From patchwork Wed Oct 21 09:28:14 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101492 Received: from mail-dl1-f47.google.com (mail-dl1-f47.google.com [74.125.82.47]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.7494.1792574946005947752 for ; Wed, 21 Oct 2026 02:29:06 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=sKO1//lS; spf=pass (domain: gmail.com, ip: 74.125.82.47, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-dl1-f47.google.com with SMTP id a92af1059eb24-157fe9d771bso659490c88.0 for ; Wed, 21 Oct 2026 02:29:05 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792574945; x=1793179745; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc:subject:date:message-id:reply-to:content-type; bh=dcDQN3b53a6MHz1FFFFYGmijN0jK+jJ9QC8CTjP1Sus=; b=sKO1//lSFrHDtDlxv+/HHOPobrZUoDhM9TGecZe4qHb8HejuLkUo69IKHXaR61COwu OnL97iYf770haogxBFKj9RGvNvXQm4uL9iyXRoTG6A3FccrcV76O6aqsA3VGfb6Uu9RZ +E7tXAazkGe2R7G5IEjQlUsqQ/6dtbU2hzJ2G7te7d97zU2y59J4Wgm2FK1KuAJsKveH QXMntfDv0I6gd/uE1rNMabI1Adf4Z0W/t2vwaCX1ibmP9XW2uWQEPd1TEEnE7a+JYBtC f1byhQOnKTTosWuWgSwLDLZGxHeL7nbuXR/kguD91NUnx9QlLorODALXlnB/6a3cJt8y A+Aw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792574945; x=1793179745; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to:content-type; bh=dcDQN3b53a6MHz1FFFFYGmijN0jK+jJ9QC8CTjP1Sus=; b=VThg6q3DcDCx1CDZO+a4vf4hX9BvgqcR4eM3AVFIOMtS//On0itJzFD97upc/+wFPx bpbwwms4h+e9BD8J2NVwVNV+p5b9BFWb11APrytWXKeS+XBopnqjAQHEHGQYgLGRaK4h B5mAXTRpMPF61KC07zEpBll3UMwvaZqkDHIJCHDY2sTImcvrIMbWmBc1mvcTa5IKjW8N PnxbldbmIWnj/XHhqtoyGYFv7ISXqEy2e9j2Zm05C0ivw6vb0Jk1TstGSurFrBboqTH4 NpPaVZlL/XegzM3YAL/b90GA98+KctYrlfsndWgU2nPSY5BNKtQoySeOUJdfH5slBWPA dQow== X-Gm-Message-State: AFq9FYLNSZ4wnm3eDE6iVgyJCDxiCSeEOYlq5LEeTfbzBnUv53flwKnL GRypJfmjvF5jyVCF1llIFp2Y0K5FuaOwZYluQvGmu+HqG4/oe35qBNVYsDf8AQ== X-Gm-Gg: AYBFou0f3YmNuijoyLAWaOnVmwTVDvY6tcfaKZbwX2wDJyKSNRS50o0NaZRfh5LmBkT FjZnq1gG2cl+jnK0t/Ld3SIkE6LhXV1wMNyHQxauVfWZ76123hxiynWLNkuJu4wj4VbQpPGCuV/ 6gaEbuedkKK1M8C+i0KKuZo9/Ndzu5Wsb5wN1UjmtBofYFGvn5yVnpAxRX8l8AG11IG/xziunir +GN3uUlgg01AmMPFD85Q8Fn+ZvfwzjHqA+3kU86/M1YGXNn5RTMTabOjhIeLNzljqtA+vRu4fFG p3mYhIfbiNEE4lqLsIHIAXdEF9OrwCFZdUd2arwjoMXrjHxrqCyV6P08Pj0Q2Viv82vY2XttwK8 vCIqTCUiz45JWC6E2Qep1vc9TYPidr5nTmBRwIMdJ98Sas+tGdnaQDJCoqfASWHpNaOOBTTyNON U9siNpYqNk/4KqdvaPTaqOnsCsaQ5wGmVs/CVE906B3K3yTYFXHkzsckwiC7XQy8iaQ0nbmGpA5 03CahM0Gkx0xH4veDQCB2OsK1TEF+zOqVoeawNYIK9Y6howRmT6N4pv7+ZwyI4uzSuHTUPshYnr 1nOSABj4tojPsXrLkWZrh5AKYIrdqxc= X-Received: by 2002:a05:701a:ca01:b0:181:5cac:8f27 with SMTP id a92af1059eb24-190a6dbd80amr2209130c88.35.1792574945257; Wed, 21 Oct 2026 02:29:05 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id a92af1059eb24-19035c0c9a6sm4716458c88.3.2026.10.21.02.29.03 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 21 Oct 2026 02:29:04 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-networking][blacksail][PATCH 1/44] zeroconf: ignore CVEs Date: Wed, 21 Oct 2026 22:28:14 +1300 Message-ID: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 21 Oct 2026 09:29:11 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131188 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-47180 https://nvd.nist.gov/vuln/detail/cve-2026-47183 https://nvd.nist.gov/vuln/detail/cve-2026-47184 https://nvd.nist.gov/vuln/detail/cve-2026-48045 https://nvd.nist.gov/vuln/detail/cve-2026-48487 Signed-off-by: Ankur Tyagi --- meta-networking/recipes-protocols/zeroconf/zeroconf_0.9.bb | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/meta-networking/recipes-protocols/zeroconf/zeroconf_0.9.bb b/meta-networking/recipes-protocols/zeroconf/zeroconf_0.9.bb index cb26699212..a9c19cb38f 100644 --- a/meta-networking/recipes-protocols/zeroconf/zeroconf_0.9.bb +++ b/meta-networking/recipes-protocols/zeroconf/zeroconf_0.9.bb @@ -35,3 +35,9 @@ do_install () { install -c -m 755 ${UNPACKDIR}/debian-zeroconf ${D}${sysconfdir}/network/if-up.d/zeroconf install -c ${UNPACKDIR}/zeroconf-default ${D}${sysconfdir}/default/zeroconf } + +CVE_STATUS[CVE-2026-47180] = "cpe-incorrect: this vulnerability is for Python Zeroconf library" +CVE_STATUS[CVE-2026-47183] = "cpe-incorrect: this vulnerability is for Python Zeroconf library" +CVE_STATUS[CVE-2026-47184] = "cpe-incorrect: this vulnerability is for Python Zeroconf library" +CVE_STATUS[CVE-2026-48045] = "cpe-incorrect: this vulnerability is for Python Zeroconf library" +CVE_STATUS[CVE-2026-48487] = "cpe-incorrect: this vulnerability is for Python Zeroconf library" From patchwork Wed Oct 21 09:28:15 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101493 Received: from mail-dy1-f178.google.com (mail-dy1-f178.google.com [74.125.82.178]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.7495.1792574948964485485 for ; Wed, 21 Oct 2026 02:29:09 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=gG3wlAwC; spf=pass (domain: gmail.com, ip: 74.125.82.178, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-dy1-f178.google.com with SMTP id 5a478bee46e88-36661f953e4so1009051eec.1 for ; Wed, 21 Oct 2026 02:29:08 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792574948; x=1793179748; darn=lists.openembedded.org; h=content-transfer-encoding:content-type:mime-version:references :in-reply-to:message-id:date:subject:cc:to:from:from:to:cc:subject :date:message-id:reply-to:content-type; bh=elzW/IhIrW0uicn22cC85Dq/cwPxkRaI4vt9zsGwJwE=; b=gG3wlAwCioshdweAYSYqrpuz2UKWK4uF1Xkaos0ZhEl04CpgNivYBd3mXkWiTzbBhX GUVy0tx2HEITYQ4WTHs55uykXvmkrS5gNUZW/QEFEt5m5GlKggU7WRsRnyZJitgGilMJ RTFzhNVVtHROUjwTmJemqgLMzAPHXdV5BDhzBpcEMappwwYd6FPjAls8g2quaCR+/jxT mQMgwairgcFh0fjVJJbk+BSpIoX00+VupGkSWGHrS9Bp9CQKKiOwlDGNYCCKI5BH8FCK wmRub6ROle/HddTAXfbOS6SUgKBXowbjmuOR/T5B1q82kY4gCqkrkZM2WuZQUleZhNHz axVg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792574948; x=1793179748; h=content-transfer-encoding:content-type:mime-version:references :in-reply-to:message-id:date:subject:cc:to:from:x-gm-gg :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=elzW/IhIrW0uicn22cC85Dq/cwPxkRaI4vt9zsGwJwE=; b=u8z77wB1evZIp58D4bjkqmFX5xPWDkOSOezbmoR78KlnvHi9paXDV9VIf95bIQ82CU zq/yy8BD/jyRxz8Us2rVt/ORwVYlJHwLGdr0f3hlpoR9aLNNz94yEL2PSnvGuMG9BULq xjUPjp24EB/Q/Kf2CWsn0ZpWHnLZ2vK7gxZSROsuR8OFp0pUKmetsmmtKdtdLhQHN0sj RYVF0fuvdwdQyuxXkHshSCsJPlZMzVAgUWZo3Ct6ObbYXI5R5+vD0+6CmuGi6XPG7dka EN5TaZcN/dO+S6W1wu4kSR0HsLneQCHstntQ4b4zfF8xURv0AozCAy1UnZPnm0hELPtT TJ4w== X-Gm-Message-State: AFq9FYLvRO/0AlyZK5mWQl26DLl2oU7cFjcT3UhrI6mcwv8EGXupq4kr NcdmdZYcNH/ecl5gZShg6cb69CcYwhQJWv/NhJE221WQYspV/yIkjfQVOJ2YDA== X-Gm-Gg: AYBFou3TfK9Mo60zEZGe2rUWr6xfSbCSOufogedg4XgynOhJXZWEL54DhiIfRCiQFE2 qKuAjwT4toQr9jommbgRaSCup5xNLPSJxeYWUzFyaH4jUPMRVb564HBL6/1bTfp+jymrW6fIPRw 4KbgTf3zuaU3lp3UHeFT7J+sTtwZLUx5jQ8xwYmvF+RQsqU+STBeM8qex95TxRDgPD7ASb3hypD T9Sxf0E3+DKzIfxSC3EnTRs++JBpm2gFE9lphxI2IVQqXg+wsXNqR35YitCzFEB0xCPmENYbtdP 6Ch37Pb3RnBb+uY2gWg/4VABiJXL979p3+uz3t1W2s9g8XmIbKbuoEf5LVFTSXoLn6NXif2vpd8 hMQxUMTG0A+LGeWcx+xq1mxxiTFiHFHHjZj8FV1Bs2ilq19zbE0MpgJpQyV05xGKuLDGTV0Q6R+ ucDVLhkXsnUP0wgwJN+vTqyIZ+wC4avbE7flGtyjG8Y7FM9fI66bARs1dsLjJHCOAr8mKxzP9xv 9LUL0RYa4p4fhILeQpk8H4RFlmRvoejzJ8MCRkvZYtdABUOZCnVb8VQS4AkDJU8uIFq+USizBba HZwMSVxYhGjcKHkQq4l+fSWGMLvGBCo= X-Received: by 2002:a05:7022:e88e:b0:143:298f:33b6 with SMTP id a92af1059eb24-190a87a492dmr2381947c88.46.1792574947662; Wed, 21 Oct 2026 02:29:07 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id a92af1059eb24-19035c0c9a6sm4716458c88.3.2026.10.21.02.29.05 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 21 Oct 2026 02:29:07 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-oe][blacksail][PATCH 2/44] udisks2: patch CVE-2026-7867 Date: Wed, 21 Oct 2026 22:28:15 +1300 Message-ID: <20261021092857.3585453-2-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> References: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 21 Oct 2026 09:29:11 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131189 From: Ankur Tyagi Backport commits from the PR[1]. Details: https://nvd.nist.gov/vuln/detail/cve-2026-7867 [1]https://github.com/storaged-project/udisks/pull/1530 Signed-off-by: Ankur Tyagi --- .../udisks/udisks2/CVE-2026-7867-1.patch | 249 +++++++++++++ .../udisks/udisks2/CVE-2026-7867-2.patch | 208 +++++++++++ .../udisks/udisks2/CVE-2026-7867-3.patch | 53 +++ .../udisks/udisks2/CVE-2026-7867-4.patch | 40 ++ .../udisks/udisks2/CVE-2026-7867-5.patch | 348 ++++++++++++++++++ .../recipes-support/udisks/udisks2_2.10.2.bb | 9 +- 6 files changed, 905 insertions(+), 2 deletions(-) create mode 100644 meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-1.patch create mode 100644 meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-2.patch create mode 100644 meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-3.patch create mode 100644 meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-4.patch create mode 100644 meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-5.patch diff --git a/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-1.patch b/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-1.patch new file mode 100644 index 0000000000..e7a5704f6c --- /dev/null +++ b/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-1.patch @@ -0,0 +1,249 @@ +From 1b417fd9a69e7141927a03bfb39d4d5a78b891b4 Mon Sep 17 00:00:00 2001 +From: Tomas Bzatek +Date: Tue, 28 Apr 2026 19:10:09 +0200 +Subject: [PATCH] udiskslinuxfilesystem: Separate real caller identity from + as-user target +MIME-Version: 1.0 +Content-Type: text/plain; charset=UTF-8 +Content-Transfer-Encoding: 8bit + +When the 'as-user' option is specified in Filesystem.Mount(), the code +previously overwrote caller_uid/caller_gid with the target user's identity. +This meant downstream functions received a uid they believed was the +D-Bus caller's, but was actually the target's. + +Introduce effective_uid/effective_gid/effective_user_name to hold the +as-user target identity (or the caller's identity when as-user is not +set). The real D-Bus caller identity is now always resolved into +caller_uid/caller_gid and used for authorization-related decisions +(setup_by_user, on_user_seat checks), while effective_* is used for +mount point calculation, run_as_uid/run_as_gid, and state tracking. + +Reported-by: Azizcan Daştan +Reported-by: Özlem Ozan +Co-Authored-By: Claude Opus 4.6 +(cherry picked from commit 397eea88d58f77f6e02d537c4c961201b9245943) +(cherry picked from commit 2d97818f41fbeb645fbb7b0373ed448bd26503f6) + +CVE: CVE-2026-7867 +Upstream-Status: Backport [https://github.com/storaged-project/udisks/commit/2d97818f41fbeb645fbb7b0373ed448bd26503f6] +Signed-off-by: Ankur Tyagi +--- + src/udiskslinuxfilesystem.c | 93 +++++++++++++++++++++---------------- + 1 file changed, 53 insertions(+), 40 deletions(-) + +diff --git a/src/udiskslinuxfilesystem.c b/src/udiskslinuxfilesystem.c +index 9f4880ad..ebdd2e05 100644 +--- a/src/udiskslinuxfilesystem.c ++++ b/src/udiskslinuxfilesystem.c +@@ -905,7 +905,8 @@ handle_mount_fstab (UDisksDaemon *daemon, + UDisksObject *object, + uid_t caller_uid, + gid_t caller_gid, +- gboolean mount_other_user, ++ uid_t effective_uid, ++ gid_t effective_gid, + const gchar *mount_point_to_use, + const gchar *fstab_mount_options, + GDBusMethodInvocation *invocation, +@@ -936,7 +937,7 @@ handle_mount_fstab (UDisksDaemon *daemon, + * will be replaced by the name of the drive/device in question + */ + message = N_("Authentication is required to mount $(drive)"); +- if (mount_other_user) ++ if (caller_uid != effective_uid) + { + action_id = "org.freedesktop.udisks2.filesystem-mount-other-user"; + } +@@ -981,14 +982,14 @@ handle_mount_fstab (UDisksDaemon *daemon, + job = udisks_daemon_launch_simple_job (daemon, + UDISKS_OBJECT (object), + "filesystem-mount", +- mount_fstab_as_root ? 0 : caller_uid, ++ mount_fstab_as_root ? 0 : effective_uid, + NULL /* cancellable */); + + /* XXX: using run_as_uid for root doesn't work even if the caller is already root */ +- if (!mount_fstab_as_root && caller_uid != 0) ++ if (!mount_fstab_as_root && effective_uid != 0) + { +- BDExtraArg uid_arg = { g_strdup ("run_as_uid"), g_strdup_printf ("%d", caller_uid) }; +- BDExtraArg gid_arg = { g_strdup ("run_as_gid"), g_strdup_printf ("%d", caller_gid) }; ++ BDExtraArg uid_arg = { g_strdup ("run_as_uid"), g_strdup_printf ("%d", effective_uid) }; ++ BDExtraArg gid_arg = { g_strdup ("run_as_gid"), g_strdup_printf ("%d", effective_gid) }; + const BDExtraArg *extra_args[3] = { &uid_arg, &gid_arg, NULL }; + + success = bd_fs_mount (NULL, mount_point_to_use, NULL, NULL, extra_args, &error); +@@ -1066,8 +1067,9 @@ handle_mount_dynamic (UDisksDaemon *daemon, + UDisksObject *object, + uid_t caller_uid, + gid_t caller_gid, +- const gchar *caller_user_name, +- gboolean mount_other_user, ++ uid_t effective_uid, ++ gid_t effective_gid, ++ const gchar *effective_user_name, + gchar **mount_point_to_use, + gboolean *mpoint_persistent, + GDBusMethodInvocation *invocation, +@@ -1127,7 +1129,7 @@ handle_mount_dynamic (UDisksDaemon *daemon, + * will be replaced by the name of the drive/device in question + */ + message = N_("Authentication is required to mount $(drive)"); +- if (mount_other_user) ++ if (caller_uid != effective_uid) + { + action_id = "org.freedesktop.udisks2.filesystem-mount-other-user"; + } +@@ -1161,9 +1163,9 @@ handle_mount_dynamic (UDisksDaemon *daemon, + /* Calculate mount point (guaranteed to be valid UTF-8) */ + *mount_point_to_use = calculate_mount_point (daemon, + block, +- caller_uid, +- caller_gid, +- caller_user_name, ++ effective_uid, ++ effective_gid, ++ effective_user_name, + fs_type_to_use, + mpoint_persistent, + &error); +@@ -1178,7 +1180,7 @@ handle_mount_dynamic (UDisksDaemon *daemon, + /* Calculate mount options (guaranteed to be valid UTF-8) */ + mount_options = udisks_linux_calculate_mount_options (daemon, + block, +- caller_uid, ++ effective_uid, + fs_signature, + fs_type_to_use, + options, +@@ -1258,14 +1260,16 @@ handle_mount (UDisksFilesystem *filesystem, + UDisksBlock *block; + UDisksDaemon *daemon; + UDisksState *state = NULL; +- gchar *opt_as_user = NULL; ++ const gchar *opt_as_user = NULL; + uid_t caller_uid; + gid_t caller_gid; ++ uid_t effective_uid = 0; ++ gid_t effective_gid = 0; ++ gchar *effective_user_name = NULL; + const gchar * const *existing_mount_points; + gchar *mount_point_to_use = NULL; + gboolean mpoint_persistent = TRUE; + gchar *fstab_mount_options = NULL; +- gchar *caller_user_name = NULL; + GError *error = NULL; + gboolean system_managed = FALSE; + gchar *device = NULL; +@@ -1323,35 +1327,42 @@ handle_mount (UDisksFilesystem *filesystem, + goto out; + } + ++ /* Always resolve the real D-Bus caller identity */ ++ if (!udisks_daemon_util_get_caller_uid_sync (daemon, ++ invocation, ++ NULL /* GCancellable */, ++ &caller_uid, ++ &error)) ++ { ++ g_dbus_method_invocation_return_gerror (invocation, error); ++ g_clear_error (&error); ++ goto out; ++ } ++ ++ if (!udisks_daemon_util_get_user_info (caller_uid, ++ &caller_gid, ++ opt_as_user ? NULL : &effective_user_name, ++ &error)) ++ { ++ g_dbus_method_invocation_return_gerror (invocation, error); ++ g_clear_error (&error); ++ goto out; ++ } ++ + if (opt_as_user) + { +- if (!udisks_daemon_util_get_user_info_by_name (opt_as_user, &caller_uid, &caller_gid, &error)) ++ if (!udisks_daemon_util_get_user_info_by_name (opt_as_user, &effective_uid, &effective_gid, &error)) + { + g_dbus_method_invocation_return_gerror (invocation, error); + g_clear_error (&error); + goto out; + } +- caller_user_name = g_strdup (opt_as_user); ++ effective_user_name = g_strdup (opt_as_user); + } + else + { +- if (!udisks_daemon_util_get_caller_uid_sync (daemon, +- invocation, +- NULL /* GCancellable */, +- &caller_uid, +- &error)) +- { +- g_dbus_method_invocation_return_gerror (invocation, error); +- g_clear_error (&error); +- goto out; +- } +- +- if (!udisks_daemon_util_get_user_info (caller_uid, &caller_gid, &caller_user_name, &error)) +- { +- g_dbus_method_invocation_return_gerror (invocation, error); +- g_clear_error (&error); +- goto out; +- } ++ effective_uid = caller_uid; ++ effective_gid = caller_gid; + } + + /* Mount it */ +@@ -1361,7 +1372,8 @@ handle_mount (UDisksFilesystem *filesystem, + object, + caller_uid, + caller_gid, +- opt_as_user != NULL, ++ effective_uid, ++ effective_gid, + mount_point_to_use, + fstab_mount_options, + invocation, +@@ -1374,8 +1386,9 @@ handle_mount (UDisksFilesystem *filesystem, + object, + caller_uid, + caller_gid, +- caller_user_name, +- opt_as_user != NULL, ++ effective_uid, ++ effective_gid, ++ effective_user_name, + &mount_point_to_use, + &mpoint_persistent, + invocation, +@@ -1387,7 +1400,7 @@ handle_mount (UDisksFilesystem *filesystem, + udisks_state_add_mounted_fs (state, + mount_point_to_use, + udisks_block_get_device_number (block), +- caller_uid, ++ effective_uid, + system_managed, + system_managed ? FALSE : mpoint_persistent); + +@@ -1395,7 +1408,7 @@ handle_mount (UDisksFilesystem *filesystem, + device, + system_managed ? " (system)" : "", + mount_point_to_use, +- caller_uid); ++ effective_uid); + + udisks_linux_block_object_trigger_uevent_sync (UDISKS_LINUX_BLOCK_OBJECT (object), + UDISKS_DEFAULT_WAIT_TIMEOUT); +@@ -1409,7 +1422,7 @@ handle_mount (UDisksFilesystem *filesystem, + udisks_state_check (state); + g_free (mount_point_to_use); + g_free (fstab_mount_options); +- g_free (caller_user_name); ++ g_free (effective_user_name); + g_free (device); + g_clear_object (&object); + diff --git a/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-2.patch b/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-2.patch new file mode 100644 index 0000000000..dff53c87d8 --- /dev/null +++ b/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-2.patch @@ -0,0 +1,208 @@ +From 53a3e81a90fa6d71cfb59d63ffffa22bbe071886 Mon Sep 17 00:00:00 2001 +From: Tomas Bzatek +Date: Tue, 28 Apr 2026 19:29:14 +0200 +Subject: [PATCH] udiskslinuxfilesystem: Rework fstab mount authorization for + as-user +MIME-Version: 1.0 +Content-Type: text/plain; charset=UTF-8 +Content-Transfer-Encoding: 8bit + +The polkit authorization logic in handle_mount_fstab() had two problems +when 'as-user' was combined with fstab entries containing 'user', +'users' or 'x-udisks-auth' mount options: + +1. The 'filesystem-mount-other-user' polkit check was inside the code + block that is skipped when 'user'/'users'/'x-udisks-auth' options + are present, allowing an unprivileged caller to mount on behalf of + another user without any authorization. + +2. When 'user' or 'users' fstab options were present and the initial + mount attempt failed with a permission error, the code would fall + back to mounting as root. This fallback should only be available + when 'x-udisks-auth' is explicitly specified. + +Restructure the authorization flow so that: + - The 'filesystem-mount-other-user' check is evaluated first, + independently of fstab mount options, and is always enforced + when caller_uid != effective_uid. + - The root fallback on BD_FS_ERROR_AUTH is gated on 'x-udisks-auth' + being present, not just any of the user-level mount options. + - When root uses 'as-user' without 'user'/'users' fstab options, + the root fallback is implicitly enabled. + - Regular polkit checks (filesystem-mount, mount-system, + mount-other-seat) only apply for same-user mounts without + 'user'/'users'/'x-udisks-auth'. + +Update the D-Bus API documentation to reflect the new behavior. + +Reported-by: Azizcan Daştan +Reported-by: Özlem Ozan +Co-Authored-By: Claude Opus 4.6 +(cherry picked from commit 68108081aa9049cf3bb2fb0044cb4de83f962390) +(cherry picked from commit 0050f51d40e468f6a3197ccdc77b5bd59c923a37) + +CVE: CVE-2026-7867 +Upstream-Status: Backport [https://github.com/storaged-project/udisks/commit/0050f51d40e468f6a3197ccdc77b5bd59c923a37] +Signed-off-by: Ankur Tyagi +--- + data/org.freedesktop.UDisks2.xml | 24 ++++++----- + src/udiskslinuxfilesystem.c | 73 ++++++++++++++++++++++++-------- + 2 files changed, 70 insertions(+), 27 deletions(-) + +diff --git a/data/org.freedesktop.UDisks2.xml b/data/org.freedesktop.UDisks2.xml +index 53194c70..f7201adc 100644 +--- a/data/org.freedesktop.UDisks2.xml ++++ b/data/org.freedesktop.UDisks2.xml +@@ -2654,7 +2654,8 @@ + filesystem is mounted on behalf of the specified user instead + of the calling one. This has usually an effect on the returned + @mount_path and it also allows that user to unmount the +- filesystem later. This option expects a user name, not a UID. ++ filesystem later. This option expects a user name, not a UID ++ and always performs an authorization check. + + If the device in question is referenced in the + /etc/fstab file, the +@@ -2662,15 +2663,18 @@ + and the given options or filesystem type given in @options are + ignored. + +- If x-udisks-auth is specified as an option +- for the device in the /etc/fstab file, +- then the mount command is run as the +- calling user, without performing any authorization check +- mentioned above. If this fails because of insufficient +- permissions, an authorization check is performed (which +- typically results in the user having to authenticate as an +- administrator). If authorized, the mount +- command is then run as root. ++ If x-udisks-auth, user or ++ users are specified as options for the ++ device in the /etc/fstab file, then the ++ mount command is run as the calling user ++ (or the effective user of the as-user ++ option respectively), without performing any authorization check ++ mentioned above. If this fails because of insufficient permissions ++ and x-udisks-auth is specified, an ++ authorization check is performed (which typically results in ++ the user having to authenticate as an administrator). If ++ authorized, the mount command is then run ++ as root. + + The filesystem should be unmounted using the + org.freedesktop.UDisks2.Filesystem.Unmount() method. +diff --git a/src/udiskslinuxfilesystem.c b/src/udiskslinuxfilesystem.c +index ebdd2e05..eb2a3f21 100644 +--- a/src/udiskslinuxfilesystem.c ++++ b/src/udiskslinuxfilesystem.c +@@ -918,30 +918,60 @@ handle_mount_fstab (UDisksDaemon *daemon, + const gchar *message = NULL; + gboolean success = FALSE; + gboolean mount_fstab_as_root = FALSE; ++ gboolean x_udisks_auth = FALSE; ++ gboolean user_mount = FALSE; + UDisksBaseJob *job = NULL; + GError *error = NULL; + + block = udisks_object_peek_block (object); + device = udisks_block_get_device (block); + +- if (!has_option (fstab_mount_options, "x-udisks-auth") && +- !has_option (fstab_mount_options, "user") && +- !has_option (fstab_mount_options, "users")) ++ x_udisks_auth = has_option (fstab_mount_options, "x-udisks-auth"); ++ user_mount = x_udisks_auth || ++ has_option (fstab_mount_options, "user") || ++ has_option (fstab_mount_options, "users"); ++ ++ /* 'as-user' rules: ++ * - when caller is root: ++ * - if 'user'/'users' present, do not fall back to mounting as root, unless 'x-udisks-auth' is specified ++ * - if 'user'/'users' not present, try as effective user first and allow fallback to mounting as root (implies 'x-udisks-auth') ++ * - when caller is unprivileged: ++ * - always require polkit auth to prevent identity spoofing ++ * - do not fall back to mounting as root, unless 'x-udisks-auth' is specified ++ * - if neither 'user'/'users'/'x-udisks-auth' present, failure is expected by nature (unless 'as-user=root') ++ * ++ * general fstab mounting rules: ++ * - when caller is root, mount as root, allow anything ++ * - when caller is unprivileged: ++ * - if 'user'/'users' present, do not fall back to mounting as root, unless 'x-udisks-auth' is specified ++ * - if only 'x-udisks-auth' present, mount as user and fall back to mounting as root if not successful ++ * - if neither 'user'/'users'/'x-udisks-auth' present, require polkit auth and mount as root ++ * ++ * Further assumptions: ++ * - when 'user'/'users' not present and mounting as unprivileged, this typically fails but it is still beneficial to try that e.g. for FUSE mounts ++ * - assuming libblockdev mount error code mapping works reliably (for the BD_FS_ERROR_AUTH check) ++ */ ++ ++ if (caller_uid != effective_uid) ++ { ++ /* Always require authorization when mounting on behalf of another user, ++ * regardless of fstab mount options. ++ */ ++ action_id = "org.freedesktop.udisks2.filesystem-mount-other-user"; ++ ++ /* When 'user'/'users' not present and the caller is root, allow ++ * fallback mounting as root. ++ */ ++ if (caller_uid == 0 && !user_mount) ++ x_udisks_auth = TRUE; ++ } ++ else ++ if (!user_mount) + { + mount_fstab_as_root = TRUE; ++ + action_id = "org.freedesktop.udisks2.filesystem-mount"; +- /* Translators: Shown in authentication dialog when the user +- * requests mounting a filesystem. +- * +- * Do not translate $(drive), it's a placeholder and +- * will be replaced by the name of the drive/device in question +- */ +- message = N_("Authentication is required to mount $(drive)"); +- if (caller_uid != effective_uid) +- { +- action_id = "org.freedesktop.udisks2.filesystem-mount-other-user"; +- } +- else if (!udisks_daemon_util_setup_by_user (daemon, object, caller_uid)) ++ if (!udisks_daemon_util_setup_by_user (daemon, object, caller_uid)) + { + if (udisks_block_get_hint_system (block)) + { +@@ -952,7 +982,17 @@ handle_mount_fstab (UDisksDaemon *daemon, + action_id = "org.freedesktop.udisks2.filesystem-mount-other-seat"; + } + } ++ } + ++ if (action_id) ++ { ++ /* Translators: Shown in authentication dialog when the user ++ * requests mounting a filesystem. ++ * ++ * Do not translate $(drive), it's a placeholder and ++ * will be replaced by the name of the drive/device in question ++ */ ++ message = N_("Authentication is required to mount $(drive)"); + if (!udisks_daemon_util_check_authorization_sync (daemon, + object, + action_id, +@@ -962,7 +1002,6 @@ handle_mount_fstab (UDisksDaemon *daemon, + return FALSE; + } + +- + if (!g_file_test (mount_point_to_use, G_FILE_TEST_IS_DIR)) + { + if (g_mkdir_with_parents (mount_point_to_use, 0755) != 0) +@@ -1011,7 +1050,7 @@ handle_mount_fstab (UDisksDaemon *daemon, + + if (!success) + { +- if (!mount_fstab_as_root && g_error_matches (error, BD_FS_ERROR, BD_FS_ERROR_AUTH)) ++ if (!mount_fstab_as_root && g_error_matches (error, BD_FS_ERROR, BD_FS_ERROR_AUTH) && x_udisks_auth) + { + g_clear_error (&error); + action_id = "org.freedesktop.udisks2.filesystem-fstab"; diff --git a/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-3.patch b/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-3.patch new file mode 100644 index 0000000000..245e46ac00 --- /dev/null +++ b/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-3.patch @@ -0,0 +1,53 @@ +From 68a82f2afb3a5ca0da207cdd5bbd55e777940e12 Mon Sep 17 00:00:00 2001 +From: Tomas Bzatek +Date: Sun, 3 May 2026 14:00:01 +0200 +Subject: [PATCH] udiskslinuxfilesystem: Log real caller uid for as-user mounts + +When a mount is performed with the as-user option targeting a different +user, log both the effective (target) uid and the real caller uid to +provide an audit trail of who authorized the operation. + +Co-Authored-By: Claude Opus 4.6 +(cherry picked from commit 98e5a76c155640d155280cdb642791f00def736a) +(cherry picked from commit 132ebab4a196f7fbd01fa28283627b2227eb399b) + +CVE: CVE-2026-7867 +Upstream-Status: Backport [https://github.com/storaged-project/udisks/commit/132ebab4a196f7fbd01fa28283627b2227eb399b] +Signed-off-by: Ankur Tyagi +--- + src/udiskslinuxfilesystem.c | 22 +++++++++++++++++----- + 1 file changed, 17 insertions(+), 5 deletions(-) + +diff --git a/src/udiskslinuxfilesystem.c b/src/udiskslinuxfilesystem.c +index eb2a3f21..5e2508cc 100644 +--- a/src/udiskslinuxfilesystem.c ++++ b/src/udiskslinuxfilesystem.c +@@ -1443,11 +1443,23 @@ handle_mount (UDisksFilesystem *filesystem, + system_managed, + system_managed ? FALSE : mpoint_persistent); + +- udisks_notice ("Mounted %s%s at %s on behalf of uid %u", +- device, +- system_managed ? " (system)" : "", +- mount_point_to_use, +- effective_uid); ++ if (effective_uid != caller_uid) ++ { ++ udisks_notice ("Mounted %s%s at %s on behalf of uid %u (requested by uid %u)", ++ device, ++ system_managed ? " (system)" : "", ++ mount_point_to_use, ++ effective_uid, ++ caller_uid); ++ } ++ else ++ { ++ udisks_notice ("Mounted %s%s at %s on behalf of uid %u", ++ device, ++ system_managed ? " (system)" : "", ++ mount_point_to_use, ++ effective_uid); ++ } + + udisks_linux_block_object_trigger_uevent_sync (UDISKS_LINUX_BLOCK_OBJECT (object), + UDISKS_DEFAULT_WAIT_TIMEOUT); diff --git a/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-4.patch b/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-4.patch new file mode 100644 index 0000000000..726f3271dc --- /dev/null +++ b/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-4.patch @@ -0,0 +1,40 @@ +From a17202ed591f07109ce978e5abb999c67de9b3f1 Mon Sep 17 00:00:00 2001 +From: Tomas Bzatek +Date: Tue, 28 Apr 2026 19:10:38 +0200 +Subject: [PATCH] udisksdaemonutil: Pass as-user target to polkit details + +When the 'as-user' D-Bus method option is present, propagate the +target username to polkit details as 'mount.as-user'. This allows +polkit rules to make fine-grained authorization decisions based on +who the mount is being performed for. + +Co-Authored-By: Claude Opus 4.6 +(cherry picked from commit 681d58a76f6aaa5045eb43e665c65f497d35b810) +(cherry picked from commit 3b016cc881b1d3c3d843ec13e35102beaaac7023) + +CVE: CVE-2026-7867 +Upstream-Status: Backport [https://github.com/storaged-project/udisks/commit/3b016cc881b1d3c3d843ec13e35102beaaac7023] +Signed-off-by: Ankur Tyagi +--- + src/udisksdaemonutil.c | 8 ++++++++ + 1 file changed, 8 insertions(+) + +diff --git a/src/udisksdaemonutil.c b/src/udisksdaemonutil.c +index 3db92f58..36e3184b 100644 +--- a/src/udisksdaemonutil.c ++++ b/src/udisksdaemonutil.c +@@ -797,6 +797,14 @@ udisks_daemon_util_check_authorization_sync_with_error (UDisksDaemon * + polkit_details_insert (details, "polkit.message", message); + polkit_details_insert (details, "polkit.gettext_domain", "udisks2"); + ++ if (options != NULL && ++ g_strcmp0 (action_id, "org.freedesktop.udisks2.filesystem-mount-other-user") == 0) ++ { ++ const gchar *as_user = NULL; ++ g_variant_lookup (options, "as-user", "&s", &as_user); ++ _safe_polkit_details_insert (details, "mount.as-user", as_user); ++ } ++ + /* Find drive associated with the block device, if any */ + if (object != NULL) + { diff --git a/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-5.patch b/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-5.patch new file mode 100644 index 0000000000..6901e71d37 --- /dev/null +++ b/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-5.patch @@ -0,0 +1,348 @@ +From 7e77f3cb5c6658f5522d8d56e882e8df02978d76 Mon Sep 17 00:00:00 2001 +From: Tomas Bzatek +Date: Wed, 29 Apr 2026 16:36:45 +0200 +Subject: [PATCH] tests: Add security tests for as-user mount authorization + +Add tests verifying that an unprivileged D-Bus caller cannot exploit +the 'as-user' option in Filesystem.Mount() to mount on behalf of +another user without polkit authorization. Use a dedicated +'udisks_test_target' user instead of 'nobody' to avoid OS-level +special treatment of system users that could mask real behavior. + +Dynamic mount tests (in UdisksFSTestCase, inherited by all FS types): +- test_mount_as_user_denied: as-user= is denied +- test_mount_as_user_root_denied: as-user=root is denied +- test_mount_as_user_self: as-user= behaves like plain mount + +Fstab mount tests (in NonPOSIXTestCase, inherited by VFAT/EXFAT): +- test_mount_fstab_{users,user,x-udisks-auth}_as_user_denied: + fstab entries that normally allow unprivileged mounting must still + require authorization when as-user is specified +- test_mount_fstab_{users,user,x-udisks-auth}_as_root_denied: + same but with as-user=root +- test_mount_fstab_defaults_as_user_from_root: root can mount + fstab 'defaults' device with as-user targeting a non-root user +- test_mount_fstab_defaults_as_user_denied: unprivileged user + cannot mount fstab 'defaults' device with as-user + +Co-Authored-By: Claude Opus 4.6 +(cherry picked from commit 5ec20c9d5719ead510d800bc3eb5a731e5712f39) +(cherry picked from commit 36231768dde088c8b4d4796ff2d311d089d84052) + +CVE: CVE-2026-7867 +Upstream-Status: Backport [https://github.com/storaged-project/udisks/commit/36231768dde088c8b4d4796ff2d311d089d84052] +Signed-off-by: Ankur Tyagi +--- + src/tests/dbus-tests/test_80_filesystem.py | 278 +++++++++++++++++++++ + 1 file changed, 278 insertions(+) + +diff --git a/src/tests/dbus-tests/test_80_filesystem.py b/src/tests/dbus-tests/test_80_filesystem.py +index 1f375ac6..03336512 100644 +--- a/src/tests/dbus-tests/test_80_filesystem.py ++++ b/src/tests/dbus-tests/test_80_filesystem.py +@@ -30,6 +30,8 @@ class UdisksFSTestCase(udiskstestcase.UdisksTestCase): + _can_query_size = False + + username = 'udisks_test_user' ++ # a separate target user used for 'as-user' mount tests ++ target_username = 'udisks_test_target' + + requested_plugins = BlockDev.plugin_specs_from_names(("fs",)) + +@@ -1037,6 +1039,174 @@ class UdisksFSTestCase(udiskstestcase.UdisksTestCase): + pipe.send([True, '']) + pipe.close() + ++ def _mount_with_as_user_fail(self, pipe, uid, gid, device, target_user): ++ """ Try to mount @device as user with given @uid and @gid using the ++ 'as-user' option set to @target_user. This is expected to fail ++ with a NotAuthorized error. ++ """ ++ os.setresgid(gid, gid, gid) ++ os.setresuid(uid, uid, uid) ++ ++ try: ++ safe_dbus.call_sync(self.iface_prefix, ++ self.path_prefix + '/block_devices/' + os.path.basename(device), ++ self.iface_prefix + '.Filesystem', ++ 'Mount', ++ GLib.Variant('(a{sv})', ({'as-user': GLib.Variant('s', target_user)},))) ++ except Exception as e: ++ msg = str(e) ++ if 'org.freedesktop.UDisks2.Error.NotAuthorized' in msg and \ ++ 'Not authorized to perform operation' in msg: ++ pipe.send([True, '']) ++ pipe.close() ++ return ++ else: ++ pipe.send([False, 'Mount DBus call failed with unexpected exception: %s' % msg]) ++ pipe.close() ++ return ++ ++ pipe.send([False, 'Mount with as-user=%s unexpectedly succeeded for uid %d' % (target_user, uid)]) ++ pipe.close() ++ ++ def _test_mount_as_user_denied(self, target_user): ++ """ Test that an unprivileged user cannot use as-user to mount on ++ behalf of @target_user without polkit authorization. ++ """ ++ self._check_can_create() ++ ++ if not self._can_mount: ++ self.skipTest('Cannot mount %s filesystem' % self._fs_signature) ++ ++ disk = self.get_object('/block_devices/' + os.path.basename(self.vdevs[0])) ++ self.assertIsNotNone(disk) ++ ++ disk.Format(self._fs_signature, self.no_options, dbus_interface=self.iface_prefix + '.Block') ++ self.addCleanup(self.wipe_fs, self.vdevs[0]) ++ self.addCleanup(self.try_unmount, self.vdevs[0]) ++ ++ self.addCleanup(self._remove_user, self.username) ++ uid, gid = self._add_user(self.username) ++ ++ if target_user != 'root': ++ self.addCleanup(self._remove_user, target_user) ++ self._add_user(target_user) ++ ++ parent_conn, child_conn = Pipe() ++ proc = Process(target=self._mount_with_as_user_fail, ++ args=(child_conn, int(uid), int(gid), self.vdevs[0], target_user)) ++ proc.start() ++ res = parent_conn.recv() ++ parent_conn.close() ++ proc.join() ++ ++ if not res[0]: ++ self.fail(res[1]) ++ ++ @udiskstestcase.tag_test(udiskstestcase.TestTags.UNSAFE) ++ def test_mount_as_user_denied(self): ++ """ Test that an unprivileged user cannot use as-user to mount on ++ behalf of another user without authorization. ++ """ ++ self._test_mount_as_user_denied(self.target_username) ++ ++ @udiskstestcase.tag_test(udiskstestcase.TestTags.UNSAFE) ++ def test_mount_as_user_root_denied(self): ++ """ Test that an unprivileged user cannot use as-user=root to mount ++ without authorization. ++ """ ++ self._test_mount_as_user_denied('root') ++ ++ def _mount_as_user_result(self, pipe, uid, gid, device, options): ++ """ Try to mount @device as user with given @uid and @gid using ++ the given @options dict. Returns [True, error_string] on D-Bus ++ error or [True, ''] on success. ++ """ ++ os.setresgid(gid, gid, gid) ++ os.setresuid(uid, uid, uid) ++ ++ try: ++ safe_dbus.call_sync(self.iface_prefix, ++ self.path_prefix + '/block_devices/' + os.path.basename(device), ++ self.iface_prefix + '.Filesystem', ++ 'Mount', ++ GLib.Variant('(a{sv})', (options,))) ++ except Exception as e: ++ pipe.send([True, str(e)]) ++ pipe.close() ++ return ++ ++ pipe.send([True, '']) ++ pipe.close() ++ ++ @udiskstestcase.tag_test(udiskstestcase.TestTags.UNSAFE) ++ def test_mount_as_user_self(self): ++ """ Test that as-user targeting the caller's own username behaves ++ identically to mounting without as-user (no extra mount-other-user ++ authorization required). ++ """ ++ self._check_can_create() ++ ++ if not self._can_mount: ++ self.skipTest('Cannot mount %s filesystem' % self._fs_signature) ++ ++ disk = self.get_object('/block_devices/' + os.path.basename(self.vdevs[0])) ++ self.assertIsNotNone(disk) ++ ++ disk.Format(self._fs_signature, self.no_options, dbus_interface=self.iface_prefix + '.Block') ++ self.addCleanup(self.wipe_fs, self.vdevs[0]) ++ self.addCleanup(self.try_unmount, self.vdevs[0]) ++ ++ self.addCleanup(self._remove_user, self.username) ++ uid, gid = self._add_user(self.username) ++ ++ # first try a plain mount without as-user ++ parent_conn, child_conn = Pipe() ++ proc = Process(target=self._mount_as_user_result, ++ args=(child_conn, int(uid), int(gid), self.vdevs[0], {})) ++ proc.start() ++ res_plain = parent_conn.recv() ++ parent_conn.close() ++ proc.join() ++ ++ self.assertTrue(res_plain[0]) ++ plain_error = res_plain[1] ++ ++ # unmount if the plain mount succeeded ++ if not plain_error: ++ self.try_unmount(self.vdevs[0]) ++ ++ # now try with as-user= ++ parent_conn, child_conn = Pipe() ++ proc = Process(target=self._mount_as_user_result, ++ args=(child_conn, int(uid), int(gid), self.vdevs[0], ++ {'as-user': GLib.Variant('s', self.username)})) ++ proc.start() ++ res_as_user = parent_conn.recv() ++ parent_conn.close() ++ proc.join() ++ ++ self.assertTrue(res_as_user[0]) ++ as_user_error = res_as_user[1] ++ ++ if not plain_error and not as_user_error: ++ return ++ if plain_error and as_user_error: ++ # extract the GDBus error name (e.g. 'org.freedesktop.UDisks2.Error.NotAuthorizedCanObtain') ++ dbus_err_re = re.compile(r'GDBus\.Error:([\w.]+):') ++ plain_match = dbus_err_re.search(plain_error) ++ as_user_match = dbus_err_re.search(as_user_error) ++ plain_err_name = plain_match.group(1) if plain_match else plain_error ++ as_user_err_name = as_user_match.group(1) if as_user_match else as_user_error ++ self.assertEqual(plain_err_name, as_user_err_name, ++ 'as-user= produced a different error than plain mount: ' ++ 'plain=%s, as-user=%s' % (plain_error, as_user_error)) ++ return ++ ++ if plain_error: ++ self.fail('Plain mount failed (%s) but as-user= succeeded' % plain_error) ++ else: ++ self.fail('Plain mount succeeded but as-user= failed: %s' % as_user_error) ++ + @udiskstestcase.tag_test(udiskstestcase.TestTags.UNSAFE) + def test_mount_as_user(self): + """ Test mounting a filesystem on behalf of a different user.""" +@@ -1550,6 +1720,108 @@ class NonPOSIXTestCase(UdisksFSTestCase): + self.fail(res[1]) + + ++ def _test_mount_fstab_as_user_denied(self, fstab_options, target_user): ++ """ Test that an unprivileged user cannot use 'as-user' option to mount ++ a device listed in /etc/fstab with @fstab_options on behalf of ++ @target_user without polkit authorization. ++ """ ++ disk = self.get_object('/block_devices/' + os.path.basename(self.vdevs[0])) ++ self.assertIsNotNone(disk) ++ ++ self.addCleanup(self._remove_user, self.username) ++ uid, gid = self._add_user(self.username) ++ ++ if target_user != 'root': ++ self.addCleanup(self._remove_user, target_user) ++ self._add_user(target_user) ++ ++ self.addCleanup(self.try_unmount, self.vdevs[0]) ++ self._prepare_mount_test(disk, True, fstab_options) ++ ++ parent_conn, child_conn = Pipe() ++ proc = Process(target=self._mount_with_as_user_fail, ++ args=(child_conn, int(uid), int(gid), self.vdevs[0], target_user)) ++ proc.start() ++ res = parent_conn.recv() ++ parent_conn.close() ++ proc.join() ++ ++ if not res[0]: ++ self.fail(res[1]) ++ ++ @udiskstestcase.tag_test(udiskstestcase.TestTags.UNSAFE) ++ def test_mount_fstab_as_user_denied(self): ++ """ Test that user cannot use as-user to mount fstab 'users' device ++ on behalf of another user without authorization. ++ """ ++ self._test_mount_fstab_as_user_denied('users', self.target_username) ++ ++ @udiskstestcase.tag_test(udiskstestcase.TestTags.UNSAFE) ++ def test_mount_fstab_user_as_user_denied(self): ++ """ Test that user cannot use as-user to mount fstab 'user' device ++ on behalf of another user without authorization. ++ """ ++ self._test_mount_fstab_as_user_denied('user', self.target_username) ++ ++ @udiskstestcase.tag_test(udiskstestcase.TestTags.UNSAFE) ++ def test_mount_fstab_x_udisks_auth_as_user_denied(self): ++ """ Test that user cannot use as-user to mount fstab 'x-udisks-auth' ++ device on behalf of another user without authorization. ++ """ ++ self._test_mount_fstab_as_user_denied('x-udisks-auth', self.target_username) ++ ++ @udiskstestcase.tag_test(udiskstestcase.TestTags.UNSAFE) ++ def test_mount_fstab_as_root_denied(self): ++ """ Test that user cannot use as-user=root to mount fstab 'users' ++ device without authorization. ++ """ ++ self._test_mount_fstab_as_user_denied('users', 'root') ++ ++ @udiskstestcase.tag_test(udiskstestcase.TestTags.UNSAFE) ++ def test_mount_fstab_user_as_root_denied(self): ++ """ Test that user cannot use as-user=root to mount fstab 'user' ++ device without authorization. ++ """ ++ self._test_mount_fstab_as_user_denied('user', 'root') ++ ++ @udiskstestcase.tag_test(udiskstestcase.TestTags.UNSAFE) ++ def test_mount_fstab_x_udisks_auth_as_root_denied(self): ++ """ Test that user cannot use as-user=root to mount fstab ++ 'x-udisks-auth' device without authorization. ++ """ ++ self._test_mount_fstab_as_user_denied('x-udisks-auth', 'root') ++ ++ @udiskstestcase.tag_test(udiskstestcase.TestTags.UNSAFE) ++ def test_mount_fstab_defaults_as_user_from_root(self): ++ """ Test that root can mount a device listed in /etc/fstab with ++ 'defaults' (no 'user', 'users' or 'x-udisks-auth' options) ++ using the 'as-user' option targeting a non-root user. ++ """ ++ disk = self.get_object('/block_devices/' + os.path.basename(self.vdevs[0])) ++ self.assertIsNotNone(disk) ++ ++ self.addCleanup(self._remove_user, self.target_username) ++ self._add_user(self.target_username) ++ ++ self.addCleanup(self.try_unmount, self.vdevs[0]) ++ self._prepare_mount_test(disk, True, 'defaults') ++ ++ d = dbus.Dictionary(signature='sv') ++ d['as-user'] = self.target_username ++ mnt_path = disk.Mount(d, dbus_interface=self.iface_prefix + '.Filesystem') ++ self.assertIsNotNone(mnt_path) ++ self.assertTrue(os.path.ismount(mnt_path)) ++ ++ @udiskstestcase.tag_test(udiskstestcase.TestTags.UNSAFE) ++ def test_mount_fstab_defaults_as_user_denied(self): ++ """ Test that an unprivileged user cannot use 'as-user' option to ++ mount a device listed in /etc/fstab with 'defaults' (no 'user', ++ 'users' or 'x-udisks-auth') on behalf of another user without ++ polkit authorization. ++ """ ++ self._test_mount_fstab_as_user_denied('defaults', self.target_username) ++ ++ + class VFATTestCase(NonPOSIXTestCase): + _fs_signature = 'vfat' + _can_mount = True +@@ -1691,6 +1963,12 @@ class UDFTestCase(UdisksFSTestCase): + def test_mount_fstab_complex_label_bad(self): + super(UDFTestCase, self).test_mount_fstab_complex_label_bad() + ++ def test_mount_as_user_denied(self): ++ self.skipTest('Skipping as-user authorization test for UDF') ++ ++ def test_mount_as_user_root_denied(self): ++ self.skipTest('Skipping as-user authorization test for UDF') ++ + + class FailsystemTestCase(UdisksFSTestCase): + # test that not supported operations fail 'nicely' diff --git a/meta-oe/recipes-support/udisks/udisks2_2.10.2.bb b/meta-oe/recipes-support/udisks/udisks2_2.10.2.bb index d4c5385ae0..776b5c5043 100644 --- a/meta-oe/recipes-support/udisks/udisks2_2.10.2.bb +++ b/meta-oe/recipes-support/udisks/udisks2_2.10.2.bb @@ -18,8 +18,13 @@ DEPENDS += "${@bb.utils.filter('DISTRO_FEATURES', 'systemd', d)}" RDEPENDS:${PN} = "acl" SRC_URI = " \ - git://github.com/storaged-project/udisks.git;branch=2.10.x-branch;protocol=https \ - file://0001-Makefile.am-Dont-include-buildpath.patch \ + git://github.com/storaged-project/udisks.git;branch=2.10.x-branch;protocol=https \ + file://0001-Makefile.am-Dont-include-buildpath.patch \ + file://CVE-2026-7867-1.patch \ + file://CVE-2026-7867-2.patch \ + file://CVE-2026-7867-3.patch \ + file://CVE-2026-7867-4.patch \ + file://CVE-2026-7867-5.patch \ " SRCREV = "bc623acf9e7488dc105e4b00069d57e303e2616b" From patchwork Wed Oct 21 09:28:16 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101494 Received: from mail-dl1-f49.google.com (mail-dl1-f49.google.com [74.125.82.49]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.7531.1792574950966697119 for ; Wed, 21 Oct 2026 02:29:11 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=a7+eLper; spf=pass (domain: gmail.com, ip: 74.125.82.49, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-dl1-f49.google.com with SMTP id a92af1059eb24-14394530ec6so631788c88.1 for ; Wed, 21 Oct 2026 02:29:10 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792574950; x=1793179750; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=SFKa95pacYmxD4fyvvH7JpYlJS5wAUEwj2Ix4xN8Gm0=; b=a7+eLperP54YviFkUaTAKIHWURbcRuHLKPu2HQvucp7mNJ2EJrl5iI9P2k3CxjAfoe HlT/Ac54OP03kRnbmg6PKJGWq26hF1Tlk9vLjwZkR/ZhUm0+pcA8BQvBH74l+YNEn/RB 7YgWCW2I/SbqWrzTqW1B1Iykzcd/whaiNkK979SFhL5Li8a+HY0ioOC4GzsnkAUK7Bo3 KY+nHsZvAF7YhtPA9NTW4Q+CVoE4TLuRiKNE55AaNe9UsDSszSZIdJid7/bcW+Ji0W3B AYbCKHnwlkMwFti5wPUmxKo+a+yix98j0jr2ZXTmKeepvOAxz4j5mrJriG2nxBQQLEnN YpIA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792574950; x=1793179750; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=SFKa95pacYmxD4fyvvH7JpYlJS5wAUEwj2Ix4xN8Gm0=; b=o2fu1KBC2rv6M6KZtVDgjRqOpE+wOv2aKh/1FjSPBjkurxmvPEDVdEzDoZbgPAaE61 Uhwe0ELKPEMrGCud+aDsNtDtWXer8V2ImmI1e8QAbJVSH+kHwOGpFq4OhKolUcOLgCmd 2xxoWnsrxgR77ERrL/BpT58oGGEFUgDLRH9S8OXn1fGpA14Ocsv47YyyPqfHr9Lu+KV5 DDxyVOcRnUwmyA88bTKS0A1IFGJXcPBsnX9YcTO7KIQNEgugjCXe6SwP3slVScfBhuSG WGBwzhtlVJ8yuDPQzKn4ceH+0DKWIo/1qb+CnO26Nbmj32TpKmPuBCdY7g6d7rVUkKav JJnQ== X-Gm-Message-State: AFq9FYJjCaXLp+ahIE2r9i+zv5QtyZIyCzXzf9n01AIZp9ZIQwvtsomX FexDxfGIPY2NaJcie81VukdL6zYJikt3Sfhe0Z+5LI9Oc2Rk8RdZ3gWuymQ55g== X-Gm-Gg: AYBFou26hpt6gz4y2ISa1ISofvMXcyx0dU/I3d4CMfLD0YUa12vfFj4/K3pLMeOSIoC XAIoOJ2sV1VoJa58ZYmWFfY/y7OddYt/Gktyji2R+9E3HA7MUJKaYRuXBkFEIJw08LBZJbS1ncx VPECfJWt2LBa2VvgP+1FiWjcUfJ+6uCQAKsZKOUn0rWWAc30PaG4ytaNZ3Ap5OzU10nQrPPq2oK 5MUQrQqWtWBEcSVbAGcgHIm452mOPr2bX76TV5LRZT6pww/bjlpnG6end1DM1+MIRGbrZg5dows V+PdySpfxQunlaclUysG4Ostu0h9TS2Yx10oQuqYqGMu4C6QxomJeLmlsOh+yEXTXuTh6Fxpkg8 5Py8vbvsvGREEz8AsFjsvo4ENjTsaVp3wEdCg4aYtjJUgYDACMUGZmiuC4onmeNS4W0zftUb+jX XN3LCJ+xCnBz8enC7jARFYm22TJrIM5vrX9bbmmamUJMY6JvqHbUE5TRXIZTKu3aNAyZC/p8Uel az1PaDKiziCJxjW/utChxlHc+RYCv6e5N8IDI3I4dEYaBLYu2DAnPMldRIEmvZ/MdnZF1rc8Y6M OCxspbZ6IV7mXMYFdxcZEMhqi9k7AvImVg== X-Received: by 2002:a05:701b:291b:b0:160:6a5b:7edf with SMTP id a92af1059eb24-190a728a5a9mr1624743c88.44.1792574950166; Wed, 21 Oct 2026 02:29:10 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id a92af1059eb24-19035c0c9a6sm4716458c88.3.2026.10.21.02.29.08 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 21 Oct 2026 02:29:09 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-oe][blacksail][PATCH 3/44] tmate: patch CVE-2026-4751 Date: Wed, 21 Oct 2026 22:28:16 +1300 Message-ID: <20261021092857.3585453-3-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> References: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 21 Oct 2026 09:29:21 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131190 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-4751 Signed-off-by: Ankur Tyagi --- .../tmate/files/CVE-2026-4751.patch | 75 +++++++++++++++++++ meta-oe/recipes-extended/tmate/tmate_2.4.0.bb | 1 + 2 files changed, 76 insertions(+) create mode 100644 meta-oe/recipes-extended/tmate/files/CVE-2026-4751.patch diff --git a/meta-oe/recipes-extended/tmate/files/CVE-2026-4751.patch b/meta-oe/recipes-extended/tmate/files/CVE-2026-4751.patch new file mode 100644 index 0000000000..faf3d2a3ae --- /dev/null +++ b/meta-oe/recipes-extended/tmate/files/CVE-2026-4751.patch @@ -0,0 +1,75 @@ +From 27f07d414949259f17aebc02a61f103629d547f1 Mon Sep 17 00:00:00 2001 +From: npt-1707 +Date: Tue, 10 Mar 2026 00:19:33 +0800 +Subject: [PATCH] Fix CVE-2018-19387 + +(cherry picked from commit 3e12f558c7b71b7135403cdd2df77d38538a695c) + +CVE: CVE-2026-4751 +Upstream-Status: Backport [https://github.com/tmate-io/tmate/commit/3e12f558c7b71b7135403cdd2df77d38538a695c] +Signed-off-by: Ankur Tyagi +--- + format.c | 2 ++ + input.c | 2 ++ + server-client.c | 6 ++++++ + window.c | 2 ++ + 4 files changed, 12 insertions(+) + +diff --git a/format.c b/format.c +index f771c85f..3bbb8cf1 100644 +--- a/format.c ++++ b/format.c +@@ -468,6 +468,8 @@ format_cb_pane_tabs(struct format_tree *ft, struct format_entry *fe) + return; + + buffer = evbuffer_new(); ++ if (buffer == NULL) ++ fatalx("out of memory"); + for (i = 0; i < wp->base.grid->sx; i++) { + if (!bit_test(wp->base.tabs, i)) + continue; +diff --git a/input.c b/input.c +index 18c8eb9a..8a66d89e 100644 +--- a/input.c ++++ b/input.c +@@ -766,6 +766,8 @@ input_init(struct window_pane *wp) + ictx->input_buf = xmalloc(INPUT_BUF_START); + + ictx->since_ground = evbuffer_new(); ++ if (ictx->since_ground == NULL) ++ fatalx("out of memory"); + + input_reset(wp, 0); + } +diff --git a/server-client.c b/server-client.c +index 21cccc85..e8614d40 100644 +--- a/server-client.c ++++ b/server-client.c +@@ -121,8 +121,14 @@ server_client_create(int fd) + c->cmdq->client_exit = 1; + + c->stdin_data = evbuffer_new(); ++ if (c->stdin_data == NULL) ++ fatalx("out of memory"); + c->stdout_data = evbuffer_new(); ++ if (c->stdout_data == NULL) ++ fatalx("out of memory"); + c->stderr_data = evbuffer_new(); ++ if (c->stderr_data == NULL) ++ fatalx("out of memory"); + + c->tty.fd = -1; + c->title = NULL; +diff --git a/window.c b/window.c +index 45ec7790..9d95bb77 100644 +--- a/window.c ++++ b/window.c +@@ -945,6 +945,8 @@ window_pane_spawn(struct window_pane *wp, int argc, char **argv, + + wp->event = bufferevent_new(wp->fd, window_pane_read_callback, NULL, + window_pane_error_callback, wp); ++ if (wp->event == NULL) ++ fatalx("out of memory"); + + bufferevent_setwatermark(wp->event, EV_READ, 0, READ_SIZE); + bufferevent_enable(wp->event, EV_READ|EV_WRITE); diff --git a/meta-oe/recipes-extended/tmate/tmate_2.4.0.bb b/meta-oe/recipes-extended/tmate/tmate_2.4.0.bb index 5fb28b0085..9027826ea6 100644 --- a/meta-oe/recipes-extended/tmate/tmate_2.4.0.bb +++ b/meta-oe/recipes-extended/tmate/tmate_2.4.0.bb @@ -8,6 +8,7 @@ DEPENDS:append = " libevent libssh msgpack-c ncurses" SRC_URI = "\ git://github.com/tmate-io/tmate.git;protocol=https;branch=master \ file://0001-fix-finding-msgpack.patch \ + file://CVE-2026-4751.patch \ " SRCREV = "5e00bfa5e137e76c81888727712ced2b3fd99f5b" From patchwork Wed Oct 21 09:28:17 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101495 Received: from mail-dl1-f43.google.com (mail-dl1-f43.google.com [74.125.82.43]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.7533.1792574953295444025 for ; Wed, 21 Oct 2026 02:29:13 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=IOWakGsX; spf=pass (domain: gmail.com, ip: 74.125.82.43, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-dl1-f43.google.com with SMTP id a92af1059eb24-16079d54c17so995637c88.0 for ; Wed, 21 Oct 2026 02:29:13 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792574953; x=1793179753; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=OlkOVDlMpahwpojKxINx/myU6vsCVLw5aqsNGwAyzhA=; b=IOWakGsXu1UjS0w4ZAqgrhHnvlkq3qI0RFSRkPmLD6OSJ5qLVAagCsB8cKdavJQ14M F3dcOTWxhv7PsInD/+1N0BrIM+mgaSdZBj0Tmyu0busrIe47YnAgLXJb7zSxPQtvkila BSmE2o3GKn4zWh/lYD6QUOY3PZaN6so1iQP7TQA5L6evvvQ2L46iz8D6jYOOD81XlOw+ wWgpYfbf90bD0DpjvoXExBoRIYXYyczBmnfUFBN7deKrR/BKE+QSzfji3zB6OHiAC2Ks stEgWlupmKssA0TEnsHYb2Cb2wuqfjlxcvyUnfvilxIoi+8FLfIXwIxoOYEWKgRQHrDd bBXg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792574953; x=1793179753; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=OlkOVDlMpahwpojKxINx/myU6vsCVLw5aqsNGwAyzhA=; b=Rm5CSF6Q/hQJRFrpg8pfKByJJLTtoCxc8A56nQ5klMC6+KTKcnwtcCM72N59nM14EL 6Z28oI2i9ltbr3XjBXySoWSxd2+uTj590d7fvaVwky6kwfGEveXXoAYjcihDBnBHEoIF vZO53ZqSCkC5OJgezpxkyevpKI60fbBHXpMYj+cXOEHFwG0AYzpeeXBh7Izd/GYrZA/d j/Wct+MTJkTkaCG4PvwVIgAYj91sbXxGnIgLhFY23cnDlfGlM1SUYvR/S1enXV3QS0cC Xk2ge91fGvkqNG9NvMkFDeH5R3cN5/lrfv3/48AO4stpG+dng3kTg4Rb9oz9iHHbGxnY fNfw== X-Gm-Message-State: AFq9FYIJPcB3l2EB5xbE3n11Xxe4rtov/IJTqfR6+tDUFCqMdnc0jcg4 yTxun0Zl32fZwVl1WoynENH3nKfbYjUCwy0xS7d/+jmBEETr30FPu8hp9C75ew== X-Gm-Gg: AYBFou3BLoBG8Y0HnmdyDb32m+SAhPtjUTe7mpMTKvHg4ys8iBh4D/YzjNMNCdjaiyQ 0KIvGjwxMPvyv6U/v1kp/v5SIkbzBwxipIwNzMo/bA+Spd6o1/cNuL+lYiBRcTe7Hz/GfRyPxTy rVe4GikJC04cbvIxjGUXzmMBtP9pFrWuKQu7cdTtwlQWPNG1CQSpp3803mADNA71zY6Vo1o68UF T2nTFDHwrHC1eKuzepKpyuNaDKbsyS5vQ/tX+VR2wN3hE9c8fKzYmRdsmKGvoxLMhhNlsyiI1xq z1DXfe1Fzs5a/S+3lK5dtO3u1F8iwnsc4DAIdpA/m/gFx+//ejGIKGjHHOOf7/v+3O5iqSFyM/l H0fDgA2rt2PvvkjNkD2ilsnLkJjBjy4r/o6U3Um2OSdYG6ILndO3691pA0zvF3e+iRHP/85IL7B 3zoA7ZsmFIsKalBSX2heCrMAgK8x0YW/xWDDq4cIGYGKFEc73LUa6xpgGt2MbMhKrnyohh51Tqq PnnLXOq6bhjh27a3RMcZJWcDWkzF6mWAdBFpJYMk+q7CX4lUrcUz928eRf32q22rZqCCkwUhiBF wtPjUKobUCwgflfTqdwCuIYRm6zu/l0= X-Received: by 2002:a05:7022:3f09:b0:14c:6eab:3f65 with SMTP id a92af1059eb24-190a6add120mr2522731c88.31.1792574952564; Wed, 21 Oct 2026 02:29:12 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id a92af1059eb24-19035c0c9a6sm4716458c88.3.2026.10.21.02.29.10 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 21 Oct 2026 02:29:12 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-networking][blacksail][PATCH 4/44] tinyproxy: patch CVE-2026-54388 Date: Wed, 21 Oct 2026 22:28:17 +1300 Message-ID: <20261021092857.3585453-4-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> References: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 21 Oct 2026 09:29:21 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131191 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-54388 Signed-off-by: Ankur Tyagi --- .../tinyproxy/tinyproxy/CVE-2026-54388.patch | 32 +++++++++++++++++++ .../tinyproxy/tinyproxy_1.11.3.bb | 1 + 2 files changed, 33 insertions(+) create mode 100644 meta-networking/recipes-support/tinyproxy/tinyproxy/CVE-2026-54388.patch diff --git a/meta-networking/recipes-support/tinyproxy/tinyproxy/CVE-2026-54388.patch b/meta-networking/recipes-support/tinyproxy/tinyproxy/CVE-2026-54388.patch new file mode 100644 index 0000000000..4dc7f88310 --- /dev/null +++ b/meta-networking/recipes-support/tinyproxy/tinyproxy/CVE-2026-54388.patch @@ -0,0 +1,32 @@ +From 2639058707dd9d199196b167823ba1865a60ea08 Mon Sep 17 00:00:00 2001 +From: rofl0r +Date: Thu, 7 May 2026 16:39:48 +0000 +Subject: [PATCH] reqs: prevent multiple content-lengths getting emitted + +addressing point 2 of #609 + +(cherry picked from commit 364cdb67e0ea00a8e4a7037e2693e0711e816adb) + +CVE: CVE-2026-54388 +Upstream-Status: Backport [https://github.com/tinyproxy/tinyproxy/commit/364cdb67e0ea00a8e4a7037e2693e0711e816adb] +Signed-off-by: Ankur Tyagi +--- + src/reqs.c | 5 +++++ + 1 file changed, 5 insertions(+) + +diff --git a/src/reqs.c b/src/reqs.c +index d5037cf..117d755 100644 +--- a/src/reqs.c ++++ b/src/reqs.c +@@ -681,6 +681,11 @@ add_header_to_connection (pseudomap *hashofheaders, char *header, size_t len) + /* Calculate the new length of just the data */ + len -= sep - header - 1; + ++ /* prevent multiple content-length headers from being inserted */ ++ if (!strcasecmp(header, "content-length") && ++ pseudomap_find (hashofheaders, "content-length")) ++ return 0; ++ + return pseudomap_append (hashofheaders, header, sep); + } + diff --git a/meta-networking/recipes-support/tinyproxy/tinyproxy_1.11.3.bb b/meta-networking/recipes-support/tinyproxy/tinyproxy_1.11.3.bb index 25df44301b..46d3a4d7c6 100644 --- a/meta-networking/recipes-support/tinyproxy/tinyproxy_1.11.3.bb +++ b/meta-networking/recipes-support/tinyproxy/tinyproxy_1.11.3.bb @@ -12,6 +12,7 @@ SRC_URI = "https://github.com/${BPN}/${BPN}/releases/download/${PV}/${BP}.tar.gz file://CVE-2026-31842.patch \ file://CVE-2026-54387.patch \ file://CVE-2026-55202.patch \ + file://CVE-2026-54388.patch \ " SRC_URI[sha256sum] = "9bcf46db1a2375ff3e3d27a41982f1efec4706cce8899ff9f33323a8218f7592" From patchwork Wed Oct 21 09:28:18 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101496 Received: from mail-dl1-f54.google.com (mail-dl1-f54.google.com [74.125.82.54]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.7496.1792574955670573436 for ; Wed, 21 Oct 2026 02:29:15 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=Ail8afqt; spf=pass (domain: gmail.com, ip: 74.125.82.54, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-dl1-f54.google.com with SMTP id a92af1059eb24-156cbe59524so243792c88.1 for ; Wed, 21 Oct 2026 02:29:15 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792574955; x=1793179755; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=Gh83cfskHLvKV1uwY+k6XSG1tepLn+dpLgGtGNQHReE=; b=Ail8afqtNYMOmzXAnXG9JK1DrtatA6+vJDCh9WAXqvk+stah0hC6JuD/ShRgk6rkup iDy7oGz6PvsiLnsg9EmzMJpNYB5rqyfyCa7m8oLg1HBvMC06qq0ePAa7ThlNRjE5W3v7 7daChU3tckXtL96lGxRwdXEX6YLrzWbpQoQ0d3C4Yj2IqZ0W8ucqEmFQNWLZBahyax7K DwHbxmN/HP2oMbbwiIdaBuo/bmlI1GjzLY1tHQbE9I6fozamypPm2U6YvZ/g6/ScY2Dq UPSLln54/734mp+qtw+elEPLrcxKHiZ4KUA1NhL40+JRUG+wjeRMVdURA+mc3ok9Hc5Q kbuQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792574955; x=1793179755; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=Gh83cfskHLvKV1uwY+k6XSG1tepLn+dpLgGtGNQHReE=; b=yZBM/U9Awb3hys5M9cFiH0HQcJNfB77ReJCjdrqJof3lXe2HwZB8LqYCzSjaME1qBO oFCxi61f4TAkLlADpP8tkmTH/3s/VebKQ/U2Ms2AJDk8hefCmPAnIll/MoB3x4kkTo/E rOvjNn46ExEXrUwK8teM6gsSKnlNr8CJ8NYmFPT+9n7PLp/MhlV5TLQyBYhblCC2TpJu fLzjwJ/9kvwCh4iXFICbJkSsn/K4awnrlVeS/390PtI8n6W9pEGgZEiv5AEcuH27wrSg GRYmc69ed/7tNjZfbEr+4nkADM0E5xCl9C9Hc9QPHNidsNwiLKZ5MfhzOGu2cos+30AS Kcjg== X-Gm-Message-State: AFq9FYLJX7niEyDhZx+O8T8H6Wy/2IFpFaepzRs0DZpIXN6mptn0ZftV jsfNwuzbTBeQQpVt9unN5nc1y806V8DE9eBq9jGK7EelELf8YseaDtAOHIqqRg== X-Gm-Gg: AYBFou2iGGNb6vLEDUcyscaLKqrbK6rOjpSGsuSmXTLlyB1Crn+/nz6NmYg4+Y8CxbX muI4NOG8VSKMsRphw3gyn5v+j69GgGxUjt1THy90SJ6xHTFt10f/8Br253567Ft/1FIgmZJB1hs 5HD0k4fsL2qMgg58tnoO6bXXoYVcygz7TsJyrrso4MF/rCX3oj4ohxOdnQ6WHdMSJdmtmCGE/iW Bdgp7Ru1VDPjXGfBcx2eN+PsWNlVnLyDkY9jXbMA2A9N25124bTOFnaBt+EI/XFmMoKvoKliYQ/ EJRfT6SBThYa8sS2ZOhM99aaznj7oGCzRLaEqr/7c0g86wCQIxOGWhuFt8B7ly/GvzDbLNcPkF/ +mfXBZeNBHNW5gau4Zcq2kfxyKPR4RPDxiZH5agfezn16WT+F4uL0tRGGorp4U17NOXPh7OLsHB LFHyTSA2Lj9MQhhrtnpIrBbuuUzZCCutesoTXdplaoYSLKhjTnjmBlZtCZbCP6PIr/aVKnB8fXW AwcNf03YxrpNWrVvei214d3MMKSPiPP09X4AdYGJ30LcXupAqSs+D9u5/WwgBXZeFgQIggnkvEy uSzEGxOaimCTfh41iBt0NXbgyIbz7/g= X-Received: by 2002:a05:7022:220a:b0:158:b944:b20 with SMTP id a92af1059eb24-190a4a3524emr3125687c88.11.1792574955017; Wed, 21 Oct 2026 02:29:15 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id a92af1059eb24-19035c0c9a6sm4716458c88.3.2026.10.21.02.29.12 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 21 Oct 2026 02:29:14 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-oe][blacksail][PATCH 5/44] flatpak: upgrade 1.18.0 -> 1.18.4 Date: Wed, 21 Oct 2026 22:28:18 +1300 Message-ID: <20261021092857.3585453-5-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> References: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 21 Oct 2026 09:29:21 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131192 From: Ankur Tyagi Changelog: https://github.com/flatpak/flatpak/blob/1.18.4/NEWS Signed-off-by: Ankur Tyagi --- .../flatpak/{flatpak_1.18.0.bb => flatpak_1.18.4.bb} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) rename meta-oe/recipes-extended/flatpak/{flatpak_1.18.0.bb => flatpak_1.18.4.bb} (94%) diff --git a/meta-oe/recipes-extended/flatpak/flatpak_1.18.0.bb b/meta-oe/recipes-extended/flatpak/flatpak_1.18.4.bb similarity index 94% rename from meta-oe/recipes-extended/flatpak/flatpak_1.18.0.bb rename to meta-oe/recipes-extended/flatpak/flatpak_1.18.4.bb index 879455f63c..74bfb89e62 100644 --- a/meta-oe/recipes-extended/flatpak/flatpak_1.18.0.bb +++ b/meta-oe/recipes-extended/flatpak/flatpak_1.18.4.bb @@ -4,11 +4,11 @@ LICENSE = "LGPL-2.1-only" LIC_FILES_CHKSUM = "file://COPYING;md5=4fbd65380cdd255951079008b364516c" SRC_URI = " \ - git://github.com/flatpak/flatpak;protocol=https;branch=main;tag=${PV} \ + git://github.com/flatpak/flatpak;protocol=https;branch=flatpak-1.18.x;tag=${PV} \ file://0001-flatpak-pc-add-pc_sysrootdir.patch \ " -SRCREV = "5de2b58bdafde88515d9d6b9189bd1cfd3b88c46" +SRCREV = "a02d0ba48abe9aacc377de15699e5d8c024b5669" inherit meson pkgconfig gettext systemd gtk-doc gobject-introspection python3native mime features_check useradd From patchwork Wed Oct 21 09:28:19 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101497 Received: from mail-dl1-f44.google.com (mail-dl1-f44.google.com [74.125.82.44]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.7497.1792574958110309681 for ; Wed, 21 Oct 2026 02:29:18 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=KRcqPVgj; spf=pass (domain: gmail.com, ip: 74.125.82.44, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-dl1-f44.google.com with SMTP id a92af1059eb24-1517bda04a0so520948c88.0 for ; Wed, 21 Oct 2026 02:29:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792574957; x=1793179757; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=DLI0VP/Jt3BBslil/tHzmXSVaQanww03QlU4UwGU1P8=; b=KRcqPVgj2+aOPkM7+8aMobYxR5kawErTsU7gEpnir1HdyUXNUqUemplP4PVSsVDmOo MEHqnppGSe+IvaC6U+BIE+1A5gnSjlk8SPzEuJTiqsCOV5LVcTJ8fMg/KHE9e978YEXy ldOQT9ZgCDiIde1/hvuFP73wd8J2RtMRDWU6FceozVzxP0s0oO7EYY+6EwbneO0wSgF8 W2NuSVBTHRugsYjKG27Ieo4Ks09+0TDTeOvCDv8ZOJ497TS6T5J382VWYtk5JO0i6lHF TA6UmkVJYZEGGAsHIHILcPxccsF27xcd0vQ9hTm3zIuG0AQP9iv4BySnmPsSNKpRAkk3 R/Tw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792574957; x=1793179757; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=DLI0VP/Jt3BBslil/tHzmXSVaQanww03QlU4UwGU1P8=; b=lmKBu5oXrku5USB89eFjvsPMzH9w7Ga6M92SshD3e4ZuE/6NE8I5FNvPXDEHmvIYwS VrwBuLlvvr/HMFIoVTbHgxJVoaPTZWRfb+jsb4DeNaDgDpggsOYXXBBbTihmhZvvCxiK a/UiaVpsyFYIpHtKR76MldyOUXSrR0A4AMC708KnOPuDU8E1DDxndo4/oeTTJtuSinL0 MZtC2To/owbizBqYE51UcmnaISy5hOBsfLUGAitdEHBUkT7zTSS9DoY6Vuk8GYD64Zqb VQNAZbyn5rWu/JFW/TDDE3m/Q/wUHZbV3/K4QH65FS7VoGpydtVCz10Pm/AkeGxalWfS UiGQ== X-Gm-Message-State: AFq9FYJjOQgFRy7bMrj3iKvukNck6QRvw8bxzErRI7cj30wdRLItZRej rsiqUJxGwUsYnSbBlAOheicn/YieJWotIyPd0tol8T6r2rbAYKS/SZYVauIi2Q== X-Gm-Gg: AYBFou1F1FU5Eky2MkJJ1FcZpo5jbR9jx+FYIa0Pkb0VzAiS++cI34dRMN6KFruzw0U 0HyUqiNeUOgBOFwYKYQfsob8UXKpvO8RlrFRb5Bg2YsdfZkY3qQW4UJHQN4qboWcf1QBAvph2h4 zqpMSYyVLnFDCfNXWxX2uNO27yGPe8t+ctRUyCAsjxskHI0cIdB6cMwoAZAhOxejSEGe+fD8XU6 YycwLdHnCYInNmgJ1HQH7XMquvvFMgloIBTZcVq6rr2ir4pxCdjAK32GforYZH+uywRN1xnTIR5 G3OMujCwtg1wNwlP+K9LvUg6kl7Cs+cAdcNQLIGDFzRm/CwgEBXV23SO5sYuVih44U/6U1Oij0R PjXBL4klcibAi8pJLqBJsiYe34nZT3/0ity/34oTgesHic6EiltTfACGpET+V2vl640gAtbEore BgiK6CuKWnktV/4MsjA37FSo1zhCK6yOkmPJP4nID2iJ3GLmYN9r3wzMtXxN4MyBMgtjm07K/c9 CLawKa55XALUxonDkhIJfFl4TmX8GU12NmLNWT9vN0m7b+2S5OAYZCai9Qw1f7o1wccHgCHy5LW zBjs1iOSp9KnuW+Xnji0C6tlPMpYgA8= X-Received: by 2002:a05:701b:4254:10b0:144:ddf7:2570 with SMTP id a92af1059eb24-190a70a0808mr2056033c88.39.1792574957350; Wed, 21 Oct 2026 02:29:17 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id a92af1059eb24-19035c0c9a6sm4716458c88.3.2026.10.21.02.29.15 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 21 Oct 2026 02:29:16 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-oe][blacksail][PATCH 6/44] xdg-dbus-proxy: upgrade 0.1.7 -> 0.1.9 Date: Wed, 21 Oct 2026 22:28:19 +1300 Message-ID: <20261021092857.3585453-6-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> References: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 21 Oct 2026 09:29:21 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131193 From: Ankur Tyagi Changelog: https://github.com/flatpak/xdg-dbus-proxy/blob/0.1.9/NEWS Signed-off-by: Ankur Tyagi --- .../{xdg-dbus-proxy_0.1.7.bb => xdg-dbus-proxy_0.1.9.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-oe/recipes-support/xdg-dbus-proxy/{xdg-dbus-proxy_0.1.7.bb => xdg-dbus-proxy_0.1.9.bb} (93%) diff --git a/meta-oe/recipes-support/xdg-dbus-proxy/xdg-dbus-proxy_0.1.7.bb b/meta-oe/recipes-support/xdg-dbus-proxy/xdg-dbus-proxy_0.1.9.bb similarity index 93% rename from meta-oe/recipes-support/xdg-dbus-proxy/xdg-dbus-proxy_0.1.7.bb rename to meta-oe/recipes-support/xdg-dbus-proxy/xdg-dbus-proxy_0.1.9.bb index eb21f701d6..1a65874155 100644 --- a/meta-oe/recipes-support/xdg-dbus-proxy/xdg-dbus-proxy_0.1.7.bb +++ b/meta-oe/recipes-support/xdg-dbus-proxy/xdg-dbus-proxy_0.1.9.bb @@ -16,7 +16,7 @@ SRC_URI = " \ file://run-ptest \ " -SRCREV = "6a170fa77e3cbecb48f9dd2478fe5c0a119eb467" +SRCREV = "72b40c8f6d9d585cfbdb249690724f740d207087" CVE_STATUS[CVE-2026-34080] = "fixed-version: fixed in 0.1.7" From patchwork Wed Oct 21 09:28:20 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101498 Received: from mail-dy1-f174.google.com (mail-dy1-f174.google.com [74.125.82.174]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.7498.1792574960514205059 for ; Wed, 21 Oct 2026 02:29:20 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=fw6djZ8Y; spf=pass (domain: gmail.com, ip: 74.125.82.174, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-dy1-f174.google.com with SMTP id 5a478bee46e88-3535bf8b3e0so997080eec.0 for ; Wed, 21 Oct 2026 02:29:20 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792574960; x=1793179760; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=VTjVlb+otFRnQCorDsRBLqqwQiAElB9jBQmGoR879kA=; b=fw6djZ8YxJy4jTdYNOA5wVdFKjgrMiZX4XzAZW8abjSiD1grZvvet3tynPLf/RMaFx Mie7zjCJPpbYFNH9YjXLc9rcYZqzReLQtOGJsO6r/nLCyKcEW8Xcf6dnDUQkFyZmLtis /GBwV+FvPvjZZUQqR6LaBVp6DlxoMj6CVl9tKmqc7jc9wrxpT7ukWr6JYUz4xzGFIIov csx+/Hr2jsbvsp1EKgoEUU/QlXKA+JpAEzCNWFeIlj6OYXNvlK/6PEtTsHrEo4/zHXin IiYpN8GOjoGNMha6nz/3IWJYuXo5xgsw70TuvXKoCavnyJy/Od3B2EO1J6vprvZskQD7 AJtg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792574960; x=1793179760; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=VTjVlb+otFRnQCorDsRBLqqwQiAElB9jBQmGoR879kA=; b=YmRtvl5tOzwDeU6e3VNXTQRSytBFOVtDP/JwWiUrrHocB9zdCV4qBAvi3P0KecHw9Z G+K7mdAH3ZtQXvjDpx4mgojkgsiO/iw9ngAKuQFMMDAYow0zuF8PRbv6r1ZIln8C3ikI KG3aJXNfB7ceyyyjjhIeyc0Fu+n3dBdevGJmF5vWjSTX5JzZ4Vq8wo/j/HEEigWIApVx b/UzolBvZf0fk67x01s71r0oIbyNF+z0Ff5rkM1FRZWQ4QFNpE8aoKdP4TzHVSdTvQ3i MOJTp7JYpnHb1rmtyeKDhjb4fRrvi3exu+1Gp8Sp+tHGan/xK4L2MB37vY/CWHi/fQcI n62w== X-Gm-Message-State: AFq9FYIy1xVk9G4o+oJbAQJABPxDJWfg4yqmUYmRAGr8atwXuYR9i83T a2YcrroeGlND1okqlhVny/t4G5n+VuhftdZ7iQnDDfLTyUD2HWErWBjTpwcbGw== X-Gm-Gg: AYBFou2a2rzVMy+7uaRDO+0K7qU/xGqRefgsM8hbqi2bYLrLfDSfXKEQ9Lbeyln74DY ymAqamVuVKMFcPlsC5ZAjwkwaramGyQce/e0tYt63CIJT4Q1InEb1JW+rgBL8yLxKCaHUqQOE1s Yyjy2Z1jCVi65srZIdd++ki97NfZ9+bKsAHbHs6UJ7BZz2rnL06UTISCAwuYlK2TFET8aBF44Dj OvxDxA8g9FiIB6LR7qi6c6XqGJywLkBaPUdSWC97bBAwnsD59wvSzaw1Ltujkz54tE+CqEX3JgE PFz6zIwT5a8WIM/lkczTSJD5WF6uaUxnbt1DpBi5AmRriwyX79HdFG7svaWNFXV1pWWTC8KeGL+ Qu4TmGsJTSlQgsnYl2qXbvKhDjw2zhheqQN46Og/ku3OGwvkXZPaf0dMkZ4d+TyfGVukPNledAd QnSwtlr9bLfSzAcEiqCadGp8aqsRqDpA41f+G8jTZJeGEE6oWYOtJqvGxwqjBiPhG+ufSwRRaT4 B8Z9jjFGTEk2aw7lAiMGOItxK68zVjMAflQmTuUGIS34wj22+u1GnadEoHYieP3ImAeII3oR7eq gZb/3vwe9jQzDwmfPSElSW8QMa1kdXWKBj9wQ+lGduUlXSB5hnyt X-Received: by 2002:a05:7022:438d:b0:143:6525:f9f6 with SMTP id a92af1059eb24-190a437d59bmr2755513c88.13.1792574959638; Wed, 21 Oct 2026 02:29:19 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id a92af1059eb24-19035c0c9a6sm4716458c88.3.2026.10.21.02.29.17 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 21 Oct 2026 02:29:19 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-webserver][blacksail][PATCH 7/44] swagger-ui: upgrade 5.33.1 -> 5.33.2 Date: Wed, 21 Oct 2026 22:28:20 +1300 Message-ID: <20261021092857.3585453-7-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> References: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 21 Oct 2026 09:29:21 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131194 From: Ankur Tyagi Changelog: https://github.com/swagger-api/swagger-ui/releases/tag/v5.33.2 Signed-off-by: Ankur Tyagi --- .../swagger-ui/{swagger-ui_5.33.1.bb => swagger-ui_5.33.2.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-webserver/recipes-devtools/swagger-ui/{swagger-ui_5.33.1.bb => swagger-ui_5.33.2.bb} (94%) diff --git a/meta-webserver/recipes-devtools/swagger-ui/swagger-ui_5.33.1.bb b/meta-webserver/recipes-devtools/swagger-ui/swagger-ui_5.33.2.bb similarity index 94% rename from meta-webserver/recipes-devtools/swagger-ui/swagger-ui_5.33.1.bb rename to meta-webserver/recipes-devtools/swagger-ui/swagger-ui_5.33.2.bb index db2bb498a8..aeee9e4da6 100644 --- a/meta-webserver/recipes-devtools/swagger-ui/swagger-ui_5.33.1.bb +++ b/meta-webserver/recipes-devtools/swagger-ui/swagger-ui_5.33.2.bb @@ -12,7 +12,7 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=3b83ef96387f14655fc854ddc3c6bd57" SRC_URI = "git://github.com/swagger-api/swagger-ui;branch=main;protocol=https;tag=v${PV}" -SRCREV = "cac3d136b5e37bfbe3288c8591f6f4fcf9870599" +SRCREV = "e89a91f13cdee432d97ca9d3d1ac1969ff797036" CVE_STATUS[CVE-2016-1000229] = "fixed-version: fixed since 2.2.1" From patchwork Wed Oct 21 09:28:21 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101499 Received: from mail-dl1-f48.google.com (mail-dl1-f48.google.com [74.125.82.48]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.7499.1792574963289279595 for ; Wed, 21 Oct 2026 02:29:23 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=f3zo007o; spf=pass (domain: gmail.com, ip: 74.125.82.48, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-dl1-f48.google.com with SMTP id a92af1059eb24-157fe9d771bso659807c88.0 for ; Wed, 21 Oct 2026 02:29:23 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792574963; x=1793179763; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=n4x69lUCrVBQwJ4mdn2UdiHmcMV75dkXJrevM7XafYo=; b=f3zo007oiXt2sX+XcgkRpG12Fk6RpQrPZrg8WQqMIQRUPcUXwBUWaPL5uHBYU7P7+z 8Obgm/G76XnBWzMgUeO5f65jNzGm9PU//DyLY5OOQ06lMZlVhOGzBibvQzWgMRMg0P/U 9c37NOLKjvcGczAymA2LG5A3Q9Xsj5JVt+nAG6fWinpr9ubvIxkPxq/x8zZBPlSMv0eX 5fSf7SLTBC8mnlTHVpR+zeCkKEvj1O0ZcLJQwE8eIGjtFg3jHBrVDMSmjVGqZh3Pu4l3 6sMpfipEbTlp1hN9LX5cjobD6vYtyvyaTPzo/ceMzQeDcKUyed6mi+ON+JqNZN5fDMVK XiXA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792574963; x=1793179763; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=n4x69lUCrVBQwJ4mdn2UdiHmcMV75dkXJrevM7XafYo=; b=2oYH0ass4E+3q5FTs8QPC47JKw5ZuFKL6hK2CXH4u0IvUmC3mPwcRBfvh306M+sOXd dOad0Oj9YW1nHbraCt6Ys18jaTzHWTUD3DMMXRTfnGaHa92ZE4rLQFmyuLNL9xTOLD1N jK4SBqtW7orm7dBHktsIrEIS4P22cyPAmjTR2mRYqLM+5BGNfqxcAGU6fGJyao1q9vGj cF3KnXyDmJolEDAkRPky1305uIY3t0QB/UFjHxZYn9T8+MOV0Un1OVnCuwpk57TPcLnj 0K2JyfNew5qB6GFjy1gZYYZNVQUkC6cJBrkJpP4zBdfCK31/saN94tydO3oB9IO711wu EtAw== X-Gm-Message-State: AFq9FYJ4kuPwXRneJJGlX9yFM0sPVBwYZ4ouncfF8itWX6Xy6ZeeGlfC ddpC9IBaLjfnBLN1Wv6BEXJ/DyodVXoccl51nWskBH/ZdKF2Fhuo6lgtuWQL8w== X-Gm-Gg: AYBFou171bpaChBEvDrsWLsumFkRgeYx1jeAt7hQM/ZP8JEOvdZq2QOcSPWw4b7TYnv /zE6n0jXczwoHPSiQoQVDHlq2S9jp9vZfhsTh+D0Wrjhk9uaFz6DgNDM2dOzFYqVroV0jeL8tu+ 1ksmKSevJ15zjzSbNF5HpbeC11Ilg+qO4XZGgL3Vda2PL4j8SxvYIqtf8NiwB6zVmJStv94NY8n 6P5hnrnRny7MZUv6136n5xxgHD0c3TetxAPJKd82YIZk7P05s2VmQXASIXtrabIOOtGc4+asoqF h4j8Yupu5DpoaPbYD8DhNDrxQzEhp0iy2K28LoFnY+GeTTW69dYww3DF2Co9kmPDcGtJWxl/C48 VvVmTwB0k5VvANCornNK2oRuaPaUFCymMiJ0/WPdtNy8evqilxo+gbbZ2TjbLXDVmlo3tFa1q11 bgVE2Dax/9e0cvqbZKTasuwQmQjptmq3xfiWxFimszVaZX7UhFw+kO3wFDpAY1/0uel85XMUYxK iXXrQu/aVhsCse/Boc0Ns1TiYgxlodpHIiI/Xstu1ntCFBcjuxa5qFZkeoWvRtb/Ms+JnC1309N W1izBbrV3jnJXI8s20+ogOmcEVfu/AE= X-Received: by 2002:a05:701b:270c:b0:190:d9bb:281f with SMTP id a92af1059eb24-190d9bb28b2mr1624001c88.18.1792574962518; Wed, 21 Oct 2026 02:29:22 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id a92af1059eb24-19035c0c9a6sm4716458c88.3.2026.10.21.02.29.20 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 21 Oct 2026 02:29:21 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-oe][blacksail][PATCH 8/44] freerdp3: upgrade 3.32.1 -> 3.32.2 Date: Wed, 21 Oct 2026 22:28:21 +1300 Message-ID: <20261021092857.3585453-8-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> References: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 21 Oct 2026 09:29:31 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131195 From: Ankur Tyagi Dropped patch that is part of the upstream version. Changelog: https://github.com/FreeRDP/FreeRDP/releases/tag/3.32.2 Signed-off-by: Ankur Tyagi --- ...1-winpr-tools-link-only-winpr-public.patch | 76 ------------------- ...{freerdp3_3.32.1.bb => freerdp3_3.32.2.bb} | 3 +- 2 files changed, 1 insertion(+), 78 deletions(-) delete mode 100644 meta-oe/recipes-support/freerdp/freerdp3/0001-winpr-tools-link-only-winpr-public.patch rename meta-oe/recipes-support/freerdp/{freerdp3_3.32.1.bb => freerdp3_3.32.2.bb} (98%) diff --git a/meta-oe/recipes-support/freerdp/freerdp3/0001-winpr-tools-link-only-winpr-public.patch b/meta-oe/recipes-support/freerdp/freerdp3/0001-winpr-tools-link-only-winpr-public.patch deleted file mode 100644 index 2dea69c3c4..0000000000 --- a/meta-oe/recipes-support/freerdp/freerdp3/0001-winpr-tools-link-only-winpr-public.patch +++ /dev/null @@ -1,76 +0,0 @@ -From 6682e9ca667271b8ba148a301b4a2f9ac78be2b9 Mon Sep 17 00:00:00 2001 -From: Armin Novak -Date: Mon, 28 Sep 2026 11:57:22 +0200 -Subject: [PATCH] [winpr,tools] link only winpr public - -Upstream-Status: Backport [https://github.com/FreeRDP/FreeRDP/commit/6682e9ca667271b8ba148a301b4a2f9ac78be2b9] -Signed-off-by: Ankur Tyagi ---- - winpr/tools/CMakeLists.txt | 18 +++++++++++++----- - winpr/tools/makecert/CMakeLists.txt | 6 +++--- - 2 files changed, 16 insertions(+), 8 deletions(-) - -diff --git a/winpr/tools/CMakeLists.txt b/winpr/tools/CMakeLists.txt -index 5719c1c65..225b70744 100644 ---- a/winpr/tools/CMakeLists.txt -+++ b/winpr/tools/CMakeLists.txt -@@ -28,7 +28,8 @@ set(WINPR_TOOLS_API_VERSION "${WINPR_TOOLS_VERSION_MAJOR}") - - set(WINPR_TOOLS_DIR ${CMAKE_CURRENT_SOURCE_DIR}) - set(WINPR_TOOLS_SRCS "") --set(WINPR_TOOLS_LIBS "") -+set(WINPR_TOOLS_PUBLIC_LIBS "") -+set(WINPR_TOOLS_PRIVATE_LIBS "") - set(WINPR_TOOLS_INCLUDES "") - set(WINPR_TOOLS_DEFINITIONS "") - -@@ -64,11 +65,18 @@ macro(winpr_tools_include_directory_add) - endif() - endmacro() - --macro(winpr_tools_library_add) -+macro(winpr_tools_library_public_add) - foreach(_lib ${ARGN}) -- list(APPEND WINPR_TOOLS_LIBS "${_lib}") -+ list(APPEND WINPR_TOOLS_PUBLIC_LIBS "${_lib}") - endforeach() -- set(WINPR_TOOLS_LIBS ${WINPR_TOOLS_LIBS} PARENT_SCOPE) -+ set(WINPR_TOOLS_PUBLIC_LIBS ${WINPR_TOOLS_PUBLIC_LIBS} PARENT_SCOPE) -+endmacro() -+ -+macro(winpr_tools_library_private_add) -+ foreach(_lib ${ARGN}) -+ list(APPEND WINPR_TOOLS_PRIVATE_LIBS "${_lib}") -+ endforeach() -+ set(WINPR_TOOLS_PRIVATE_LIBS ${WINPR_TOOLS_PRIVATE_LIBS} PARENT_SCOPE) - endmacro() - - macro(winpr_tools_definition_add) -@@ -89,7 +97,7 @@ addtargetwithresourcefile(${MODULE_NAME} FALSE "${WINPR_VERSION}" WINPR_TOOLS_SR - - add_compile_definitions(${WINPR_DEFINITIONS}) - target_include_directories(${MODULE_NAME} INTERFACE $) --target_link_libraries(${MODULE_NAME} PUBLIC ${WINPR_TOOLS_LIBS}) -+target_link_libraries(${MODULE_NAME} PRIVATE ${WINPR_TOOLS_PRIVATE_LIBS} PUBLIC ${WINPR_TOOLS_PUBLIC_LIBS}) - - installwithrpath( - TARGETS -diff --git a/winpr/tools/makecert/CMakeLists.txt b/winpr/tools/makecert/CMakeLists.txt -index 37b831125..0af1fcc08 100644 ---- a/winpr/tools/makecert/CMakeLists.txt -+++ b/winpr/tools/makecert/CMakeLists.txt -@@ -31,11 +31,11 @@ endif() - winpr_tools_module_add(${${MODULE_PREFIX}_SRCS}) - - if(OPENSSL_FOUND) -- list(APPEND ${MODULE_PREFIX}_LIBS ${OPENSSL_LIBRARIES}) -+ winpr_tools_library_private_add(${OPENSSL_LIBRARIES}) - endif() - - if(MBEDTLS_FOUND) -- list(APPEND ${MODULE_PREFIX}_LIBS ${MBEDTLS_LIBRARIES}) -+ winpr_tools_library_private_add(${MBEDTLS_LIBRARIES}) - endif() - --winpr_tools_library_add(${${MODULE_PREFIX}_LIBS} winpr) -+winpr_tools_library_public_add(winpr) diff --git a/meta-oe/recipes-support/freerdp/freerdp3_3.32.1.bb b/meta-oe/recipes-support/freerdp/freerdp3_3.32.2.bb similarity index 98% rename from meta-oe/recipes-support/freerdp/freerdp3_3.32.1.bb rename to meta-oe/recipes-support/freerdp/freerdp3_3.32.2.bb index f43c8cc7d2..2a985522c0 100644 --- a/meta-oe/recipes-support/freerdp/freerdp3_3.32.1.bb +++ b/meta-oe/recipes-support/freerdp/freerdp3_3.32.2.bb @@ -8,9 +8,8 @@ RDEPENDS:${PN}-ptest += "cmake coreutils" inherit pkgconfig cmake ptest -SRCREV = "bf217a504e54cc719880c228e82353382cd7d4fa" +SRCREV = "97eff6ddfbbfaa8e42a126d362686bd001ff8bdc" SRC_URI = "git://github.com/FreeRDP/FreeRDP.git;nobranch=1;protocol=https;tag=${PV} \ - file://0001-winpr-tools-link-only-winpr-public.patch \ file://run-ptest" From patchwork Wed Oct 21 09:28:22 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101500 Received: from mail-dl1-f52.google.com (mail-dl1-f52.google.com [74.125.82.52]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.7534.1792574965379475770 for ; Wed, 21 Oct 2026 02:29:25 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=mxKIvpz5; spf=pass (domain: gmail.com, ip: 74.125.82.52, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-dl1-f52.google.com with SMTP id a92af1059eb24-15354aa70e8so1570391c88.1 for ; Wed, 21 Oct 2026 02:29:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792574965; x=1793179765; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=3uLxgzOj5PVjJcA9KrdjjodUQeMPLWlydBZ6fmvtUig=; b=mxKIvpz5yISkuSaY3I9ZlerkUn2xT2Vc5RZNP5ToxbI2UfAR8dhcuCGl+XWCQdtnvn fS/MPeZ2IWLFFZ8EXLr6a2nv9dZlaS/j9HgzRKq9c0dIAdKhaxws3W2qSO0Lt9a1bKoU V3PxFySxfjTc46CdG2gzSGYRXL0XIHa4f+66ZBnJ0wm29kmoWFCPSd/mZKIOw+1fuUy5 8YZYZHrKEaJnsWmqYKeMhoy43tGLoyf1r9oy17B0xZYQnAFafelQDNpwD4ssSua9kTpT Utay6YnwUc7r4PB2wpjFugs0cqZyCFW9i/YfnXvs1UzICVo04ABLNbSEfIxpRPNnLIFa GsBA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792574965; x=1793179765; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=3uLxgzOj5PVjJcA9KrdjjodUQeMPLWlydBZ6fmvtUig=; b=e2D6/VYVUcH9PVKTBRtu/6Lh4qIXhaIXW/3XqgGshNHIcUjJc2mgvMVvQWOzPl3kb6 NBQQyFsgRq7kLdj6+rMnczJ69aGHtnHmNZrCGpPt62ZwmztiaCvrw2j9DmRKdIBR3fkP Xknw1knxrYebSDOwiMMZh+i9kFbhPgpmoyJO6EkPRFDieAAyZNey6Dek1xna5Pxu+rY7 hEozbJVGeCG1YaHKWE/bLYRwcUP47v+GkDCckIQnSFQL9TYQBHH5nCxJ1YEe+AKcj5v4 wEm6T6nx0BWLOrm4M0V74TTv/xe0466+KcuXdRhXh6HxqUQ30CTVA7oW04B7EAPSKEDu sp7w== X-Gm-Message-State: AFq9FYLaf2aVVV6jpZoCldheA7HCpDCl6eQ10DCSCxxJthRAmixPObM7 Ujbkqw+Fk4uB+BBHDjnkqsFYNAAEv5hn41UWNKFtSgQgUZDs378hFyXkasjjjA== X-Gm-Gg: AYBFou254YXmYrNdQzPohGWCdVF/tc5/UyXmB/wMxt/6mzDIZSMQoGGTLY/f8uZBV0v ElRNYhmHwriyXeNaV9ZVz3iQm8vUXGmL/gM8CaH7B1cX4QJpt//pGh0dbsna/hp6cx4lsCqmBz4 Ksp79RO5sLnpTlVaaNiNVGkISZI3AiFRkT1pXI1a2BSqJLyIUlMbU5IYY6jgI5w8mRUAgcAI9nZ osd+oBHrXqpoEMuJQocVIiRowgr/tjY0UQzACI3yl/7bgQrkCPVuqkABAXM3otowtptLHSgs7Fx kJ91SKSPc4VG1RUgMb4l+ha3EADYCo9/Be4KXaG9Wf03iEd2F7BX/3rIFxRPwdCE0LMv/TnA1Kg ZGBur5TOSd+k9OO2eFHzSftQTznD64dK9wxlA9Bzg8gYjYSYisK70h6cpmX280oNETzX33wC9Y0 IpGVbDRMIh90B8YKpuKA7QW+5SpCDTcmUZ5NztbUin1K2DEiW1dq7IqIibB7tDXtDEDBuWaeckV a+oiHJgOZBYoqbvjToeb6+YDF+2dnG9dUOn1UtoHSIg/17dLKe2jTN7wyZ+PIEigwsYRxL6YN6j zGKUWkbPdLPqua8rUaXMDfi4seQpGOXZnw== X-Received: by 2002:a05:7022:929:b0:14c:be8e:69fe with SMTP id a92af1059eb24-190a051dd50mr2647288c88.5.1792574964724; Wed, 21 Oct 2026 02:29:24 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id a92af1059eb24-19035c0c9a6sm4716458c88.3.2026.10.21.02.29.22 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 21 Oct 2026 02:29:24 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-oe][blacksail][PATCH 9/44] spitools: upgrade 1.1.0 -> 1.1.1 Date: Wed, 21 Oct 2026 22:28:22 +1300 Message-ID: <20261021092857.3585453-9-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> References: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 21 Oct 2026 09:29:31 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131196 From: Ankur Tyagi Signed-off-by: Ankur Tyagi --- .../spitools/{spitools_1.1.0.bb => spitools_1.1.1.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-oe/recipes-support/spitools/{spitools_1.1.0.bb => spitools_1.1.1.bb} (87%) diff --git a/meta-oe/recipes-support/spitools/spitools_1.1.0.bb b/meta-oe/recipes-support/spitools/spitools_1.1.1.bb similarity index 87% rename from meta-oe/recipes-support/spitools/spitools_1.1.0.bb rename to meta-oe/recipes-support/spitools/spitools_1.1.1.bb index 69f527a6eb..e2ab0a5d11 100644 --- a/meta-oe/recipes-support/spitools/spitools_1.1.0.bb +++ b/meta-oe/recipes-support/spitools/spitools_1.1.1.bb @@ -3,7 +3,7 @@ HOMEPAGE = "https://github.com/cpb-/spi-tools" LICENSE = "GPL-2.0-only" LIC_FILES_CHKSUM = "file://LICENSE;md5=8c16666ae6c159876a0ba63099614381" -SRCREV = "a19dffe44fee857124a993598caae0c85894f914" +SRCREV = "74ba65b19e0cf9d1eabd52d17d842200ef901d61" SRC_URI = "git://github.com/cpb-/spi-tools.git;protocol=https;branch=master;tag=${PV}" From patchwork Wed Oct 21 09:28:23 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101501 Received: from mail-dl1-f47.google.com (mail-dl1-f47.google.com [74.125.82.47]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.7501.1792574967592416130 for ; Wed, 21 Oct 2026 02:29:27 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=je4JQf3V; spf=pass (domain: gmail.com, ip: 74.125.82.47, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-dl1-f47.google.com with SMTP id a92af1059eb24-18cdcfc05ffso501612c88.1 for ; Wed, 21 Oct 2026 02:29:27 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792574967; x=1793179767; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=VrJMNcGZHCA2dnWbt7JzXk2YA1A3mKdG0q5nJaYh+ds=; b=je4JQf3Vsj5MADYpJcWfYMTHEJVkUXtpNeB137wdKXZEHDIBNB3ZEr2KES+Um5kjjl 5v+rEhHA/mMZuUyCQspYgGZ15MlCa0vHbctbdGm/dDVEVgQUtVrYU5XucGbzANVuFVyv rEHwLVDniTzCjXxja1oBxW8qd4wafzFHi0ebG6y/NHsT3Gj83Fzg8J6/RYqYKpUUhZ4b y4kclbIE1DOxcjYYqPEUtAMDyBMvwmBra92AMIr9gHgwIisWa7C2yDx9XxBGYrTNNLdf rZ0r9UAOgXn9prthY59wwmbJw6rkvPEKWsPD0tCMKha/1dVpkPhAl8pBvD4nO0mEOlTq L4EQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792574967; x=1793179767; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=VrJMNcGZHCA2dnWbt7JzXk2YA1A3mKdG0q5nJaYh+ds=; b=fW7SpQjjJscrJ7Php3gxq6zD/uuMMPR8IaYWLe4XkYwghuXV/Ykd0yyF4hLwMdhBbX WQFjMY6FY+b4tHO7JI1sQBn6qQ3Uf9ca2VuZuSHM/uOxoKHZXTEVbxS+eO4ulyMndNix mLsRrbLg/uOQvCboW8mdphPhGVtYvGEXoI1wgVNxzw+YoAG0/MmGjEhOD1bcwVWF4Nuq 0x7Ms1HCKaYcNg+WF1GoLzEUctxToFyW0uXdpeP1tA4yJNUol4wMWaXrjz798goj0lvY 83s8iUUrfG/9Ae/iWCVBettKxtKlQ8ADQO4mhbQSM+zX1kd0v5LFvydcUPHdrolmfxYA DyKg== X-Gm-Message-State: AFq9FYLhzHHpDMWkX1cEFX191rBzxfy0F1CGHnMpATCPtvk5aJiIEuqP VsI/nrWdZdtko9aJX3DiqzVl33autP9UuToiKZujHN/fr7RkXn1Tbkt/bWDRvw== X-Gm-Gg: AYBFou1wk8mgEvq11JLTq6hYrbDYbohYjQ3lc/VIwfh1DDV/16giIBkoE/V5lSVLvGz z8D97knm1B+aGQgekmGQ2RvQw7K7wWfU6fhR8Bars32PePwsQiUUCZ0UVp9cxzB/9q5XsbatPos d+LBKp86cuI0yG4pgpMVv76AiwUBzXaXuTBfp+HTkNDCdQOYS5nmp9QvJWaW+cBxYDpgDnfQJgw ppHMx3+AgRZS0pIhbHeYHBXaCktpbRDEf9BbYjkg9DFthsT6UaVGvUv2QmBlhTKBYnGQs4jVare dCtFesjFf04sQs4aWQXtAXUgXGF752XEAEY/uwikIYiAZnzxAWQh1RoyMmCr5peQth7erFWpYd8 vvh0fwuf+9CTU2CFou4yDgCLGnRy01/qstpdZAXg6pTvkoFB6pYg0nFYHrtydExSoXzx+mRDQH3 dRVX42Wzgm5aMeVpoORvaHrLt45AKlZhh6aEeeSFPV9+9uRJrHM4lHV/LaEKgZwkFpWPnTdWMNY Nx2JvhCJwr16aWaaD4NIA97xMFOrUyHk7mAUZZB+naEgsieMsDmpPrU+X0uOu4M1sAeQkvZ4bt+ 6LPVCBV6Q+Y/LMP6+Anuo12Amod/yZUqNHC6K/mf7ZYELSmM2ke6 X-Received: by 2002:a05:7022:f512:b0:187:efba:9ba2 with SMTP id a92af1059eb24-190a84c55a9mr1616002c88.44.1792574966939; Wed, 21 Oct 2026 02:29:26 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id a92af1059eb24-19035c0c9a6sm4716458c88.3.2026.10.21.02.29.25 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 21 Oct 2026 02:29:26 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-oe][blacksail][PATCH 10/44] libspdm: upgrade 3.8.2 -> 3.8.3 Date: Wed, 21 Oct 2026 22:28:23 +1300 Message-ID: <20261021092857.3585453-10-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> References: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 21 Oct 2026 09:29:31 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131197 From: Ankur Tyagi Changelog: https://github.com/DMTF/libspdm/releases/tag/3.8.3 Signed-off-by: Ankur Tyagi --- .../libspdm/{libspdm_3.8.2.bb => libspdm_3.8.3.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-oe/recipes-support/libspdm/{libspdm_3.8.2.bb => libspdm_3.8.3.bb} (98%) diff --git a/meta-oe/recipes-support/libspdm/libspdm_3.8.2.bb b/meta-oe/recipes-support/libspdm/libspdm_3.8.3.bb similarity index 98% rename from meta-oe/recipes-support/libspdm/libspdm_3.8.2.bb rename to meta-oe/recipes-support/libspdm/libspdm_3.8.3.bb index f77057d9fd..3ab77a5cfe 100644 --- a/meta-oe/recipes-support/libspdm/libspdm_3.8.2.bb +++ b/meta-oe/recipes-support/libspdm/libspdm_3.8.3.bb @@ -10,7 +10,7 @@ LIC_FILES_CHKSUM = "file://LICENSE.md;md5=8f9b59a81a88da8e812af43728b72dd7" DEPENDS = "openssl" SRC_URI = "git://github.com/DMTF/libspdm.git;branch=release-3.8;protocol=https;tag=${PV}" -SRCREV = "f55cf6d48ec69b4ac60a63903e9c6a2cb0fd155d" +SRCREV = "98253fee253c9e0b4313e64b373af3c7614c90e5" inherit cmake From patchwork Wed Oct 21 09:28:24 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101502 Received: from mail-dy1-f170.google.com (mail-dy1-f170.google.com [74.125.82.170]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.7503.1792574969774569414 for ; Wed, 21 Oct 2026 02:29:29 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=Rv3c3HmF; spf=pass (domain: gmail.com, ip: 74.125.82.170, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-dy1-f170.google.com with SMTP id 5a478bee46e88-3282db206d3so1182888eec.0 for ; Wed, 21 Oct 2026 02:29:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792574969; x=1793179769; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=3BFzdwDFW7wTV3svdpv55mLXc0xFJAqXCwGrZefnb60=; b=Rv3c3HmFgcrjvo7tcqhqTe5kwkssT3nZHo7Ywq7f4TfFAq2yCda1EKS/BiqTzaH1kS o6A0UiLQI7YnhiLKaM7kARyd8bu7LdP80BOusMPUXj3SnFFIF3uAC+pNwH1I7WIx6YYL 7Pd6twkq/gDlEMrQ1IF8Hsjqs4TKslutL5P9vaaY/kjsJbvUd0KZ3OGZogbPxxv6ZqvL xZioEgOmhltHq6aOpX40/2et4YQoCTPlOjfoV0ExEzzK3gv9+VDsTFwSpsJQOlLnPq5v G/DoMk39T/ejf5a9yuq/8FjtyYMujItPZ7V0yvj865upiUUTzOyZizfxLxlqB3jPFwJ8 FHkg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792574969; x=1793179769; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=3BFzdwDFW7wTV3svdpv55mLXc0xFJAqXCwGrZefnb60=; b=K4zH6ZdlWKGIxYYiTySclkPnOJU3KYLgN+O0xpiSeJpxGgl595nkQgIEuUuN2kWwe1 UIgbtHapWCIKPAY56tA6g1b7BcIIhZZ5FUtgX5Ax83HkHkXwrqWfdfFsbeF6harVbRRm uxhnUxJpE5kyFnvSB9bnvwQs6rfhTSnecjpdcCXPfRgcahKTxVPkyz1N7Dbp+ElnhUdk XwZ9fSBh9/Qrob5iOEMqaiEcsUH2GYVrkPONlIAVAyqUEJo1vnsToQwYoiPOOTWOPkSM v42nH6TBKIvW4R2JBV8MSryjVtBGRLlhbT5z2GGyt1jLDP+sKb1bSeADfKCJBHDEj+fK Zl/g== X-Gm-Message-State: AFq9FYI8XjN7trJrTobGPfYqwcDLpRMrLk1Got/EpnOkbfXqDRC93Oek pj0uqCNtXgRaTxP6R2WzIzpOEML3yofcLlS+j2dtcYgM0sXTtNmaWfO4c8st0Q== X-Gm-Gg: AYBFou3ZcWvmsGLvtKL4uT3Sq+6QPWxN5b2bNnZPfA1ONpDJ+4YXqBH5wra3AnUcIse W+Wl2uSVik+hkuQS79SrJYvK+lSmvpj0w01FDNYphxa1l+X603o9fi6cgWhkCgNplY+Yavk115i 7uVGFh4Hk95oVBlGKzlor8Uw6RRyUdFClU3MXvnvj+Tk8JJ4BpUlDmuiwAZ8rfvTJhzbJRTWhgC JTaHUR9I/qEyA9phBw6T2DDaY8OM+QJWx5GyAMBiOothE7HnN11RP9KfNRLu8rUSvEwuxknrHcy VYu47HWoYe8SA1GuFDuveM4gCHkmLNdRQrhCc/MLUdYZQEOPFYI9IsiYyqbc09a/D3pmOZqzCNP bCk9NqhoesEqNa4Vs5lQyDzFBYQd1v90YtMfbAy1y0sg8pIjBZbp9ZCuJe2MU3ZcI0FPwF8Vj1R VqUI2yxtfarEhMPw3OCbL598h9T1g7Wq1NWtRuCbPoi1hUQc2xbp4QfMAcgxZY09C43Bl73ONjS USkbc09LAmnZl9LYwLkcTF7ZG4WQ+z8pY6Uk+ARWoEOK89HrFUVwyE3HjQGD3yBD4Zsy4/jmvnT tW9t3olY1Sfw1Edk18sYkPrWmxxL8ao= X-Received: by 2002:a05:7022:3d08:b0:17c:a0c5:8c9a with SMTP id a92af1059eb24-190a74764e9mr2534379c88.42.1792574969040; Wed, 21 Oct 2026 02:29:29 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id a92af1059eb24-19035c0c9a6sm4716458c88.3.2026.10.21.02.29.27 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 21 Oct 2026 02:29:28 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-oe][blacksail][PATCH 11/44] libmikmod: upgrade 3.3.14 -> 3.3.15 Date: Wed, 21 Oct 2026 22:28:24 +1300 Message-ID: <20261021092857.3585453-11-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> References: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 21 Oct 2026 09:29:31 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131198 From: Ankur Tyagi Changelog: https://sourceforge.net/p/mikmod/mikmod/ci/libmikmod-3.3.15/tree/libmikmod/NEWS Signed-off-by: Ankur Tyagi --- .../mikmod/{libmikmod_3.3.14.bb => libmikmod_3.3.15.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-oe/recipes-multimedia/mikmod/{libmikmod_3.3.14.bb => libmikmod_3.3.15.bb} (90%) diff --git a/meta-oe/recipes-multimedia/mikmod/libmikmod_3.3.14.bb b/meta-oe/recipes-multimedia/mikmod/libmikmod_3.3.15.bb similarity index 90% rename from meta-oe/recipes-multimedia/mikmod/libmikmod_3.3.14.bb rename to meta-oe/recipes-multimedia/mikmod/libmikmod_3.3.15.bb index 2468943349..bfd15cabe1 100644 --- a/meta-oe/recipes-multimedia/mikmod/libmikmod_3.3.14.bb +++ b/meta-oe/recipes-multimedia/mikmod/libmikmod_3.3.15.bb @@ -8,7 +8,7 @@ DEPENDS = "alsa-lib texinfo" SRC_URI = "\ ${SOURCEFORGE_MIRROR}/project/mikmod/${BPN}/${PV}/${BPN}-${PV}.tar.gz \ " -SRC_URI[sha256sum] = "dffd82b8f254c3489c32098da831f33eac7136843d1e7ccb802f1254ad5b4219" +SRC_URI[sha256sum] = "dc27b338154b8f88dc9e6317196d42c6abc13bf63c4e055257a18d4e38e1afa2" UPSTREAM_CHECK_URI = "https://sourceforge.net/projects/mikmod/files/libmikmod/" UPSTREAM_CHECK_REGEX = "/(?P\d+(\.\d+)+)/" From patchwork Wed Oct 21 09:28:25 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101503 Received: from mail-dl1-f42.google.com (mail-dl1-f42.google.com [74.125.82.42]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.7504.1792574971786790076 for ; Wed, 21 Oct 2026 02:29:31 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=de9AyxmJ; spf=pass (domain: gmail.com, ip: 74.125.82.42, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-dl1-f42.google.com with SMTP id a92af1059eb24-17bc533fda3so633320c88.1 for ; Wed, 21 Oct 2026 02:29:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792574971; x=1793179771; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=Rqa8FwGsvCcdMRqM7gKRjx2sgMO1lEXjf7WI5tBhJ/c=; b=de9AyxmJXl1ufQvIPFeQdpflvifcrV6f0Rkn3iHH7He7XM18nt55DQvepDDFB3Gb0v sQQD9k6vF3yTcTJlgpRIDBM/5d6JzTkwzvTkVLODlLxmfKX2kMcNsDoGf71jm/XaqR5s D8hzAGhYLUyI2ZoGb4W7A+1yW6pRMCr0+2x4mF12Mqup6DgBhLG+vc2rSvR1lUd6ztwv OItn90dabvaPQo4XmGm8mRc8z4JVTEyOG/Kjy3bMtMDLdIfrzBvqH7isqnbH2km+phDd LQ+hPwU3K+lqRqHL3jQ4h261U129wUiUb/EZIH65rQG/J/cDZEtk3Gkp04EQZLhykFI0 cdXg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792574971; x=1793179771; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=Rqa8FwGsvCcdMRqM7gKRjx2sgMO1lEXjf7WI5tBhJ/c=; b=lnW5UVVyjtQmhCohEQXdJJtaigGC5W6Hv6R9Pd21+em2umeobuakJCDCaf+gOMKGtW Ti3JFPnQnsdYgAYrttZp7xxzaVWNHJWYwz00qrqWXYjECJuLM2ZKOSSLh8WMA6nuqpU7 0zxIRbZRwIkdJqWxcI7rI9ZEDPRxqBaEyuHnim4KL/b4v9XCg9vOjKAQZFqwsPo2hnyl MDiRAcEfkmz7XWcCf5ttX9XRgr19MJRIG+E/RIbyqrCObSH+BbMla+6+cwfHLeZ2Pn/i bv+jHgna2eDS8uqCh9sH7wK9t4U3/q4ELEZE+XyWJeXkyzbxhEjy9rf0GD7SZwk0PVZA DRBg== X-Gm-Message-State: AFq9FYIwmSBw+YjPE+tW4ouRAL8jKOtkpNJLMwxg7enPswOldmqs3NOp 1end26dJqHlZviF379flrlIAj9ZdN5uxc3mz4/4QiL7Oyc9XBHig02numUZJcA== X-Gm-Gg: AYBFou2p5bY9HiQ7sqpcikChiKioznO44YkGJ+go9o0Qj3KCcPL2PE/EU2wLm2njxcL 99TQc0EVxXQTVe/eMVgpacHMk4TKMrqdV1PUnBFSIblIWgXdacw5KEj6NrfonQiYD7yM7oL2Asf jqItJF8MRJRugL0bmWCfoTasfDRfhi/ejE4aYbL/jDBWLNjQXLwZboLAe8xqPDDhz8ObQUKqifv pUCnJCmNSRPHGqf18QMu9NG5etBZoygRmwfOMk5H6phDIxPWViLCt4iRzEb33HEtbIHO2yfaMaQ 0h50bG/5wxQhzoU43BXS2TTTgGJ2op7+ARc+JwmYidMovClHM1CRK6/Ss6TI6Z0NgQzQjalvDkc gTf6oJ69I2t2thcGJW9XvWTlp9Lkw9hrijzKJK0c8zHfZ6BTPZljgRc5eD3ZLFCbzXldXiLeKHH M1Me1FJDjRD/87DDJu16zvoGbk2xi3BS6K0Nc4w88ogs2AlRI58KHkmoHLrNL5iX2kF0tGvRv4+ rpQg1q7b8UkW7Fjpa1Hm5XuWGUcCID3A++8d4MYkN/ajbGdk5hrSmhYUC1Ek15bjoJdsG+8vsuU LKY8tWefXIpv9IPfZRxTs67wQBlW8Vw= X-Received: by 2002:a05:701a:c90a:b0:143:5cb4:30 with SMTP id a92af1059eb24-1909f5c7ec5mr2098342c88.3.1792574971071; Wed, 21 Oct 2026 02:29:31 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id a92af1059eb24-19035c0c9a6sm4716458c88.3.2026.10.21.02.29.29 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 21 Oct 2026 02:29:30 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-oe][blacksail][PATCH 12/44] libxmp: upgrade 4.7.3 -> 4.7.4 Date: Wed, 21 Oct 2026 22:28:25 +1300 Message-ID: <20261021092857.3585453-12-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> References: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 21 Oct 2026 09:29:41 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131199 From: Ankur Tyagi Changelog: https://github.com/libxmp/libxmp/releases/tag/libxmp-4.7.4 Signed-off-by: Ankur Tyagi --- .../libxmp/{libxmp_4.7.3.bb => libxmp_4.7.4.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-oe/recipes-multimedia/libxmp/{libxmp_4.7.3.bb => libxmp_4.7.4.bb} (85%) diff --git a/meta-oe/recipes-multimedia/libxmp/libxmp_4.7.3.bb b/meta-oe/recipes-multimedia/libxmp/libxmp_4.7.4.bb similarity index 85% rename from meta-oe/recipes-multimedia/libxmp/libxmp_4.7.3.bb rename to meta-oe/recipes-multimedia/libxmp/libxmp_4.7.4.bb index 1600686229..a287124801 100644 --- a/meta-oe/recipes-multimedia/libxmp/libxmp_4.7.3.bb +++ b/meta-oe/recipes-multimedia/libxmp/libxmp_4.7.4.bb @@ -6,5 +6,5 @@ LIC_FILES_CHKSUM = "file://README;beginline=59;md5=b25470e2863502c9ac9886f09c21a inherit cmake pkgconfig SRC_URI = "git://github.com/libxmp/libxmp.git;protocol=https;branch=master;tag=libxmp-${PV}" -SRCREV = "1e0812137e4f9e15cc026c0c75af82d71d3cb5ad" +SRCREV = "5d4f6aa2c7dcdf8e9cd8129fe579d45b36a302da" From patchwork Wed Oct 21 09:28:26 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101504 Received: from mail-dl1-f48.google.com (mail-dl1-f48.google.com [74.125.82.48]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.7535.1792574974057576294 for ; Wed, 21 Oct 2026 02:29:34 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=PZxcBWpm; spf=pass (domain: gmail.com, ip: 74.125.82.48, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-dl1-f48.google.com with SMTP id a92af1059eb24-1846bc43c28so28811c88.0 for ; Wed, 21 Oct 2026 02:29:34 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792574973; x=1793179773; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=wzz0hcAvL+TyoSxim3TwHHje7sMt8f5EYUsJClBYJfg=; b=PZxcBWpmJKktit2o5YVg+HfgajGUhQA6FIUTFUNbwvgJxYklxiC5pRYcJUi7Cf0z+F nwoR0kcMzCFhLu7zH/6HtRnT82t9vDA3U8mh6eSsYOhGPxCb8pOOMzio7i4yKGXPxjpC K2mOrMM02Wsb9ef6q43XCwTaVWZqBCFE8UUyoYMVUTpgiUZWHHp7qjQA6d/ZlYPUvJi6 8F0Vtyq8pxrPh4Q1virROR2qKMyhNdDs/LeJJSzUy8JzqfjfjNZLNpmc2PXn0im421hw WEDcSMPlAV4NleJTJF9h5dmD6cVoE6m6U+RxwqgCB4yPLCNpvRXkpmS3fdZ+vF/p0jSJ ZCBA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792574973; x=1793179773; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=wzz0hcAvL+TyoSxim3TwHHje7sMt8f5EYUsJClBYJfg=; b=iZIunRg+4hEQlR0UkzDsPWGeeuvbf3WcsDKLkjpdx8uvXd6x3h3TCfEOFSDmgMqXxW c0TFPzKAKq+gbQVOjB2bh5Lw1f8McIaMThb4EWoTp3g1N9Kxt8uQ1iRuFAM7/KBm8wGh 90hbELxnVo7OBrXRgRrO/elC6Q+p0+h2tuZlpPF41xrf7H42ZoaS5UEuoEXYVXu3+dEi ayXAG9WsddWRVhEtr7dCyhaoaa8xCeu6JFiye4DgXQsS8lekkxrma0AzHz1SueRq5FYM fx+Eo1oivEoR/Ff84W0dQMJgSsXX82/WKCer4mXIZfZA1l4Guoz6hqdnFaTLDX5DCT+i 7e/w== X-Gm-Message-State: AFq9FYIqMQQf5WDsWR+vRJognQo/DQTCcZZPo1foPdLqWXhFd878FXjy tbCwt5UeoNBXu7tzzVZ0G8S14U1hLk4zSdiFmC8eJpnfq4pc1mmH1OTqjOcJ+g== X-Gm-Gg: AYBFou2l96DCmnDu6OHeG0JHdgbWQHQDH2jEy1HPUg/afQD8/coggeHrrus10/uYS3O yA+sBNnE5yNFuutDHGe7oLdDltSMMXeRpp6n5tgPzlllwHKwEXgxGSxC3PTRnh/ZRfzkT31jRqS nLzfYBwpzQlwj7oEMi9r10IgP+PvoSD3rE26IeHy4m7VZNzNynkMxC6wWFEcKclOmSsuh5sfRzh 4aAb4cz+5ikF//mh1XLH1i45iaKRkZdruUjhUHn0uVWrZOlzy3tnKdp+anWwcFasS5bO2yQY5b5 G8fNl1wVwo66siJH59YuPqcYD16jqNjZ5LS/X3Pgc4dMVkz6/xcmuTKwS53zU+BIv4GLycJ+c4D gnIEIrG795uDwe1nPFsNhzYM98RO8UXghYJeYeWiCiyZPlQZPRDdsbd6IlIbgcVn75KzEi3RFQ8 D28jOMQleaSp+b1VevzAnI67s0M2HJm6Qxy/SCbx+0ZjRvDOPNPMeZyATDDVdLetym6rpJ0mV+D XljyC+VATz4Y2Q7+ZXIG3aQaB8Y7xQd3S0ZZ624ygRe/2xmzQPkdvx1bMrZFtKFpwDxbs3otERF rHYYzZOh0XsQBwXeQ5JMA5lZtbzlyEI= X-Received: by 2002:a05:7023:d0d:b0:149:1feb:6dae with SMTP id a92af1059eb24-190a6adcb4cmr2400707c88.39.1792574973365; Wed, 21 Oct 2026 02:29:33 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id a92af1059eb24-19035c0c9a6sm4716458c88.3.2026.10.21.02.29.31 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 21 Oct 2026 02:29:32 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-python][blacksail][PATCH 13/44] python3-pyjwt: upgrade 2.13.0 -> 2.14.0 Date: Wed, 21 Oct 2026 22:28:26 +1300 Message-ID: <20261021092857.3585453-13-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> References: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 21 Oct 2026 09:29:41 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131200 From: Ankur Tyagi Changelog: https://github.com/jpadilla/pyjwt/blob/2.14.0/CHANGELOG.rst Signed-off-by: Ankur Tyagi --- .../python/{python3-pyjwt_2.13.0.bb => python3-pyjwt_2.14.0.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-python/recipes-devtools/python/{python3-pyjwt_2.13.0.bb => python3-pyjwt_2.14.0.bb} (84%) diff --git a/meta-python/recipes-devtools/python/python3-pyjwt_2.13.0.bb b/meta-python/recipes-devtools/python/python3-pyjwt_2.14.0.bb similarity index 84% rename from meta-python/recipes-devtools/python/python3-pyjwt_2.13.0.bb rename to meta-python/recipes-devtools/python/python3-pyjwt_2.14.0.bb index 1b018f605b..a2cb84587b 100644 --- a/meta-python/recipes-devtools/python/python3-pyjwt_2.13.0.bb +++ b/meta-python/recipes-devtools/python/python3-pyjwt_2.14.0.bb @@ -5,7 +5,7 @@ HOMEPAGE = "https://github.com/jpadilla/pyjwt" LICENSE = "MIT" LIC_FILES_CHKSUM = "file://LICENSE;md5=e4b56d2c9973d8cf54655555be06e551" -SRC_URI[sha256sum] = "41571c89ca91598c79e8ef18a2d07367d4810fbbd6f637794879baf1b7703423" +SRC_URI[sha256sum] = "77283c83fb56ecf566a886c757a714bc83668e38156de2cce8263302f42e0b86" CVE_PRODUCT = "pyjwt" From patchwork Wed Oct 21 09:28:27 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101505 Received: from mail-dl1-f45.google.com (mail-dl1-f45.google.com [74.125.82.45]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.7536.1792574976195171946 for ; Wed, 21 Oct 2026 02:29:36 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=hRKDnBnw; spf=pass (domain: gmail.com, ip: 74.125.82.45, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-dl1-f45.google.com with SMTP id a92af1059eb24-1517bda04a0so521340c88.0 for ; Wed, 21 Oct 2026 02:29:36 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792574975; x=1793179775; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=5HOihMnDMJkcXyygoOReELhms2F3rzLvYN/eIk1Nou4=; b=hRKDnBnwMDXtcu+OU6CSVofNZbQJ638RcT5x5O0Iur6DtGEzf0rdNRCxxeStrJkdmM pLMAxjdT3lzUhxFDRUgN/W94V0OIAHh03kH87RAvFkgQm8tN0VsypFGGJ7dmX9Q9qsr8 zCgMCpQO0uA1yw4IM84jgvddWjwPynQtTx/YTlxy56k5ikx/9tfOLC5s/5jNC4H7Y9uo oexHjxHRm84ROpT+VSQWRAUMtKz/OiO7UzbUdEbFUDZ/JphlUdmulBZePfIhXQ5xp7I1 D9k2/WVOFjQgsMNxszFMAKR16V3v+I2c5I+E4RIX/BEVK5d18kxtbZfMh1qujHarMJsD fHSg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792574975; x=1793179775; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=5HOihMnDMJkcXyygoOReELhms2F3rzLvYN/eIk1Nou4=; b=OEF/15Q+BJmBttJMn7s/hBbn0RHEsalasga6nLSt6950h/bS779GRIGy3AJvECgIgf NmNAnO2qIeLGCST2P2TBmiRjEo5Ky8AwevkgPxQAiFawruxW8mKwRQC276ElPJIYLoTk +aAdC9emGvrEjMR39E24DW+x3qhH54bXWV9Mnc51wQi2qceq7fvP7yjx22d0QprEqEOn 8mC38lInFBPU19ylwD+o6wOcFgcYSNqA0WhPYKtnLNTulKWaZCSfnosgRKK+kqLEKPdv j6PM55plIKPcBa52/UhoZfGv5Kru6XTCfOYd1B4gRsnITEccpsba/B11LQnxXQ5T/d87 b17A== X-Gm-Message-State: AFq9FYKbc0RyhbJuwwEPkpoXEWIX4zLUiXqJA/9yySfgEyHZFD5dIrgG DNeH8vtYIICdzcNosbz7tcv84kbcv3kZMBFEclIbmN2Ve6SP5/su+3Xdgtk7xw== X-Gm-Gg: AYBFou3aFDtosetow//3Yz0mIqQD/cNEBpJjQzPgf8mWVWtFT8xBO6Zp2j6vsC6Goa7 ANu5pnCExfWBc9cY+9ZJJGZHvmTbtvRw3bV3r9xM/CBAzldy3hbDrKe8cnE2P9MtYiPzxrEoPCT iTGgd6ljHheauiea+WFHnd9WVINWaWFu3s/oGaIUbSIuav8mObKPYIGud5nOZ6rX1K9jyRbshAu U6HvetNZfX9QWzgz4N7TjTj1X90WOKUQG37BWVoJ1sqaDYhYhGHVh+koL9HV2yeWxQDk2+FVolM hojMuwPYZ6fJrLcWNZNI7VdrLDZ73SEuOldXNk/de1XcdLedQpwhhCIS2RgCVblZuojh+EGWe4s FOJdPVjRTUL3eBA5S/3F+hlHKCb2hSXkKL9WaGTRurHJXLZ2RpbzYTx3MLvA5LTylAxfCnhEuYM beFveU1ub1zeLYOHXohrNNZ7vx64DPEa7pDRI7xyz7p8zuLnAAJ+T5cpvLogR1M89uRUZbUHu3T 4fhjvc1uaZGS9j8rLbIwdea8+Erh+dSD5YsN6bDxikZ2rLXv6PX5TeUj3sTTdKCR6dV0nmG9Dfn irNmqKmivVhUnnLyxhTrBWLugu8ipAA= X-Received: by 2002:a05:7022:b054:10b0:18a:8164:ce4 with SMTP id a92af1059eb24-1909aadde56mr2158016c88.0.1792574975507; Wed, 21 Oct 2026 02:29:35 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id a92af1059eb24-19035c0c9a6sm4716458c88.3.2026.10.21.02.29.33 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 21 Oct 2026 02:29:35 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-python][blacksail][PATCH 14/44] python3-cbor2: upgrade 6.1.4 -> 6.1.5 Date: Wed, 21 Oct 2026 22:28:27 +1300 Message-ID: <20261021092857.3585453-14-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> References: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 21 Oct 2026 09:29:42 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131201 From: Ankur Tyagi Changelog: https://github.com/agronholm/cbor2/releases/tag/6.1.5 Signed-off-by: Ankur Tyagi --- .../python/{python3-cbor2_6.1.4.bb => python3-cbor2_6.1.5.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-python/recipes-devtools/python/{python3-cbor2_6.1.4.bb => python3-cbor2_6.1.5.bb} (87%) diff --git a/meta-python/recipes-devtools/python/python3-cbor2_6.1.4.bb b/meta-python/recipes-devtools/python/python3-cbor2_6.1.5.bb similarity index 87% rename from meta-python/recipes-devtools/python/python3-cbor2_6.1.4.bb rename to meta-python/recipes-devtools/python/python3-cbor2_6.1.5.bb index 6a894848d6..94d3f30dbb 100644 --- a/meta-python/recipes-devtools/python/python3-cbor2_6.1.4.bb +++ b/meta-python/recipes-devtools/python/python3-cbor2_6.1.5.bb @@ -3,7 +3,7 @@ LICENSE = "MIT" LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=a79e64179819c7ce293372c059f1dbd8" DEPENDS += "python3-setuptools-scm-native" -SRC_URI[sha256sum] = "01ecc79a28f33d17331943ce508fc1e21f4b06553c73f874f4c77120d72b2ef9" +SRC_URI[sha256sum] = "6eb06160c42315ac0c4ded461c7d84d92fa18c69d13d17fc1dfc1fae96580c95" inherit pypi python_setuptools3_rust cargo-update-recipe-crates ptest-python-pytest From patchwork Wed Oct 21 09:28:28 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101506 Received: from mail-dy1-f176.google.com (mail-dy1-f176.google.com [74.125.82.176]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.7506.1792574978375085558 for ; Wed, 21 Oct 2026 02:29:38 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=glBvIrsD; spf=pass (domain: gmail.com, ip: 74.125.82.176, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-dy1-f176.google.com with SMTP id 5a478bee46e88-3535bf8b3e0so997466eec.0 for ; Wed, 21 Oct 2026 02:29:38 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792574978; x=1793179778; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=yQg+0VGRSROtbeHPtiaaYx0eJ8t9+4O75AB5SIh9B0A=; b=glBvIrsDlcU1sXRvKPIPyeO8rhT03E0n3d/A/kQz9i9m8+7pik1xM7iu5E8zaZMrzT Qm7cV7uiDmR1KJLmH2+RQSfPBQZcjlec34AhgovATX1PI/fHrwBdma7snqlYIj1PwlOa /bXFsLs30d7fZC36osrtr9V1CQUl10EDUIpJy+qg9laMp/N7zvkC0LT3oDoITw0QRc66 bmh76rgWEJDA2Ast4ROL2aJ8yhVifPEwnJ/rDbMJGbwVqR19sHOBR2AMu/pLT0q5rtsY DD+oLSdgCxn64bvn8KTXJ5ukzjIyrKb1w/86rD9yPyTliOV7l4b8tMVxkUzFSGi+yjGj JMmw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792574978; x=1793179778; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=yQg+0VGRSROtbeHPtiaaYx0eJ8t9+4O75AB5SIh9B0A=; b=mkmsbaoJ6omqNLCKvElvaR3zm1drjmnX7w5WWJcTSlXy2rypDeAEuZbD46vPSSvrM6 +gTaYSLuYgzUdAZY8lS93YF20FlRk7u57M476UJ/IvcAzvC/cBRe1o2RaIvOYBx/MYwx thcpcPgrMR5VXOBlVxTU80axQCTv0eev5DlDJO4pFoDyDVcrXikyI+y+elb99XkpH4WY zVQqsFE2qmR2agiM/Andds7yI1q/jgFelycKcAZVd7aRQGnUKzEh1GBuuwbOXDiFnxm1 XQnNkrexnBSdyuGRiQCXtVufgvN0JpcUFc5CnVzLdV8yiahrTgUUqOAL8jT9QDexOWne Xtsg== X-Gm-Message-State: AFq9FYJGvvigFJvUjB8+ia69NGskpH0lq/n66WZUKSchOobBR3QdAIto VvtKxdlBRs1J+/1d4MPrwMvlcel+vX6vJsrXbP4eP7iCGxGW+kbHRUqE9jaFjA== X-Gm-Gg: AYBFou3OAib0WLvy7soa1lOJWlGtrUNmlQutHgfRQsoHs6IKdIv4Vp/Fo/eeX8MixdQ xH/OMhi6hJq6Xuzt7DapMYHqkdxrSrdSllcE7h5RIgMPz1PjFieO1/ru02poEk5VXm9toyJaMVc MQHfkf3j/qj8WmwbMrWUijM29lh4284R4+3z3YyEzgwJwFTcU+N6eAAWVTibLXVqrwJRsp+0HEi SVuk7cgFgDIr5E4Heu/oeaVP0YDTDk2kcWjKq+1C3C8RYaPrmh27L55ihDNhRPITXVA7y/pIEDQ L87ZnTnzE0IBX1VrfdeMmPP3Aei4/v/fYBAWcf/6YUu68eCHuTtYYofxjDFv2mMUU90TCWfGXF8 hyppdAIPblfQIfZdA3KKG+y6yJ7TUuchQGrU+nKOAofNF8VGXaFGK63dM5vY1DgjRIfKLNKDi7E z6HSkjmM1DpTKnJfHk0HpglyypaosBY7Kx42wC+Da94vuXEFMzl4JdapqHo9KNTR+SrSLdudJos Hco54ugPFzOnyQyQ2kBwocHha7bBjOz+cXSOp3dwo04sAwIrwDQwFVckRnv7g6yTnLmNWK0lcKB AWABeJdSddT+L5Myeks8dX69Yzcf/jU= X-Received: by 2002:a05:701b:281b:b0:14d:baf5:c40e with SMTP id a92af1059eb24-190a437d5c0mr1790019c88.8.1792574977631; Wed, 21 Oct 2026 02:29:37 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id a92af1059eb24-19035c0c9a6sm4716458c88.3.2026.10.21.02.29.35 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 21 Oct 2026 02:29:37 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-networking][blacksail][PATCH 15/44] samba: ignore CVE-2026-2340 Date: Wed, 21 Oct 2026 22:28:28 +1300 Message-ID: <20261021092857.3585453-15-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> References: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 21 Oct 2026 09:29:42 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131202 From: Ankur Tyagi Also confirmed in the release notes[1] Details: https://nvd.nist.gov/vuln/detail/cve-2026-2340 [1]https://www.samba.org/samba/history/samba-4.23.8.html Signed-off-by: Ankur Tyagi --- meta-networking/recipes-connectivity/samba/samba_4.23.11.bb | 1 + 1 file changed, 1 insertion(+) diff --git a/meta-networking/recipes-connectivity/samba/samba_4.23.11.bb b/meta-networking/recipes-connectivity/samba/samba_4.23.11.bb index e498b30bcb..c0d8fe4a00 100644 --- a/meta-networking/recipes-connectivity/samba/samba_4.23.11.bb +++ b/meta-networking/recipes-connectivity/samba/samba_4.23.11.bb @@ -46,6 +46,7 @@ UPSTREAM_CHECK_REGEX = "samba\-(?P\d+\.\d+(\.\d+)+).tar.gz" inherit systemd waf-samba cpan-base perlnative update-rc.d perl-version pkgconfig CVE_STATUS[CVE-2011-2411] = "not-applicable-platform: vulnerable only on HP NonStop Servers" +CVE_STATUS[CVE-2026-2340] = "fixed-version: fixed since v4.23.8" # remove default added RDEPENDS on perl RDEPENDS:${PN}:remove = "perl" From patchwork Wed Oct 21 09:28:29 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101507 Received: from mail-dl1-f43.google.com (mail-dl1-f43.google.com [74.125.82.43]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.7508.1792574980624019391 for ; Wed, 21 Oct 2026 02:29:40 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=S/+4rCQb; spf=pass (domain: gmail.com, ip: 74.125.82.43, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-dl1-f43.google.com with SMTP id a92af1059eb24-1517bda04a0so521421c88.0 for ; Wed, 21 Oct 2026 02:29:40 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792574980; x=1793179780; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=SNQsxVmwqPVTKy5cEzPnePID1JoMFJ87q7zrIsa1rvQ=; b=S/+4rCQbRAHg1REWo97VXTC7wIIk9iszPh/ki9sUSnKw0uIApr5fsAAIc4g4cSp0xP A09IyYrhb52ayRyjd0ikWuCLLb2BB0GwRpLgxHQyTAyiQ7xdGoPF5TEggSaDXTHdBG9C eh8x13wisZA2X5ovHKI+Ihm8P0F0mhjLRNm8QsoX1Z/8YiZizU+9zPjAW6bfjdbyF2rO s7pljfgER0cee+LbFxEFm8CUx9gBmyL/gPDSmAj0xNalSLTimfe9kenXiNxdsUTRwzjY mL+Zq1jikzXye66uGvUcCSJr8HTVt5CfAh2M8jWmJfukbaWmOfS59WCkfYbmD3sNRPaW WHhQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792574980; x=1793179780; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=SNQsxVmwqPVTKy5cEzPnePID1JoMFJ87q7zrIsa1rvQ=; b=Xlnq6iE5a67CSCw7iVL0R5erIg2asFEMMPUkUpoOSQlHZfE6/vfrQaMMKSDal/BV6G WGAoIBwiUldD1VFvGq/AsguS/Z6uH31sEeXAz3tjRXSx5qT260IoPxuJL9f/VQkB6U0U YwAeqPgZhbkOEv1FN8l2Sfrej663xN6xGb3PtjXZKhAB0czwMI0h6KNxmzZh5b+EjTgR g1j52p1p5lPL9GJjZWta5aiHhh4U/DSlMZF/juDneMsxlPMJsuXMRVCrIgf3eQto6YSn UTnzSDVxrvOBZodizMrl02bs6zTVKYk0ufunoEuO7PP8sA/ouSPNpqpICqsd2+z8h2sj EDLw== X-Gm-Message-State: AFq9FYKwJzcI1ml+6cgNioHj0QpsTl1tlNtqd8T/gQTdmEkzAT7lqSr/ kL9MRnaeEsedBZnx2C3vhojQyBp+w6l3bo42zeSaI4PyEjjmUphxyy9MshEdQQ== X-Gm-Gg: AYBFou0TTR8h4qBJnDqBJoxN90P3L/XME5uJ+Uld2Exgak/VzKJD/pe5pG892tGNETh nlCCOZyv0r23WIa/vSjt/YaqYV8GY+lYkt4t606LMSBWb6OhqkPAKVrpYi6GEbmzy7PVLxyAOqG FxjtjDGst2NGa3KWZ6hZgmd7PvfpTK8fBwG9VdfrShbZES+EdTOM6uhrkyM5AucUeRQnzhHEIPa 2+X64V1TzxTJ7OD/FWbWarsq0V7dcSOnNlkRJMiOImM0y13rhOXahJCHNadcyBq+kLz4tCU6Cv4 svqLHckX88oaaVR3GIc5us2al3DJbO9mlEV2eM1Qj3xlqNkPo/9AtYZcOC7SvnbOzR9FtA6XHJC CrFIoMNoL+yI1pxK+sHwzBScZSrdNzAulCNY7n4eAYkzcqGtkBVetmEfRAZD1JWBgHk73nL3egf JW/XfMbWgZCgHdUV8U2FI61gQQfF2YbXkjhIOcPcJWYXiwNZX44GFas+lM8xFCssb/oDvSb9cpi 4CmE6xVhTllNbjxRAGRt4TzGyXgbq34QZcPaBVsqHRu3nEC+cMi1mcG2G9DLesfXWoJ3dtnG88O 8W3vu3FyHU+tq+kSOI/2gdY/+XIYtfbi8A== X-Received: by 2002:a05:701b:4551:20b0:144:fb87:5b91 with SMTP id a92af1059eb24-190a7c21caemr1732793c88.44.1792574979878; Wed, 21 Oct 2026 02:29:39 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id a92af1059eb24-19035c0c9a6sm4716458c88.3.2026.10.21.02.29.38 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 21 Oct 2026 02:29:39 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-oe][blacksail][PATCH 16/44] rapidjson: mark CVE-2024-38517 fixed Date: Wed, 21 Oct 2026 22:28:29 +1300 Message-ID: <20261021092857.3585453-16-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> References: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 21 Oct 2026 09:29:42 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131203 From: Ankur Tyagi Commit mentioned in the NVD is part of the current version: $ git log HEAD --oneline | grep 8269bc2b 8269bc2b Prevent int underflow when parsing exponents Details: https://nvd.nist.gov/vuln/detail/cve-2024-38517 Signed-off-by: Ankur Tyagi --- meta-oe/recipes-devtools/rapidjson/rapidjson_git.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta-oe/recipes-devtools/rapidjson/rapidjson_git.bb b/meta-oe/recipes-devtools/rapidjson/rapidjson_git.bb index fa20b4d448..f565f0a175 100644 --- a/meta-oe/recipes-devtools/rapidjson/rapidjson_git.bb +++ b/meta-oe/recipes-devtools/rapidjson/rapidjson_git.bb @@ -21,3 +21,5 @@ EXTRA_OECMAKE += "-DLIB_INSTALL_DIR=${libdir}" ALLOW_EMPTY:${PN} = "1" BBCLASSEXTEND = "native nativesdk" + +CVE_STATUS[CVE-2024-38517] = "fixed-version: fixed in the current v1.1.0" From patchwork Wed Oct 21 09:28:30 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101508 Received: from mail-dl1-f54.google.com (mail-dl1-f54.google.com [74.125.82.54]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.7540.1792574983102043325 for ; Wed, 21 Oct 2026 02:29:43 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=bhLYb4/N; spf=pass (domain: gmail.com, ip: 74.125.82.54, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-dl1-f54.google.com with SMTP id a92af1059eb24-15ea896ddc8so697166c88.0 for ; Wed, 21 Oct 2026 02:29:43 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792574982; x=1793179782; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=+hjCoE3wqJAP1jVVZ5Q9Yzp8svxJ5C3ltuzwKYT1jxs=; b=bhLYb4/NwLnWF9x/mBlGneqYTp7L4absFX81Krb7VJ1oAfDWb6gOKW+gXEnIwsBaTM SUhwuPWiZv2Tj4fVYEza5XD1cB02vDLmVZdXjzMeq5yHkTXempxyqht9vxFy3GQ1Cnbn Sl/nX+S8fEr+JPDwegRiXppjCj1RpVZesR1kqGBAdFBZHhZgrHZXljKTwbtYdihPG0Wb 3/4yGNzqvlDWI0LF4kdJrM8x7x8/EMowoZ1HBn9CxkIVm/vvlnasOKrXKVNrsbGzPIlY oqr95hg31TgEv1/NWZtCDmBfcL8cQKuSBlWyNU5IH0q5BBadjhrgDUmrqGTg+6TMWDsN yfpw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792574982; x=1793179782; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=+hjCoE3wqJAP1jVVZ5Q9Yzp8svxJ5C3ltuzwKYT1jxs=; b=WxFsDt7d9jwdXdf2lZTsI0dze+5WfGVnF/f3bulq1UkGPhFA0viTPUFS81zmi87cxZ McjfeILwpX9QKAjOjY7FSxmZA2OYkEP6WLtwbVgNL6Fcng6kej+XS5tNHSCyzV1BDapK 3wIEI7sI45Mpdm/2/gK5rH5iqca39jYSod7/2gyEX/RcYnFzjwCwgMhdaCS4s324I6wu mMOpt296r+n/dM6tkONwKZ8dLGElrz0wGDaiCOC+0ILNCRzWG76v16hpFtf0aKOF5eXX 8Md//xiiDhkl818r7g1u4GsVv5uT4d6HO4nR1LTY+bwDeJEU4suuFsToU7PuTfN//7+W B3BQ== X-Gm-Message-State: AFq9FYLRvVVjeFzlMAxhtxduqIq8uVJswpX0SsbfdR8SCe3aRmcXIRtv UdMXFTdpNPgTOo8atfaCz8kVDsif8YEBFxS5o9wPYtXYAVrQxsp4wui+7eOvSg== X-Gm-Gg: AYBFou0NKJ+oYSqT3ouZTcND5/pzQphAfsAn8Z/ekyjP9TUXCx827q6D56hC/2ZbfYj WaeTi0sQ87+6eiR/4NlgwVoJlggPw1ojBTrfQ0hcMSuTeQrowXN+ohPxQPBaIZdYsc4L5aA+Ejk Zp7e+8h/+YkMnbHns6xnhpTr28A6EXtq813s2rwcg55dt7EQrQHEvGF9o67vXxtqZpd+uKs3+cd hiz+sh/OtYI6CcEnaLj1DkHw2v0CbjHbpNb/Dtue0mUIAhZq53zXQJz77UBiFHabOsWT7f3R3fo XPs+5kfYRxdi9uT/Zb+WmrNQdaAVA8ft5fjwd9lcefyVg8DoHyoW4rpMoCyJl2+rZWDVy8gN3Pv EP+j5nzzBraSNUZXSMsBSM6D/QqQ7Cyt3hIpRaWcXB+GnYEx5Sq5GmtkB+T+umJdb0UdJJZhLi+ CspKtKjSj0WDEtoFf4mEuvNSZ2e9gPK36E7D7IYUXuaKLyzhlvO+DV6/YkvrlRGYrZvvN3ZQVtf jY6AaKo0dijBf9ftgtzQOr0ZiWUay1T0bY7d7OiydwN+XApTXWjounNc+unD99w/mpy2g9gzDPn tIkfM/eFLIlqjq+cFSHN1vBbx/Wjrzw9Lw== X-Received: by 2002:a05:7022:7a9:b0:187:eb7f:b8f with SMTP id a92af1059eb24-190a50efe13mr2711325c88.13.1792574982321; Wed, 21 Oct 2026 02:29:42 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id a92af1059eb24-19035c0c9a6sm4716458c88.3.2026.10.21.02.29.40 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 21 Oct 2026 02:29:41 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-oe][blacksail][PATCH 17/44] psqlodbc: patch CVE-2026-109448 Date: Wed, 21 Oct 2026 22:28:30 +1300 Message-ID: <20261021092857.3585453-17-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> References: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 21 Oct 2026 09:29:52 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131204 From: Ankur Tyagi Backport the commit identified by Debian[1] Details: https://nvd.nist.gov/vuln/detail/cve-2026-109448 [1]https://security-tracker.debian.org/tracker/CVE-2026-109448 PTEST pass: root@qemuarm64:~# ptest-runner psqlodbc START: ptest-runner 2026-10-17T09:22 BEGIN: /usr/lib/psqlodbc/ptest ... DURATION: 43 END: /usr/lib/psqlodbc/ptest 2026-10-17T09:23 STOP: ptest-runner TOTAL: 1 FAIL: 0 Signed-off-by: Ankur Tyagi --- .../psqlodbc/files/CVE-2026-109448.patch | 243 ++++++++++++++++++ .../psqlodbc/psqlodbc_18.00.0002.bb | 1 + 2 files changed, 244 insertions(+) create mode 100644 meta-oe/recipes-dbs/psqlodbc/files/CVE-2026-109448.patch diff --git a/meta-oe/recipes-dbs/psqlodbc/files/CVE-2026-109448.patch b/meta-oe/recipes-dbs/psqlodbc/files/CVE-2026-109448.patch new file mode 100644 index 0000000000..12f6cdd1d8 --- /dev/null +++ b/meta-oe/recipes-dbs/psqlodbc/files/CVE-2026-109448.patch @@ -0,0 +1,243 @@ +From 5c9443fb0c8c0e263e1f8d0298987e91c4f5ccea Mon Sep 17 00:00:00 2001 +From: Dave Cramer +Date: Mon, 12 Oct 2026 11:47:08 -0400 +Subject: [PATCH] Merge commit from fork + +The APD, IPD and put-data binding counts are SQLSMALLINT. Binding +parameter 32768 wrapped the count to -32768, so execution failed with +07002 even though every parameter was bound; binding parameter 32769 +then extended the arrays with a memset starting at index -32768, +writing zeros up to 1.25 MiB before the start of the APD array (and +likewise for the IPD and put-data arrays), which corrupts the heap. + +SQLNumParams and SQL_DESC_COUNT are SQLSMALLINT too, so 32767 is the +largest parameter count ODBC can describe. PGAPI_BindParameter now +returns 07009 for parameter numbers outside 1..32767, which also covers +parameter number 0 for applications that call the driver without a +driver manager. + +New param-count-limit test binds 32767, 32768 and 32769 parameters. + +Assisted-By: Claude +(cherry picked from commit 86e4418e9553aa0891315db7531f8cd31eb1575e) + +CVE: CVE-2026-109448 +Upstream-Status: Backport [https://github.com/postgresql-interfaces/psqlodbc/commit/86e4418e9553aa0891315db7531f8cd31eb1575e] +Signed-off-by: Ankur Tyagi +--- + bind.c | 12 +++ + test/expected/param-count-limit.out | 12 +++ + test/src/param-count-limit-test.c | 142 ++++++++++++++++++++++++++++ + test/tests | 1 + + 4 files changed, 167 insertions(+) + create mode 100644 test/expected/param-count-limit.out + create mode 100644 test/src/param-count-limit-test.c + +diff --git a/bind.c b/bind.c +index 3b566ec..b3e5ca3 100644 +--- a/bind.c ++++ b/bind.c +@@ -16,6 +16,7 @@ + /* #include */ + #include + #include ++#include + #include "bind.h" + #include "misc.h" + +@@ -57,6 +58,17 @@ PGAPI_BindParameter(HSTMT hstmt, + } + SC_clear_error(stmt); + ++ /* ++ * The APD, IPD and put-data counts are SQLSMALLINT, like SQLNumParams ++ * and SQL_DESC_COUNT, so a larger parameter number would wrap the count ++ * negative and the next binding would write before the bindings array. ++ */ ++ if (ipar < 1 || ipar > SHRT_MAX) ++ { ++ SC_set_error(stmt, STMT_BAD_PARAMETER_NUMBER_ERROR, "Invalid parameter number for PGAPI_BindParameter.", func); ++ return SQL_ERROR; ++ } ++ + apdopts = SC_get_APDF(stmt); + if (apdopts->allocated < ipar) + extend_parameter_bindings(apdopts, ipar); +diff --git a/test/expected/param-count-limit.out b/test/expected/param-count-limit.out +new file mode 100644 +index 0000000..623bcbf +--- /dev/null ++++ b/test/expected/param-count-limit.out +@@ -0,0 +1,12 @@ ++connected ++APD SQL_DESC_COUNT=-1: error SQLSTATE=07009 ++APD bind 1 after SQL_DESC_COUNT=-1: ok ++IPD SQL_DESC_COUNT=-1: error SQLSTATE=07009 ++IPD bind 1 after SQL_DESC_COUNT=-1: ok ++bind 0: error SQLSTATE=07009 ++32767 params, bind 32767: ok ++32767 params, execute: ok ++32767 params, result 1 ++32768 params, bind 32768: error SQLSTATE=07009 ++32769 params, bind 32768: error SQLSTATE=07009 ++disconnecting +diff --git a/test/src/param-count-limit-test.c b/test/src/param-count-limit-test.c +new file mode 100644 +index 0000000..e9554cd +--- /dev/null ++++ b/test/src/param-count-limit-test.c +@@ -0,0 +1,142 @@ ++/* ++ * Test the limits on parameter numbers and descriptor counts. The driver ++ * keeps parameter binding counts in SQLSMALLINT, so SQLBindParameter with a ++ * parameter number above 32767, or SQL_DESC_COUNT set negative, used to ++ * wrap the count negative and make the next binding write zeros before the ++ * start of the bindings array. ++ */ ++#include ++#include ++#include ++ ++#include "common.h" ++ ++#define MAX_PARAMS 32767 ++ ++static void ++print_state(const char *what, SQLRETURN rc, SQLSMALLINT htype, SQLHANDLE h) ++{ ++ SQLCHAR state[6] = ""; ++ SQLINTEGER native; ++ SQLCHAR msg[256]; ++ SQLSMALLINT len; ++ ++ printf("%s: ", what); ++ if (SQL_SUCCEEDED(rc)) ++ { ++ printf("ok\n"); ++ return; ++ } ++ SQLGetDiagRec(htype, h, 1, state, &native, msg, sizeof(msg), &len); ++ printf("error SQLSTATE=%s\n", (char *) state); ++} ++ ++/* SELECT 1 WHERE 1 IN (?, ?, ..., ?) with nparams markers, all bound to 1 */ ++static void ++run_with_params(int nparams) ++{ ++ SQLRETURN rc; ++ HSTMT hstmt = SQL_NULL_HSTMT; ++ SQLINTEGER one = 1; ++ SQLINTEGER result = 0; ++ char *sql, *p; ++ char what[64]; ++ int i; ++ ++ rc = SQLAllocHandle(SQL_HANDLE_STMT, conn, &hstmt); ++ CHECK_CONN_RESULT(rc, "SQLAllocHandle failed", conn); ++ ++ sql = malloc(32 + 2 * nparams); ++ p = sql + sprintf(sql, "SELECT 1 WHERE 1 IN ("); ++ for (i = 0; i < nparams; i++) ++ { ++ if (i > 0) ++ *p++ = ','; ++ *p++ = '?'; ++ } ++ strcpy(p, ")"); ++ ++ for (i = 1; i <= nparams; i++) ++ { ++ rc = SQLBindParameter(hstmt, (SQLUSMALLINT) i, SQL_PARAM_INPUT, ++ SQL_C_SLONG, SQL_INTEGER, 0, 0, &one, 0, NULL); ++ if (!SQL_SUCCEEDED(rc)) ++ break; ++ } ++ snprintf(what, sizeof(what), "%d params, bind %d", nparams, i <= nparams ? i : nparams); ++ print_state(what, rc, SQL_HANDLE_STMT, hstmt); ++ ++ if (SQL_SUCCEEDED(rc)) ++ { ++ rc = SQLExecDirect(hstmt, (SQLCHAR *) sql, SQL_NTS); ++ snprintf(what, sizeof(what), "%d params, execute", nparams); ++ print_state(what, rc, SQL_HANDLE_STMT, hstmt); ++ } ++ if (SQL_SUCCEEDED(rc)) ++ { ++ rc = SQLBindCol(hstmt, 1, SQL_C_SLONG, &result, 0, NULL); ++ CHECK_STMT_RESULT(rc, "SQLBindCol failed", hstmt); ++ rc = SQLFetch(hstmt); ++ CHECK_STMT_RESULT(rc, "SQLFetch failed", hstmt); ++ printf("%d params, result %d\n", nparams, (int) result); ++ } ++ ++ free(sql); ++ SQLFreeHandle(SQL_HANDLE_STMT, hstmt); ++} ++ ++/* Set SQL_DESC_COUNT of the statement's APD or IPD to -1, then bind */ ++static void ++negative_desc_count(SQLINTEGER desc_attr, const char *desc_name) ++{ ++ SQLRETURN rc; ++ HSTMT hstmt = SQL_NULL_HSTMT; ++ SQLHDESC hdesc; ++ SQLINTEGER one = 1; ++ char what[64]; ++ ++ rc = SQLAllocHandle(SQL_HANDLE_STMT, conn, &hstmt); ++ CHECK_CONN_RESULT(rc, "SQLAllocHandle failed", conn); ++ ++ rc = SQLGetStmtAttr(hstmt, desc_attr, &hdesc, 0, NULL); ++ CHECK_STMT_RESULT(rc, "SQLGetStmtAttr failed", hstmt); ++ ++ rc = SQLSetDescField(hdesc, 0, SQL_DESC_COUNT, (SQLPOINTER) (SQLLEN) -1, 0); ++ snprintf(what, sizeof(what), "%s SQL_DESC_COUNT=-1", desc_name); ++ print_state(what, rc, SQL_HANDLE_DESC, hdesc); ++ ++ rc = SQLBindParameter(hstmt, 1, SQL_PARAM_INPUT, SQL_C_SLONG, ++ SQL_INTEGER, 0, 0, &one, 0, NULL); ++ snprintf(what, sizeof(what), "%s bind 1 after SQL_DESC_COUNT=-1", desc_name); ++ print_state(what, rc, SQL_HANDLE_STMT, hstmt); ++ ++ SQLFreeHandle(SQL_HANDLE_STMT, hstmt); ++} ++ ++int ++main(int argc, char **argv) ++{ ++ SQLRETURN rc; ++ HSTMT hstmt = SQL_NULL_HSTMT; ++ SQLINTEGER one = 1; ++ ++ test_connect(); ++ ++ negative_desc_count(SQL_ATTR_APP_PARAM_DESC, "APD"); ++ negative_desc_count(SQL_ATTR_IMP_PARAM_DESC, "IPD"); ++ ++ rc = SQLAllocHandle(SQL_HANDLE_STMT, conn, &hstmt); ++ CHECK_CONN_RESULT(rc, "SQLAllocHandle failed", conn); ++ rc = SQLBindParameter(hstmt, 0, SQL_PARAM_INPUT, SQL_C_SLONG, ++ SQL_INTEGER, 0, 0, &one, 0, NULL); ++ print_state("bind 0", rc, SQL_HANDLE_STMT, hstmt); ++ SQLFreeHandle(SQL_HANDLE_STMT, hstmt); ++ ++ run_with_params(MAX_PARAMS); ++ run_with_params(MAX_PARAMS + 1); ++ run_with_params(MAX_PARAMS + 2); ++ ++ test_disconnect(); ++ ++ return 0; ++} +diff --git a/test/tests b/test/tests +index 5074bca..c8af1ab 100644 +--- a/test/tests ++++ b/test/tests +@@ -63,6 +63,7 @@ TESTBINS = exe/connect-test \ + exe/descriptors-free-test \ + exe/primarykeys-include-test \ + exe/interval-overflow-test \ ++ exe/param-count-limit-test \ + exe/conn-settings-test \ + exe/percent-decode-test \ + exe/dbms-version-test \ diff --git a/meta-oe/recipes-dbs/psqlodbc/psqlodbc_18.00.0002.bb b/meta-oe/recipes-dbs/psqlodbc/psqlodbc_18.00.0002.bb index ae1d603e1d..9756bcfad2 100644 --- a/meta-oe/recipes-dbs/psqlodbc/psqlodbc_18.00.0002.bb +++ b/meta-oe/recipes-dbs/psqlodbc/psqlodbc_18.00.0002.bb @@ -23,6 +23,7 @@ SRC_URI = "git://github.com/postgresql-interfaces/psqlodbc.git;protocol=https;br file://psqlodbc-remove-some-checks-for-cross-compiling.patch \ file://psqlodbc-donot-use-the-hardcode-libdir.patch \ file://psqlodbc-fix-for-ptest-support.patch \ + file://CVE-2026-109448.patch \ file://run-ptest \ " From patchwork Wed Oct 21 09:28:31 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101509 Received: from mail-dl1-f50.google.com (mail-dl1-f50.google.com [74.125.82.50]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.7541.1792574985269074780 for ; Wed, 21 Oct 2026 02:29:45 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=rS3w/c2m; spf=pass (domain: gmail.com, ip: 74.125.82.50, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-dl1-f50.google.com with SMTP id a92af1059eb24-17bc533fda3so633526c88.1 for ; Wed, 21 Oct 2026 02:29:45 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792574985; x=1793179785; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=dfAWJji5B93Z81VjOHA1zXK6H/EHUFsw2F280LxpAfM=; b=rS3w/c2mxTsJJWAJKWj0VIN6Kv7d4kHcMG/q7fbNDJNVIQHf/NsktWKAfsuuEdlivh CMbN/rKgFSWTcHOdTffh1ocZsEXZpkRo1zMMAAjtegr5o2lxCBNJ5jPljzwIkaOId4Iz jouldwbHGVTdNCYgGbzlRmlFto3WdhyaRwqIhcECaZKHUQSAP/F6zcyRmAgMx7QCKu6J lfjHqHS++IcS7waKVbsnSwY8A/TKThrFXb+YdEVy+Hu+L+vbAhCpQA/KBNS/qMgLO+fJ WFvkZxZ3mWNVBjzOAiv+Sv8qT8jFASGJU9HrkdWrsBdoPG5NZngTnaP42q4DT07aNTle 8gRw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792574985; x=1793179785; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=dfAWJji5B93Z81VjOHA1zXK6H/EHUFsw2F280LxpAfM=; b=1xP5jSH0C949cY5ZNLyDSbOL3kVx/jnj852aUdb6xrPM4FbmdvTVfeWxtZB1T6JnRj RJqE5wVQIS/T+M525FTFCgBFYlsL1/0YbW3JUJ1aQSof310+JAjnHxrCnCU7Zj4GTBFY MJUVQI3g7kVLkQn5VCEyKEYE7ccHxfilipWxtMa6u2PTSBinxR4qn3QVZ0gGL8JXWitk bAtgSZ+ei2VWVjZuUHmt7jVhIkHicBgeMI1+akK+ejTXOQuBM0/INhAWhEWe6S55obx1 vjlqHENO73mhPaFzd049WV3LGCSz0eKA05xiwVNY4cXW4pXYcLrxXPl4DDivHyQWJqcM L8HQ== X-Gm-Message-State: AFq9FYIHuR1qvK6d8Xxzi1REaLcuZT3eaehcf6xzJYbv3VWi/1DH/jHO d5/I4kjCPV9xJD5hpEgD5vLWicwoC74fdmk8TlJsHizGCIelW3jQKgPU4lhnMw== X-Gm-Gg: AYBFou0De6PUVpgEtmoiFaFaBCq1rHf8F8cRJ8TOrhJJumAGXk6yk4eePXcYdS/bogU hIvnaP0KjR0LKnKvaEInusPeRS8so4Ivc2zNLmfg6yP0Z9E6Z1VEVCECZaZU1meUAv1PzmeGEoy 5hj2mel/WJjpk0ZCEK3FHTWRt/pRKQNyN2kJi8xUnKiJcdHoFMBbWWkfrHn3eJusHmy7HJFootd eS2+40BFAImvBLMToKdv4ydAZ3ODAaMDzGO4bbVMX+3AJExPmSxmkjSdUwd/vxkV2nfXyp8z/Ii klTu/F5yqwxwEnoLmk+N9LgDOtTZRaBdxXh7F/mHsx9mbbltWQ7PGEVvZtPQOlOrMBxNw65D6lP J6gLNs6VU57OvjhU6wmtI3IKr6RDUKCIVkPUhTaTUAdT8SPZIpkIIOgTRU9U4hFUpxW9H8ANTzS 1vGXdMYAlixnrnQ4NNqi+uL7iOlEsoYax/7Vf+Yz0x50eB9nzwdau0l2F/cjVPxO3sWFwNOfnxU ErUDH5lNLZCLhu/ZkpU7bX8tkik0OskI6vltfVyt9a1QcgrgqRgeNjKr1/23aNah3b6mM8lem9t ST/0aa4Y9LfYDUgiWf89t8S5lFuYlms= X-Received: by 2002:a05:7022:ea56:20b0:170:64b:b388 with SMTP id a92af1059eb24-190a8f51921mr1899492c88.46.1792574984588; Wed, 21 Oct 2026 02:29:44 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id a92af1059eb24-19035c0c9a6sm4716458c88.3.2026.10.21.02.29.42 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 21 Oct 2026 02:29:44 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-networking][blacksail][PATCH 18/44] proftpd: mark CVE-2026-53994 fixed Date: Wed, 21 Oct 2026 22:28:31 +1300 Message-ID: <20261021092857.3585453-18-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> References: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 21 Oct 2026 09:29:52 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131205 From: Ankur Tyagi Debian[1] identified the issue[2] associated with this CVE. Changelog[3] confirms the resolution. Details: https://nvd.nist.gov/vuln/detail/cve-2026-53994 []https://security-tracker.debian.org/tracker/CVE-2026-53994 []https://github.com/proftpd/proftpd/issues/2115 []https://github.com/proftpd/proftpd/blob/v1.3.9b/NEWS#L35 Signed-off-by: Ankur Tyagi --- meta-networking/recipes-daemons/proftpd/proftpd_1.3.9d.bb | 1 + 1 file changed, 1 insertion(+) diff --git a/meta-networking/recipes-daemons/proftpd/proftpd_1.3.9d.bb b/meta-networking/recipes-daemons/proftpd/proftpd_1.3.9d.bb index 81a7094359..5c194ebb23 100644 --- a/meta-networking/recipes-daemons/proftpd/proftpd_1.3.9d.bb +++ b/meta-networking/recipes-daemons/proftpd/proftpd_1.3.9d.bb @@ -26,6 +26,7 @@ CVE_VERSION_SUFFIX = "alphabetical" CVE_STATUS[CVE-2001-0027] = "fixed-version: version 1.2.0rc3 removed affected module" CVE_STATUS[CVE-2021-47865] = "upstream-wontfix: it is not a vulnerability but inproper configuration" +CVE_STATUS[CVE-2026-53994] = "fixed-version: fixed since v1.3.9b" EXTRA_OECONF += "--enable-largefile INSTALL=install" From patchwork Wed Oct 21 09:28:32 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101510 Received: from mail-dy1-f174.google.com (mail-dy1-f174.google.com [74.125.82.174]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.7510.1792574987909914370 for ; Wed, 21 Oct 2026 02:29:47 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=W5HAGtgJ; spf=pass (domain: gmail.com, ip: 74.125.82.174, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-dy1-f174.google.com with SMTP id 5a478bee46e88-3514b90bb89so1370706eec.1 for ; Wed, 21 Oct 2026 02:29:47 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792574987; x=1793179787; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=wWghLus5FIsI1p2bO0m9DN1k5gCt8m3ix9byWCCur2o=; b=W5HAGtgJmxKYQtfQnk0ooAyu0/Mf5Q4u9XSxshrF9vfbODQYpHnFFHsCP5NMp7MlYx KHDLjZSI1DA0t8584D15Jb/4KnsH8OxqECSQ3d3edW5CLRZdEsIYIy3taKwfEdVRtPcq nzU3/aErkstDSehh3N1IrTNobqR+5VP79R7Sa2O+lCjxZfSMq9qG8TpfBY5ysiKk9P+T 8wcfR7WMUfnpHfLxK/g3OrFrM6zI0qDVin3upsXklPMPGZ9dK9LvVu6vyu+oLFNghwNc Tovh4yz5481iDuE47PXk+yIGIZWDU5aFhsM4Qb5/4qY65qeTH7/dEAzfVtCQpUZCw9W+ F+Sg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792574987; x=1793179787; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=wWghLus5FIsI1p2bO0m9DN1k5gCt8m3ix9byWCCur2o=; b=dSxRdiuKd0XNiWCEeDVRNXCFArJRFYCKV5GOYCb8aJbRgGelcH2Mfkf8DBhsJRwINS kasgaPptsr3kAHthwkpNUJUQKRyK/J+4PX3Wfv2wvrJqK+XDTDrPnycXAHsyJn2MqNzx 1qxvZJz3Mlt2Fr4uL5r/BMicfamgFFh6fMj26/RpL8zeZf9JJ0NsMxDijGzMQp5FgSKx Y6DGQnJuulvNVXq9bTXR/KuNV/PyX5OKYlUlPg2F1Zlgm2yk1215Sqb/amDzeyWgskMh hu4xh4iOWnnTNlrQxbpPQZGuneNQUdr1nDPDDgpfUpGzg1eCk9/sxEPOE/UrM70OLWpF AU+Q== X-Gm-Message-State: AFq9FYIQk3qSe2wIG079KId1JeVOEWyEobEmlhxfXo1jXtiRMltudQ42 dFK5bS7X9RluGPBejlP22GrlqLGCpAwtcqFXm38FFDdqkyyeZZdcrQHl5e4gGg== X-Gm-Gg: AYBFou1nuE/cd42A5flYBKrotP90hCFDvjlBwFOpj0oLPuiYK698TNcr1x0lBn3dGDz GalhNpXXPRQ3k1FvkXvBdD43q5bKkcaoA7L7oT9DVfmbHNSCWIyBJKh7K5bmgf76Bm6KwqNtN7l nE3i9KyDsORYLDvzLZbrJPP5RCT8Wn/7y6YRP/rJTi3PMPBXDKwJdT8uhOq4xDxQ1JJOdJFijA+ K9tn/S6XzqIsnOhsFq4ZLFDdBvenqVwCSMYzZFS8xRw6LARGhastuiMYz1CxPfV17BJxkabgOOW A77SSxjGk4CvSQ15DaLMKxRuLpxQYgoKZSBtTfUXmh4uf33hfXfBQ8ZbhIdLUQ+gLS0uFhCTH3T deHP+FFoL0tbckqUGnwz0MKsbSZCU89DpWBG0mGkGnk3X8fO30jlKPJ+sJmUNgkPmXD/clLD0wO u+j9W5n+zMgc9o7RzKqtMyLUJTtpKCAGaOhuB4O7FED6O7+xSwCl1R3pUPCoR5DohL9D48ZDYs5 VBgU7850CjGklnIijhC302B9Q4+zeriCJK0svlcyUyWmpCPoRL6EelFdg5bHproOrYAKTeYy/a3 LeeYvVALaRJcBllM7xlYfTzNJ3fFnMc= X-Received: by 2002:a05:701b:260d:b0:14a:8df8:56c5 with SMTP id a92af1059eb24-190a599a5admr1553256c88.26.1792574987092; Wed, 21 Oct 2026 02:29:47 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id a92af1059eb24-19035c0c9a6sm4716458c88.3.2026.10.21.02.29.45 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 21 Oct 2026 02:29:46 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-networking][blacksail][PATCH 19/44] postfix: ignore CVE-2023-32182 Date: Wed, 21 Oct 2026 22:28:32 +1300 Message-ID: <20261021092857.3585453-19-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> References: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 21 Oct 2026 09:29:52 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131206 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2023-32182 Signed-off-by: Ankur Tyagi --- meta-networking/recipes-daemons/postfix/postfix_3.11.7.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta-networking/recipes-daemons/postfix/postfix_3.11.7.bb b/meta-networking/recipes-daemons/postfix/postfix_3.11.7.bb index 99a77dd6c3..fe0dd95994 100644 --- a/meta-networking/recipes-daemons/postfix/postfix_3.11.7.bb +++ b/meta-networking/recipes-daemons/postfix/postfix_3.11.7.bb @@ -249,3 +249,5 @@ FILES:${PN}-bin += "${localstatedir} ${bindir}/* ${sbindir}/* \ FILES:${PN}-cfg = "${sysconfdir}" FILES:${PN}-dbg += "${libexecdir}/postfix/.debug" ALLOW_EMPTY:${PN} = "1" + +CVE_STATUS[CVE-2023-32182] = "not-applicable-platform: this vulnerability is Suse specific" From patchwork Wed Oct 21 09:28:33 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101511 Received: from mail-dl1-f46.google.com (mail-dl1-f46.google.com [74.125.82.46]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.7543.1792574990334489475 for ; Wed, 21 Oct 2026 02:29:50 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=jFJ/5jB+; spf=pass (domain: gmail.com, ip: 74.125.82.46, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-dl1-f46.google.com with SMTP id a92af1059eb24-15943c9c005so628093c88.1 for ; Wed, 21 Oct 2026 02:29:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792574990; x=1793179790; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=NWHSEGhn65ZHQj4gikc3tmOBP0zoM5i3QBpymrh2M/8=; b=jFJ/5jB+jY2V0gDSTkBV4mFAe3lkHTlbHji3P4Arv1n/Y4P1fYX/dwiZUUDvRBz9t1 evAQXssbGV3v2Z5lfpLqC9UYac1OgkYGV5bqpu24MgXmyZ0pbgRqL3YfWfx+PJNshKRN 2ihwMbYbKv9nZBf1Nv4XZ9Aqc3mT1ySn4Od0SOs+gP0BeLks0AqqiPimcYxJ2tgLipM2 8A4iupnr2VFJgrQ1x93yDXTcs7XXqmWlAJ+sTLM48YVXnHIt0LvWjp4Dajqu12QFvKkA bWE7KvGpCi3ZTipT9QShsM/FlPXB75KIct+jP1963l6H9BO+5UnBZXl3flLkUlLY6jDg BokQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792574990; x=1793179790; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=NWHSEGhn65ZHQj4gikc3tmOBP0zoM5i3QBpymrh2M/8=; b=kq90BBwM0V5cHWvL791ZDiUFy9AZSq8mDf2SCI7Iti2F8nMd8ug5/xcnaPoqxpMY9V Stk7Ujk2saBOexjJndS/otg1vDZujwsaTrCXR903lqrbBHTHC3B50pBuEZyO8QPoEHwu ppe4kbHgn8TjG5mDRNiDyNhaxpA444Y/eYEW8ESBLMzT3sV7pCnMaXxrij0A3ZcBSwFg 35x7tzKMq7hjh4Am210Sao1bxr+MrV6V2ZqNxyEaYuOu06D2MkBwuUi7Ip2QWo13Svt1 OXKPIbsMJXBkIH+sXyBfxrFbWYcpQjWww8eU013ijR+oVnRXQNkwuJuAw7ZO1aIp2qPt HZlA== X-Gm-Message-State: AFq9FYIBnQNxB54LIU0UI57oXmkXrkmDCYZUzpa7PZ8iGgldyROoibAY 0MUDesIwf4sUX8Q6JPD9cd6tQGBlWuWMWpaYmQibwnWfvmqG3XmGfkhe1onl2g== X-Gm-Gg: AYBFou1heQLirZY/zVYKI8txlRwk4AhZ3fMT75z/WKYCznRw3H/TOZpwcd38BbFXFJU 6YfuPsKJdjvd2cdsKLshe0iXhGMCYT5B4Xphncn/cveBF4F1tYQOzFpuSmI8oz0FQ/xwAPFPpse PhWnedzl5YuEJEFRaj4V4TaLcUkMT1sujbH4IB5FG7bhME77UuQNzwq/gX0ZkBy3xgwBn1vwXPg l2FCey4BvBxxag2nY9CwgPY6Ra1jYznyTj8MxkWAoP+IncWN4dFahssVvuj/liMm96AVKIuW/J4 vrHNwXnHNcOm/QXY7yhBwHTvtoxkjqAhuMqAKx/5LzO9GTyetk0AywbBGBqkPo72brblV9IOZ7j 1TnZ58jC6qxozkGI3x0VcZV+PWc/ISSrN6uvSPmxfIjz5P7jDan9caCQkW/nhGQyNgHNHv4mGzg e2Pg0FxLV7xcfDm38csXYkHz9624dcjEWzt0GFEgx4/tVGuvD+qSX2o7q55Hcnxla5efVlC1tf6 I6Co4Tv/qR480PuO4vrqOTOBlhneDyJJomiti5qAGq0JS8EUWeMatFSTqy9DeWDkzS2K0wtiT+V 8shHylbupTk/xmlSPAUffnAblF8NSxk= X-Received: by 2002:a05:7022:61a8:b0:168:3243:c910 with SMTP id a92af1059eb24-190a6adcc45mr3014038c88.13.1792574989619; Wed, 21 Oct 2026 02:29:49 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id a92af1059eb24-19035c0c9a6sm4716458c88.3.2026.10.21.02.29.47 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 21 Oct 2026 02:29:49 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-oe][blacksail][PATCH 20/44] poppler: patch CVE-2026-102621 Date: Wed, 21 Oct 2026 22:28:33 +1300 Message-ID: <20261021092857.3585453-20-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> References: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 21 Oct 2026 09:29:52 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131207 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-102621 Signed-off-by: Ankur Tyagi --- .../poppler/poppler/CVE-2026-102621.patch | 40 +++++++++++++++++++ .../poppler/poppler_26.08.0.bb | 1 + 2 files changed, 41 insertions(+) create mode 100644 meta-oe/recipes-support/poppler/poppler/CVE-2026-102621.patch diff --git a/meta-oe/recipes-support/poppler/poppler/CVE-2026-102621.patch b/meta-oe/recipes-support/poppler/poppler/CVE-2026-102621.patch new file mode 100644 index 0000000000..823c3a33db --- /dev/null +++ b/meta-oe/recipes-support/poppler/poppler/CVE-2026-102621.patch @@ -0,0 +1,40 @@ +From eaeeb2fe58aad490bc82aa33d75217dead0dd0de Mon Sep 17 00:00:00 2001 +From: Albert Astals Cid +Date: Sat, 8 Aug 2026 15:02:27 +0200 +Subject: [PATCH] Fix integer overflow in SplashClip::clipToPath + +Issue #1763 + +(cherry picked from commit 323c91036d99926a8b90dc14329f7b40aece22f8) + +CVE: CVE-2026-102621 +Upstream-Status: Backport [https://gitlab.freedesktop.org/poppler/poppler/-/commit/323c91036d99926a8b90dc14329f7b40aece22f8] +Signed-off-by: Ankur Tyagi +--- + splash/SplashClip.cc | 6 +++++- + 1 file changed, 5 insertions(+), 1 deletion(-) + +diff --git a/splash/SplashClip.cc b/splash/SplashClip.cc +index 78249652c..b096beebd 100644 +--- a/splash/SplashClip.cc ++++ b/splash/SplashClip.cc +@@ -23,6 +23,8 @@ + #include + + #include ++#include "goo/GooCheckedOps.h" ++#include "goo/GooLikely.h" + #include "SplashErrorCodes.h" + #include "SplashMath.h" + #include "SplashPath.h" +@@ -211,7 +213,9 @@ SplashError SplashClip::clipToPath(const SplashPath &path, const std::array X-Patchwork-Id: 101512 Received: from mail-dl1-f48.google.com (mail-dl1-f48.google.com [74.125.82.48]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.7544.1792574992728328740 for ; Wed, 21 Oct 2026 02:29:52 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=dY0utr0r; spf=pass (domain: gmail.com, ip: 74.125.82.48, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-dl1-f48.google.com with SMTP id a92af1059eb24-15943c9c005so628118c88.1 for ; Wed, 21 Oct 2026 02:29:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792574992; x=1793179792; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=lJ5hTX/SKOeCIJEnFOKGcFMzm8eZxlRxckBhSZlXEqc=; b=dY0utr0rfmukwzmYEaeZuas4+ZMW4IjYMSMcOVPnDeY21zeKCGheVhKiD0o0zsgMVM MjGLUTCVMU/1HtN6V31e9jajcq7bm6QHWhKs2fpRqohQ5wLw1qSoFqMLmSRQevyCFm8q U/3N5/JMUJE9BzkWsDTE/pHu1k9dRWX7KZEStrnQ20OSKQt4ev1UJZiu4eFr61EdcR2b wKo3WMO2HXB/3GgEKyY7RqDkaOrnafX+77PLW693ykX+SUyu5+VJ/Dsa83OmGOCBG110 Jp0BbZdy9mZKLsiqg5l5XnxVv9p33fyE7j0MBBiZd5lRt2ZX1KYSzrB3y5mdGolD5sAh WHeg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792574992; x=1793179792; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=lJ5hTX/SKOeCIJEnFOKGcFMzm8eZxlRxckBhSZlXEqc=; b=dtgETI7DH1yZuxXT6h0kH5AEhbPBJG/qMVFkuiXBI4Nlzx9rGrhJYGxDi/VsjS6yOk GuLtSCCDz2iYSMyC8ioc6oEYJ5z6uSWHXy3m4wtHJ6SAS6zK4a1WIz4HSh1SorQ0B7kZ p1vMADy3ihi23Prz9LPD2bxu0PSPb8mRbhFLNlwbnaTdZappKCzBeB1RJawtYOYYyvLl RIvGbEJobNIE6uo8+uGygRWB6/bk17cYqQ2lGA7q9+MRl0JM7yK0xPdnvm42FnH8Hj4X ZvMPVEU2vxXxv4BCZqKkwuCfaIRRD4EV757j4KNobrNVdoH0HudX7NCi1/yjxNRf/+qE jGIw== X-Gm-Message-State: AFq9FYIkK8qd7APc3vRukemtxPzG2ZM3tuJRMJuY1lIjvY3yMRaROAXs ZvPFihii5OwszBWMWUUbFIM5Pn/XP02c1QSynBIyxowqIhS8OEHBadnKHN3fPA== X-Gm-Gg: AYBFou3EmQsP9O/kvkcd3oeUrQaAu+IM3srTOdAqwhdNcleQ/2F4PkYLRzt9k3TWnn0 P5fvbRjQriRBqcGAPqXO9zzvgIiR0NMjL1NL365gcmj+2NtBRuR3iIjyvIU2FbfWpLYPetW1Lk/ 3qWX+CWX2fFOIx6ulZR/6fpnvwudOHiGqC3POOCRV2wIW1RsjB7ZjGdQt3b0vVwnSKKOyObcAgV HjTrDhP3vbyp+XAiPQqgPZpIyFLtUcvULxcC/YAz9p7ZRDl7D2ioVG1M+hMkRWJMVxKP6rkvcgh 4pontUp4rFBd/2w6Z/3RTjiuQoWYj0mGopSoHCKeQ3jFXPLIAfE6AAicksGIw7HkLB43wiwMpNO UdLolodeUtG6NTqMSjMIMqZck1nrsHKtFQa8w8ellCZRjNa+M6thjHKY/JCx9aT+tT3NHXDk91I zqRP1YX5GXfmGytBjG948Hv67QkX52sn6YIyF/VI8rnexOrmuKRR0u7MO+/U3ZZNNOrb8uKjrdN zPcynt10UFqP+vfEdQ3pRoQRd217nsADjAZ7uWvLiTUeDTvSWCIQPjaMXLfzJ2aKLn3iQ0p8Gtu MhMMYc6geVkx4PWyZw+1tG8rc727iwc= X-Received: by 2002:a05:701a:c973:b0:143:868a:20c1 with SMTP id a92af1059eb24-190a9db4303mr1683578c88.46.1792574991947; Wed, 21 Oct 2026 02:29:51 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id a92af1059eb24-19035c0c9a6sm4716458c88.3.2026.10.21.02.29.50 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 21 Oct 2026 02:29:51 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-oe][blacksail][PATCH 21/44] poppler: patch CVE-2026-102620 Date: Wed, 21 Oct 2026 22:28:34 +1300 Message-ID: <20261021092857.3585453-21-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> References: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 21 Oct 2026 09:30:02 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131208 From: Ankur Tyagi Also backport commit[1] to allow cherry-pick of the commit fixing the CVE. Details: https://nvd.nist.gov/vuln/detail/cve-2026-102620 [1]https://gitlab.freedesktop.org/poppler/poppler/-/commit/786b06dac87dbe28e85ec7ea3d340810f151c25b Signed-off-by: Ankur Tyagi --- .../poppler/poppler/CVE-2026-102620-1.patch | 145 ++++++++++++++++++ .../poppler/poppler/CVE-2026-102620-2.patch | 34 ++++ .../poppler/poppler_26.08.0.bb | 2 + 3 files changed, 181 insertions(+) create mode 100644 meta-oe/recipes-support/poppler/poppler/CVE-2026-102620-1.patch create mode 100644 meta-oe/recipes-support/poppler/poppler/CVE-2026-102620-2.patch diff --git a/meta-oe/recipes-support/poppler/poppler/CVE-2026-102620-1.patch b/meta-oe/recipes-support/poppler/poppler/CVE-2026-102620-1.patch new file mode 100644 index 0000000000..e85866eddf --- /dev/null +++ b/meta-oe/recipes-support/poppler/poppler/CVE-2026-102620-1.patch @@ -0,0 +1,145 @@ +From b8ce8bb5df02fd3a70f4b34f3d64c88df7089409 Mon Sep 17 00:00:00 2001 +From: Albert Astals Cid +Date: Sat, 8 Aug 2026 15:30:32 +0200 +Subject: [PATCH] FoFiTrueType::cvtSfnts: Move variables closer to where they + are used + +(cherry picked from commit 786b06dac87dbe28e85ec7ea3d340810f151c25b) + +CVE: CVE-2026-102620 +Upstream-Status: Backport [https://gitlab.freedesktop.org/poppler/poppler/-/commit/786b06dac87dbe28e85ec7ea3d340810f151c25b] + +Signed-off-by: Ankur Tyagi +--- + fofi/FoFiTrueType.cc | 42 +++++++++++++++++++----------------------- + 1 file changed, 19 insertions(+), 23 deletions(-) + +diff --git a/fofi/FoFiTrueType.cc b/fofi/FoFiTrueType.cc +index 133fbc45e..e15cfc576 100644 +--- a/fofi/FoFiTrueType.cc ++++ b/fofi/FoFiTrueType.cc +@@ -1058,9 +1058,6 @@ void FoFiTrueType::cvtSfnts(FoFiOutputFunc outputFunc, void *outputStream, const + TrueTypeTable newTables[nT42Tables]; + unsigned char tableDir[12 + nT42Tables * 16]; + bool ok; +- unsigned int checksum; +- int nNewTables; +- int glyfTableLen, length, glyfPos, j, k; + std::array vheaTab = { + 0, 1, 0, 0, // table version number + 0, 0, // ascent +@@ -1081,8 +1078,6 @@ void FoFiTrueType::cvtSfnts(FoFiOutputFunc outputFunc, void *outputStream, const + 0, 1 // number of advance heights in vmtx table + }; + std::vector vmtxTab; +- bool needVhea, needVmtx; +- int advance; + + *maxUsedGlyph = -1; + +@@ -1116,7 +1111,7 @@ void FoFiTrueType::cvtSfnts(FoFiOutputFunc outputFunc, void *outputStream, const + i = seekTable("loca"); + pos = tables[i].offset; + i = seekTable("glyf"); +- glyfTableLen = tables[i].len; ++ const int glyfTableLen = tables[i].len; + ok = true; + for (i = 0; i <= nGlyphs; ++i) { + locaTable[i].idx = i; +@@ -1169,16 +1164,16 @@ void FoFiTrueType::cvtSfnts(FoFiOutputFunc outputFunc, void *outputStream, const + } + + // count the number of tables +- nNewTables = 0; ++ int nNewTables = 0; + for (i = 0; i < nT42Tables; ++i) { + if (t42Tables[i].required || seekTable(t42Tables[i].tag) >= 0) { + ++nNewTables; + } + } +- advance = 0; // make gcc happy ++ int advance = 0; // make gcc happy + if (needVerticalMetrics) { +- needVhea = seekTable("vhea") < 0; +- needVmtx = seekTable("vmtx") < 0; ++ const bool needVhea = seekTable("vhea") < 0; ++ const bool needVmtx = seekTable("vmtx") < 0; + if (needVhea || needVmtx) { + i = seekTable("head"); + advance = getU16BE(tables[i].offset + 18, &ok); // units per em +@@ -1194,10 +1189,10 @@ void FoFiTrueType::cvtSfnts(FoFiOutputFunc outputFunc, void *outputStream, const + // construct the new table headers, including table checksums + // (pad each table out to a multiple of 4 bytes) + pos = 12 + nNewTables * 16; +- k = 0; ++ int k = 0; + for (i = 0; i < nT42Tables; ++i) { +- length = -1; +- checksum = 0; // make gcc happy ++ int length = -1; ++ unsigned int checksum = 0; // make gcc happy + if (i == t42HeadTable) { + length = 54; + checksum = computeTableChecksum(headData); +@@ -1207,8 +1202,8 @@ void FoFiTrueType::cvtSfnts(FoFiOutputFunc outputFunc, void *outputStream, const + } else if (i == t42GlyfTable) { + length = 0; + checksum = 0; +- glyfPos = tables[seekTable("glyf")].offset; +- for (j = 0; j < nGlyphs; ++j) { ++ const int glyfPos = tables[seekTable("glyf")].offset; ++ for (int j = 0; j < nGlyphs; ++j) { + length += locaTable[j].len; + if (length & 3) { + length += 4 - (length & 3); +@@ -1218,7 +1213,8 @@ void FoFiTrueType::cvtSfnts(FoFiOutputFunc outputFunc, void *outputStream, const + } + } + } else { +- if ((j = seekTable(t42Tables[i].tag)) >= 0) { ++ const int j = seekTable(t42Tables[i].tag); ++ if (j >= 0) { + length = tables[j].len; + if (checkRegion(tables[j].offset, length)) { + checksum = computeTableChecksum(std::span(file.data() + tables[j].offset, length)); +@@ -1298,7 +1294,7 @@ void FoFiTrueType::cvtSfnts(FoFiOutputFunc outputFunc, void *outputStream, const + } + + // compute the font checksum and store it in the head table +- checksum = computeTableChecksum(std::span(tableDir, 12 + nNewTables * 16)); ++ unsigned int checksum = computeTableChecksum(std::span(tableDir, 12 + nNewTables * 16)); + for (i = 0; i < nNewTables; ++i) { + checksum += newTables[i].checksum; + } +@@ -1325,11 +1321,10 @@ void FoFiTrueType::cvtSfnts(FoFiOutputFunc outputFunc, void *outputStream, const + if (i == t42HeadTable) { + dumpString(headData, outputFunc, outputStream); + } else if (i == t42LocaTable) { +- length = (nGlyphs + 1) * (locaFmt ? 4 : 2); + dumpString(locaData, outputFunc, outputStream); + } else if (i == t42GlyfTable) { +- glyfPos = tables[seekTable("glyf")].offset; +- for (j = 0; j < nGlyphs; ++j) { ++ const int glyfPos = tables[seekTable("glyf")].offset; ++ for (int j = 0; j < nGlyphs; ++j) { + if (locaTable[j].len > 0 && checkRegion(glyfPos + locaTable[j].origOffset, locaTable[j].len)) { + dumpString(std::span(file.data() + glyfPos + locaTable[j].origOffset, locaTable[j].len), outputFunc, outputStream); + } +@@ -1338,13 +1333,14 @@ void FoFiTrueType::cvtSfnts(FoFiOutputFunc outputFunc, void *outputStream, const + // length == 0 means the table is missing and the error was + // already reported during the construction of the table + // headers +- if ((length = newTables[i].len) > 0) { +- if ((j = seekTable(t42Tables[i].tag)) >= 0 && checkRegion(tables[j].offset, tables[j].len)) { ++ const int length = newTables[i].len; ++ if (length > 0) { ++ const int j = seekTable(t42Tables[i].tag); ++ if (j >= 0 && checkRegion(tables[j].offset, tables[j].len)) { + dumpString(std::span(file.data() + tables[j].offset, tables[j].len), outputFunc, outputStream); + } else if (needVerticalMetrics && i == t42VheaTable) { + if (unlikely(static_cast(length) > sizeof(vheaTab))) { + error(errSyntaxWarning, -1, "length bigger than vheaTab size"); +- length = sizeof(vheaTab); + } + dumpString(vheaTab, outputFunc, outputStream); + } else if (needVerticalMetrics && i == t42VmtxTable) { diff --git a/meta-oe/recipes-support/poppler/poppler/CVE-2026-102620-2.patch b/meta-oe/recipes-support/poppler/poppler/CVE-2026-102620-2.patch new file mode 100644 index 0000000000..e41e65ffd9 --- /dev/null +++ b/meta-oe/recipes-support/poppler/poppler/CVE-2026-102620-2.patch @@ -0,0 +1,34 @@ +From ac82c990768a4cb3dd4fd15edb92af97b4ac6589 Mon Sep 17 00:00:00 2001 +From: Albert Astals Cid +Date: Sat, 8 Aug 2026 15:47:43 +0200 +Subject: [PATCH] Fix integer overflow in FoFiTrueType::cvtSfnts + +Issue #1762 + +(cherry picked from commit 245d3c6823377755f2c1d5fdddd010279c6ed94d) + +CVE: CVE-2026-102620 +Upstream-Status: Backport [https://gitlab.freedesktop.org/poppler/poppler/-/commit/245d3c6823377755f2c1d5fdddd010279c6ed94d] + +Signed-off-by: Ankur Tyagi +--- + fofi/FoFiTrueType.cc | 6 +++++- + 1 file changed, 5 insertions(+), 1 deletion(-) + +diff --git a/fofi/FoFiTrueType.cc b/fofi/FoFiTrueType.cc +index e15cfc576..9e280fe89 100644 +--- a/fofi/FoFiTrueType.cc ++++ b/fofi/FoFiTrueType.cc +@@ -1204,7 +1204,11 @@ void FoFiTrueType::cvtSfnts(FoFiOutputFunc outputFunc, void *outputStream, const + checksum = 0; + const int glyfPos = tables[seekTable("glyf")].offset; + for (int j = 0; j < nGlyphs; ++j) { +- length += locaTable[j].len; ++ if (unlikely(checkedAdd(length, locaTable[j].len, &length))) { ++ error(errSyntaxError, -1, "Integer overflow in glyph table length calculation"); ++ ok = false; ++ break; ++ } + if (length & 3) { + length += 4 - (length & 3); + } diff --git a/meta-oe/recipes-support/poppler/poppler_26.08.0.bb b/meta-oe/recipes-support/poppler/poppler_26.08.0.bb index f24ca34366..6cfcf3cf0f 100644 --- a/meta-oe/recipes-support/poppler/poppler_26.08.0.bb +++ b/meta-oe/recipes-support/poppler/poppler_26.08.0.bb @@ -9,6 +9,8 @@ SRC_URI = "http://poppler.freedesktop.org/${BP}.tar.xz \ file://0001-cmake-Do-not-use-isystem.patch \ file://0001-workaround-build-racing.patch \ file://CVE-2026-102621.patch \ + file://CVE-2026-102620-1.patch \ + file://CVE-2026-102620-2.patch \ " SRC_URI[sha256sum] = "dc906e68cea698109706ac6aa3d2c9d4512fcfcac42d90b8afcda486d1b9abd0" From patchwork Wed Oct 21 09:28:35 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101513 Received: from mail-dl1-f44.google.com (mail-dl1-f44.google.com [74.125.82.44]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.7512.1792574994763054752 for ; Wed, 21 Oct 2026 02:29:54 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=dHpjd1Kq; spf=pass (domain: gmail.com, ip: 74.125.82.44, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-dl1-f44.google.com with SMTP id a92af1059eb24-15dd124bbe7so946589c88.1 for ; Wed, 21 Oct 2026 02:29:54 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792574994; x=1793179794; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=rjP+9anJ94NPkccl0oefJjMcU12f05O1kBr3oUuSv5A=; b=dHpjd1Kq4VnklzqLAbgoW+T4p1kr0Ugi/3zwrQWU59JRXm99wkHwYAuyIXgPY7tH/i w0o4ZtLzl1FA91KMuBFXgS7HvS4VEql9aA+i18UrT8Yl9qMGYRnSvh7wcNqrc/F+lJra vD/EqedsejPOl11OwFK2/pjkN6Bvq/AXnpEEs2LUUM3W5/fkh5iN3ss7JnQ3At/A3Nm/ hK4/5imaQiTvLDQNHANU/7kSaenmhG1O2DzFh7M22cstG4dk9YIHOAC7l7Opag+nvSUH zrUplngqTVGisNLBujr6Yv9hki0KJumjKqwnmrgK0VuRkNhSl/YPtwclLErvFryycff6 I6Cw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792574994; x=1793179794; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=rjP+9anJ94NPkccl0oefJjMcU12f05O1kBr3oUuSv5A=; b=M0nTKtHgpZ36b7xXCZvpUfKJoIB9yiDvtrwgWA/Rile1SDfPh1xo6lKX9ziFsVkjo4 fceteIXuL8WBcm6iLm1nde75NqnxmKYb3f+IRNUsx5O/S8q5mukCqXryQal5CCylnv63 2T/8EnfqhTdZgG2khbOx5qTuGRLgfbm9N1mYWZ7kUPRkqbKhqtzq9hLEIohbNBH/9MVm UhlCzU4ToDS5rU+6uEa95km29NFNpibEODfXPwNu8yOJXZhihQXBH6rL2SX0WZzZ9K8v 36kwuDSYqBDmMiMuqtc0sf7f6DgfxGX2OiJGleSH9az0PFus1h+uQaBnWkRl1fifp81V BLEA== X-Gm-Message-State: AFq9FYKp02PvEfn/GBsGrV6Nxvs5HwGlp2Mspkpbfye1Z/pOD4yjwuN1 12lxhS1+DrB0hjqTc/sAM//Glpmcsx5Lvdf0G4MzkKbt1mJyN/qkA4RZ7V2B9Q== X-Gm-Gg: AYBFou00nDNspPqtB+6BvHpuTxJB2d/jKIk+agNxfa/LtEqJmNymoOndGpPiKOp8stb gFxu1QD/hTLGudHNICzQ0EBuM02D0f7+BPOcyF1lwZpcZ/m2EFIX+w/g+kbAWoz6A3dGh+16FFE Ro9uGTsPdN/71NmnrIHx77tzAOJoVX2Tv06a7Zl7fuNIGrktlO5fgXCpPIaQ5P1Xljmf9OSCZcT 4dXeMgKiiwpmzy3ySy7+QdTVjbL3INQvPN1FgygTlgxN0LU8oJkssrIVJwhay+vydSlYR0OF5SP la9aYlo5INO9S6AmfT5VORXQHPE3QNyMEMAdG4zojHULBZSipHVgiI0lclofoP/c3+m/kkiTuGH V+Pam6n/vT9k+I06/z8OwuC077nP9x2tgh30xktAN9VAfuylDfkjZubJDK3966BxR3BuPwf3t47 9q15Igo1XNg7jzjEBVTOfOsFbVnWWgx2hrmN4oVcZiQknKQ/3vt2KYnxguLyhtixpWUdbZ/zOmv UE/89XvyksmST6ke2SgYDZC3rD9Dfqt4RyeDwZywi8pXubokhrJrbKaeTRRzO99Xvi7TSqssewG fTRCYstvitDGgf8teNVpaqJign15QDA= X-Received: by 2002:a05:7022:ea55:20b0:166:af48:a2ba with SMTP id a92af1059eb24-19099b86e75mr2028233c88.0.1792574994092; Wed, 21 Oct 2026 02:29:54 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id a92af1059eb24-19035c0c9a6sm4716458c88.3.2026.10.21.02.29.52 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 21 Oct 2026 02:29:53 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-oe][blacksail][PATCH 22/44] opensc: patch CVE-2026-103531 Date: Wed, 21 Oct 2026 22:28:35 +1300 Message-ID: <20261021092857.3585453-22-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> References: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 21 Oct 2026 09:30:02 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131209 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-103531 Signed-off-by: Ankur Tyagi --- .../opensc/opensc/CVE-2026-103531.patch | 54 +++++++++++++++++++ .../recipes-support/opensc/opensc_0.27.1.bb | 1 + 2 files changed, 55 insertions(+) create mode 100644 meta-oe/recipes-support/opensc/opensc/CVE-2026-103531.patch diff --git a/meta-oe/recipes-support/opensc/opensc/CVE-2026-103531.patch b/meta-oe/recipes-support/opensc/opensc/CVE-2026-103531.patch new file mode 100644 index 0000000000..22776e525b --- /dev/null +++ b/meta-oe/recipes-support/opensc/opensc/CVE-2026-103531.patch @@ -0,0 +1,54 @@ +From 4b0f46d922866d9453e3631ff5e0a24900fae8dd Mon Sep 17 00:00:00 2001 +From: wanglanlan +Date: Wed, 2 Sep 2026 08:36:47 +0000 +Subject: [PATCH] setcos: Fix buffer overflow in setcos_construct_fci_44 + +The FCI construction copied type_attr, sec_attr and prop_attr of the +file into a fixed 64-byte stack buffer without checking the length. +Malicious or corrupted attribute lengths (e.g. prop_attr_len > 64, +reachable through fuzz_pkcs15init and attacker-controlled card +responses) caused a stack buffer overflow (write). + +Return SC_ERROR_INVALID_DATA if any attribute exceeds the buffer size. + +Found with the fuzz_pkcs15init fuzzer. + +Co-Authored-By: Claude +(cherry picked from commit ad730304052937c32b4eb489a06835ac6123632c) + +CVE: CVE-2026-103531 +Upstream-Status: Backport [https://github.com/OpenSC/OpenSC/commit/ad730304052937c32b4eb489a06835ac6123632c] +Signed-off-by: Ankur Tyagi +--- + src/libopensc/card-setcos.c | 6 ++++++ + 1 file changed, 6 insertions(+) + +diff --git a/src/libopensc/card-setcos.c b/src/libopensc/card-setcos.c +index 0ebe7c34f..8c7baa3e4 100644 +--- a/src/libopensc/card-setcos.c ++++ b/src/libopensc/card-setcos.c +@@ -218,6 +218,8 @@ static int setcos_construct_fci_44(sc_card_t *card, const sc_file_t *file, u8 *o + + /* Type */ + if (file->type_attr_len) { ++ if (file->type_attr_len > sizeof(buf)) ++ LOG_FUNC_RETURN(card->ctx, SC_ERROR_INVALID_DATA); + memcpy(buf, file->type_attr, file->type_attr_len); + sc_asn1_put_tag(0x82, buf, file->type_attr_len, p, *outlen - (p - out), &p); + } else { +@@ -271,11 +273,15 @@ static int setcos_construct_fci_44(sc_card_t *card, const sc_file_t *file, u8 *o + } + + /* Security Attributes */ ++ if (file->sec_attr_len > sizeof(buf)) ++ LOG_FUNC_RETURN(card->ctx, SC_ERROR_INVALID_DATA); + memcpy(buf, file->sec_attr, file->sec_attr_len); + sc_asn1_put_tag(0x86, buf, file->sec_attr_len, p, *outlen - (p - out), &p); + + /* Life cycle status */ + if (file->prop_attr_len) { ++ if (file->prop_attr_len > sizeof(buf)) ++ LOG_FUNC_RETURN(card->ctx, SC_ERROR_INVALID_DATA); + memcpy(buf, file->prop_attr, file->prop_attr_len); + sc_asn1_put_tag(0x8A, buf, file->prop_attr_len, p, *outlen - (p - out), &p); + } diff --git a/meta-oe/recipes-support/opensc/opensc_0.27.1.bb b/meta-oe/recipes-support/opensc/opensc_0.27.1.bb index a1930744ea..bcd94dfb90 100644 --- a/meta-oe/recipes-support/opensc/opensc_0.27.1.bb +++ b/meta-oe/recipes-support/opensc/opensc_0.27.1.bb @@ -14,6 +14,7 @@ DEPENDS = "openssl" SRCREV = "19868984dc4dc697af6a86d65ab32a1f19a43ea4" SRC_URI = "git://github.com/OpenSC/OpenSC;branch=master;protocol=https \ file://0001-Changes-for-OpenSSL-4.0.0.patch \ + file://CVE-2026-103531.patch \ " CVE_STATUS[CVE-2024-8443] = "fixed-version: this is fixed since 0.26.0" From patchwork Wed Oct 21 09:28:36 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101514 Received: from mail-dy1-f172.google.com (mail-dy1-f172.google.com [74.125.82.172]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.7513.1792574997083594322 for ; Wed, 21 Oct 2026 02:29:57 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=jMHpqKFb; spf=pass (domain: gmail.com, ip: 74.125.82.172, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-dy1-f172.google.com with SMTP id 5a478bee46e88-33fb4680717so1308017eec.1 for ; Wed, 21 Oct 2026 02:29:57 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792574996; x=1793179796; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=stkMjPhXPiD4icmfR7fy1+pxA66CHinTvvxhxWi0vng=; b=jMHpqKFbUTE3buDyISG8VtWOGvs8Rq7ioP7IHr0p/5p+hdXpUDUdSx8pZtp5UaXBEP 4P4xPhcEPQR68JQJsvvm1EWkrkxt4mjZb+CVJRqxE88Ol5dlOx2Fuw2iEA7xYvsVClGK FZs2/X9t9yHp8DhZyy5MExOe+nBWPsGJKOEq/hhlbV6KSNOTSasuasRf/gBSnEf6IwHg g3/O/v33ooVYv9tX2zgDgPktmyd4FxQ02B6x84IY6MCio0IfJUwC60n2I67dYqSogGex zCrZFwJL6+6/vunbwrO8Uch0y2x58/NdcPgZKfeb4bkmLWnhFoXnmPf3TysHcs0dEWDJ UwYw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792574996; x=1793179796; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=stkMjPhXPiD4icmfR7fy1+pxA66CHinTvvxhxWi0vng=; b=MVhPbyKeEhstU6yYNHeZMQ4btmxHfevQY9ktWIpLKw3L8s+l2r/fwLcRIsdRz/+MOI 01R8QNPLOZb92gb4HMBRsWEHs7As4IU5EvySWK6Ev2vQ+XCZDd2YPox4MKACuUvtt8gL DgrJoMZSUHXr7u7Jj96OJzupFuQufFq9+zsANq86XbTjcSd8WZWhLWkmOWUoHbzcU0KD 1/55zrkhhv0b0ZWG9DkrInteGuFtk/pGFAITOfvNqQLoB5Xx8zw6GYAvcruPIdgknNmN 2ZdEVVVMZ77HdbT7sAaJ/YC/IA02vT0QrfTjYqomfPjQhub6zxkRwCcZmt2TNE1KB2nd 6Qrg== X-Gm-Message-State: AFq9FYIgnt2JSMeW/Msfn2qXmyeACi1/cXUPFQMNsqoW+SJhwFI9pxB7 C3EHjJZ6aiGR1aR/8zOEAmEn0Lttf7he0WjqfKVLJPdNu/mZ8eYDTnKhOWcMnQ== X-Gm-Gg: AYBFou0FdhLtPYhJpdl2Gfb+Ko2Jrr8A4JPE448q4emw3PRFdIiogfoR13K4JbdEq/1 pwyEa5BmCrK5x4MWfrZSiWRgGP/pStLVAMVxIWBc/qzAY3MVObX0Mwf2dYxrAKy+rEOhNkCc6NO DAlagwUkX6Yr5a9gTVNUTb1/ycnAgYLmcuX2fkQyifQOdTlEYg1zLjqILNzraS/M6JFrfk4Rp5L VB1fbS4w1OhaoX4/WGqncY+xx0873/R7J9onb3ia6xFPMRO/FQ6P1MXmvTZQgtQnCozU0VJKzgS G2u+cmOgygTLG8Ar2Tsdbd/7jtQYrD5PcZGRj1Nf1EDFuFt+7MfcaNPqQD4Ot+C0NarVLJDkyMs c38vR0quPmaUmwu6aFZG1WtSf4qba64pk3j471Md2ZprOl0UNxZ4KiLINbn697jffyPe/Wryz6E prQUd/qyQ6nB5K9GU2zPO3Ca1eMv5VesDaPhW6YGsuWbsTtCMRRdl5ajrQY7WfVWwQ6y9xPBAcE Z/WEESh2LiL+orJExVJbvyuRMyZvWVC9A+95NDaX/VbveNrk868zQD5gCcKcwZKW8SOzrzsk1mT LOg8z1N7hYzY4lkyqfNvzY7A+rn+1P8= X-Received: by 2002:a05:7022:929:b0:14c:be8e:69fe with SMTP id a92af1059eb24-190a051dd50mr2649423c88.5.1792574996321; Wed, 21 Oct 2026 02:29:56 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id a92af1059eb24-19035c0c9a6sm4716458c88.3.2026.10.21.02.29.54 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 21 Oct 2026 02:29:55 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-multimedia][blacksail][PATCH 23/44] pjproject: mark CVE-2026-26967 fixed Date: Wed, 21 Oct 2026 22:28:36 +1300 Message-ID: <20261021092857.3585453-23-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> References: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 21 Oct 2026 09:30:02 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131210 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-26967 Signed-off-by: Ankur Tyagi --- meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb index 8aa7775205..59684ac7c7 100644 --- a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb @@ -118,3 +118,5 @@ RDEPENDS:python3-pjsua2 = "python3-core" # and ${PN}-staticdev (the .a files) by bitbake's own default FILES # patterns - ${PN} itself ships nothing. ALLOW_EMPTY:${PN} = "1" + +CVE_STATUS[CVE-2026-26967] = "fixed-version: fixed in v2.17" From patchwork Wed Oct 21 09:28:37 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101515 Received: from mail-dl1-f41.google.com (mail-dl1-f41.google.com [74.125.82.41]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.7546.1792574999271101409 for ; Wed, 21 Oct 2026 02:29:59 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=AWfZp0b9; spf=pass (domain: gmail.com, ip: 74.125.82.41, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-dl1-f41.google.com with SMTP id a92af1059eb24-1517bda04a0so521769c88.0 for ; Wed, 21 Oct 2026 02:29:59 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792574999; x=1793179799; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=XxYAX0lCPWv/um9gq489mogC8yAXGqw0/0rlkk/qW2U=; b=AWfZp0b9kP0Yq4E/STGddEOodhjcXXULn7FGOHVUvJqocq98Vm5QQoEdYPEdtpmqIr oi6DbSG0pbnaMShLN2mTvYt2rN0uLPR46OX0PfK2NpEJRVDNbvBKXLF+0F3uhZEOphsQ nfcCNY42IZE5aZXltlA/ZMjrNBtRxH5uh12GjKQhNRFQUo6o0M5AUE7UR0cuQcqzgq4j U0kEXdS8udIyWyq3D/dBjAgugQobBYzjiM+yUYfgr3dK3HAtMwq8DWmvE0ZYnwSgeByb qhTUsD9Wrpxcq5Z3mPygi7mk15yfEaPsnhDgKwbk1SbzjdJNKlJoIRQLZNX+5sOKmQa5 VBPQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792574999; x=1793179799; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=XxYAX0lCPWv/um9gq489mogC8yAXGqw0/0rlkk/qW2U=; b=gCPfkgJWeylgUB/EivP1RLiDQL9EhVbahRBnHDcC+kqbatHcOPpL87gk6dD+CG+TWM mdANp+MM9HtPSK4GkUurUnp4EPB0+E5gEwbHEQS10aQUA1NmsEqNaA6p30ucMC8TIvej fjEKYCw0TFOYzuvwgoJD0wGpByAMVXGgdxf+OCDpt8LkdOUJfLjOmTutIpMu7W6cijk8 Yfhp1QjhSNw/BTdg8BJoNSkJy9YWQLJxv5DgleMDQOch9hmNaKnuqc5iwqqDvxF2CBod nBQj7V7X279aWVuishEqNpPrAFz6oH6LYb6qovlLBszEa5TplWF8YHontVSOcTlaIuev LZQA== X-Gm-Message-State: AFq9FYKkZBwElXRmlr8NkjKL/is1GFpKzRbA6di3um/QCRYlLIido1u3 8aiHa0jcOP2ftj6+FQ3CPfL+M5Av3KCz5otETkPORijs7TtRbo2unHgYT9H7Og== X-Gm-Gg: AYBFou0Xf9C5LHl7B5WuqL4k0aacKgmu6GEpdVOweDWJs+hxMZZiPKhbBQGKLngVyaC OFnHtb2qcLOJUGB8Ps3iOagbCl9nxZbF6J7Ezw6FJ66HkDoWkvoGEKAWN2U/10cOKLdD0sZdagM cwlMALrFYCFSXH2p74M9sT8+8iB8yrfCLIOZMFMs4xaC9lZqnN+NCKty7p2gFteMEa4IiMvlY7m AI2aD1F14htx9vTdmJP1+b8L7lnF2x9Tobg8DASVUYqqz94v8J+/V9zyArPLFFRzW+lXJnzEQr1 pGu4YXU9TtYgQG0L2S6xEpo5WMA9/JHmxtE9XwbsmfO3O3FhwFS9jL6MggWMpavCnjOwCkVJVyp y95LjnxaP057r9PjLGx9KvN7g8yuCqLsXt9jd6rHVwSrTNnwZB3W3UqQb/lDoApFgE5YJVbJaNR 16Ds80VwJaslJwaJxVrD9hoqRIm3MSnEqZAA3DbLbTpJAzV5QdRCWi2f1JTthNk3sa6b7diJuCf /pQ/WouOXmp9AHt2Dke9TMcb5RRR7j1zmDFZwbwlSV7rFbia3LaXrZyW/okTNwhGUixskYUFI88 Ly+Vs7C6wmwpm7+CcfCrJHJTyZbljG8= X-Received: by 2002:a05:7023:a4c:b0:166:5552:780a with SMTP id a92af1059eb24-190a4c2036bmr1919379c88.8.1792574998582; Wed, 21 Oct 2026 02:29:58 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id a92af1059eb24-19035c0c9a6sm4716458c88.3.2026.10.21.02.29.56 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 21 Oct 2026 02:29:58 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-multimedia][blacksail][PATCH 24/44] pjproject: patch CVE-2026-57160 Date: Wed, 21 Oct 2026 22:28:37 +1300 Message-ID: <20261021092857.3585453-24-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> References: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 21 Oct 2026 09:30:02 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131211 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-57160 Signed-off-by: Ankur Tyagi --- .../pjproject/pjproject/CVE-2026-57160.patch | 42 +++++++++++++++++++ .../pjproject/pjproject_2.17.bb | 1 + 2 files changed, 43 insertions(+) create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57160.patch diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57160.patch b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57160.patch new file mode 100644 index 0000000000..a25ed5a28e --- /dev/null +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57160.patch @@ -0,0 +1,42 @@ +From b14ebbccf5c228ca298ad11ecae2cedde792edae Mon Sep 17 00:00:00 2001 +From: Nanang Izzuddin +Date: Wed, 17 Jun 2026 15:43:46 +0700 +Subject: [PATCH] Merge commit from fork + +When printing a generic array header (e.g. Allow, Require, Supported, +Unsupported), the ": " delimiter following the header name was written +with two unchecked stores. copy_advance() only guarantees that the +header name itself fits, leaving as little as one byte before the end +of the buffer. The colon then consumed the last byte and the trailing +space was written one byte past the buffer end. + +Use copy_advance_char_check() for both delimiter bytes, matching the +boundary-checked pattern already used by every other header printer in +this file. + +Co-Authored-By Claude Code + +(cherry picked from commit d6a0e7f76611c3a6f530ee051e3e7a622bb1748c) + +CVE: CVE-2026-57160 +Upstream-Status: Backport [https://github.com/pjsip/pjproject/commit/d6a0e7f76611c3a6f530ee051e3e7a622bb1748c] +Signed-off-by: Ankur Tyagi +--- + pjsip/src/pjsip/sip_msg.c | 4 ++-- + 1 file changed, 2 insertions(+), 2 deletions(-) + +diff --git a/pjsip/src/pjsip/sip_msg.c b/pjsip/src/pjsip/sip_msg.c +index 06c8cce86..cdc99ff9e 100644 +--- a/pjsip/src/pjsip/sip_msg.c ++++ b/pjsip/src/pjsip/sip_msg.c +@@ -964,8 +964,8 @@ static int pjsip_generic_array_hdr_print( pjsip_generic_array_hdr *hdr, + &hdr->sname : &hdr->name; + + copy_advance(p, (*hname)); +- *p++ = ':'; +- *p++ = ' '; ++ copy_advance_char_check(p, ':'); ++ copy_advance_char_check(p, ' '); + + if (hdr->count > 0) { + unsigned i; diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb index 59684ac7c7..254a2952a2 100644 --- a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb @@ -14,6 +14,7 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=b234ee4d69f5fce4486a80fdaf4a4263" SRC_URI = "git://github.com/pjsip/pjproject.git;protocol=https;branch=master;tag=${PV} \ file://0001-ssl_sock_ossl-fix-OpenSSL-4.0-compatibility.patch \ + file://CVE-2026-57160.patch \ " SRCREV = "5a457451fa2712ba18e12b01738e8ff3af2b26fd" From patchwork Wed Oct 21 09:28:38 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101516 Received: from mail-dl1-f44.google.com (mail-dl1-f44.google.com [74.125.82.44]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.7516.1792575001586195287 for ; Wed, 21 Oct 2026 02:30:01 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=lReex3H0; spf=pass (domain: gmail.com, ip: 74.125.82.44, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-dl1-f44.google.com with SMTP id a92af1059eb24-15dd124bbe7so946743c88.1 for ; Wed, 21 Oct 2026 02:30:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792575001; x=1793179801; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=g6tK7E0d6qLxyz1B3ijBarfv9H7o6faRfpNwR0O3znA=; b=lReex3H0sC9Za6kXakcbzqfmOevbmPNQ3JECNrzShXiJHwSqwPNQJp8PS6N1supJMZ eNiWCgfqZGhtY3RanHGuVZ7xth3CSDfjHCu0BA+lFtQthC3JY6RzQobpQnD2bUBnTIPP duxUu4ls1CtlNYEKvl6gK2kP0+zNfNnkkDlOW97OucFJbHU79Pg17V5qOULxxvJruYZ4 WehaSEyyUoA7UtnZ3EiAdL0yaoKopSJedJgqdtX3b6EgzuqLZr67DbwoHtWCrs1vjQuF JiYDbbnftd9WrmdGvj0X13tFWjMnJFxYbs+ZymHy+EYwnK0ciM6FNrEQpZuDb1+i3WEP I0hA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792575001; x=1793179801; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=g6tK7E0d6qLxyz1B3ijBarfv9H7o6faRfpNwR0O3znA=; b=Pr1xBL1yUXVbYLbf9TPpJngd08tjdKzesVseHMsujflxZ+aQiMJxeJrokIgIP7nLnw HEXA+1iPriOgDJB3BZ/Ch14V5CENAv1L84gK8szmtCkElOf7LAA+n/CR5xb9oM9wZA2h i3axMarmOAssfnlttgJUlYivxX3UqhK3NgAfOBOu4wiOoSECjDT9YiJWkFnro6levg8c CF6K2fuRUFvWU7lCcO7dnc8Ec/Hhr5XPK+FFq1hPfT9IeMDy70MlucxkZBOYpRe9fKOW WiovEc7srlY3Gea0u0djkAVfn2YpcxMt/iOXb1r4AgCvynbij7Jb0aGhW6SbdwPdXPir Buug== X-Gm-Message-State: AFq9FYI5p7vFFpPGfP2NyO/Vitd6e9lETmbTLk4e90majVyiXQuQK3kY ykMgixDAX0qB8FifWl47Kq9/fTqO+1IWddc0V1AciaKgAcdD9L26dhMWDs8lOA== X-Gm-Gg: AYBFou3WyTzDdDEMC9WNIUacbg6wc4qVsY52bJS2B2zUW53M/rMjRIW13ObpL6AT73W l/vR91/9m18ACQV4yuITYZmKkXuB8EbaGJ2gwTORlNpCS6o8WuYeS7ysqqKspH8i4hXb5uP2erv NR71Ypm293HYYSMcHGiYGrq4RlbC5SKRb0xYMPAb7nqfJgw3Jq9JPiOjWRV9KybYpIhuhYEP/D6 85Y5uyPJf2skUUrNRRzZEqE+pPZx1xCa3HtoHKtgrwijqozCeSjHWvt0vKA8TaGbithbeZusPEi MEXI7+k0fk1MAJ5v1caOEhpiNK6pEHx3VyipYvQIbBXM+moSoIMZUjkKQZOsRjpLJ+Cu4E9JvYG +bb+CN7/nfYtnUSGmGYvhj49BJ4kX/4ziY83hSNb0petLrkel+sg8qLOEfvum9D4+PEEdUJRxTn MU0pVgnGzX3c5g4XRWfUGPoXN2sqFpyhDJxMLJTMhHtYVyLlXziLP0B042sdvDxtGc/9vSwpEx1 fUqVfnZj4s5dEJdgMe6/XHn1FFPlAEPso2ozJW0wGWtN4p0az49VdjjIBlEK57CKfN+MjpwIm+O rIQ7mgaiRs1vdfbcRS2/VMFpHnOycac= X-Received: by 2002:a05:7022:298:b0:13e:5a50:1e17 with SMTP id a92af1059eb24-1909f5c8466mr1829342c88.3.1792575000794; Wed, 21 Oct 2026 02:30:00 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id a92af1059eb24-19035c0c9a6sm4716458c88.3.2026.10.21.02.29.58 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 21 Oct 2026 02:30:00 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-multimedia][blacksail][PATCH 25/44] pjproject: patch CVE-2026-57161 Date: Wed, 21 Oct 2026 22:28:38 +1300 Message-ID: <20261021092857.3585453-25-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> References: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 21 Oct 2026 09:30:02 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131212 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-57161 Signed-off-by: Ankur Tyagi --- .../pjproject/pjproject/CVE-2026-57161.patch | 49 +++++++++++++++++++ .../pjproject/pjproject_2.17.bb | 1 + 2 files changed, 50 insertions(+) create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57161.patch diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57161.patch b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57161.patch new file mode 100644 index 0000000000..3296013efd --- /dev/null +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57161.patch @@ -0,0 +1,49 @@ +From 656cd5ec76f0178448053a9ca44ce075cd7a27f9 Mon Sep 17 00:00:00 2001 +From: Nanang Izzuddin +Date: Wed, 17 Jun 2026 15:44:40 +0700 +Subject: [PATCH] Merge commit from fork + +Bound the number of Service-Route URIs stored in the fixed-size uri[] +array by checking uri_cnt against PJ_ARRAY_SIZE(uri) before each write. +Previously the count was only checked as the do/while continuation +condition, which does not catch accumulation across multiple +single-URI Service-Route headers, allowing a registrar response with +more than PJSUA_ACC_MAX_PROXIES headers to write past the array. + +Co-Authored-By Claude Code + +(cherry picked from commit acc03b57cef7a7d31b8e1f5b9117437d7e87c591) + +CVE: CVE-2026-57161 +Upstream-Status: Backport [https://github.com/pjsip/pjproject/commit/acc03b57cef7a7d31b8e1f5b9117437d7e87c591] + +Signed-off-by: Ankur Tyagi +--- + pjsip/src/pjsua-lib/pjsua_acc.c | 12 ++++++------ + 1 file changed, 6 insertions(+), 6 deletions(-) + +diff --git a/pjsip/src/pjsua-lib/pjsua_acc.c b/pjsip/src/pjsua-lib/pjsua_acc.c +index f52518a2a..08c5efced 100644 +--- a/pjsip/src/pjsua-lib/pjsua_acc.c ++++ b/pjsip/src/pjsua-lib/pjsua_acc.c +@@ -2278,14 +2278,14 @@ static void update_service_route(pjsua_acc *acc, pjsip_rx_data *rdata) + return; + } + ++ if (uri_cnt >= PJ_ARRAY_SIZE(uri)) { ++ PJ_LOG(1,(THIS_FILE, "Error: too many Service-Route headers")); ++ return; ++ } ++ + uri[uri_cnt++] = h->name_addr.uri; + h = h->next; +- } while (h != hr && uri_cnt != PJ_ARRAY_SIZE(uri)); +- +- if (h != hr) { +- PJ_LOG(1,(THIS_FILE, "Error: too many Service-Route headers")); +- return; +- } ++ } while (h != hr); + + /* Prepare to find next Service-Route header */ + hsr = hsr->next; diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb index 254a2952a2..4c00c4215c 100644 --- a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb @@ -15,6 +15,7 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=b234ee4d69f5fce4486a80fdaf4a4263" SRC_URI = "git://github.com/pjsip/pjproject.git;protocol=https;branch=master;tag=${PV} \ file://0001-ssl_sock_ossl-fix-OpenSSL-4.0-compatibility.patch \ file://CVE-2026-57160.patch \ + file://CVE-2026-57161.patch \ " SRCREV = "5a457451fa2712ba18e12b01738e8ff3af2b26fd" From patchwork Wed Oct 21 09:28:39 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101517 Received: from mail-dl1-f49.google.com (mail-dl1-f49.google.com [74.125.82.49]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.7517.1792575003856577297 for ; Wed, 21 Oct 2026 02:30:03 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=oWe/Z5rA; spf=pass (domain: gmail.com, ip: 74.125.82.49, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-dl1-f49.google.com with SMTP id a92af1059eb24-157fe9d771bso660494c88.0 for ; Wed, 21 Oct 2026 02:30:03 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792575003; x=1793179803; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=ZRVxfBMG66IYvt9v2GYY2u5REaEBF5l7eO4Re6W7hGg=; b=oWe/Z5rA+X5HdYh1jHe3b1fX9ec9zV2VKOlSGgNEUDZam+HUzr/FfBttM3tEOd5AEw o8LMR7svVHO+c+wLoVlb9mkNR1mJIfPcUTlZFrij+WqZG/izU1GA4Riza8oHvVgOON6G ogFdlcbqmGyI14gpgFLoTT1YZeU349MqUq1rRd/zVe6dbVBk9t4zVZSVJqWRICSovpH3 WuD84s9Lo7DL2SlJ+UAYsBPHHnKoy+wRz1QqeOxZ4WjAuuRMdwdQhgDck2EGeqJ9dhqw b6jRzrRN2bQzvsVD13IMAFF/cbPVIyOKIEoDqPH1quEw1/UFHNBZ2Rp9wpSxbpdHnX5H bz0w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792575003; x=1793179803; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=ZRVxfBMG66IYvt9v2GYY2u5REaEBF5l7eO4Re6W7hGg=; b=XQzUs91Rjx5tA8rbW9ELCOgafUBgsjJJKu4kwZHbkD+NlKebS9U22JBfl1D6x+yU+1 VCLOgGkAj4+UgwT1wdo+f4yPz2M8g/dluU+hvO4mllttBF0cgvclOIyYGKV+cFsaEocs O8FziTIYxfeNRZUEwEoMP1/TYHSHyz8IaPyF6c0grlYG40BdVI1RrLZq4AAbo2dMIj6+ WrEFaw6HuE9GXR7pcBlFwI2KobicQv6ZlJZZueKqf/IMMl3bz34yi4AKQfNrB+b9u3L3 38aCGel8YsGpseTpmIaSS7pwtCdMH55eDAAlve2szRdQekWRC+jiCXg9kvLfkSoUZxS5 u7mQ== X-Gm-Message-State: AFq9FYL+KaEW9Kkg9LuqsYc9S/hnE1anua9chBbS9g2RUQOPfE2a2APi +dZXXqaM1rng5Syndk1ylw3yh0EdstN6wGUvInJnPlUD3bYvgDGJsOynmvC/Hw== X-Gm-Gg: AYBFou29rYJKouuiRwoioNYF+ZKwPBd3k7AlVyhVwhe7GRYVUd5MtVKh/a8fqyvdJX8 2hcxinKLwLW9XiSDHPhRZ58oXb8IMuNh4yYxjww8XQHnWl0DxqqtJsOf5VbEpWRz6/XLj9v8K82 UOPbIc1hhOS1tM9RomiMLLwrsLKCsGhww56Z+1e2IrjCvy/gn+aKZsf1LxL/z3E9piIfbZnZdG+ 3WNtMji+ud0Friohrgkvk6i1BXtE60E7o9lwABUfshX3hNaZYu02XaGP7sN/vBVxBq7e8aRxmLK DeA/Bkuv56YrE3NJW1O345+WTrMAwgAlXeYzAE5ig2Z6e7PVxY8jHEWJP9nEHc0//2ZUUFeDdtf 1UU2zOVlc7mNe3ZJxGwUKKOuKz6v5OiOn0aAxCafNxg9KoMwP/KVIpBMQmc1PfsbWlFCivPglHD NaJ8HIEcIZRK+N32eNsh9UIRAbF3+FwoGBbqmMIPtnlPgnVCZDVZ9K5vk8iQDrMU+Q4AbUfjhqD BSK6X+fugx+tUU5yWbklfYA1BnpdL6BLCS+R1IagYrNMlHe9X1b8+S8UkWU3Srb3gQBoQ8DDNad po40cJCnwKbLpOtF3fz7ULO7n6f9Z/CbrA== X-Received: by 2002:a05:701a:ca0a:b0:144:e246:a0b2 with SMTP id a92af1059eb24-190a7756b98mr2399037c88.44.1792575003096; Wed, 21 Oct 2026 02:30:03 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id a92af1059eb24-19035c0c9a6sm4716458c88.3.2026.10.21.02.30.01 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 21 Oct 2026 02:30:02 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-multimedia][blacksail][PATCH 26/44] pjproject: patch CVE-2026-57162 Date: Wed, 21 Oct 2026 22:28:39 +1300 Message-ID: <20261021092857.3585453-26-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> References: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 21 Oct 2026 09:30:12 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131213 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-57162 Signed-off-by: Ankur Tyagi --- .../pjproject/pjproject/CVE-2026-57162.patch | 43 +++++++++++++++++++ .../pjproject/pjproject_2.17.bb | 1 + 2 files changed, 44 insertions(+) create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57162.patch diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57162.patch b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57162.patch new file mode 100644 index 0000000000..85a9394e25 --- /dev/null +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57162.patch @@ -0,0 +1,43 @@ +From 1b64bfb240731bbf0fc194dec68bb9d9b08a20b2 Mon Sep 17 00:00:00 2001 +From: Nanang Izzuddin +Date: Wed, 17 Jun 2026 15:45:33 +0700 +Subject: [PATCH] Merge commit from fork + +sdes_encode_sdp() in transport_srtp_sdes.c wrote each parsed crypto tag +into the fixed int tags[64] array without bounding the count, while the +SDP parser allows up to PJMEDIA_MAX_SDP_ATTR (68) attributes. Reject +the SDP with PJMEDIA_SRTP_ESDPINCRYPTO once the array capacity is +reached, before the out-of-bounds write. + +Co-Authored-By Claude Code + +(cherry picked from commit a1b707c0c9b0506faf2a8a438b60f11ffd6a6fd9) + +CVE: CVE-2026-57162 +Upstream-Status: Backport [https://github.com/pjsip/pjproject/commit/a1b707c0c9b0506faf2a8a438b60f11ffd6a6fd9] + +Signed-off-by: Ankur Tyagi +--- + pjmedia/src/pjmedia/transport_srtp_sdes.c | 9 +++++++++ + 1 file changed, 9 insertions(+) + +diff --git a/pjmedia/src/pjmedia/transport_srtp_sdes.c b/pjmedia/src/pjmedia/transport_srtp_sdes.c +index 8f98292ba..45038e585 100644 +--- a/pjmedia/src/pjmedia/transport_srtp_sdes.c ++++ b/pjmedia/src/pjmedia/transport_srtp_sdes.c +@@ -478,6 +478,15 @@ static pj_status_t sdes_encode_sdp( pjmedia_transport *tp, + + has_crypto_attr = PJ_TRUE; + ++ /* Bound writes to tags[] by its capacity. m_rem->attr_count ++ * is capped by the SDP parser at PJMEDIA_MAX_SDP_ATTR, which ++ * can exceed PJ_ARRAY_SIZE(tags); without this guard a remote ++ * peer can overflow the stack array by sending more than ++ * PJ_ARRAY_SIZE(tags) a=crypto attributes. ++ */ ++ if (cr_attr_count >= PJ_ARRAY_SIZE(tags)) ++ return PJMEDIA_SRTP_ESDPINCRYPTO; ++ + status = parse_attr_crypto(srtp->pool, m_rem->attr[i], + &tmp_rx_crypto, + &tags[cr_attr_count]); diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb index 4c00c4215c..f47d661400 100644 --- a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb @@ -16,6 +16,7 @@ SRC_URI = "git://github.com/pjsip/pjproject.git;protocol=https;branch=master;tag file://0001-ssl_sock_ossl-fix-OpenSSL-4.0-compatibility.patch \ file://CVE-2026-57160.patch \ file://CVE-2026-57161.patch \ + file://CVE-2026-57162.patch \ " SRCREV = "5a457451fa2712ba18e12b01738e8ff3af2b26fd" From patchwork Wed Oct 21 09:28:40 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101518 Received: from mail-dl1-f48.google.com (mail-dl1-f48.google.com [74.125.82.48]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.7550.1792575006048973012 for ; Wed, 21 Oct 2026 02:30:06 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=Jo6JsCBG; spf=pass (domain: gmail.com, ip: 74.125.82.48, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-dl1-f48.google.com with SMTP id a92af1059eb24-1517bda04a0so521882c88.0 for ; Wed, 21 Oct 2026 02:30:06 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792575005; x=1793179805; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=pR3efk9V945RF1Ehnif5g2/34jpUaH2DQHCr2HZ0CKM=; b=Jo6JsCBGX+CgdD4jb9W1FdzUhPRh47WV+/kZP7BcwnlPzwbOe2dodftAWbHbQ3rTq+ niEwF4G6Gy1UVqktqjQAxBZQc9Qgh2NFVsaACEz2yx/1qqOobOH/pcHTRijFuA0SIexf 52iwMsBWfmXvKTvcN8uThXteXpsm7Vlmi9HuVu07DCqRPaRRgwkGk4qzkzOoC5aIBUx7 6LRZh5Pn99Ailf3uEh0x4jS56kHM5mMTMYzEqHDi7Ip8yIt8Ghmg/w/DhtR6M1nRCCFO sBMd72VrMJnVEIliWVT8qKEmeb2AKvYKhPBkEFIg9hIjqq+Qlaf09ljctikyyAZ21Xa2 UUOA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792575005; x=1793179805; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=pR3efk9V945RF1Ehnif5g2/34jpUaH2DQHCr2HZ0CKM=; b=pUIPxhyKK25ff2W13zRU/CW83nB7DIndcAIVwu8m7hfae8XBk5/KWhRmtxwFKZhfY3 8SwiAgGuzEBnnXJ6HiA/GKBzqcXBSUdxOQN11cldRoEKh2taojR7MhSZBstDQvXdToen HDTyRS5E6oNXXIqJ8q1+B8uf8rldwq/xxJIPNnMTP8sFFIz21niI8xvjsRrB+SCWO+SD bhXc/7EQOExifpN36dDsgqlurVQdtooV70cRfxGNns3NLFhx+Bh3CLqKvEdPhcJldxwV DVQS+OIWhw9vb8EByAmmj8/coBn5cjsLBUkRxj2GR+Tys3/5nzoKjwqU/DJ3V6LXEWBX 8Pjw== X-Gm-Message-State: AFq9FYKe+nZDkiyZ4bNzIesrgIV4md/E83ay3npN1rlxCIItOKvBXnEQ ZA3ZN202aJNS9dKvEizQbBUgXZSMIV5wd6LLk1jOnsfI6h2VE7I8KB/9wb1v3w== X-Gm-Gg: AYBFou0PNgI5hQ6gppQ5vocdrsm8Zi8R/uwXnrScLqFgU/WhF9c9mt5CHulHI72tZ37 xX3NEGnY0x9RktSdnCPfaiM6qwFCLkiluGoB9kRbHWsMoNlOBR+tXl5Lx6Vj7jW64e+n5FdflJe SkRmGZlcfjhanFK3N1sJTDMRt2pyN1pkLOfadfFCvNN4849GuqztzL/qiDHND/pO1UWffT0Bsit fylx054aLNuxuVN9wvNkc1RGbxGOpr0WHEF3Hucw2pJS8tUdPPDOT2JPdoRlFkNMLiVquj6ioyA oKsBnRYDIMnm9OCibY4QzkKKtayPyZAcCGA3NNY7hbemWC0IsKsRL9nANET31k4pTwL+Daae3fO d/9iZ6VzwI3/95vcww64mIaMXBFaaItngjNAuhV9usHaBgk06cr0+bb9i8RMHzWOqBwC10yveQU Yg1HjM6qKk/4ulcnxA3mpmoRrYvVu5Vjs00XQ/aiYCnwJNzsPl8FCLtFpynKUdk0bypVMAcfTmQ vniSPcXqFiX/vdV2nWsNxMp4aE8OzT1YLfuuHjqPGEsoJ+mCKftDsAQu2j9bfdo3D8C5tCa7j9a BXuXQTY96J41KQjP6SI/DtsB9fsmid4= X-Received: by 2002:a05:701b:4551:20b0:144:fb87:5b91 with SMTP id a92af1059eb24-190a7c21caemr1733807c88.44.1792575005228; Wed, 21 Oct 2026 02:30:05 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id a92af1059eb24-19035c0c9a6sm4716458c88.3.2026.10.21.02.30.03 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 21 Oct 2026 02:30:04 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-multimedia][blacksail][PATCH 27/44] pjproject: patch CVE-2026-57163 Date: Wed, 21 Oct 2026 22:28:40 +1300 Message-ID: <20261021092857.3585453-27-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> References: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 21 Oct 2026 09:30:12 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131214 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-57163 Signed-off-by: Ankur Tyagi --- .../pjproject/pjproject/CVE-2026-57163.patch | 52 +++++++++++++++++++ .../pjproject/pjproject_2.17.bb | 1 + 2 files changed, 53 insertions(+) create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57163.patch diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57163.patch b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57163.patch new file mode 100644 index 0000000000..7b3c681cb9 --- /dev/null +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57163.patch @@ -0,0 +1,52 @@ +From 2276d5ff1fe185a6bb51ab741dd5d88e45dbaa47 Mon Sep 17 00:00:00 2001 +From: Nanang Izzuddin +Date: Wed, 17 Jun 2026 15:46:16 +0700 +Subject: [PATCH] Merge commit from fork + +The SAN-counting loop in tls_cert_get_info() (ssl_sock_gtls.c) called +gnutls_x509_crt_get_subject_alt_name() with len still holding +sizeof(buf) (512) from an earlier getter, while the output buffer is +only 256 bytes, so an oversized SAN entry overflowed the stack. Set len +to the true capacity (sizeof(out) - 1, matching the populate loop) on +every iteration. + +Co-Authored-By Claude Code + +(cherry picked from commit c4a151af86fadd16d9480b2603eeb2abf4fb4f78) + +CVE: CVE-2026-57163 +Upstream-Status: Backport [https://github.com/pjsip/pjproject/commit/c4a151af86fadd16d9480b2603eeb2abf4fb4f78] + +Signed-off-by: Ankur Tyagi +--- + pjlib/src/pj/ssl_sock_gtls.c | 12 +++++++++++- + 1 file changed, 11 insertions(+), 1 deletion(-) + +diff --git a/pjlib/src/pj/ssl_sock_gtls.c b/pjlib/src/pj/ssl_sock_gtls.c +index de3d5e99e..68ceea3f3 100644 +--- a/pjlib/src/pj/ssl_sock_gtls.c ++++ b/pjlib/src/pj/ssl_sock_gtls.c +@@ -1018,12 +1018,22 @@ static void tls_cert_get_info(pj_pool_t *pool, pj_ssl_cert_info *ci, + if (ci->version >= 3) { + char out[256] = { 0 }; + /* Get the number of all alternate names so that we can allocate +- * the correct number of bytes in subj_alt_name */ ++ * the correct number of bytes in subj_alt_name. ++ * ++ * Pass the true capacity of 'out' as the in/out size argument on ++ * every iteration. 'len' otherwise still holds sizeof(buf) (512) ++ * from an earlier getter, which would let GnuTLS copy an oversized ++ * SubjectAltName entry past the end of the 256-byte 'out' buffer. ++ * Use sizeof(out) - 1 to match the populate loop below, leaving ++ * room for the NUL terminator GnuTLS appends to string names. ++ */ ++ len = sizeof(out) - 1; + while (gnutls_x509_crt_get_subject_alt_name(cert, seq, out, &len, + NULL) != + GNUTLS_E_REQUESTED_DATA_NOT_AVAILABLE) + { + seq++; ++ len = sizeof(out) - 1; + } + + ci->subj_alt_name.entry = pj_pool_calloc(pool, seq, diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb index f47d661400..de8c847271 100644 --- a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb @@ -17,6 +17,7 @@ SRC_URI = "git://github.com/pjsip/pjproject.git;protocol=https;branch=master;tag file://CVE-2026-57160.patch \ file://CVE-2026-57161.patch \ file://CVE-2026-57162.patch \ + file://CVE-2026-57163.patch \ " SRCREV = "5a457451fa2712ba18e12b01738e8ff3af2b26fd" From patchwork Wed Oct 21 09:28:41 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101519 Received: from mail-dl1-f42.google.com (mail-dl1-f42.google.com [74.125.82.42]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.7523.1792575008729817734 for ; Wed, 21 Oct 2026 02:30:08 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=SNIQJO58; spf=pass (domain: gmail.com, ip: 74.125.82.42, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-dl1-f42.google.com with SMTP id a92af1059eb24-15354aa70e8so1571939c88.1 for ; Wed, 21 Oct 2026 02:30:08 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792575008; x=1793179808; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=my3aHPQ+XKAsKwrHoA/J6cftaiRbxxhRGb8taRcnlyk=; b=SNIQJO58FmyD05WYqOMVVm8n3r3HDSKYjr/HY3lBvfR4Ds4wMVdngRiN+JoOLw/wHY DiUFZW6o+nDyzisOHlgOgMmJoZ0qQJ6YhmwXFSqbQYNFfNoB3MzpGTHKigPLIg2+OmY3 Z1QZoMSJXJBzwCnxSX/ySwiwaGQpozcZGspVOId+X9II1r++UPEu5X60ZqBU9vPHnX2K isJtfISrNlwao6OTllHyCdUHu2vO/nLGAlQD47KEcOcrak00appTQmNQW27LNMW2J9Mg HUWW0L51gACSEI9/dSpX8jTAYGKz4FLypI3LQx8Pz4+u+HIThVpQa3VglZogiBaONfL5 DxJA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792575008; x=1793179808; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=my3aHPQ+XKAsKwrHoA/J6cftaiRbxxhRGb8taRcnlyk=; b=YQ4QLThSj8I8/ueIASgRoh0u9vF6nh0TvrJ5YtqyXTRg502iHpJ4cqjCrGa4qsgQsl VY00sCmjrQHd7le55ItC0jH40eN32I6L91HWYDGdxvqLkGWSxmvuoh0NbbuEzRqWZRzU T8bfFdutO/eWtPzXGPkbHJFX+DhHFEbB1PKUNGJp55nmUQQJeT5T5IoGeLM7VxDk88Yh Xly7ll2N+cCZCg/6FGq9TquuaW7JkJ5h+uF70bynQbtysbloeOGdcWGaddXWVEqqEctn HpJcM3Sl6j9+SjBli7zUQBTzV3bk4DmKItxXHsCtxSMH7pb0eFSfdkqTGFZFAfKPRTl+ IFNw== X-Gm-Message-State: AFq9FYKcCaqUBcN1T+Yc2BA1TqGoNu5FrxErPgGlCc/N6XjabkE9eDMj mT/7iADnQhQQdjDbf2gzruvZs6GTZLKDN3F9JHdtRoLTVws9+Y/lRjShkpJ5TQ== X-Gm-Gg: AYBFou3h9xgWWU4i2aGf7Og46N5yjgrjACYfDrgXaiDvBrhvf6ZHvz8kE+WXzo5+vbp x9U/yIWRxFR0JorTJQM+YZwvuOk5iVJYVN/VGw2wB2dFWq/VIHPebmVHgJGeMu0kYPr+KPVwBUg Yiq+CvVIbDuv5eq3ePPX4eqyDzOCz/sxnoDOJgecuIvNaHTJ8pfqM6cyTI4L6f/GKp1Lcx2ba2b HZAjjkq/CvgtqIsfowN8XKVcsrRj5zzS2Z1mlQCLqwIR4KFcmn0ZNJawwwS5uLlGtc/ssT8mKZS BP34xRSuKC0kItoJRospZRCsrnbpxbgrgoAWcGTcwqZfd15MUPen96FVLCu71g58X9ux2N1Ljv7 qJrbjQFxEDYlpKdQdzdjwxwKE2FfLRP/pWZhmdSkMVELobiQMvbcD0dg3DFfGmhLcGCI1gTBG3g hQBA8zDfR/ImSIrd40wsfezOZgmpJzJPMYNUDZf42IJGSkVqwuTC37ukMXTROJslo4cnPtR5RP0 pmEQMx4ElFY5XlTH13eKjo/IeDXVyn0M/OaEvguLGhSvmhlVy44y+MuXjaw2v+/7chqNLzERtZf 8G1pZBSc3xyXI4ZG0mU7wAFe4EXKvIIaNjzni8gH3/T8umQOIx4K X-Received: by 2002:a05:7022:43:b0:189:f7f6:38f3 with SMTP id a92af1059eb24-190a465c132mr2416186c88.13.1792575007636; Wed, 21 Oct 2026 02:30:07 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id a92af1059eb24-19035c0c9a6sm4716458c88.3.2026.10.21.02.30.05 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 21 Oct 2026 02:30:07 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-multimedia][blacksail][PATCH 28/44] pjproject: patch CVE-2026-57164 Date: Wed, 21 Oct 2026 22:28:41 +1300 Message-ID: <20261021092857.3585453-28-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> References: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 21 Oct 2026 09:30:12 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131215 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-57164 Signed-off-by: Ankur Tyagi --- .../pjproject/pjproject/CVE-2026-57164.patch | 66 +++++++++++++++++++ .../pjproject/pjproject_2.17.bb | 1 + 2 files changed, 67 insertions(+) create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57164.patch diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57164.patch b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57164.patch new file mode 100644 index 0000000000..0686d681c3 --- /dev/null +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57164.patch @@ -0,0 +1,66 @@ +From 1160ff3c15cfa79f50d4bc6ce8066854f656066c Mon Sep 17 00:00:00 2001 +From: Nanang Izzuddin +Date: Wed, 17 Jun 2026 15:46:48 +0700 +Subject: [PATCH] Merge commit from fork + +http_on_data_read() in http_client.c grew the response buffer by a +single doubling, which is insufficient when the server sends a body +larger than twice the (attacker-supplied) Content-Length used for the +initial allocation. Loop the doubling until the buffer fits, with a +floor for the size==0 case to avoid an infinite loop. + +Co-Authored-By Claude Code + +(cherry picked from commit 8d5956afab2ede95ddb199078dc19a8ac0114f3d) + +CVE: CVE-2026-57164 +Upstream-Status: Backport [https://github.com/pjsip/pjproject/commit/8d5956afab2ede95ddb199078dc19a8ac0114f3d] + +Signed-off-by: Ankur Tyagi +--- + pjlib-util/src/pjlib-util/http_client.c | 27 ++++++++++++++++++------- + 1 file changed, 20 insertions(+), 7 deletions(-) + +diff --git a/pjlib-util/src/pjlib-util/http_client.c b/pjlib-util/src/pjlib-util/http_client.c +index bd441acb9..d2771d240 100644 +--- a/pjlib-util/src/pjlib-util/http_client.c ++++ b/pjlib-util/src/pjlib-util/http_client.c +@@ -432,18 +432,31 @@ static pj_bool_t http_on_data_read(pj_activesock_t *asock, + hreq->response.size); + } + +- /* If the size of data received exceeds its current size, +- * grow the buffer by a factor of 2. ++ /* If the size of data received exceeds its current size, grow the ++ * buffer by a factor of 2 repeatedly, until it can actually hold ++ * everything received so far. A single doubling is not sufficient ++ * when the server delivers a body chunk larger than twice the ++ * (possibly undersized) Content-Length used for the initial ++ * allocation, which would otherwise overflow the buffer in the ++ * pj_memcpy() below. + */ +- if (hreq->tcp_state.current_read_size + size > +- hreq->response.size) ++ if (hreq->tcp_state.current_read_size + size > ++ hreq->response.size) + { + void *olddata = hreq->response.data; ++ pj_size_t new_size = hreq->response.size; + +- hreq->response.data = pj_pool_alloc(hreq->pool, +- hreq->response.size << 1); ++ /* Guard against size==0 (Content-Length: 0 with a body), which ++ * would make the doubling loop below spin forever. ++ */ ++ if (new_size == 0) ++ new_size = INITIAL_DATA_BUF_SIZE; ++ while (hreq->tcp_state.current_read_size + size > new_size) ++ new_size <<= 1; ++ ++ hreq->response.data = pj_pool_alloc(hreq->pool, new_size); + pj_memcpy(hreq->response.data, olddata, hreq->response.size); +- hreq->response.size <<= 1; ++ hreq->response.size = new_size; + } + + /* Append the response data. */ diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb index de8c847271..8e0b358ffe 100644 --- a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb @@ -18,6 +18,7 @@ SRC_URI = "git://github.com/pjsip/pjproject.git;protocol=https;branch=master;tag file://CVE-2026-57161.patch \ file://CVE-2026-57162.patch \ file://CVE-2026-57163.patch \ + file://CVE-2026-57164.patch \ " SRCREV = "5a457451fa2712ba18e12b01738e8ff3af2b26fd" From patchwork Wed Oct 21 09:28:42 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101520 Received: from mail-dy1-f182.google.com (mail-dy1-f182.google.com [74.125.82.182]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.7553.1792575011345534721 for ; Wed, 21 Oct 2026 02:30:11 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=T1BW7rqO; spf=pass (domain: gmail.com, ip: 74.125.82.182, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-dy1-f182.google.com with SMTP id 5a478bee46e88-3514b90bb89so1371676eec.1 for ; Wed, 21 Oct 2026 02:30:11 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792575011; x=1793179811; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=r3KJ3yyJKfspcu8H365dSee74tV0BXuG6FsNAfJkHi8=; b=T1BW7rqOjiNuAaBiJnfLd0G/XPNgNZ6tiAH3F1ztyANcMKA9wpqO50D6aatW3Jee+X i75Z/QOnzQXhQ2hUQnP381HlHQfaHtKsIESwvakkC30nJXjBp7LS0dHWC85PQEHISxAQ i8/yyN84onSt8p0gf3MCJ8jmiZ1cgKy8fntjMKspZ6LP52ZMaymdA5QADmfkNWwjmnRO G/IbUfD52ebYiU6wYW0DEU/vlN+xqNizqxq7Er/50M5rM7KubcO9wG6paXu76acfBxAd xYO0N1WET0sqv4Ne0BcEdrOAGLvDic7QmimxMqVMC2OL1Yt9uRyL1KKCHBEGR8fJ5JQq kVPQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792575011; x=1793179811; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=r3KJ3yyJKfspcu8H365dSee74tV0BXuG6FsNAfJkHi8=; b=Irr8i5TQ8Lxkb4lFNDBrD/3jj7crp3yJPSn5RpaTxiQG2CEoVzGxN1SVVTfAMupVcJ wuH71J/wLOJ+n+6YwQPJn9Frt3WWKzrJ/DBb1sKxMiqufc00RTD5oqFpc3SdRoaoe2Rn 4PUBcx5G0jm+wWJXh2T2WfRxe3BLmtkg027U4okss0wOqHzPm2BidMZTgi6kAWUXul1q tltmWZRjbKrjeO6eEmNsOZ61ce+v2qmEcAoEi2OcMepOz1UrfCfPgR9aKmbI4pp4FQ69 jJ2Y9upolmlZRMRXNiXkJsRy9LtfsHQxbmoGEoU4c2PsKhC5zjHyE3gXOnaQAk08/X+1 /KnQ== X-Gm-Message-State: AFq9FYJs7gGyQ2uPL0A8JP7i/Fzh1gu4CtdTuZdP5FClgowHRyh0TKlg pN0fNKQZ2DyBinZE+A1gwccAI/NT7wx8EPsmhkcYKDqzJJJJIjyPmZ2U+0UBww== X-Gm-Gg: AYBFou1dWfwRC4fEgEx3r41C2msrAOqbIDTh+cZC2KIh/o/uvxjd+AJ/eGMvTQ1Qg6p G7PP89zwypQ+O+luRaydWGUlKA1eDv3DPMsjIG/jjK9QMpsnQZ2bx/kvkEL1nUtHdwUXXcefySD wx7C9HpDcWTduGWvd13z30o1rgeURsDy2hXuET8fLPoSBrCOpbU5OLx5ytEZ9u2IYP6BiiTR+8t wrm/s6gfM9Tvt9p7/UMJHNNQKOHsKNPzis0FPLR49lcl/mXQfWjJhhdaBxmV4HWADjVb7oUMBOd IlT7owNL9QnzRy1gTK2UWSsGIZvtXE7wh41gaUCiH6/Vp69w+Hn0pUNzjl3c2huapHrJawaPjEJ Wre9IWyrcwgNGmJm2T+G8KX4dfS9nBbzw8euElQuQzHg3duuJYL/gaDnjT/dn6wLClTfWRxIqSl FvQ/ShUe9sq8RoI7gtpFMI3G2THIoQ4GMfEfemy5hZfi04SV+4Z0ZVM+18eVQ8KM+qzNi3jfKrV AHDThDDAgbLPItMZqTOC8VtJ0ZEBahdVgd/5Id2LW1Rk7g5ewJSuGVQ46OQsBbhAeRfAd2vtrzu dGGDMt2VE4OEVMe9JAa0c1Qr86oCHhU= X-Received: by 2002:a05:701b:4550:10b0:150:1cea:31a8 with SMTP id a92af1059eb24-190a4ffa89dmr2077009c88.19.1792575010531; Wed, 21 Oct 2026 02:30:10 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id a92af1059eb24-19035c0c9a6sm4716458c88.3.2026.10.21.02.30.08 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 21 Oct 2026 02:30:09 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-multimedia][blacksail][PATCH 29/44] pjproject: patch CVE-2026-57165 Date: Wed, 21 Oct 2026 22:28:42 +1300 Message-ID: <20261021092857.3585453-29-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> References: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 21 Oct 2026 09:30:12 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131216 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-57165 Signed-off-by: Ankur Tyagi --- .../pjproject/pjproject/CVE-2026-57165.patch | 85 +++++++++++++++++++ .../pjproject/pjproject_2.17.bb | 1 + 2 files changed, 86 insertions(+) create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57165.patch diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57165.patch b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57165.patch new file mode 100644 index 0000000000..e2d62b0eef --- /dev/null +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57165.patch @@ -0,0 +1,85 @@ +From 5776ee452296d5277d71e2bb011709adec80a533 Mon Sep 17 00:00:00 2001 +From: Nanang Izzuddin +Date: Wed, 17 Jun 2026 15:47:29 +0700 +Subject: [PATCH] Merge commit from fork + +handle_up_down() in cli_telnet.c accumulated cur_pos + 2*rcmd->len + +history->slen bytes into a fixed PJ_CLI_MAX_CMDBUF stack buffer with no +bound check. Size the buffer for the worst case, clamp each term to +PJ_CLI_MAX_CMDBUF, and replace the trailing unchecked pj_strcat with a +bounded pj_memcpy. + +Co-Authored-By Claude Code + +(cherry picked from commit 628b71638465bacf66e767959e6acbab822eccd6) + +CVE: CVE-2026-57165 +Upstream-Status: Backport [https://github.com/pjsip/pjproject/commit/628b71638465bacf66e767959e6acbab822eccd6] + +Signed-off-by: Ankur Tyagi +--- + pjlib-util/src/pjlib-util/cli_telnet.c | 33 ++++++++++++++++++++------ + 1 file changed, 26 insertions(+), 7 deletions(-) + +diff --git a/pjlib-util/src/pjlib-util/cli_telnet.c b/pjlib-util/src/pjlib-util/cli_telnet.c +index 150727bb5..0a2954bd4 100644 +--- a/pjlib-util/src/pjlib-util/cli_telnet.c ++++ b/pjlib-util/src/pjlib-util/cli_telnet.c +@@ -1141,7 +1141,14 @@ static pj_bool_t handle_up_down(cli_telnet_sess *sess, pj_bool_t is_up) + history = get_prev_history(sess, is_up); + if (history) { + pj_str_t send_data; +- char str[PJ_CLI_MAX_CMDBUF]; ++ /* The redraw sequence can accumulate up to ++ * cur_pos + 2 * rcmd->len + history->slen ++ * bytes, each term bounded by PJ_CLI_MAX_CMDBUF, so size the ++ * local buffer for the worst case and clamp each term below. ++ */ ++ char str[PJ_CLI_MAX_CMDBUF * 4]; ++ unsigned cur_pos, buf_len; ++ pj_size_t hist_len; + enum { + MOVE_CURSOR_LEFT = 0x08, + CLEAR_CHAR = 0x20 +@@ -1149,15 +1156,24 @@ static pj_bool_t handle_up_down(cli_telnet_sess *sess, pj_bool_t is_up) + send_data.ptr = str; + send_data.slen = 0; + ++ cur_pos = sess->rcmd->cur_pos; ++ buf_len = sess->rcmd->len; ++ hist_len = history->slen; ++ if (cur_pos > PJ_CLI_MAX_CMDBUF) ++ cur_pos = PJ_CLI_MAX_CMDBUF; ++ if (buf_len > PJ_CLI_MAX_CMDBUF) ++ buf_len = PJ_CLI_MAX_CMDBUF; ++ if (hist_len > PJ_CLI_MAX_CMDBUF) ++ hist_len = PJ_CLI_MAX_CMDBUF; ++ + /* Move cursor position to the beginning of line */ +- if (sess->rcmd->cur_pos > 0) { +- pj_memset(send_data.ptr, MOVE_CURSOR_LEFT, sess->rcmd->cur_pos); +- send_data.slen = sess->rcmd->cur_pos; ++ if (cur_pos > 0) { ++ pj_memset(send_data.ptr, MOVE_CURSOR_LEFT, cur_pos); ++ send_data.slen = cur_pos; + } + +- if (sess->rcmd->len > (unsigned)history->slen) { ++ if (buf_len > (unsigned)hist_len) { + /* Clear the command currently shown*/ +- unsigned buf_len = sess->rcmd->len; + pj_memset(&send_data.ptr[send_data.slen], CLEAR_CHAR, buf_len); + send_data.slen += buf_len; + +@@ -1167,7 +1183,10 @@ static pj_bool_t handle_up_down(cli_telnet_sess *sess, pj_bool_t is_up) + send_data.slen += buf_len; + } + /* Send data */ +- pj_strcat(&send_data, history); ++ if (hist_len > 0) { ++ pj_memcpy(&send_data.ptr[send_data.slen], history->ptr, hist_len); ++ send_data.slen += hist_len; ++ } + telnet_sess_send(sess, &send_data); + pj_ansi_strxcpy2((char*)sess->rcmd->rbuf, history, + sizeof(sess->rcmd->rbuf)); diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb index 8e0b358ffe..e7cae469ed 100644 --- a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb @@ -19,6 +19,7 @@ SRC_URI = "git://github.com/pjsip/pjproject.git;protocol=https;branch=master;tag file://CVE-2026-57162.patch \ file://CVE-2026-57163.patch \ file://CVE-2026-57164.patch \ + file://CVE-2026-57165.patch \ " SRCREV = "5a457451fa2712ba18e12b01738e8ff3af2b26fd" From patchwork Wed Oct 21 09:28:43 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101521 Received: from mail-dl1-f43.google.com (mail-dl1-f43.google.com [74.125.82.43]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.7525.1792575014091249112 for ; Wed, 21 Oct 2026 02:30:14 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=WVu4jPiw; spf=pass (domain: gmail.com, ip: 74.125.82.43, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-dl1-f43.google.com with SMTP id a92af1059eb24-15dd124bbe7so947051c88.1 for ; Wed, 21 Oct 2026 02:30:14 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792575013; x=1793179813; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=ksQHST4eSfDUcwni8T/B9cuekd3lKyWtQo9c0ZUXCCA=; b=WVu4jPiwI+8o8f3ImIf/f3LL7Vq1sDOeKjHmnLAFI98SRRSJiFLfdIXckAcUMWkb6j SDjhUUgadM33rjtlRqktFC+nbr4HlsTz+/IGPb/EfB6GyhiYD6/Zsbdz/SB1LSW4lKMf z6SlkvjnbFkBHa3UgDmQeuURokxoHXc+NdTbEzuxRzPqJc1XyXVGyzRmUr3BVOFzkqTm eCZ8NKW6GG1OOczcirRoSLQC6TWFctusGaTMhNMti/s7CTLNYxheG+CZaqWfma70jMH1 z32gWnjUKUSxOd4bFzMXpoSMpQXg1YJdSmmd/n38tl1ZkFqw/KrLP5cxH3Kax/pe8MDn SlaQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792575013; x=1793179813; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=ksQHST4eSfDUcwni8T/B9cuekd3lKyWtQo9c0ZUXCCA=; b=HQmmoE9KDk7LGUZaf35FFj/uRZ5YsFfV6yVDd/HWoI/YrlsgoiN/PpF+gXJyoVR9wC pxpBZxbuojgil+293NUXp253CojqkeNV7XmqBgq2OZAfVD7qv/82XPg7kc7d3gi2TY9p N8jTigFGDLYF4QEfJCwuBJeff0wguyoRHVgmwinq5m/qG9ivtF7gzN9aaW4cJveq60ib d/WLjc9+T4wy/N6fuVewQMLnp4cw4QKJTKff+ZNDLG+O36HQF04d5mkywi8q7D69Xw3t REF7UkicPyMcjegk8yLE3LIeEzK5gnT+0w6ccFjahBAXzZR1FdqMu0FjVH1Vga4ztbrN xAOw== X-Gm-Message-State: AFq9FYJPS94129j2YawgCFhmvy9g8T6yorJrxVio4gx+37hD3xjx5IN9 WYaw5C3BifmngBNGhhtVYdSDjh+ixOH94F2/JauVRxBpqaJXYSXLmkFgnXimpA== X-Gm-Gg: AYBFou0yFh8kbZZ3DL6mCXTp1/JFR5wBdUSTJsLF/HxMr7+ofn3iWKrLtSLl2Bsf6Wv 0NJwXvw99B43SuuFRbty8EKUPkT2zcokkPKiQfBkUzj+/Do0jWAy6QSyzeGcfUYSPLh7OrX1H7X JIUCktPkGF/e7GZC6UwE8Sy1k62Cg66gVvQNBOBZG7RMH8DAW86NFkz/5btQtd9MUa9dJSjSTBM 5UnF3YlbVBusRzmUFcG8jGC9B9h5L1V++5TNaTkRKKGlx+Ojy1RPyiPQ2sx1sIduYYj/gwLn3DD Fj1mTeDVlJRy2uVz8Y87pTBs/86NRSjEOV+qsbu+c9dbDWk08gTsWWHK/wwYyzH5MJd9yBJC9Kw aZa9K+0d5XOMm5lCbKfUgzeY9m8fVSIukNShTJkRKHlxNytcepUJx2Oy1gLxxmL8FrvXpMnWqlt dI4HOdVCsnvpXJiqOBbDk5DzRO1b2oKS2Oq8JGr6iCcBvOEb+lzGl4ewZdE/53RtAX6H+QBOUMW ptXAcu6kP02jQRvsmaLjAkmw+xeHpcAm4q+BrsTCep88sILs8eAhn//s93rrpR2OvUlkXWrzUgu ITnutOCL6Og3d9agqdEH+M6pG7bJUbg= X-Received: by 2002:a05:7022:6b92:b0:190:d7de:883b with SMTP id a92af1059eb24-190d7de8999mr2676536c88.35.1792575013206; Wed, 21 Oct 2026 02:30:13 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id a92af1059eb24-19035c0c9a6sm4716458c88.3.2026.10.21.02.30.10 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 21 Oct 2026 02:30:12 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-multimedia][blacksail][PATCH 30/44] pjproject: patch CVE-2026-57166 Date: Wed, 21 Oct 2026 22:28:43 +1300 Message-ID: <20261021092857.3585453-30-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> References: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 21 Oct 2026 09:30:22 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131217 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-57166 Signed-off-by: Ankur Tyagi --- .../pjproject/pjproject/CVE-2026-57166.patch | 228 ++++++++++++++++++ .../pjproject/pjproject_2.17.bb | 1 + 2 files changed, 229 insertions(+) create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57166.patch diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57166.patch b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57166.patch new file mode 100644 index 0000000000..8311d4c36d --- /dev/null +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57166.patch @@ -0,0 +1,228 @@ +From d0b42b902bb6ca8a0a1393799db487642d3bf8ae Mon Sep 17 00:00:00 2001 +From: Nanang Izzuddin +Date: Wed, 17 Jun 2026 15:55:53 +0700 +Subject: [PATCH] Merge commit from fork + +* Fix pre-auth stack overflow formatting telnet CLI error indicator + +send_err_arg() in cli_telnet.c rendered the error caret into a fixed +256-byte stack buffer using unchecked pj_strcat2; info->err_pos is +bounded only by PJ_CLI_MAX_CMDBUF, so a long command line overflowed +the buffer. Stream the spaces in bounded chunks via telnet_sess_send2, +clamp the caret offset to PJ_CLI_MAX_CMDBUF, and send the message, +prompt and echoed command separately, removing the stack buffer. + +Co-Authored-By Claude Code + +* Apply the same overflow fix to send_ambi_arg() + +Per review, send_ambi_arg() has the same issue as send_err_arg(): it +renders an attacker-influenced number of caret spaces and appends the +last command into a fixed 1028-byte stack buffer with unchecked +pj_strcat2. info->err_pos and sess->rcmd->rbuf are bounded only by +PJ_CLI_MAX_CMDBUF, so a long ambiguous command line could overflow it. + +Stream the caret offset in bounded chunks (clamped to PJ_CLI_MAX_CMDBUF) +and stream the clamped last command separately, mirroring the +send_err_arg() fix, instead of writing them into the fixed buffer. The +shared SPACES constant is hoisted to file scope. + +Co-Authored-By Claude Code + +* Bound completion append in handle_tab() + +handle_tab() appended the matched command name into the fixed-size +sess->rcmd->rbuf at offset len (the current command length) without +checking that len + name length fits the buffer. len is bounded by the +receive path, but the completion suffix is added on top, so a long +completable command line could write past rbuf and its NUL terminator. + +Clamp the appended length to the space remaining in rbuf, leaving room +for the terminator. Found while auditing the telnet CLI for the same +fixed-buffer overflow pattern as send_err_arg()/send_ambi_arg(). + +Co-Authored-By Claude Code + +(cherry picked from commit 4472a31d77a7506ff175dad5abef490f4e31bed1) + +CVE: CVE-2026-57166 +Upstream-Status: Backport [https://github.com/pjsip/pjproject/commit/4472a31d77a7506ff175dad5abef490f4e31bed1] + +Signed-off-by: Ankur Tyagi +--- + pjlib-util/src/pjlib-util/cli_telnet.c | 116 ++++++++++++++++++------- + 1 file changed, 84 insertions(+), 32 deletions(-) + +diff --git a/pjlib-util/src/pjlib-util/cli_telnet.c b/pjlib-util/src/pjlib-util/cli_telnet.c +index 0a2954bd4..67898fdd8 100644 +--- a/pjlib-util/src/pjlib-util/cli_telnet.c ++++ b/pjlib-util/src/pjlib-util/cli_telnet.c +@@ -680,6 +680,13 @@ static void send_prompt_str(cli_telnet_sess *sess) + telnet_sess_send(sess, &send_data); + } + ++/* Buffer of spaces, used to stream the caret offset in bounded chunks ++ * instead of writing an attacker-influenced number of spaces into a ++ * fixed-size stack buffer. Shared by send_err_arg() and send_ambi_arg(). ++ */ ++static const unsigned char SPACES[64] = ++ " "; ++ + /* + * This method is used to send error message to client, including + * the error position of the source command. +@@ -690,32 +697,45 @@ static void send_err_arg(cli_telnet_sess *sess, + pj_bool_t with_return, + pj_bool_t with_last_cmd) + { +- pj_str_t send_data; +- char data_str[256]; +- pj_size_t len; +- unsigned i; ++ pj_size_t len, remaining; + cli_telnet_fe *fe = (cli_telnet_fe *)sess->base.fe; + +- send_data.ptr = data_str; +- send_data.slen = 0; +- + if (with_return) +- pj_strcat2(&send_data, "\r\n"); ++ telnet_sess_send2(sess, (const unsigned char*)"\r\n", 2); + ++ /* Compute the caret offset. info->err_pos is derived from ++ * attacker-supplied input (pj_cli_sess_parse) and is bounded only by ++ * PJ_CLI_MAX_CMDBUF, so clamp it before emitting spaces. Otherwise a ++ * ~500-byte command line would overflow the fixed-size stack buffer ++ * this function previously used. ++ */ + len = fe->cfg.prompt_str.slen + info->err_pos; +- +- /* Set the error pointer mark */ +- for (i=0;i PJ_CLI_MAX_CMDBUF) ++ len = PJ_CLI_MAX_CMDBUF; ++ ++ remaining = len; ++ while (remaining > 0) { ++ pj_size_t chunk = (remaining > sizeof(SPACES)) ? sizeof(SPACES) ++ : remaining; ++ telnet_sess_send2(sess, SPACES, (int)chunk); ++ remaining -= chunk; + } +- pj_strcat2(&send_data, "^"); +- pj_strcat2(&send_data, "\r\n"); +- pj_strcat(&send_data, msg); +- pj_strcat(&send_data, &fe->cfg.prompt_str); +- if (with_last_cmd) +- pj_strcat2(&send_data, (char *)sess->rcmd->rbuf); + +- telnet_sess_send(sess, &send_data); ++ telnet_sess_send2(sess, (const unsigned char*)"^\r\n", 3); ++ ++ if (msg && msg->slen > 0) ++ telnet_sess_send(sess, msg); ++ if (fe->cfg.prompt_str.slen > 0) ++ telnet_sess_send(sess, &fe->cfg.prompt_str); ++ if (with_last_cmd) { ++ pj_str_t last; ++ last.ptr = (char *)sess->rcmd->rbuf; ++ last.slen = (pj_ssize_t)pj_ansi_strlen((const char *)sess->rcmd->rbuf); ++ if (last.slen > PJ_CLI_MAX_CMDBUF) ++ last.slen = PJ_CLI_MAX_CMDBUF; ++ if (last.slen > 0) ++ telnet_sess_send(sess, &last); ++ } + } + + static void send_inv_arg(cli_telnet_sess *sess, +@@ -765,7 +785,7 @@ static void send_ambi_arg(cli_telnet_sess *sess, + pj_bool_t with_last_cmd) + { + unsigned i; +- pj_size_t len; ++ pj_size_t len, remaining; + pj_str_t send_data; + char data[1028]; + cli_telnet_fe *fe = (cli_telnet_fe *)sess->base.fe; +@@ -779,14 +799,25 @@ static void send_ambi_arg(cli_telnet_sess *sess, + send_data.slen = 0; + + if (with_return) +- pj_strcat2(&send_data, "\r\n"); ++ telnet_sess_send2(sess, (const unsigned char*)"\r\n", 2); + ++ /* Compute and clamp the caret offset, then stream the spaces, like ++ * send_err_arg(). info->err_pos is attacker-bounded only by ++ * PJ_CLI_MAX_CMDBUF, so it must not drive writes into data[]. ++ */ + len = fe->cfg.prompt_str.slen + info->err_pos; +- +- for (i=0;i PJ_CLI_MAX_CMDBUF) ++ len = PJ_CLI_MAX_CMDBUF; ++ ++ remaining = len; ++ while (remaining > 0) { ++ pj_size_t chunk = (remaining > sizeof(SPACES)) ? sizeof(SPACES) ++ : remaining; ++ telnet_sess_send2(sess, SPACES, (int)chunk); ++ remaining -= chunk; + } +- pj_strcat2(&send_data, "^"); ++ telnet_sess_send2(sess, (const unsigned char*)"^", 1); ++ + /* Get the max length of the command name */ + for (i=0;ihint_cnt;++i) { + if (hint[i].type.slen > 0) { +@@ -874,10 +905,21 @@ static void send_ambi_arg(cli_telnet_sess *sess, + } + pj_strcat2(&send_data, "\r\n"); + pj_strcat(&send_data, &fe->cfg.prompt_str); +- if (with_last_cmd) +- pj_strcat2(&send_data, (char *)sess->rcmd->rbuf); +- + telnet_sess_send(sess, &send_data); ++ ++ /* Stream the last command separately with a clamp; sess->rcmd->rbuf ++ * is attacker-bounded only by PJ_CLI_MAX_CMDBUF, so appending it into ++ * data[] could overflow the fixed-size buffer. ++ */ ++ if (with_last_cmd) { ++ pj_str_t last; ++ last.ptr = (char *)sess->rcmd->rbuf; ++ last.slen = (pj_ssize_t)pj_ansi_strlen((const char *)sess->rcmd->rbuf); ++ if (last.slen > PJ_CLI_MAX_CMDBUF) ++ last.slen = PJ_CLI_MAX_CMDBUF; ++ if (last.slen > 0) ++ telnet_sess_send(sess, &last); ++ } + } + + /* +@@ -1035,10 +1077,20 @@ static pj_bool_t handle_tab(cli_telnet_sess *sess) + } + send_comp_arg(sess, &info); + +- pj_memcpy(&sess->rcmd->rbuf[len], info.hint[0].name.ptr, +- info.hint[0].name.slen); +- +- len += (unsigned)info.hint[0].name.slen; ++ /* Append the matched name into the fixed-size rbuf. len is ++ * attacker-influenced (the typed command length), so clamp ++ * the copy to leave room for the NUL terminator and avoid ++ * overflowing rbuf. ++ */ ++ if (len < sizeof(sess->rcmd->rbuf) - 1) { ++ pj_size_t avail = sizeof(sess->rcmd->rbuf) - 1 - len; ++ pj_size_t cplen = (pj_size_t)info.hint[0].name.slen; ++ if (cplen > avail) ++ cplen = avail; ++ pj_memcpy(&sess->rcmd->rbuf[len], ++ info.hint[0].name.ptr, cplen); ++ len += (unsigned)cplen; ++ } + sess->rcmd->rbuf[len] = 0; + } + } else { diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb index e7cae469ed..9d1e6af253 100644 --- a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb @@ -20,6 +20,7 @@ SRC_URI = "git://github.com/pjsip/pjproject.git;protocol=https;branch=master;tag file://CVE-2026-57163.patch \ file://CVE-2026-57164.patch \ file://CVE-2026-57165.patch \ + file://CVE-2026-57166.patch \ " SRCREV = "5a457451fa2712ba18e12b01738e8ff3af2b26fd" From patchwork Wed Oct 21 09:28:44 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101522 Received: from mail-dy1-f181.google.com (mail-dy1-f181.google.com [74.125.82.181]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.7557.1792575016602015629 for ; Wed, 21 Oct 2026 02:30:16 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=p3zToJ64; spf=pass (domain: gmail.com, ip: 74.125.82.181, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-dy1-f181.google.com with SMTP id 5a478bee46e88-3535bf8b3e0so998480eec.0 for ; Wed, 21 Oct 2026 02:30:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792575016; x=1793179816; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=9CQHONmROj+IM63pShrvW5zYBC5B8M0VXXys8Zn76wY=; b=p3zToJ64KTtxIGxSnC7txzba0C+rQYwGwPz4QXtgPDAR+LnbUc54NYdI7DPyckPJ9L Jra0JpMISyNL6zAy6tB4ZnpKwBTH1n9xeF2eycsX+jRj0Dfn0P4R8roCdNxmmzTmZLk1 Y6jTqaA3zCknf5jFcT3Zn8YxKwlCCtFi2gMQxjbg4E5RdH7GwwEmxBJV+hx1AqJkrug8 Svbb84wdtJ7G12dL8SbT+9d/UMHssYfmnp4tBXOWTr9lEM6WZ2TmMNCnlLvjZEaSJo1s zpHDSubra2Vz1VRiiSYlVcrTyrLQBDIzpEKgBzoNqs/yaMEPCV5BCYb3vG5ZeoEIBfoH PD0w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792575016; x=1793179816; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=9CQHONmROj+IM63pShrvW5zYBC5B8M0VXXys8Zn76wY=; b=KWnDeRdjptXTrLwmIFYwX4pXCmE9vddrWEixJNx66JbhSioDKrdd45L2ktrec/7Yp/ LzF2gxS6kUKZIXnOjbiP/hJTX7pQAsCglQHhVkW0wSzKCujmooLp3C5jvq7KMgMzxyZm q1SWrictCZeTDFDMVIX6vjWyyyjhjscnHV1Z0zvVD3haONXIq1fSx1UzvVcogavlIpO2 yKLJIby7g55xV82acifdD13L0VW1kdi0W6r9d4hJpPY3Vxg4RDfYnBcafde9CKJCO7BS IZw9o4Ue2EzOCzoVaSvbiCbsOqCpX+2IFDSu5Z5fTzMO/Cetlxm9kYIL7KMQGKI2mNqA Omlg== X-Gm-Message-State: AFq9FYK/V9eJYuQUNNqyPYXfO/+Pp6NCq6TF4G1gi916PzkMV5INf1t9 MPU7FriPoiU6eF5CVgdEnaCEfIVXPQimhIp6wSKHYee29v9+PFcyRAeHxT+5gA== X-Gm-Gg: AYBFou2y5sN8xRXEkEViiJWEdmZSQPBrXjpCl0jrGeCxsO0FBix87UpvHuCClSNLufr OiMZp2EIkO/8yG7xBcTgKNHyomfiwUne42WN9UfsRN3tuyx+tz1V8pTK5bTOP2dMuKom6DXIa1y tNub9koaPXevBvYc6ESl2Vp1XY5T977oRPHRDknStywRDtETqNzE/AZp9upW1ODdCsSAu6miUC8 B1Lh3FyRo6GIjdEIUlHOVzOSCcjP7UC54ZM253DfVrQhWK3ZPoAoUOHMAndg3cmmVAmLNoHRZrs wx+7rqp0dtNqxUMZmUWXHkN+Ouzfvf0O4YO1H3nVhadcsPflPoVTZUR7v8Dt1ESnhzu3S0Ao0Ii 4yK3Lg/R/IG0gLIInujvUx2ZF4fPXvXDDjnD2fW99WSrOAd6NwS6JdoyEIbplerDifsnXSA+FMw XuqcN/+GDdrbX0qGgICgLMCGI43OtdRpSULKLuhkVVhlu5j4IN497gk1aaP4qrStJsocyPyJN16 8JW6lqJ15Wui8L8x2IQTMIsgY7RcV2mC1IQj4KcwKJJsrV7iCnk31weSEpXeOKFVZSYtqr7dOz5 KaErw1YGUbLYYo7pAI2Pn9n4hyiOuM8= X-Received: by 2002:a05:701b:4586:10b0:14f:b5ac:ace4 with SMTP id a92af1059eb24-190a756b94emr1878274c88.44.1792575015777; Wed, 21 Oct 2026 02:30:15 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id a92af1059eb24-19035c0c9a6sm4716458c88.3.2026.10.21.02.30.13 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 21 Oct 2026 02:30:15 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-multimedia][blacksail][PATCH 31/44] pjproject: patch CVE-2026-77396 Date: Wed, 21 Oct 2026 22:28:44 +1300 Message-ID: <20261021092857.3585453-31-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> References: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 21 Oct 2026 09:30:23 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131218 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-77396 Signed-off-by: Ankur Tyagi --- .../pjproject/pjproject/CVE-2026-77396.patch | 74 +++++++++++++++++++ .../pjproject/pjproject_2.17.bb | 1 + 2 files changed, 75 insertions(+) create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-77396.patch diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-77396.patch b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-77396.patch new file mode 100644 index 0000000000..a02268bf11 --- /dev/null +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-77396.patch @@ -0,0 +1,74 @@ +From a927a964d462e9966864b7b2c432942b61038d6b Mon Sep 17 00:00:00 2001 +From: Nanang Izzuddin +Date: Mon, 13 Jul 2026 09:27:02 +0700 +Subject: [PATCH] Merge commit from fork + +The AVI player used a chunk length taken from the input file as the +number of bytes to read into the video frame buffer, whose capacity is +derived from the (also file-supplied) declared dimensions, without +reconciling the two. A crafted file could therefore cause a write past +the end of the buffer. The only guard was an assertion, which is a +no-op in release builds. + +Clamp the read to the frame buffer capacity, skip any remaining chunk +bytes so the file position stays aligned, and remove the reliance on +the assertion for validating a file-supplied length. + +Ref: GHSA-6p2p-5wf8-h5hr +(cherry picked from commit 7ecc6584969a923c4190b6912afbf5952b5a4b9f) + +CVE: CVE-2026-77396 +Upstream-Status: Backport [https://github.com/pjsip/pjproject/commit/7ecc6584969a923c4190b6912afbf5952b5a4b9f] +Signed-off-by: Ankur Tyagi +--- + pjmedia/src/pjmedia/avi_player.c | 34 +++++++++++++++++++++++++++++--- + 1 file changed, 31 insertions(+), 3 deletions(-) + +diff --git a/pjmedia/src/pjmedia/avi_player.c b/pjmedia/src/pjmedia/avi_player.c +index dc87b8a41..8b4b94d16 100644 +--- a/pjmedia/src/pjmedia/avi_player.c ++++ b/pjmedia/src/pjmedia/avi_player.c +@@ -1199,12 +1199,40 @@ static pj_status_t avi_get_frame(pjmedia_port *this_port, + goto on_error2; + fport->size_left -= size_to_read; + } else { +- pj_assert(frame->size >= ch.len); +- status = file_read3(fport->fd, frame->buf, ch.len, ++ pj_uint32_t read_len = ch.len; ++ ++ /* Clamp the read to the frame buffer capacity. A crafted ++ * file may declare a chunk larger than the buffer, whose ++ * size is derived from the (also file-supplied) video ++ * dimensions; never write past frame->buf (frame->size ++ * bytes). Do not rely on pj_assert() here, as it is a no-op ++ * in release builds. ++ */ ++ if (read_len > frame->size) { ++ PJ_LOG(3, (THIS_FILE, ++ "AVI video chunk (%u) exceeds frame buffer " ++ "(%u), truncating", ++ (unsigned)ch.len, (unsigned)frame->size)); ++ read_len = (pj_uint32_t)frame->size; ++ } ++ ++ status = file_read3(fport->fd, frame->buf, read_len, + 0, &size_read); + if (status != PJ_SUCCESS) + goto on_error2; +- frame->size = ch.len; ++ ++ /* Skip any remaining chunk bytes that did not fit, so the ++ * file position stays aligned to the next chunk. ++ */ ++ if (ch.len > read_len) { ++ status = pj_file_setpos(fport->fd, ++ (pj_off_t)ch.len - read_len, ++ PJ_SEEK_CUR); ++ if (status != PJ_SUCCESS) ++ goto on_error2; ++ } ++ ++ frame->size = read_len; + fport->size_left = 0; + } + diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb index 9d1e6af253..89763b3011 100644 --- a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb @@ -21,6 +21,7 @@ SRC_URI = "git://github.com/pjsip/pjproject.git;protocol=https;branch=master;tag file://CVE-2026-57164.patch \ file://CVE-2026-57165.patch \ file://CVE-2026-57166.patch \ + file://CVE-2026-77396.patch \ " SRCREV = "5a457451fa2712ba18e12b01738e8ff3af2b26fd" From patchwork Wed Oct 21 09:28:45 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101523 Received: from mail-dl1-f48.google.com (mail-dl1-f48.google.com [74.125.82.48]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.7527.1792575019279345677 for ; Wed, 21 Oct 2026 02:30:19 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=W4mBrsoQ; spf=pass (domain: gmail.com, ip: 74.125.82.48, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-dl1-f48.google.com with SMTP id a92af1059eb24-17bc533fda3so634115c88.1 for ; Wed, 21 Oct 2026 02:30:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792575019; x=1793179819; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=63591MtrLhccxHSSW3kPTqnL4L0Z1tQ/v8jipDncExs=; b=W4mBrsoQrq7hpaqC55TEAGhqR9ToGdhqp1MZGV53QQrAV/qct0A32iw2QSRMdpQHNp WCvCQYopIxCq8HoZUhBC81F7s55k2de1b34yt1zmwePdtBIB+PkBeI0GJA6On4DqctoE vwVxPVcvJbjJ/Dv+sC0v9FWhPn6uZgOwodsPRvY7IIVsZrjcBcNB14oWLPQC2KDONFP2 Ud11wrwOr7AJTavMbzHXy8XqdGWjkBoo64KZln4K/vViYhbJPRnW1WgxYM6hAeUVlG0D clxH5xt7cEbiaydtHxNo/GFN+HytGhpSJZ6b8YUNiGXsdaS58mmxBbGfmPhumopEukFf VWvw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792575019; x=1793179819; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=63591MtrLhccxHSSW3kPTqnL4L0Z1tQ/v8jipDncExs=; b=qYxFFfmA/kJK20JUdbZokElBCDeq/2FzEljI8ejAe8m6uxplqDNzHBaTetl1lVhSy8 sjWJJoT1ilVrVtIZmQFN8GJxkStyLOJQJyqppqzYZFCVWWCOp0z7U0YrdK5KJNQoyPKU Q8HxWBZhUHQ5kaH3JL87JnoqYMaw0Cm0QGzPS7u1IFAiEaDB8FGPnkgJBTX3Zsb2sIfu HwMiASJt7JtzA0XQ85q424xWRV2NMWoKd0xGOOSwUJu3SAAYZwh31EZMkuzCm75MUNb+ gmY+4xpD0NAc5v0upx78HUucC9uiiWt9nldQb/rzlkP/gS8y4PIqzTnWiveC3uFLKlJy Npeg== X-Gm-Message-State: AFq9FYJJ+AQWsahGEFHSjxOCRucr9Xq7jNGFaGL82EylXKIJRYh94/Hk WgnqAerrGrwyKP1atiU+XWkqLZ7+84Mz9goWiewvWpuT9ycheIfTuNKJyICQzw== X-Gm-Gg: AYBFou2bSyFndEhDXeOs5e3uzt1TqTLgMQ9OazZhh9f+KzWe0vZuYFaOzIrEvn9fPci twz2hOjFFJy0WU80mNjEjhlNdSTAZub8pt7GwRn2/Cz947KrpYutmneaxh+iDR3dKGGp4sGrw6z PQJYVq7UrFi9E1NTCngk7Txo7/XpfUY1XG2Rd1ca7bcs6z1XrNnaRupJ37LGD8GktS0UCDtk/ix QECLg77+riwSz27OUpfOVJZD21brFYRTkUuiMRJyqvRFN4hjUTtl9KzbpIUMJ/7P3YcDR/5kieF uuyGp/dN89fMR6SHA9vb44pUK0tJNim427pF8t9SpTjs04VRNAgRkkOm32DZqT/PfI0ypzanHct BXcZE5/AAPH5WQnZJUrvr0Cmt3zqYILlyFcAQbcYCZMV09UUiKOVqmZOJqxwDkDHyO8uqbI2p+I tCtHmwbWU4yuWDIWuMoP7yku3yGBC5adrBDflYH/NdU5qUeuaiEqozQHjE+iVzFIqztRpoNQ5Lb f+gEogH0GOlH1PloFpRIIm3VU+/EgDRjsDORDrSkk9MwKbufHLTaDUD1N868jtIn018ZsNTMhq1 PPmMhe0N3Zgd5lF+MEe3n9vRi0FWPHc= X-Received: by 2002:a05:701b:4283:10b0:15f:28e1:7c7d with SMTP id a92af1059eb24-190a86ade90mr1920155c88.42.1792575018237; Wed, 21 Oct 2026 02:30:18 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id a92af1059eb24-19035c0c9a6sm4716458c88.3.2026.10.21.02.30.16 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 21 Oct 2026 02:30:17 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-multimedia][blacksail][PATCH 32/44] pjproject: patch CVE-2026-84975 Date: Wed, 21 Oct 2026 22:28:45 +1300 Message-ID: <20261021092857.3585453-32-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> References: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 21 Oct 2026 09:30:23 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131219 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-84975 Signed-off-by: Ankur Tyagi --- .../pjproject/pjproject/CVE-2026-84975.patch | 87 +++++++++++++++++++ .../pjproject/pjproject_2.17.bb | 1 + 2 files changed, 88 insertions(+) create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-84975.patch diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-84975.patch b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-84975.patch new file mode 100644 index 0000000000..007096a6ff --- /dev/null +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-84975.patch @@ -0,0 +1,87 @@ +From f00f023079d0f9a74477da47056bfce76374b2a7 Mon Sep 17 00:00:00 2001 +From: sauwming +Date: Fri, 17 Jul 2026 16:46:33 +0800 +Subject: [PATCH] Merge commit from fork + +SubjectAltName entries from the OpenSSL and GnuTLS backends were copied +with pj_strdup2(), which re-derives the length with strlen() and thus +discards the length already returned by ASN1_STRING_to_UTF8() / +gnutls_x509_crt_get_subject_alt_name(). A DNS SAN such as +"victim.example\0.attacker" was therefore truncated to "victim.example". + +sip_transport_tls.c disables socket-layer verification and performs its +own length-aware identity match against subj_alt_name, so the truncated +prefix compared equal to the target host and a crafted certificate was +accepted for the prefix hostname (server identity / hostname verification +bypass; OpenSSL's own X509_check_host() rejects the same certificate). + +Copy the SAN using its explicit length via pj_strset()/pj_strdup_with_null() +so embedded NULs are preserved and no longer truncated. The mbedTLS backend +already copied with a length-bearing pj_str_t and was not affected. + +Co-authored-by: Claude Opus 4.8 +(cherry picked from commit 43d3bd77bb6833eab4c493503b8d564a754ddfdd) + +CVE: CVE-2026-84975 +Upstream-Status: Backport [https://github.com/pjsip/pjproject/commit/43d3bd77bb6833eab4c493503b8d564a754ddfdd] + +Signed-off-by: Ankur Tyagi +--- + pjlib/src/pj/ssl_sock_gtls.c | 17 +++++++++++++++-- + pjlib/src/pj/ssl_sock_ossl.c | 14 +++++++++++--- + 2 files changed, 26 insertions(+), 5 deletions(-) + +diff --git a/pjlib/src/pj/ssl_sock_gtls.c b/pjlib/src/pj/ssl_sock_gtls.c +index 68ceea3f3..ee977116b 100644 +--- a/pjlib/src/pj/ssl_sock_gtls.c ++++ b/pjlib/src/pj/ssl_sock_gtls.c +@@ -1072,9 +1072,22 @@ static void tls_cert_get_info(pj_pool_t *pool, pj_ssl_cert_info *ci, + + if (len && type != PJ_SSL_CERT_NAME_UNKNOWN) { + ci->subj_alt_name.entry[ci->subj_alt_name.cnt].type = type; +- pj_strdup2(pool, ++ if (type == PJ_SSL_CERT_NAME_IP) { ++ pj_strdup2(pool, + &ci->subj_alt_name.entry[ci->subj_alt_name.cnt].name, +- type == PJ_SSL_CERT_NAME_IP ? buf : out); ++ buf); ++ } else { ++ /* Preserve the reported length instead of using strlen(), ++ * so a DNS SAN containing an embedded NUL is not truncated ++ * at the NUL (which would allow a crafted cert to be ++ * accepted for the prefix hostname; identity bypass). ++ */ ++ pj_str_t tmp; ++ pj_strset(&tmp, out, len); ++ pj_strdup_with_null(pool, ++ &ci->subj_alt_name.entry[ci->subj_alt_name.cnt].name, ++ &tmp); ++ } + ci->subj_alt_name.cnt++; + } + } +diff --git a/pjlib/src/pj/ssl_sock_ossl.c b/pjlib/src/pj/ssl_sock_ossl.c +index 30b4eeaee..ceb6bca5b 100644 +--- a/pjlib/src/pj/ssl_sock_ossl.c ++++ b/pjlib/src/pj/ssl_sock_ossl.c +@@ -2270,9 +2270,17 @@ static void get_cert_info(pj_pool_t *pool, pj_ssl_cert_info *ci, X509 *x, + &ci->subj_alt_name.entry[ci->subj_alt_name.cnt].name, + buf); + } else { +- pj_strdup2(pool, +- &ci->subj_alt_name.entry[ci->subj_alt_name.cnt].name, +- (char*)p); ++ /* Preserve the explicit ASN.1 string length instead of ++ * treating the data as a NUL-terminated C string. A DNS ++ * SAN such as "host.example\0.attacker" would otherwise be ++ * truncated at the embedded NUL, letting a crafted cert be ++ * accepted for the prefix hostname (identity bypass). ++ */ ++ pj_str_t tmp; ++ pj_strset(&tmp, (char*)p, len); ++ pj_strdup_with_null(pool, ++ &ci->subj_alt_name.entry[ci->subj_alt_name.cnt].name, ++ &tmp); + OPENSSL_free(p); + } + ci->subj_alt_name.cnt++; diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb index 89763b3011..893559090f 100644 --- a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb @@ -22,6 +22,7 @@ SRC_URI = "git://github.com/pjsip/pjproject.git;protocol=https;branch=master;tag file://CVE-2026-57165.patch \ file://CVE-2026-57166.patch \ file://CVE-2026-77396.patch \ + file://CVE-2026-84975.patch \ " SRCREV = "5a457451fa2712ba18e12b01738e8ff3af2b26fd" From patchwork Wed Oct 21 09:28:46 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101524 Received: from mail-dl1-f43.google.com (mail-dl1-f43.google.com [74.125.82.43]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.7529.1792575021511402958 for ; Wed, 21 Oct 2026 02:30:21 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=JMVYDFr0; spf=pass (domain: gmail.com, ip: 74.125.82.43, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-dl1-f43.google.com with SMTP id a92af1059eb24-157fe9d771bso660811c88.0 for ; Wed, 21 Oct 2026 02:30:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792575021; x=1793179821; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=3wDoYXBWDgdtTs8yzVacPsTRlcJX+k9H2JnfxSGfVbM=; b=JMVYDFr0MzjEWHpg1MNTumyrn2kA0sJb87eeHztgi7XKUG9+6hVsuDfzzAdrS1b0Tq K1/sC6sknYM5RaboqOJLKEK2TV4dzmGc0mfgygpHgyztxh1EmYt9sPhiWR9UXCXCtIb5 64LMWu3Y5WIPIlcs7V8HdarDjV1UnYSqfYVEexDv4VmQgpwYWCPPh4LRC3hA92T1CTNC qhfOttl3DN5453Ro1AQf/5FUIDRHAzDSDbRNsuZE2Ou4xA7aWzHPvDA4/rz8Y04d13ZK xmB4mcAuEEfa+XOPPiLvYFFN1ZSrzj560TDlw+5h9NuhZ35Asvpc2p6HA+dNKfylvBeX JYxQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792575021; x=1793179821; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=3wDoYXBWDgdtTs8yzVacPsTRlcJX+k9H2JnfxSGfVbM=; b=fqOBrA8tGFU0C2QzMV8gPPNdSeyUqOz1lHp79udlHJPFUH1qXf/HVUpsf4HdyGt8DI us9NfsJrxpZyXXlvAbtGlSyNJqI4vlZuux2auLxHdQKMsBErS/3KLH7gYavK0GwDpd3/ QoQ+CayaBexKVQR+R6mGsgZV6Wi0YBSIU/N39ff2WsgbtTC29kzhpE3KkEzqmJH4h5AB hlZ1CjrNAhq3cHe2WWDN6TibhVfxMrf2Y48A1BHAV6m4HnvoaR99ab0xOpepb+bTbfgN bU6p9cQbV+H0e6bTWQxMkatWZZMfIa6lJJYa8HbONB5A9k70NcSM/9CbBADd05BTNT+F Cqxw== X-Gm-Message-State: AFq9FYIAQlb7ridl+C7Ec7O07qAQ4oJjDn6AIhqjMSNJftiCjegZOSbs ZbSouTPkCWUSiG3jQVmB60x+iDps4uOD1ThuNqL5fokhVXpXKzo3zfEb9GGSSQ== X-Gm-Gg: AYBFou1ZjJJxX42KGNjATqRsMX9+f9UWLO/LsO0/9W+HVC42vIp6H3ibNrEnyh6+KZ6 dwSkmpfdSSP8eIRg4wgn25xHP1jK7X6/I13BFD9g31DxUpiYc0aCSvg3KJBGBr6wiFWMIzKfs8u 49hYQUayVXW62Ciw2VeptPOAaDg/yGYCoC87wGR7qdP/C6F4P0+fq9QIKtpxkamJMcyvboDJc7E BUYoLeEI7em24mKCWi8BkZAzuX/7J8hhTelLnYqurCXOq7K6wqw3/9IVWUPHBs0+06Fgj3Jr2By 1pDI1/uma1X2DciMJLlZNpcCO0/EhVp0rlLQmoxo46plcIO7jFR5pzKqd2/EzroLwZGhgrOWu/X S+WQNfpQprUfhGp4WeaR/E1iWRyxyor6YplKc6UzFq73rZ7IqQo78czLRT/zuy5909pLY6334Un co2UKH1xX7KGPQZgIJw3XnjJtgJCh3aOuRXbP6TiOwRUs3ToSYDZSdGM9taQiRCRJ7HUe9YNPs6 bPMtUTjEzOsviN8DNJPDBkDkwtHuOHlCaucaL39dJr9ObDyv5N4LLwdZ022q3YP/s2CijCNbSLz YEDCynBNS/UnSQnHjbamvcj1+4FtmfI= X-Received: by 2002:a05:701b:2806:b0:168:6ad8:e89f with SMTP id a92af1059eb24-190a0428c2cmr1866742c88.3.1792575020644; Wed, 21 Oct 2026 02:30:20 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id a92af1059eb24-19035c0c9a6sm4716458c88.3.2026.10.21.02.30.18 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 21 Oct 2026 02:30:20 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-oe][blacksail][PATCH 33/44] nmap: patch CVE-2026-58058 Date: Wed, 21 Oct 2026 22:28:46 +1300 Message-ID: <20261021092857.3585453-33-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> References: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 21 Oct 2026 09:30:23 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131220 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-58058 Signed-off-by: Ankur Tyagi --- .../nmap/files/CVE-2026-58058.patch | 34 +++++++++++++++++++ meta-oe/recipes-security/nmap/nmap_7.99.bb | 1 + 2 files changed, 35 insertions(+) create mode 100644 meta-oe/recipes-security/nmap/files/CVE-2026-58058.patch diff --git a/meta-oe/recipes-security/nmap/files/CVE-2026-58058.patch b/meta-oe/recipes-security/nmap/files/CVE-2026-58058.patch new file mode 100644 index 0000000000..3717d37b5d --- /dev/null +++ b/meta-oe/recipes-security/nmap/files/CVE-2026-58058.patch @@ -0,0 +1,34 @@ +From 63815f6a8865d8c99a1f3abb9d7383a2be0ea67e Mon Sep 17 00:00:00 2001 +From: dmiller +Date: Thu, 25 Jun 2026 21:58:49 +0000 +Subject: [PATCH] Fix extension header parsing. Credit: Himanshu Anand + +(cherry picked from commit bb6754e76bb1686315008e1aa1c40202a513fb83) + +CVE: CVE-2026-58058 +Upstream-Status: Backport [https://github.com/nmap/nmap/commit/bb6754e76bb1686315008e1aa1c40202a513fb83] + +Signed-off-by: Ankur Tyagi +--- + libnetutil/netutil.cc | 4 +++- + 1 file changed, 3 insertions(+), 1 deletion(-) + +diff --git a/libnetutil/netutil.cc b/libnetutil/netutil.cc +index 6e81f558c..0adf18b8e 100644 +--- a/libnetutil/netutil.cc ++++ b/libnetutil/netutil.cc +@@ -615,11 +615,13 @@ static const void *ipv6_get_data_primitive(const struct ip6_hdr *ip6, + *nxt = ip6->ip6_nxt; + p += sizeof(*ip6); + while (p < end && ipv6_is_extension_header(*nxt)) { +- if (p + 2 > end) ++ if (p + 8 > end) + return NULL; + *nxt = *p; + p += (*(p + 1) + 1) * 8; + } ++ if (p >= end) ++ return NULL; + + *len = end - p; + if (upperlayer_only && !ipv6_is_upperlayer(*nxt)) diff --git a/meta-oe/recipes-security/nmap/nmap_7.99.bb b/meta-oe/recipes-security/nmap/nmap_7.99.bb index ea792d30f6..515623d63d 100644 --- a/meta-oe/recipes-security/nmap/nmap_7.99.bb +++ b/meta-oe/recipes-security/nmap/nmap_7.99.bb @@ -11,6 +11,7 @@ SRC_URI = "http://nmap.org/dist/${BP}.tar.bz2 \ file://0002-Fix-building-with-libc.patch \ file://0001-fix-racing-between-build-ncat-and-build-lua.patch \ file://0004-libdnet-fix-PF_PACKET-conftest-nested-function.patch \ + file://CVE-2026-58058.patch \ " SRC_URI[sha256sum] = "df512492ffd108e53a27a06f26d8635bbe89e0e569455dc8ffef058c035d51b2" From patchwork Wed Oct 21 09:28:47 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101525 Received: from mail-dy1-f172.google.com (mail-dy1-f172.google.com [74.125.82.172]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.7559.1792575023756180672 for ; Wed, 21 Oct 2026 02:30:23 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=aC0qy++C; spf=pass (domain: gmail.com, ip: 74.125.82.172, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-dy1-f172.google.com with SMTP id 5a478bee46e88-3514b90bb89so1372365eec.1 for ; Wed, 21 Oct 2026 02:30:23 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792575023; x=1793179823; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=9Ia57Yt5XUYUZCmhKfVbWDfQ1WThh7M6NiDd4GdflPs=; b=aC0qy++CnaymRUtw3Kr/M1WtdvnMl8w8KcxIho3M9XLN3I/6Iy8pGO2psYx/2khaYZ rifeN6uB/mqOnYC/DQ2aKKT5MrV6pGk12OlMtPl8eVPkL5O4opOglFeahpic1CE2k2YB bfmfqBKbHzlTRrTPJviKi5gWJoAFYVF6sI3/9kGb7AD9ZxYSjZg8QkBeQhcMBzwiX0Hc b3TpqErMs0Cx6UEigHXVTj0jn7hgc5vdYdZA65pn6mcbkFDF6RZchUeBZOR5nU4L2HsX ntWK6D4i6czfdIzrI8CGIYLeVUsjCBt7LYi5uRDUaT4LRaIE1z8vFrySfExmuxLoE4jA N26Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792575023; x=1793179823; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=9Ia57Yt5XUYUZCmhKfVbWDfQ1WThh7M6NiDd4GdflPs=; b=JV3TaQxueNtYhA0he8F1oPqObdusQ8oYh6gfBFHs1VFjyIiL2ek9WXnlUZ980QBgg6 dZZ6rT7DeqDWR1z85NrA+NWMrNzTODEUYeFRChq7kl1hybrOOEsLK0rQ8B4QExjFdTYe Bq0XpFsSbBlfXwEQW0hKF9TMpXpOe8PybEikxWMlBi7lAoZXEQfQHpNQ8MIFVwytYGDt u3dw3sUjlxT4jTQKcgZfSoAoLHLTT/0zhUcBENKJKqbj8TASSMLccMctofDk0KtV0Gw2 BVdLuDwqr3MVjbb8ts0v3OpVpQ8exV60FGrCsCdl8u/E89nDkUeGe1AyCUlGpNMfBDvX C3TA== X-Gm-Message-State: AFq9FYIoyNuCXkFZb0uiyEE9Cm6PMcLR07u+AWK0G5iKQjr0EdB68zha cf/ikukrHveBZnvoTZf5RsEpOOxLoyMjTCX4n+UjGb8ea2EJXcRw4mYMLJ+ePA== X-Gm-Gg: AYBFou2JJIHBdblkAeBsf6k/zROSqRjxeI49mTHpSeoyQLNsROp90Fel/7yRHnx3rs0 SE9LxEKZ3ZL6UDDdk6Jr0wrSYg8l+eWbOZVvMK8MtNWeqpJI1y6Vz4yl7l3u/m5S9FIoTxfisb3 g2Lyxv3xJ9a8evGe7zGPlYcnzNOD5RZzivd99Ifq4sDxE8X9RIeFCLkwG1C1Z/xaO4XKdGk5yCT TqW1q7FqBB32tuj7zembh23VFMEA8CKFdGaHf7GfmgPsmkLi368USPaXmzPY9nuUivnsiSKTosK l7lWMuToZlH2m/BfLB92EhQohQAl4XZyFq8DAMNoCaFR77IdnviXEmzgOGqrGm0nOBoKC+owEgx ysDJqiIYlxQEarcrqGwC/oErrfajpFEGhxtexge5W1VeG/XfjoXb3/AB8PENo9OyLot5lEcutuK Uo8OBzIQaSh6DVXBFOjUEGGKa71Q7HoRcqXQzgeFtkRuquvm/hWOpvCOgFhlLk4nauLC4FLXR0y ngB6VLHMKzH/Vwj3tXkkuCWhMlqzsA+3oiMa108CGa7NEiiOjiV+vf70UijsCpd2+C/TuEGAz7K w2N/po+i1tm1TUUQVN3P0tnJKpYOmHo= X-Received: by 2002:a05:7022:f512:b0:16f:c9db:c5af with SMTP id a92af1059eb24-190a437d52emr1917050c88.11.1792575022958; Wed, 21 Oct 2026 02:30:22 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id a92af1059eb24-19035c0c9a6sm4716458c88.3.2026.10.21.02.30.21 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 21 Oct 2026 02:30:22 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-oe][blacksail][PATCH 34/44] nmap: patch CVE-2026-72712 Date: Wed, 21 Oct 2026 22:28:47 +1300 Message-ID: <20261021092857.3585453-34-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> References: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 21 Oct 2026 09:30:33 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131221 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-72712 Signed-off-by: Ankur Tyagi --- .../nmap/files/CVE-2026-72712.patch | 46 +++++++++++++++++++ meta-oe/recipes-security/nmap/nmap_7.99.bb | 1 + 2 files changed, 47 insertions(+) create mode 100644 meta-oe/recipes-security/nmap/files/CVE-2026-72712.patch diff --git a/meta-oe/recipes-security/nmap/files/CVE-2026-72712.patch b/meta-oe/recipes-security/nmap/files/CVE-2026-72712.patch new file mode 100644 index 0000000000..f5e81aac0e --- /dev/null +++ b/meta-oe/recipes-security/nmap/files/CVE-2026-72712.patch @@ -0,0 +1,46 @@ +From 120d13b8aca52ec306e50eae9a74fb1bfe49540a Mon Sep 17 00:00:00 2001 +From: dmiller +Date: Thu, 11 Jun 2026 18:31:31 +0000 +Subject: [PATCH] Stop parsing on a zero-length packet option + +Fixes #3368. Closes #3373. + +(cherry picked from commit 7ef4ee030a0023fe22616387a000032e1a678b6a) + +CVE: CVE-2026-72712 +Upstream-Status: Backport [https://github.com/nmap/nmap/commit/7ef4ee030a0023fe22616387a000032e1a678b6a] + +Dropped changes to the CHANGELOG file. + +Signed-off-by: Ankur Tyagi +--- + nselib/packet.lua | 8 +++++--- + 1 file changed, 5 insertions(+), 3 deletions(-) + +diff --git a/nselib/packet.lua b/nselib/packet.lua +index ec6db40a2..e17972d88 100644 +--- a/nselib/packet.lua ++++ b/nselib/packet.lua +@@ -686,10 +686,7 @@ function Packet:parse_options(offset, length) + local opt_ptr = 0 + while opt_ptr < length do + local t, l, d +- options[op] = {} +- + t = self:u8(offset + opt_ptr) +- options[op].type = t + if t==0 or t==1 then + l = 1 + d = nil +@@ -699,6 +696,11 @@ function Packet:parse_options(offset, length) + d = self:raw(offset + opt_ptr + 2, l-2) + end + end ++ if l==0 then ++ break ++ end ++ options[op] = {} ++ options[op].type = t + options[op].len = l + options[op].data = d + opt_ptr = opt_ptr + l diff --git a/meta-oe/recipes-security/nmap/nmap_7.99.bb b/meta-oe/recipes-security/nmap/nmap_7.99.bb index 515623d63d..0cbef990cb 100644 --- a/meta-oe/recipes-security/nmap/nmap_7.99.bb +++ b/meta-oe/recipes-security/nmap/nmap_7.99.bb @@ -12,6 +12,7 @@ SRC_URI = "http://nmap.org/dist/${BP}.tar.bz2 \ file://0001-fix-racing-between-build-ncat-and-build-lua.patch \ file://0004-libdnet-fix-PF_PACKET-conftest-nested-function.patch \ file://CVE-2026-58058.patch \ + file://CVE-2026-72712.patch \ " SRC_URI[sha256sum] = "df512492ffd108e53a27a06f26d8635bbe89e0e569455dc8ffef058c035d51b2" From patchwork Wed Oct 21 09:28:48 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101526 Received: from mail-dy1-f182.google.com (mail-dy1-f182.google.com [74.125.82.182]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.7560.1792575025987497547 for ; Wed, 21 Oct 2026 02:30:26 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=flrnGkq8; spf=pass (domain: gmail.com, ip: 74.125.82.182, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-dy1-f182.google.com with SMTP id 5a478bee46e88-35c76e9614aso918773eec.0 for ; Wed, 21 Oct 2026 02:30:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792575025; x=1793179825; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=3sB+LWFGt8SQCb87LBs5KpkRNkHANTEcZv8PHXnJYeo=; b=flrnGkq8spP+iwmXNcn3udN9ZOrHhQsvpUDk9ywwnGqVodV6dD50NeIriek15JAYcf +HujPiklrZ6CSc+wcvOwdvPCAlpzPGy/jI37/RRQ8nHI6rzielMTslwo3mBfcE2z0jq9 MXVhRLtip/Jr9w2fn8sA4qABKsjM33k43TcqKyQ7rHL5vWgTOYR27mH3BfM0nwuvSQVv 6LuLOM3ZQbwhj71UqsH9yxm555l/pan4CLCF94G9uHJ5OJd8GfQYqYKj3YcrAJH0IHe9 aoszY5FgNth+xfCdgCK9CNVFO4anzxWloavJNkPG2MJckfkviYuowdF7ECstyOwhu3lN ollQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792575025; x=1793179825; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=3sB+LWFGt8SQCb87LBs5KpkRNkHANTEcZv8PHXnJYeo=; b=BqKd/CC0ozxDjX1NAxx4jPxD0dOaZu+NgoBmzwlmaXdroPCvt/H844FmuXE4HudJcH sqFrS7GcjenDH6xjA/OQtrkTV2KMXNvotBIxxRkJKW75V6QjcJ+7100MswG0lJojPPdZ gdlCX4Y7/cf/n9HT3N9cWqgq7iytkxAOkqmjmTKw+P1Miwxl/wIKYvfwqHpoJK1OObyh 2xMck5HnmyVJTYgh6VIHSikxgh+x5tkYL6rhgo0e8WjGzQvTjnrub3Tw/yVPvN/bhFFx 28vnu33os6AB1XJZeLfEYrYCSoddDNmEo6bP9fP+DYcsvAT2xWNpcVVKG7wQ6a6/tlBN hUGw== X-Gm-Message-State: AFq9FYL4oR1/lb0x+8w354P1Qj0+IjmK7QhawU1HoYeABSh3iCX8BkJN 4Od4Rl5Iq5NlzzAGANcU86gBd47xi0f5IIKjkWmJQmCH5p68n27Wvt8ky0PCbQ== X-Gm-Gg: AYBFou1YiULBWJJnYxP3ls/FHeueKrvVkF1xxkNOD6Q9VGveh01rsM2+sO6cHwp2gO2 pqsmnNw4D5B/huJBgIxScJD++rLmw5tg8cEcClmNV0ujIwzoRVHd89xMZ6g6or005KMA2BHeugr JvNQ+RXPcYI4XXbgjXb6GlZ+gznwUBV/iIQR5dmb8dQ5k7l58JPrvbv/eTg1GD3EUmgGKk9iayA 7Hq7Cje9qRwou083V9F29pQaAycR5AoU3pXcO2/HL9fhqbRuBTQ50EAg7j3EPtRvWSopGfaB3+z GkhqZVmrXYdh4LeK+MpjEz7IwgyB3I3a6NV/hyILDhxbusCIXJ8eg8b1BxMS7omC//Sk1SDioFb iX9TDzqiwSgzTOvpPMBhFR60YWSOaG4nZuT1UmShRnRPYjOJJuuWHPPJdd+qnPA9tgokSPXgaR3 k67PUzRId4h55GaXfuBQZFt79PNxBbn7p5EGhNX1YTAunfzFCK7aGb5gPAWP3lFzXnvzkbBI1Hh N1ETJAtrYK+Qi9L0zGPGenPkrd6a6AcH00B9m5Fuv/jfxIqybkhahl/0gL3fgJHYMGtRiWwFtbu U4tLAeVj/c2SdFr8/zlqFTEg0KLoBnvcefbSqJRWYZKEQbO06kCh X-Received: by 2002:a05:7022:28f:b0:18d:5988:8d3 with SMTP id a92af1059eb24-190a109f74amr1927724c88.3.1792575025208; Wed, 21 Oct 2026 02:30:25 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id a92af1059eb24-19035c0c9a6sm4716458c88.3.2026.10.21.02.30.23 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 21 Oct 2026 02:30:24 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-webserver][blacksail][PATCH 35/44] netdata: mark CVE-2026-83602 fixed Date: Wed, 21 Oct 2026 22:28:48 +1300 Message-ID: <20261021092857.3585453-35-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> References: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 21 Oct 2026 09:30:33 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131222 From: Ankur Tyagi Fix identified by NVD is included in the patch release[1] v2.10.4 Details: https://nvd.nist.gov/vuln/detail/cve-2026-83602 [1]https://github.com/netdata/netdata/pull/22825 Signed-off-by: Ankur Tyagi --- meta-webserver/recipes-webadmin/netdata/netdata_2.10.4.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta-webserver/recipes-webadmin/netdata/netdata_2.10.4.bb b/meta-webserver/recipes-webadmin/netdata/netdata_2.10.4.bb index ed4c54fbe4..9df846cec9 100644 --- a/meta-webserver/recipes-webadmin/netdata/netdata_2.10.4.bb +++ b/meta-webserver/recipes-webadmin/netdata/netdata_2.10.4.bb @@ -167,3 +167,5 @@ FILES:${PN} += "\ " RDEPENDS:${PN} = "bash python3-core zlib" + +CVE_STATUS[CVE-2026-83602] = "fixed-version: fixed in v2.10.4" From patchwork Wed Oct 21 09:28:49 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101527 Received: from mail-dl1-f45.google.com (mail-dl1-f45.google.com [74.125.82.45]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.7531.1792575029262170938 for ; Wed, 21 Oct 2026 02:30:29 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=G2QvpVzf; spf=pass (domain: gmail.com, ip: 74.125.82.45, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-dl1-f45.google.com with SMTP id a92af1059eb24-15ea896ddc8so697904c88.0 for ; Wed, 21 Oct 2026 02:30:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792575029; x=1793179829; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=fmMT3+kwVDfmorQ0rns4OJPGCirkRqhLdFl6MlSNsuQ=; b=G2QvpVzf24jiZpHG8kHO4b0KNICRhQDybPNRBtxWpVGclnmLRMq9CUP2sUgZiYjn/l ntmNZXufXeAq+AmkpJ6mS6hvlCgg+sOJkgGwFJyUQ0sW/vAA3O7Y3xl7FJxSn8UvV51y 5dcyws9IIutW0S/R7XpeAy0UFabZlx0rje82ZUIUxPlNKB/T/8ZCYs1U55sQpkrItVAy EeENTZSwaOydwm6mhDk2sQTP8Puay8zWqLHC7gheNrPFgSofMwDGWRUNRdOgeVSXuTty Nkm+RsNAcBrUJLgrZbwurvcUiuxSFLrEoh3CPo0HcDa4k2JYuHwpJZ1IrjWqdZ/K6HCj sS8g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792575029; x=1793179829; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=fmMT3+kwVDfmorQ0rns4OJPGCirkRqhLdFl6MlSNsuQ=; b=yZqTLq9EBKkXh82PRoQ2p3Z4gjVld6HQh39y62CrGsjAE2F52sv/YuemXtj5xHQkoD C3lI+JDNkmklHy4uV0sG60XxaGWAxJfyUe3E6C7nkvdXwkz0ImOa8UqtLx+gLKCw23/G zykdLs6CmQMR30Cmv32OvbPpRvdDIemOu7/72mow0dmV8iLzWdOjYj7oRmd0B42xxg4r +jke1MFEoKSvhZEhvp60uwDBW02ogFUdftElEvbztM5hanY9LpwDETTSQ0Lk6mcPziUo kgeUMDRM9BpB+kL5r5Cq0H7L5Px1gmoloAzmNiVrvU44do+sXA4K55wiZvJDxsPkFhxh 7vZg== X-Gm-Message-State: AFq9FYIBQMnAOJnAH5f/Bl+RXE3U81OssSJWFApZpYvoGyd//Y9KQvhn R+KtFaNu3pQOHOyUxedFPO8wiYlGNpFmwp4H4HLQAqF9U6/Pdb7+ee43ljm+vQ== X-Gm-Gg: AYBFou3Zg+chsiTXlKPTYcKiuRE3QI2MJqwFm1SOx1mCYmOZJm13f9PnJgUGq+D3drH RuTSszElM4glCN270hhC/7Zn/pb+W+Wwh22elRBq3pBX29d7Uun0HgYpILZDLk8Q3UogR5qDc+V g/z7RW4QqEYRr9i9r9DoE7Qh0aqSr1xXtDd/f+1/wK3rb7xKvW1p7Zj62yg0yyjnoav0+8KKe4M jNFaVgP2JYwAcIcLGGWvh6gZHU1NnCskL6VruuEXucPDDKcm+Xx8uXC5VwwxRzHx/6nMP2j5Qr1 pIWBeZjZ3NWfzfEwCmd7kz4X/QM6EGHR5oSPnRqIFUwivZueUv93XYVB5RxIgtuYE+ENpGH3ELM MCKSsFoh3NBeaAHuLNUm6F2jaDRCGan441F1tMYgC0GMD/g+vE5tyO0S8QgyayeyW6jHYEj2Pel hM2BKd5XLVphO98hRqSyG8shoZYxkjjCtA40v2PaZu1wAPVWKn1ECVcNLyExiv2Q+Yq0KiM4RwB N86TIcsVK7LVtT1KyZ/RCHmr2CGdKqUMLi8/5br202oJeB/Bltxx3z3fVc9aW+MMh55K3oYkyld +WQWfuUQB1avgAf9MRzvH9Ud1O70Qy0= X-Received: by 2002:a05:7022:7a9:b0:187:eb7f:b8f with SMTP id a92af1059eb24-190a50efe13mr2713446c88.13.1792575028475; Wed, 21 Oct 2026 02:30:28 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id a92af1059eb24-19035c0c9a6sm4716458c88.3.2026.10.21.02.30.25 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 21 Oct 2026 02:30:27 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Peter Marko , Khem Raj , Ankur Tyagi Subject: [oe][meta-webserver][blacksail][PATCH 36/44] nginx: upgrade 1.30.5 -> 1.30.6 Date: Wed, 21 Oct 2026 22:28:49 +1300 Message-ID: <20261021092857.3585453-36-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> References: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 21 Oct 2026 09:30:33 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131223 From: Peter Marko 2026-10-14 nginx-1.30.6 stable and nginx-1.31.7 mainline versions have been released, with fixes for buffer overflow vulnerability when using alias with rewrite (CVE-2026-15176), buffer overflow vulnerability when evaluating string expressions with variables (CVE-2026-93479), request body injection vulnerability in HTTP/3 (CVE-2026-95101), session forgery vulnerability when using TLS session ticket key rotation (CVE-2026-97629), and use-after-free vulnerability when using ngx_http_ssi_module with AIO (CVE-2026-97205). Signed-off-by: Peter Marko Signed-off-by: Khem Raj (cherry picked from commit 6cdd413248db5aed93c6cc138cbfe0f83ed81f56) Signed-off-by: Ankur Tyagi --- .../recipes-httpd/nginx/{nginx_1.30.5.bb => nginx_1.30.6.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-webserver/recipes-httpd/nginx/{nginx_1.30.5.bb => nginx_1.30.6.bb} (81%) diff --git a/meta-webserver/recipes-httpd/nginx/nginx_1.30.5.bb b/meta-webserver/recipes-httpd/nginx/nginx_1.30.6.bb similarity index 81% rename from meta-webserver/recipes-httpd/nginx/nginx_1.30.5.bb rename to meta-webserver/recipes-httpd/nginx/nginx_1.30.6.bb index 6b638cdd96..5d699e63ce 100644 --- a/meta-webserver/recipes-httpd/nginx/nginx_1.30.5.bb +++ b/meta-webserver/recipes-httpd/nginx/nginx_1.30.6.bb @@ -2,7 +2,7 @@ require nginx.inc LIC_FILES_CHKSUM = "file://LICENSE;md5=79da1c70d587d3a199af9255ad393f99" -SRC_URI[sha256sum] = "6c20565aa2325cb82216ae804f4a4ff1875179014759a381c42ddc8e11c4906d" +SRC_URI[sha256sum] = "3cf46f5ed7504d460125866b7bea99fb357f31d887e2e63b35503310e9b8b6c8" inherit upstream-version-is-even From patchwork Wed Oct 21 09:28:50 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101528 Received: from mail-dl1-f41.google.com (mail-dl1-f41.google.com [74.125.82.41]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.7563.1792575032372762147 for ; Wed, 21 Oct 2026 02:30:32 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=JfSgcRvG; spf=pass (domain: gmail.com, ip: 74.125.82.41, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-dl1-f41.google.com with SMTP id a92af1059eb24-15ea896ddc8so697943c88.0 for ; Wed, 21 Oct 2026 02:30:32 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792575032; x=1793179832; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=/nab7hp2MfuEOqUCd8iJKBayve2v8cbnTvBQLkdrZj0=; b=JfSgcRvGMszFN5THQnP4JfXRrxGJvFF6mVFpgKe1TE/VznxD0B3ATajlMpuZezGl56 xV2Y0C0VTfbOy0k6ct3Bt0igpKy2uMNiPVaoBtD3la3LBOd8mvXe8ImQ46WI/icx49sL icJ5sMmL9EmfGZv2GJKkvJJZE0EKWhM+IYEpqx2d544rdIzh/SuR1nMIxdJu/ndf1tPs YJ+6fbiY3upSBnNd0mLQ0fFs0ZXnZIvnwv7oOYObdXlC6rwR/1f/3M1g23DYM1fiX4t7 1L7eEzxF5lDgNRkA9SD46wX910z841VGj34QssNDywUabxoLXOg9Ysa4Hxyd5GRWTYL+ p6bQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792575032; x=1793179832; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=/nab7hp2MfuEOqUCd8iJKBayve2v8cbnTvBQLkdrZj0=; b=ipKxl5ZILrLPWnJenELlbQ75JMdTDzl3YlbtJPgiS+QIGQFfp80dOZzBsZMjxwxU5u dhl9AWl5d+7l2SmMOLoS8KIEzMq1Li3wjrmqpXoUVe+FGM623f1pdZTxn8Lh5ccdu4MH Y4f2iI85cECcPsP4krLBp2G49dKjfyCyjXO3AibhSwcj/ZxexmXojPW5CFyuR9rBVhuT aVlZV2PUaDyWWGX1abaF/iqKVTXJ/kXy6hCJO7U8HlfnHcWJJ9w8KX+KTjP7q4H6PczS 4yBnR32TK1GSY1puEjogCB924tFrzfv+xRIsq4fapcGlEtP9N+r0TDy+iit1Hbp/orX3 Wj2w== X-Gm-Message-State: AFq9FYKVPTYSU2sYuiy7MCzYnluSQ0np7c28NHdB15u71hyD+MDB9GuH sCcRVl99yoLKGvOizYyMFF7kzRRV9DLCKaibnEa+kSCkATQtWBTs4VOGUvSXKg== X-Gm-Gg: AYBFou2nDZtW6x+PzyzparWvQzcT7KJ3dGukoGYnwu2FgyrA3dGa0whL2pHp1daKInK 5KToKVoPVmwTcAwDApbaT1iktLd/v3NqAg9F6vzhUypAdG6pNlVF/PipMGl0zbQL2MmavqsRDKK leIhMzYDeLcs+HBDLHLHaIEdv6pIyOdhKOxiLP4yoYLC2pwl9yfKCmylA8EKPkAzrSlJIWidslh 6BxMXyJziASv3GePkPHS92M7KQ0mGwL7IuqVSWKYo/btbFHrF8XO4eSQfkSBuE1g4iJdN8EPNx2 pO4lbx65PDBAD3Sg0IJ3at3iTRoAZY3/1OPXERp5P6xPS4RUC3TQ1ky9tym9ApwEnPDYQU2LL2h ON5lAAYo8TWjhVCNFMNSI2FtHGFvXd94mnxyMKmd057XJjdsjK3BKrLxp/ozgLKUG7/snf1YmrP ++laRIljIqn6i3kZl+W2XI2Mqzq1hhhFE+Z6afNLLd3c8FyqKSEVCterLYHswPAqZ4oCUeXMeFt t38kNYmVBYsrvdWq3gzRhP7k7JXfC3FPD4N8zmnxhPdr+2OaQ/FEklTK3qTp301SWn90V6rdlu3 n6XofQoQ/z++gLF7FdW4zHIUyzhzKOc= X-Received: by 2002:a05:701a:c90a:b0:143:5cb4:30 with SMTP id a92af1059eb24-1909f5c7ec5mr2101219c88.3.1792575031547; Wed, 21 Oct 2026 02:30:31 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id a92af1059eb24-19035c0c9a6sm4716458c88.3.2026.10.21.02.30.28 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 21 Oct 2026 02:30:31 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Peter Marko , Khem Raj , Ankur Tyagi Subject: [oe][meta-webserver][blacksail][PATCH 37/44] nginx: set CVE_STATUS for CVE-2026-95101 and CVE-2026-97629 Date: Wed, 21 Oct 2026 22:28:50 +1300 Message-ID: <20261021092857.3585453-37-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> References: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 21 Oct 2026 09:30:33 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131224 From: Peter Marko These CVEs are fixed in latest release however still show-up in open CVE reports. Reason is that the DB contains entries: { "lessThan": "*", "status": "affected", "version": "1.23.3", "versionType": "custom" } Which should mean that the first affected release is 1.23.3, however without the upper limit it will match all higher releases. The entry with >= 1.30.0 && < 1.30.6 cannot change the result as it works by flagging CVEs where at least one version match is present. Signed-off-by: Peter Marko Signed-off-by: Khem Raj (cherry picked from commit 959f4c8f098a90c24a818831a5e3dd8090cee641) Signed-off-by: Ankur Tyagi --- meta-webserver/recipes-httpd/nginx/nginx_1.30.6.bb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta-webserver/recipes-httpd/nginx/nginx_1.30.6.bb b/meta-webserver/recipes-httpd/nginx/nginx_1.30.6.bb index 5d699e63ce..73204da558 100644 --- a/meta-webserver/recipes-httpd/nginx/nginx_1.30.6.bb +++ b/meta-webserver/recipes-httpd/nginx/nginx_1.30.6.bb @@ -6,6 +6,9 @@ SRC_URI[sha256sum] = "3cf46f5ed7504d460125866b7bea99fb357f31d887e2e63b35503310e9 inherit upstream-version-is-even +CVE_STATUS[CVE-2026-95101] = "fixed-version: Fixed since 1.30.6" +CVE_STATUS[CVE-2026-97629] = "fixed-version: Fixed since 1.30.6" + # Remove following entries when upgrading recipe to 1.32 CVE_STATUS[CVE-2026-42055] = "fixed-version: Fixed since 1.30.3" CVE_STATUS[CVE-2026-48142] = "fixed-version: Fixed since 1.30.3" From patchwork Wed Oct 21 09:28:51 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101529 Received: from mail-dl1-f42.google.com (mail-dl1-f42.google.com [74.125.82.42]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.7533.1792575034839059333 for ; Wed, 21 Oct 2026 02:30:34 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=l+VvRgS5; spf=pass (domain: gmail.com, ip: 74.125.82.42, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-dl1-f42.google.com with SMTP id a92af1059eb24-1517bda04a0so522459c88.0 for ; Wed, 21 Oct 2026 02:30:34 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792575034; x=1793179834; darn=lists.openembedded.org; h=content-transfer-encoding:content-type:mime-version:references :in-reply-to:message-id:date:subject:cc:to:from:from:to:cc:subject :date:message-id:reply-to:content-type; bh=7hjeCtskHSjIF9aPE/8nL6w960jXKHNYNGpyi4T+0cI=; b=l+VvRgS5N1rQtTJCavYQszOaLxLdlDC4pj2ui2aA1WRCP6hhprMVcky5+MHjYS6hX0 QwTZiz8UizvCsRkSpvNYjcs1HOPC8LDoWsB2nGMiL24rwJAFnh2hyk9TxfsUIE8vvk0h 47RvqGM9dvdbjk0R+J+rD1CgsjYWD0ofLCbDQGrfIh55F+2Teeflsc/9h9gkM+Ku23tg 0XK9lVhrKbrNuN9ynHlZ64s7Om8uWrVj8+Q5bCNXtMgaUv2Adsr+dAm0rJ9Wo8RJKmK/ FaIIGQBFiFzKFlWfnnwkjFAzPz2cMr9WzZnZ1aHpRN0zODbAzm0y4pzUiaOAl7vPwPJ+ IR3A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792575034; x=1793179834; h=content-transfer-encoding:content-type:mime-version:references :in-reply-to:message-id:date:subject:cc:to:from:x-gm-gg :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=7hjeCtskHSjIF9aPE/8nL6w960jXKHNYNGpyi4T+0cI=; b=z71/nsd8N+n4yIJPYitDtiz2UKQdiKxNksK/6xQUbjRPsDFvcggsPUdZLGhD2H4/Zp sRb1JtB3x5+0U6XiNnoPdmb1HLvu5Cr8noR5aHXKFGDCLye1dkS14iY2oVhNGOapQFbw QnAblD8jbwP0uNRj45MSxS962vMO3GdbBp560k20G2AaHQtkbf6+0x5Rwx4DSPRoTE9w CihbgCNhocscJpQmav2PPXNT/MRIQdVYMIe4QlzjmaXbOiI2OOPtzuUiIK2T7dNxAUJ1 CsyDPsu37RgUqVautFOEguI2fQ7ur6nUOrMFD+SyR2ZSCQhKoh6c4ZHZcR5vvge9i+Dw 2XDQ== X-Gm-Message-State: AFq9FYJ9snX/EsBME2kIhH0dS1MnFyF35533YjZ8rpNiTjNslwwVg6bN G1bQWHY269tfrDvzfFfV/zU7RUgjeDke9/ynDosrJo0l/I8cvUsnIJwhbqvWQg== X-Gm-Gg: AYBFou28MOFZMFd4PleP9m3ROzWscQby/rsmDQNxtQ77qgnTh+tmktdewu8+XG7tW6p LWIQjnnQLdMtYN2XCeVoQTRtRaw2dTEbyVj3l9MsE2mQmw2p8s/HUfar8w9d31tnbxl6QC67Jjz wcFnSM3oTSH/XDb+9GAfUzM5AgoU+L3FzlmNhRVXjRFgsNYQW/hIHj3nNIYYA6ur3qrHkAsajCJ YpwE4PtNtRex2/HhJ7W0j28B30oorVlWGqdxCtYjgAnLbhoXuACIEaRfFuCm+mZ5hKXXLHVXxVF veyrm96PDjzHOTH6TklyitVm65FUlR7Jbw3p8dnwUrYI8WwmXhZ9cCmEBMLprrVSkCYnhxZwsi0 UG0eKw4lTxnpbwoaEH77QerUUWpANbAkFeQ3pKaSf0V+ajFF+Zkedod7BzLWTmKgvjNk9xh1E0D LmrHVlsudbN67HQ+UV3VJBuR1PW60JfacbOVbKpIBYbewuz/fsfoqK9oSjXCOU/endthXl7wcUO Sb1yitTdzUDXUuDS1jvcU8hYhlDanMv9ZfcHwocfX3c1Ll5Fdd8h2/tjm3kcmWde3Wck3Na8yf7 U0mlpUOzwPt6OEcc72XCxeLzoIuDsm4dQtFFpD/R3hlzjgnQBmQF X-Received: by 2002:a05:701b:2314:b0:151:2e62:fe4b with SMTP id a92af1059eb24-190a57ac854mr1763669c88.23.1792575033957; Wed, 21 Oct 2026 02:30:33 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id a92af1059eb24-19035c0c9a6sm4716458c88.3.2026.10.21.02.30.31 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 21 Oct 2026 02:30:33 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-networking][blacksail][PATCH 38/44] mtr: patch CVE-2026-14461 Date: Wed, 21 Oct 2026 22:28:51 +1300 Message-ID: <20261021092857.3585453-38-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> References: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 21 Oct 2026 09:30:43 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131225 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-14461 Signed-off-by: Ankur Tyagi --- .../mtr/mtr/CVE-2026-14461.patch | 32 +++++++++++++++++++ .../recipes-support/mtr/mtr_0.96.bb | 4 ++- 2 files changed, 35 insertions(+), 1 deletion(-) create mode 100644 meta-networking/recipes-support/mtr/mtr/CVE-2026-14461.patch diff --git a/meta-networking/recipes-support/mtr/mtr/CVE-2026-14461.patch b/meta-networking/recipes-support/mtr/mtr/CVE-2026-14461.patch new file mode 100644 index 0000000000..6628d9d7be --- /dev/null +++ b/meta-networking/recipes-support/mtr/mtr/CVE-2026-14461.patch @@ -0,0 +1,32 @@ +From 4c75fae93d9515f3ecdfecc966b8c6471efb7ea5 Mon Sep 17 00:00:00 2001 +From: "R.E. Wolff" +Date: Tue, 16 Jun 2026 11:03:39 +0200 +Subject: [PATCH] =?UTF-8?q?Fixed=20possible=20buffer=20overrun=20in=20asn?= + =?UTF-8?q?=20code--=20Micha=C5=82=20Majchrowicz?= +MIME-Version: 1.0 +Content-Type: text/plain; charset=UTF-8 +Content-Transfer-Encoding: 8bit + +(cherry picked from commit 48e1794414d338ce47abc0f27c25ade8788af9c3) + +CVE: CVE-2026-14461 +Upstream-Status: Backport [https://github.com/traviscross/mtr/commit/48e1794414d338ce47abc0f27c25ade8788af9c3] + +Signed-off-by: Ankur Tyagi +--- + ui/asn.c | 2 ++ + 1 file changed, 2 insertions(+) + +diff --git a/ui/asn.c b/ui/asn.c +index 111c394..487d9e8 100644 +--- a/ui/asn.c ++++ b/ui/asn.c +@@ -94,6 +94,8 @@ static char *ipinfo_lookup( + DEB_syslog(LOG_INFO, "Malloc-txt: %s", UNKN); + return xstrdup(UNKN); + } ++ // Clip len to PACKETSZ. -- Michał Majchrowicz ++ if (len > PACKETSZ) len = PACKETSZ; + + pt = answer + sizeof(HEADER); + diff --git a/meta-networking/recipes-support/mtr/mtr_0.96.bb b/meta-networking/recipes-support/mtr/mtr_0.96.bb index 9008223264..2716ca92aa 100644 --- a/meta-networking/recipes-support/mtr/mtr_0.96.bb +++ b/meta-networking/recipes-support/mtr/mtr_0.96.bb @@ -9,7 +9,9 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=b234ee4d69f5fce4486a80fdaf4a4263 \ file://ui/mtr.c;beginline=5;endline=16;md5=00a894a39d53726a27386534d1c4e468" SRCREV = "f392168771570b0fdc104c38dea6bbc2ce585710" -SRC_URI = "git://github.com/traviscross/mtr;branch=master;protocol=https;tag=v${PV}" +SRC_URI = "git://github.com/traviscross/mtr;branch=master;protocol=https;tag=v${PV} \ + file://CVE-2026-14461.patch \ +" inherit autotools pkgconfig From patchwork Wed Oct 21 09:28:52 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101530 Received: from mail-dl1-f49.google.com (mail-dl1-f49.google.com [74.125.82.49]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.7564.1792575036955028061 for ; Wed, 21 Oct 2026 02:30:36 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=J8lUfcJU; spf=pass (domain: gmail.com, ip: 74.125.82.49, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-dl1-f49.google.com with SMTP id a92af1059eb24-156cbe59524so244701c88.1 for ; Wed, 21 Oct 2026 02:30:36 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792575036; x=1793179836; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=OOAX1qtHtE3urSOdXzpda9dKlmJun1VpgJl8QbWETE8=; b=J8lUfcJU6NrmK5yyCFGNLgjK+Z1sNSylCkpK9NYRsXoJCyBnjEf9N75nF9Un1STDah KALX/LV+64awg/cy57pUYKP3bsXYJh9WVr8pus2W70o6/k7xmDbXsPFiNatutSaZwm4w pjwH1PVQGQ/k/JIa6msF9yN6wF6XpSSDqyV/OhEUc5xDLIfb9KsPB5ksEmHwyoqmVYJH r7RfiftYQ4DjmNbMxw9egwdRbS/BrCk+t6qxf1IzArndpeI1VR/P/LlLLrLXli+qPXeY cBW6VCY715ctfcCeq4nvndeRyOx1Pj+rJYuCIttQmNdXOEt5sKVBzXCYkrWbQilg++WZ GsWA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792575036; x=1793179836; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=OOAX1qtHtE3urSOdXzpda9dKlmJun1VpgJl8QbWETE8=; b=vXOp4P+G9kNJMPsp1tn9dRTB5UsrUvHEbgy2DEJbePOJ5huvcnsCSJA/SHH2kfj6bS Hh42SjJcxrSqcaTmphwnVuf5xmwHKN42FluKovHGURQE5095BV9ymrt9n7AhlNS2T1oo Q8edReItsCXxd1ZpwL/aIDMuPXMZcK1T7Tlku3ApPbM5ZJ+ty3gdXkmBuceh0I6nBbuh jnhmbLvfk3TA8rdmKRmVbF7VdA4Q1jeQvC1o1D8EDe52JVRwEdfM7gPRX0S+MOJQEg0L +OmVPBwuM6OSDo++LBDfYZiAx1Xw6Fb8VnIXjs1PKNTmth87uenkA1XsoCQMCByITVko uHsw== X-Gm-Message-State: AFq9FYL2RH5PBIVpT25aI4nLpxTendbhUlGc7Aq6LlnLOQg2LTf170aw kFueEfddykz9bnDiu3yYkoyqbBvhauCQ2CENcdp7LPWuNZw9aqpPUzn1nfqcaw== X-Gm-Gg: AYBFou3Oc9pHnmr59q6Iw0M2ZjTHQXREXN+5QXbUfYV4wf7NC6S4l2HE+HlsqzOk/JC inE4jfrWuyE9TeyO8BvNPPe3ArLCIA99aCPbIe9wp/eZJeVh+InqjZdaStZn/p9xu2Mr733AyA7 Pj6OFYmf12NwLCd8o1AFKnge5gbnpAUGxAwFbalPVmme2jH9WcHQrwEpMtGtAVboxxqA/beqzO2 VV9GyaCzdG/D9f5PITgPV+tjIHJRRPBe+M7utPqTYn3B1e9KcUiqlrZu4Hp7QeXunr8RGZhtK28 U38/+jgqYJakeF7NTIfM7d1e+OLhbipIho7sOI/H0FXyIom50DH6HXbwAfv4OCF2ls9k4h3s+qq hCok5In6IArqkIWmntjGElaetpH5qMS6vDjS8PhBXIm9/oywjUqzc867SeQ7YnXtxUbzQCcnYtq rofPts+j/a5TCREzYPq5HvXr4Gfyv4zMRXWwyTrVol+pErPRADvgo3yLMfvRN/t+JOAe8xZSG/L oKuHSIYTQR1pJqoTS6kyLaVDEzVNVhFDeWX9mRpD7zkezHzUrEFb461yPetylf1AgInuep08iYS IiKp+eVNO/unMSfC3DLwOrbGETyFDKR/4j1mlJxSQkjTRyA6g3JO X-Received: by 2002:a05:701b:4194:10b0:15b:7f7a:730d with SMTP id a92af1059eb24-190a632f93fmr1889010c88.28.1792575036244; Wed, 21 Oct 2026 02:30:36 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id a92af1059eb24-19035c0c9a6sm4716458c88.3.2026.10.21.02.30.34 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 21 Oct 2026 02:30:35 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-networking][blacksail][PATCH 39/44] ncp: ignore CVE-2025-14577 and CVE-2026-35087 Date: Wed, 21 Oct 2026 22:28:52 +1300 Message-ID: <20261021092857.3585453-39-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> References: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 21 Oct 2026 09:30:43 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131226 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2025-14577 https://nvd.nist.gov/vuln/detail/cve-2026-35087 Signed-off-by: Ankur Tyagi --- meta-networking/recipes-support/ncp/ncp_1.2.4.bb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta-networking/recipes-support/ncp/ncp_1.2.4.bb b/meta-networking/recipes-support/ncp/ncp_1.2.4.bb index ec6d918744..19fb258aec 100644 --- a/meta-networking/recipes-support/ncp/ncp_1.2.4.bb +++ b/meta-networking/recipes-support/ncp/ncp_1.2.4.bb @@ -29,3 +29,6 @@ do_install() { } BBCLASSEXTEND = "native nativesdk" + +CVE_STATUS[CVE-2025-14577] = "cpe-incorrect: This vulnerability is for Slican NCP" +CVE_STATUS[CVE-2026-35087] = "cpe-incorrect: This vulnerability is for Slican NCP" From patchwork Wed Oct 21 09:28:53 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101531 Received: from mail-dl1-f50.google.com (mail-dl1-f50.google.com [74.125.82.50]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.7566.1792575039549645228 for ; Wed, 21 Oct 2026 02:30:39 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=e/hVtwDZ; spf=pass (domain: gmail.com, ip: 74.125.82.50, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-dl1-f50.google.com with SMTP id a92af1059eb24-15354aa70e8so1573127c88.1 for ; Wed, 21 Oct 2026 02:30:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792575039; x=1793179839; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=T5dlxhYWULY7TJ5uvh5yd2JOP2ZczBQ8SgMUQQkEb/M=; b=e/hVtwDZeqA5WU35UTEbp3O5ahkRqf7zOlqWbCyRmTb8hPZE6/bVyDRIb8IZCs0cwD j1jooEZPLk68VegHrD5J+c4//fXR3N8A7KutUaFDPKc5Oo2c+ADn7UJ3K8ODS2FAeuxJ m/A4XVnw4EOvbDUECpgLE0/4OPZN9TwPBdffQaIfzntyyXJQSF4oWzC9kroowZ1Vr6S4 VkNGVJVZsRl3oR5lJMqxQr1MERF1QiMArj553y55J/pyjPaXH4OoK+vS/Ql6+uUwxj8V a9NUyQKzlWMn5G/kII3qzrsjijrwdV9Brvv4COL3/f42up/HpUUbe5KAishEWgVNRLHN awGg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792575039; x=1793179839; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=T5dlxhYWULY7TJ5uvh5yd2JOP2ZczBQ8SgMUQQkEb/M=; b=XmJ7bNWPidD3InT3PHmJ4OhpRRea3IdTUSltOHdMz0RjYJIev7RBp9sUu+yDm/8efN jFa5xhDa5mTNQMTOzvA9vKS0e+zeAMcJyxN5WraJyPBGpEXISW++THGnBHnxdaqJvcnw DB9Tg7lgFECjn1jI82D08LyC8TBRTO/VOSicrxFpPuSPnayyxaivkjYVyLCWixm3M4oo gu823gGC7rNrvmcHnvky+GbVHfBI6Q+DLYWNZd1smytVvdP3SKqzN2j0/EmepbEGRRpW /+tWweGWo98Rrf9DnZawp1jxdcyjFJf527ieKrFYUjyk+QD8EDl6zRXld72jA+2PPOzh eBBg== X-Gm-Message-State: AFq9FYITs+LsEm0TayHzod9eiNId08tNm6wtSTX4HOOUwHoGYI9OHGgi JRkpuvMzT4ZQNzfpXPkBFgAC02m+UaOPcZvHaN5U5CwThtEYoiSxI1b51rb2Kg== X-Gm-Gg: AYBFou1/vFp85K5CmRLRhFCHzlb4k6H9BPnO7OMcW66K8Nkk2WELKSI968p6Dye9vd+ IqFgxEHqwNQNa+VvLd+LQvGFm89pNiG+RK/RVjsPhvK/yIcmZDQjrKeD2D3QoCUZ4NVyFBFxWOE sTFBtzgNm5B5+XdC9YWkVv/BHbJLuBBtsZHBEiXg6MA4SDgnrRSg6AbQ4rOdQgOZMS+FcvtTEiB wYDMZkt9BCiUTQDSSKp3ABEUNN0b3QmU4PGEGJXzIWjEVaX8OWQ0l2Sh+RbOPYqQmJgn+0sxUuH +FLKFocu9NzVgRSJL6/uPdm+XYvGIJ/xsPYtfaBmV7IEt7pSuTiuhMknkocQUNZno5g2hGima7O ReDGGrSN+zlShl7yoE+n8t6cue4bgf8yJt/xTSlrUg1zvWQiEr4GnbYhSCaWW+oU2x7fOKhpCg4 YsgU0JH0H3a1DySqwMSo00cjjVXGkn9uv6mWElAHdhglEcXWg6ZpsnGaqE4oT0Ki+6NRE4Akujv jOFv+ZqgGsRYxYCnI1Dbd8DXQKo3pQt/WTWUTXTBgy5YdQSPvOLJJ+nJyZxFCYp3PFUXwv9kau8 8lK9At7hsu3MVheadMuViminFuGJTZU= X-Received: by 2002:a05:701b:454c:20b0:151:5d01:9316 with SMTP id a92af1059eb24-190a52e25c3mr1853831c88.23.1792575038571; Wed, 21 Oct 2026 02:30:38 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id a92af1059eb24-19035c0c9a6sm4716458c88.3.2026.10.21.02.30.36 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 21 Oct 2026 02:30:38 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-oe][blacksail][PATCH 40/44] libvncserver: patch CVE-2026-44988 Date: Wed, 21 Oct 2026 22:28:53 +1300 Message-ID: <20261021092857.3585453-40-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> References: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 21 Oct 2026 09:30:43 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131227 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-44988 Signed-off-by: Ankur Tyagi --- .../libvncserver/CVE-2026-44988.patch | 71 +++++++++++++++++++ .../libvncserver/libvncserver_0.9.15.bb | 1 + 2 files changed, 72 insertions(+) create mode 100644 meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-44988.patch diff --git a/meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-44988.patch b/meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-44988.patch new file mode 100644 index 0000000000..e26abc9db7 --- /dev/null +++ b/meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-44988.patch @@ -0,0 +1,71 @@ +From db5779f2bec717f577fb66321b3b079ff156da95 Mon Sep 17 00:00:00 2001 +From: Kang Hee chan <24s101h0659@sonline20.sen.go.kr> +Date: Wed, 6 May 2026 21:48:54 +0900 +Subject: [PATCH] libvncclient: fix Tight gradient decoding overflow + +(cherry picked from commit 5b270544b85233668b98161323297d418a8f5fd1) + +CVE: CVE-2026-44988 +Upstream-Status: Backport [https://github.com/LibVNC/libvncserver/commit/5b270544b85233668b98161323297d418a8f5fd1] +Signed-off-by: Ankur Tyagi +--- + include/rfb/rfbclient.h | 3 ++- + src/libvncclient/tight.c | 10 +++++++--- + 2 files changed, 9 insertions(+), 4 deletions(-) + +diff --git a/include/rfb/rfbclient.h b/include/rfb/rfbclient.h +index a974ff5f..666dcb90 100644 +--- a/include/rfb/rfbclient.h ++++ b/include/rfb/rfbclient.h +@@ -314,10 +314,11 @@ typedef struct _rfbClient { + rfbBool zlibStreamActive[4]; + + /* Filter stuff. Should be initialized by filter initialization code. */ ++#define TIGHT_GRADIENT_MAX_WIDTH 2048 + rfbBool cutZeros; + int rectWidth, rectColors; + char tightPalette[256*4]; +- uint8_t tightPrevRow[2048*3*sizeof(uint16_t)]; ++ uint8_t tightPrevRow[TIGHT_GRADIENT_MAX_WIDTH*3*sizeof(uint16_t)]; + + #ifdef LIBVNCSERVER_HAVE_LIBJPEG + /** JPEG decoder state (obsolete-- do not use). */ +diff --git a/src/libvncclient/tight.c b/src/libvncclient/tight.c +index 57a3715b..dad5514f 100644 +--- a/src/libvncclient/tight.c ++++ b/src/libvncclient/tight.c +@@ -229,6 +229,11 @@ HandleTightBPP (rfbClient* client, int rx, int ry, int rw, int rh) + bitsPixel = InitFilterPaletteBPP(client, rw, rh); + break; + case rfbTightFilterGradient: ++ if (rw > TIGHT_GRADIENT_MAX_WIDTH) { ++ rfbClientLog("Tight Gradient rectangle width %d exceeds maximum %d.\n", ++ rw, TIGHT_GRADIENT_MAX_WIDTH); ++ return FALSE; ++ } + filterFn = FilterGradientBPP; + bitsPixel = InitFilterGradientBPP(client, rw, rh); + break; +@@ -430,7 +435,7 @@ FilterGradient24 (rfbClient* client, int srcx, int srcy, int numRows) + CARDBPP *dst = + (CARDBPP *)&client->frameBuffer[(srcy * client->width + srcx) * BPP / 8]; + int x, y, c; +- uint8_t thisRow[2048*3]; ++ uint8_t thisRow[TIGHT_GRADIENT_MAX_WIDTH*3]; + uint8_t pix[3]; + int est[3]; + +@@ -473,7 +478,7 @@ FilterGradientBPP (rfbClient* client, int srcx, int srcy, int numRows) + int x, y, c; + CARDBPP *src = (CARDBPP *)client->buffer; + uint16_t *thatRow = (uint16_t *)client->tightPrevRow; +- uint16_t thisRow[2048*3]; ++ uint16_t thisRow[TIGHT_GRADIENT_MAX_WIDTH*3]; + uint16_t pix[3]; + uint16_t max[3]; + int shift[3]; +@@ -705,4 +710,3 @@ ReadCompactLen (rfbClient* client) + /* LIBVNCSERVER_HAVE_LIBZ and LIBVNCSERVER_HAVE_LIBJPEG */ + #endif + #endif +- diff --git a/meta-oe/recipes-graphics/libvncserver/libvncserver_0.9.15.bb b/meta-oe/recipes-graphics/libvncserver/libvncserver_0.9.15.bb index 77612e1626..47e42cd094 100644 --- a/meta-oe/recipes-graphics/libvncserver/libvncserver_0.9.15.bb +++ b/meta-oe/recipes-graphics/libvncserver/libvncserver_0.9.15.bb @@ -46,6 +46,7 @@ inherit cmake pkgconfig SRC_URI = "git://github.com/LibVNC/libvncserver;branch=master;protocol=https;tag=LibVNCServer-${PV} \ file://0001-CMake-require-at-least-CMake-3.5.patch \ + file://CVE-2026-44988.patch \ " SRCREV = "9b54b1ec32731bd23158ca014dc18014db4194c3" From patchwork Wed Oct 21 09:28:54 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101532 Received: from mail-dl1-f45.google.com (mail-dl1-f45.google.com [74.125.82.45]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.7568.1792575042054909728 for ; Wed, 21 Oct 2026 02:30:42 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=NRLn0PKr; spf=pass (domain: gmail.com, ip: 74.125.82.45, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-dl1-f45.google.com with SMTP id a92af1059eb24-17bc533fda3so634476c88.1 for ; Wed, 21 Oct 2026 02:30:42 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792575041; x=1793179841; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=I7IcKFN+mRbxB0Jt7GDfhFlCKIprJx/reEIRujSdvTg=; b=NRLn0PKrQPWceNBqt/qmgdbzbg66yhIgF0XHXn2I2uXJliGlE1xn5RLdNJfMUJgans DHTWINCTWu8tGSCIugwV9jnEoXfrQERGhX3FSqig6d+/urhjX4dbt8XcM2rENMU+Ahl4 fCa3U3gnA0ZmJBEnvceNaJ/vTYeBXuAkEnoPyWhCfR1YRqg0Aw25YLbPTNeWy/PLBUXy rBul40qNDnThVQ2lszyIgrALP3JDj0+DmxA7HHMFuTNlR/k7ac8J/sAhUx8GBpBkzVUq 8D9JiUWQLNN0IG9QBKpWwzsBHWOd/p1SAQpYnUPF4cGELOvmKzJYt4BRiEziGl2wqHbV O6Tw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792575041; x=1793179841; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=I7IcKFN+mRbxB0Jt7GDfhFlCKIprJx/reEIRujSdvTg=; b=TkGlINPcpyBIWW89Mu6JJcm3jjjDX1YnXDLiDPtkpHIRb1Pr/uEY7HZn+e/myOWQi3 3tT67dFg0RjXhQHrNKsVW655sLkl3DLQPRdClLhEBeCDKoTVULQbz+lOUOppjqFJmvlB WUdwsHsEalAMdYvIRQ9w03uj4V3JQM54PVXw6mnecxvVo032aDD5YlGjVzndW8wDkQ0J oiOgXzFMi47r6oQrIWfieUCvAvgcNfVQdxa5SEsdqXB7jbtGL2N68v5dpS5iHa+Ylej1 6fmscOuGMcjtA/Dg2F8HasR5g/DphMN+jdYBSalu0PRcP8UaRyDfQi1CreUJ40DZ/pYH 3u+A== X-Gm-Message-State: AFq9FYIum8xRQEe5HC5yR0joJ+FVEaWx6UCY3Rdp/8a5/hyDgmWxnUuI PjRG7uOYh53sPZM9z3ASfZzjkBYPiTkETHgptjt8T0QqiyaUTybuRBjHIs/SlQ== X-Gm-Gg: AYBFou19yv9ggX7xoHUfrFD3A7kPOqIarIzQJ+sbxj2JWClmD8pqkLuvll4hKynB84u x1kBuVz7fejnEpPJFIduxdnkf8k+lY63D0N+rEpdNVCIc5yvNvCTyHfIqfQC6GidlGi+FSD7Lsn bYMNgzrhtXgA4xGkO5vS5iv2M/pG1ArVkWomrkb3aewsRrmaewjBQmM4PZMswj40LDAuLsN0Ctd JhJmUDojrrs2fH4b03g9Na0WhAnCEaBQi2sdV6zs+uFvfWyIAR2gTciaTusYCHyJBHniWu7Wvly pRSjGwacBDqOCChPiAPR7n3ysv5vjYqdz2mlwLfgpwz+IMHdvXKUAd9f+A479qC+7n9wlonz/k2 aLganbQyjeNWjNK0zZpbwLr0o/QVqBxN+9Bjx2ZunFSBK/A7Bt/6+CuaBVZ3GYSERJdVTV1BhKF M7PA75d9MBxnSCe6mUszgSkSseL50mKRkdeRtLiER1er8/+iVq+QgHVoieqm5ysBc2KksOJFpfp 4Ha+wfPj5DJpqihMOmjSAZLNBII/lgKXb53qNRTejeKSO7LgKWi1hFO4DdRz5hyoFDrqwz/inHF R+SxezbDByYllYaOJxy8LTGfZgKgQwE= X-Received: by 2002:a05:7022:92a:b0:188:88b3:abda with SMTP id a92af1059eb24-190a7196006mr2551295c88.30.1792575041166; Wed, 21 Oct 2026 02:30:41 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id a92af1059eb24-19035c0c9a6sm4716458c88.3.2026.10.21.02.30.39 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 21 Oct 2026 02:30:40 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-oe][blacksail][PATCH 41/44] libvncserver: patch CVE-2026-32854 Date: Wed, 21 Oct 2026 22:28:54 +1300 Message-ID: <20261021092857.3585453-41-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> References: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 21 Oct 2026 09:30:43 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131228 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-32854 Signed-off-by: Ankur Tyagi --- .../libvncserver/CVE-2026-32854.patch | 66 +++++++++++++++++++ .../libvncserver/libvncserver_0.9.15.bb | 1 + 2 files changed, 67 insertions(+) create mode 100644 meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-32854.patch diff --git a/meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-32854.patch b/meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-32854.patch new file mode 100644 index 0000000000..85adf3eba2 --- /dev/null +++ b/meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-32854.patch @@ -0,0 +1,66 @@ +From bf01ccc67bc8181568af2d1f6e1f6f6888b51bde Mon Sep 17 00:00:00 2001 +From: Kazuma Matsumoto <269371721+y637F9QQ2x@users.noreply.github.com> +Date: Thu, 19 Mar 2026 17:42:00 +0900 +Subject: [PATCH] libvncserver: fix NULL pointer dereferences in httpd proxy + handlers + +httpProcessInput() passes the return value of strchr() to atoi() +and strncmp() without checking for NULL. If a CONNECT request +contains no colon, or a GET request contains no slash, strchr() +returns NULL, leading to a segmentation fault. + +Add NULL checks before using the strchr() return values. + +(cherry picked from commit dc78dee51a7e270e537a541a17befdf2073f5314) + +CVE: CVE-2026-32854 +Upstream-Status: Backport [https://github.com/LibVNC/libvncserver/commit/dc78dee51a7e270e537a541a17befdf2073f5314] +Signed-off-by: Ankur Tyagi +--- + src/libvncserver/httpd.c | 24 ++++++++++++++---------- + 1 file changed, 14 insertions(+), 10 deletions(-) + +diff --git a/src/libvncserver/httpd.c b/src/libvncserver/httpd.c +index 2186ae54..604e5bf9 100644 +--- a/src/libvncserver/httpd.c ++++ b/src/libvncserver/httpd.c +@@ -337,10 +337,11 @@ httpProcessInput(rfbScreenInfoPtr rfbScreen) + + + /* Process the request. */ +- if(rfbScreen->httpEnableProxyConnect) { ++if(rfbScreen->httpEnableProxyConnect) { + const static char* PROXY_OK_STR = "HTTP/1.0 200 OK\r\nContent-Type: octet-stream\r\nPragma: no-cache\r\n\r\n"; + if(!strncmp(buf, "CONNECT ", 8)) { +- if(atoi(strchr(buf, ':')+1)!=rfbScreen->port) { ++ char *colon = strchr(buf, ':'); ++ if(colon == NULL || atoi(colon+1)!=rfbScreen->port) { + rfbErr("httpd: CONNECT format invalid.\n"); + rfbWriteExact(&cl,INVALID_REQUEST_STR, strlen(INVALID_REQUEST_STR)); + httpCloseSock(rfbScreen); +@@ -353,14 +354,17 @@ httpProcessInput(rfbScreenInfoPtr rfbScreen) + rfbScreen->httpSock = RFB_INVALID_SOCKET; + return; + } +- if (!strncmp(buf, "GET ",4) && !strncmp(strchr(buf,'/'),"/proxied.connection HTTP/1.", 27)) { +- /* proxy connection */ +- rfbLog("httpd: client asked for /proxied.connection\n"); +- rfbWriteExact(&cl,PROXY_OK_STR,strlen(PROXY_OK_STR)); +- rfbNewClientConnection(rfbScreen,rfbScreen->httpSock); +- rfbScreen->httpSock = RFB_INVALID_SOCKET; +- return; +- } ++ if (!strncmp(buf, "GET ",4)) { ++ char *slash = strchr(buf, '/'); ++ if (slash != NULL && !strncmp(slash,"/proxied.connection HTTP/1.", 27)) { ++ /* proxy connection */ ++ rfbLog("httpd: client asked for /proxied.connection\n"); ++ rfbWriteExact(&cl,PROXY_OK_STR,strlen(PROXY_OK_STR)); ++ rfbNewClientConnection(rfbScreen,rfbScreen->httpSock); ++ rfbScreen->httpSock = RFB_INVALID_SOCKET; ++ return; ++ } ++ } + } + + if (strncmp(buf, "GET ", 4)) { diff --git a/meta-oe/recipes-graphics/libvncserver/libvncserver_0.9.15.bb b/meta-oe/recipes-graphics/libvncserver/libvncserver_0.9.15.bb index 47e42cd094..9fbec58c72 100644 --- a/meta-oe/recipes-graphics/libvncserver/libvncserver_0.9.15.bb +++ b/meta-oe/recipes-graphics/libvncserver/libvncserver_0.9.15.bb @@ -47,6 +47,7 @@ inherit cmake pkgconfig SRC_URI = "git://github.com/LibVNC/libvncserver;branch=master;protocol=https;tag=LibVNCServer-${PV} \ file://0001-CMake-require-at-least-CMake-3.5.patch \ file://CVE-2026-44988.patch \ + file://CVE-2026-32854.patch \ " SRCREV = "9b54b1ec32731bd23158ca014dc18014db4194c3" From patchwork Wed Oct 21 09:28:55 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101533 Received: from mail-dl1-f42.google.com (mail-dl1-f42.google.com [74.125.82.42]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.7570.1792575044644955606 for ; Wed, 21 Oct 2026 02:30:44 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=cDJw7W/K; spf=pass (domain: gmail.com, ip: 74.125.82.42, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-dl1-f42.google.com with SMTP id a92af1059eb24-18cdcfc05ffso502632c88.1 for ; Wed, 21 Oct 2026 02:30:44 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792575044; x=1793179844; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=quuckHUW88M0c3FHYx6XxuCwr9T1qdVWzn407ExGYz4=; b=cDJw7W/KHPIIOsXgqxgs8+0uzXrF8fIwuV79r8hS40KLxYHyYk5BNQYsVQfEutpetj RaN20iQVeuwkroRSamXCKxlt3/yN+tl7+1ZMe+USnqn4bcvVZJ4dDSoJ9oszxFVd1Cvc 1wFVaQSpyFOpvZ256Jz5op0EPYnh2kkcE3paX/COWNzDUwg82IyvJCWU2R3pXQ7+gQlF FaDV6WWVSQs+OvF2uR+FU7yY9K+Qm9ChbMVB1FOlkIYnys92BTirSzUPyEVVseb2htIV TZ7lbgn2EkK8yGKaQcW+BClwYSltl1eOAFHGBYBGPaKx3TLXUcOoqxiks6S6TOjth50i vbjQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792575044; x=1793179844; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=quuckHUW88M0c3FHYx6XxuCwr9T1qdVWzn407ExGYz4=; b=0L/ZXLvy4deFt7RWTieXwhJHOVuCeKW2RsyLX65GEams96VZGJI4pX11QKrL8Xq2Qi t97r5pWJxurRGrlRdHolQQ4f/iDbudpzm0fo9MJ220aNtEnMWTkClEpa8ve8h9YO+ZHd 2ctrE4uZfb05sGRoy2JZpyyO5iIApiqHQEBf/FsxRJQdHfz7JBgzIGPSiCpnV9gFW6hw FYz+4C07qNfK4UDRyt6i6Ft9q3sP/IhTUa8YRJ7ECmRzyrsWI9AfnDd76yjfNi3maTzx /g9E3zEHYdr0/pKi9AxXCVZuiwjzEMMyKBbSpKiKuAh6tuSgEQeGACmbuk501aP9BXO8 kt6A== X-Gm-Message-State: AFq9FYIWwljZgjsRNA81icwzc6UcivF0UcjR/sDEKLBYL0irDO5ix+r1 IBbsB5ztZZgzq2R958E011KX3Ved6hHPjN17GdwoxSQGwyGD/hHDY5AWFmuycQ== X-Gm-Gg: AYBFou29agBsqUJF6Fhi8UwsQSnK9KiP6wZjhHSzBFryktLlqJkCoKn0XyJyWUEr/nT UnA648YgXSf9ga9gBGdZ0gwED37wqE9xgoq7Xk7QjqtnM7L9yK6RIJ6Pi8+pDcFnaEMM/xyiGi2 HjSvbT8Xf0+PoIPc+rzjocCB9R20D9VlPvRM8YMHA+gZmSrBs9FvHBrdGu+m9oQyzBFx9u7nee6 LwZA5ZdskBdBuVDHyJOpWHLaeAQS1C0YYLjFz7/rJUl7nIZ+D/RH0fvgXM6IrUxwEaKtGUvcb6n kl221Bjwy1RvGapFktBuXrApUjNe+Pg872B9ckIl0yZVdTCbQkbKlO3C5+b7jFI61GhgTBqsMCw 2wC3SM2qyEplDmKgnoQG71ylRRJFXTbMKLJkETTXdiGRkQuN9z/uoVTWPPzDi9WjahgsQLJpOD4 XvlBgDNzWFliZd9atMa+U2ef/OV2gebWPakixNhMWlWSJfMwsh9prYe5vIfxsAtza3CyG3HrfCL UM524OGNe1208Q807+gZA7opNFpRlHUBL67fJiBlyB8DrPJMciWkNJ028BKk3VA6U50jRbQKVT8 jmEQt7DYbnR3GYDjM4Xnr5n+wo8ab/Q= X-Received: by 2002:a05:701b:230e:b0:176:a225:e364 with SMTP id a92af1059eb24-190a77580damr1939243c88.35.1792575043752; Wed, 21 Oct 2026 02:30:43 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id a92af1059eb24-19035c0c9a6sm4716458c88.3.2026.10.21.02.30.41 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 21 Oct 2026 02:30:43 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-oe][blacksail][PATCH 42/44] libvncserver: patch CVE-2026-32853 Date: Wed, 21 Oct 2026 22:28:55 +1300 Message-ID: <20261021092857.3585453-42-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> References: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 21 Oct 2026 09:30:53 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131229 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-32853 Signed-off-by: Ankur Tyagi --- .../libvncserver/CVE-2026-32853.patch | 76 +++++++++++++++++++ .../libvncserver/libvncserver_0.9.15.bb | 1 + 2 files changed, 77 insertions(+) create mode 100644 meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-32853.patch diff --git a/meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-32853.patch b/meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-32853.patch new file mode 100644 index 0000000000..23d6a3df1f --- /dev/null +++ b/meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-32853.patch @@ -0,0 +1,76 @@ +From 4d5c0ea960e4a22cd8b8fb3c6e18b5a1b1797783 Mon Sep 17 00:00:00 2001 +From: Kazuma Matsumoto <269371721+y637F9QQ2x@users.noreply.github.com> +Date: Sun, 22 Mar 2026 20:35:49 +0100 +Subject: [PATCH] libvncclient: add bounds checks to UltraZip subrectangle + parsing + +HandleUltraZipBPP() iterates over sub-rectangles using numCacheRects +(derived from the attacker-controlled rect.r.x) without validating +that the pointer stays within the decompressed data buffer. A malicious +server can set a large numCacheRects value, causing heap out-of-bounds +reads via the memcpy calls in the parsing loop. + +Add bounds checks before reading the 12-byte subrect header and before +advancing the pointer by the raw pixel data size. Use uint64_t for the +raw data size calculation to prevent integer overflow on 32-bit platforms. + +(cherry picked from commit 009008e2f4d5a54dd71f422070df3af7b3dbc931) + +CVE: CVE-2026-32853 +Upstream-Status: Backport [https://github.com/LibVNC/libvncserver/commit/009008e2f4d5a54dd71f422070df3af7b3dbc931] +Signed-off-by: Ankur Tyagi +--- + src/libvncclient/ultra.c | 16 +++++++++++++++- + 1 file changed, 15 insertions(+), 1 deletion(-) + +diff --git a/src/libvncclient/ultra.c b/src/libvncclient/ultra.c +index 1d3aaba6..5633b8cb 100644 +--- a/src/libvncclient/ultra.c ++++ b/src/libvncclient/ultra.c +@@ -126,6 +126,7 @@ HandleUltraZipBPP (rfbClient* client, int rx, int ry, int rw, int rh) + int toRead=0; + int inflateResult=0; + unsigned char *ptr=NULL; ++ unsigned char *ptr_end=NULL; + lzo_uint uncompressedBytes = ry + (rw * 65535); + unsigned int numCacheRects = rx; + +@@ -194,11 +195,18 @@ HandleUltraZipBPP (rfbClient* client, int rx, int ry, int rw, int rh) + + /* Put the uncompressed contents of the update on the screen. */ + ptr = (unsigned char *)client->raw_buffer; ++ ptr_end = ptr + uncompressedBytes; + for (i=0; i ptr_end) { ++ rfbClientLog("UltraZip: subrect %d header exceeds decompressed data bounds\n", i); ++ return FALSE; ++ } ++ + memcpy((char *)&sx, ptr, 2); ptr += 2; + memcpy((char *)&sy, ptr, 2); ptr += 2; + memcpy((char *)&sw, ptr, 2); ptr += 2; +@@ -213,8 +221,13 @@ HandleUltraZipBPP (rfbClient* client, int rx, int ry, int rw, int rh) + + if (se == rfbEncodingRaw) + { ++ uint64_t rawBytes = (uint64_t)sw * sh * (BPP / 8); ++ if (rawBytes > (size_t)(ptr_end - ptr)) { ++ rfbClientLog("UltraZip: subrect %d raw data exceeds decompressed data bounds\n", i); ++ return FALSE; ++ } + client->GotBitmap(client, (unsigned char *)ptr, sx, sy, sw, sh); +- ptr += ((sw * sh) * (BPP / 8)); ++ ptr += (size_t)rawBytes; + } + } + +@@ -222,3 +235,4 @@ HandleUltraZipBPP (rfbClient* client, int rx, int ry, int rw, int rh) + } + + #undef CARDBPP ++ diff --git a/meta-oe/recipes-graphics/libvncserver/libvncserver_0.9.15.bb b/meta-oe/recipes-graphics/libvncserver/libvncserver_0.9.15.bb index 9fbec58c72..e2f995947f 100644 --- a/meta-oe/recipes-graphics/libvncserver/libvncserver_0.9.15.bb +++ b/meta-oe/recipes-graphics/libvncserver/libvncserver_0.9.15.bb @@ -48,6 +48,7 @@ SRC_URI = "git://github.com/LibVNC/libvncserver;branch=master;protocol=https;tag file://0001-CMake-require-at-least-CMake-3.5.patch \ file://CVE-2026-44988.patch \ file://CVE-2026-32854.patch \ + file://CVE-2026-32853.patch \ " SRCREV = "9b54b1ec32731bd23158ca014dc18014db4194c3" From patchwork Wed Oct 21 09:28:56 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101535 Received: from mail-dl1-f53.google.com (mail-dl1-f53.google.com [74.125.82.53]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.7571.1792575046885626284 for ; Wed, 21 Oct 2026 02:30:46 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=p6HvgOHC; spf=pass (domain: gmail.com, ip: 74.125.82.53, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-dl1-f53.google.com with SMTP id a92af1059eb24-15dd124bbe7so947867c88.1 for ; Wed, 21 Oct 2026 02:30:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792575046; x=1793179846; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=bMZWrUxPiD/DZ3eOTZX4K9oNsIWXpZlaHqLpM/3qtvg=; b=p6HvgOHCcGCC2b5Bvkwzi3gOOg8yBSYpE4HzCugmrtzAl7Eo6i1aIpWmr6BUJZPjyB egY9TPkqqT5kywl0Cp7EeUUR1F+7w1epC63qpzNwwLNSh1JyUpIpYVLHl+7ysg2Gg4o0 39N4Ap4DPivOdC3DP8jw5QnUlViymiy8P2cGY2oY2FrrZEtrraIZtcyvsjHt+Itwi9ov exLI+qm6qJyQ4X12KubXxEDYtnPajr4aN7OeXSnMSyIBfzJwJoIHv1Y1Gr8BkhsQFrHk CRPUiCiZydvKowayUoMQF0sxZubMvB+JnR3JPchJ16askGjhMEIzUe3cy9x4rtfWu//P 77iw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792575046; x=1793179846; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=bMZWrUxPiD/DZ3eOTZX4K9oNsIWXpZlaHqLpM/3qtvg=; b=RVKgS21M6eJr+onVTpyQGoIqUyC12DuH1NTBYVKv5Ex3mm2tDb9mBsgbLlaVpqvuej ufzFlMe6rGTO5hrYHhhlnkgEy3eA251rmhtxF7t6o22C9vinpH3DXiZHW0dYXIne+5MS ed+yd2GruXTYcZoVulz/YTgftFvOG+dibLpBELX78SVScGF1PAD1ITFLfNBPakD8cSAC J6bU6S9EYWv1o6gc5R+rBl10jWCtPN0qEA4+dcMhzrlL43OQ0Rju9m23/TMQCackcaT+ AUTQdkEpiX30HQ9jJTa3ledTHZNkf1y7Zt2owoya60G9sa9+X2hyr7vlp2kf809XNhGa GkwQ== X-Gm-Message-State: AFq9FYLxSGACStG32b4Kk8ffmW21z3Xd/vlOk20xflrBz8oRFMf8KTRe h8qvNWKd6viMdZh8cATdeiOMSxmRQmgXsrQ8owRn9d0wJHh7Rr0aeoH8VuYkzA== X-Gm-Gg: AYBFou3OXMZHEyxkQeXz9kOR9wTWDyIM1tewxNTdo6fsl69W7O+HarbWWDmDVdTgbXQ 3WX2xy/h8sAXveKiNKFoxQzWs+S6wcP75zImcgoreo/UsOIzmZYrgca8ZUw4/PXw9c18boVJn7j dsDTuqNX5zokS88IeEmQoO9cR6PEji/0rIqw/ppzXrrajnObnFVckyB7UTeKiVDKDnNvIXLCxCf icYH1CAmNJekC4ZK9VWbYhuWrrh04+renvcl0oapbm1EAD8ByxoNjamGfwGDrs2daxvKyeqJBow 308ooa69Xfuu8o/d6ogM4GOg72aKnr/lzpObdLfCvL1LkZf1H1yh7aw/LU1/NzfcI0370456SoI xpEgzJk305XR/CDeCfrxqosKtyaTMeFMHId4tlpHxM/5jdggc2NPbNInSX7ILhZaPLW8WqvuYUZ awfjP0pLYCv8FGoz0Y+y1zoIGKs4zUxeMkEU4iZhPQcV03nypmGFaBz0qx6CpsA0bF+qa8Fv+eT XUQgrU8/blo8yHJuzv0mUPd8dIJd2a2C3XX+TGfxT04GtV5D+fD0m9pReqpEIRxWxhEREH4GiAw 7QpVTNa5E5LZ9zHEtXbcdMSFUNOy5n7FqucoLhpk7P+XcVHuJvwg X-Received: by 2002:a05:701b:4284:10b0:14a:9dc3:dd11 with SMTP id a92af1059eb24-190a5999e7fmr2248861c88.18.1792575045991; Wed, 21 Oct 2026 02:30:45 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id a92af1059eb24-19035c0c9a6sm4716458c88.3.2026.10.21.02.30.44 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 21 Oct 2026 02:30:45 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-oe][blacksail][PATCH 43/44] libvncserver: patch CVE-2026-50538 Date: Wed, 21 Oct 2026 22:28:56 +1300 Message-ID: <20261021092857.3585453-43-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> References: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 21 Oct 2026 09:30:53 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131230 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-50538 Signed-off-by: Ankur Tyagi --- .../libvncserver/CVE-2026-50538.patch | 49 +++++++++++++++++++ .../libvncserver/libvncserver_0.9.15.bb | 1 + 2 files changed, 50 insertions(+) create mode 100644 meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-50538.patch diff --git a/meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-50538.patch b/meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-50538.patch new file mode 100644 index 0000000000..da01736323 --- /dev/null +++ b/meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-50538.patch @@ -0,0 +1,49 @@ +From e824e7d8ea71feccb81aeb34771eb83e052c3fe2 Mon Sep 17 00:00:00 2001 +From: "Bas.Levering" <45083161+Bazskillz@users.noreply.github.com> +Date: Fri, 29 May 2026 09:08:28 +0200 +Subject: [PATCH] Merge commit from fork + +HandleTightBPP's basic-compression loop wrote each batch of decompressed +rows straight into client->frameBuffer (via FilterCopy/Palette/Gradient) +and only compared the running total against the rectangle height rh after +the loop. A malicious or man-in-the-middle server can send a zlib stream +that decompresses to more rows than rh, so the writes run past the end of +the framebuffer allocation: an attacker-controlled heap out-of-bounds +write reachable in a default build (Tight is advertised when built with +libz+libjpeg), pre-authentication, from one FramebufferUpdate. + +Clamp numRows to the remaining height before calling filterFn, matching +the existing house style (trle.c and the Tight JPEG path already clamp to +the rectangle height). + +Co-authored-by: Bas Levering +(cherry picked from commit 540332be3e0acc566fa64da6f1b4680c72c724dd) + +CVE: CVE-2026-50538 +Upstream-Status: Backport [https://github.com/LibVNC/libvncserver/commit/540332be3e0acc566fa64da6f1b4680c72c724dd] +Signed-off-by: Ankur Tyagi +--- + src/libvncclient/tight.c | 10 ++++++++++ + 1 file changed, 10 insertions(+) + +diff --git a/src/libvncclient/tight.c b/src/libvncclient/tight.c +index dad5514f..3ee0d5e0 100644 +--- a/src/libvncclient/tight.c ++++ b/src/libvncclient/tight.c +@@ -341,6 +341,16 @@ HandleTightBPP (rfbClient* client, int rx, int ry, int rw, int rh) + + numRows = (bufferSize - zs->avail_out) / rowSize; + ++ /* The decompressed stream is server-controlled and may yield more rows ++ than the rectangle's declared height. filterFn() writes directly into ++ client->frameBuffer, so clamp here before writing to avoid running past ++ the framebuffer (heap out-of-bounds write). The post-loop ++ "rowsProcessed != rh" check happens too late. */ ++ if (numRows > rh - rowsProcessed) { ++ rfbClientLog("Tight: too many scan lines after decompression.\n"); ++ return FALSE; ++ } ++ + filterFn(client, rx, ry+rowsProcessed, numRows); + + extraBytes = bufferSize - zs->avail_out - numRows * rowSize; diff --git a/meta-oe/recipes-graphics/libvncserver/libvncserver_0.9.15.bb b/meta-oe/recipes-graphics/libvncserver/libvncserver_0.9.15.bb index e2f995947f..ff7327c6cf 100644 --- a/meta-oe/recipes-graphics/libvncserver/libvncserver_0.9.15.bb +++ b/meta-oe/recipes-graphics/libvncserver/libvncserver_0.9.15.bb @@ -49,6 +49,7 @@ SRC_URI = "git://github.com/LibVNC/libvncserver;branch=master;protocol=https;tag file://CVE-2026-44988.patch \ file://CVE-2026-32854.patch \ file://CVE-2026-32853.patch \ + file://CVE-2026-50538.patch \ " SRCREV = "9b54b1ec32731bd23158ca014dc18014db4194c3" From patchwork Wed Oct 21 09:28:57 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101534 Received: from mail-dl1-f52.google.com (mail-dl1-f52.google.com [74.125.82.52]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.7574.1792575049980491696 for ; Wed, 21 Oct 2026 02:30:50 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=Q+S17nqW; spf=pass (domain: gmail.com, ip: 74.125.82.52, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-dl1-f52.google.com with SMTP id a92af1059eb24-18cdcfc05ffso502699c88.1 for ; Wed, 21 Oct 2026 02:30:49 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792575049; x=1793179849; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=qRmWPLXpTjUvZ/R6YXZXwRgJPUBZlIjpRkbSr1takPA=; b=Q+S17nqWwBWsrOGk0OSbS4KJQy5e5SLcpEBLEfpRSH1lsY122Sr/nEv4pAdj3LopNO djI/fWf0wOen07kTV1OHQktuOxmmqkZP0YoOjTMVjWMpOJIDWF+6s9Caa7tCc+mJV7dg iD0XU2yuqEbSaj1DV9l1+ywLsPcmOvv1aunChbkRacUYnetaHKb3ycYLqKciuUud2SQb 6mfxsfKpgEMZQUw42bo7pvdw/z8glKH9LGZPfbHlqnKrA4kfDAsnKDK7WheWNLvg/Uv9 MYHoARjz7R2xfGAv5wqdkeGih8YkqMqiJBHr41aW0yHmjCZR79nmLLtXbmLJhjftFR0u blng== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792575049; x=1793179849; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=qRmWPLXpTjUvZ/R6YXZXwRgJPUBZlIjpRkbSr1takPA=; b=b0CsK0q8T9sQqseUTs9u7YcN8kE5+bc+vyW6Jqs+LkquimXovd36I6GxXZP0WtkNGG 6QL5+8FuEpLxzqxtI/cXZF8H786ct/zwxB8dRFE0ayo34Ibuf/EDEnHCJYwexrO9JOr3 NsH7ZymUSslvsWGn7SLtRG3CaGBdcNVn4LhVwlK5Mj/2IDc3Y3cZY+AgHnNC4sLYZORA L/X+43HICkgbUqJ+o4JynHeFmJmY0akMC89Rs0CMWwlKlEgKitpxFh15FtpfURpsMRYV Z0iiBJN+nnvA/KDVNlWoHBMF46iG2Z6brsKEYeataIib8cKi3tEQTieHp0D7ocHz5po4 /dYQ== X-Gm-Message-State: AFq9FYJlzhnPwN9daw/A6v8h2VGajYDOS1ZF4EKhrjgFGSV6BYo35w9u /K9ItU2HKKTHKFlOz4mRW02j+4VZmpwYV9TnfqKL/UkjNJ9v0gWpuubfjB4ugw== X-Gm-Gg: AYBFou2JX+0Ic7CGlOh42rzppb5DFiDjhxWfIRZAsI7pgVJLmBqkvcNKLC3rb2Ix0hJ 9iMeGIVqmP8+yIBmrovFv5FU96H5G6fCBlUv9nXNQ2QGzma4+i2hgfHNrLmyxbgkjgmeK/0FA0+ vvjiX/MI9p87fYNMP8zc1Vyay3a667eAsSEnn/uySdwUmyeopDGUxMvrmxeNGWAcexnV8GfH/cl NuhAugsGnvOX8PXdaMX/RcfaRjLw/vfbgDmLYu1exukSCTj/pyaCsJ01ts18QIg6rWU+eoa/hFe 86mETBg3Oj/Jh6PkRryS9TTL+34fA356pPI5/dPIWbrFL8cr+fKUbhdKx6xTgLDOetRHTf0aKIa iSoywrWhKKMUxfKFCNuy/xSG3kQaNi8zbAzjEc7t7dO/4gLJVLsVoYWPWbhYF/V2ZblIF7/OJj3 ozjkiXA/oIGHuw9oLphAy8XGiTvj2hsVvSeBxdcdxpb8Y16rwNBJ/e0NaRDcPOOVTgFpTCLQ1L7 MigVjGvq//iDao7NNVFkpUHemRASe1oRphFpS7i29cr7RLXfL9cgYKAY6+j/mXUKYK+UdHs3pB7 lF1iy7BuZfHTYBU7CtlJgHwuXcZUuC0= X-Received: by 2002:a05:7022:b047:20b0:14c:1f57:3ea9 with SMTP id a92af1059eb24-190a6adce43mr2019068c88.26.1792575048534; Wed, 21 Oct 2026 02:30:48 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id a92af1059eb24-19035c0c9a6sm4716458c88.3.2026.10.21.02.30.46 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 21 Oct 2026 02:30:48 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi , Khem Raj Subject: [oe][meta-webserver][blacksail][PATCH 44/44] swagger-ui: upgrade 5.33.2 -> 5.33.3 Date: Wed, 21 Oct 2026 22:28:57 +1300 Message-ID: <20261021092857.3585453-44-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> References: <20261021092857.3585453-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 21 Oct 2026 09:30:53 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131231 From: Ankur Tyagi Changelog: https://github.com/swagger-api/swagger-ui/releases/tag/v5.33.3 Signed-off-by: Ankur Tyagi Signed-off-by: Khem Raj (cherry picked from commit 67b4387a4d9f2fbc111b52ec6cd3b7620116c6d1) Signed-off-by: Ankur Tyagi --- .../swagger-ui/{swagger-ui_5.33.2.bb => swagger-ui_5.33.3.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-webserver/recipes-devtools/swagger-ui/{swagger-ui_5.33.2.bb => swagger-ui_5.33.3.bb} (94%) diff --git a/meta-webserver/recipes-devtools/swagger-ui/swagger-ui_5.33.2.bb b/meta-webserver/recipes-devtools/swagger-ui/swagger-ui_5.33.3.bb similarity index 94% rename from meta-webserver/recipes-devtools/swagger-ui/swagger-ui_5.33.2.bb rename to meta-webserver/recipes-devtools/swagger-ui/swagger-ui_5.33.3.bb index aeee9e4da6..6f69070033 100644 --- a/meta-webserver/recipes-devtools/swagger-ui/swagger-ui_5.33.2.bb +++ b/meta-webserver/recipes-devtools/swagger-ui/swagger-ui_5.33.3.bb @@ -12,7 +12,7 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=3b83ef96387f14655fc854ddc3c6bd57" SRC_URI = "git://github.com/swagger-api/swagger-ui;branch=main;protocol=https;tag=v${PV}" -SRCREV = "e89a91f13cdee432d97ca9d3d1ac1969ff797036" +SRCREV = "38ca10e1867a66525751590d8d51011973107ad1" CVE_STATUS[CVE-2016-1000229] = "fixed-version: fixed since 2.2.1"