From patchwork Mon Oct 19 18:33:47 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101304 Received: from mail-pg1-f178.google.com (mail-pg1-f178.google.com [209.85.215.178]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.1751.1792434855509332566 for ; Mon, 19 Oct 2026 11:34:15 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=RYMhDhVF; spf=pass (domain: gmail.com, ip: 209.85.215.178, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pg1-f178.google.com with SMTP id 41be03b00d2f7-cc4b1f7e8f4so1199252a12.1 for ; Mon, 19 Oct 2026 11:34:15 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792434855; x=1793039655; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc:subject:date:message-id:reply-to:content-type; bh=nuQIEYcJHRd3jUlv09xt04enUjzGIqoMQFbRM5YPKqY=; b=RYMhDhVFG5vkn82K20Vh+teJllHzKR2nJ4thNRMrY+50EyaSD76DYb9nAyXTqb2IOK RsFaNGqJcp+qAUKeoGWldzZ0Azi9qT/CJJuWCL8PmrsNtjcN+/VO6KqPs9bJMJ2R9GS6 c6hGcC5BHq7YVrZcOsYvwW1wub+bwaeG99JymwhHJQInOr62RRDr5xMVvaxJppxfiQQ1 9vWLx+0uYDqYH7BR/aFyqC2lxlw6W7cQWCT797ZOeeEfqtDlVxUTWwbtvXP7rA5Wmj54 Z75yo39JSzok6dj2Yaqb8/IuD/52ZTWbF4FDHtHP7CDyxv8eMdVbqWPP/0otVRAoiSZX CTGA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792434855; x=1793039655; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to:content-type; bh=nuQIEYcJHRd3jUlv09xt04enUjzGIqoMQFbRM5YPKqY=; b=QPGrkv56dHdqmAaQ1yL4HO1SoK7Yfp0Ax4+nhwo1NBMUjF5kCizJlUWtzkkbSyj9ek /a3UJxmZtsYSMyuqXt43iJ3q5QMRkH0D8+G8Jk/NJK8Kxw1HldDQ6u+72H3IPHo4O1s8 S5EF7x7KzRawGtGMxmSgaHDh5TVCBps4dgF3LrCdnlpf99qPaOqf8nQOWj7kSFX3z+6q je55gsqvC0bSk7Ed72/OQMyT9MSJg6u6iPorDITnfl3bWmJIhyfxvQ1WbdS9r0QwXfxZ iK5ZJb4c4nZuyvtAnOVDJJPx92DKlKQ/HY6v84+BQeQPRW4FkeIgUqv+4Z1zNLM3fAYo +c5A== X-Gm-Message-State: AFq9FYKcLAawwDyecplCO+OQUP+TL0eyipECTrAEDS+ih3G9mMLvhAio XV0X3Ks2P67Z4ymN2Zv7gmCoZWsIhxrPZ2ND4PJQFdsvADWc5zpH2DaQM3asMA== X-Gm-Gg: AYBFou18BCJ94b5vpQndGOxkGGGAl17prxbfUcu5gLYKPWBU+SM9vCTWwBWkNNYgGgr z0Hg4pbTLwtbgYfPZwDtMgC7YC1PER69VTTVXtMbCHOuHbXArgcpu9a9LpANfIFORKZDrzYa56e +e8AVLjr78R2Vk2FPNzqJRLXDdA3L9/8yo+45CvHef+0FKo/SLgFG9wlLDS0tvVFt1xDIKivtnv MZjwvmuRve81orD+bKNZfTKLqWkqPED0i/+uu1CrU01UhQndbAzk0+bqsIcF/ERsIYFGO/CKuHB VktQDiQHeyKn+Ow37EAfxHylRrupeLV2j2FdfVDhKvy/cbeF35bbrNukUqqofie+2bs/wMmlQTV SkuaAqBD8qdUadvp6/fifJJUbe0zTgxexQmt+Fs95fOp4ulNQj3QR0A8t1NUy5K78/ApJz9dOoQ m5YKNMc/Z6yMeVBuGthvAuKIgLvyyN4SpxXl3O7GgBS9VzJpPowKCzl5xO6pEylGU5OyGC3ws3P xkjYrp2tWU+itX4nBXshbn1ePXtMW36crDZ/7jGg84n+UAPFnaISW7UlH1VvvK2bP7xdCF0e3aT BgJ4nRYa9UjRArp6gU2xnt0+f4bT1Vg= X-Received: by 2002:a05:6a20:3d19:b0:3de:5302:e92a with SMTP id adf61e73a8af0-3e2262716eamr7542405637.17.1792434854594; Mon, 19 Oct 2026 11:34:14 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-cd6549fb556sm4632865a12.22.2026.10.19.11.34.12 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 19 Oct 2026 11:34:13 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-webserver][PATCH 1/20] netdata: mark CVE-2026-83602 fixed Date: Tue, 20 Oct 2026 07:33:47 +1300 Message-ID: <20261019183407.1037972-1-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Mon, 19 Oct 2026 18:34:17 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131127 From: Ankur Tyagi Fix identified by NVD is included in the patch release[1] v2.10.4 Details: https://nvd.nist.gov/vuln/detail/cve-2026-83602 [1]https://github.com/netdata/netdata/pull/22825 Signed-off-by: Ankur Tyagi (cherry picked from commit 4d88db205cd6981f7e1388fdcc17b451f9f8fecd) --- meta-webserver/recipes-webadmin/netdata/netdata_2.10.4.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta-webserver/recipes-webadmin/netdata/netdata_2.10.4.bb b/meta-webserver/recipes-webadmin/netdata/netdata_2.10.4.bb index ed4c54fbe4..9df846cec9 100644 --- a/meta-webserver/recipes-webadmin/netdata/netdata_2.10.4.bb +++ b/meta-webserver/recipes-webadmin/netdata/netdata_2.10.4.bb @@ -167,3 +167,5 @@ FILES:${PN} += "\ " RDEPENDS:${PN} = "bash python3-core zlib" + +CVE_STATUS[CVE-2026-83602] = "fixed-version: fixed in v2.10.4" From patchwork Mon Oct 19 18:33:48 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101305 Received: from mail-pg1-f169.google.com (mail-pg1-f169.google.com [209.85.215.169]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.1737.1792434857456626812 for ; Mon, 19 Oct 2026 11:34:17 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=ZCZeDnzR; spf=pass (domain: gmail.com, ip: 209.85.215.169, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pg1-f169.google.com with SMTP id 41be03b00d2f7-cc4aa18f9afso959099a12.3 for ; Mon, 19 Oct 2026 11:34:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792434857; x=1793039657; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=rblu8TvKwc9NZ6yX6BUdFzKJfMMND7c8/4igNG68H+c=; b=ZCZeDnzRq4GzLjHhHNjuHM9iIZaazZUGm60W0brUjmiTppXgpKFbZOXFtlBiQvdPtH +chjwQj33/EYe8sdwl5n6oiRC/iBYV7UqlqIVOPrzOJr/iG/W1AY26ZsTTZ6Wxtj+AmA TCol4kFZdToGyd0t5zqCb6q6RtW7azkC8R7P1B7/PpNGpmobtxVsixyvpYKRJLy4z6Sm 061JMAzJEfmPynNQOBunzSNK6kH0Cg4eVQtwYCcMMvBSAdJfKotS21aYuj5YjKo2FzBC qRBANy+6PAlE3MOkwj+KNW4hX8nXDbLN606L+AxzsGyB4y3qOHkld044owsa94Zd9fxW e3GQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792434857; x=1793039657; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=rblu8TvKwc9NZ6yX6BUdFzKJfMMND7c8/4igNG68H+c=; b=xdudnV1y1it+7On9YiSNvrj0zMReLEDwnSju3qQOHU9wmCCXDIzNG220zDQk1CFTeZ vd6BH2eHWlm+KZdcOY09Jw93584LIRedpMQJkdimeyrxFlnZsk74LrROL4sVs0yWO8UC rvcfPO13StMnog4sIWWyVZhzYiJnbgY+2rne/6Lq9lwSTbKznr21mlxkLQtcqVzTvvcT bXnMqdro0jDITJyFFIzT+peCYpq9zV1RsahDRm4D62BFKPMV9Zwy1zuGNgHlTMq467z+ FwKIpCHgBx4Dcpt5if8N8jHu7kcWfHfhtAV1J/I6fQQRLeL4ScUBco+5hAF++UEnWNh0 hiGA== X-Gm-Message-State: AFq9FYIWCQ9FUkRgOYjPD2h2Cu/wk7jhO1sdJcJNBc3GsTfL4Uqhy3hy HEFSY0Bl6JPL4ws6jWJt3bWjOSTiSdrs3ljSMBYUISx3REDsQYod8wdkZPB8Cg== X-Gm-Gg: AYBFou3rhWxupTa+n+6Px5KHLcfk+H1yFzOYB1DjLRjD4v1YQlcJbeu2PBEHvjvZzda G04Xz+pfFx89EworoFrPLu9FVeT7Azo9W+mAbcBt7ZNBI7/ddCgouALJuSu6jWNcuAUMW49c7Xb CuMMNUjpvgXGNv6M/G5GLHNX+uq76S95FTc8QFFQjk6rxuAqUOUy6ple4reYNR8ST26jWk4e5Kc a0Rul2ZnVRvvvgYhWA+MfVLDVMEqBYnrW1JqYg37C7Y+TZgDmPErsN8Cukp+tvzCLUGlCEQUZCx dbEd8t/OTUmQ1vfqV2X6s5mWZl0/Yc259QUXn6mpKhWmUmAsVl+OPS2QWfMrbtKFQwMjD1PefPD W8npB3Eikq6vdhaf/e0d6zpr1NvKEhILXZoDXYpomz1qEmfeKEW9Q6N3F3EpevwUJhnIKDtnzOD apWaIOFDhTGVEIk9DPGE1nC2osEMFX070ECUpwzSSV2SRBvojz2ZrKBsBGUOzf61S/W5dZuBzYe 347/Ma3v1IyCUQj1MsT0zL238jBl1WNd8rysrY= X-Received: by 2002:a17:90b:4b90:b0:3ac:8741:e2e8 with SMTP id 98e67ed59e1d1-3acee295cb3mr7829964a91.8.1792434856668; Mon, 19 Oct 2026 11:34:16 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-cd6549fb556sm4632865a12.22.2026.10.19.11.34.15 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 19 Oct 2026 11:34:16 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-multimedia][PATCH 2/20] pjproject: mark CVE-2026-26967 fixed Date: Tue, 20 Oct 2026 07:33:48 +1300 Message-ID: <20261019183407.1037972-2-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261019183407.1037972-1-ankur.tyagi85@gmail.com> References: <20261019183407.1037972-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Mon, 19 Oct 2026 18:34:18 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131128 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-26967 Signed-off-by: Ankur Tyagi (cherry picked from commit bb27c215be50ff54ac07f976337432f8773baddc) --- meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb index 8aa7775205..59684ac7c7 100644 --- a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb @@ -118,3 +118,5 @@ RDEPENDS:python3-pjsua2 = "python3-core" # and ${PN}-staticdev (the .a files) by bitbake's own default FILES # patterns - ${PN} itself ships nothing. ALLOW_EMPTY:${PN} = "1" + +CVE_STATUS[CVE-2026-26967] = "fixed-version: fixed in v2.17" From patchwork Mon Oct 19 18:33:49 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101307 Received: from mail-pg1-f177.google.com (mail-pg1-f177.google.com [209.85.215.177]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.1753.1792434859538335067 for ; Mon, 19 Oct 2026 11:34:19 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=rSuaovLI; spf=pass (domain: gmail.com, ip: 209.85.215.177, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pg1-f177.google.com with SMTP id 41be03b00d2f7-cc1cf287ef8so1559646a12.3 for ; Mon, 19 Oct 2026 11:34:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792434859; x=1793039659; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=y0cFee/AI14iKymMxLjwCxfLDMlMG3ggGwxgJKduWEI=; b=rSuaovLIrt0ok+e6XG/zbYiLXwXQ/M2zcDyBSQCWBCCmy1/IFfvpkIAdxMVbS3V4mM TqfvLw3Q8SSIQB0AmOcXQrLA8v1YLkUv++keZCByF9v6yDCwQE6pb3nX25nFM+VIAyDD 9lAqrslrVWhWFKutIv3RKI63s6QBFLRwucduJiiMICxVB7p6HZq+3a8LZwon8QlV6nJh nDK5aaTWY7JaXHtkmvQpNISVhvb6zOAnvjvPKMdF+1nj2Le/Lug5PHAUQaXE+AXs8GDr gSspEd+b7yAeATtfrusyhC0qMZGyQF5BWU5dFWkB4b0XEtR33z0mSriy3s8UfIt6dlWI hElw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792434859; x=1793039659; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=y0cFee/AI14iKymMxLjwCxfLDMlMG3ggGwxgJKduWEI=; b=Ug+jBtAUDPmwTy1BQPhE9nDR6CzH7+MfL9tTQQUEbxcXYhyQpAMIIBwqh+yCReAGxj i//WmqTUxmlEW3aUAET3hpe/oig/yWrLcmQxcd9Lfo7HA5ae/gicZ/zydXbyjd1BoSCw HiWyPFful9KauvGj5yYFEM/gj9t19gzrhUzVeU2bINs/ZY6hY73Y5dpht6bMDLKbPlbD 9vNdY4cL78m1oWyANaVq7zJF+Wv8K4V80YUEO079ueG2JWTlUdQeM3SpKd/kLImyo1Mi jxh7cI5MszHHO7Yb6wKTOo3SXi/VYX+v39HsmhfmisvCyadtAJEoiCmm7PYxeB4gI0L+ cggw== X-Gm-Message-State: AFq9FYITulEcxjhAdsRYma11nX5l0oCV++ekWYemqRUv/MVQgQiIs7fT P9lWieU3on47Pp5TkoBXKBOc5nduwLd9Vrzfct4/7kD9YvCBSsXHX6Q2hb9D/g== X-Gm-Gg: AYBFou2E1YiD5Bkd3/eY8W7pEsx/FIrXlkZLWUJl3XazBocL9Cb5dj6SuBgRoBbZYn0 ygh3l+srIDujsPyAO3ljGcfFdSfXw8cU37rurnYvZOwB0XetjSucy5Ax4fqmnJqh+wigOBEXwYf P3SfuErQmhYp2CtVzglW9Ij3fzMt+jJOl1BsiK1g1SQgG7CiONzr7p6AuREbnRDtf4ImlUxuZPO X+puW2xSK/6vMdL5xBtwz7u0ue3w2j8kod8Mfsrl6EQdE4VHkbbumG78zr1jZte+LF/dlFLzbTq czmHtqoNHdLrvQRIRml+ph1M2B1KG285+tqhGdCsIMnzet1vmyFSj9kVC8hnxeKZQPB43Kae3nm B4u66PEHnnSuznF+LaGs+/1riMyMFV83hqqs+3LN9i7WXCyFbaSZ4Z1iJ7UGVBYVwOcATM6+W9J 5k2JA6KTZsuy+Mb/YoR6rtGVBlNAHa7okWA+Q86/s26WMhpUynxsvSX833kIbD7B3RibbFIX/yC +XZa5cslr/CyYHBZ7wE5he3UIH/owwNGgpzjsbXaDja6J3M6Q== X-Received: by 2002:a05:6a20:6a1d:b0:3e0:de4c:71e6 with SMTP id adf61e73a8af0-3e2260d1a4cmr7646531637.54.1792434858874; Mon, 19 Oct 2026 11:34:18 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-cd6549fb556sm4632865a12.22.2026.10.19.11.34.17 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 19 Oct 2026 11:34:18 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-multimedia][PATCH 3/20] pjproject: patch CVE-2026-57160 Date: Tue, 20 Oct 2026 07:33:49 +1300 Message-ID: <20261019183407.1037972-3-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261019183407.1037972-1-ankur.tyagi85@gmail.com> References: <20261019183407.1037972-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Mon, 19 Oct 2026 18:34:28 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131129 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-57160 Signed-off-by: Ankur Tyagi (cherry picked from commit 78f0ee20ccfb85b9cc8477e19bb143110d975962) --- .../pjproject/pjproject/CVE-2026-57160.patch | 42 +++++++++++++++++++ .../pjproject/pjproject_2.17.bb | 1 + 2 files changed, 43 insertions(+) create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57160.patch diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57160.patch b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57160.patch new file mode 100644 index 0000000000..a25ed5a28e --- /dev/null +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57160.patch @@ -0,0 +1,42 @@ +From b14ebbccf5c228ca298ad11ecae2cedde792edae Mon Sep 17 00:00:00 2001 +From: Nanang Izzuddin +Date: Wed, 17 Jun 2026 15:43:46 +0700 +Subject: [PATCH] Merge commit from fork + +When printing a generic array header (e.g. Allow, Require, Supported, +Unsupported), the ": " delimiter following the header name was written +with two unchecked stores. copy_advance() only guarantees that the +header name itself fits, leaving as little as one byte before the end +of the buffer. The colon then consumed the last byte and the trailing +space was written one byte past the buffer end. + +Use copy_advance_char_check() for both delimiter bytes, matching the +boundary-checked pattern already used by every other header printer in +this file. + +Co-Authored-By Claude Code + +(cherry picked from commit d6a0e7f76611c3a6f530ee051e3e7a622bb1748c) + +CVE: CVE-2026-57160 +Upstream-Status: Backport [https://github.com/pjsip/pjproject/commit/d6a0e7f76611c3a6f530ee051e3e7a622bb1748c] +Signed-off-by: Ankur Tyagi +--- + pjsip/src/pjsip/sip_msg.c | 4 ++-- + 1 file changed, 2 insertions(+), 2 deletions(-) + +diff --git a/pjsip/src/pjsip/sip_msg.c b/pjsip/src/pjsip/sip_msg.c +index 06c8cce86..cdc99ff9e 100644 +--- a/pjsip/src/pjsip/sip_msg.c ++++ b/pjsip/src/pjsip/sip_msg.c +@@ -964,8 +964,8 @@ static int pjsip_generic_array_hdr_print( pjsip_generic_array_hdr *hdr, + &hdr->sname : &hdr->name; + + copy_advance(p, (*hname)); +- *p++ = ':'; +- *p++ = ' '; ++ copy_advance_char_check(p, ':'); ++ copy_advance_char_check(p, ' '); + + if (hdr->count > 0) { + unsigned i; diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb index 59684ac7c7..254a2952a2 100644 --- a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb @@ -14,6 +14,7 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=b234ee4d69f5fce4486a80fdaf4a4263" SRC_URI = "git://github.com/pjsip/pjproject.git;protocol=https;branch=master;tag=${PV} \ file://0001-ssl_sock_ossl-fix-OpenSSL-4.0-compatibility.patch \ + file://CVE-2026-57160.patch \ " SRCREV = "5a457451fa2712ba18e12b01738e8ff3af2b26fd" From patchwork Mon Oct 19 18:33:50 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101308 Received: from mail-pf1-f177.google.com (mail-pf1-f177.google.com [209.85.210.177]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.1755.1792434862093085553 for ; Mon, 19 Oct 2026 11:34:22 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=NMta0at1; spf=pass (domain: gmail.com, ip: 209.85.210.177, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pf1-f177.google.com with SMTP id d2e1a72fcca58-8a06454116eso713219b3a.1 for ; Mon, 19 Oct 2026 11:34:22 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792434861; x=1793039661; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=bkpBBti9CSlaujiTJameXahnDPUFd6YJELouBzb8HW4=; b=NMta0at1vDisLrcrLPYvHQjXw/Ef3lRMFWr+FqxTqg6YfECQiU1XHRsyuEaPfEiPeD O6jQVlKlqANfO1ew6XTywHDVgde6ir2O20y+f3+Tk/hAAzKltGGhT4Rx/lYfZ+B95IGA zi1cKKb0KQR62lrPXTneCmAgHRMOfDMj9fO64HVD2vecYi8RqWWyfnKnVHpd6+O2J4GQ NXPR0hQNKHGUA9HLojrasSnB9JYvV4BRPYf/crDeLWXog256BUd9dNtbLWmLhke/DcAQ cvjK/xlEWZWYWfsL/JFOjxCgzUm1dTXlXP/Am8NsLaGmWjN1Bq4gswBk6FriZsbaXBwr chJg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792434861; x=1793039661; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=bkpBBti9CSlaujiTJameXahnDPUFd6YJELouBzb8HW4=; b=RZaGGxqIL/f5CKsDx3I/l2h4e7fRYDHHDqojsgkv8jGaaypqu9h02oRNHRYjIGV+nr xL3qNbVc7ITYr6aRzHLH2EXGr4fLCdxu6oR686moU4m9AYTkp99eywzG0hpqrWTVI7aT BRAggjAWlnUEPYktiBOGO0CuR4yXG/Hps5/cvSkRKgjEA8cX88GiE/66tanjWAHDMBwJ W+NgKZsQHOItJz4RMuiBjkyoLMyRS3ycgCHwhHGl50/55MMSUeWS1FNZB32XvjAKrwo8 oHKXzZw8HBVuc5mtwUJztipSX6Uk23v4/nDtY1hrqs7GeZj5IOWn2m6fyW/AnN+6ml9Q cvtw== X-Gm-Message-State: AFq9FYKL+HtgsCQQfpY7z/GLup7WCocgD3l6xR4xfu0gY3Jbk0fZ1Es+ jRAxauAhZ3z1lH49+M1eAOv38lAznCUtrSh9X9VhwZxgKpxQWQk6zp+MRQtxAg== X-Gm-Gg: AYBFou1DLbe5WGwslCkSkPK+7C2zwOMApzEHtdOsyMwbgAIQxyzqburwrlrrgMTb6Os YPQst8/6E5uEsHDelt7DsKKUddF2FKXTlATuTihtjJPMRJmeESC/DUgmGuN3WPhH6eyNsaQJRkE tpX+eetscZgNc72cUVjT6QoCW8bgza7qKpvswp4E0H99rtybO+GMTHc6JZZeEbI2ZzdU8hPKBFq DHy+6Mp9x2qHfD2L2qss1iukaR82k607DVSgLSpsfQfF9/jJMegfaKYw9lN/wZon1artsgYI6S0 SDqQSePA4yqAzRsx5hSCx6YMgutmFrO8xTLLGuxmaTbsvJnf0XnwqhlkYSuzYUNE/mVfeEDgvGs N5y7aNghsPwYefvyOENgP6gFi9VyK5Ry2PWh/dJ8iZ9uJtxJ0DQk9mqxdhWhz4dyxZYORTHKFLc eD/XP3VNkBSXpiDenbQClhQUs8viCqY4XMQqU1ahsgg2SFfcXE65mZtOXa203uSg6MB9EIOGvYG G7ygCHvSebD7WuPm7YViVit9IemMvQ2Nir/bkY= X-Received: by 2002:a05:6a20:d48d:b0:3de:20c:e57 with SMTP id adf61e73a8af0-3e225fe8fa2mr7058345637.11.1792434861222; Mon, 19 Oct 2026 11:34:21 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-cd6549fb556sm4632865a12.22.2026.10.19.11.34.19 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 19 Oct 2026 11:34:20 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-multimedia][PATCH 4/20] pjproject: patch CVE-2026-57161 Date: Tue, 20 Oct 2026 07:33:50 +1300 Message-ID: <20261019183407.1037972-4-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261019183407.1037972-1-ankur.tyagi85@gmail.com> References: <20261019183407.1037972-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Mon, 19 Oct 2026 18:34:28 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131130 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-57161 Signed-off-by: Ankur Tyagi (cherry picked from commit 371f20419d88f75dd45508451ec014d1a0c94b70) --- .../pjproject/pjproject/CVE-2026-57161.patch | 49 +++++++++++++++++++ .../pjproject/pjproject_2.17.bb | 1 + 2 files changed, 50 insertions(+) create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57161.patch diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57161.patch b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57161.patch new file mode 100644 index 0000000000..3296013efd --- /dev/null +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57161.patch @@ -0,0 +1,49 @@ +From 656cd5ec76f0178448053a9ca44ce075cd7a27f9 Mon Sep 17 00:00:00 2001 +From: Nanang Izzuddin +Date: Wed, 17 Jun 2026 15:44:40 +0700 +Subject: [PATCH] Merge commit from fork + +Bound the number of Service-Route URIs stored in the fixed-size uri[] +array by checking uri_cnt against PJ_ARRAY_SIZE(uri) before each write. +Previously the count was only checked as the do/while continuation +condition, which does not catch accumulation across multiple +single-URI Service-Route headers, allowing a registrar response with +more than PJSUA_ACC_MAX_PROXIES headers to write past the array. + +Co-Authored-By Claude Code + +(cherry picked from commit acc03b57cef7a7d31b8e1f5b9117437d7e87c591) + +CVE: CVE-2026-57161 +Upstream-Status: Backport [https://github.com/pjsip/pjproject/commit/acc03b57cef7a7d31b8e1f5b9117437d7e87c591] + +Signed-off-by: Ankur Tyagi +--- + pjsip/src/pjsua-lib/pjsua_acc.c | 12 ++++++------ + 1 file changed, 6 insertions(+), 6 deletions(-) + +diff --git a/pjsip/src/pjsua-lib/pjsua_acc.c b/pjsip/src/pjsua-lib/pjsua_acc.c +index f52518a2a..08c5efced 100644 +--- a/pjsip/src/pjsua-lib/pjsua_acc.c ++++ b/pjsip/src/pjsua-lib/pjsua_acc.c +@@ -2278,14 +2278,14 @@ static void update_service_route(pjsua_acc *acc, pjsip_rx_data *rdata) + return; + } + ++ if (uri_cnt >= PJ_ARRAY_SIZE(uri)) { ++ PJ_LOG(1,(THIS_FILE, "Error: too many Service-Route headers")); ++ return; ++ } ++ + uri[uri_cnt++] = h->name_addr.uri; + h = h->next; +- } while (h != hr && uri_cnt != PJ_ARRAY_SIZE(uri)); +- +- if (h != hr) { +- PJ_LOG(1,(THIS_FILE, "Error: too many Service-Route headers")); +- return; +- } ++ } while (h != hr); + + /* Prepare to find next Service-Route header */ + hsr = hsr->next; diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb index 254a2952a2..4c00c4215c 100644 --- a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb @@ -15,6 +15,7 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=b234ee4d69f5fce4486a80fdaf4a4263" SRC_URI = "git://github.com/pjsip/pjproject.git;protocol=https;branch=master;tag=${PV} \ file://0001-ssl_sock_ossl-fix-OpenSSL-4.0-compatibility.patch \ file://CVE-2026-57160.patch \ + file://CVE-2026-57161.patch \ " SRCREV = "5a457451fa2712ba18e12b01738e8ff3af2b26fd" From patchwork Mon Oct 19 18:33:51 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101309 Received: from mail-pf1-f176.google.com (mail-pf1-f176.google.com [209.85.210.176]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.1742.1792434864308305829 for ; Mon, 19 Oct 2026 11:34:24 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=obw9qLQ8; spf=pass (domain: gmail.com, ip: 209.85.210.176, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pf1-f176.google.com with SMTP id d2e1a72fcca58-8a06c60065fso865072b3a.1 for ; Mon, 19 Oct 2026 11:34:24 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792434864; x=1793039664; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=YrkwsQRtvq9U0d12+no9kNatND8nP9mgbSSfNuxFQ0I=; b=obw9qLQ8PFnVOGLcX6RTx2yvVnOQJCHO1hZ9UWGU6/0bTWT2KNbE8zwpcp3bx0Q73j LmnWOL+lxabvzhtLcvz3oFE9UGWo6wZylZKythbBW7qDfsygAMmu2yYSahQfYKoQb+F8 N8xYW22NC5/4WthG8hPrFZCoyYuzhcUdyV2G3lTY3BZxejBq3rmUyypbP9JFGQCBSxg0 OdMfj2lc8FoRfpP6siVsS4PYY0fcmZv4pwhHK6aEZLHCbTA7ek2+YUlbObMHhLY1DOS6 qj2CRq92Ndu1G9S2Asi2L3lLSlfjKQrNXDepSqazZ/KcSbmElnQKH2CLmONicCnRx4y5 Nk8Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792434864; x=1793039664; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=YrkwsQRtvq9U0d12+no9kNatND8nP9mgbSSfNuxFQ0I=; b=MmTWT2e+bACgP6YrIQ0Y7dBq16l5kwy5aVw5CE1bI1dpoPzf4ESwmS7IDCk2NcFJAB vlhTvUhFI/TK0HUiI0729v8uLHwLSKU48IGAw4jW2/o8eUTYo8El8MegQnEqAkFxuur1 U5dJfFe99yMQcJ85k5rfP6AVLR6t67et4TCCMp5g0eTemWh889ae8kXuLYQ83s/Yd7w7 7Tt2jPu3kHgPvJJKVPe79X/IJpiPocJqCsItiK5yj2c9ge8U7NNs7et76o5FXXAWmUP2 BcpzkocF9RI2YyeLKhPrGsTmzmU0YLmg/wNJWZ2zS61mHAUWsETSIfpeeFEDTlO4SswD 2pRQ== X-Gm-Message-State: AFq9FYJ17rjHe9NOU46rRhVXJtnm88HDtSRIg0DE2cCXyNxvWuwisBe7 6Dh5Hse6VNaFRMKc3kuhvFSAytXwuWSJtni+iszxJw1BKm92LGvcF48UTB8iuw== X-Gm-Gg: AYBFou21bv4Cyz5NhItk9hjokujq+fBsQSvWOYrLKDkWG9f+yszXgReO0U2Zj+zz6rJ ExpkJeBZbVrd3qLOkplwMGEuEhNNOdBl0vneGM4o/BHNX+7UIaGF0l/wWV2gVpixoSU2S5dfxkz AebvpUDrKRzAKMzRprWu+XlqFs8gxYHiIBIk5kZdMvOosz/Nv/u4uuenaLop2sosgdXqSqsldg6 EmWK5+UnOCvshDQfTq2MwklS2bxJvwkOPyEP2tbCHaCVhtE2k2zxezx4ROKALP8V/rGAzspS0R4 6Z/wrDBsH2Hmtfif7SPpXiSvHfF3AlacOV21AUVO+qQ+7Y8LyeX69gyzFCwxg2h/ycVcKC1K0MW KkGitf+z4SmRA/WedTEpQyp5WPkNl4UdqdX4p/WG4HBjOf+b2s3mxC/iIc3zDj8ECqeWvd5m9A8 p4wbJvJ69XW7pEE0KdwkF2jyUprZIHDVafjea5yJCo5wq8VymQctCQ7xb5nHRkI1oPDRqJ5TxLn 81dXr1icpyP640L71F+SUpEUscP/T9JT2zoUFoO2Owyf61D4A== X-Received: by 2002:a05:6a21:498a:b0:3e2:2b76:bf20 with SMTP id adf61e73a8af0-3e22b76ccd7mr6224346637.51.1792434863543; Mon, 19 Oct 2026 11:34:23 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-cd6549fb556sm4632865a12.22.2026.10.19.11.34.21 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 19 Oct 2026 11:34:23 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-multimedia][PATCH 5/20] pjproject: patch CVE-2026-57162 Date: Tue, 20 Oct 2026 07:33:51 +1300 Message-ID: <20261019183407.1037972-5-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261019183407.1037972-1-ankur.tyagi85@gmail.com> References: <20261019183407.1037972-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Mon, 19 Oct 2026 18:34:28 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131131 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-57162 Signed-off-by: Ankur Tyagi (cherry picked from commit f7758a033eec4754fdb957a0fb2c6d2d5cb31ea6) --- .../pjproject/pjproject/CVE-2026-57162.patch | 43 +++++++++++++++++++ .../pjproject/pjproject_2.17.bb | 1 + 2 files changed, 44 insertions(+) create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57162.patch diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57162.patch b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57162.patch new file mode 100644 index 0000000000..85a9394e25 --- /dev/null +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57162.patch @@ -0,0 +1,43 @@ +From 1b64bfb240731bbf0fc194dec68bb9d9b08a20b2 Mon Sep 17 00:00:00 2001 +From: Nanang Izzuddin +Date: Wed, 17 Jun 2026 15:45:33 +0700 +Subject: [PATCH] Merge commit from fork + +sdes_encode_sdp() in transport_srtp_sdes.c wrote each parsed crypto tag +into the fixed int tags[64] array without bounding the count, while the +SDP parser allows up to PJMEDIA_MAX_SDP_ATTR (68) attributes. Reject +the SDP with PJMEDIA_SRTP_ESDPINCRYPTO once the array capacity is +reached, before the out-of-bounds write. + +Co-Authored-By Claude Code + +(cherry picked from commit a1b707c0c9b0506faf2a8a438b60f11ffd6a6fd9) + +CVE: CVE-2026-57162 +Upstream-Status: Backport [https://github.com/pjsip/pjproject/commit/a1b707c0c9b0506faf2a8a438b60f11ffd6a6fd9] + +Signed-off-by: Ankur Tyagi +--- + pjmedia/src/pjmedia/transport_srtp_sdes.c | 9 +++++++++ + 1 file changed, 9 insertions(+) + +diff --git a/pjmedia/src/pjmedia/transport_srtp_sdes.c b/pjmedia/src/pjmedia/transport_srtp_sdes.c +index 8f98292ba..45038e585 100644 +--- a/pjmedia/src/pjmedia/transport_srtp_sdes.c ++++ b/pjmedia/src/pjmedia/transport_srtp_sdes.c +@@ -478,6 +478,15 @@ static pj_status_t sdes_encode_sdp( pjmedia_transport *tp, + + has_crypto_attr = PJ_TRUE; + ++ /* Bound writes to tags[] by its capacity. m_rem->attr_count ++ * is capped by the SDP parser at PJMEDIA_MAX_SDP_ATTR, which ++ * can exceed PJ_ARRAY_SIZE(tags); without this guard a remote ++ * peer can overflow the stack array by sending more than ++ * PJ_ARRAY_SIZE(tags) a=crypto attributes. ++ */ ++ if (cr_attr_count >= PJ_ARRAY_SIZE(tags)) ++ return PJMEDIA_SRTP_ESDPINCRYPTO; ++ + status = parse_attr_crypto(srtp->pool, m_rem->attr[i], + &tmp_rx_crypto, + &tags[cr_attr_count]); diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb index 4c00c4215c..f47d661400 100644 --- a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb @@ -16,6 +16,7 @@ SRC_URI = "git://github.com/pjsip/pjproject.git;protocol=https;branch=master;tag file://0001-ssl_sock_ossl-fix-OpenSSL-4.0-compatibility.patch \ file://CVE-2026-57160.patch \ file://CVE-2026-57161.patch \ + file://CVE-2026-57162.patch \ " SRCREV = "5a457451fa2712ba18e12b01738e8ff3af2b26fd" From patchwork Mon Oct 19 18:33:52 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101306 Received: from mail-pg1-f171.google.com (mail-pg1-f171.google.com [209.85.215.171]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.1743.1792434866571233398 for ; Mon, 19 Oct 2026 11:34:26 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=WZ2pxknD; spf=pass (domain: gmail.com, ip: 209.85.215.171, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pg1-f171.google.com with SMTP id 41be03b00d2f7-cbedd5aece4so1572263a12.0 for ; Mon, 19 Oct 2026 11:34:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792434866; x=1793039666; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=nbFFBbpZhf6Ixs2g6yTVI2F6yuTe5/AlDRy9rlR/+RI=; b=WZ2pxknD5G8IyjZE17MJe++dwJ0znLG3cO8a4/N/Q+QLsvQ2wE+A5YdWMSr6hwt0un Es7EZWpTfSA8yDMFFyX4yrxi1KZL+bpGS6XQ+E6gEEaYpUfSzi6S7Euce0X0Fi0o6bLV H/+E3W4qo4HiE1Y7ttBbQmmEk+MpGhfMIotK3AVtBM7t3VqTRKovgdAG+N0CpTYrEGMM S7WaZx/fmyrFq+xoTIvPh8QrXQA8kkdtgn21uFder7cJJAkrBzyJs3FDgiRWKzC+5rZ9 I8PWpdUe93QgySzTfWrurDC407H/+GZrIWTf90VM0885yhxORZ5YlvbNCJPjG3nA9XtG XEPQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792434866; x=1793039666; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=nbFFBbpZhf6Ixs2g6yTVI2F6yuTe5/AlDRy9rlR/+RI=; b=PWyot77q3KTV+JzCRUttSgtBRK6hykjdYnaKejLad9f670p55kEoW2niH+2UUCd1vC 6bDSEj/o13QxCYzfZp8LwxJTme8MHnbjQEsYGGxOjgqmqWOrSKE0UcN3XDxetStdGI39 76XRoWi548F2fDqmJGI8nfrdKiBDCNSUA0jYCZL2v5BvJL2qnU4gjdrgNtOo1Yvhy4Gt /zAtm/xqe62lSnXh/MeRbQKPBJOk5Ax01EwbX5zwG/DuRwv5lO5l/ctFa2GjBIxCdfUv qrDTAPgQnfmViLuOyMJiIt3/zkUs4fthIxCiRl9J93NLSG8Dbs2OtKIA3sM6ZakXfJHW DlAA== X-Gm-Message-State: AFq9FYLLrq5Mk7MKa+zRfPx5uM1qmdkPOj0NESlVrxQyXZWOpfJ3Zj2Z R/y65zhwXQ7jo1q64x5MPhsL6UJCItZMxp4mwX2q5nsLui0N3He6ozTt1ECJfA== X-Gm-Gg: AYBFou00hwW46SPFENACPGbbEwQZsHW9uMT6KRRrWsyiy/sL8QwN3zotu5hw50r8MnD gLaVgpHUeiLEL211UPNOwSHm3vkivKMynB0R8mBVKzoSVhJk8mVoLXzxt/pS500nZNXJjzAQLuO nbmm4aF6D4VzvOIuD2GF90xpY7vxzDZ37zuFojaIWU/ZyKHB0w4kYRThh77XcSNME6fdUlg4IzN SMzjx+f3f2ugpELcFOy9KllcSUmXCpNP/iQZrdhf/GY5bkG0Y2OopL91PUEx2gCgF8HlcSq3jT1 Fo8d3VDs35Lq/X+UHw60dxQOX8rPGLabhohG3JcnsaN9Fqdb2FQMmlEVzw/57H4mONsq1HUDmnG Mj5gUwgZc2zU/8zuBEc/VOaBBpRYTaXy4JnzC9uSUnv9He4IxSkbXg0sU4v8KnAdSjoH9PgOiD2 L7hU+8NjtRtoKmA+QQ9OCBqiS3c9g9MPnqkppAqrlkz3Q+7jY4ZjGp2LYaapdvnkwwDLXHsjlAE 5qa/wRo1Iiq+pBoV+rdD9qUcB1ocnLWoyOhdMc= X-Received: by 2002:a17:90b:164c:b0:3a8:23eb:d1d0 with SMTP id 98e67ed59e1d1-3acbb976cf0mr8100164a91.52.1792434865727; Mon, 19 Oct 2026 11:34:25 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-cd6549fb556sm4632865a12.22.2026.10.19.11.34.23 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 19 Oct 2026 11:34:25 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-multimedia][PATCH 6/20] pjproject: patch CVE-2026-57163 Date: Tue, 20 Oct 2026 07:33:52 +1300 Message-ID: <20261019183407.1037972-6-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261019183407.1037972-1-ankur.tyagi85@gmail.com> References: <20261019183407.1037972-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Mon, 19 Oct 2026 18:34:28 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131132 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-57163 Signed-off-by: Ankur Tyagi (cherry picked from commit 3cc8b60359265c8c6a34242f6c9eb8c3b3c50108) --- .../pjproject/pjproject/CVE-2026-57163.patch | 52 +++++++++++++++++++ .../pjproject/pjproject_2.17.bb | 1 + 2 files changed, 53 insertions(+) create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57163.patch diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57163.patch b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57163.patch new file mode 100644 index 0000000000..7b3c681cb9 --- /dev/null +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57163.patch @@ -0,0 +1,52 @@ +From 2276d5ff1fe185a6bb51ab741dd5d88e45dbaa47 Mon Sep 17 00:00:00 2001 +From: Nanang Izzuddin +Date: Wed, 17 Jun 2026 15:46:16 +0700 +Subject: [PATCH] Merge commit from fork + +The SAN-counting loop in tls_cert_get_info() (ssl_sock_gtls.c) called +gnutls_x509_crt_get_subject_alt_name() with len still holding +sizeof(buf) (512) from an earlier getter, while the output buffer is +only 256 bytes, so an oversized SAN entry overflowed the stack. Set len +to the true capacity (sizeof(out) - 1, matching the populate loop) on +every iteration. + +Co-Authored-By Claude Code + +(cherry picked from commit c4a151af86fadd16d9480b2603eeb2abf4fb4f78) + +CVE: CVE-2026-57163 +Upstream-Status: Backport [https://github.com/pjsip/pjproject/commit/c4a151af86fadd16d9480b2603eeb2abf4fb4f78] + +Signed-off-by: Ankur Tyagi +--- + pjlib/src/pj/ssl_sock_gtls.c | 12 +++++++++++- + 1 file changed, 11 insertions(+), 1 deletion(-) + +diff --git a/pjlib/src/pj/ssl_sock_gtls.c b/pjlib/src/pj/ssl_sock_gtls.c +index de3d5e99e..68ceea3f3 100644 +--- a/pjlib/src/pj/ssl_sock_gtls.c ++++ b/pjlib/src/pj/ssl_sock_gtls.c +@@ -1018,12 +1018,22 @@ static void tls_cert_get_info(pj_pool_t *pool, pj_ssl_cert_info *ci, + if (ci->version >= 3) { + char out[256] = { 0 }; + /* Get the number of all alternate names so that we can allocate +- * the correct number of bytes in subj_alt_name */ ++ * the correct number of bytes in subj_alt_name. ++ * ++ * Pass the true capacity of 'out' as the in/out size argument on ++ * every iteration. 'len' otherwise still holds sizeof(buf) (512) ++ * from an earlier getter, which would let GnuTLS copy an oversized ++ * SubjectAltName entry past the end of the 256-byte 'out' buffer. ++ * Use sizeof(out) - 1 to match the populate loop below, leaving ++ * room for the NUL terminator GnuTLS appends to string names. ++ */ ++ len = sizeof(out) - 1; + while (gnutls_x509_crt_get_subject_alt_name(cert, seq, out, &len, + NULL) != + GNUTLS_E_REQUESTED_DATA_NOT_AVAILABLE) + { + seq++; ++ len = sizeof(out) - 1; + } + + ci->subj_alt_name.entry = pj_pool_calloc(pool, seq, diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb index f47d661400..de8c847271 100644 --- a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb @@ -17,6 +17,7 @@ SRC_URI = "git://github.com/pjsip/pjproject.git;protocol=https;branch=master;tag file://CVE-2026-57160.patch \ file://CVE-2026-57161.patch \ file://CVE-2026-57162.patch \ + file://CVE-2026-57163.patch \ " SRCREV = "5a457451fa2712ba18e12b01738e8ff3af2b26fd" From patchwork Mon Oct 19 18:33:53 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101310 Received: from mail-pf1-f178.google.com (mail-pf1-f178.google.com [209.85.210.178]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.1756.1792434870856309478 for ; Mon, 19 Oct 2026 11:34:30 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=OPih8tUj; spf=pass (domain: gmail.com, ip: 209.85.210.178, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pf1-f178.google.com with SMTP id d2e1a72fcca58-8a06c60065fso865172b3a.1 for ; Mon, 19 Oct 2026 11:34:30 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792434870; x=1793039670; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=r5vxbbBiG3MDcZW0+nEsjLP6+j2Jhona/nfMZvKXZYE=; b=OPih8tUj9p+CD/dTWQJB6D6OX+WJplyezyWAwSFZ378o4eYPNU55Pp9KP2xrDN5if5 mTFPU+mO8GcGLSD6hUdTUrBewJZUEip5+iGvCGGNyv4cUn2gsEEGYorP01x6Zy8liJKU xUva0nAF8uMLpcMpDwtkyHOH4Gg+awZjKl/whpY3VM1aBdhASNhHNF1NI3OCnrR/zn7j oopvY7k7I59OkQu+G42G/AyvCeluljkGFhlTKF4DC2z06aQPmPakWNfMiKXOqh6YFrd2 AsCPMeb4mPp84+Xw6XYdOyqd3vngXizCdm36gn1lEqrXP/KcFLyz7ZqwBieSJUbgzMIo T6JQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792434870; x=1793039670; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=r5vxbbBiG3MDcZW0+nEsjLP6+j2Jhona/nfMZvKXZYE=; b=g0SG58HCv4Qq8sMAp7Q/NHzNwPXI9BOIkSOLTHbvvGPrqK5Z9KXOt9DIMU8Vxt1Xue qOKAH/gyvBBTAgMh0BM6hyEuUfsJqpNyVHuyrHdD0ucVCo1Maevm9KzjLFmfX5C+hL0E sLhQnEWH+De1hfuu/mIaV/fviU7R03imEqxaOx6u/wdoUtKeeaZF4M38DU3sYMAhzINx CPTd5JusEfoZEC8NdV7W7AaYCZDzh837j+ann4R0dHR1YvxouDS/K7T+ycuK/tskqoQ+ +Twp1rnmH7/hi8tbUhzVieUljEgeGpCfBgRB9Nn1tUaq7eaC80EjvwOJrMl4IpYseN9v KXbw== X-Gm-Message-State: AFq9FYJ/jGfvjW+DCnhKAUiB3NXxalSH8OXurc78EW+oF+eIvSY8k7kh wTEU+ZzDNiDU0Q3xFZfFfvPxi2u/0NBgxsyCDF839o1i5Ttp98hav84hPM+Qeg== X-Gm-Gg: AYBFou1W8yFIcx6cBp+Wz5pe/pTOAfB3z8zjDCZ/zPWabdBAqxDwSy8YaprfuOUTVf0 DRxACQSi75ZmDtxp436x+L9nqCP8D3aHsGrQ+ty1hwOQYoLUX8mzDBhZm4on8LNI8Ck3LJrKU+D i/eXzEz4A3fuPvsg1Mi3TNRC0leFUhWjhQaZ3q3SJyoeV46nZyek/UjIK2jkiiI9T0/tdY8Qnfw F5dPzxNS+JLTWrJsmMbIHVj9Ha3s2413xz+DWGhqjB0XqV5KRYcN9Zr+HkRpFWdcmn+R691kwfB LMAGO+MKtPn9SHhP3Ohp0AtR+lf3oJYrKIQdS7dKaAX+gfY9aLgpwybzM6kHneGGU9SdC09kSrf WJcIYf6OlOkjxB1DQsLPUpa9i10pV0W2QAC2kQeWZFJ5djmlIT93xjTP8TR738oBFI2SHEGLgzS yJ7zgLPMRzN1tchZJPwdpWhaVOhfVErLzVb6LCpGn/AFGg5vw/HStdVyf6QJ4M0DabApXKbyrj4 uI6SQlY0g1fnu4zAeeLcPGGXqZ20Lnj0c7J2BBhlCTy25SVzw== X-Received: by 2002:a05:6a21:2c11:b0:3e0:c346:734c with SMTP id adf61e73a8af0-3e2260e58cbmr6017975637.89.1792434870205; Mon, 19 Oct 2026 11:34:30 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-cd6549fb556sm4632865a12.22.2026.10.19.11.34.26 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 19 Oct 2026 11:34:27 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-multimedia][PATCH 7/20] pjproject: patch CVE-2026-57164 Date: Tue, 20 Oct 2026 07:33:53 +1300 Message-ID: <20261019183407.1037972-7-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261019183407.1037972-1-ankur.tyagi85@gmail.com> References: <20261019183407.1037972-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Mon, 19 Oct 2026 18:34:38 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131133 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-57164 Signed-off-by: Ankur Tyagi (cherry picked from commit 274e935099c034192a6815a660b6e8ce0ea9ab92) --- .../pjproject/pjproject/CVE-2026-57164.patch | 66 +++++++++++++++++++ .../pjproject/pjproject_2.17.bb | 1 + 2 files changed, 67 insertions(+) create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57164.patch diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57164.patch b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57164.patch new file mode 100644 index 0000000000..0686d681c3 --- /dev/null +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57164.patch @@ -0,0 +1,66 @@ +From 1160ff3c15cfa79f50d4bc6ce8066854f656066c Mon Sep 17 00:00:00 2001 +From: Nanang Izzuddin +Date: Wed, 17 Jun 2026 15:46:48 +0700 +Subject: [PATCH] Merge commit from fork + +http_on_data_read() in http_client.c grew the response buffer by a +single doubling, which is insufficient when the server sends a body +larger than twice the (attacker-supplied) Content-Length used for the +initial allocation. Loop the doubling until the buffer fits, with a +floor for the size==0 case to avoid an infinite loop. + +Co-Authored-By Claude Code + +(cherry picked from commit 8d5956afab2ede95ddb199078dc19a8ac0114f3d) + +CVE: CVE-2026-57164 +Upstream-Status: Backport [https://github.com/pjsip/pjproject/commit/8d5956afab2ede95ddb199078dc19a8ac0114f3d] + +Signed-off-by: Ankur Tyagi +--- + pjlib-util/src/pjlib-util/http_client.c | 27 ++++++++++++++++++------- + 1 file changed, 20 insertions(+), 7 deletions(-) + +diff --git a/pjlib-util/src/pjlib-util/http_client.c b/pjlib-util/src/pjlib-util/http_client.c +index bd441acb9..d2771d240 100644 +--- a/pjlib-util/src/pjlib-util/http_client.c ++++ b/pjlib-util/src/pjlib-util/http_client.c +@@ -432,18 +432,31 @@ static pj_bool_t http_on_data_read(pj_activesock_t *asock, + hreq->response.size); + } + +- /* If the size of data received exceeds its current size, +- * grow the buffer by a factor of 2. ++ /* If the size of data received exceeds its current size, grow the ++ * buffer by a factor of 2 repeatedly, until it can actually hold ++ * everything received so far. A single doubling is not sufficient ++ * when the server delivers a body chunk larger than twice the ++ * (possibly undersized) Content-Length used for the initial ++ * allocation, which would otherwise overflow the buffer in the ++ * pj_memcpy() below. + */ +- if (hreq->tcp_state.current_read_size + size > +- hreq->response.size) ++ if (hreq->tcp_state.current_read_size + size > ++ hreq->response.size) + { + void *olddata = hreq->response.data; ++ pj_size_t new_size = hreq->response.size; + +- hreq->response.data = pj_pool_alloc(hreq->pool, +- hreq->response.size << 1); ++ /* Guard against size==0 (Content-Length: 0 with a body), which ++ * would make the doubling loop below spin forever. ++ */ ++ if (new_size == 0) ++ new_size = INITIAL_DATA_BUF_SIZE; ++ while (hreq->tcp_state.current_read_size + size > new_size) ++ new_size <<= 1; ++ ++ hreq->response.data = pj_pool_alloc(hreq->pool, new_size); + pj_memcpy(hreq->response.data, olddata, hreq->response.size); +- hreq->response.size <<= 1; ++ hreq->response.size = new_size; + } + + /* Append the response data. */ diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb index de8c847271..8e0b358ffe 100644 --- a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb @@ -18,6 +18,7 @@ SRC_URI = "git://github.com/pjsip/pjproject.git;protocol=https;branch=master;tag file://CVE-2026-57161.patch \ file://CVE-2026-57162.patch \ file://CVE-2026-57163.patch \ + file://CVE-2026-57164.patch \ " SRCREV = "5a457451fa2712ba18e12b01738e8ff3af2b26fd" From patchwork Mon Oct 19 18:33:54 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101311 Received: from mail-pf1-f169.google.com (mail-pf1-f169.google.com [209.85.210.169]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.1758.1792434873437056328 for ; Mon, 19 Oct 2026 11:34:33 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=N2OmSBTJ; spf=pass (domain: gmail.com, ip: 209.85.210.169, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pf1-f169.google.com with SMTP id d2e1a72fcca58-8a058315c79so798761b3a.3 for ; Mon, 19 Oct 2026 11:34:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792434873; x=1793039673; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=ymQxmOa1KTC+NSLDSSKdPfIWTdZ1eg3Jf8xxT4Z1ciY=; b=N2OmSBTJ30Z9AnRHGGSWBHVs12M1InEc3KqFYOq24ijSM6rtRxM6PRU6B5vLLzcvLP 1Js0erQD49k4FbqbQydJnWk8oixLQ3oxTE32vJiunhylgPCjUgBZ9OPubzOBa6nTQ9pT d0QzW/4kXP5L2GeH30oBBHNnr2e808G3OlLdU149g9eEoWofPIj2aKc7wrRrDMpeHVoY pE2FDLZiC6TfA8SIew/0+7gBotMHPRmX9TpS4vNNc51LMin7SPhnFA8MHQ5EHw/I1Z0K I3ffLpmNlUyGzDFfx47fb7Ifrt+8bhQN4tDMcKSSvE/g+Yhs6RGwNjxaz7bo2UKNx1Y/ 45ug== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792434873; x=1793039673; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=ymQxmOa1KTC+NSLDSSKdPfIWTdZ1eg3Jf8xxT4Z1ciY=; b=vuxnfevwDmvz/9BzaoxIxO5X5DtXA+YN8h6MxXTdmnhsGQwOOEksVzgWniPJdJKPgU Wb725rY5Eg0h9tdevBWlykA4Uy4R6N5gCfujmbP5aNPLo8kEKaYqVw1rjWze6tzP0f+8 W9LBaYEMuohZ/1DQbKZgcOPRp6x+5bGnlXtbIbFjTwSGcNx5ynLHYrkQZCTLyEdMqeXN WmCMpDkVyLaknB6/2azEvsSNmDwdQTUCLGWrKsC4xL2HB7sCGR/FZbvFLveMae+OONKg Z+yy8RgUBKxpg6Ja9faYIXG3nXTABmoB71NLvZjYl5kVtGOQ9CtM6tCdVIPLhzQJWTUG BqjA== X-Gm-Message-State: AFq9FYLEnaST7Ho/ymLerWFW5eypRIikJoCb/79RarfNafbwzY/T5Ez6 MCb0fKOpvcWYRFJgV8ls7Efcp0yp6kgA7HIkROypQyN5bQ++ZXUCfdxI6+omIg== X-Gm-Gg: AYBFou3o37Mkua+5XKdaKPoudFiqOScpPE/NPAkJfFRF4vTVC2JZV/6dBP4BzNLUdcu PI+DAJFMKcu4oEHFXUMdTatgJr1ZmP3KA//tSoiNdLRCs/V4j1F4OWjPyO3HDxbebD62oEFu4dw iRUEMdZAFJX6M5mnfemsNkngxT9jWRWQuUbuAwaoFGVuBoF+HfAlptbcvQRLjqNswllqmR6Euf8 Il81i2VhmyyqWe0Zz1gxZQ+ryZxjIBWnRoPr3nW0BOJNEROGV3HLo3dsqYn9sEiQPD8Ym/A1/Kx FT+52OmWH+aLbab/1H/POAXr5HuAcX82AREsIZq2ovUk+eWGmLpCDAeyz+zIfLlowB0oxTcfQrx msg2p2CQoRoDB00BQODY67yGinnbNuA48dkMkcBhRoAVhWFWR8yfhOmZ+D+A1zC1I0tFB7eAC6W pSwfGBJUOF4E300h/BILLOobbypqyUfnOYGWyXWa8RDu2nbQgCBCxtv4XGDxMBpSrvqbvksvYNa 5xR72a4EGXAphfp8+qzRxq4T+L24H/5l9gtrVM= X-Received: by 2002:a05:6a21:490d:b0:3e1:3178:8d63 with SMTP id adf61e73a8af0-3e26765e218mr758011637.44.1792434872771; Mon, 19 Oct 2026 11:34:32 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-cd6549fb556sm4632865a12.22.2026.10.19.11.34.30 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 19 Oct 2026 11:34:32 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-multimedia][PATCH 8/20] pjproject: patch CVE-2026-57165 Date: Tue, 20 Oct 2026 07:33:54 +1300 Message-ID: <20261019183407.1037972-8-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261019183407.1037972-1-ankur.tyagi85@gmail.com> References: <20261019183407.1037972-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Mon, 19 Oct 2026 18:34:38 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131134 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-57165 Signed-off-by: Ankur Tyagi (cherry picked from commit aac29142ede95bcf48ecf16e19671314feb1590e) --- .../pjproject/pjproject/CVE-2026-57165.patch | 85 +++++++++++++++++++ .../pjproject/pjproject_2.17.bb | 1 + 2 files changed, 86 insertions(+) create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57165.patch diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57165.patch b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57165.patch new file mode 100644 index 0000000000..e2d62b0eef --- /dev/null +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57165.patch @@ -0,0 +1,85 @@ +From 5776ee452296d5277d71e2bb011709adec80a533 Mon Sep 17 00:00:00 2001 +From: Nanang Izzuddin +Date: Wed, 17 Jun 2026 15:47:29 +0700 +Subject: [PATCH] Merge commit from fork + +handle_up_down() in cli_telnet.c accumulated cur_pos + 2*rcmd->len + +history->slen bytes into a fixed PJ_CLI_MAX_CMDBUF stack buffer with no +bound check. Size the buffer for the worst case, clamp each term to +PJ_CLI_MAX_CMDBUF, and replace the trailing unchecked pj_strcat with a +bounded pj_memcpy. + +Co-Authored-By Claude Code + +(cherry picked from commit 628b71638465bacf66e767959e6acbab822eccd6) + +CVE: CVE-2026-57165 +Upstream-Status: Backport [https://github.com/pjsip/pjproject/commit/628b71638465bacf66e767959e6acbab822eccd6] + +Signed-off-by: Ankur Tyagi +--- + pjlib-util/src/pjlib-util/cli_telnet.c | 33 ++++++++++++++++++++------ + 1 file changed, 26 insertions(+), 7 deletions(-) + +diff --git a/pjlib-util/src/pjlib-util/cli_telnet.c b/pjlib-util/src/pjlib-util/cli_telnet.c +index 150727bb5..0a2954bd4 100644 +--- a/pjlib-util/src/pjlib-util/cli_telnet.c ++++ b/pjlib-util/src/pjlib-util/cli_telnet.c +@@ -1141,7 +1141,14 @@ static pj_bool_t handle_up_down(cli_telnet_sess *sess, pj_bool_t is_up) + history = get_prev_history(sess, is_up); + if (history) { + pj_str_t send_data; +- char str[PJ_CLI_MAX_CMDBUF]; ++ /* The redraw sequence can accumulate up to ++ * cur_pos + 2 * rcmd->len + history->slen ++ * bytes, each term bounded by PJ_CLI_MAX_CMDBUF, so size the ++ * local buffer for the worst case and clamp each term below. ++ */ ++ char str[PJ_CLI_MAX_CMDBUF * 4]; ++ unsigned cur_pos, buf_len; ++ pj_size_t hist_len; + enum { + MOVE_CURSOR_LEFT = 0x08, + CLEAR_CHAR = 0x20 +@@ -1149,15 +1156,24 @@ static pj_bool_t handle_up_down(cli_telnet_sess *sess, pj_bool_t is_up) + send_data.ptr = str; + send_data.slen = 0; + ++ cur_pos = sess->rcmd->cur_pos; ++ buf_len = sess->rcmd->len; ++ hist_len = history->slen; ++ if (cur_pos > PJ_CLI_MAX_CMDBUF) ++ cur_pos = PJ_CLI_MAX_CMDBUF; ++ if (buf_len > PJ_CLI_MAX_CMDBUF) ++ buf_len = PJ_CLI_MAX_CMDBUF; ++ if (hist_len > PJ_CLI_MAX_CMDBUF) ++ hist_len = PJ_CLI_MAX_CMDBUF; ++ + /* Move cursor position to the beginning of line */ +- if (sess->rcmd->cur_pos > 0) { +- pj_memset(send_data.ptr, MOVE_CURSOR_LEFT, sess->rcmd->cur_pos); +- send_data.slen = sess->rcmd->cur_pos; ++ if (cur_pos > 0) { ++ pj_memset(send_data.ptr, MOVE_CURSOR_LEFT, cur_pos); ++ send_data.slen = cur_pos; + } + +- if (sess->rcmd->len > (unsigned)history->slen) { ++ if (buf_len > (unsigned)hist_len) { + /* Clear the command currently shown*/ +- unsigned buf_len = sess->rcmd->len; + pj_memset(&send_data.ptr[send_data.slen], CLEAR_CHAR, buf_len); + send_data.slen += buf_len; + +@@ -1167,7 +1183,10 @@ static pj_bool_t handle_up_down(cli_telnet_sess *sess, pj_bool_t is_up) + send_data.slen += buf_len; + } + /* Send data */ +- pj_strcat(&send_data, history); ++ if (hist_len > 0) { ++ pj_memcpy(&send_data.ptr[send_data.slen], history->ptr, hist_len); ++ send_data.slen += hist_len; ++ } + telnet_sess_send(sess, &send_data); + pj_ansi_strxcpy2((char*)sess->rcmd->rbuf, history, + sizeof(sess->rcmd->rbuf)); diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb index 8e0b358ffe..e7cae469ed 100644 --- a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb @@ -19,6 +19,7 @@ SRC_URI = "git://github.com/pjsip/pjproject.git;protocol=https;branch=master;tag file://CVE-2026-57162.patch \ file://CVE-2026-57163.patch \ file://CVE-2026-57164.patch \ + file://CVE-2026-57165.patch \ " SRCREV = "5a457451fa2712ba18e12b01738e8ff3af2b26fd" From patchwork Mon Oct 19 18:33:55 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101312 Received: from mail-pg1-f181.google.com (mail-pg1-f181.google.com [209.85.215.181]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.1759.1792434875995364574 for ; Mon, 19 Oct 2026 11:34:36 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=DLAyezAL; spf=pass (domain: gmail.com, ip: 209.85.215.181, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pg1-f181.google.com with SMTP id 41be03b00d2f7-cd6028ff33fso951752a12.0 for ; Mon, 19 Oct 2026 11:34:35 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792434875; x=1793039675; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=Y0dkqA0/PYdSM2VvKCu//+slmYHgd1LOcXNVKrxQopk=; b=DLAyezALcP1w5pMY0UyFhgpFhO1P1PIeW/tGtYLgVwtsQGur+vLQ0beNTb06Ml/YkZ 32GUCdo9dRUXoI+eVBgyGuBz9zDiELIOQn/k4PDoWlNNkRq36TiQiKMjEo1mlBoGRtfm O/tJ1NxtD46hITvmXRP208iRnk3zUNo0PZsat5tI0xrue7m7xdjSc9J7A+CZwvPtGhSK Pjq97gLSCz7S0xJIdr5IsfK3szbfmhieiAhp9m3RgBANv6SODGce3m/BD4Cp/kfBWmjI w9jZHrdzVJ4l+M4hMnIlYvxKZ9tTQAL+vuNXu80zmPS5+S9t/r2ffbdqcamHECp0dCEy xk0A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792434875; x=1793039675; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=Y0dkqA0/PYdSM2VvKCu//+slmYHgd1LOcXNVKrxQopk=; b=VWzfDZ7uv0UK37UGi4Z/OG9FCId8zB9D21/zpsMGTIUfY24iTzBPA3o4kqMf3knMv3 Yqx5U0GkPaaxPaluHkm+O8JSJYjRLNj2PHGCXZvY7Zj9bydek5pW6g1fBl8wtTT4LWfu ENgjb5rEJ/lmJdD0LIfY13dqHDhPlQhdosdFFmfNcdmRaFBjWTrXIqq15r5OrmZvD63Z cQpmvQwD3E9K8lCMR7wAbrcueuVagMUiUCFbv5He0z4egBKK5dp6uzeff4LUH5g1kZjq sYEHzpjaAjt8Y0EEhhhkhsFciOVhW8WsqDSwANQd3t58lm+E+ur7kM0q/TIbuCJt2y3D T7IQ== X-Gm-Message-State: AFq9FYJtNwDGDABCZcADsd9VFsiqOgjt4h+Th2a046rq7bGeWB2kFrT0 uWCMRSss9y72bUG2Lr8UK9FtrTybfT4EeOnrNioOAdJTS+eLec6b8xGzGyDxWg== X-Gm-Gg: AYBFou2LhhcMaxwpxC7XvmgVQvfCV59RNg1Hwl4Lp3htNjWXUpcR7DrW9Y6DZTCJsR3 EjdSPqMwhYlAQfIlRQYxIbJE8Ye9MzOzMa10B5ELvtp2ytmV/7r90JJXK58NyGrBbpTiSV88eLb bsI99LJz1JOS/2CaNTabRThNfr2X6JIT2ZJpo9IvxI3ltgbDesV5dW/zczwnt5twglZCIH8XA9u fHfVHBR2mtZKbPdHoL6iCft6dT8wXk7sWNW33pe4zEZx5zmUXeXBCdRyBoRdfw5/Rl/AkJ2JlPh k9cuLUmuQpVo7pz2DFg9WOMGBLiRS765C0eNZf7RlMiUMnrCRUtBckYi96Pq5NzZefbAHzKe7H6 p9WL56rR6YVeoHBC7fwq7k+V5xYfYZpFclX7OnhmQk1kqAoEU/oUlnzWUUNhLDe2KTGDq0vFeDf iPS0/OliA2DIFCz0RfmyGfI20JrYyGJVnNcLhW7ewekdxjCERtSerqisBA9ad7XUnU5rVt4iBkq PNeEdMglaulwVeqAHfm/gvN3V8ptq5caTsZ9JICr2DzuYCmeQ== X-Received: by 2002:a05:6a21:3284:b0:3e0:de4c:71f0 with SMTP id adf61e73a8af0-3e225f7deafmr6842377637.31.1792434875183; Mon, 19 Oct 2026 11:34:35 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-cd6549fb556sm4632865a12.22.2026.10.19.11.34.33 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 19 Oct 2026 11:34:34 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-multimedia][PATCH 9/20] pjproject: patch CVE-2026-57166 Date: Tue, 20 Oct 2026 07:33:55 +1300 Message-ID: <20261019183407.1037972-9-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261019183407.1037972-1-ankur.tyagi85@gmail.com> References: <20261019183407.1037972-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Mon, 19 Oct 2026 18:34:38 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131135 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-57166 Signed-off-by: Ankur Tyagi (cherry picked from commit 59a6a134d6ff923bf9ee081a62755cdbde2a88c0) --- .../pjproject/pjproject/CVE-2026-57166.patch | 228 ++++++++++++++++++ .../pjproject/pjproject_2.17.bb | 1 + 2 files changed, 229 insertions(+) create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57166.patch diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57166.patch b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57166.patch new file mode 100644 index 0000000000..8311d4c36d --- /dev/null +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57166.patch @@ -0,0 +1,228 @@ +From d0b42b902bb6ca8a0a1393799db487642d3bf8ae Mon Sep 17 00:00:00 2001 +From: Nanang Izzuddin +Date: Wed, 17 Jun 2026 15:55:53 +0700 +Subject: [PATCH] Merge commit from fork + +* Fix pre-auth stack overflow formatting telnet CLI error indicator + +send_err_arg() in cli_telnet.c rendered the error caret into a fixed +256-byte stack buffer using unchecked pj_strcat2; info->err_pos is +bounded only by PJ_CLI_MAX_CMDBUF, so a long command line overflowed +the buffer. Stream the spaces in bounded chunks via telnet_sess_send2, +clamp the caret offset to PJ_CLI_MAX_CMDBUF, and send the message, +prompt and echoed command separately, removing the stack buffer. + +Co-Authored-By Claude Code + +* Apply the same overflow fix to send_ambi_arg() + +Per review, send_ambi_arg() has the same issue as send_err_arg(): it +renders an attacker-influenced number of caret spaces and appends the +last command into a fixed 1028-byte stack buffer with unchecked +pj_strcat2. info->err_pos and sess->rcmd->rbuf are bounded only by +PJ_CLI_MAX_CMDBUF, so a long ambiguous command line could overflow it. + +Stream the caret offset in bounded chunks (clamped to PJ_CLI_MAX_CMDBUF) +and stream the clamped last command separately, mirroring the +send_err_arg() fix, instead of writing them into the fixed buffer. The +shared SPACES constant is hoisted to file scope. + +Co-Authored-By Claude Code + +* Bound completion append in handle_tab() + +handle_tab() appended the matched command name into the fixed-size +sess->rcmd->rbuf at offset len (the current command length) without +checking that len + name length fits the buffer. len is bounded by the +receive path, but the completion suffix is added on top, so a long +completable command line could write past rbuf and its NUL terminator. + +Clamp the appended length to the space remaining in rbuf, leaving room +for the terminator. Found while auditing the telnet CLI for the same +fixed-buffer overflow pattern as send_err_arg()/send_ambi_arg(). + +Co-Authored-By Claude Code + +(cherry picked from commit 4472a31d77a7506ff175dad5abef490f4e31bed1) + +CVE: CVE-2026-57166 +Upstream-Status: Backport [https://github.com/pjsip/pjproject/commit/4472a31d77a7506ff175dad5abef490f4e31bed1] + +Signed-off-by: Ankur Tyagi +--- + pjlib-util/src/pjlib-util/cli_telnet.c | 116 ++++++++++++++++++------- + 1 file changed, 84 insertions(+), 32 deletions(-) + +diff --git a/pjlib-util/src/pjlib-util/cli_telnet.c b/pjlib-util/src/pjlib-util/cli_telnet.c +index 0a2954bd4..67898fdd8 100644 +--- a/pjlib-util/src/pjlib-util/cli_telnet.c ++++ b/pjlib-util/src/pjlib-util/cli_telnet.c +@@ -680,6 +680,13 @@ static void send_prompt_str(cli_telnet_sess *sess) + telnet_sess_send(sess, &send_data); + } + ++/* Buffer of spaces, used to stream the caret offset in bounded chunks ++ * instead of writing an attacker-influenced number of spaces into a ++ * fixed-size stack buffer. Shared by send_err_arg() and send_ambi_arg(). ++ */ ++static const unsigned char SPACES[64] = ++ " "; ++ + /* + * This method is used to send error message to client, including + * the error position of the source command. +@@ -690,32 +697,45 @@ static void send_err_arg(cli_telnet_sess *sess, + pj_bool_t with_return, + pj_bool_t with_last_cmd) + { +- pj_str_t send_data; +- char data_str[256]; +- pj_size_t len; +- unsigned i; ++ pj_size_t len, remaining; + cli_telnet_fe *fe = (cli_telnet_fe *)sess->base.fe; + +- send_data.ptr = data_str; +- send_data.slen = 0; +- + if (with_return) +- pj_strcat2(&send_data, "\r\n"); ++ telnet_sess_send2(sess, (const unsigned char*)"\r\n", 2); + ++ /* Compute the caret offset. info->err_pos is derived from ++ * attacker-supplied input (pj_cli_sess_parse) and is bounded only by ++ * PJ_CLI_MAX_CMDBUF, so clamp it before emitting spaces. Otherwise a ++ * ~500-byte command line would overflow the fixed-size stack buffer ++ * this function previously used. ++ */ + len = fe->cfg.prompt_str.slen + info->err_pos; +- +- /* Set the error pointer mark */ +- for (i=0;i PJ_CLI_MAX_CMDBUF) ++ len = PJ_CLI_MAX_CMDBUF; ++ ++ remaining = len; ++ while (remaining > 0) { ++ pj_size_t chunk = (remaining > sizeof(SPACES)) ? sizeof(SPACES) ++ : remaining; ++ telnet_sess_send2(sess, SPACES, (int)chunk); ++ remaining -= chunk; + } +- pj_strcat2(&send_data, "^"); +- pj_strcat2(&send_data, "\r\n"); +- pj_strcat(&send_data, msg); +- pj_strcat(&send_data, &fe->cfg.prompt_str); +- if (with_last_cmd) +- pj_strcat2(&send_data, (char *)sess->rcmd->rbuf); + +- telnet_sess_send(sess, &send_data); ++ telnet_sess_send2(sess, (const unsigned char*)"^\r\n", 3); ++ ++ if (msg && msg->slen > 0) ++ telnet_sess_send(sess, msg); ++ if (fe->cfg.prompt_str.slen > 0) ++ telnet_sess_send(sess, &fe->cfg.prompt_str); ++ if (with_last_cmd) { ++ pj_str_t last; ++ last.ptr = (char *)sess->rcmd->rbuf; ++ last.slen = (pj_ssize_t)pj_ansi_strlen((const char *)sess->rcmd->rbuf); ++ if (last.slen > PJ_CLI_MAX_CMDBUF) ++ last.slen = PJ_CLI_MAX_CMDBUF; ++ if (last.slen > 0) ++ telnet_sess_send(sess, &last); ++ } + } + + static void send_inv_arg(cli_telnet_sess *sess, +@@ -765,7 +785,7 @@ static void send_ambi_arg(cli_telnet_sess *sess, + pj_bool_t with_last_cmd) + { + unsigned i; +- pj_size_t len; ++ pj_size_t len, remaining; + pj_str_t send_data; + char data[1028]; + cli_telnet_fe *fe = (cli_telnet_fe *)sess->base.fe; +@@ -779,14 +799,25 @@ static void send_ambi_arg(cli_telnet_sess *sess, + send_data.slen = 0; + + if (with_return) +- pj_strcat2(&send_data, "\r\n"); ++ telnet_sess_send2(sess, (const unsigned char*)"\r\n", 2); + ++ /* Compute and clamp the caret offset, then stream the spaces, like ++ * send_err_arg(). info->err_pos is attacker-bounded only by ++ * PJ_CLI_MAX_CMDBUF, so it must not drive writes into data[]. ++ */ + len = fe->cfg.prompt_str.slen + info->err_pos; +- +- for (i=0;i PJ_CLI_MAX_CMDBUF) ++ len = PJ_CLI_MAX_CMDBUF; ++ ++ remaining = len; ++ while (remaining > 0) { ++ pj_size_t chunk = (remaining > sizeof(SPACES)) ? sizeof(SPACES) ++ : remaining; ++ telnet_sess_send2(sess, SPACES, (int)chunk); ++ remaining -= chunk; + } +- pj_strcat2(&send_data, "^"); ++ telnet_sess_send2(sess, (const unsigned char*)"^", 1); ++ + /* Get the max length of the command name */ + for (i=0;ihint_cnt;++i) { + if (hint[i].type.slen > 0) { +@@ -874,10 +905,21 @@ static void send_ambi_arg(cli_telnet_sess *sess, + } + pj_strcat2(&send_data, "\r\n"); + pj_strcat(&send_data, &fe->cfg.prompt_str); +- if (with_last_cmd) +- pj_strcat2(&send_data, (char *)sess->rcmd->rbuf); +- + telnet_sess_send(sess, &send_data); ++ ++ /* Stream the last command separately with a clamp; sess->rcmd->rbuf ++ * is attacker-bounded only by PJ_CLI_MAX_CMDBUF, so appending it into ++ * data[] could overflow the fixed-size buffer. ++ */ ++ if (with_last_cmd) { ++ pj_str_t last; ++ last.ptr = (char *)sess->rcmd->rbuf; ++ last.slen = (pj_ssize_t)pj_ansi_strlen((const char *)sess->rcmd->rbuf); ++ if (last.slen > PJ_CLI_MAX_CMDBUF) ++ last.slen = PJ_CLI_MAX_CMDBUF; ++ if (last.slen > 0) ++ telnet_sess_send(sess, &last); ++ } + } + + /* +@@ -1035,10 +1077,20 @@ static pj_bool_t handle_tab(cli_telnet_sess *sess) + } + send_comp_arg(sess, &info); + +- pj_memcpy(&sess->rcmd->rbuf[len], info.hint[0].name.ptr, +- info.hint[0].name.slen); +- +- len += (unsigned)info.hint[0].name.slen; ++ /* Append the matched name into the fixed-size rbuf. len is ++ * attacker-influenced (the typed command length), so clamp ++ * the copy to leave room for the NUL terminator and avoid ++ * overflowing rbuf. ++ */ ++ if (len < sizeof(sess->rcmd->rbuf) - 1) { ++ pj_size_t avail = sizeof(sess->rcmd->rbuf) - 1 - len; ++ pj_size_t cplen = (pj_size_t)info.hint[0].name.slen; ++ if (cplen > avail) ++ cplen = avail; ++ pj_memcpy(&sess->rcmd->rbuf[len], ++ info.hint[0].name.ptr, cplen); ++ len += (unsigned)cplen; ++ } + sess->rcmd->rbuf[len] = 0; + } + } else { diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb index e7cae469ed..9d1e6af253 100644 --- a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb @@ -20,6 +20,7 @@ SRC_URI = "git://github.com/pjsip/pjproject.git;protocol=https;branch=master;tag file://CVE-2026-57163.patch \ file://CVE-2026-57164.patch \ file://CVE-2026-57165.patch \ + file://CVE-2026-57166.patch \ " SRCREV = "5a457451fa2712ba18e12b01738e8ff3af2b26fd" From patchwork Mon Oct 19 18:33:56 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101314 Received: from mail-pg1-f180.google.com (mail-pg1-f180.google.com [209.85.215.180]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.1753.1792434878468957009 for ; Mon, 19 Oct 2026 11:34:38 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=aDkcOwZJ; spf=pass (domain: gmail.com, ip: 209.85.215.180, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pg1-f180.google.com with SMTP id 41be03b00d2f7-cc1cf287ef8so1559856a12.3 for ; Mon, 19 Oct 2026 11:34:38 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792434878; x=1793039678; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=uvGCFxApCXtnKKMFftNNWF+BbhWNNdxvvkqXIiNog3E=; b=aDkcOwZJ0AocEYxrwAprF7yjJx+mkYJNEeaTzJ7ChCHElU995n7Qfb8l560RMCBHRu z+jW+QlsUUmrIuaDgzXmv5bmVifcjPXPn+x3fjNx37a3nc1OveEkucMvFS/qjcxetKq4 AbUEfpQN0mx8diVLVPvFntcoTxaIZpiL0KTkGb+QD1cQByZOBGkH/XITqnCfEhEhQnbU q4pTunpP9c2FRceUmb82ZahY7rbkgZcDmlzcfLa2rAcfxWhYjvtb5sVNPQ4YJtdrOdc6 k7FgmJJ/+Tq+hbNBRgTMBF8nuKzRgySAakNaO5ADJaCLrAHAa6609PNeIog/tZRhVnic E4JA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792434878; x=1793039678; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=uvGCFxApCXtnKKMFftNNWF+BbhWNNdxvvkqXIiNog3E=; b=PJggRI9JNdOf/6HWkPaNE4O5wrT4QpnlLc63AYn6V9TAYQfAlvGwn4mRgEpGrRt39Q IAYVAxFwCdCvLEpLIqijPgTZP/JpXDTSzM+ggfLLmKB47TWSIH34j+vVb+7Kr3ndz+0R 1QI+hDIQJ9JFSkkC15Wnoab6cBo84ITNX9sIxo81UGaffCqaGKQbNrxS7q1VbQkbIjUd ZxTyr35H1cUamb98FjPOtng2IzJery7x4MGPXH3MkPJ50avwYJNeMiJjemded+4UOXr7 xb+W9JU0ho2VT1xjY9d/6e3HPhCPYFf6gVwpOa2AOi4OQeook71DoRn4dzbRg/iksRn4 J7mg== X-Gm-Message-State: AFq9FYLnduwAziWEywjuGBCD6ftT23HJfcvE9KTQaLR+1lH1mUSP8cur DH4loLg4Im1NsrcoVUJM+RrUk7QAOpzuiPWK8GwPguLoTyzYBk3AYRA03uEcTw== X-Gm-Gg: AYBFou2EuYktJyccgc31zHqHL0WEWtDt8GNzUz+BYMFws1vSoAD8GntZqRsGdt2D9Fb kNhJkFAx6w0go05zlDwuTthYEcdm0VPhjkBtch8eAERTClCbgJ0ja+R31+4qZL4s2jLfZZCOttm yzLfyEVAj3uwSPx3n/Jj2mXSjSpZn0peUtPSXAxlxFdcJaaduIEVMitEFnGALvfud0EhztEk8h+ YmcxcnZTj4Z0PgAnrbrQWU/R/f1OQtssS0ewN3hucwJBRZpn6OPv5yawxdxiNVyDgy9Vx/mEMGX RDWCfcheZPJIsMqVOFygNSosh+1AEGLcEzmNwuv2PAePHjrUIDxajYvezqp0Fx8Rl6sQjr60PVi c+m6HtB7L4xGXcxbWeDDzjjAI3Z3i5JbG3qnt3P26LRZgqSSJYSNeR5yBixlMAGI+kJYdBo6GjH GOrSDQU0TjIfjLq7oHEwPrJX2U8iEPhEjUoFKAp2mH1SnxCluUx0D+9KWWPbnxuJmQ6ybwHiPzx lg3fPV2HOZ6k8VsTrVU72hNct4w2eL+aHRx78ngUHv8sZdIYd0sGY8ypn1S+kOFvwKluM495uSH f2OFPwu4ZfkmBCYqvbDF2rjXb2LIIa0= X-Received: by 2002:a17:90b:45:b0:3a4:b061:2765 with SMTP id 98e67ed59e1d1-3aceeb9272dmr7962195a91.15.1792434877751; Mon, 19 Oct 2026 11:34:37 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-cd6549fb556sm4632865a12.22.2026.10.19.11.34.35 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 19 Oct 2026 11:34:37 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-multimedia][PATCH 10/20] pjproject: patch CVE-2026-77396 Date: Tue, 20 Oct 2026 07:33:56 +1300 Message-ID: <20261019183407.1037972-10-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261019183407.1037972-1-ankur.tyagi85@gmail.com> References: <20261019183407.1037972-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Mon, 19 Oct 2026 18:34:48 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131136 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-77396 Signed-off-by: Ankur Tyagi (cherry picked from commit 2f70c43972c254d1a949dd347f81c412bda92446) --- .../pjproject/pjproject/CVE-2026-77396.patch | 74 +++++++++++++++++++ .../pjproject/pjproject_2.17.bb | 1 + 2 files changed, 75 insertions(+) create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-77396.patch diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-77396.patch b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-77396.patch new file mode 100644 index 0000000000..a02268bf11 --- /dev/null +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-77396.patch @@ -0,0 +1,74 @@ +From a927a964d462e9966864b7b2c432942b61038d6b Mon Sep 17 00:00:00 2001 +From: Nanang Izzuddin +Date: Mon, 13 Jul 2026 09:27:02 +0700 +Subject: [PATCH] Merge commit from fork + +The AVI player used a chunk length taken from the input file as the +number of bytes to read into the video frame buffer, whose capacity is +derived from the (also file-supplied) declared dimensions, without +reconciling the two. A crafted file could therefore cause a write past +the end of the buffer. The only guard was an assertion, which is a +no-op in release builds. + +Clamp the read to the frame buffer capacity, skip any remaining chunk +bytes so the file position stays aligned, and remove the reliance on +the assertion for validating a file-supplied length. + +Ref: GHSA-6p2p-5wf8-h5hr +(cherry picked from commit 7ecc6584969a923c4190b6912afbf5952b5a4b9f) + +CVE: CVE-2026-77396 +Upstream-Status: Backport [https://github.com/pjsip/pjproject/commit/7ecc6584969a923c4190b6912afbf5952b5a4b9f] +Signed-off-by: Ankur Tyagi +--- + pjmedia/src/pjmedia/avi_player.c | 34 +++++++++++++++++++++++++++++--- + 1 file changed, 31 insertions(+), 3 deletions(-) + +diff --git a/pjmedia/src/pjmedia/avi_player.c b/pjmedia/src/pjmedia/avi_player.c +index dc87b8a41..8b4b94d16 100644 +--- a/pjmedia/src/pjmedia/avi_player.c ++++ b/pjmedia/src/pjmedia/avi_player.c +@@ -1199,12 +1199,40 @@ static pj_status_t avi_get_frame(pjmedia_port *this_port, + goto on_error2; + fport->size_left -= size_to_read; + } else { +- pj_assert(frame->size >= ch.len); +- status = file_read3(fport->fd, frame->buf, ch.len, ++ pj_uint32_t read_len = ch.len; ++ ++ /* Clamp the read to the frame buffer capacity. A crafted ++ * file may declare a chunk larger than the buffer, whose ++ * size is derived from the (also file-supplied) video ++ * dimensions; never write past frame->buf (frame->size ++ * bytes). Do not rely on pj_assert() here, as it is a no-op ++ * in release builds. ++ */ ++ if (read_len > frame->size) { ++ PJ_LOG(3, (THIS_FILE, ++ "AVI video chunk (%u) exceeds frame buffer " ++ "(%u), truncating", ++ (unsigned)ch.len, (unsigned)frame->size)); ++ read_len = (pj_uint32_t)frame->size; ++ } ++ ++ status = file_read3(fport->fd, frame->buf, read_len, + 0, &size_read); + if (status != PJ_SUCCESS) + goto on_error2; +- frame->size = ch.len; ++ ++ /* Skip any remaining chunk bytes that did not fit, so the ++ * file position stays aligned to the next chunk. ++ */ ++ if (ch.len > read_len) { ++ status = pj_file_setpos(fport->fd, ++ (pj_off_t)ch.len - read_len, ++ PJ_SEEK_CUR); ++ if (status != PJ_SUCCESS) ++ goto on_error2; ++ } ++ ++ frame->size = read_len; + fport->size_left = 0; + } + diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb index 9d1e6af253..89763b3011 100644 --- a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb @@ -21,6 +21,7 @@ SRC_URI = "git://github.com/pjsip/pjproject.git;protocol=https;branch=master;tag file://CVE-2026-57164.patch \ file://CVE-2026-57165.patch \ file://CVE-2026-57166.patch \ + file://CVE-2026-77396.patch \ " SRCREV = "5a457451fa2712ba18e12b01738e8ff3af2b26fd" From patchwork Mon Oct 19 18:33:57 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101315 Received: from mail-pg1-f173.google.com (mail-pg1-f173.google.com [209.85.215.173]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.1761.1792434881335667863 for ; Mon, 19 Oct 2026 11:34:41 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=Ve2QIF6H; spf=pass (domain: gmail.com, ip: 209.85.215.173, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pg1-f173.google.com with SMTP id 41be03b00d2f7-ccce6d9abfeso1706284a12.1 for ; Mon, 19 Oct 2026 11:34:41 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792434881; x=1793039681; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=1yUn16UbxI6ZGujrzODHrRzJGBCFTF6ReH+awZ++GGU=; b=Ve2QIF6HqPhspprssQiIR1SsS3AhEtxGcwIwD+QM3BVCg7SsXjTEgu5uw9Rxqs+I0D DcH3eu47crHyxpgZnWvijyq/j9E9Rm+Haj23758tdMkhAGwFlC2K9UR2clxNJn2AsIEs AkfZArl2cylKnMY1lxY60YgJzuKCcTZowNTlpTDS3MrzonG0nwdHXObjP0PS2+Oe7EUl 42UAnnhQGKXIG+aegBMhkSP3Ge3o7VgR+/4VdbuoZYFPJ3DEGf0Wpw/CkHkL+/x08fno gg9DCDFCn9anN7T0/+pVzkRiQaxV5e/Bs5ojNBgjH/TNLT16LIUihqvh0McciLFpfif7 oKxg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792434881; x=1793039681; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=1yUn16UbxI6ZGujrzODHrRzJGBCFTF6ReH+awZ++GGU=; b=w1LIWqRqrNqy/VrSbEcpizV6mhebvq7HUumJMuSUxPfVUi31k17pcBeJCkKrkzKab5 YiTJjo+1H5M8k+YaMxu3Bx9ENrLi/HadFbYuCSNOROgpXEZXlspmaty0ldx+8OfNlV9Q y2wTbDPblyVBdJYgTZs7UNg56g1qtNNz/KWxvp1ac/kvab9EKddG4w6NzeEgWEYSBCmW PdVQOM57g8CVlXYSyED6ebh/hgp8mLHsYz6uL2YxsLoItp9PZq9ri8GyE0y9QSWY2jmx 28tIbcHBKkD9OsGXIdNB1+U++RnumkBUri5FvcxROySYBwjziiS5zjALbhkKoRpQZgor hFkw== X-Gm-Message-State: AFq9FYKlpSRQVFIMucMW5y32EddvF+Fm6z3rIshoQd37lKtwT9/nZmvH pf2d5IlzY/Tbdz0VVVFdrlMTla+C89EKmoBsyeMhaJkxwNNtbibK9nVSfzyZHA== X-Gm-Gg: AYBFou0kYtdX7k/WnFEsutUqONiMS997Myn7GzKyJlAC1qDzrONaHrdkG+uDWiApDy9 isbLSk2JcaxQ8SKkIrFwmW9mruRjEZJN1MKiwqxzXwQb6Y1iWne4KpYzbIwIuQXSSGZ6UOMsOxG 7dCuDMnBUTwP+YPM+vTzu2/OvuaxB07YLcWX6WZ4XhqalsJHzT9B598W+GCJsvUcwhXj8QFcZFp k1Sqi7cYfC6rYnibKRe6JxBOcPhIiulySPwbskDED8D9KjiJX1d7NFhDMF4mIUYz3Wthxbc4AH+ DsTQOWfqRbVLlMhhUl0b2jnYr4YGXtmTeyinuZqscwz7GVCCqNor04fTSv/dgO/8aHSld/J0JMH FNRzu7tcUSgfU2EmfNk6SY0npkgfk9N5HzcxjxfZZqxTve4YxEzEin6BeSQ4Obz4HzJSkICbj9i LTgMqoVSd6rF8mV4Ous4WRG+uStuzbe41htb6b+3X7hPxiWRiF9Y9jXgXFde8MPuOgrvEdjY0U5 lphPtF82RTcMTnNZibnN21+rDI12wOZIGemLq+qfZD8iBk/HA== X-Received: by 2002:a05:6a21:7318:b0:3cd:67e9:8565 with SMTP id adf61e73a8af0-3e225d72bd2mr7550163637.9.1792434880432; Mon, 19 Oct 2026 11:34:40 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-cd6549fb556sm4632865a12.22.2026.10.19.11.34.38 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 19 Oct 2026 11:34:39 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-multimedia][PATCH 11/20] pjproject: patch CVE-2026-84975 Date: Tue, 20 Oct 2026 07:33:57 +1300 Message-ID: <20261019183407.1037972-11-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261019183407.1037972-1-ankur.tyagi85@gmail.com> References: <20261019183407.1037972-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Mon, 19 Oct 2026 18:34:48 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131137 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-84975 Signed-off-by: Ankur Tyagi (cherry picked from commit a003f0bb5accff83fdd52df110360fae360a2272) --- .../pjproject/pjproject/CVE-2026-84975.patch | 87 +++++++++++++++++++ .../pjproject/pjproject_2.17.bb | 1 + 2 files changed, 88 insertions(+) create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-84975.patch diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-84975.patch b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-84975.patch new file mode 100644 index 0000000000..007096a6ff --- /dev/null +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-84975.patch @@ -0,0 +1,87 @@ +From f00f023079d0f9a74477da47056bfce76374b2a7 Mon Sep 17 00:00:00 2001 +From: sauwming +Date: Fri, 17 Jul 2026 16:46:33 +0800 +Subject: [PATCH] Merge commit from fork + +SubjectAltName entries from the OpenSSL and GnuTLS backends were copied +with pj_strdup2(), which re-derives the length with strlen() and thus +discards the length already returned by ASN1_STRING_to_UTF8() / +gnutls_x509_crt_get_subject_alt_name(). A DNS SAN such as +"victim.example\0.attacker" was therefore truncated to "victim.example". + +sip_transport_tls.c disables socket-layer verification and performs its +own length-aware identity match against subj_alt_name, so the truncated +prefix compared equal to the target host and a crafted certificate was +accepted for the prefix hostname (server identity / hostname verification +bypass; OpenSSL's own X509_check_host() rejects the same certificate). + +Copy the SAN using its explicit length via pj_strset()/pj_strdup_with_null() +so embedded NULs are preserved and no longer truncated. The mbedTLS backend +already copied with a length-bearing pj_str_t and was not affected. + +Co-authored-by: Claude Opus 4.8 +(cherry picked from commit 43d3bd77bb6833eab4c493503b8d564a754ddfdd) + +CVE: CVE-2026-84975 +Upstream-Status: Backport [https://github.com/pjsip/pjproject/commit/43d3bd77bb6833eab4c493503b8d564a754ddfdd] + +Signed-off-by: Ankur Tyagi +--- + pjlib/src/pj/ssl_sock_gtls.c | 17 +++++++++++++++-- + pjlib/src/pj/ssl_sock_ossl.c | 14 +++++++++++--- + 2 files changed, 26 insertions(+), 5 deletions(-) + +diff --git a/pjlib/src/pj/ssl_sock_gtls.c b/pjlib/src/pj/ssl_sock_gtls.c +index 68ceea3f3..ee977116b 100644 +--- a/pjlib/src/pj/ssl_sock_gtls.c ++++ b/pjlib/src/pj/ssl_sock_gtls.c +@@ -1072,9 +1072,22 @@ static void tls_cert_get_info(pj_pool_t *pool, pj_ssl_cert_info *ci, + + if (len && type != PJ_SSL_CERT_NAME_UNKNOWN) { + ci->subj_alt_name.entry[ci->subj_alt_name.cnt].type = type; +- pj_strdup2(pool, ++ if (type == PJ_SSL_CERT_NAME_IP) { ++ pj_strdup2(pool, + &ci->subj_alt_name.entry[ci->subj_alt_name.cnt].name, +- type == PJ_SSL_CERT_NAME_IP ? buf : out); ++ buf); ++ } else { ++ /* Preserve the reported length instead of using strlen(), ++ * so a DNS SAN containing an embedded NUL is not truncated ++ * at the NUL (which would allow a crafted cert to be ++ * accepted for the prefix hostname; identity bypass). ++ */ ++ pj_str_t tmp; ++ pj_strset(&tmp, out, len); ++ pj_strdup_with_null(pool, ++ &ci->subj_alt_name.entry[ci->subj_alt_name.cnt].name, ++ &tmp); ++ } + ci->subj_alt_name.cnt++; + } + } +diff --git a/pjlib/src/pj/ssl_sock_ossl.c b/pjlib/src/pj/ssl_sock_ossl.c +index 30b4eeaee..ceb6bca5b 100644 +--- a/pjlib/src/pj/ssl_sock_ossl.c ++++ b/pjlib/src/pj/ssl_sock_ossl.c +@@ -2270,9 +2270,17 @@ static void get_cert_info(pj_pool_t *pool, pj_ssl_cert_info *ci, X509 *x, + &ci->subj_alt_name.entry[ci->subj_alt_name.cnt].name, + buf); + } else { +- pj_strdup2(pool, +- &ci->subj_alt_name.entry[ci->subj_alt_name.cnt].name, +- (char*)p); ++ /* Preserve the explicit ASN.1 string length instead of ++ * treating the data as a NUL-terminated C string. A DNS ++ * SAN such as "host.example\0.attacker" would otherwise be ++ * truncated at the embedded NUL, letting a crafted cert be ++ * accepted for the prefix hostname (identity bypass). ++ */ ++ pj_str_t tmp; ++ pj_strset(&tmp, (char*)p, len); ++ pj_strdup_with_null(pool, ++ &ci->subj_alt_name.entry[ci->subj_alt_name.cnt].name, ++ &tmp); + OPENSSL_free(p); + } + ci->subj_alt_name.cnt++; diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb index 89763b3011..893559090f 100644 --- a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb @@ -22,6 +22,7 @@ SRC_URI = "git://github.com/pjsip/pjproject.git;protocol=https;branch=master;tag file://CVE-2026-57165.patch \ file://CVE-2026-57166.patch \ file://CVE-2026-77396.patch \ + file://CVE-2026-84975.patch \ " SRCREV = "5a457451fa2712ba18e12b01738e8ff3af2b26fd" From patchwork Mon Oct 19 18:33:58 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101316 Received: from mail-pj1-f48.google.com (mail-pj1-f48.google.com [209.85.216.48]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.1763.1792434883369004727 for ; Mon, 19 Oct 2026 11:34:43 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=Asntt6ib; spf=pass (domain: gmail.com, ip: 209.85.216.48, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pj1-f48.google.com with SMTP id 98e67ed59e1d1-38ec1402b05so1661346a91.2 for ; Mon, 19 Oct 2026 11:34:43 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792434883; x=1793039683; darn=lists.openembedded.org; h=content-transfer-encoding:content-type:mime-version:references :in-reply-to:message-id:date:subject:cc:to:from:from:to:cc:subject :date:message-id:reply-to:content-type; bh=wZlvKZBlAkKW6gQ0COzgfziM/PoWrcDGqeL7tyqwers=; b=Asntt6ibxG/fCCghZoZMndNvYRe82MLRSjAwcsXDNzzklkp/Ih62L2kNCSYNPlw8SO BkjKc6174WoYlzYIqjqGrHY7a9Q1/SYc8A2y6xrR03vQ1S2IA9mCfIlPD6+mwn0JY+6j Bd5IVYJpijoN8qVlTjNH3n/957EvyHGUm5vtd+NR5PQwt9PKfo0uuaeUHG1MG2JRXKTI Wnqg+h4qs5uJdzLxyxKcbALV1aSVbzHMw4L9wlBYQLp18o49KqdNd0aW48geHzd/0587 /E3v4LiR3RyyxyDepsfcUTKFhiR4UXhb6NeD4XInsQO8dX84rcJuFSPzcNqsc33FJFON l6Iw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792434883; x=1793039683; h=content-transfer-encoding:content-type:mime-version:references :in-reply-to:message-id:date:subject:cc:to:from:x-gm-gg :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=wZlvKZBlAkKW6gQ0COzgfziM/PoWrcDGqeL7tyqwers=; b=F62gf0hBqyj6V/1YcMjgkuSJSOuG/1MmW3fANyVfdZoJ54XnOMg6T8/eFrZ8vFnfi8 OVr5WMz7S2RQJMBI39SVn27RZa1ahO1AFhp7cmragcrgnKH0jIHGZznKBqlgdpjl79uw PHMtqHjMNokPNKrUmq+LP/1ZyZolOVRFvJa3+9Yr+8jdiAdwoRhpGGE5cD1SUl4iRgeo TQ/za9j+lgLuQ0aOOvSeNX4cJWG9fsWM1nXN3qO5I5vQkDbxJC6K1GwToy8+FC/j5+RD IIREmjvmxK3FpsdcA1oYh74ThIIMnEU2y7/4/Qu5cT5GTPd7cQjh1/ja/4dG9SfJiJKp D5wQ== X-Gm-Message-State: AFq9FYLfl9ejvsPCaMOylcn0lUpH99K5uA05NqybJwdyhIWRHpAxAP8R ybGbKfwgdq9HQqXh8sHFg8x8Cx6vK4NK3P5of8coAPijIOz5JNhoj/yDutxfvA== X-Gm-Gg: AYBFou0Yf6JctJoASDwTctxzmO2KXB3teJULY8EzRpTGlZtNCRueIVVkdCsBMU+M32P H+Jgoxct++kGKdIap0s2AE7c7emJ/oFFfo/U1KhPs6pJmLKaprYWVftAiBGNAOu4zD2/S60hYls YPLnTQJddlLCoSfGnBQKfdCcDpt0mo0zd7fPZgfCaBBKxeebn/24olRVddkuXAIlfWbuarBjDYu YoFuEIuPrtd91XK+MS1glXF7jiqxZX3eyAjJs0PCkGXOwOAhB4I+zWAuS1w8QcrKbvnoe1YZ0LZ iBqTSzdvZhH37drQjqXPWy0ZrVNULEXd7A+TmICUSv4t2FadeEi0o27xXdCzEw289Sm/U89d9Tw wCfIPye3F7gqrnnqwiENwOZf0JO1SaO01NqLJgdlWVkhHW/PfgXqBAKrSoLSwQyLOYgDc6OGZiX qrnXIY2/XhkwQ2hKW+WLc8mUFTVgSHjn0i2UIojNBBBatMpO3OMIZxrNY2qHdc9rtPeLnVVsOgA S/FrMLxxvxtLbmiBvXxcuVvkF2hPUxcXMIns1Q= X-Received: by 2002:a17:90a:e7ce:b0:3a7:da33:ff2d with SMTP id 98e67ed59e1d1-3acef591b93mr7399694a91.48.1792434882627; Mon, 19 Oct 2026 11:34:42 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-cd6549fb556sm4632865a12.22.2026.10.19.11.34.40 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 19 Oct 2026 11:34:42 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-networking][PATCH 12/20] mtr: patch CVE-2026-14461 Date: Tue, 20 Oct 2026 07:33:58 +1300 Message-ID: <20261019183407.1037972-12-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261019183407.1037972-1-ankur.tyagi85@gmail.com> References: <20261019183407.1037972-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Mon, 19 Oct 2026 18:34:48 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131138 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-14461 Signed-off-by: Ankur Tyagi (cherry picked from commit a5e913980f0107c4fe1ccde6a5e4a10780bd60a9) --- .../mtr/mtr/CVE-2026-14461.patch | 32 +++++++++++++++++++ .../recipes-support/mtr/mtr_0.96.bb | 4 ++- 2 files changed, 35 insertions(+), 1 deletion(-) create mode 100644 meta-networking/recipes-support/mtr/mtr/CVE-2026-14461.patch diff --git a/meta-networking/recipes-support/mtr/mtr/CVE-2026-14461.patch b/meta-networking/recipes-support/mtr/mtr/CVE-2026-14461.patch new file mode 100644 index 0000000000..6628d9d7be --- /dev/null +++ b/meta-networking/recipes-support/mtr/mtr/CVE-2026-14461.patch @@ -0,0 +1,32 @@ +From 4c75fae93d9515f3ecdfecc966b8c6471efb7ea5 Mon Sep 17 00:00:00 2001 +From: "R.E. Wolff" +Date: Tue, 16 Jun 2026 11:03:39 +0200 +Subject: [PATCH] =?UTF-8?q?Fixed=20possible=20buffer=20overrun=20in=20asn?= + =?UTF-8?q?=20code--=20Micha=C5=82=20Majchrowicz?= +MIME-Version: 1.0 +Content-Type: text/plain; charset=UTF-8 +Content-Transfer-Encoding: 8bit + +(cherry picked from commit 48e1794414d338ce47abc0f27c25ade8788af9c3) + +CVE: CVE-2026-14461 +Upstream-Status: Backport [https://github.com/traviscross/mtr/commit/48e1794414d338ce47abc0f27c25ade8788af9c3] + +Signed-off-by: Ankur Tyagi +--- + ui/asn.c | 2 ++ + 1 file changed, 2 insertions(+) + +diff --git a/ui/asn.c b/ui/asn.c +index 111c394..487d9e8 100644 +--- a/ui/asn.c ++++ b/ui/asn.c +@@ -94,6 +94,8 @@ static char *ipinfo_lookup( + DEB_syslog(LOG_INFO, "Malloc-txt: %s", UNKN); + return xstrdup(UNKN); + } ++ // Clip len to PACKETSZ. -- Michał Majchrowicz ++ if (len > PACKETSZ) len = PACKETSZ; + + pt = answer + sizeof(HEADER); + diff --git a/meta-networking/recipes-support/mtr/mtr_0.96.bb b/meta-networking/recipes-support/mtr/mtr_0.96.bb index 9008223264..2716ca92aa 100644 --- a/meta-networking/recipes-support/mtr/mtr_0.96.bb +++ b/meta-networking/recipes-support/mtr/mtr_0.96.bb @@ -9,7 +9,9 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=b234ee4d69f5fce4486a80fdaf4a4263 \ file://ui/mtr.c;beginline=5;endline=16;md5=00a894a39d53726a27386534d1c4e468" SRCREV = "f392168771570b0fdc104c38dea6bbc2ce585710" -SRC_URI = "git://github.com/traviscross/mtr;branch=master;protocol=https;tag=v${PV}" +SRC_URI = "git://github.com/traviscross/mtr;branch=master;protocol=https;tag=v${PV} \ + file://CVE-2026-14461.patch \ +" inherit autotools pkgconfig From patchwork Mon Oct 19 18:33:59 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101313 Received: from mail-pj1-f44.google.com (mail-pj1-f44.google.com [209.85.216.44]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.1758.1792434886330325761 for ; Mon, 19 Oct 2026 11:34:46 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=kFKxSlkI; spf=pass (domain: gmail.com, ip: 209.85.216.44, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pj1-f44.google.com with SMTP id 98e67ed59e1d1-3ab98332238so1963414a91.3 for ; Mon, 19 Oct 2026 11:34:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792434886; x=1793039686; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=/Il/8A/smhJbIKHf5HZSvcETDne7y0E8LLlueM/b+hg=; b=kFKxSlkI0q3UzcYxFFigng10HXrPj62JrZ6FoCvmNKJPAjZH8jZ9TxdtIPXt0XUAba jmrwIneOKJPn1TPSFtdw6qsVc8io0p7OGBn8zPieHeDpTWBCcQAtsi2fSF4UDi1UDPR9 gnHfZY7oz4WJHXcWscQwjXCtt/x0+M7GOMIayRBJYwcs3cMveHCaAfIhn0uyJf2PyKa+ qM9keSZB+7tOLzo/0e2pyJQUJwTA7CoRHqMUom/jmZIOIH4J87vbJ7rEwyJf7Hc0zQh5 lmVHCfZbw4U22uYUq18R2O2ascuj5IEKEMJcmG+gaolK3fzN8RqFoGbqByhYcl04dlqu NF4A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792434886; x=1793039686; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=/Il/8A/smhJbIKHf5HZSvcETDne7y0E8LLlueM/b+hg=; b=24dnq5RLWKGrf8aOykBCYJFYKBd5qkKNuEHbMMLUeMi6UZPpFYvp6ojKqRoht/cLVv nKbEvKJtLimj9gneyyiuDd9uuABWvsrmawt21/wqjEBZJGxrzHyDw7I2iAamlhENB66S UeE2XdoQM3Sd1Ay/YL7tyoMxkrQoHg1R1nkQOikXb9wgV6Qbnv8KhLWSe4ENQ96fH/CM UkiDDHMwjyklkh7BwZ2C8kBGz95CFplqqEP5MLjMeZti2bCLCCTd7lWuoW7s+mi2ILbg jP4weyswcFrOSPoKnQTOIRc0Sm67Ag3jG5ceOX0yYlW4zmCP86CES6gLCxe1hKuhR8RR w8LQ== X-Gm-Message-State: AFq9FYJOi6IaXkgwYB1mUL+Ky7xZcE/BS/MXpQK0MLpk3/ejKKVAY0im x778mu+mN/5DSBc0pGAjcWyZjYqritT0Xv2FYzwJ7tsRL6pblDJt9klURkFssQ== X-Gm-Gg: AYBFou36AaHK6oTZkGYoPE/Gr9NTnTZndF7gdXuG01d3e138g7AqW2+8PE+LywjSzgy 5iFNsceO8Kf5uFV2zcHckYj4IvFRcJ6SvJm7CzevU0VPoZMc3q61sDVcK2neTqIZXbvSYdSm7XD wyZmt50W2XaUWBS7oORUyyg3V9CqVl3DswcYsFG4MUTgO8VBTJtZk8NoRX35aq6AV398O9AQDUQ SAG5fSzqZ3AuocKSuXxyRWaIQI5AiuHml+9AaCh/doUdThaCfabjH81P49yOf6wn1z5hn7+vQuF v7zpjmKN7gBu49oEoi2KIk1wDgnAzdksIdUvVqhX3cKx/3U6MYMkFTUKuHnGRWxJRQ05hLGTC7t WaB97YjRkI28voDlcmQbzYaNaQG5tVLmdSeSuGnbPr4+2v4Ci9P8fTehCl66RwnS3ZRx32sw+rV xWuJxrB5vPikXQ2tYpj6BNGoIugbPcCkh6rNzUaIjNMY6zPAQXeuV08Mq8JNIuotmS9AAm4/Vsx 0dOhSkDroAcpf1cQEjFyD0S9lgZdVYrW2A/1MA= X-Received: by 2002:a17:90b:3889:b0:39e:4c7f:7308 with SMTP id 98e67ed59e1d1-3acef156665mr7179379a91.31.1792434885606; Mon, 19 Oct 2026 11:34:45 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-cd6549fb556sm4632865a12.22.2026.10.19.11.34.43 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 19 Oct 2026 11:34:44 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-networking][PATCH 13/20] ncp: ignore CVE-2025-14577 and CVE-2026-35087 Date: Tue, 20 Oct 2026 07:33:59 +1300 Message-ID: <20261019183407.1037972-13-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261019183407.1037972-1-ankur.tyagi85@gmail.com> References: <20261019183407.1037972-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Mon, 19 Oct 2026 18:34:48 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131139 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2025-14577 https://nvd.nist.gov/vuln/detail/cve-2026-35087 Signed-off-by: Ankur Tyagi (cherry picked from commit 1bd5d1a7a69aa04d6339ba7d5ef2cd8b83ec25a4) --- meta-networking/recipes-support/ncp/ncp_1.2.4.bb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta-networking/recipes-support/ncp/ncp_1.2.4.bb b/meta-networking/recipes-support/ncp/ncp_1.2.4.bb index ec6d918744..19fb258aec 100644 --- a/meta-networking/recipes-support/ncp/ncp_1.2.4.bb +++ b/meta-networking/recipes-support/ncp/ncp_1.2.4.bb @@ -29,3 +29,6 @@ do_install() { } BBCLASSEXTEND = "native nativesdk" + +CVE_STATUS[CVE-2025-14577] = "cpe-incorrect: This vulnerability is for Slican NCP" +CVE_STATUS[CVE-2026-35087] = "cpe-incorrect: This vulnerability is for Slican NCP" From patchwork Mon Oct 19 18:34:00 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101317 Received: from mail-pg1-f170.google.com (mail-pg1-f170.google.com [209.85.215.170]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.1761.1792434889243942486 for ; Mon, 19 Oct 2026 11:34:49 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=MFVpiFeR; spf=pass (domain: gmail.com, ip: 209.85.215.170, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pg1-f170.google.com with SMTP id 41be03b00d2f7-cd632f7a4a1so880949a12.3 for ; Mon, 19 Oct 2026 11:34:49 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792434889; x=1793039689; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=NoWREHNX5ryj5GpX97OJqG3EmZ2w+/qmTSJLU0/mzr0=; b=MFVpiFeRA+72pB+U1xVbz3Bu954r1RJN8r2UFYb9bxZQbZ4NEOPfvBm8osmRBHmn8X u41AvUkUr/qA3ptXB3/wEah+oo4rFPVSeGgo//08dFJiQEdDeu6yXLvcx3A/SHh8NpEG dH61uQd975Utskzcu7RR1/EtFCPKJsqzhuG5EJ5V+Hm6gE8EEFQ4Iu0b2HnJG7GDum+V kseRXnAzNQ7I0V3V3gHNV9fIzE8GsFkI7+/quJtHDhyxrtP2wPyihr30v0z0rtxiXN3U Hxtc+Tuh11O8ZGGXRW4RVAxXGAOPnckbMiIftv4kgw+dI9YJ/cTBvFRbn36wbgkFQ4hg scpA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792434889; x=1793039689; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=NoWREHNX5ryj5GpX97OJqG3EmZ2w+/qmTSJLU0/mzr0=; b=RbLFb/p39S2bniiFX86tJvKbWfBT91bccUkGWHpcR7A8WpIUeKyYLV4Xz0A1+X8ruX Nl4VxkhVL1XkVLiF5diQ6ocefuDdmn9Xen5ajx6wZctA2fl7ERUsDUpQtIe2Absi22Sd +eBv+ls781kGA1MxYY/sI/VrhL2EiYGZMpiKKwmhTbU27gvdlAIuOgEN6AGK4feFA5Ns F6D9SIPHMphDcP25eeNKqu/8VXqKJXCS9rIro4p05UmHxTqi1DTm7KDcnQhbsjRGmTi/ 5Itrqjfj9yx4NPaIgTd6JzYl0Dfj5RcmM2678z9Z6udoSTXHpguYfK6WGu7IUioIxBt3 Kriw== X-Gm-Message-State: AFq9FYLv/7V8/Q5pQVr2V2024moIEefdstt+NtVH48dTtm+nopl44qvr P0wuSnDptGlidhurMs87ZW7z+k4clp9yJE8clwE9E3t0s2KW0s4DwNvotFU1zA== X-Gm-Gg: AYBFou1ugxyHqqwi0g9d7NJw4IweG7hvaO8iaTBe13rc4/ReCWkp68bclqFpaX+oROQ H9xkdoJ3yVeM4A/Si5JsQBFOOmoZPWUaFZGtSbT6pqm9GGp/oXbSkNm1MbD8mpQmx44y6+O2XVf s77fXRasfK2C/1l0yjOj6oCgX9sL6xI8c6w/tXqQ63Jb2xmNCVUtN3N5rRKu2ab1pFkvWc32+vf wUfRuTNqAUDBFgdpJGuiAk4Ue4pG7LxZFjAlCFg1lwqDDu6B7ZLKozEREzWAODe588zXVqMh3Ys yyhO3wgvTC9R0ZDRJxL/Eu0Sf6g4EDsJY7w74SZc6zRUtdp5kzyYssPENx7kZI2BtJWC+HFSrjB IoKEhUKSbGf1h1sAcumdG1vjC7XBaDntCuzPJtUz99rMDwoap07r1FQ4/RXG1C5ZdPuFxUcTpzd IwAioIYZAHrkYbpBb1IPbAHKP69ta30i0hSb1JaifWF3PSaYS8YfDx5KKFLfbQr/ImoHWWNUHuq OKeMKZOYmrjE7Pbvt0NGHTkKCR9R6ReDlHF200= X-Received: by 2002:a17:90b:580c:b0:3ac:c03a:38ad with SMTP id 98e67ed59e1d1-3acee276f1fmr7947309a91.5.1792434888530; Mon, 19 Oct 2026 11:34:48 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-cd6549fb556sm4632865a12.22.2026.10.19.11.34.46 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 19 Oct 2026 11:34:47 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-oe][PATCH 14/20] opensc: patch CVE-2026-103531 Date: Tue, 20 Oct 2026 07:34:00 +1300 Message-ID: <20261019183407.1037972-14-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261019183407.1037972-1-ankur.tyagi85@gmail.com> References: <20261019183407.1037972-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Mon, 19 Oct 2026 18:34:59 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131140 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-103531 Signed-off-by: Ankur Tyagi (cherry picked from commit 27b41701a04a46e498f7f3f6212ac2a5e2bc8d1a) --- .../opensc/opensc/CVE-2026-103531.patch | 54 +++++++++++++++++++ .../recipes-support/opensc/opensc_0.27.1.bb | 1 + 2 files changed, 55 insertions(+) create mode 100644 meta-oe/recipes-support/opensc/opensc/CVE-2026-103531.patch diff --git a/meta-oe/recipes-support/opensc/opensc/CVE-2026-103531.patch b/meta-oe/recipes-support/opensc/opensc/CVE-2026-103531.patch new file mode 100644 index 0000000000..22776e525b --- /dev/null +++ b/meta-oe/recipes-support/opensc/opensc/CVE-2026-103531.patch @@ -0,0 +1,54 @@ +From 4b0f46d922866d9453e3631ff5e0a24900fae8dd Mon Sep 17 00:00:00 2001 +From: wanglanlan +Date: Wed, 2 Sep 2026 08:36:47 +0000 +Subject: [PATCH] setcos: Fix buffer overflow in setcos_construct_fci_44 + +The FCI construction copied type_attr, sec_attr and prop_attr of the +file into a fixed 64-byte stack buffer without checking the length. +Malicious or corrupted attribute lengths (e.g. prop_attr_len > 64, +reachable through fuzz_pkcs15init and attacker-controlled card +responses) caused a stack buffer overflow (write). + +Return SC_ERROR_INVALID_DATA if any attribute exceeds the buffer size. + +Found with the fuzz_pkcs15init fuzzer. + +Co-Authored-By: Claude +(cherry picked from commit ad730304052937c32b4eb489a06835ac6123632c) + +CVE: CVE-2026-103531 +Upstream-Status: Backport [https://github.com/OpenSC/OpenSC/commit/ad730304052937c32b4eb489a06835ac6123632c] +Signed-off-by: Ankur Tyagi +--- + src/libopensc/card-setcos.c | 6 ++++++ + 1 file changed, 6 insertions(+) + +diff --git a/src/libopensc/card-setcos.c b/src/libopensc/card-setcos.c +index 0ebe7c34f..8c7baa3e4 100644 +--- a/src/libopensc/card-setcos.c ++++ b/src/libopensc/card-setcos.c +@@ -218,6 +218,8 @@ static int setcos_construct_fci_44(sc_card_t *card, const sc_file_t *file, u8 *o + + /* Type */ + if (file->type_attr_len) { ++ if (file->type_attr_len > sizeof(buf)) ++ LOG_FUNC_RETURN(card->ctx, SC_ERROR_INVALID_DATA); + memcpy(buf, file->type_attr, file->type_attr_len); + sc_asn1_put_tag(0x82, buf, file->type_attr_len, p, *outlen - (p - out), &p); + } else { +@@ -271,11 +273,15 @@ static int setcos_construct_fci_44(sc_card_t *card, const sc_file_t *file, u8 *o + } + + /* Security Attributes */ ++ if (file->sec_attr_len > sizeof(buf)) ++ LOG_FUNC_RETURN(card->ctx, SC_ERROR_INVALID_DATA); + memcpy(buf, file->sec_attr, file->sec_attr_len); + sc_asn1_put_tag(0x86, buf, file->sec_attr_len, p, *outlen - (p - out), &p); + + /* Life cycle status */ + if (file->prop_attr_len) { ++ if (file->prop_attr_len > sizeof(buf)) ++ LOG_FUNC_RETURN(card->ctx, SC_ERROR_INVALID_DATA); + memcpy(buf, file->prop_attr, file->prop_attr_len); + sc_asn1_put_tag(0x8A, buf, file->prop_attr_len, p, *outlen - (p - out), &p); + } diff --git a/meta-oe/recipes-support/opensc/opensc_0.27.1.bb b/meta-oe/recipes-support/opensc/opensc_0.27.1.bb index a1930744ea..bcd94dfb90 100644 --- a/meta-oe/recipes-support/opensc/opensc_0.27.1.bb +++ b/meta-oe/recipes-support/opensc/opensc_0.27.1.bb @@ -14,6 +14,7 @@ DEPENDS = "openssl" SRCREV = "19868984dc4dc697af6a86d65ab32a1f19a43ea4" SRC_URI = "git://github.com/OpenSC/OpenSC;branch=master;protocol=https \ file://0001-Changes-for-OpenSSL-4.0.0.patch \ + file://CVE-2026-103531.patch \ " CVE_STATUS[CVE-2024-8443] = "fixed-version: this is fixed since 0.26.0" From patchwork Mon Oct 19 18:34:01 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101319 Received: from mail-pg1-f172.google.com (mail-pg1-f172.google.com [209.85.215.172]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.1769.1792434891749323137 for ; Mon, 19 Oct 2026 11:34:51 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=RiSLzqr+; spf=pass (domain: gmail.com, ip: 209.85.215.172, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pg1-f172.google.com with SMTP id 41be03b00d2f7-cc4aa0246b7so875580a12.3 for ; Mon, 19 Oct 2026 11:34:51 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792434891; x=1793039691; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=maK3VU0H8BYd9ZrDTWkjCHP9dqDfgfRjfMH51PyTkkA=; b=RiSLzqr+uwGLnQgBrRv/TghpMWkF00wF5kJ4F5obX0auwPznCkUWn1JwSf6g53Rqsq KVed6aiFQwUa7Q6uNCPQdvLTf4hwg4xgkpJ1YBC39hHQjmKmDcTg4qow/2GdBmVRTRxy esCXLnPPLvhgrjp9bgqu2BEEXf5UkpN52LuaEeo1W5ExUI5o77tZxIXK+6sWV12i4LHz ObImYJgB+FgYHBkxQzy1q3UyQf4HmxUmDCEFUcYWeTlqomZQBw6WB5eic/PXNIey0dC/ 64ZW1M609M9dDVi1rpm3SzrcyMcdA1eUxYgadU6XY3gotDYYMFbFOfDC9ox/cUWMKVgI Tnwg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792434891; x=1793039691; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=maK3VU0H8BYd9ZrDTWkjCHP9dqDfgfRjfMH51PyTkkA=; b=XPRfjR0f6muINFghgJUGsRwGPIzXwHb9GY6R0gYSNYH7epjO5Eum40U7tb1vZXjj1A n0Qecut/CSiuGzA6IKsDeiiKxfbuLHmHJfgiEMKowm/O5KR0cpnZqv8SePhiqMuYu7yV hZSvzlaZgDEfZrKWxq5ag72JDfNKGwzyBPokjDhkIN+d41dw9mS2FcJj+20u8j+HCTkE fA+APKGzE/5ydqrVGYIFm6KACwxqQ6D/wLAhv2TMp8in0laZj7TI+283pgiaMu27rqAd P64gUT9yIcE1TzQRksr7nuUG2coVRaa0VoZlCkrR4c607BRd84oFUP/YZLeBdaZE479f +P5Q== X-Gm-Message-State: AFq9FYJQ+UC4y37axywFuoNGlpNjMwnkysN8Y00fmAQzHd4T5M4XfrzY atryAzmeatcmkqfog1LXQ/xbs3ACE51CT7VS70/srG2zHqPjd94kKRi9NJfdXA== X-Gm-Gg: AYBFou2xWxng3K2oaSRoy4mouASsMjqarc15BjOAPc/eTTnjDIb1DnfvKa8Sl7bTScC e1kWZViFqXjOgCNzu8qXdyrr/1VACWAIKnud/r7O0lySpbfbRRKYDS2DbHGcd/Yub3zOe6IfC+H epsrukcHHp5wX48VCZxIMKezZvdgCGK4bEnxrStTsGggl66TZG/uspkK4U5mkxlp8AtmqJApZpq rYA+6C90Kf/24SDnI0U/pyJ1ZhWWQINBeYvGUyHFQlZpbT2vOg+pfER8pWVh5IR9nTl3VxMxsNE q57R7RDyP1lAKAJ16+wHPVC4fnr4FdAPhVC3s5GohgKzvJ5Qs8Inti1F2BhzajCQHDSsfZq+wuB ma2pNY8b1KN8AfO5/7oDOpBMpCg/65Km7xHIGNRAkRHFQXi/zpQVQ5/2DJH6FPRX+etjPhyUeMN Q35VuqsGVrnQgijS0TvUJO9zeQv6k8PeS3+0s9ZTecmSvvxr/rR6KIpjqSYjOW+UlauFrdgIp+J F3BZi5D0iDbwIuAszY2FmSHh+9p2xLfdJAueJY= X-Received: by 2002:a05:6a21:8284:b0:3dd:85a8:cac8 with SMTP id adf61e73a8af0-3e22626fd4amr7045046637.31.1792434891119; Mon, 19 Oct 2026 11:34:51 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-cd6549fb556sm4632865a12.22.2026.10.19.11.34.49 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 19 Oct 2026 11:34:50 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-oe][PATCH 15/20] opensc: include tag in the SRC_URI Date: Tue, 20 Oct 2026 07:34:01 +1300 Message-ID: <20261019183407.1037972-15-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261019183407.1037972-1-ankur.tyagi85@gmail.com> References: <20261019183407.1037972-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Mon, 19 Oct 2026 18:34:59 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131141 From: Ankur Tyagi Signed-off-by: Ankur Tyagi --- meta-oe/recipes-support/opensc/opensc_0.27.1.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-oe/recipes-support/opensc/opensc_0.27.1.bb b/meta-oe/recipes-support/opensc/opensc_0.27.1.bb index bcd94dfb90..70406513ad 100644 --- a/meta-oe/recipes-support/opensc/opensc_0.27.1.bb +++ b/meta-oe/recipes-support/opensc/opensc_0.27.1.bb @@ -12,7 +12,7 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=cb8aedd3bced19bd8026d96a8b6876d7" DEPENDS = "openssl" SRCREV = "19868984dc4dc697af6a86d65ab32a1f19a43ea4" -SRC_URI = "git://github.com/OpenSC/OpenSC;branch=master;protocol=https \ +SRC_URI = "git://github.com/OpenSC/OpenSC;branch=master;protocol=https;tag=${PV} \ file://0001-Changes-for-OpenSSL-4.0.0.patch \ file://CVE-2026-103531.patch \ " From patchwork Mon Oct 19 18:34:02 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101320 Received: from mail-pj1-f53.google.com (mail-pj1-f53.google.com [209.85.216.53]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.1771.1792434893985416959 for ; Mon, 19 Oct 2026 11:34:54 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=O5lWC5AD; spf=pass (domain: gmail.com, ip: 209.85.216.53, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pj1-f53.google.com with SMTP id 98e67ed59e1d1-3ac9f49b984so1600986a91.1 for ; Mon, 19 Oct 2026 11:34:53 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792434893; x=1793039693; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=fvhPDqS5sPT2cWB3ValAlfCGYO+uarNt9OZa4oxr64A=; b=O5lWC5ADJlqJZ9VrOOAoZiHNeO0ZRaeAcMx6SRLtZfu3wqkqpDe/zaB65edKtm2aRA GCztGxqPZ0gL2Ob++eh1GgsL3EQ3KVtZZvGB8Ox3JNIrnX36aRyKFIwkfTHDVeNW75/p e5+ZfljsVmt7WOSlURxDmTTvPwN+X0P6kXYmvPDSSOoQKfO5YsTde2HnKaeeR5dQWXVN ynBgG6I1AbgjyedaBV5JnVB2E6n8RjkmB0RCWo+8QPsVpGWLV3Wj1k/KFlK5xQs+sd4P UyXyveGnq4TH137DTsAQsBG9C0vUje6vT+t93kU8kwPv413V7shJUdg38oSNZBMY70V/ Adqw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792434893; x=1793039693; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=fvhPDqS5sPT2cWB3ValAlfCGYO+uarNt9OZa4oxr64A=; b=gbt2JDEwxY1sB5/JI0vSwWq/esxS0BK6I9MIDopGJBCZ0zxwnu/5s74eJdwS9/yjGp SYzW5AGxHd1fqY+Tx4/3++U5mmFDXyBCFLNJAA4MMTFoiQ1PzVWYyzqpFE2qBxtccecA WVj+DDqRiitZ+wYogAXvOZDdpR8b8ITnx3VNBWc8vr1ACZDKbgw4PYcxIuOaZPLDSgvj pZJm6HbeId07z/WOq8I0OyeXOzkwSQXvPQrZFZrDhw4HpvLb6Ke23Pdk1LjSq5WNqdh8 rgSRQwzD9/8ufSeyUvQc/Bh5WPDFXGBLUF9xgiAVn/7hZ7sZA2BXyNO40d07kwZlAY0r cfxw== X-Gm-Message-State: AFq9FYJP5SkDfyu5C0TB5EHiU2E9YUutomLlrebN5osGdRlZO/3I0aXz 6sB9ht/4S69RMqS21Ig59NjUg/I8ICg611n2sUY/yvWSn2rei1P1K0Bj5E5M1A== X-Gm-Gg: AYBFou31FmO9/ZszgcLSi/fuESYzrnsLC/L0Teo1p5ZtYpDgpkM4hMeuKh8g+pcUTux Kyg6S5bIz3kzqK0YbVPFUjK2Z+CB3JjlJIrAgXUMJNwT5xTePzUHHbIpT/WRm4Z+tbOLxh/emPE Vfhhj7QtT6ldfz8HdTwAeDAMXbA8eET5RsvxUcSBd0Y+bWz9d59Im/JRtYhST7hGlyQGnJOraBf +j1kIRrzWf2HySSCK/EuCmGMSjty+qcV9YaiLrJMG25zu+xWwWp2354rgeTK79cCqQeO9V5/rnI zUGyfsY1mNPrQGuAvCK6ZvOZIzg1W/k9EyUGm800y3Kx8w7tdsPVRpMs38Id7xJXyEHxaNwJsE/ H8B7qWAoTGJOKkXlHxFvMTvEg3jyq1y+dDLzBUcOU+TH7SuJMboYXZQJGjYb2d2JHaPDAkFUG// wW7vnKSikRbxjby2H2mrn/46LQs6F1cXhxsyqzOTafNA7XM/JwcHj702ddn5GncvFXj+SGHud/4 kYhLa6WE6TvC3hmZnMQ5sroNX/G6xq41lO9bKc= X-Received: by 2002:a17:90b:264a:b0:3ac:84b8:c0ce with SMTP id 98e67ed59e1d1-3acbb8f1039mr8279931a91.36.1792434893224; Mon, 19 Oct 2026 11:34:53 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-cd6549fb556sm4632865a12.22.2026.10.19.11.34.51 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 19 Oct 2026 11:34:52 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-webserver][PATCH 16/20] swagger-ui: upgrade 5.33.2 -> 5.33.3 Date: Tue, 20 Oct 2026 07:34:02 +1300 Message-ID: <20261019183407.1037972-16-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261019183407.1037972-1-ankur.tyagi85@gmail.com> References: <20261019183407.1037972-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Mon, 19 Oct 2026 18:34:59 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131142 From: Ankur Tyagi Changelog: https://github.com/swagger-api/swagger-ui/releases/tag/v5.33.3 Signed-off-by: Ankur Tyagi --- .../swagger-ui/{swagger-ui_5.33.2.bb => swagger-ui_5.33.3.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-webserver/recipes-devtools/swagger-ui/{swagger-ui_5.33.2.bb => swagger-ui_5.33.3.bb} (94%) diff --git a/meta-webserver/recipes-devtools/swagger-ui/swagger-ui_5.33.2.bb b/meta-webserver/recipes-devtools/swagger-ui/swagger-ui_5.33.3.bb similarity index 94% rename from meta-webserver/recipes-devtools/swagger-ui/swagger-ui_5.33.2.bb rename to meta-webserver/recipes-devtools/swagger-ui/swagger-ui_5.33.3.bb index aeee9e4da6..6f69070033 100644 --- a/meta-webserver/recipes-devtools/swagger-ui/swagger-ui_5.33.2.bb +++ b/meta-webserver/recipes-devtools/swagger-ui/swagger-ui_5.33.3.bb @@ -12,7 +12,7 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=3b83ef96387f14655fc854ddc3c6bd57" SRC_URI = "git://github.com/swagger-api/swagger-ui;branch=main;protocol=https;tag=v${PV}" -SRCREV = "e89a91f13cdee432d97ca9d3d1ac1969ff797036" +SRCREV = "38ca10e1867a66525751590d8d51011973107ad1" CVE_STATUS[CVE-2016-1000229] = "fixed-version: fixed since 2.2.1" From patchwork Mon Oct 19 18:34:03 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101318 Received: from mail-pj1-f45.google.com (mail-pj1-f45.google.com [209.85.216.45]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.1764.1792434895934375945 for ; Mon, 19 Oct 2026 11:34:55 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=WMsGi5mt; spf=pass (domain: gmail.com, ip: 209.85.216.45, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pj1-f45.google.com with SMTP id 98e67ed59e1d1-3acd21ba21aso1841127a91.1 for ; Mon, 19 Oct 2026 11:34:55 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792434895; x=1793039695; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=X1s9LTbTfkbKl+lu8EK3dOTGMpI7ceVE04w4Xy9ahJY=; b=WMsGi5mtk5g2Vvi1a67u4m/qIqZLBcbUdd6np73xo/noL/M3U3m6WrWkelp+4QCnwn 02YJUZhLXC8RNUuS9Ty73SzXBPHCQj6u5w+xwhLh7KDtOi2IPZ+tjFFkQyE9vczz/tDr 7VGw4mD8eFThxFT8iBjqN0F9kGveK2WNMdz7YV2wv2XY1gKTdcnQ2V7ZRFD4S7Tmus2q WKfpxenNGk74dTFUrkaS2huGyJ9jOK6Lh3VuYl3HdtGoakyRZ7de4qaOJAYRHjFqaCEZ NNkyOOeFob4TzQ91mVl+wfTrLMHpX0XpeCWDS6jfaFHQh+pJpdEwgXXeMMQx1Np2lzlr bYJg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792434895; x=1793039695; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=X1s9LTbTfkbKl+lu8EK3dOTGMpI7ceVE04w4Xy9ahJY=; b=AMJPGcLb2b3WCYC9l/8cX8kj+ECMdTAnWaaYkh2ngOgwcOm8vnsC0EyQ7/ulYC33/Q g0HRAjvhlhAKusXXCzDVJnWZvmSMpyycG9hj2mHRq7nIkJNbHcpMlx82XZpEh/czzXmO J6hSNIES8nmPRceLC8qTJKpErTqP2GmWKP8cNr/i0LhNroTCknjICQj45nixZ97Q/rIz +FMHrKBr4R7l4vIZB4gGL3EpiH3nGrSVdbsKqAviViMwUduHQsiv/zXmBM4MkflG+x51 RugnxqTmS4qmjuPJ+O4Q5nzoxJaDQAsbelFAZiz9xIrkhaQXhSX/MinB/O1sBQMPzTch 8jUw== X-Gm-Message-State: AFq9FYIxyC1aqzp5zS2hRfo7Dc8h+gHTDB3kBvuN1DcT1ZVdSSAfpoba wAesLnu2xg9anOmrVYC6d7gqeN4YDXMBXzv1l3hqsyvLXcX00Sp7RFSx2nUSTw== X-Gm-Gg: AYBFou3xySGLBX8YuDhw9CKoNd6HphwacHhbio/Z5F0hMA7TAXk85d95C58p3IvbKYu 8CPs4Rbbho8SXKj8JydZ6ImPFZpeSe3j8r05Yfyys6drYfj/gqsRYkLWVddBsBIUT6nfG2zXg9k rK/i65Y6fuNauHpeMOePwkTN7LDz/tpngoVmy2xALsY7aeFxABhyI1SN3MsjGToDuZPbPU1tjhz UHEum8VsXH1I7sekEpU+guxWqeX9pzTFnDgWNG2AwL7N4IwefpIUBaSFV8hL0TTvhfgu28wIsRH dVVDVPZ5gParIKCreJ+DolnOd05cNP373heQI5ui5PA/skSXP6oca6ud6NWw/0U74t371mhAcqy El0XMg0Kd2QTyyUngpvWHzqlDVSya23bud9tellgaBoYbOp3xtPaNyd9l0gRE3C11y3YI9E6rcW fF7JrL4nMOdWFMEYmwHti79wWQ9MPY9tLBUEknr26dk8p6MNYnmLf0Fae/hBWhxdsSM7Cyua7qs MczFK4U6NvwG09ep9MDtgYThnJ5IDYXYLAn44Q= X-Received: by 2002:a17:90b:164b:b0:3ab:afca:1d79 with SMTP id 98e67ed59e1d1-3acef104234mr7254564a91.21.1792434895276; Mon, 19 Oct 2026 11:34:55 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-cd6549fb556sm4632865a12.22.2026.10.19.11.34.53 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 19 Oct 2026 11:34:54 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-filesystems][PATCH 17/20] unionfs-fuse: upgrade 3.7 -> 3.8 Date: Tue, 20 Oct 2026 07:34:03 +1300 Message-ID: <20261019183407.1037972-17-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261019183407.1037972-1-ankur.tyagi85@gmail.com> References: <20261019183407.1037972-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Mon, 19 Oct 2026 18:34:59 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131143 From: Ankur Tyagi License-Update: copyright year updated[1] Dropped patch that are merged in the upstream version. Changelog: - fix data corruption when copying files larger than 8 MiB concurrently in cow mode - fix "bad address" error when setting a debug file with unionfsctl -p - fix creating unix sockets on macos - mount.unionfs helper no longer requires bash and accepts multiple -o options PTEST pass: root@qemux86-64:~# ptest-runner unionfs-fuse START: ptest-runner 2026-10-18T23:02 BEGIN: /usr/lib/unionfs-fuse/ptest ... END: /usr/lib/unionfs-fuse/ptest 2026-10-18T23:02 STOP: ptest-runner TOTAL: 1 FAIL: 0 [1]https://github.com/rpodgorny/unionfs-fuse/commit/e3e8b289f19047d7c6309eff3dc7a2c505229b73 Signed-off-by: Ankur Tyagi --- .../files/0001-fix-debug-ioctl-call.patch | 58 ------------------- ...nionfs-fuse_3.7.bb => unionfs-fuse_3.8.bb} | 5 +- 2 files changed, 2 insertions(+), 61 deletions(-) delete mode 100644 meta-filesystems/recipes-filesystems/unionfs-fuse/files/0001-fix-debug-ioctl-call.patch rename meta-filesystems/recipes-filesystems/unionfs-fuse/{unionfs-fuse_3.7.bb => unionfs-fuse_3.8.bb} (79%) diff --git a/meta-filesystems/recipes-filesystems/unionfs-fuse/files/0001-fix-debug-ioctl-call.patch b/meta-filesystems/recipes-filesystems/unionfs-fuse/files/0001-fix-debug-ioctl-call.patch deleted file mode 100644 index a29128d22a..0000000000 --- a/meta-filesystems/recipes-filesystems/unionfs-fuse/files/0001-fix-debug-ioctl-call.patch +++ /dev/null @@ -1,58 +0,0 @@ -From bf552c479a0c0b0ef2d52d8456030c56b8cc6dbb Mon Sep 17 00:00:00 2001 -From: Gyorgy Sarvari -Date: Fri, 26 Dec 2025 19:33:54 +0100 -Subject: [PATCH] fix debug ioctl call - -When calling the ioctl to set a debug file, the ioctl expects to receive a datatype -that is specified in the ioctl definition: char[PATHLEN_MAX] - -However when passing the pointer from getopts, this is only true if the passed path -has the maximal allowed length. Since usually this path is shorter than the max, -the kernel is trying to read over the end of the argument, and returns "EFAULT/Bad address". - -To solve this, copy the argument to a buffer that has the exact size of what the ioctl -expects, and pass this buffer to the ioctl. - -Upstream-Status: Submitted [https://github.com/rpodgorny/unionfs-fuse/pull/164] -Signed-off-by: Gyorgy Sarvari ---- - src/unionfsctl.c | 11 +++++++---- - 1 file changed, 7 insertions(+), 4 deletions(-) - -diff --git a/src/unionfsctl.c b/src/unionfsctl.c -index 74c4d33..efed505 100644 ---- a/src/unionfsctl.c -+++ b/src/unionfsctl.c -@@ -44,25 +44,28 @@ int main(int argc, char **argv) { - - int opt; - const char* argument_param; -+ char debug_file[PATHLEN_MAX]; - int debug_on_off; - int ioctl_res; - while ((opt = getopt(argc, argv, "d:p:")) != -1) { - switch (opt) { - case 'p': -- argument_param = optarg; -- if (strlen(argument_param) < 1) { -+ if (strlen(optarg) < 1) { - fprintf(stderr, - "Not a valid debug path given!\n"); - print_help(progname); - exit(1); - } - -- if (strlen(argument_param) > PATHLEN_MAX) { -+ if (strlen(optarg) > PATHLEN_MAX) { - fprintf(stderr, "Debug path too long!\n"); - exit(1); - } - -- ioctl_res = ioctl(fd, UNIONFS_SET_DEBUG_FILE, argument_param); -+ memset(debug_file, 0, PATHLEN_MAX); -+ strncpy(debug_file, optarg, PATHLEN_MAX - 1); -+ -+ ioctl_res = ioctl(fd, UNIONFS_SET_DEBUG_FILE, debug_file); - if (ioctl_res == -1) { - fprintf(stderr, "debug-file ioctl failed: %s\n", - strerror(errno) ); diff --git a/meta-filesystems/recipes-filesystems/unionfs-fuse/unionfs-fuse_3.7.bb b/meta-filesystems/recipes-filesystems/unionfs-fuse/unionfs-fuse_3.8.bb similarity index 79% rename from meta-filesystems/recipes-filesystems/unionfs-fuse/unionfs-fuse_3.7.bb rename to meta-filesystems/recipes-filesystems/unionfs-fuse/unionfs-fuse_3.8.bb index b5c5bb847c..e7bcd1ecc2 100644 --- a/meta-filesystems/recipes-filesystems/unionfs-fuse/unionfs-fuse_3.7.bb +++ b/meta-filesystems/recipes-filesystems/unionfs-fuse/unionfs-fuse_3.8.bb @@ -3,16 +3,15 @@ HOMEPAGE = "https://github.com/rpodgorny/unionfs-fuse" SECTION = "console/network" LICENSE = "BSD-3-Clause" LIC_FILES_CHKSUM = "file://src/unionfs.c;beginline=3;endline=8;md5=30fa8de70fd8abab00b483a1b7943a32 \ - file://LICENSE;md5=0e75c95b3e0e1c01489b39e7fadd3e2d \ + file://LICENSE;md5=22a665a5eef3c10268acdee50e62d876 \ " SRC_URI = "git://github.com/rpodgorny/${BPN}.git;branch=master;protocol=https;tag=v${PV} \ file://run-ptest \ - file://0001-fix-debug-ioctl-call.patch \ file://0001-adapt-tests-to-ptest.patch \ " -SRCREV = "3fcbd11f78b9a9e02ea0e861d741840fe45dc9c8" +SRCREV = "e3e8b289f19047d7c6309eff3dc7a2c505229b73" DEPENDS = "fuse3" RDEPENDS:${PN} = "bash" From patchwork Mon Oct 19 18:34:04 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101321 Received: from mail-pf1-f178.google.com (mail-pf1-f178.google.com [209.85.210.178]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.1772.1792434898053237020 for ; Mon, 19 Oct 2026 11:34:58 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=YXheslvY; spf=pass (domain: gmail.com, ip: 209.85.210.178, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pf1-f178.google.com with SMTP id d2e1a72fcca58-8a06210b29fso563694b3a.1 for ; Mon, 19 Oct 2026 11:34:58 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792434897; x=1793039697; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=0OeXLzO6hKfiLMPllBFcmxgWV1We2ATIjDhBJX6EUOU=; b=YXheslvY/9R03NgLPg0C65kGuJd8r+copjO5DxaTBsYtzG2iitHGxOFYt0u08bAaRL txZQj68tRaNguG9BbtyQKNeFLIhRHXoAA461KJDuBNV0tdHdne1T28klZQ6h/NACZCJr ZY6dQbIpP47ylj81XoehmQxkUrMUvnknU3uyDKKMvXzErFsntjyiu/K9tSYyLZbjRyJr OKu/yK0hSFozhCidHdCvcG9QbrjofRWICPR0wMuuL8qWupiUidSf5zax9rmleBgcAau4 uNqSKzI6Lq3NfVdl0YI2POT4jCLsWUwQmFA50DzqPXWGvHNsz+RXNxVAcY2fTDY3iba3 siZQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792434897; x=1793039697; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=0OeXLzO6hKfiLMPllBFcmxgWV1We2ATIjDhBJX6EUOU=; b=EBHYN9FgTxYOlTiVejN7j/ryruwzTZNfTz2SbeCUaDCU0+jy9zax7RyFrQqV+nLsp0 JJO7PAY71kvK3EjunZkwXes24p7kvTDdPSPiwrEQj5SCvfiK4nP3dR4qyGTqu27eg6Wv w8eC72FwZR8e3LkYbJLAe/1U1kgYHuUJcwbcD3yICgYnFRyNrMY4uJN3Rl2KnkCgIUA7 KYb5uc6tgn3b9+f6aRhBrqN3KraP9Ohv4irj5Z8Mr8V0uwlEDjGIod0Mh1ILLiR3TW9O 79+f3FbQ8DhejqOfgbZTqPHxowDX0YjQm5VRII8S1tgfHSp+FLKXvHuKPDU3tVo1DUAD UxiQ== X-Gm-Message-State: AFq9FYImH7osCdjMKDVrXYV+BVwT7NXaDUJktKdHkHxtzJ5CE5CMY3xh r2VfVZNaYNDAlFvd/gEQdwj/WXAr4zuefCqTTPWSPzM6XhzgRq4z5ADTMuHgVw== X-Gm-Gg: AYBFou3TNafMFcyekHKdc3B/3tutd2737HRQBVDJsruXLIJJuDr6CNFp1cYRp0oOupQ tqsPkaudA3US6kcCiP28aZ1lTdxxpzuULKc8sx1cA/QoaqPDNz6rXhlccFpo/fCwoCbGEwJn64O mKlGOl4O+RQvNsF/tHyhoETIijY8uEk94egrWHp+05FSnWHWvAdieDJs1f+f3QwSrZPAAOL2tX8 e7+yw7TxswXFgQ0BHglxL0CNXipjpw+CnQQ/p9KSA0bKFTyOBaNdXTxppB1MfUPHn5qrIyl7sAj BNXpbSRaHi5ZhIuecxgwQBgtl7YQOd1WL4/YVWmNv2XtkVdXrgjRjp84CaDjft6IyYz7qUNLPl6 +PNsx2uX05uC+0mYMQcZ38KMVevy/WUOPSbI2bCx9kJdpVTkiVyCjfmjtbroRwPXzQdJSnecJTf KVpMoO8Y2vwd6+opuY7ScIijMOwQKt7HU+tfT3lwL3draikfm4Vb+L7ZoEArM8MnLF94PJwtYwS WKnaVtjZOwE/JmhDobkC4uvfXOFmZOvZEdAMRM= X-Received: by 2002:a05:6a20:2a30:b0:3e2:19a0:4b3d with SMTP id adf61e73a8af0-3e226080aa4mr4727307637.73.1792434897340; Mon, 19 Oct 2026 11:34:57 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-cd6549fb556sm4632865a12.22.2026.10.19.11.34.55 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 19 Oct 2026 11:34:56 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-networking][PATCH 18/20] open-isns: upgrade 0.102 -> 0.103 Date: Tue, 20 Oct 2026 07:34:04 +1300 Message-ID: <20261019183407.1037972-18-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261019183407.1037972-1-ankur.tyagi85@gmail.com> References: <20261019183407.1037972-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Mon, 19 Oct 2026 18:34:59 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131144 From: Ankur Tyagi Upstream removed previously-deprecated Makefile/autoconf build system. Changelog: https://github.com/open-iscsi/open-isns/releases/tag/v0.103 --- .../{open-isns_0.102.bb => open-isns_0.103.bb} | 18 +++++++----------- 1 file changed, 7 insertions(+), 11 deletions(-) rename meta-networking/recipes-support/open-isns/{open-isns_0.102.bb => open-isns_0.103.bb} (71%) diff --git a/meta-networking/recipes-support/open-isns/open-isns_0.102.bb b/meta-networking/recipes-support/open-isns/open-isns_0.103.bb similarity index 71% rename from meta-networking/recipes-support/open-isns/open-isns_0.102.bb rename to meta-networking/recipes-support/open-isns/open-isns_0.103.bb index f51887e020..b89c58db78 100644 --- a/meta-networking/recipes-support/open-isns/open-isns_0.102.bb +++ b/meta-networking/recipes-support/open-isns/open-isns_0.103.bb @@ -6,29 +6,25 @@ DESCRIPTION = "This is a partial implementation of RFC4171, the Internet \ Storage Name Service (iSNS). The distribution includes the iSNS server, \ supporting persisten storage of registrations, isnsadm, a command line \ utility for managing nodes, and isnsdd, a corresponding discovery daemon." -HOMEPAGE = "http://github.com/gonzoleeman/open-isns/" +HOMEPAGE = "https://github.com/open-iscsi/open-isns/" LICENSE = "GPL-2.0-or-later AND LGPL-2.0-or-later" LIC_FILES_CHKSUM = "file://COPYING;md5=321bf41f280cf805086dd5a720b37785" SECTION = "net" DEPENDS = "openssl" -SRC_URI = "git://github.com/open-iscsi/open-isns;branch=master;protocol=https \ +SRC_URI = "git://github.com/open-iscsi/open-isns;branch=master;protocol=https;tag=v${PV} \ file://0001-isnsd.socket-use-run-instead-of-var-run.patch \ - " + " -SRCREV = "c0e6d9fedc5a7041260de477fe1a8455fa074113" +SRCREV = "3e053e2a2c83293db7167f336940fec51f32fed7" -inherit systemd autotools-brokensep update-rc.d +inherit meson systemd update-rc.d -EXTRA_OECONF = " --prefix=${prefix} --enable-shared" -EXTRA_OEMAKE += "SYSTEMDDIR=${D}${systemd_unitdir}/system" - -do_install:append () { - oe_runmake INCDIR=${D}${includedir}/libisns/ install_hdrs - oe_runmake LIBDIR=${D}${libdir} install_lib +EXTRA_OEMESON = "-Dsystemddir=${systemd_unitdir} -Drundir=${runtimedir} -Dsecurity=enabled" +do_install:append() { install -D -m 755 ${S}/etc/openisns.init ${D}${sysconfdir}/init.d/openisns sed -i 's|daemon isnsd|start-stop-daemon --start --quiet --oknodo --exec ${sbindir}/isnsd --|' \ ${D}${sysconfdir}/init.d/openisns From patchwork Mon Oct 19 18:34:05 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101322 Received: from mail-pg1-f179.google.com (mail-pg1-f179.google.com [209.85.215.179]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.1774.1792434900320000060 for ; Mon, 19 Oct 2026 11:35:00 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=QNERiHYS; spf=pass (domain: gmail.com, ip: 209.85.215.179, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pg1-f179.google.com with SMTP id 41be03b00d2f7-cd6028ff33fso951899a12.0 for ; Mon, 19 Oct 2026 11:35:00 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792434900; x=1793039700; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=CIM12gUPztq7faTWaT8PUrrWmE44wqu7qL3OqTZQ2h0=; b=QNERiHYSe4HD5aXnLL3PMLohnyWEigRYHfu1Q5RUazgHuVVgIDJzS6qXBBdAEHdFyR W2qnMkofYp8sMabVMeOi2p2jErGnM3P88UYIoZhTgYZfr0K11ONDJ0kXpihVFTYxg20i QlGB1Zfe42cYRnK7yjpNoNLlqt73dv/NxcuNKs3zDwBUecN/+BMU4e3hAg36aSd89S7t D5Zl32Vt+huzWjFCCbMOzkVCvRJjTjByb4zcBUqwsz4Li/mNbS1paVatn1+x3STsZfvj hKYmdkE/rL79F5TdSUnVA+DJdbeA4tVWU/7J8jgCLoytUyfpfc448n9yW+30Y8qYkNFT rQ2g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792434900; x=1793039700; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=CIM12gUPztq7faTWaT8PUrrWmE44wqu7qL3OqTZQ2h0=; b=zkLPys827m5B9STrwoynjHnAwpsTOouu0jW+CNujn3Iprqz2K6nRdV6ZLqij93hTTX EBWJD6SBMjJuqw2PpHptu/I+heVyYb7tVbCJFeWNsZMGgL9npgBnGTGDwxMAKvnxvE6v sf4pSrSiRj8kxpqPVnGWsAi1ierFnu4QVc/sf9BXmT5n2EWo5ofP6A/v8NpNUpkV3WHY 3BP3DNxaTAqMmdCl/JtBGxHE3eRqXCRzasLIrKuHe5EZTQ8vQkTo3RcskSxSULj1Vvjx Y8W37nddttFDhtT2+FjojgsjCekWdQNDyFVi738kYUCw6dpEm9dy5m7Yp3Lj8gDT64DW f17w== X-Gm-Message-State: AFq9FYJbt4CoMctVcmnwnA5j4EFPPHdg+2UM3F+7DVRn08x30HfB1PdD YhD0eiJQYCgvh/NzEgX6RDCVX390wn4nML7bIUKXgILmYHxnI1FWQjJLgfgAvA== X-Gm-Gg: AYBFou1pLIHLQh7VA/lfv/Eeo/a6IGucnL27xTuQ/zbhxHFUcX5gR3Dg0eue09XglNk zskX6sUaZw7EaXJ/7WrKwSlqwsJ/Uzzr1NdaZk5d0dncRAVuC/L3BR+c/rLT6lMp75EYw8kXK4H ssk+32BpdKQ3o5iQ8+UL0xVVaB37lsUO0aqdxdUlFeY5lzKvkxLz6i/6rPB1NZvbdaKz9GpCcFt Tye1KSRditA3jsb9p56yG++3NlUUO0jMJmQWCFN2vjHHv88ZK3ivOUuOSa/oYRC5Xir9NXXE1EK bwOPofmd7iaCMUWSCS+HM3NjlkMFozeNY7nYQXWFMvC2gWLKmqLLeWDKXII5Z94aTTr/FNgiT36 51zXRxbYlt2Zh5MFUigtpZIwLCpB+yD+VyimZ3AhT8XEqzorsKV46VdDGDxdvn6jrmucRwNsFQz Cz0JtAYFgmKC5kFu+5nzRmvAV+FwOVG9TXw4P0Jq71o/oM0amgb43L5JC+m48PpWMKl9Z7dQgF4 1Ygc9Caw3BBH0kdu4H3o171znuuaGMZzlkuVeQ= X-Received: by 2002:a05:6a20:4311:b0:3de:5c73:701 with SMTP id adf61e73a8af0-3e225d6dc82mr6919732637.5.1792434899543; Mon, 19 Oct 2026 11:34:59 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-cd6549fb556sm4632865a12.22.2026.10.19.11.34.57 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 19 Oct 2026 11:34:59 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-oe][PATCH 19/20] imagemagick: upgrade 7.1.2-33 -> 7.1.2-34 Date: Tue, 20 Oct 2026 07:34:05 +1300 Message-ID: <20261019183407.1037972-19-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261019183407.1037972-1-ankur.tyagi85@gmail.com> References: <20261019183407.1037972-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Mon, 19 Oct 2026 18:35:09 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131145 From: Ankur Tyagi Signed-off-by: Ankur Tyagi --- .../{imagemagick_7.1.2-33.bb => imagemagick_7.1.2-34.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-oe/recipes-support/imagemagick/{imagemagick_7.1.2-33.bb => imagemagick_7.1.2-34.bb} (99%) diff --git a/meta-oe/recipes-support/imagemagick/imagemagick_7.1.2-33.bb b/meta-oe/recipes-support/imagemagick/imagemagick_7.1.2-34.bb similarity index 99% rename from meta-oe/recipes-support/imagemagick/imagemagick_7.1.2-33.bb rename to meta-oe/recipes-support/imagemagick/imagemagick_7.1.2-34.bb index 694741704a..7c09525d9a 100644 --- a/meta-oe/recipes-support/imagemagick/imagemagick_7.1.2-33.bb +++ b/meta-oe/recipes-support/imagemagick/imagemagick_7.1.2-34.bb @@ -17,7 +17,7 @@ SRC_URI = "git://github.com/ImageMagick/ImageMagick.git;branch=main;protocol=htt file://imagemagick-ptest.sh \ " -SRCREV = "211e5b975a0019a88dcef5f84c1193f46738d815" +SRCREV = "a0c4bf729a26a5c2feb28b0365b47a8db736078a" inherit autotools pkgconfig update-alternatives ptest export ac_cv_sys_file_offset_bits = "64" From patchwork Mon Oct 19 18:34:06 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101323 Received: from mail-pg1-f174.google.com (mail-pg1-f174.google.com [209.85.215.174]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.1769.1792434902623325389 for ; Mon, 19 Oct 2026 11:35:02 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=Y1GwGzYN; spf=pass (domain: gmail.com, ip: 209.85.215.174, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pg1-f174.google.com with SMTP id 41be03b00d2f7-cd623dfe420so1804951a12.0 for ; Mon, 19 Oct 2026 11:35:02 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792434902; x=1793039702; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=5VfVySfNeBqorzi1ldP0UCxzEgdfl2RQm/k2/E9UBCo=; b=Y1GwGzYNdtdn1O55YM1X+Xbcy3pw+W9oSYVbH+pZMu7Gz6+jDZfm9JbUWqE35NhdVq mJUSWVGRsO88Po2HbD4TV3OfRLe68MTbWYEsVLkkP8vkAWqRWSohCcRs8EIAW4wPLTWK 6CdMcUsafSC7VMLmmxZSkwcA11AW4fC8ccmvAXR3fUYH1FZniTnzW0bQKW51YX9Djcsn bPvFC1kf13MPRGyeJczv5DUuDk1UyaKnVPQaE5QSUzJwdNIW3s6jlARs2TROFFII+Lp5 bajXGN3cuo5vGVRD5XAr9iZ4X8FEa1wO1PqSIjsj+RbpH2G3HKZOWhoA/WXrd8pdEVn/ 0Y+Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792434902; x=1793039702; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=5VfVySfNeBqorzi1ldP0UCxzEgdfl2RQm/k2/E9UBCo=; b=p0EBiGtdLGbj2yjduI8ONyGbXEpVN0CHx8A1CEkF7y0Lv+jadh7Xcwuv6ogw5pMa7m HW+M8JAgMdvvbaxWVZHtQtrSyqTBNspHHvb+D3HnkOIytJACvQZ9zY8LldQQ9i05A3bH licMdQ7s27lgAHN7V/xkIXXxvUbflo29RniMcO/F5E+2vuTKWMYfNhRS4ay2Ex/XKfLk OdMdBoElkVSLhce9vC4FlAQTHZehX6o6519bZ4Xm6txo6QLuC1gQA6+W2J81kk/ZNLpH 5834uYUsCF8dIQWxeiR/lcCXL6t98DMWdu2m287bR/qT5v8R6cZoak6nrOYuh3wkOJLp 19gQ== X-Gm-Message-State: AFq9FYKzaV0tTM8VKaIyow1sURVi803aCEYpizVEbeicYg4YnsBl3d9S QGrGtqZBRkL+s4Sxc+2dlmJuKUS4GM80XZ5DzCWVqYF6+PPI7UOZeq6U9GRgkQ== X-Gm-Gg: AYBFou2n5Z0PtqoxSeWqyBZ8fVgTbZYzqxA2wGMLHpUl/1zqAMj0CDCQEOlzFWHT3Jv WushCwNvoyAlqfV+8zo0UVp5DGWDDTJO+CQKgJMVoWlR4135dtNGm7Ldorwtd8OOzp5vPa+BFWZ tyRf7/N8BYrjIUC8WB8as4ZODKwvBPaY2YkKpMS+KTbm0bh/ZirZ1zMqodGwU3vGO9K95f9N2G1 Bns7QgJy9VjSDcihXn1k3F047T1eO2WUKy6B1Pp4mM7jeJbHQ0xvbYV9yW/8QyoNVx3/sPXZQUE K+Lu97c54+EBPmCRHUKwLSXZ96JEBB8j+JKfjX9UAsuwGUGeHEELg0oT65kF5GtjkQfHT/uqS0P TK+BqT+0m0AOxyZhZASaQKVtqmIE2GH40MBVaTTznFR5xRDhRtMseeLDh2z9BedzHlWlUmw4BQq 7BGZEK9DINw8seofhjlNZWqwhDh7oX/1W+SWL50ioZgLACZXUlQOq2fgP7JU15HBDVAuckXUEc6 S1rTqQgYbFMFIQWwFj5KiMxJWggKZPFdpAshTY= X-Received: by 2002:a05:6a21:730c:b0:3d3:ae50:97c8 with SMTP id adf61e73a8af0-3e226254f11mr6782437637.21.1792434901960; Mon, 19 Oct 2026 11:35:01 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-cd6549fb556sm4632865a12.22.2026.10.19.11.34.59 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 19 Oct 2026 11:35:01 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-multimedia][PATCH 20/20] mpd: upgrade 0.24.15 -> 0.24.16 Date: Tue, 20 Oct 2026 07:34:06 +1300 Message-ID: <20261019183407.1037972-20-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261019183407.1037972-1-ankur.tyagi85@gmail.com> References: <20261019183407.1037972-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Mon, 19 Oct 2026 18:35:09 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131146 From: Ankur Tyagi Changelog: https://github.com/MusicPlayerDaemon/MPD/blob/v0.24.16/NEWS Signed-off-by: Ankur Tyagi --- .../musicpd/{mpd_0.24.15.bb => mpd_0.24.16.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-multimedia/recipes-multimedia/musicpd/{mpd_0.24.15.bb => mpd_0.24.16.bb} (98%) diff --git a/meta-multimedia/recipes-multimedia/musicpd/mpd_0.24.15.bb b/meta-multimedia/recipes-multimedia/musicpd/mpd_0.24.16.bb similarity index 98% rename from meta-multimedia/recipes-multimedia/musicpd/mpd_0.24.15.bb rename to meta-multimedia/recipes-multimedia/musicpd/mpd_0.24.16.bb index 2b1ae309c8..f5e1424a73 100644 --- a/meta-multimedia/recipes-multimedia/musicpd/mpd_0.24.15.bb +++ b/meta-multimedia/recipes-multimedia/musicpd/mpd_0.24.16.bb @@ -21,7 +21,7 @@ DEPENDS += " \ SRC_URI = "git://github.com/MusicPlayerDaemon/MPD;branch=master;protocol=https;tag=v${PV} \ file://mpd.conf.in \ " -SRCREV = "b1c87eb85e9b211369e42433526b55469bf1b6c9" +SRCREV = "a07478faa8c94cef77b22e62d755ab19e30b9085" EXTRA_OEMESON += "${@bb.utils.contains('DISTRO_FEATURES', 'systemd', '-Dsystemd=enabled -Dsystemd_system_unit_dir=${systemd_system_unitdir} -Dsystemd_user_unit_dir=${systemd_user_unitdir}', '-Dsystemd=disabled', d)} \