From patchwork Sun Oct 25 05:18:09 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: auh@yoctoproject.org X-Patchwork-Id: 101906 Received: from a27-30.smtp-out.us-west-2.amazonses.com (a27-30.smtp-out.us-west-2.amazonses.com [54.240.27.30]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.18335.1792905490559892465 for ; Sat, 24 Oct 2026 22:18:10 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@yoctoproject.org header.s=lvjh2tk576v2ro5mi6k4dt3mc6wpqbky header.b=Zd1sziqa; dkim=pass header.i=@amazonses.com header.s=hsbnp7p3ensaochzwyq5wwmceodymuwv header.b=LlMM80ds; spf=pass (domain: us-west-2.amazonses.com, ip: 54.240.27.30, mailfrom: 010101a1717eac70-3c13bd49-ff3e-4c77-bee7-7bca09449bfc-000000@us-west-2.amazonses.com) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=lvjh2tk576v2ro5mi6k4dt3mc6wpqbky; d=yoctoproject.org; t=1792905489; h=Content-Type:MIME-Version:From:To:Subject:Message-Id:Date; bh=ERfsd9rjzNt8HqFEUOEgzyPP3czr6a+Qh9QjkGhxpY8=; b=Zd1sziqawdAOHNWaLaRKFLiAhVO4ZKTHY8wwYSNRq5Pr2x61l8RqxyFBxIP7mk+R Yraqj4RUCHOz5sy2uga1IQFo2IsYi3cnqRagMNHBDw7V5tETo8Nwtld9iJJU4C7RHjd mCB7cpYhz9nVS+oQ/B78ag2f/IC0Dw4DboKSpHOM= DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=hsbnp7p3ensaochzwyq5wwmceodymuwv; d=amazonses.com; t=1792905489; h=Content-Type:MIME-Version:From:To:Subject:Message-Id:Date:Feedback-ID; bh=ERfsd9rjzNt8HqFEUOEgzyPP3czr6a+Qh9QjkGhxpY8=; b=LlMM80dsiirmE6cN41fQ6l/zAouctweqzV2Ce7P8PjJ2ngffu7GGdKD4KSOPgl9P 43DZvW+uOfl2UlG9FrXarwjfFTGoOdk95bMwxKv9ZblICgwHB78bd+YsHON7/az/bbJ Tb3ngaCBCEl7m9m9csbJ9r1UGDiKajSHVcuJr1Qg= MIME-Version: 1.0 From: auh@yoctoproject.org To: openembedded-core@lists.openembedded.org Subject: [AUH] libslirp: upgrading to 4.9.6 SUCCEEDED Message-ID: <010101a1717eac70-3c13bd49-ff3e-4c77-bee7-7bca09449bfc-000000@us-west-2.amazonses.com> Date: Sun, 25 Oct 2026 05:18:09 +0000 Feedback-ID: ::1.us-west-2.9np3MYPs3fEaOBysGKSlUD4KtcmPijcmS9Az2Hwf7iQ=:AmazonSES X-SES-Outgoing: 2026.10.25-54.240.27.30 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Sun, 25 Oct 2026 05:18:16 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/248598 Hello, this email is a notification from the Auto Upgrade Helper that the automatic attempt to upgrade the recipe(s) *libslirp* to *4.9.6* has Succeeded. Next steps: - apply the patch: git am 0001-libslirp-upgrade-4.9.5-4.9.6.patch - check the changes to upstream patches and summarize them in the commit message, - compile an image that contains the package - perform some basic sanity tests - amend the patch and sign it off: git commit -s --reset-author --amend - send it to the appropriate mailing list Alternatively, if you believe the recipe should not be upgraded at this time, you can fill RECIPE_NO_UPDATE_REASON in respective recipe file so that automatic upgrades would no longer be attempted. Please review the attached files for further information and build/update failures. Any problem please file a bug at https://bugzilla.yoctoproject.org/enter_bug.cgi?product=Automated%20Update%20Handler Regards, The Upgrade Helper -- >8 -- From dbfb42c57dbfac4828bfc3c7410ec1684783bc28 Mon Sep 17 00:00:00 2001 From: Upgrade Helper Date: Sun, 25 Oct 2026 05:11:13 +0000 Subject: [PATCH] libslirp: upgrade 4.9.5 -> 4.9.6 ## [4.9.6] - 2026-10-25 ## Security - Fix Buffer Underflow in `tftp_handle_rrq()` When Handling Empty Filename #100 - Fix Echo Reply Length Desynchronization in `icmp_receive()` and `icmp6_receive()` #105 - Reject martians - tftp: check actual available room ## Fixed - Fix memory leak of tftp_server_name #99 - Fix Protocol Type Mismatch in `icmp6_receive()`: IPv4 `ICMP_UNREACH` Emitted as ICMPv6 #101 - Fix Double Socket Descriptor Leak in `fork_exec()` on Argument Parsing Failure #102 - Fix Socket Heap Memory & Buffer Leak in `slirp_state_load()` on Deserialization or Validation Failure #103 - Avoid Non-Reentrant Static Variable in `tcp_emu()` #104 - pingtest: use SLIRP_CONFIG_VERSION_MAX - icmp: preserve guest TTL and forward traceroute ICMP errors !166 - dns: proxy DNS queries sent to the virtual gateway address !163 - tftp: Drop TFTP_BLOCKSIZE_MAX - Fix bounds-check in processing OEM commands (CVE-2026-95507) - Fix bounds-check in dhcpv6 against MTU (CVE-2026-95508) [Unreleased]: https://gitlab.freedesktop.org/slirp/libslirp/compare/v4.9.6...master [4.9.5]: https://gitlab.freedesktop.org/slirp/libslirp/compare/v4.9.5...v4.9.6 --- .../slirp/{libslirp_4.9.5.bb => libslirp_4.9.6.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-connectivity/slirp/{libslirp_4.9.5.bb => libslirp_4.9.6.bb} (92%) diff --git a/meta/recipes-connectivity/slirp/libslirp_4.9.5.bb b/meta/recipes-connectivity/slirp/libslirp_4.9.6.bb similarity index 92% rename from meta/recipes-connectivity/slirp/libslirp_4.9.5.bb rename to meta/recipes-connectivity/slirp/libslirp_4.9.6.bb index d77121bf30..9d231f111d 100644 --- a/meta/recipes-connectivity/slirp/libslirp_4.9.5.bb +++ b/meta/recipes-connectivity/slirp/libslirp_4.9.6.bb @@ -6,7 +6,7 @@ LIC_FILES_CHKSUM = "file://COPYRIGHT;md5=f95a9bf4a7e411164fe843697ccda59e \ file://LICENSE;md5=cfea6044642fd63b90ce9d79f5db64d9" SRC_URI = "git://gitlab.freedesktop.org/slirp/libslirp.git;protocol=https;branch=master;tag=v${PV}" -SRCREV = "390848f47391f412451b2d259d8527fabb51e5e3" +SRCREV = "392af90207fc51dd9f9044ee9b1f963f3c851c2c" UPSTREAM_CHECK_GITTAGREGEX = "v(?P\d+(\.\d+)+)" DEPENDS = "glib-2.0"