur Tyagi +--- + src/tests/dbus-tests/test_80_filesystem.py | 278 +++++++++++++++++++++ + 1 file changed, 278 insertions(+) + +diff --git a/src/tests/dbus-tests/test_80_filesystem.py b/src/tests/dbus-tests/test_80_filesystem.py +index 1f375ac6..03336512 100644 +--- a/src/tests/dbus-tests/test_80_filesystem.py ++++ b/src/tests/dbus-tests/test_80_filesystem.py +@@ -30,6 +30,8 @@ class UdisksFSTestCase(udiskstestcase.UdisksTestCase): + _can_query_size = False + + username = 'udisks_test_user' ++ # a separate target user used for 'as-user' mount tests ++ target_username = 'udisks_test_target' + + requested_plugins = BlockDev.plugin_specs_from_names(("fs",)) + +@@ -1037,6 +1039,174 @@ class UdisksFSTestCase(udiskstestcase.UdisksTestCase): + pipe.send([True, '']) + pipe.close() + ++ def _mount_with_as_user_fail(self, pipe, uid, gid, device, target_user): ++ """ Try to mount @device as user with given @uid and @gid using the ++ 'as-user' option set to @target_user. This is expected to fail ++ with a NotAuthorized error. ++ """ ++ os.setresgid(gid, gid, gid) ++ os.setresuid(uid, uid, uid) ++ ++ try: ++ safe_dbus.call_sync(self.iface_prefix, ++ self.path_prefix + '/block_devices/' + os.path.basename(device), ++ self.iface_prefix + '.Filesystem', ++ 'Mount', ++ GLib.Variant('(a{sv})', ({'as-user': GLib.Variant('s', target_user)},))) ++ except Exception as e: ++ msg = str(e) ++ if 'org.freedesktop.UDisks2.Error.NotAuthorized' in msg and \ ++ 'Not authorized to perform operation' in msg: ++ pipe.send([True, '']) ++ pipe.close() ++ return ++ else: ++ pipe.send([False, 'Mount DBus call failed with unexpected exception: %s' % msg]) ++ pipe.close() ++ return ++ ++ pipe.send([False, 'Mount with as-user=%s unexpectedly succeeded for uid %d' % (target_user, uid)]) ++ pipe.close() ++ ++ def _test_mount_as_user_denied(self, target_user): ++ """ Test that an unprivileged user cannot use as-user to mount on ++ behalf of @target_user without polkit authorization. ++ """ ++ self._check_can_create() ++ ++ if not self._can_mount: ++ self.skipTest('Cannot mount %s filesystem' % self._fs_signature) ++ ++ disk = self.get_object('/block_devices/' + os.path.basename(self.vdevs[0])) ++ self.assertIsNotNone(disk) ++ ++ disk.Format(self._fs_signature, self.no_options, dbus_interface=self.iface_prefix + '.Block') ++ self.addCleanup(self.wipe_fs, self.vdevs[0]) ++ self.addCleanup(self.try_unmount, self.vdevs[0]) ++ ++ self.addCleanup(self._remove_user, self.username) ++ uid, gid = self._add_user(self.username) ++ ++ if target_user != 'root': ++ self.addCleanup(self._remove_user, target_user) ++ self._add_user(target_user) ++ ++ parent_conn, child_conn = Pipe() ++ proc = Process(target=self._mount_with_as_user_fail, ++ args=(child_conn, int(uid), int(gid), self.vdevs[0], target_user)) ++ proc.start() ++ res = parent_conn.recv() ++ parent_conn.close() ++ proc.join() ++ ++ if not res[0]: ++ self.fail(res[1]) ++ ++ @udiskstestcase.tag_test(udiskstestcase.TestTags.UNSAFE) ++ def test_mount_as_user_denied(self): ++ """ Test that an unprivileged user cannot use as-user to mount on ++ behalf of another user without authorization. ++ """ ++ self._test_mount_as_user_denied(self.target_username) ++ ++ @udiskstestcase.tag_test(udiskstestcase.TestTags.UNSAFE) ++ def test_mount_as_user_root_denied(self): ++ """ Test that an unprivileged user cannot use as-user=root to mount ++ without authorization. ++ """ ++ self._test_mount_as_user_denied('root') ++ ++ def _mount_as_user_result(self, pipe, uid, gid, device, options): ++ """ Try to mount @device as user with given @uid and @gid using ++ the given @options dict. Returns [True, error_string] on D-Bus ++ error or [True, ''] on success. ++ """ ++ os.setresgid(gid, gid, gid) ++ os.setresuid(uid, uid, uid) ++ ++ try: ++ safe_dbus.call_sync(self.iface_prefix, ++ self.path_prefix + '/block_devices/' + os.path.basename(device), ++ self.iface_prefix + '.Filesystem', ++ 'Mount', ++ GLib.Variant('(a{sv})', (options,))) ++ except Exception as e: ++ pipe.send([True, str(e)]) ++ pipe.close() ++ return ++ ++ pipe.send([True, '']) ++ pipe.close() ++ ++ @udiskstestcase.tag_test(udiskstestcase.TestTags.UNSAFE) ++ def test_mount_as_user_self(self): ++ """ Test that as-user targeting the caller's own username behaves ++ identically to mounting without as-user (no extra mount-other-user ++ authorization required). ++ """ ++ self._check_can_create() ++ ++ if not self._can_mount: ++ self.skipTest('Cannot mount %s filesystem' % self._fs_signature) ++ ++ disk = self.get_object('/block_devices/' + os.path.basename(self.vdevs[0])) ++ self.assertIsNotNone(disk) ++ ++ disk.Format(self._fs_signature, self.no_options, dbus_interface=self.iface_prefix + '.Block') ++ self.addCleanup(self.wipe_fs, self.vdevs[0]) ++ self.addCleanup(self.try_unmount, self.vdevs[0]) ++ ++ self.addCleanup(self._remove_user, self.username) ++ uid, gid = self._add_user(self.username) ++ ++ # first try a plain mount without as-user ++ parent_conn, child_conn = Pipe() ++ proc = Process(target=self._mount_as_user_result, ++ args=(child_conn, int(uid), int(gid), self.vdevs[0], {})) ++ proc.start() ++ res_plain = parent_conn.recv() ++ parent_conn.close() ++ proc.join() ++ ++ self.assertTrue(res_plain[0]) ++ plain_error = res_plain[1] ++ ++ # unmount if the plain mount succeeded ++ if not plain_error: ++ self.try_unmount(self.vdevs[0]) ++ ++ # now try with as-user= ++ parent_conn, child_conn = Pipe() ++ proc = Process(target=self._mount_as_user_result, ++ args=(child_conn, int(uid), int(gid), self.vdevs[0], ++ {'as-user': GLib.Variant('s', self.username)})) ++ proc.start() ++ res_as_user = parent_conn.recv() ++ parent_conn.close() ++ proc.join() ++ ++ self.assertTrue(res_as_user[0]) ++ as_user_error = res_as_user[1] ++ ++ if not plain_error and not as_user_error: ++ return ++ if plain_error and as_user_error: ++ # extract the GDBus error name (e.g. 'org.freedesktop.UDisks2.Error.NotAuthorizedCanObtain') ++ dbus_err_re = re.compile(r'GDBus\.Error:([\w.]+):') ++ plain_match = dbus_err_re.search(plain_error) ++ as_user_match = dbus_err_re.search(as_user_error) ++ plain_err_name = plain_match.group(1) if plain_match else plain_error ++ as_user_err_name = as_user_match.group(1) if as_user_match else as_user_error ++ self.assertEqual(plain_err_name, as_user_err_name, ++ 'as-user= produced a different error than plain mount: ' ++ 'plain=%s, as-user=%s' % (plain_error, as_user_error)) ++ return ++ ++ if plain_error: ++ self.fail('Plain mount failed (%s) but as-user= succeeded' % plain_error) ++ else: ++ self.fail('Plain mount succeeded but as-user= failed: %s' % as_user_error) ++ + @udiskstestcase.tag_test(udiskstestcase.TestTags.UNSAFE) + def test_mount_as_user(self): + """ Test mounting a filesystem on behalf of a different user.""" +@@ -1550,6 +1720,108 @@ class NonPOSIXTestCase(UdisksFSTestCase): + self.fail(res[1]) + + ++ def _test_mount_fstab_as_user_denied(self, fstab_options, target_user): ++ """ Test that an unprivileged user cannot use 'as-user' option to mount ++ a device listed in /etc/fstab with @fstab_options on behalf of ++ @target_user without polkit authorization. ++ """ ++ disk = self.get_object('/block_devices/' + os.path.basename(self.vdevs[0])) ++ self.assertIsNotNone(disk) ++ ++ self.addCleanup(self._remove_user, self.username) ++ uid, gid = self._add_user(self.username) ++ ++ if target_user != 'root': ++ self.addCleanup(self._remove_user, target_user) ++ self._add_user(target_user) ++ ++ self.addCleanup(self.try_unmount, self.vdevs[0]) ++ self._prepare_mount_test(disk, True, fstab_options) ++ ++ parent_conn, child_conn = Pipe() ++ proc = Process(target=self._mount_with_as_user_fail, ++ args=(child_conn, int(uid), int(gid), self.vdevs[0], target_user)) ++ proc.start() ++ res = parent_conn.recv() ++ parent_conn.close() ++ proc.join() ++ ++ if not res[0]: ++ self.fail(res[1]) ++ ++ @udiskstestcase.tag_test(udiskstestcase.TestTags.UNSAFE) ++ def test_mount_fstab_as_user_denied(self): ++ """ Test that user cannot use as-user to mount fstab 'users' device ++ on behalf of another user without authorization. ++ """ ++ self._test_mount_fstab_as_user_denied('users', self.target_username) ++ ++ @udiskstestcase.tag_test(udiskstestcase.TestTags.UNSAFE) ++ def test_mount_fstab_user_as_user_denied(self): ++ """ Test that user cannot use as-user to mount fstab 'user' device ++ on behalf of another user without authorization. ++ """ ++ self._test_mount_fstab_as_user_denied('user', self.target_username) ++ ++ @udiskstestcase.tag_test(udiskstestcase.TestTags.UNSAFE) ++ def test_mount_fstab_x_udisks_auth_as_user_denied(self): ++ """ Test that user cannot use as-user to mount fstab 'x-udisks-auth' ++ device on behalf of another user without authorization. ++ """ ++ self._test_mount_fstab_as_user_denied('x-udisks-auth', self.target_username) ++ ++ @udiskstestcase.tag_test(udiskstestcase.TestTags.UNSAFE) ++ def test_mount_fstab_as_root_denied(self): ++ """ Test that user cannot use as-user=root to mount fstab 'users' ++ device without authorization. ++ """ ++ self._test_mount_fstab_as_user_denied('users', 'root') ++ ++ @udiskstestcase.tag_test(udiskstestcase.TestTags.UNSAFE) ++ def test_mount_fstab_user_as_root_denied(self): ++ """ Test that user cannot use as-user=root to mount fstab 'user' ++ device without authorization. ++ """ ++ self._test_mount_fstab_as_user_denied('user', 'root') ++ ++ @udiskstestcase.tag_test(udiskstestcase.TestTags.UNSAFE) ++ def test_mount_fstab_x_udisks_auth_as_root_denied(self): ++ """ Test that user cannot use as-user=root to mount fstab ++ 'x-udisks-auth' device without authorization. ++ """ ++ self._test_mount_fstab_as_user_denied('x-udisks-auth', 'root') ++ ++ @udiskstestcase.tag_test(udiskstestcase.TestTags.UNSAFE) ++ def test_mount_fstab_defaults_as_user_from_root(self): ++ """ Test that root can mount a device listed in /etc/fstab with ++ 'defaults' (no 'user', 'users' or 'x-udisks-auth' options) ++ using the 'as-user' option targeting a non-root user. ++ """ ++ disk = self.get_object('/block_devices/' + os.path.basename(self.vdevs[0])) ++ self.assertIsNotNone(disk) ++ ++ self.addCleanup(self._remove_user, self.target_username) ++ self._add_user(self.target_username) ++ ++ self.addCleanup(self.try_unmount, self.vdevs[0]) ++ self._prepare_mount_test(disk, True, 'defaults') ++ ++ d = dbus.Dictionary(signature='sv') ++ d['as-user'] = self.target_username ++ mnt_path = disk.Mount(d, dbus_interface=self.iface_prefix + '.Filesystem') ++ self.assertIsNotNone(mnt_path) ++ self.assertTrue(os.path.ismount(mnt_path)) ++ ++ @udiskstestcase.tag_test(udiskstestcase.TestTags.UNSAFE) ++ def test_mount_fstab_defaults_as_user_denied(self): ++ """ Test that an unprivileged user cannot use 'as-user' option to ++ mount a device listed in /etc/fstab with 'defaults' (no 'user', ++ 'users' or 'x-udisks-auth') on behalf of another user without ++ polkit authorization. ++ """ ++ self._test_mount_fstab_as_user_denied('defaults', self.target_username) ++ ++ + class VFATTestCase(NonPOSIXTestCase): + _fs_signature = 'vfat' + _can_mount = True +@@ -1691,6 +1963,12 @@ class UDFTestCase(UdisksFSTestCase): + def test_mount_fstab_complex_label_bad(self): + super(UDFTestCase, self).test_mount_fstab_complex_label_bad() + ++ def test_mount_as_user_denied(self): ++ self.skipTest('Skipping as-user authorization test for UDF') ++ ++ def test_mount_as_user_root_denied(self): ++ self.skipTest('Skipping as-user authorization test for UDF') ++ + + class FailsystemTestCase(UdisksFSTestCase): + # test that not supported operations fail 'nicely' diff --git a/meta-oe/recipes-support/udisks/udisks2_2.10.2.bb b/meta-oe/recipes-support/udisks/udisks2_2.10.2.bb index 081b315b9b..61eaa292f6 100644 --- a/meta-oe/recipes-support/udisks/udisks2_2.10.2.bb +++ b/meta-oe/recipes-support/udisks/udisks2_2.10.2.bb @@ -18,8 +18,13 @@ DEPENDS += "${@bb.utils.filter('DISTRO_FEATURES', 'systemd', d)}" RDEPENDS:${PN} = "acl" SRC_URI = " \ - git://github.com/storaged-project/udisks.git;branch=2.10.x-branch;protocol=https \ - file://0001-Makefile.am-Dont-include-buildpath.patch \ + git://github.com/storaged-project/udisks.git;branch=2.10.x-branch;protocol=https \ + file://0001-Makefile.am-Dont-include-buildpath.patch \ + file://CVE-2026-7867-1.patch \ + file://CVE-2026-7867-2.patch \ + file://CVE-2026-7867-3.patch \ + file://CVE-2026-7867-4.patch \ + file://CVE-2026-7867-5.patch \ " SRCREV = "bc623acf9e7488dc105e4b00069d57e303e2616b" From patchwork Wed Oct 14 10:22:16 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 100661 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 7CB0ACC6B2A for ; Wed, 14 Oct 2026 10:22:50 +0000 (UTC) Received: from mail-pj1-f49.google.com (mail-pj1-f49.google.com [209.85.216.49]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.10231.1791973368575040139 for ; Wed, 14 Oct 2026 03:22:48 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=HyO1GJOY; spf=pass (domain: gmail.com, ip: 209.85.216.49, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pj1-f49.google.com with SMTP id 98e67ed59e1d1-3a813079a55so3428039a91.0 for ; Wed, 14 Oct 2026 03:22:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1791973368; x=1792578168; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=xhuUXHKvoUDDwDJb66wVl+OGBzgyKcAcSEozvYiWZ7o=; b=HyO1GJOYiKfGYttq2KQL1Awtwof+6trz5pWzBgRbTzuniQl+2gTJ21Ap9cVQx0ccEY g0FkdTdWW6MtZY0HCro9CTtoFEVWm/vpc6wRKE4m0PQzFuvp7tVlqFx65f2CrwIKqiAI SCmRk2OBZHlZ8y0MUO30uujHEXQAsCdyjmigoxB1aO10fqsI8CZptlIq4z7PF64puOi1 GOiGocb04hMY/OebM7i6LU4CKbvH26Jxs6tPza0QFcMRSaQ3klJs+0iLBPBNayySZg66 iKZNvUz/ai61kNNK8m908vPMiwh6/kzagdMGLOqqPb/WELYsMCKWpSOsW/EwUQ3459mw 32VA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1791973368; x=1792578168; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=xhuUXHKvoUDDwDJb66wVl+OGBzgyKcAcSEozvYiWZ7o=; b=GDNU+T6eo3Jd/Qc2NedbnT3k/j4qdFsZzEdwdMID7MoO4P+QzMGkZk2+OYpVklbHrV h42/6C5mpdUozOl+G4a2oNSJzRuDW4ymawNzgNXekx49fEKIDK/QvXV71bMW97uexI/E YCn2JD4+T0ELq90bwZ+94HYpUSnrkv+AD6zUq4kU+sQ4EYw5X8Ceuj8kSJ2/6yudhgBe 7ahRYkIrIeyMMbPWvpGmUzGvGYtoHaGZn4cx0IV/+9bF7I6XaUOqVoxoWhcTv4Q6zFnF HKENhlv7tP6LzUD4f+y8bbQyO+KyQXBgkPPe9nW4OOIHZWNmNP6rB+f83Tj+wSW3QiSk W/gg== X-Gm-Message-State: AFq9FYI9zA0yucCpl1jlJjji9G/C3yc+6DTf496Z0PJnx+6CATbrQFkI yii+JnswoSzsgEP14SYtm9o3MfhbNqys7Doxpt2iKtWHkmBN3PAA1MKZj5Zqbg== X-Gm-Gg: AYBFou2zDI8Jh3zHrSfkNdgLl4wLEopL0FjkT08KA+Z08tklxlSCREBpqzhj8k9VMRJ vJTp+aROWV7EmkXdtYxojrxpU0E98Mcp/oLNw7BB/E6tODQvOEQA8BP/6ZzNhu3LLzoalAesksN bqPXXLiQ5x4h78Jv85DUokd5wJ89GQBsUqD17+UZP0gXohxYPpkbzXotZa/3b+bQNvMqiNsvgPp 1+3/R6nZp3h3X1X+cH+RIrcxdjBIcohdtIbW1XQsTYX5olj+adZBa8SL/XDybY2v8lBdy3leEmd ShKUxjpozUxWa0cDMocg6JKB9UAlIIZfkQ8dvESTc43AV5x0C9h9pIee6LEm6UFy7RztF+vhzi7 q2T+p10lxPkRwhz7yLW9UBTlrHfxU5Sgr+/HLRY+eWXqPaSi7T4rf/36WKA8TAVpy9LpETCsOxN W1R4XlX/XPGjOzkuHr5zqZFdimBqa+y9gK7agrlD/g3OL8PaPKwlAyu/BILJwfir+CPpoAcABww o1kFLVPqxD2YNZA9Z0gZiFYQGqvjG4TzPaSK0Y= X-Received: by 2002:a17:90b:1d50:b0:3ab:4e4:e97a with SMTP id 98e67ed59e1d1-3ab3ab227d9mr8628734a91.26.1791973367419; Wed, 14 Oct 2026 03:22:47 -0700 (PDT) Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ac61170b7bsm4017740a91.16.2026.10.14.03.22.45 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 14 Oct 2026 03:22:47 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-oe][wrynose][PATCH 10/11] libspdm: upgrade 3.8.2 -> 3.8.3 Date: Wed, 14 Oct 2026 23:22:16 +1300 Message-ID: <20261014102218.880640-10-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261014102218.880640-1-ankur.tyagi85@gmail.com> References: <20261014102218.880640-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 14 Oct 2026 10:22:50 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/130896 From: Ankur Tyagi Changelog: https://github.com/DMTF/libspdm/releases/tag/3.8.3 Signed-off-by: Ankur Tyagi --- .../libspdm/{libspdm_3.8.2.bb => libspdm_3.8.3.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-oe/recipes-support/libspdm/{libspdm_3.8.2.bb => libspdm_3.8.3.bb} (97%) diff --git a/meta-oe/recipes-support/libspdm/libspdm_3.8.2.bb b/meta-oe/recipes-support/libspdm/libspdm_3.8.3.bb similarity index 97% rename from meta-oe/recipes-support/libspdm/libspdm_3.8.2.bb rename to meta-oe/recipes-support/libspdm/libspdm_3.8.3.bb index 7d227d4148..68208a0380 100644 --- a/meta-oe/recipes-support/libspdm/libspdm_3.8.2.bb +++ b/meta-oe/recipes-support/libspdm/libspdm_3.8.3.bb @@ -10,7 +10,7 @@ LIC_FILES_CHKSUM = "file://LICENSE.md;md5=8f9b59a81a88da8e812af43728b72dd7" DEPENDS = "openssl" SRC_URI = "git://github.com/DMTF/libspdm.git;branch=release-3.8;protocol=https;tag=${PV}" -SRCREV = "f55cf6d48ec69b4ac60a63903e9c6a2cb0fd155d" +SRCREV = "98253fee253c9e0b4313e64b373af3c7614c90e5" inherit cmake From patchwork Wed Oct 14 10:22:17 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 100664 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 6F369CC6B1A for ; Wed, 14 Oct 2026 10:23:00 +0000 (UTC) Received: from mail-pj1-f48.google.com (mail-pj1-f48.google.com [209.85.216.48]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.10232.1791973370698175527 for ; Wed, 14 Oct 2026 03:22:50 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=NNLTtZ1s; spf=pass (domain: gmail.com, ip: 209.85.216.48, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pj1-f48.google.com with SMTP id 98e67ed59e1d1-38d489b6b71so2018569a91.0 for ; Wed, 14 Oct 2026 03:22:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1791973370; x=1792578170; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=uW6+jhFKFuGqqdAwNAMZNOnSZs2hTU6weL00EO+uQk4=; b=NNLTtZ1sYm79MyAbU+fvKv4Th98TjQH0ohAHYdqoGTn0TtVp7KPJ9yKeH375foWG03 PBcWCY6OB8GvTJZqn0vLOmejX4z2eJDmu2qwkG2RZkpnD0Opr+RBkZsi+dAOzQb5yLMP d4TuYxAomQunccgc7XJqgYdLARAjLiBjkv8RZlKURaRa+cTjUeapiQc8pGqk6o1ahLhv KGTtYUqbXpv374JG1KftHzQ448RQcNQmkcsRKaX+CY6BQJHUjOJlzB9lDBeHRTThkah0 BYLOkHdaJj87k7zA/fc9gfZRFjZGg4jCsIq0dFLkQirHoqKRQwa86kM3oEakw4GsruLS dWsQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1791973370; x=1792578170; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=uW6+jhFKFuGqqdAwNAMZNOnSZs2hTU6weL00EO+uQk4=; b=juW0iaOo5b3AxJt+hWU3iP2ke/k3AUiUvgecfmtzk297GvNzmxIGFKtkAdaH4eAIZI qOU3DGVI9LTOcg5vWOCqHhX8eIwCMDpEfcMgC7mYReyd98cPU1TaqrH5DjT5moDEun55 i+8peW7sQJ0md7GVVBgvfbbWBT/ZPy2T7xzJlvOdjqD/XpaEHlZk5+9gJUa3bFcXrAqk ZnNU14AVRlsJWhJ2Bx1cBJGdZUVSJ7Bh2LMIU38KSNpIPXIg7PUo5vyn6qM9owoqK41h mgammPVzuC8K84P69PaQZKS2Me8E1UYdt7qcb0/hoMS/JDmZI9tgpwumFA2qIvHhBPg8 S7ng== X-Gm-Message-State: AFq9FYLAaseH8k3fEbRnsXWxtHsg10aAmAKJW3X59QNFbOR30RxAY3mY b517WNXbu2rU9Du+C5Lf1wBiDrc1I5pglkWBKoS29uBihVFaICjydwrPsVsqtA== X-Gm-Gg: AYBFou3q6t0UHcNBH/dQSI4/h6+Ec14CabLmAp/FlzW+bdgU895lXEPggxkSZd2OnVQ pZTdZwYEMX6w8N/gqwgDrOtg/YAwfWKolIY4KxoQDpkOvDcwk1V6WaU6STPyvjgt1015nrm5RUv zF1qLjqbhpmRIzv77gU9VGlRQLT/C2z/OVTtDMwXc730XRa+xLmM1fs21dZgEzIisGNMYshtfvk sx/bsApLSn6e64vXZZy3Ah53xqAaCnbUiaizTjAYTYvwzR7vek31sMg3eaUbLVKivjl1cRg2ud1 DAlTt2ZZwcOBGa25YodyBlTzc9S9gDxBVIS3z1BiI9AgHOjnr76axDZmP1vcMNNKhgmzZuQNSZZ fqOzWUlQmDm5CZ4DlrlcNdQDQ93kdhkR765BrSgm2fSFOqHpM4YUGqj2qbI6K1x3yMvh2QjEWlA aociSrDwxsTly2USkIWgsUrO/G0K/c8O1qj4DerEsEqKQd7EJyQqAJISrWKKsWsVP7iTuXOEnMh OewOw/Hki5qw+UDkPY0uFZKvwpCnAOrgy8swo0xTkXthuQjOQ== X-Received: by 2002:a17:90b:3145:b0:3a0:22bd:6ef6 with SMTP id 98e67ed59e1d1-3ab3a3665f0mr12379562a91.2.1791973369806; Wed, 14 Oct 2026 03:22:49 -0700 (PDT) Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ac61170b7bsm4017740a91.16.2026.10.14.03.22.47 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 14 Oct 2026 03:22:49 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-networking][wrynose][PATCH 11/11] postfix: upgrade 3.10.13 -> 3.10.14 Date: Wed, 14 Oct 2026 23:22:17 +1300 Message-ID: <20261014102218.880640-11-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261014102218.880640-1-ankur.tyagi85@gmail.com> References: <20261014102218.880640-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 14 Oct 2026 10:23:00 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/130897 From: Ankur Tyagi Changelog: http://www.postfix.org/announcements/postfix-3.11.7.html Signed-off-by: Ankur Tyagi --- .../postfix/{postfix_3.10.13.bb => postfix_3.10.14.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-networking/recipes-daemons/postfix/{postfix_3.10.13.bb => postfix_3.10.14.bb} (99%) diff --git a/meta-networking/recipes-daemons/postfix/postfix_3.10.13.bb b/meta-networking/recipes-daemons/postfix/postfix_3.10.14.bb similarity index 99% rename from meta-networking/recipes-daemons/postfix/postfix_3.10.13.bb rename to meta-networking/recipes-daemons/postfix/postfix_3.10.14.bb index 8bb7161e98..c9af8d82d7 100644 --- a/meta-networking/recipes-daemons/postfix/postfix_3.10.13.bb +++ b/meta-networking/recipes-daemons/postfix/postfix_3.10.14.bb @@ -29,7 +29,7 @@ SRC_URI = "http://ftp.porcupine.org/mirrors/postfix-release/official/postfix-${P file://0001-makedefs-Account-for-linux-7.x-version.patch \ " -SRC_URI[sha256sum] = "de6526fb11bbf20fcfa5aa4b67e88cc6b246cad614a9bcb4b006f457ba3788bc" +SRC_URI[sha256sum] = "e378bef3212e0891d896867fc592b5991574bb46e3bfa4f768ab271a9f59695d" UPSTREAM_CHECK_URI = "https://www.postfix.org/announcements.html" UPSTREAM_CHECK_REGEX = "postfix-(?P\d+(\.\d+)+)"