From patchwork Tue Oct 20 08:26:05 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Daniel Turull X-Patchwork-Id: 101358 X-Patchwork-Delegate: yoann.congal@smile.fr Received: from DU2PR03CU002.outbound.protection.outlook.com (DU2PR03CU002.outbound.protection.outlook.com [52.101.65.54]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.2689.1792484786121013839 for ; Tue, 20 Oct 2026 01:26:26 -0700 Authentication-Results: mx.groups.io; dkim=fail reason="dkim: body hash did not verify" header.i=@ericsson.com header.s=selector2 header.b=ef0P0Ub/; spf=pass (domain: ericsson.com, ip: 52.101.65.54, mailfrom: edaturu@ericsson.com) ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=W5Z9OfJJlYu/kJVM4UILhBrPpVosidCKlBHqm9rWWvVmQG/4GHiWKCY+xZBpMjSoFwJ20YQ+79Jd9phwWxiszeHaKHmRL4oATNOLixqxXG1TLnzIaGKxKp/ZLoEIOdqGBBa26uaHnEM248MoTwJ4re++AlMRytfMRV0DWcmwRhBHkAQ5i0M1i1k79sPKRSIh4rb5xv1wDtRwdQFsqaWHW3S9/uovTlRQxyreCa4iueyoV/YFoJK11yz0MRYPbIkPFSUIOp/W2aTlIGCA+KsOmBaWuCgkeewaz5xXnDJhOc3VHL88lBsSAYQeJPOO4RkTPJ8sTNTiitjU+2iov1ObwA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=VTZJtFq/4pzFIgFpQyiX18EFtWP20g0JHZ0XREDUEMw=; b=Q0tnKbJc9aOhKyz/aiS9Cl4dgd3HV9/5Ox+1elyujr0ZJjvJDLXv+af93a5+oF3GOK08r678dExnv9CjGBTQdzxrAf1Y689xUpGhwh3fFZYIU59HYTDljcit7XxZEIZpIJBRiVJBnXm3FqKGSTAflbLST9TynMXN1wmQi2spDZORAya1/gBCXMtZIVAycRRWITCqF7rDqaQVXrftw7t/yJTdETtxFldVMIcuXCSS5V7O/yoUXoASw0iJzqdpZ/1nlKDTy2fdTAXGrK3qkdRHMZps+Ic9iQo5UfFUSgoEYCEugD4H5XtjJu5g2zNOM41q4Ud5BABUpUTJTJ8HR1gOQg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is 192.176.1.74) smtp.rcpttodomain=lists.openembedded.org smtp.mailfrom=ericsson.com; dmarc=pass (p=reject sp=reject pct=100) action=none header.from=ericsson.com; dkim=none (message not signed); arc=none (0) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=VTZJtFq/4pzFIgFpQyiX18EFtWP20g0JHZ0XREDUEMw=; b=ef0P0Ub/YbTP6VZ8ZcIKIl6nPYSRh6yFh1hcfEIFvmymkQRHN3XJOD4kB8XvXnQ0sOKSFduQDE0HH8dIjObYsdjjVua9oJU93qu6eLebd/K4NHcfx1LHEZ9pnw2dGdE8i8vQr9Yh6sW7qEFkyVU0A1OImwpxntKoOI74yJQsmL7wCAsTZRv7GklgWHL4Zo2fUk08argD6+YE2SjpUy2cblEFYNArv5aHWak7jYyRv74VvgPNwpH3wiDhfyWmc78teRHWMiQnINRkKClfecKWbzmKS8wvazW7flM/Litc7is3HNS1eTRPUl+obgbjnl2t2xDKNKxAA7rQomo/1Ir3wg== Received: from DX0P273CA0054.AREP273.PROD.OUTLOOK.COM (2603:1086:300:5a::19) by AMVPR07MB12283.eurprd07.prod.outlook.com (2603:10a6:20b:772::5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.522.19; Tue, 20 Oct 2026 08:26:20 +0000 Received: from AMS1EPF0000008F.eurprd05.prod.outlook.com (2603:1086:300:5a:cafe::1b) by DX0P273CA0054.outlook.office365.com (2603:1086:300:5a::19) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.522.20 via Frontend Transport; Tue, 20 Oct 2026 08:26:19 +0000 X-MS-Exchange-Authentication-Results: mx.microsoft.com 1; spf=pass (sender IP is 192.176.1.74) smtp.mailfrom=ericsson.com; dkim=none (message not signed) header.d=none;dmarc=pass action=none header.from=ericsson.com; Received-SPF: Pass (protection.outlook.com: domain of ericsson.com designates 192.176.1.74 as permitted sender) receiver=protection.outlook.com; client-ip=192.176.1.74; helo=oa.msg.ericsson.com; pr=C Received: from oa.msg.ericsson.com (192.176.1.74) by AMS1EPF0000008F.mail.protection.outlook.com (10.167.242.86) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.522.6 via Frontend Transport; Tue, 20 Oct 2026 08:26:18 +0000 Received: from seroius18813.sero.gic.ericsson.se (153.88.142.248) by smtp-central.internal.ericsson.com (100.87.178.68) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.43; Tue, 20 Oct 2026 10:26:16 +0200 Received: from seroius08462.sero.gic.ericsson.se (seroius08462.sero.gic.ericsson.se [10.63.237.245]) by seroius18813.sero.gic.ericsson.se (Postfix) with ESMTP id 96D5C95806; Tue, 20 Oct 2026 10:26:15 +0200 (CEST) Received: by seroius08462.sero.gic.ericsson.se (Postfix, from userid 160155) id 66CD5700E7CC; Tue, 20 Oct 2026 10:26:15 +0200 (CEST) From: To: CC: Daniel Turull Subject: [wrynose][PATCH 1/7] xz: upgrade 5.8.2 -> 5.8.4 Date: Tue, 20 Oct 2026 10:26:05 +0200 Message-ID: <20261020082611.3115623-2-daniel.turull@ericsson.com> X-Mailer: git-send-email 2.55.0 In-Reply-To: <20261020082611.3115623-1-daniel.turull@ericsson.com> References: <20261020082611.3115623-1-daniel.turull@ericsson.com> MIME-Version: 1.0 Return-Path: edaturu@ericsson.com X-EOPAttributedMessage: 0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: AMS1EPF0000008F:EE_|AMVPR07MB12283:EE_ X-MS-Office365-Filtering-Correlation-Id: a149be20-4840-465c-a06d-08df2e83d060 X-SMTP-Server: smtp-central.internal.ericsson.com X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|1800799024|23010399003|376014|36860700016|82310400026|56012099006|260925021911599003|261009223027099003|11063799006|260925022911599003|260925021311599003|10067099003|18002099003|22082099003|12006099003|6133799003|13003099007; X-Microsoft-Antispam-Message-Info: IG8uzKccGXgvfy/xfq/WLtrHzPAK2uAmEG2DOoGpJcxz5MuRW5lYxy2FCXIXVefIWdvPzXNgcqyNI2O+zFIf/Dxzg6joIVisl4EJO1khJUpnsBfDb6PViW125v6Sjfjv/ci40dy9uEEZU82lLPJ/mzAlgODtGUrnm8dHicVuCHXEURBm09EqqgEMnyLPuD6dJWScCpP7utrWNTSIzey0qb4z5S5c3ErazhFhRqIlyu09Zp9EEDAE9pbEsmGYtRLpNZ0TQlCNAvzKjUZavvwpxtNBM5q9ixC6HpN7TSH26sK1pwchBz4maD4Z6I/JiMKNrJVg7rcUF5ZiHgHgg2VGdXke7Eq+YbOlugjWK/U/KbNaC50Mr5RHOO+Mx+GLOM/Layk7jmza2N4dbJ4WxukQ3SG8Li6c+Q6m5edqVAkJgwiPYZ3Uky9TUHt7EN5ZgzHvOlyfSUBmqG1/wqDJ+WEUHK47PnimyF2aU1OJFtVhuenIdtQVMj55wwjMWLKkUMNfp7fuEkX2HQJuKHIiv307jS8wvcGD5Vh/MHNSJfFFFWPkz6x6mXS7p0O6S1xHPm9mVKckg3NLG3l9llRCQf3U7l8yUdmPii1YHhHTDOtexzw9zPHmFquJGCSm0nuyqI/gIkgatU8jN6PqZ+Zz96uamiERbUr7UOoLU/aYK0pLAu0BrkPDk3TXKbZw5JQv1zaaAgpitszbN/bTZG9R9JL0gA== X-Forefront-Antispam-Report: CIP:192.176.1.74;CTRY:SE;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:oa.msg.ericsson.com;PTR:office365.se.ericsson.net;CAT:NONE;SFS:(13230040)(1800799024)(23010399003)(376014)(36860700016)(82310400026)(56012099006)(260925021911599003)(261009223027099003)(11063799006)(260925022911599003)(260925021311599003)(10067099003)(18002099003)(22082099003)(12006099003)(6133799003)(13003099007);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: cvYKxd9bta01iYvPH0up9a9PE6nHFn4//pN4+yHlZG+BHPI+5S0D6RhmlPBkQlsrA2VOGhi2iMQBjG2iW5Qh74RA5y2fImhZFNKiKndTUDkaoMnK/DvI+6S7Fh0ly2A6TXQEISexHyj4RNubZ7T2oe61uLRNGxMA2nUn40qfqDO3d7sLNgi/HoOYhNBvjlS4l7MlW+fYO0I/7ZA0S1SmlS5l2gntZEbDvmecX96CFJW2bSW9LYAybxbm+DW7Q/C8DWvhl6D9GukAPveXGWKKiNkHLiioWi647Be4bXGlM4zFmImzgDDwdMGPzEMmq8Kd8bPdGg3TQBEs8SFqtfkFc1ICGlWY7zIaMmbwZLgG3G8iu/RqehN9saubr3kEVxfpQV43SwRTlp6tw583AZeB3MRQSzAsV4RYBgPeMRUtQQovUSA8EkT98YTJLajeqIEY X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 20 Oct 2026 08:26:18.0814 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: a149be20-4840-465c-a06d-08df2e83d060 X-MS-Exchange-CrossTenant-Id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=92e84ceb-fbfd-47ab-be52-080c6b87953f;Ip=[192.176.1.74];Helo=[oa.msg.ericsson.com] X-MS-Exchange-CrossTenant-AuthSource: AMS1EPF0000008F.eurprd05.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: AMVPR07MB12283 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Tue, 20 Oct 2026 08:26:28 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/248250 From: Daniel Turull Security fixes in 5.8.3-5.8.4: - CVE-2026-34743: buffer overflow in lzma_index_append() when appending records to an lzma_index decoded from an Index with no Records - GHSA-5qpq-xqfv-j9pg: invalid memory access in the alone/lzip/auto/ microlzma decoders when reinitializing after a failed allocation - xz: use-after-free showing an error message for --files/--files0 from XZ_OPT/XZ_DEFAULTS, and another use-after-free with --verbose when stderr isn't a terminal The carried backport of the CVE-2026-34743 fix is dropped: it is included in 5.8.3 and applying it again duplicated the check in lzma_index_prealloc(). Other fixes: lzma_index_cat() performance/overflow, lzma_memused() misreporting, lzma_index_dup() check-type copying, threaded decoder progress sync, Landlock ABI 9 support. Signed-off-by: Daniel Turull --- ...buffer-overflow-in-lzma_index_append.patch | 66 ------------------- .../xz/{xz_5.8.2.bb => xz_5.8.4.bb} | 3 +- 2 files changed, 1 insertion(+), 68 deletions(-) delete mode 100644 meta/recipes-extended/xz/xz/0001-liblzma-Fix-a-buffer-overflow-in-lzma_index_append.patch rename meta/recipes-extended/xz/{xz_5.8.2.bb => xz_5.8.4.bb} (95%) diff --git a/meta/recipes-extended/xz/xz/0001-liblzma-Fix-a-buffer-overflow-in-lzma_index_append.patch b/meta/recipes-extended/xz/xz/0001-liblzma-Fix-a-buffer-overflow-in-lzma_index_append.patch deleted file mode 100644 index d3918233ea..0000000000 --- a/meta/recipes-extended/xz/xz/0001-liblzma-Fix-a-buffer-overflow-in-lzma_index_append.patch +++ /dev/null @@ -1,66 +0,0 @@ -From c8c22869e780ff57c96b46939c3d79ff99395f87 Mon Sep 17 00:00:00 2001 -From: Lasse Collin -Date: Sun, 29 Mar 2026 19:11:21 +0300 -Subject: [PATCH] liblzma: Fix a buffer overflow in lzma_index_append() - -If lzma_index_decoder() was used to decode an Index that contained no -Records, the resulting lzma_index had an invalid internal "prealloc" -value. If lzma_index_append() was called on this lzma_index, too -little memory would be allocated and a buffer overflow would occur. - -While this combination of the API functions is meant to work, in the -real-world apps this call sequence is rare or might not exist at all. - -This bug is older than xz 5.0.0, so all stable releases are affected. - -Reported-by: GitHub user christos-spearbit - -CVE: CVE-2026-34743 -Upstream-Status: Backport [https://github.com/tukaani-project/xz/commit/c8c22869e780ff57c96b46939c3d79ff99395f87] -Signed-off-by: Ross Burton ---- - src/liblzma/common/index.c | 21 +++++++++++++++++++++ - 1 file changed, 21 insertions(+) - -diff --git a/src/liblzma/common/index.c b/src/liblzma/common/index.c -index 6add6a68..c4aadb9b 100644 ---- a/src/liblzma/common/index.c -+++ b/src/liblzma/common/index.c -@@ -433,6 +433,26 @@ lzma_index_prealloc(lzma_index *i, lzma_vli records) - if (records > PREALLOC_MAX) - records = PREALLOC_MAX; - -+ // If index_decoder.c calls us with records == 0, it's decoding -+ // an Index that has no Records. In that case the decoder won't call -+ // lzma_index_append() at all, and i->prealloc isn't used during -+ // the Index decoding either. -+ // -+ // Normally the first lzma_index_append() call from the Index decoder -+ // would reset i->prealloc to INDEX_GROUP_SIZE. With no Records, -+ // lzma_index_append() isn't called and the resetting of prealloc -+ // won't occur either. Thus, if records == 0, use the default value -+ // INDEX_GROUP_SIZE instead. -+ // -+ // NOTE: lzma_index_append() assumes i->prealloc > 0. liblzma <= 5.8.2 -+ // didn't have this check and could set i->prealloc = 0, which would -+ // result in a buffer overflow if the application called -+ // lzma_index_append() after decoding an empty Index. Appending -+ // Records after decoding an Index is a rare thing to do, but -+ // it is supposed to work. -+ if (records == 0) -+ records = INDEX_GROUP_SIZE; -+ - i->prealloc = (size_t)(records); - return; - } -@@ -685,6 +705,7 @@ lzma_index_append(lzma_index *i, const lzma_allocator *allocator, - ++g->last; - } else { - // We need to allocate a new group. -+ assert(i->prealloc > 0); - g = lzma_alloc(sizeof(index_group) - + i->prealloc * sizeof(index_record), - allocator); --- -2.43.0 - diff --git a/meta/recipes-extended/xz/xz_5.8.2.bb b/meta/recipes-extended/xz/xz_5.8.4.bb similarity index 95% rename from meta/recipes-extended/xz/xz_5.8.2.bb rename to meta/recipes-extended/xz/xz_5.8.4.bb index 5e7ad1fc70..1c0e972c39 100644 --- a/meta/recipes-extended/xz/xz_5.8.2.bb +++ b/meta/recipes-extended/xz/xz_5.8.4.bb @@ -26,10 +26,9 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=d38d562f6112174de93a9677682231b2 \ " SRC_URI = "https://github.com/tukaani-project/xz/releases/download/v${PV}/xz-${PV}.tar.gz \ - file://0001-liblzma-Fix-a-buffer-overflow-in-lzma_index_append.patch \ file://run-ptest \ " -SRC_URI[sha256sum] = "ce09c50a5962786b83e5da389c90dd2c15ecd0980a258dd01f70f9e7ce58a8f1" +SRC_URI[sha256sum] = "0014c7886930454fe8bd4228665b51af55eeae560ea135c9c4cd33f55b2591d9" UPSTREAM_CHECK_REGEX = "releases/tag/v(?P\d+(\.\d+)+)" UPSTREAM_CHECK_URI = "https://github.com/tukaani-project/xz/releases/" From patchwork Tue Oct 20 08:26:06 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Daniel Turull X-Patchwork-Id: 101357 X-Patchwork-Delegate: yoann.congal@smile.fr Received: from AS8PR04CU009.outbound.protection.outlook.com (AS8PR04CU009.outbound.protection.outlook.com [52.101.70.43]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.2672.1792484782702116704 for ; Tue, 20 Oct 2026 01:26:23 -0700 Authentication-Results: mx.groups.io; dkim=fail reason="dkim: body hash did not verify" header.i=@ericsson.com header.s=selector2 header.b=LfcCwv5o; spf=pass (domain: ericsson.com, ip: 52.101.70.43, mailfrom: edaturu@ericsson.com) ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=JiNSP53XR3TKyi4s+YDKJ4/atp2fo3xzHincfC/3egrYVS8DFDN9C3TfZMUQx7kFGkiD/MvlHsRsG58+KhzUB5f8yWzx4u93ZLWDoMKK+CrS0G14XGnTMdJGd3YCNNBux2f0fBh5ML5LEQN6ojLQz7AtgIbQ31LSmhMPM3SkKrahXjUgqhVJJo/NnYjbsg/Brlt51T/OeRE775xTR3rWqCpCWPmEHwrLGVweW8Psd2nzH37MISJYj0FSY5EuRQCPRXIHigeUfgmjipvQ9nAG0Fxdnd075LJJvReZ0B0Vd90lNm0led3kVPR1kQVmZpEhuM9CVQgXEDgnBZPsDc+k5g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=/7ftkHwi/DteMO6laEzTeTCnT9VFRMnEKSh8QwchqSo=; b=pSoO/7uXKoZrlac83QBV2HYPHN1j8mhWxIyvjBMT5adcBzMK9bdYK1Hg2cb84G2vIX4QyM62ZbcLeQJx0JBhCTVIASkdG66qlRIudHjwFscuFOZTmj2LZrXi8Ne30CFQqQPvG0BYJeGjiLFo3RV0NQ710Ob81MT54pwFO1bCS4X8qyLlPDBgBfVhcqmvtvtzmq4VjiNxGylyX5AsI2SbOmxBBS4VZTqT1E4HUdyoFvxLEWyykGZMQtu9fL098H1IQ/7F6abSP7wUWiyccUcug5BTySfzYA5gTPAd0rdZhXb67cIDt+NRASzhqXE4nNvBZvA0Ugx1VrDmuXNjBeaFfQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is 192.176.1.74) smtp.rcpttodomain=lists.openembedded.org smtp.mailfrom=ericsson.com; dmarc=pass (p=reject sp=reject pct=100) action=none header.from=ericsson.com; dkim=none (message not signed); arc=none (0) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=/7ftkHwi/DteMO6laEzTeTCnT9VFRMnEKSh8QwchqSo=; b=LfcCwv5ovAeI+JAcv6iOrJrlL8pxRO1pu12zKP5KmqR5dpvbJaUYQvf05ce2n5Dwll8G+iVPGFJQwalLngvUqgqOdRNE5hM3JcdjJq5uM6kAqFm61lI2OSCaf0jy01kKBnij3BMEf6IEPTOX/i8jJZ9lyHCnaVnMRiPwEUbCIbXi/LfTURago4qsM/NzNRaxHWz9+hIImYe2a1WrEXYd3faBtxTBOHPbBcjPgAq+WUd5sat+xPWj0WNrBFK+6NJboKDaewVzd+G17uFalmkj/5TzGf+kXgH+o7h+PLwXMd/yFy+/Tgc2P1J72gASDsdGoC4wYVck02UQDqFzcwPLFg== Received: from VIVP296CA0020.AUTP296.PROD.OUTLOOK.COM (2603:10a6:800:354::15) by DB9PR07MB9932.eurprd07.prod.outlook.com (2603:10a6:10:4cd::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.522.19; Tue, 20 Oct 2026 08:26:17 +0000 Received: from MA3PEPF00000408.eurprd04.prod.outlook.com (2603:10a6:800:354:cafe::a9) by VIVP296CA0020.outlook.office365.com (2603:10a6:800:354::15) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.522.20 via Frontend Transport; Tue, 20 Oct 2026 08:26:17 +0000 X-MS-Exchange-Authentication-Results: mx.microsoft.com 1; spf=pass (sender IP is 192.176.1.74) smtp.mailfrom=ericsson.com; dkim=none (message not signed) header.d=none;dmarc=pass action=none header.from=ericsson.com; Received-SPF: Pass (protection.outlook.com: domain of ericsson.com designates 192.176.1.74 as permitted sender) receiver=protection.outlook.com; client-ip=192.176.1.74; helo=oa.msg.ericsson.com; pr=C Received: from oa.msg.ericsson.com (192.176.1.74) by MA3PEPF00000408.mail.protection.outlook.com (10.167.241.153) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.522.6 via Frontend Transport; Tue, 20 Oct 2026 08:26:16 +0000 Received: from seroius18815.sero.gic.ericsson.se (153.88.142.248) by smtp-central.internal.ericsson.com (100.87.178.69) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.43; Tue, 20 Oct 2026 10:26:15 +0200 Received: from seroius08462.sero.gic.ericsson.se (seroius08462.sero.gic.ericsson.se [10.63.237.245]) by seroius18815.sero.gic.ericsson.se (Postfix) with ESMTP id 963F44020B42; Tue, 20 Oct 2026 10:26:15 +0200 (CEST) Received: by seroius08462.sero.gic.ericsson.se (Postfix, from userid 160155) id 6B2607003EA9; Tue, 20 Oct 2026 10:26:15 +0200 (CEST) From: To: CC: Daniel Turull Subject: [wrynose][PATCH 2/7] glib-2.0-initial,glib-2.0: upgrade 2.88.2 -> 2.88.4 Date: Tue, 20 Oct 2026 10:26:06 +0200 Message-ID: <20261020082611.3115623-3-daniel.turull@ericsson.com> X-Mailer: git-send-email 2.55.0 In-Reply-To: <20261020082611.3115623-1-daniel.turull@ericsson.com> References: <20261020082611.3115623-1-daniel.turull@ericsson.com> MIME-Version: 1.0 Return-Path: edaturu@ericsson.com X-EOPAttributedMessage: 0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: MA3PEPF00000408:EE_|DB9PR07MB9932:EE_ X-MS-Office365-Filtering-Correlation-Id: 4f103145-fab9-41a5-e041-08df2e83cf74 X-SMTP-Server: smtp-central.internal.ericsson.com X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|36860700016|376014|82310400026|23010399003|1800799024|261009223027099003|10067099003|56012099006|6133799003|22082099003|18002099003|11063799006; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:192.176.1.74;CTRY:SE;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:oa.msg.ericsson.com;PTR:office365.se.ericsson.net;CAT:NONE;SFS:(13230040)(36860700016)(376014)(82310400026)(23010399003)(1800799024)(261009223027099003)(10067099003)(56012099006)(6133799003)(22082099003)(18002099003)(11063799006);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: 2PgIU40uR28QYN7FmzZ4+YN5FdGUmIIs2oa3YN9g/ZhDNA2fNDQ+Vv7sYZ/ENjIQ/kTYk1hruQFmKo+HmPav+50H69G9Fn/g9K55F3tYYwYO4eo4bChXKs/hWVj64Q1naITrxGEbM84fteQCJOAl0oE0dxYx9QM683IUoO37JFdbCBjvAQzGpThXHOoTBZxYA6EmLI54wtT02GPnoXKTdiqEVAUXq1cNn4mSDyGV/nyP1/oGn8HkUmcB8EkLXgTDoED83deRTJw3qsyixAi9iRsZZrhsrKhqhPATYb4z8/SEuNfftaKQZR0hwR/5yAxeE2mdcZU8aq/nwuoZPx4b6fBKSrq/jTLGeDE28bsfbvVaCq2SmiguCqGvoENfszsCS6aDQmvTijdvJ6EM9psSQbongzVi0rxOh5ve7Ihw8ozWJVChZV0VK+jtr1gSCvDO X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 20 Oct 2026 08:26:16.4883 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 4f103145-fab9-41a5-e041-08df2e83cf74 X-MS-Exchange-CrossTenant-Id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=92e84ceb-fbfd-47ab-be52-080c6b87953f;Ip=[192.176.1.74];Helo=[oa.msg.ericsson.com] X-MS-Exchange-CrossTenant-AuthSource: MA3PEPF00000408.eurprd04.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB9PR07MB9932 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Tue, 20 Oct 2026 08:26:27 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/248246 From: Daniel Turull Changes in 2.88.3-2.88.4 (per NEWS): - CVE-2026-15588: GDBusServer pre-authentication DoS via unbounded SASL line buffering - Security hardening backport: overflow/bounds checks in GSocketAddress, Unicode normalization, GResource, GVariant, logging, and GMarkup error paths - Fix miscompilation with GCC 17 caused by G_GNUC_CONST on get_type() functions - Fix handling of long filenames when moving files to trash Signed-off-by: Daniel Turull --- .../{glib-2.0-initial_2.88.2.bb => glib-2.0-initial_2.88.4.bb} | 0 .../glib-2.0/{glib-2.0_2.88.2.bb => glib-2.0_2.88.4.bb} | 0 meta/recipes-core/glib-2.0/glib.inc | 2 +- 3 files changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-core/glib-2.0/{glib-2.0-initial_2.88.2.bb => glib-2.0-initial_2.88.4.bb} (100%) rename meta/recipes-core/glib-2.0/{glib-2.0_2.88.2.bb => glib-2.0_2.88.4.bb} (100%) diff --git a/meta/recipes-core/glib-2.0/glib-2.0-initial_2.88.2.bb b/meta/recipes-core/glib-2.0/glib-2.0-initial_2.88.4.bb similarity index 100% rename from meta/recipes-core/glib-2.0/glib-2.0-initial_2.88.2.bb rename to meta/recipes-core/glib-2.0/glib-2.0-initial_2.88.4.bb diff --git a/meta/recipes-core/glib-2.0/glib-2.0_2.88.2.bb b/meta/recipes-core/glib-2.0/glib-2.0_2.88.4.bb similarity index 100% rename from meta/recipes-core/glib-2.0/glib-2.0_2.88.2.bb rename to meta/recipes-core/glib-2.0/glib-2.0_2.88.4.bb diff --git a/meta/recipes-core/glib-2.0/glib.inc b/meta/recipes-core/glib-2.0/glib.inc index cad74f53f7..7e7725f9bd 100644 --- a/meta/recipes-core/glib-2.0/glib.inc +++ b/meta/recipes-core/glib-2.0/glib.inc @@ -242,7 +242,7 @@ SRC_URI:append:class-native = " file://relocate-modules.patch \ file://0001-meson.build-do-not-enable-pidfd-features-on-native-g.patch \ " -SRC_URI[archive.sha256sum] = "cf3f215a640c8a4257f14317586b8f1fdd25a10a93cb4bdda147c0f9ad88e74f" +SRC_URI[archive.sha256sum] = "25fd169f3b2f91fe2391ad297883ce0fcf30c69fc789ffd1c9672d1332b1c5a8" # Find any meson cross files in FILESPATH that are relevant for the current # build (using siteinfo) and add them to EXTRA_OEMESON. From patchwork Tue Oct 20 08:26:07 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Daniel Turull X-Patchwork-Id: 101356 X-Patchwork-Delegate: yoann.congal@smile.fr Received: from MRWPR03CU001.outbound.protection.outlook.com (MRWPR03CU001.outbound.protection.outlook.com [40.107.130.25]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.2673.1792484785293925076 for ; Tue, 20 Oct 2026 01:26:25 -0700 Authentication-Results: mx.groups.io; dkim=fail reason="dkim: body hash did not verify" header.i=@ericsson.com header.s=selector2 header.b=l1otWTBw; spf=pass (domain: ericsson.com, ip: 40.107.130.25, mailfrom: edaturu@ericsson.com) ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=ovOYccjqGCNosI1YzZOVKbyhjf2HvzZXHXBBfazxmWr9157wBEJvF5CsW82u69zTDknpazL4KYGr+7gMtl/5nOa0wFVc59HNXtK0XGZoX5frRS6+DlFYFz7WkDa3iQB2r4qxUpiiEvX2zCdvwnzEY8E7j/IyfLnKzIHTw0tbmSGU3HsiatIia92TdIm9lghUmGYBn186jOsO7vTQFzQ46/cZYFHJdTtS1eH9gzbVv6Hsz1BmWZR1pkRnNBmz1ONxnejEHEc2XMmFlvPvvL7Xe/lsppvki9dTlPqzawfF0QP52xHoWyMzVw6zsOHPao4xSdyynNZ7r2pFgHXurhUBqw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=a4oqrz1xWml6D93eXB+VkQRNv/ttZ8kILL6sPAWTg/M=; b=R+6Ei09Wcn2/1cX9yAO4V7naBpgn/xutlkYKOQZYmKye+MQGhlXWQbRmH6QrztfpXjpwN3hY/CrELUSXRzUYdlphPIfrwuh2IxEjfwGtceAla7KSuy5nZgySlUnDjUH0wbJ+h0gMRNxN00YrpafyuKvdIE40H6rPYDUpArUb4NdMEfKAidhxsGPTkXGRM610l85L1BtY0IwT9p6WRzDo2wEjZdQ09lcuLVU+K0Gjt73/rjswWvgj8Dki28NMgslZGVM6z9Eaaq3bRSA0MkhF85jQIsOE77sI4u34TP/moEjECt4gJ0AB+N5uVl/dc0R8uFUayRNXzS2oWCde67NgZg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is 192.176.1.74) smtp.rcpttodomain=lists.openembedded.org smtp.mailfrom=ericsson.com; dmarc=pass (p=reject sp=reject pct=100) action=none header.from=ericsson.com; dkim=none (message not signed); arc=none (0) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=a4oqrz1xWml6D93eXB+VkQRNv/ttZ8kILL6sPAWTg/M=; b=l1otWTBwLuYd+BF3Jj6fb+AdLBqmTQZ0G078KNScgsuvUuGNL4eWoEFzT21Uc4NSzWsOjQTpFVdtPZiHZ2jXKjO2LuOxZks7XgwgmBjJNELbbo2kLlH/VZBJ7/Pl7kqBtuHQqj6mvaJLAiINZFvpvEVlMLA9uTe3lvmgtOnfkK3OkjUBKJEZ571MHV/FsRczhJmRCB6Ne1P3L7AZ3lzVt8XzI0c+yhP9+G6E1H4PZFU8Yac4c3glFY/RpQ+88ij4qKIB7OhjN8mvY3ORVIhRbtPO8we3If0zEFIZMKF40IzxAPpuJrlDQPpmuZsH6ch6EvbSJ1QSmg7+znP0t/8odA== Received: from CP7P275CA0039.ZAFP275.PROD.OUTLOOK.COM (2603:1086:100:66::13) by GV2PR07MB9060.eurprd07.prod.outlook.com (2603:10a6:150:bd::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.546.15; Tue, 20 Oct 2026 08:26:19 +0000 Received: from MAD0EPF000008AC.eurprd04.prod.outlook.com (2603:1086:100:66:cafe::5) by CP7P275CA0039.outlook.office365.com (2603:1086:100:66::13) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.522.20 via Frontend Transport; Tue, 20 Oct 2026 08:26:17 +0000 X-MS-Exchange-Authentication-Results: mx.microsoft.com 1; spf=pass (sender IP is 192.176.1.74) smtp.mailfrom=ericsson.com; dkim=none (message not signed) header.d=none;dmarc=pass action=none header.from=ericsson.com; Received-SPF: Pass (protection.outlook.com: domain of ericsson.com designates 192.176.1.74 as permitted sender) receiver=protection.outlook.com; client-ip=192.176.1.74; helo=oa.msg.ericsson.com; pr=C Received: from oa.msg.ericsson.com (192.176.1.74) by MAD0EPF000008AC.mail.protection.outlook.com (10.167.241.185) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.546.15 via Frontend Transport; Tue, 20 Oct 2026 08:26:16 +0000 Received: from seroius18814.sero.gic.ericsson.se (153.88.142.248) by smtp-central.internal.ericsson.com (100.87.178.60) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.43; Tue, 20 Oct 2026 10:26:15 +0200 Received: from seroius08462.sero.gic.ericsson.se (seroius08462.sero.gic.ericsson.se [10.63.237.245]) by seroius18814.sero.gic.ericsson.se (Postfix) with ESMTP id 9AA964020B46; Tue, 20 Oct 2026 10:26:15 +0200 (CEST) Received: by seroius08462.sero.gic.ericsson.se (Postfix, from userid 160155) id 7001F700396D; Tue, 20 Oct 2026 10:26:15 +0200 (CEST) From: To: CC: Daniel Turull Subject: [wrynose][PATCH 3/7] python3: upgrade 3.14.7 -> 3.14.8 Date: Tue, 20 Oct 2026 10:26:07 +0200 Message-ID: <20261020082611.3115623-4-daniel.turull@ericsson.com> X-Mailer: git-send-email 2.55.0 In-Reply-To: <20261020082611.3115623-1-daniel.turull@ericsson.com> References: <20261020082611.3115623-1-daniel.turull@ericsson.com> MIME-Version: 1.0 Return-Path: edaturu@ericsson.com X-EOPAttributedMessage: 0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: MAD0EPF000008AC:EE_|GV2PR07MB9060:EE_ X-MS-Office365-Filtering-Correlation-Id: 68c4aff7-b9a9-406f-b56f-08df2e83cfa2 X-SMTP-Server: smtp-central.internal.ericsson.com X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|23010399003|376014|1800799024|36860700016|82310400026|56012099006|11063799006|261009223027099003|10067099003|18002099003|22082099003|6133799003; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:192.176.1.74;CTRY:SE;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:oa.msg.ericsson.com;PTR:office365.se.ericsson.net;CAT:NONE;SFS:(13230040)(23010399003)(376014)(1800799024)(36860700016)(82310400026)(56012099006)(11063799006)(261009223027099003)(10067099003)(18002099003)(22082099003)(6133799003);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: yKa31VncassNEQfSyHlGj1ZzEdmoa1bSlIeZJ/3ZJTOVtjVl8RmLvnMJbG/0dGFK15YLXm5IsXG9znQH2FNGT5+taSMtrwxhWSsmhHmQdN+bP/cYhFAJGYQK8k4ciANXdM+oOUYIjwZlvHhzt7zdOGxZNmI5I01JyOVgLjiU61Hr+7JH3GS3kot6f4TIgrtsFKQd23/v+jwnCNlJczbVQAZOLSt45NGjyus9frD6eAd6k8Mb4q9pjTgirSmPmF48fSIfAxCF+xqT86mxjIMoLSv+8rKyWGPNKHV1c3QQIYrCY4DWiSYsHU9qVMINrRKBfe2TLHou8vwMhVHANWhjBxtPR56cJzIIdy+v3iizcdPrbxKW14/QyhY0chsaRwTVpc6Sg3UsNL6WLKXq2xaywktiwiYRRZmMRoQ03pHHaY50GqIk+xsK9rXsxRcxkTul X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 20 Oct 2026 08:26:16.7735 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 68c4aff7-b9a9-406f-b56f-08df2e83cfa2 X-MS-Exchange-CrossTenant-Id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=92e84ceb-fbfd-47ab-be52-080c6b87953f;Ip=[192.176.1.74];Helo=[oa.msg.ericsson.com] X-MS-Exchange-CrossTenant-AuthSource: MAD0EPF000008AC.eurprd04.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: GV2PR07MB9060 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Tue, 20 Oct 2026 08:26:27 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/248249 From: Daniel Turull Security fixes in 3.14.8: - CVE-2026-19445: crash in ssl when sni_callback switches SSLContext and the original context is no longer referenced - CVE-2026-15806: scope HTTPPasswordMgr credentials to the URL scheme so HTTPS credentials aren't reused for a matching HTTP URL - asyncio/ssl: validate server_hostname when check_hostname is set, for start_tls(), create_connection() and SSLContext.wrap_bio() - zipfile: bound decompressed data per read for bzip2/LZMA/Zstandard members, matching the existing deflate limit - tarfile: fix extraction filters creating directories outside the destination for names that leave and re-enter it - Bundle libexpat 2.8.5 Signed-off-by: Daniel Turull --- .../python/{python3_3.14.7.bb => python3_3.14.8.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-devtools/python/{python3_3.14.7.bb => python3_3.14.8.bb} (99%) diff --git a/meta/recipes-devtools/python/python3_3.14.7.bb b/meta/recipes-devtools/python/python3_3.14.8.bb similarity index 99% rename from meta/recipes-devtools/python/python3_3.14.7.bb rename to meta/recipes-devtools/python/python3_3.14.8.bb index e73dc8d772..99152fcb2b 100644 --- a/meta/recipes-devtools/python/python3_3.14.7.bb +++ b/meta/recipes-devtools/python/python3_3.14.8.bb @@ -40,7 +40,7 @@ SRC_URI:append:class-native = " \ file://0001-Lib-sysconfig.py-use-prefix-value-from-build-configu.patch \ " -SRC_URI[sha256sum] = "3b48dac8fb59f62eaa67ac83c1eb12bda1b7a08406dd286e252c11a66be27f81" +SRC_URI[sha256sum] = "c2215904f02b175596dc49351585104f4bc20341e1c47378b26a2c274360ce73" # exclude pre-releases for both python 2.x and 3.x UPSTREAM_CHECK_REGEX = "[Pp]ython-(?P\d+(\.\d+)+).tar" From patchwork Tue Oct 20 08:26:08 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Daniel Turull X-Patchwork-Id: 101359 X-Patchwork-Delegate: yoann.congal@smile.fr Received: from AM0PR83CU005.outbound.protection.outlook.com (AM0PR83CU005.outbound.protection.outlook.com [52.101.69.28]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.2687.1792484784475697493 for ; Tue, 20 Oct 2026 01:26:24 -0700 Authentication-Results: mx.groups.io; dkim=fail reason="dkim: body hash did not verify" header.i=@ericsson.com header.s=selector2 header.b=FG4Fa1v1; spf=pass (domain: ericsson.com, ip: 52.101.69.28, mailfrom: edaturu@ericsson.com) ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=t3m5gYQ+bbxiI9xMGBO2WE0zlN3BD+gzUHzq0yj/GoC4OpwBHAAMbSw4qYssfZoCci6wNPM9IEN1xEWEZpuAdSbXi1cu139AHo3QHgLgsd+phbL31g0QFfzK+f75YU7Ze1/8Yx3PoDTFXRIWAFkK2WVpSCpADsiM6rnAWqi2dufOyP9lEw1l+kBy0gAo+W7u5JIAGs+tPGYRfe4c4Ha6DSOZykUxUsat4J5Cpn2MJTV3XcaPqwhysbKz0ebjlUa89mpEG8zB3sFMbBZ6jX02EMNTaKlYdhJSKIOcQvF3D9Eo3YvlIQyMjIDupGSXSuTD2uQFtFlJSQAot9VuDGuitQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=64Pk7yO2aK9FUYFDEezzaexIMtW8U0vr0NQM3PtFo5A=; b=CqidxZlrghV1qwMKm3sM93qvBeYYU3iWaODS43Qwp5CbigMaEYDGiQETIXtvbdPq3f3V5fKOmehd43V0M8nwg/jUR/zIf0deThTpFdr3rOXXoJImlcZsHoWcWYd1R2IrrJ1F4WezNFPiUzbu86hV9GzOlv7PeHi0760AzD/3zse0aTCDYRkgGwu2u/ZWk7+il3pyK7TD9cIhfsbAwyCPhj7hrXglRklrLWtg6SQ4XFwBTyACN34deHodDoF0OytAU80u8ulWsFIeD2AyRTkHeijHq5FgMDYUjz1PI7AVc5gAe0tgF6e/PVOh/wrow5o7YhLU3fIxFmFS49kvyVz5DQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is 192.176.1.74) smtp.rcpttodomain=lists.openembedded.org smtp.mailfrom=ericsson.com; dmarc=pass (p=reject sp=reject pct=100) action=none header.from=ericsson.com; dkim=none (message not signed); arc=none (0) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=64Pk7yO2aK9FUYFDEezzaexIMtW8U0vr0NQM3PtFo5A=; b=FG4Fa1v13DqQb8GjuV1VnfB6DYJ/Asr/pkJ9aU0q97KRTPS2chwVD5MTiiff5kODKH+YteK3XJIgd0trw52QgButzTIII72JHdy42dAffqu4GzaKzfQTloDrlqn2a5QNGufvd8n+eqQk+WaITenlJo6FuoYKV5aUQWvErALlD/SIheOdHSMkOafULbn0IXi3G/g0mKW6eKTvXhP+mn4ZyaF1gunn21yBXeNkwJ4CK4VXS2XjkXrSQfEJpfmdNKGUBcH9p8izx29Zjt6lQZwVru3O0VrX3qjTwd/r5fUgaIlpmB2fIH3sCZWrLVlbCx0EGkPmT5cE3SZuV9elgbESGg== Received: from AS9PR04CA0126.eurprd04.prod.outlook.com (2603:10a6:20b:531::8) by GV4PR07MB11485.eurprd07.prod.outlook.com (2603:10a6:150:2ec::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.522.19; Tue, 20 Oct 2026 08:26:17 +0000 Received: from AMS1EPF0000009A.eurprd02.prod.outlook.com (2603:10a6:20b:531:cafe::6d) by AS9PR04CA0126.outlook.office365.com (2603:10a6:20b:531::8) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.522.19 via Frontend Transport; Tue, 20 Oct 2026 08:26:17 +0000 X-MS-Exchange-Authentication-Results: mx.microsoft.com 1; spf=pass (sender IP is 192.176.1.74) smtp.mailfrom=ericsson.com; dkim=none (message not signed) header.d=none;dmarc=pass action=none header.from=ericsson.com; Received-SPF: Pass (protection.outlook.com: domain of ericsson.com designates 192.176.1.74 as permitted sender) receiver=protection.outlook.com; client-ip=192.176.1.74; helo=oa.msg.ericsson.com; pr=C Received: from oa.msg.ericsson.com (192.176.1.74) by AMS1EPF0000009A.mail.protection.outlook.com (10.167.242.71) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.546.15 via Frontend Transport; Tue, 20 Oct 2026 08:26:16 +0000 Received: from seroius18813.sero.gic.ericsson.se (153.88.142.248) by smtp-central.internal.ericsson.com (100.87.178.61) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.43; Tue, 20 Oct 2026 10:26:15 +0200 Received: from seroius08462.sero.gic.ericsson.se (seroius08462.sero.gic.ericsson.se [10.63.237.245]) by seroius18813.sero.gic.ericsson.se (Postfix) with ESMTP id A893A95807; Tue, 20 Oct 2026 10:26:15 +0200 (CEST) Received: by seroius08462.sero.gic.ericsson.se (Postfix, from userid 160155) id 7468E70038F2; Tue, 20 Oct 2026 10:26:15 +0200 (CEST) From: To: CC: Daniel Turull Subject: [wrynose][PATCH 4/7] lttng-modules: upgrade 2.14.4 -> 2.14.7 Date: Tue, 20 Oct 2026 10:26:08 +0200 Message-ID: <20261020082611.3115623-5-daniel.turull@ericsson.com> X-Mailer: git-send-email 2.55.0 In-Reply-To: <20261020082611.3115623-1-daniel.turull@ericsson.com> References: <20261020082611.3115623-1-daniel.turull@ericsson.com> MIME-Version: 1.0 Return-Path: edaturu@ericsson.com X-EOPAttributedMessage: 0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: AMS1EPF0000009A:EE_|GV4PR07MB11485:EE_ X-MS-Office365-Filtering-Correlation-Id: e3d8ff90-145d-4ad2-a980-08df2e83cf5c X-SMTP-Server: smtp-central.internal.ericsson.com X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|23010399003|1800799024|82310400026|376014|36860700016|11063799006|5023799004|56012099006|260925021911599003|261009223027099003|260925022911599003|260925021311599003|10067099003|22082099003|18002099003|6133799003|12006099003; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:192.176.1.74;CTRY:SE;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:oa.msg.ericsson.com;PTR:office365.se.ericsson.net;CAT:NONE;SFS:(13230040)(23010399003)(1800799024)(82310400026)(376014)(36860700016)(11063799006)(5023799004)(56012099006)(260925021911599003)(261009223027099003)(260925022911599003)(260925021311599003)(10067099003)(22082099003)(18002099003)(6133799003)(12006099003);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: ijmVG1eoToZuAahPPiw1nODXDfMK6gTGOxocjQNE3IA5q8W7tbRzuijUqlGtH6LUeiHoYIN+e79ODH7jGPntNK1aSgznv71AerCwBYdlskVxmAOamJYQKSrIRMDYgGpu+NEC/G854DJRX2i3RyFRSuSG5mALCWak61b6Lf0s1AdHYms/84X+k0Tdm1zWb/ogkH98ZbaHerqGZhSSMIkcGlpbO3USvVPNWS6Pw95CCNckjiE7oQRQnzRlg9WCbtlugDwbPXTPxMsKT2rjgE8J8sU49WrvBbkxKB+ntL2admeOjiHnt7ckrP1mDegpgEMdxCRDAsVTT4tmAVAMy9pJ2hhp/OqappuvNMy7W2k/FAoDigUiyy2FELW3WduIefaQCin4v+5lL/7KdVmSWYPrUUByXaVuxZ/Sk1MRE1/FJepa2Ai0kmVPhR7JozeN/fZn X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 20 Oct 2026 08:26:16.3794 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: e3d8ff90-145d-4ad2-a980-08df2e83cf5c X-MS-Exchange-CrossTenant-Id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=92e84ceb-fbfd-47ab-be52-080c6b87953f;Ip=[192.176.1.74];Helo=[oa.msg.ericsson.com] X-MS-Exchange-CrossTenant-AuthSource: AMS1EPF0000009A.eurprd02.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: GV4PR07MB11485 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Tue, 20 Oct 2026 08:26:28 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/248248 From: Daniel Turull Changes 2.14.5-2.14.7 (from ChangeLog): - fix: adjust range in btrfs probe for v6.18.14 - fix: ASoC: soc-dapm: move struct snd_soc_dapm_context (v7.0) - Fix: kallsyms on powerpc64 with ABI V1 - fix: hrtimer: Reduce trace noise in hrtimer_start() (v7.1, v6.1.175, Ubuntu-6.8.0-136) - fix: ext4/vfs/btrfs/mm tracepoint updates for newer kernels - fix: leaked file and fd on channel create error - fix: warning -Wordered-compare-function-pointers / -Wcast-function-type-strict with LLVM - Fix: ring buffer: zeroed UUID in populated empty packet headers Two carried patches backport the hrtimer and btrfs fixes above (b77f94c7a7, de7ca66c797), now redundant since both are in 2.14.7 natively; drop them. Only the OE-specific Kbuild CONFIG_TRACEPOINTS-to-warning patch is kept. Verified do_compile succeeds. AI-Generated: Uses Kiro with Claude Sonnet 5 Signed-off-by: Daniel Turull --- ...st-range-in-btrfs-probe-for-v6.18.14.patch | 36 ------ ...ce-trace-noise-in-hrtimer_start-v7.1.patch | 103 ------------------ ...ules_2.14.4.bb => lttng-modules_2.14.7.bb} | 4 +- 3 files changed, 1 insertion(+), 142 deletions(-) delete mode 100644 meta/recipes-kernel/lttng/lttng-modules/0001-fix-adjust-range-in-btrfs-probe-for-v6.18.14.patch delete mode 100644 meta/recipes-kernel/lttng/lttng-modules/0001-fix-hrtimer-Reduce-trace-noise-in-hrtimer_start-v7.1.patch rename meta/recipes-kernel/lttng/{lttng-modules_2.14.4.bb => lttng-modules_2.14.7.bb} (87%) diff --git a/meta/recipes-kernel/lttng/lttng-modules/0001-fix-adjust-range-in-btrfs-probe-for-v6.18.14.patch b/meta/recipes-kernel/lttng/lttng-modules/0001-fix-adjust-range-in-btrfs-probe-for-v6.18.14.patch deleted file mode 100644 index 662a803680..0000000000 --- a/meta/recipes-kernel/lttng/lttng-modules/0001-fix-adjust-range-in-btrfs-probe-for-v6.18.14.patch +++ /dev/null @@ -1,36 +0,0 @@ -From de7ca66c797ba0b3273a217a47c8fb791d896f7c Mon Sep 17 00:00:00 2001 -From: Michael Jeanson -Date: Fri, 27 Feb 2026 17:54:39 -0500 -Subject: [PATCH] fix: adjust range in btrfs probe for v6.18.14 - -Upstream commit c5667f9c8eb9 ("btrfs: headers cleanup to remove -unnecessary local includes") was backported in v6.18.14, adjust the -range accordingly in the btrfs probe. - -Upstream-Status: Backport from commit ca93dc3b05fcb - -Change-Id: I51c5cb6345c6a1e1aa4e5e3cb9a4af2ec962ecb2 -Signed-off-by: Michael Jeanson -Signed-off-by: Mathieu Desnoyers -Signed-off-by: Xiangyu Chen ---- - include/instrumentation/events/btrfs.h | 3 ++- - 1 file changed, 2 insertions(+), 1 deletion(-) - -diff --git a/include/instrumentation/events/btrfs.h b/include/instrumentation/events/btrfs.h -index feb4f40b..e87f0085 100644 ---- a/include/instrumentation/events/btrfs.h -+++ b/include/instrumentation/events/btrfs.h -@@ -12,7 +12,8 @@ - #include - #include - --#if (LTTNG_LINUX_VERSION_CODE >= LTTNG_KERNEL_VERSION(6,19,0)) -+#if (LTTNG_LINUX_VERSION_CODE >= LTTNG_KERNEL_VERSION(6,19,0) || \ -+ LTTNG_KERNEL_RANGE(6,18,14, 6,19,0)) - #include <../fs/btrfs/ordered-data.h> - #endif - --- -2.47.3 - diff --git a/meta/recipes-kernel/lttng/lttng-modules/0001-fix-hrtimer-Reduce-trace-noise-in-hrtimer_start-v7.1.patch b/meta/recipes-kernel/lttng/lttng-modules/0001-fix-hrtimer-Reduce-trace-noise-in-hrtimer_start-v7.1.patch deleted file mode 100644 index a6fe47737e..0000000000 --- a/meta/recipes-kernel/lttng/lttng-modules/0001-fix-hrtimer-Reduce-trace-noise-in-hrtimer_start-v7.1.patch +++ /dev/null @@ -1,103 +0,0 @@ -From b77f94c7a7109e70a97bf936b72d66d611187d61 Mon Sep 17 00:00:00 2001 -From: Michael Jeanson -Date: Mon, 25 May 2026 10:38:18 -0400 -Subject: [PATCH] fix: hrtimer: Reduce trace noise in hrtimer_start() (v7.1) - -See upstream commit: - - commit f2e388a019e4cf83a15883a3d1f1384298e9a6aa - Author: Thomas Gleixner - Date: Tue Feb 24 17:36:59 2026 +0100 - - hrtimer: Reduce trace noise in hrtimer_start() - - hrtimer_start() when invoked with an already armed timer traces like: - - -.. [032] d.h2. 5.002263: hrtimer_cancel: hrtimer= .... - -.. [032] d.h1. 5.002263: hrtimer_start: hrtimer= .... - - Which is incorrect as the timer doesn't get canceled. Just the expiry time - changes. The internal dequeue operation which is required for that is not - really interesting for trace analysis. But it makes it tedious to keep real - cancellations and the above case apart. - - Remove the cancel tracing in hrtimer_start() and add a 'was_armed' - indicator to the hrtimer start tracepoint, which clearly indicates what the - state of the hrtimer is when hrtimer_start() is invoked: - - -.. [032] d.h1. 6.200103: hrtimer_start: hrtimer= .... was_armed=0 - -.. [032] d.h1. 6.200558: hrtimer_start: hrtimer= .... was_armed=1 - -Change-Id: I37ee0ae0af665a51fd4f92adffb6b1dcb2ecd9d2 -Signed-off-by: Michael Jeanson -Signed-off-by: Mathieu Desnoyers -Upstream-Status: Backport [https://github.com/lttng/lttng-modules/commit/b77f94c7a7109e70a97bf936b72d66d611187d61] -Signed-off-by: He Zhe ---- - include/instrumentation/events/timer.h | 39 ++++++++++++++++++++++++-- - 1 file changed, 37 insertions(+), 2 deletions(-) - -diff --git a/include/instrumentation/events/timer.h b/include/instrumentation/events/timer.h -index f69e069b..dfc295e0 100644 ---- a/include/instrumentation/events/timer.h -+++ b/include/instrumentation/events/timer.h -@@ -220,12 +220,43 @@ LTTNG_TRACEPOINT_EVENT_MAP(hrtimer_init, - ) - ) - -+#if (LTTNG_LINUX_VERSION_CODE >= LTTNG_KERNEL_VERSION(7,1,0) || \ -+ LTTNG_KERNEL_RANGE(7,0,10, 7,1,0) || \ -+ LTTNG_KERNEL_RANGE(6,18,33, 6,19,0) || \ -+ LTTNG_KERNEL_RANGE(6,12,91, 6,13,0) || \ -+ LTTNG_KERNEL_RANGE(6,6,141, 6,7,0)) - /** - * hrtimer_start - called when the hrtimer is started -- * @timer: pointer to struct hrtimer -+ * @hrtimer: pointer to struct hrtimer -+ * @mode: the hrtimers mode -+ * @was_armed: Was armed when hrtimer_start*() was invoked - */ --#if (LTTNG_LINUX_VERSION_CODE >= LTTNG_KERNEL_VERSION(4,16,0) || \ -+LTTNG_TRACEPOINT_EVENT_MAP(hrtimer_start, -+ -+ timer_hrtimer_start, -+ -+ TP_PROTO(struct hrtimer *hrtimer, enum hrtimer_mode mode, bool was_armed), -+ -+ TP_ARGS(hrtimer, mode, was_armed), -+ -+ TP_FIELDS( -+ ctf_integer_hex(void *, hrtimer, hrtimer) -+ ctf_integer_hex(void *, function, hrtimer->function) -+ ctf_integer(s64, expires, -+ lttng_ktime_get_tv64(hrtimer_get_expires(hrtimer))) -+ ctf_integer(s64, softexpires, -+ lttng_ktime_get_tv64(hrtimer_get_softexpires(hrtimer))) -+ ctf_enum(hrtimer_mode, unsigned int, mode, mode) -+ ctf_integer(bool, was_armed, was_armed) -+ ) -+) -+#elif (LTTNG_LINUX_VERSION_CODE >= LTTNG_KERNEL_VERSION(4,16,0) || \ - LTTNG_RT_KERNEL_RANGE(4,14,0,0, 4,15,0,0)) -+/** -+ * hrtimer_start - called when the hrtimer is started -+ * @hrtimer: pointer to struct hrtimer -+ * @mode: the hrtimers mode -+ */ - LTTNG_TRACEPOINT_EVENT_MAP(hrtimer_start, - - timer_hrtimer_start, -@@ -245,6 +276,10 @@ LTTNG_TRACEPOINT_EVENT_MAP(hrtimer_start, - ) - ) - #else -+/** -+ * hrtimer_start - called when the hrtimer is started -+ * @hrtimer: pointer to struct hrtimer -+ */ - LTTNG_TRACEPOINT_EVENT_MAP(hrtimer_start, - - timer_hrtimer_start, --- -2.34.1 - diff --git a/meta/recipes-kernel/lttng/lttng-modules_2.14.4.bb b/meta/recipes-kernel/lttng/lttng-modules_2.14.7.bb similarity index 87% rename from meta/recipes-kernel/lttng/lttng-modules_2.14.4.bb rename to meta/recipes-kernel/lttng/lttng-modules_2.14.7.bb index d0983f58cb..8a6ab93dc1 100644 --- a/meta/recipes-kernel/lttng/lttng-modules_2.14.4.bb +++ b/meta/recipes-kernel/lttng/lttng-modules_2.14.7.bb @@ -20,10 +20,8 @@ SRC_URI = "https://lttng.org/files/${BPN}/${BPN}-${PV}.tar.bz2 \ # Use :append here so that the patch is applied also when using devupstream SRC_URI:append = " file://0001-src-Kbuild-change-missing-CONFIG_TRACEPOINTS-to-warn.patch \ - file://0001-fix-adjust-range-in-btrfs-probe-for-v6.18.14.patch \ - file://0001-fix-hrtimer-Reduce-trace-noise-in-hrtimer_start-v7.1.patch \ " -SRC_URI[sha256sum] = "63deefbc15d9ce7c43d858187533367b01dcb6e8469d6b69ccb757d6d3dbb0ad" +SRC_URI[sha256sum] = "fe304c31ad3e8f68a48f52b538ed2c1bf9b9fe62d8ee528ebc96d0a321287145" export INSTALL_MOD_DIR = "kernel/lttng-modules" From patchwork Tue Oct 20 08:26:09 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Daniel Turull X-Patchwork-Id: 101361 X-Patchwork-Delegate: yoann.congal@smile.fr Received: from PA4PR04CU001.outbound.protection.outlook.com (PA4PR04CU001.outbound.protection.outlook.com [40.107.162.52]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.2694.1792484801748762432 for ; Tue, 20 Oct 2026 01:26:42 -0700 Authentication-Results: mx.groups.io; dkim=fail reason="dkim: body hash did not verify" header.i=@ericsson.com header.s=selector2 header.b=dIJGjo4h; spf=pass (domain: ericsson.com, ip: 40.107.162.52, mailfrom: edaturu@ericsson.com) ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=N8pXERF8NZT+Tl0xJvf5kfpaAvXuLV5XfBJAOY6qJbl8+Nr5CueSdJXcTjwadDROJh3gPv8zj5vdJdG2iEq7/cA6yzo02Ff7AJk7/BYl4b0iT3qHIpUpqP3M4tyeQNJvmd2ppqZzLUFybvOJlMxb/HofCyxKtZe6a+yol6nq3CbF4vf7aZRNb8ZCZdm0ss4Zcv8Nx9yQLWRrNOQW8RZES28j/C4/Nv5U3gupPH7IxF0gKng3od/DGZhkpukPFzZg1GEZTvDuEc3pZYxEzxw+kjt1dXQuchqJNolZ2PRdjU6E4nUvQp4SkIPnjyagmwXBaomdXQQFAaXNW41X/AZ5sA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=GItSoQc/Yc+Ced/rWByfToVhaWxG4wNQmQY2MPydWR8=; b=VCoBhdnuXxGfla2JbfaNGzVTORBbwEn9vPDYcpbblxGW1nFxhx0TMWhafjshSxNvDroPWeyML0QLBTLl14RsclxdxXw24oJDvwLuYWszy5hsoZWEUdEIndsBJVXV3746saLwW8Rlt9wadPC44az7yYld1pYTSnoJ5hz+Lv5hNgun300OojA8YUsozit8dgt8wFMRKOFtqR+JvtSavBiQiNWABPShLYQHBbGhCmKuJJgOW3jZ4xlF+8+RfLTE6qCxF/qNiwd6gHRPidaLVZLRmld8MrrIsT4p8dXTVh77tmq88z6G5go7neEZWEC0HuaxPzrxBzL6LbDXe0v4/orcDQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is 192.176.1.74) smtp.rcpttodomain=lists.openembedded.org smtp.mailfrom=ericsson.com; dmarc=pass (p=reject sp=reject pct=100) action=none header.from=ericsson.com; dkim=none (message not signed); arc=none (0) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=GItSoQc/Yc+Ced/rWByfToVhaWxG4wNQmQY2MPydWR8=; b=dIJGjo4h9IVxOpCnQmdWIDF6QHUDu3XJR3fitqDTWXfuBVL5G0ABzG9umlcD5gDwBy4+nC2pYbTrouMmuaG9fUdM9V/+BPjnGjeNZgU6Ja61zqjAB2EFpHK0Cr5aDWlS1L4v8KfGtVzM6pvXlVgD2ShLALky+VS6fIqR/3hKnp+nraCXCChNYJ8QjAO9sYh1h6z92RTjZs8wZ+H/QPaa2OIoTkCgcJ2udSxo882Uj0JL+QsTaKFjDrvgLYvHR9uhaeCeRnc7ex3683eWw2i25KiRjnL4Xjh994K00sqYTi8qX1KskguzYpDhrEwH5alXOE5kq3mT/KWrMyG3Gzqrbw== Received: from DX0P273CA0043.AREP273.PROD.OUTLOOK.COM (2603:1086:300:58::11) by BESPR07MB997875.eurprd07.prod.outlook.com (2603:10a6:b10:108::17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.546.14; Tue, 20 Oct 2026 08:26:36 +0000 Received: from MI3PEPF00008488.eurprd02.prod.outlook.com (2603:1086:300:58:cafe::2c) by DX0P273CA0043.outlook.office365.com (2603:1086:300:58::11) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.522.19 via Frontend Transport; Tue, 20 Oct 2026 08:26:34 +0000 X-MS-Exchange-Authentication-Results: mx.microsoft.com 1; spf=pass (sender IP is 192.176.1.74) smtp.mailfrom=ericsson.com; dkim=none (message not signed) header.d=none;dmarc=pass action=none header.from=ericsson.com; Received-SPF: Pass (protection.outlook.com: domain of ericsson.com designates 192.176.1.74 as permitted sender) receiver=protection.outlook.com; client-ip=192.176.1.74; helo=oa.msg.ericsson.com; pr=C Received: from oa.msg.ericsson.com (192.176.1.74) by MI3PEPF00008488.mail.protection.outlook.com (10.167.240.135) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.522.6 via Frontend Transport; Tue, 20 Oct 2026 08:26:34 +0000 Received: from seroius18815.sero.gic.ericsson.se (153.88.142.248) by smtp-central.internal.ericsson.com (100.87.178.63) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.43; Tue, 20 Oct 2026 10:26:16 +0200 Received: from seroius08462.sero.gic.ericsson.se (seroius08462.sero.gic.ericsson.se [10.63.237.245]) by seroius18815.sero.gic.ericsson.se (Postfix) with ESMTP id DE2F84020B40; Tue, 20 Oct 2026 10:26:15 +0200 (CEST) Received: by seroius08462.sero.gic.ericsson.se (Postfix, from userid 160155) id 78AC07003846; Tue, 20 Oct 2026 10:26:15 +0200 (CEST) From: To: CC: Daniel Turull Subject: [wrynose][PATCH 5/7] lttng-tools: upgrade 2.14.1 -> 2.14.3 Date: Tue, 20 Oct 2026 10:26:09 +0200 Message-ID: <20261020082611.3115623-6-daniel.turull@ericsson.com> X-Mailer: git-send-email 2.55.0 In-Reply-To: <20261020082611.3115623-1-daniel.turull@ericsson.com> References: <20261020082611.3115623-1-daniel.turull@ericsson.com> MIME-Version: 1.0 Return-Path: edaturu@ericsson.com X-EOPAttributedMessage: 0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: MI3PEPF00008488:EE_|BESPR07MB997875:EE_ X-MS-Office365-Filtering-Correlation-Id: 61c89383-5899-4dd1-b22b-08df2e83d9ed X-SMTP-Server: smtp-central.internal.ericsson.com X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|1800799024|376014|23010399003|36860700016|82310400026|56012099006|11063799006|261009223027099003|10067099003|12006099003|22082099003|18002099003|6133799003|13003099007; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:192.176.1.74;CTRY:SE;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:oa.msg.ericsson.com;PTR:office365.se.ericsson.net;CAT:NONE;SFS:(13230040)(1800799024)(376014)(23010399003)(36860700016)(82310400026)(56012099006)(11063799006)(261009223027099003)(10067099003)(12006099003)(22082099003)(18002099003)(6133799003)(13003099007);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: TdVvv35cjFGJDu1IbVhanLbfDEuBUg2/i2VGIG59Tsrv3udEsW/yh9rW8YnafJ71ZsdLNS82zy1F8ntnJP5btC538rEyn/d5cDG69OlFYY/JAVRZzY6+k6l1QDMqseVTRLXKIf4H1JfVRz99ny+3QZIrMq5U1SS8KwTt4GTcpioGbqBQUyj8xpvCc+2z+V6CnLrFqJU4ep9Sr+Kby5MaHQO9OUJLCC+NaJwBqFMjCTzHtRF7TEviT62dDBDojAjwJqn6ADmreEkCYIyQkVofX/fwlhd1PFZuCHcG5Mhnz/ZSllRpaZsA5dG8JfsQHM1ew+I1NFUqL8bB/O6B5Wz0eTIMbGE+5ECN+pxA3qchAug/t4iNem2Qy6Wm5WOPEha/0C0ubM0YysT8yq6TN0BqHNYO/qyBHO6lcQGefWjiagoMD7xF+ga36Mdje1eYzEUq X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 20 Oct 2026 08:26:34.0922 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 61c89383-5899-4dd1-b22b-08df2e83d9ed X-MS-Exchange-CrossTenant-Id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=92e84ceb-fbfd-47ab-be52-080c6b87953f;Ip=[192.176.1.74];Helo=[oa.msg.ericsson.com] X-MS-Exchange-CrossTenant-AuthSource: MI3PEPF00008488.eurprd02.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: BESPR07MB997875 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Tue, 20 Oct 2026 08:26:48 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/248252 From: Daniel Turull Changes 2.14.2-2.14.3 (from ChangeLog): - Fix: ust-consumerd/relayd crashes and overflow/path-traversal hardening in packet, filter, trigger, action, and session-path handling - Fix: sessiond deadlock on notification overflow, default kernel probe list, agent event-listing sanitization - Fix: common lockfile fd leak into consumerd via fork+exec - tests: add notification/test_rotation to the regression test list disable-tests.patch drops the flaky tools/notification/* tests from SERIAL_TESTS (bug 14263); extend it to also drop the new test_rotation entry added above, which conflicted with the patch. Verified do_compile succeeds. AI-Generated: Uses Kiro with Claude Sonnet 5 Signed-off-by: Daniel Turull --- .../lttng/lttng-tools/disable-tests.patch | 11 ++++++----- .../{lttng-tools_2.14.1.bb => lttng-tools_2.14.3.bb} | 2 +- 2 files changed, 7 insertions(+), 6 deletions(-) rename meta/recipes-kernel/lttng/{lttng-tools_2.14.1.bb => lttng-tools_2.14.3.bb} (99%) diff --git a/meta/recipes-kernel/lttng/lttng-tools/disable-tests.patch b/meta/recipes-kernel/lttng/lttng-tools/disable-tests.patch index d32cf87535..5717fb6b3d 100644 --- a/meta/recipes-kernel/lttng/lttng-tools/disable-tests.patch +++ b/meta/recipes-kernel/lttng/lttng-tools/disable-tests.patch @@ -1,4 +1,4 @@ -From 05cf8ed6cc42a2f6ff53009d0ae2713fe63f1245 Mon Sep 17 00:00:00 2001 +From 755c3e21b7f736f2f19727482bab3100849f7f90 Mon Sep 17 00:00:00 2001 From: Richard Purdie Date: Tue, 14 Dec 2021 12:34:04 +0000 Subject: [PATCH] lttng-tools: Disable problem tests @@ -14,14 +14,14 @@ https://bugzilla.yoctoproject.org/show_bug.cgi?id=14263 Signed-off-by: Richard Purdie --- - tests/regression/Makefile.am | 12 ------------ - 1 file changed, 12 deletions(-) + tests/regression/Makefile.am | 13 ------------- + 1 file changed, 13 deletions(-) diff --git a/tests/regression/Makefile.am b/tests/regression/Makefile.am -index 7076488..e5be904 100644 +index b64a8cc..e92547e 100644 --- a/tests/regression/Makefile.am +++ b/tests/regression/Makefile.am -@@ -40,18 +40,6 @@ SERIAL_TESTS = tools/base-path/test_ust \ +@@ -40,19 +40,6 @@ SERIAL_TESTS = tools/base-path/test_ust \ tools/regen-metadata/test_ust \ tools/regen-statedump/test_kernel \ tools/regen-statedump/test_ust \ @@ -37,6 +37,7 @@ index 7076488..e5be904 100644 - tools/notification/test_notification_notifier_discarded_count \ - tools/notification/test_notification_kernel_userspace_probe \ - tools/notification/test_notification_multi_app \ +- tools/notification/test_rotation \ tools/rotation/test_ust \ tools/rotation/test_kernel \ tools/rotation/test_ust_kernel \ diff --git a/meta/recipes-kernel/lttng/lttng-tools_2.14.1.bb b/meta/recipes-kernel/lttng/lttng-tools_2.14.3.bb similarity index 99% rename from meta/recipes-kernel/lttng/lttng-tools_2.14.1.bb rename to meta/recipes-kernel/lttng/lttng-tools_2.14.3.bb index 3df9ed1c00..0b0e7aa4ea 100644 --- a/meta/recipes-kernel/lttng/lttng-tools_2.14.1.bb +++ b/meta/recipes-kernel/lttng/lttng-tools_2.14.3.bb @@ -52,7 +52,7 @@ SRC_URI = "https://lttng.org/files/lttng-tools/lttng-tools-${PV}.tar.bz2 \ file://libc++.patch \ " -SRC_URI[sha256sum] = "0e68eb27923621c4bc127cfce40422d28cf7e473fedf6229ae6c32ba5c5b7c6d" +SRC_URI[sha256sum] = "473ebcf26cae02860ee23e7cbf4ec875586017bd06f32613ba21b6586420e2ed" inherit autotools ptest pkgconfig useradd python3-dir manpages systemd upstream-stable-release-point From patchwork Tue Oct 20 08:26:10 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Daniel Turull X-Patchwork-Id: 101360 X-Patchwork-Delegate: yoann.congal@smile.fr Received: from MRWPR03CU001.outbound.protection.outlook.com (MRWPR03CU001.outbound.protection.outlook.com [40.107.130.71]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.2674.1792484789809585280 for ; Tue, 20 Oct 2026 01:26:30 -0700 Authentication-Results: mx.groups.io; dkim=fail reason="dkim: body hash did not verify" header.i=@ericsson.com header.s=selector2 header.b=EgNSUHgG; spf=pass (domain: ericsson.com, ip: 40.107.130.71, mailfrom: edaturu@ericsson.com) ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=jIu6u7HnBWPRIqhbkFMyB1iAV3HW64DO8yGc0NrYX+ByvXC7ngY9/T9wJHEay81WOopD3Bmhq0ivkyDXP4oRb65xNRUWXgw21Fwsw7UCesle71ifwXRtjrOadxHnzlTiqf0a64mKoBKVzRgnJ+CFGLZgrnnCL1hvEWZA3Jp1lBlSXgnmg9nRYc/4rwIGykd1PIEkh9D2LRpAHxJ66IUBPJiwsucD1VQU80DKmJwtX7KJV9WOyKlgTNfE56tK7jdFzWYGz5412VMnYRjQLeG3ddqs77nAHxyAg07UNFSuqrXIMPw7/HpuhPfWnVVcLe0uGtW55UkY2YmNHV88c3TNvw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=gMjHvXTO5ntUvDwnRlNIIKI0JV9TI8HIr8bm9QMQQSI=; b=dwX/97ik5MskjDQHgxAjKEi3m8LNQtXwBW8iMdpdJvd5F4QidaNbAuQlyp9jqtJzXidK9FYIrbu6KDkznBffqqQh3g4NeODVAP/ZS2h8NorGXooD5poiH0OX8StW+dxp4EYXk6U0ehx3qvNamYQjM+h6rbRhw3tKkO5/Ujb7tPSx9S8Ms3x8lGtD7YJTJvIjsWjjXn/dwW/pkoqtQ3HDv+l1lFzJ62ULC7zDtM2teobFfygYFRzEbLBvNFqUBTAhxTIP2Bhel3jyE9NL+QaV1IqY3a67ob7ZgMHzwZUOGttVgWr0MKvwJ96Yk8qwUXJJEFK7+xK3ukJYoVzeza+Ehg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is 192.176.1.74) smtp.rcpttodomain=lists.openembedded.org smtp.mailfrom=ericsson.com; dmarc=pass (p=reject sp=reject pct=100) action=none header.from=ericsson.com; dkim=none (message not signed); arc=none (0) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=gMjHvXTO5ntUvDwnRlNIIKI0JV9TI8HIr8bm9QMQQSI=; b=EgNSUHgGr3u/Tloj0BahNZfVdMeEyDDyHphsPvarxRCYLWiLc+Rl26k6BGK0CbkAn/q9ZA3WWOY3ELLtUwZyord4AnR9hfvJRXsWxFs35HLejxw3cLmJ1esWxhWR1S0M+rKUZ/GDKugvVpbIY1TL+GEcDvP7XYq4BPmGWFmQUdtubcZf3srxLpBjq2NCM7ysz32pvu3JQ8pMGu8CDOr6Yg2SbgvZHBtG60hrqialEnl+M/WR2SdJ+u0rkFuz3iwj3qrR3LZRe/M6M4tbNurI3W1rpmDL+NR5zeKKzIFzW15prJSnw/7l3GfHu/h44y19rDSSueI7rErTG/FDg7Zt1w== Received: from DX0P273CA0050.AREP273.PROD.OUTLOOK.COM (2603:1086:300:5a::8) by AMBPR07MB362568.eurprd07.prod.outlook.com (2603:10a6:20b:7b3::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.546.14; Tue, 20 Oct 2026 08:26:22 +0000 Received: from AMS1EPF0000008F.eurprd05.prod.outlook.com (2603:1086:300:5a:cafe::80) by DX0P273CA0050.outlook.office365.com (2603:1086:300:5a::8) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.522.19 via Frontend Transport; Tue, 20 Oct 2026 08:26:21 +0000 X-MS-Exchange-Authentication-Results: mx.microsoft.com 1; spf=pass (sender IP is 192.176.1.74) smtp.mailfrom=ericsson.com; dkim=none (message not signed) header.d=none;dmarc=pass action=none header.from=ericsson.com; Received-SPF: Pass (protection.outlook.com: domain of ericsson.com designates 192.176.1.74 as permitted sender) receiver=protection.outlook.com; client-ip=192.176.1.74; helo=oa.msg.ericsson.com; pr=C Received: from oa.msg.ericsson.com (192.176.1.74) by AMS1EPF0000008F.mail.protection.outlook.com (10.167.242.86) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.522.6 via Frontend Transport; Tue, 20 Oct 2026 08:26:21 +0000 Received: from seroius18814.sero.gic.ericsson.se (153.88.142.248) by smtp-central.internal.ericsson.com (100.87.178.68) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.43; Tue, 20 Oct 2026 10:26:16 +0200 Received: from seroius08462.sero.gic.ericsson.se (seroius08462.sero.gic.ericsson.se [10.63.237.245]) by seroius18814.sero.gic.ericsson.se (Postfix) with ESMTP id DE6084020C01; Tue, 20 Oct 2026 10:26:15 +0200 (CEST) Received: by seroius08462.sero.gic.ericsson.se (Postfix, from userid 160155) id 7D1A77003849; Tue, 20 Oct 2026 10:26:15 +0200 (CEST) From: To: CC: Daniel Turull Subject: [wrynose][PATCH 6/7] lttng-ust: upgrade 2.14.0 -> 2.14.3 Date: Tue, 20 Oct 2026 10:26:10 +0200 Message-ID: <20261020082611.3115623-7-daniel.turull@ericsson.com> X-Mailer: git-send-email 2.55.0 In-Reply-To: <20261020082611.3115623-1-daniel.turull@ericsson.com> References: <20261020082611.3115623-1-daniel.turull@ericsson.com> MIME-Version: 1.0 Return-Path: edaturu@ericsson.com X-EOPAttributedMessage: 0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: AMS1EPF0000008F:EE_|AMBPR07MB362568:EE_ X-MS-Office365-Filtering-Correlation-Id: 35180c55-65b6-497b-7329-08df2e83d22a X-SMTP-Server: smtp-central.internal.ericsson.com X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|82310400026|36860700016|376014|23010399003|1800799024|11063799006|56012099006|18002099003|22082099003|12006099003|13003099007|10067099003|261009223027099003; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:192.176.1.74;CTRY:SE;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:oa.msg.ericsson.com;PTR:office365.se.ericsson.net;CAT:NONE;SFS:(13230040)(82310400026)(36860700016)(376014)(23010399003)(1800799024)(11063799006)(56012099006)(18002099003)(22082099003)(12006099003)(13003099007)(10067099003)(261009223027099003);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: l1NqiJLXEfI6gPDWD+ElwCYJyqXk9AXyzXtQPBhKYFlM6h0dIlwcsjDcgsZQ+Z5PA0HSl9O9uRm2j9w9dPcfxJgrOklGZJblfCewgD+mJmLL1lqn34uOqlmkmfksqdIBRXPK1O+sG4mh0WsgEpSP/J5/5DSuSlABw6hIrVm9XFp75wny/EtEJYaY2zOVcLzaMGDf247mEy+BwLza5Z2/Z2/VzzqUYqa+m6CYjzlOxBdYgtZYAl1fBKxnN50Gbrk6g+UNogVjdptBJITAbGHrRyo+mHw0/ELe+ZBgXHZZ1ddRSHUZM4zL/cLpJlj5bEkJEXym0vyFW+fNjoZeBAEvSVZDXGdF0RWM4V5EbReg6UuS3luo9isJUknSR+YoB45CC3xKe6hBWbsFhzTXqMDqgHQ1DznYg/kUI3/JzYuFP7DkTltZp77cB6iQ1oryD2XX X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 20 Oct 2026 08:26:21.0752 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 35180c55-65b6-497b-7329-08df2e83d22a X-MS-Exchange-CrossTenant-Id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=92e84ceb-fbfd-47ab-be52-080c6b87953f;Ip=[192.176.1.74];Helo=[oa.msg.ericsson.com] X-MS-Exchange-CrossTenant-AuthSource: AMS1EPF0000008F.eurprd05.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: AMBPR07MB362568 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Tue, 20 Oct 2026 08:26:38 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/248251 From: Daniel Turull Changes 2.14.1-2.14.3 (from ChangeLog): - Fix: stream instance id mismatch for populated packets in per-channel ringbuffers - fix: shmp()/message-size/zero_file/sigevent hardening - fix: close_range and fd-tracker memory/efficiency issues - fix: lttng_ust_build_bug_on undefined behavior in C++ builds - fix: ustctl sigbus handling statement with no effect Both carried patches rebased cleanly, no changes needed. Verified do_compile succeeds. AI-Generated: Uses Kiro with Claude Sonnet 5 Signed-off-by: Daniel Turull --- .../lttng/{lttng-ust_2.14.0.bb => lttng-ust_2.14.3.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-kernel/lttng/{lttng-ust_2.14.0.bb => lttng-ust_2.14.3.bb} (96%) diff --git a/meta/recipes-kernel/lttng/lttng-ust_2.14.0.bb b/meta/recipes-kernel/lttng/lttng-ust_2.14.3.bb similarity index 96% rename from meta/recipes-kernel/lttng/lttng-ust_2.14.0.bb rename to meta/recipes-kernel/lttng/lttng-ust_2.14.3.bb index 4285a445d6..b567dea1f6 100644 --- a/meta/recipes-kernel/lttng/lttng-ust_2.14.0.bb +++ b/meta/recipes-kernel/lttng/lttng-ust_2.14.3.bb @@ -35,7 +35,7 @@ SRC_URI = "https://lttng.org/files/lttng-ust/lttng-ust-${PV}.tar.bz2 \ file://0001-lttng-ust-common-link-with-liburcu-explicitly.patch \ " -SRC_URI[sha256sum] = "82cdfd304bbb2b2b7d17cc951a6756b37a9f73868ec0ba7db448a0d5ca51b763" +SRC_URI[sha256sum] = "3c232b514f33c4248ce23155f64ad272fdaae3323255f69d5e7a5c3d6812b7ea" CVE_PRODUCT = "ust" From patchwork Tue Oct 20 08:26:11 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Daniel Turull X-Patchwork-Id: 101362 X-Patchwork-Delegate: yoann.congal@smile.fr Received: from GVXPR05CU001.outbound.protection.outlook.com (GVXPR05CU001.outbound.protection.outlook.com [52.101.83.49]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.2677.1792484806639338816 for ; Tue, 20 Oct 2026 01:26:47 -0700 Authentication-Results: mx.groups.io; dkim=fail reason="dkim: body hash did not verify" header.i=@ericsson.com header.s=selector2 header.b=hQ1BWSRP; spf=pass (domain: ericsson.com, ip: 52.101.83.49, mailfrom: edaturu@ericsson.com) ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=Z8rWpPszoSS7T9bXqPerH/caXmQ/M6FQbPG0OKuAqDLbJ+3Kq0lBzkYtJCOe4/KUKqwWxiG8Qp5Aj08DpEMbbr8Z7DUXLYg+R5f++MiQzCkGnJHZWBiCdRJvzYdbQGMGIpuSu/rqYbbZ5ch0JvsXuDNSEFqkNRD71Ptrhl1bgClZgNfCi/DA1TGPYTYltBAwajFzLGu+6n5fMoqXCW7JQRgCYLltmSs3xLOGWFm1up4IiHKXuUmlBZT6tSAYuN0Xs5og7kvebx/7CEx1/9lLcmrsqFiXdgnRaAnqTmNLrdQAVnjSiNN3D60sDn41M0hiSIBtpLp3qJYgOsJykbgdAA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=o96EkTaFYHkiqep9gjgov/nSqZmCiadR1fKY4iOzh90=; b=uBQTqcET3YtVEs4TVpWdtJNCXGHHXXAEH3IwxlpIWy/EwSr6pfUhHCtUpUfBhIeAqS812moperJbIurVqzVadTg3wvawNaYLRp6Q/MfVCcVmAFIow8Sn9+80nWUtjVa1XHiwq8+3dz11NOEhbdeBpD72DrxWzEFx/pxjThIZEb0E386+nS+fANYu39fPBQFCvTJha2pS6yZtoJxAz2fVP/P1t/lC92qX6ebpie5HogOw49SEvhzWt/+/EB0z7X9oCoMPo89Ol1m02gl3GPSGarEzhaGLu+LL5YttBoRm8o7pTt4lYF12ZYt7+QudDo9z4Sw5DOnaHtCNEle6GeSyvA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is 192.176.1.74) smtp.rcpttodomain=lists.openembedded.org smtp.mailfrom=ericsson.com; dmarc=pass (p=reject sp=reject pct=100) action=none header.from=ericsson.com; dkim=none (message not signed); arc=none (0) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=o96EkTaFYHkiqep9gjgov/nSqZmCiadR1fKY4iOzh90=; b=hQ1BWSRPSnQ7/6DjZwpRfgJh5Wka/g8HYjN+HGRV+Hhcq/b3EXs4G4XSu0ViE3domitSBu6V1dPZB5eXgmBoKFt1/QG2EkBDEQu8fBnMD+ZO23voqW7R78F11qWlLv5bQtPAHjJ44R6OBELQxtgvgrrubl6GF1tLnwFoDdbY/e6Gx+MrqesmDi5yDecNnrBV7fS5lCTM+lgzPPAeu8bURL5KmeOppc8QAUDI4JHnTJlNJeGsy2X2CJNPIqIpPJejeeQUeW55gCMgceUdjpYM+V4nOIeVLh3abevw42BobkU5eKhMwaXeIOWYjLMN+XqsEj/hOckgwmn4Wswke7nWNg== Received: from WA2P291CA0002.POLP291.PROD.OUTLOOK.COM (2603:10a6:1d0:1e::22) by AS8PR07MB7573.eurprd07.prod.outlook.com (2603:10a6:20b:289::23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.546.14; Tue, 20 Oct 2026 08:26:37 +0000 Received: from MI3PEPF0000848B.eurprd02.prod.outlook.com (2603:10a6:1d0:1e:cafe::66) by WA2P291CA0002.outlook.office365.com (2603:10a6:1d0:1e::22) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.522.20 via Frontend Transport; Tue, 20 Oct 2026 08:26:37 +0000 X-MS-Exchange-Authentication-Results: mx.microsoft.com 1; spf=pass (sender IP is 192.176.1.74) smtp.mailfrom=ericsson.com; dkim=none (message not signed) header.d=none;dmarc=pass action=none header.from=ericsson.com; Received-SPF: Pass (protection.outlook.com: domain of ericsson.com designates 192.176.1.74 as permitted sender) receiver=protection.outlook.com; client-ip=192.176.1.74; helo=oa.msg.ericsson.com; pr=C Received: from oa.msg.ericsson.com (192.176.1.74) by MI3PEPF0000848B.mail.protection.outlook.com (10.167.240.138) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.546.15 via Frontend Transport; Tue, 20 Oct 2026 08:26:36 +0000 Received: from seroius18813.sero.gic.ericsson.se (153.88.142.248) by smtp-central.internal.ericsson.com (100.87.178.63) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.43; Tue, 20 Oct 2026 10:26:16 +0200 Received: from seroius08462.sero.gic.ericsson.se (seroius08462.sero.gic.ericsson.se [10.63.237.245]) by seroius18813.sero.gic.ericsson.se (Postfix) with ESMTP id E05FF95805; Tue, 20 Oct 2026 10:26:15 +0200 (CEST) Received: by seroius08462.sero.gic.ericsson.se (Postfix, from userid 160155) id 817FD700384A; Tue, 20 Oct 2026 10:26:15 +0200 (CEST) From: To: CC: Daniel Turull Subject: [wrynose][PATCH 7/7] libgcrypt: upgrade 1.12.1 -> 1.12.4 Date: Tue, 20 Oct 2026 10:26:11 +0200 Message-ID: <20261020082611.3115623-8-daniel.turull@ericsson.com> X-Mailer: git-send-email 2.55.0 In-Reply-To: <20261020082611.3115623-1-daniel.turull@ericsson.com> References: <20261020082611.3115623-1-daniel.turull@ericsson.com> MIME-Version: 1.0 Return-Path: edaturu@ericsson.com X-EOPAttributedMessage: 0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: MI3PEPF0000848B:EE_|AS8PR07MB7573:EE_ X-MS-Office365-Filtering-Correlation-Id: 97c3ffb9-a3b9-406f-70df-08df2e83db8f X-SMTP-Server: smtp-central.internal.ericsson.com X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|376014|23010399003|1800799024|36860700016|82310400026|260925022911599003|56012099006|260925021911599003|11063799006|260925021311599003|261009223027099003|10067099003|22082099003|18002099003|13003099007|3023799007; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:192.176.1.74;CTRY:SE;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:oa.msg.ericsson.com;PTR:office365.se.ericsson.net;CAT:NONE;SFS:(13230040)(376014)(23010399003)(1800799024)(36860700016)(82310400026)(260925022911599003)(56012099006)(260925021911599003)(11063799006)(260925021311599003)(261009223027099003)(10067099003)(22082099003)(18002099003)(13003099007)(3023799007);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: A2ZMMwIxIyuu82vMPatzvP5Shm+YQtcGuePKeM1WxASkAF1uWPjje1hHapPTFM9nkt+weKo1T5MQB19VKooF8Vo0dVU47dr8uAXhIXj7afg/9Yu1FkBNudipYfD5DUxFxVMxug0JvBvgauIA4NOY7vWjKV9uVDg6P87CR0waq5Po54tR7ioSd98g/rBccVySB3XHcVNhz8BJpdoWP+grnVK25CIKm0i41qtrmdnmHIqJmcQisL+9hMA+BDSvtFaOKUHPDioTmmSjVrhrITcN329cqnuLD8/zRbAdgylsOlfNM3KjfOi09iA/GT9IqUZqVnMwnjblXwbUdRhNWRK2JDsFP7kLjuCp8g9bmA7N+a+e8uBldarMlbSOVQP9OzGpiPD/Ii3ibKVNytKhzZG88MN4+Y3jBipO72pj/uXGC1ZmCErnlin9jep7EzfiLvir X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 20 Oct 2026 08:26:36.8325 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 97c3ffb9-a3b9-406f-70df-08df2e83db8f X-MS-Exchange-CrossTenant-Id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=92e84ceb-fbfd-47ab-be52-080c6b87953f;Ip=[192.176.1.74];Helo=[oa.msg.ericsson.com] X-MS-Exchange-CrossTenant-AuthSource: MI3PEPF0000848B.eurprd02.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS8PR07MB7573 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Tue, 20 Oct 2026 08:26:48 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/248253 From: Daniel Turull Bug fixes in 1.12.2-1.12.4 (per NEWS): - T8208: missing bounds check in Dilithium context handling (CVE-2026-41990) - T8211: possible ECDH buffer overwrite with zeroes (CVE-2026-41989) - T8212: missing point validation in the new KEM interface - RSA PSS/OAEP salt-length and padding validation; s-expression parsing and KDF parameter hardening; various AEAD/MAC overflow and OOB-read fixes Both carried CVE patches backported the Dilithium and ECC fixes above, now redundant and dropped. The pubkey-dilithium.c conflict was caused by two unrelated upstream commits (dilithium glue fix, stronger signature nonce random) touching the same file. Verified do_compile succeeds on qemux86-64 and qemuarm_musl. License-Update: LICENSES gained a BSD-3-Clause notice for the new Intel SM3 AVX2 assembly file (cipher/sm3-intel-avx2-amd64.S). AI-Generated: Uses Kiro with Claude Sonnet 5 Signed-off-by: Daniel Turull --- ...s-Fix-link-errors-for-t-thread-local.patch | 13 +- .../libgcrypt/files/CVE-2026-41989.patch | 42 --- .../libgcrypt/files/CVE-2026-41990.patch | 316 ------------------ ...ibgcrypt_1.12.1.bb => libgcrypt_1.12.4.bb} | 6 +- 4 files changed, 7 insertions(+), 370 deletions(-) delete mode 100644 meta/recipes-support/libgcrypt/files/CVE-2026-41989.patch delete mode 100644 meta/recipes-support/libgcrypt/files/CVE-2026-41990.patch rename meta/recipes-support/libgcrypt/{libgcrypt_1.12.1.bb => libgcrypt_1.12.4.bb} (89%) diff --git a/meta/recipes-support/libgcrypt/files/0001-tests-Fix-link-errors-for-t-thread-local.patch b/meta/recipes-support/libgcrypt/files/0001-tests-Fix-link-errors-for-t-thread-local.patch index 8dc2fe328c..c4c59dcf87 100644 --- a/meta/recipes-support/libgcrypt/files/0001-tests-Fix-link-errors-for-t-thread-local.patch +++ b/meta/recipes-support/libgcrypt/files/0001-tests-Fix-link-errors-for-t-thread-local.patch @@ -1,4 +1,4 @@ -From 942e232ded48fa08d2bda417ae8ad8c03d644372 Mon Sep 17 00:00:00 2001 +From bf307ed66f9c33502f27c04c60f9e6c99d7dda7a Mon Sep 17 00:00:00 2001 From: Collin Funk Date: Wed, 27 Aug 2025 11:49:06 +0800 Subject: [PATCH] tests: Fix link errors for t-thread-local. @@ -21,18 +21,15 @@ Signed-off-by: Hongxu Jia 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tests/Makefile.am b/tests/Makefile.am -index 4800135..f0f7adb 100644 +index 3baaf48..cc2fd6b 100644 --- a/tests/Makefile.am +++ b/tests/Makefile.am -@@ -98,7 +98,7 @@ testapi_LDADD = $(standard_ldadd) @LDADD_FOR_TESTS_KLUDGE@ +@@ -103,7 +103,7 @@ testapi_LDADD = $(standard_ldadd) @LDADD_FOR_TESTS_KLUDGE@ t_lock_LDADD = $(standard_ldadd) $(GPG_ERROR_MT_LIBS) @LDADD_FOR_TESTS_KLUDGE@ t_lock_CFLAGS = $(GPG_ERROR_MT_CFLAGS) -lpthread t_thread_local_LDADD = $(standard_ldadd) $(GPG_ERROR_MT_LIBS) @LDADD_FOR_TESTS_KLUDGE@ -t_thread_local_CFLAGS = $(GPG_ERROR_MT_CFLAGS) +t_thread_local_CFLAGS = $(GPG_ERROR_MT_CFLAGS) -lpthread testdrv_LDADD = $(LDADD_FOR_TESTS_KLUDGE) - - # Build a version of the test driver for the build platform. --- -2.34.1 - + t_cipher_internal_CPPFLAGS = $(AM_CPPFLAGS) -I$(top_srcdir)/cipher + t_sntrup761_CPPFLAGS = $(AM_CPPFLAGS) -I$(top_srcdir)/cipher diff --git a/meta/recipes-support/libgcrypt/files/CVE-2026-41989.patch b/meta/recipes-support/libgcrypt/files/CVE-2026-41989.patch deleted file mode 100644 index aba3ca318b..0000000000 --- a/meta/recipes-support/libgcrypt/files/CVE-2026-41989.patch +++ /dev/null @@ -1,42 +0,0 @@ -From d8874dd38f78454dd3a760617ebe8d9aa9270649 Mon Sep 17 00:00:00 2001 -From: NIIBE Yutaka -Date: Fri, 10 Apr 2026 16:58:57 +0900 -Subject: [PATCH] cipher:ecc: Fix decoding a point on Montgomery curve. - -* cipher/ecc-misc.c (_gcry_ecc_mont_decodepoint): Fix the padding -mistake and add updating RAWMPILEN. - --- - -Reported by Calif.io in collaboration with Claude and Anthropic -Research. - -GnuPG-bug-id: 8211 -Fixes-commit: bbe15758c893dbf546416c1a6bccdad1ab000ad7 -Suggested-by: Bronson Yen -Signed-off-by: NIIBE Yutaka - -CVE: CVE-2026-41989 -Upstream-Status: Backport [https://github.com/gpg/libgcrypt/commit/2d3d732c9bf87cc10729f69678dd9e6862f99fa3] - -Signed-off-by: Leonid Iziumtsev ---- - cipher/ecc-misc.c | 5 ++++- - 1 file changed, 4 insertions(+), 1 deletion(-) - -diff --git a/cipher/ecc-misc.c b/cipher/ecc-misc.c -index 615b0df2..ab3799dc 100644 ---- a/cipher/ecc-misc.c -+++ b/cipher/ecc-misc.c -@@ -438,7 +438,10 @@ _gcry_ecc_mont_decodepoint (gcry_mpi_t pk, mpi_ec_t ec, mpi_point_t result) - *--p = *buf++; - - if (rawmpilen < nbytes) -- memset (rawmpi + nbytes - rawmpilen, 0, nbytes - rawmpilen); -+ { -+ memset (rawmpi + rawmpilen, 0, nbytes - rawmpilen); -+ rawmpilen = nbytes; -+ } - } - else - { diff --git a/meta/recipes-support/libgcrypt/files/CVE-2026-41990.patch b/meta/recipes-support/libgcrypt/files/CVE-2026-41990.patch deleted file mode 100644 index a4f1809227..0000000000 --- a/meta/recipes-support/libgcrypt/files/CVE-2026-41990.patch +++ /dev/null @@ -1,316 +0,0 @@ -From 024391fc505ebf9c47e51953d7d85995ba179576 Mon Sep 17 00:00:00 2001 -From: NIIBE Yutaka -Date: Mon, 13 Apr 2026 11:51:46 +0900 -Subject: [PATCH] cipher:dilithium: Check the label length by caller. - -* cipher/dilithium.h (dilithium_keypair, dilithium_sign) -(dilithium_verify): Return gpg_err_code_t. -* cipher/dilithium.c (dilithium_keypair): Return gpg_err_code_t. -(dilithium_sign, dilithium_verify): Ditto. Check CTXLEN. -* cipher/pubkey-dilithium.c (mldsa_generate): Follow the change. -(mldsa_sign, mldsa_verify): Likewise. - --- - -Reported by Calif.io in collaboration with Claude and Anthropic -Research. - -GnuPG-bug-id: 8208 -Co-authored-by: Thai Duong -Signed-off-by: NIIBE Yutaka - -CVE: CVE-2026-41990 -Upstream-Status: Backport [https://github.com/gpg/libgcrypt/commit/905e00f046a71e5670517779afaf85a354952832] - -Signed-off-by: Leonid Iziumtsev ---- - cipher/dilithium.c | 101 ++++++++++++++++++++++++++++---------- - cipher/dilithium.h | 20 ++++---- - cipher/pubkey-dilithium.c | 34 +++++-------- - 3 files changed, 99 insertions(+), 56 deletions(-) - -diff --git a/cipher/dilithium.c b/cipher/dilithium.c -index 955feb2a..212c4afe 100644 ---- a/cipher/dilithium.c -+++ b/cipher/dilithium.c -@@ -82,6 +82,7 @@ - #include "gcrypt-int.h" - #include "const-time.h" - -+/* With glue code, we only use the "_internal" API of Dilithium. */ - #define DILITHIUM_INTERNAL_API_ONLY 1 - - #include "dilithium.h" -@@ -120,23 +121,33 @@ static int crypto_sign_verify_internal_5 (const uint8_t *sig, size_t siglen, - const uint8_t *pre, size_t prelen, - const uint8_t *pk); - --int -+gpg_err_code_t - dilithium_keypair (int algo, uint8_t *pk, uint8_t *sk, - const uint8_t seed[SEEDBYTES]) - { -+ int r; -+ - switch (algo) - { - case GCRY_MLDSA44: -- return crypto_sign_keypair_internal_2 (pk, sk, seed); -+ r = crypto_sign_keypair_internal_2 (pk, sk, seed); -+ break; - case GCRY_MLDSA65: - default: -- return crypto_sign_keypair_internal_3 (pk, sk, seed); -+ r = crypto_sign_keypair_internal_3 (pk, sk, seed); -+ break; - case GCRY_MLDSA87: -- return crypto_sign_keypair_internal_5 (pk, sk, seed); -+ r = crypto_sign_keypair_internal_5 (pk, sk, seed); -+ break; - } -+ -+ if (r < 0) -+ return GPG_ERR_INTERNAL; -+ -+ return 0; - } - --int -+gpg_err_code_t - dilithium_sign (int algo, uint8_t *sig, size_t siglen, - const uint8_t *m, size_t mlen, - const uint8_t *ctx, size_t ctxlen, -@@ -145,9 +156,17 @@ dilithium_sign (int algo, uint8_t *sig, size_t siglen, - size_t i; - uint8_t pre[257]; - size_t prelen; -+ int r; - -- if (ctx == NULL && ctxlen == -1) -- prelen = 0; -+ if (ctx == NULL) -+ { -+ if (ctxlen == -1) -+ prelen = 0; -+ else -+ return GPG_ERR_INV_DATA; -+ } -+ else if (ctxlen > 255) -+ return GPG_ERR_INV_DATA; - else - { - /* Prepare pre = (0, ctxlen, ctx) */ -@@ -158,28 +177,44 @@ dilithium_sign (int algo, uint8_t *sig, size_t siglen, - prelen = 2 + ctxlen; - } - -+ /* -+ * Note that the second argument of the upstream routine is the -+ * pointer to output length of signature. It assumes the first -+ * argument (pointer to output signature) should have correct (or -+ * more) length, beforehand. -+ * -+ * Before calling the routine, we should check the length. -+ */ - switch (algo) - { - case GCRY_MLDSA44: - if (siglen != CRYPTO_BYTES_2) -- return -1; -- return crypto_sign_signature_internal_2 (sig, &siglen, m, mlen, -- pre, prelen, rnd, sk); -+ return GPG_ERR_INV_DATA; -+ r = crypto_sign_signature_internal_2 (sig, &siglen, m, mlen, -+ pre, prelen, rnd, sk); -+ break; - case GCRY_MLDSA65: - default: - if (siglen != CRYPTO_BYTES_3) -- return -1; -- return crypto_sign_signature_internal_3 (sig, &siglen, m, mlen, -- pre, prelen, rnd, sk); -+ return GPG_ERR_INV_DATA; -+ r = crypto_sign_signature_internal_3 (sig, &siglen, m, mlen, -+ pre, prelen, rnd, sk); -+ break; - case GCRY_MLDSA87: - if (siglen != CRYPTO_BYTES_5) -- return -1; -- return crypto_sign_signature_internal_5 (sig, &siglen, m, mlen, -- pre, prelen, rnd, sk); -+ return GPG_ERR_INV_DATA; -+ r = crypto_sign_signature_internal_5 (sig, &siglen, m, mlen, -+ pre, prelen, rnd, sk); -+ break; - } -+ -+ if (r < 0) -+ return GPG_ERR_INTERNAL; -+ -+ return 0; - } - --int -+gpg_err_code_t - dilithium_verify (int algo, const uint8_t *sig, size_t siglen, - const uint8_t *m, size_t mlen, - const uint8_t *ctx, size_t ctxlen, -@@ -188,9 +223,17 @@ dilithium_verify (int algo, const uint8_t *sig, size_t siglen, - size_t i; - uint8_t pre[257]; - size_t prelen; -+ int r; - -- if (ctx == NULL && ctxlen == -1) -- prelen = 0; -+ if (ctx == NULL) -+ { -+ if (ctxlen == -1) -+ prelen = 0; -+ else -+ return GPG_ERR_INV_DATA; -+ } -+ else if (ctxlen > 255) -+ return GPG_ERR_INV_DATA; - else - { - /* Prepare pre = (0, ctxlen, ctx) */ -@@ -204,16 +247,24 @@ dilithium_verify (int algo, const uint8_t *sig, size_t siglen, - switch (algo) - { - case GCRY_MLDSA44: -- return crypto_sign_verify_internal_2 (sig, siglen, m, mlen, -- pre, prelen, pk); -+ r = crypto_sign_verify_internal_2 (sig, siglen, m, mlen, -+ pre, prelen, pk); -+ break; - case GCRY_MLDSA65: - default: -- return crypto_sign_verify_internal_3 (sig, siglen, m, mlen, -- pre, prelen, pk); -+ r = crypto_sign_verify_internal_3 (sig, siglen, m, mlen, -+ pre, prelen, pk); -+ break; - case GCRY_MLDSA87: -- return crypto_sign_verify_internal_5 (sig, siglen, m, mlen, -- pre, prelen, pk); -+ r = crypto_sign_verify_internal_5 (sig, siglen, m, mlen, -+ pre, prelen, pk); -+ break; - } -+ -+ if (r < 0) -+ return GPG_ERR_BAD_SIGNATURE; -+ -+ return 0; - } - - typedef struct { -diff --git a/cipher/dilithium.h b/cipher/dilithium.h -index 88a48094..dc18f158 100644 ---- a/cipher/dilithium.h -+++ b/cipher/dilithium.h -@@ -64,16 +64,16 @@ - #define DILITHIUM_SIGN_STACK_BURN (161 * 1024) - #define DILITHIUM_VERIFY_STACK_BURN (122 * 1024) - --int dilithium_keypair (int algo, uint8_t *pk, uint8_t *sk, -- const uint8_t seed[SEEDBYTES]); --int dilithium_sign (int algo, uint8_t *sig, size_t siglen, -- const uint8_t *m, size_t mlen, -- const uint8_t *ctx, size_t ctxlen, -- const uint8_t *sk, const uint8_t rnd[RNDBYTES]); --int dilithium_verify (int algo, const uint8_t *sig, size_t siglen, -- const uint8_t *m, size_t mlen, -- const uint8_t *ctx, size_t ctxlen, -- const uint8_t *pk); -+gpg_err_code_t dilithium_keypair (int algo, uint8_t *pk, uint8_t *sk, -+ const uint8_t seed[SEEDBYTES]); -+gpg_err_code_t dilithium_sign (int algo, uint8_t *sig, size_t siglen, -+ const uint8_t *m, size_t mlen, -+ const uint8_t *ctx, size_t ctxlen, -+ const uint8_t *sk, const uint8_t rnd[RNDBYTES]); -+gpg_err_code_t dilithium_verify (int algo, const uint8_t *sig, size_t siglen, -+ const uint8_t *m, size_t mlen, -+ const uint8_t *ctx, size_t ctxlen, -+ const uint8_t *pk); - #endif - - #if defined(DILITHIUM_MODE) -diff --git a/cipher/pubkey-dilithium.c b/cipher/pubkey-dilithium.c -index 03958bb0..8c3f650e 100644 ---- a/cipher/pubkey-dilithium.c -+++ b/cipher/pubkey-dilithium.c -@@ -170,7 +170,7 @@ mldsa_generate (const gcry_sexp_t genparms, gcry_sexp_t *r_skey) - memcpy (seed, seed_supplied, SEEDBYTES); - } - -- dilithium_keypair (info->algo, pk, sk, seed); -+ rc = dilithium_keypair (info->algo, pk, sk, seed); - _gcry_burn_stack (DILITHIUM_KEYPAIR_STACK_BURN); - - if (!rc) -@@ -206,7 +206,6 @@ mldsa_sign (gcry_sexp_t *r_sig, gcry_sexp_t s_data, gcry_sexp_t keyparms) - size_t data_len; - const unsigned char *sk; - const struct mldsa_info *info = mldsa_get_info (keyparms); -- int r; - - if (!info) - return GPG_ERR_PUBKEY_ALGO; -@@ -258,17 +257,14 @@ mldsa_sign (gcry_sexp_t *r_sig, gcry_sexp_t s_data, gcry_sexp_t keyparms) - else - randombytes (rnd, RNDBYTES); - if (ctx.flags & PUBKEY_FLAG_NO_PREFIX) -- r = dilithium_sign (info->algo, sig, info->sig_len, data, data_len, -- NULL, -1, sk, rnd); -+ rc = dilithium_sign (info->algo, sig, info->sig_len, data, data_len, -+ NULL, -1, sk, rnd); - else -- r = dilithium_sign (info->algo, sig, info->sig_len, data, data_len, -- ctx.label, ctx.labellen, sk, rnd); -+ rc = dilithium_sign (info->algo, sig, info->sig_len, data, data_len, -+ ctx.label, ctx.labellen, sk, rnd); - _gcry_burn_stack (DILITHIUM_SIGN_STACK_BURN); -- if (r < 0) -- { -- rc = GPG_ERR_INTERNAL; -- goto leave; -- } -+ if (rc) -+ goto leave; - - rc = sexp_build (r_sig, NULL, "(sig-val(%s(s%b)))", info->name, - info->sig_len, sig); -@@ -300,7 +296,6 @@ mldsa_verify (gcry_sexp_t s_sig, gcry_sexp_t s_data, gcry_sexp_t keyparms) - size_t data_len; - const unsigned char *pk; - const struct mldsa_info *info = mldsa_get_info (keyparms); -- int r; - - if (!info) - return GPG_ERR_PUBKEY_ALGO; -@@ -350,17 +345,14 @@ mldsa_verify (gcry_sexp_t s_sig, gcry_sexp_t s_data, gcry_sexp_t keyparms) - } - - if (ctx.flags & PUBKEY_FLAG_NO_PREFIX) -- r = dilithium_verify (info->algo, sig, info->sig_len, data, data_len, -- NULL, -1, pk); -+ rc = dilithium_verify (info->algo, sig, info->sig_len, data, data_len, -+ NULL, -1, pk); - else -- r = dilithium_verify (info->algo, sig, info->sig_len, data, data_len, -- ctx.label, ctx.labellen, pk); -+ rc = dilithium_verify (info->algo, sig, info->sig_len, data, data_len, -+ ctx.label, ctx.labellen, pk); - _gcry_burn_stack (DILITHIUM_VERIFY_STACK_BURN); -- if (r < 0) -- { -- rc = GPG_ERR_BAD_SIGNATURE; -- goto leave; -- } -+ if (rc) -+ goto leave; - - leave: - _gcry_pk_util_free_encoding_ctx (&ctx); diff --git a/meta/recipes-support/libgcrypt/libgcrypt_1.12.1.bb b/meta/recipes-support/libgcrypt/libgcrypt_1.12.4.bb similarity index 89% rename from meta/recipes-support/libgcrypt/libgcrypt_1.12.1.bb rename to meta/recipes-support/libgcrypt/libgcrypt_1.12.4.bb index d7b3e182cd..4dedcc49ce 100644 --- a/meta/recipes-support/libgcrypt/libgcrypt_1.12.1.bb +++ b/meta/recipes-support/libgcrypt/libgcrypt_1.12.4.bb @@ -12,7 +12,7 @@ LICENSE:${PN}-dev = "GPL-2.0-or-later & LGPL-2.1-or-later" LIC_FILES_CHKSUM = "file://COPYING;md5=570a9b3749dd0463a1778803b12a6dce \ file://COPYING.LIB;md5=4bf661c1e3793e55c8d1051bc5e0ae21 \ - file://LICENSES;md5=034b4e369944ad4b52a68368f1cf98b8 \ + file://LICENSES;md5=47e346a71a2593d19f741408407fe91f \ " DEPENDS = "libgpg-error" @@ -25,10 +25,8 @@ SRC_URI = "${GNUPG_MIRROR}/libgcrypt/libgcrypt-${PV}.tar.bz2 \ file://no-native-gpg-error.patch \ file://no-bench-slope.patch \ file://run-ptest \ - file://CVE-2026-41989.patch \ - file://CVE-2026-41990.patch \ " -SRC_URI[sha256sum] = "7df5c08d952ba33f9b6bdabdb06a61a78b2cf62d2122c2d1d03a91a79832aa3c" +SRC_URI[sha256sum] = "d77f68f48879510e79a2f65977ccc68981781ea0923e5bdffac2a193ea3d660e" BINCONFIG = "${bindir}/libgcrypt-config"