From patchwork Mon Oct 26 10:18:41 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101968 Received: from mail-pj1-f53.google.com (mail-pj1-f53.google.com [209.85.216.53]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.39572.1793009945419506454 for ; Mon, 26 Oct 2026 03:19:05 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=RsVJfSHO; spf=pass (domain: gmail.com, ip: 209.85.216.53, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pj1-f53.google.com with SMTP id 98e67ed59e1d1-3acdcfa2bd3so2026007a91.3 for ; Mon, 26 Oct 2026 03:19:05 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1793009945; x=1793614745; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc:subject:date:message-id:reply-to:content-type; bh=HCbv5aFli/SUaqr63iGl3VFZls39DwvVgdI8l0oomms=; b=RsVJfSHOnYhqQbpU58UaypaO26l2ryZRY+4TaYzYOqusz9ihncJB3/5hfgyeozw+w3 Ds/uhNcBtUmMK6nNXRwSB9Fnv1mdFOhlxOLpsoDfUlf91doPtBRrVKFe4gA8jq/PuZfK 0GEq42lNDrZjravRq1nrYMg+wHKrFhQw1cP2CkyfV5z52wlR2ZJWq/eP/xh+E+6bMVq5 yESnVqfydbr20GanhaU59sSKMrLa0DfI6kq7qDPe6nem4/jNfSAVyN4s5xMEeZGx6cWr J8rVlgu6zO5QlTSRGEUYJ+mFdED3Dwz5N1vACNmlOJ3hTUC6u5Ypvqve5E/Zq61naqi5 O1RQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793009945; x=1793614745; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to:content-type; bh=HCbv5aFli/SUaqr63iGl3VFZls39DwvVgdI8l0oomms=; b=HXjOz9xBgdZ3yzAwyRN+7PEY2cxXPfw1qeC4b7fw01+8D/Gue/uH3Dhcn2gBd/S+O/ izQIoZEWtUEUq20hVferzMSf4BwAq+5rOvtXbU6ynIu9CoMMS2eNvR4kttMSYmjlFbrg hMruNj1S+toHwx3uVU5O5Ft2n8m2l+ugEpy9IG0G56WakY13sgHT9OuHaLJoSTJzUdgL OeDiV+cEdGN/tNLFf4AK8sphRAP7rl8pYPGcpivWVMmRAdHvinh/nU00UeUHkUjPrKLG HW+H1PaN8v1EH4NhMPQpuUfy/tv1M1edMGxh0Ye6ftu7jXxw/JDCN07evBPZQ/JnttDS qdfw== X-Gm-Message-State: AFq9FYKp04dM5fTMhU1dvzfBZ9qqTFicdcerKndtF5DGqnMkd6iW/tLG F8PiIZJTy2UN6ClzzzC/zbabNwT/hRkV+lwdP7Pqa2oeBe6PomxvFsTn+s8rlA== X-Gm-Gg: AYBFou3AHgYVwOHPk5Eu/TfQxLsXpHv8kANBIdVOjFEtGXA0Lqu/2fOXmijhOF8rhGJ NFvIZxiGfV94NyFQz3G100qDnhmo2oO3JeRi6GK8DRCk5E6QtwRU3uzU74AW54OQmmHJbPg0UZh yQ/yrZgHIV2s1cs/CIyai/L1zNqw5XvDBe9KLZXWU24ir73gLMzc/E5BeoSL9f0hKCQH3K00hIn QlYZCmUp2ewD7J6XA3bgFubh0K+y9mfT1nNFUmcNsu1IxbL31ariiCNyGyrhHlNFvAy6qeLI1tR 3nI2sOOAw68WLA0qaYPq9S23lA3Nrwg7QUuAKPbVnhUyi03j+1jbvoeL1R4lBoW8WIam6izlzoY WYT1nxvFthdkSSeD26ZOtga8QvSdS3HEjRw79h6s8nl/h4hg4GA/jDMk0bE4WA644FSJt6gk9E4 jLdhxYL1kuYuPr1JcAhxx+/rTDd+OFSwnY1FmuL+sY0mPZPhzYiw7pCH6wptFBqgIUudHI2UnBT u91iwBstq+5OncKES5WKW4F0uhdcKS40W6hpvA0DaB6ZwMhXwaVp2R0Hbp45/fraeu6C7Qh2zhH Sdix1SORL62Oew+svtDETaDfYZKNHhU= X-Received: by 2002:a17:90b:2645:b0:3a8:878:ebab with SMTP id 98e67ed59e1d1-3adead4c29bmr5382998a91.35.1793009944674; Mon, 26 Oct 2026 03:19:04 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-cd8ccc4648dsm1383583a12.14.2026.10.26.03.19.02 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 26 Oct 2026 03:19:04 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-oe][blacksail][PATCH 1/10] libmspack: patch CVE-2026-110602 Date: Mon, 26 Oct 2026 23:18:41 +1300 Message-ID: <20261026101850.1470035-1-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Mon, 26 Oct 2026 10:19:12 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131423 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-110602 Signed-off-by: Ankur Tyagi --- .../libmspack/CVE-2026-110602.patch | 41 +++++++++++++++++++ .../cabextract/libmspack_0.11alpha.bb | 4 +- 2 files changed, 44 insertions(+), 1 deletion(-) create mode 100644 meta-oe/recipes-support/cabextract/libmspack/CVE-2026-110602.patch diff --git a/meta-oe/recipes-support/cabextract/libmspack/CVE-2026-110602.patch b/meta-oe/recipes-support/cabextract/libmspack/CVE-2026-110602.patch new file mode 100644 index 0000000000..15d690945f --- /dev/null +++ b/meta-oe/recipes-support/cabextract/libmspack/CVE-2026-110602.patch @@ -0,0 +1,41 @@ +From aca3603bed20772fd86ce5b901005668cee835ad Mon Sep 17 00:00:00 2001 +From: Stuart Caie +Date: Mon, 15 Jun 2026 16:33:33 +0000 +Subject: [PATCH] kwajd_read_headers(): initialise pointers before returning + any error + +CVE: CVE-2026-110602 +Upstream-Status: Backport [https://github.com/kyz/libmspack/commit/4d868504114346aa767d435fbb89a8b76603493f] + +Dropped changes for test and ChangeLog file. + +Signed-off-by: Ankur Tyagi +--- + mspack/kwajd.c | 7 +++++-- + 1 file changed, 5 insertions(+), 2 deletions(-) + +diff --git a/mspack/kwajd.c b/mspack/kwajd.c +index 30caa89..ede91dd 100644 +--- a/mspack/kwajd.c ++++ b/mspack/kwajd.c +@@ -160,6 +160,11 @@ static int kwajd_read_headers(struct mspack_system *sys, + unsigned char buf[16]; + int i; + ++ ++ /* initialise pointers */ ++ hdr->filename = NULL; ++ hdr->extra = NULL; ++ + /* read in the header */ + if (sys->read(fh, &buf[0], kwajh_SIZEOF) != kwajh_SIZEOF) { + return MSPACK_ERR_READ; +@@ -177,8 +182,6 @@ static int kwajd_read_headers(struct mspack_system *sys, + hdr->data_offset = EndGetI16(&buf[kwajh_DataOffset]); + hdr->headers = EndGetI16(&buf[kwajh_Flags]); + hdr->length = 0; +- hdr->filename = NULL; +- hdr->extra = NULL; + hdr->extra_length = 0; + + /* optional headers */ diff --git a/meta-oe/recipes-support/cabextract/libmspack_0.11alpha.bb b/meta-oe/recipes-support/cabextract/libmspack_0.11alpha.bb index 169a5f271b..c612e54e17 100644 --- a/meta-oe/recipes-support/cabextract/libmspack_0.11alpha.bb +++ b/meta-oe/recipes-support/cabextract/libmspack_0.11alpha.bb @@ -8,7 +8,9 @@ LICENSE = "LGPL-2.1-only" LIC_FILES_CHKSUM = "file://COPYING.LIB;md5=7fbc338309ac38fefcd64b04bb903e34" -SRC_URI = "https://www.cabextract.org.uk/libmspack/libmspack-${PV}.tar.gz" +SRC_URI = "https://www.cabextract.org.uk/libmspack/libmspack-${PV}.tar.gz \ + file://CVE-2026-110602.patch \ +" SRC_URI[sha256sum] = "70dd1fb2f0aecc36791b71a1e1840e62173079eadaa081192d1c323a0eeea21b" inherit autotools From patchwork Mon Oct 26 10:18:42 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101970 Received: from mail-pj1-f54.google.com (mail-pj1-f54.google.com [209.85.216.54]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.39573.1793009947776813867 for ; Mon, 26 Oct 2026 03:19:07 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=Ro+A5AnY; spf=pass (domain: gmail.com, ip: 209.85.216.54, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pj1-f54.google.com with SMTP id 98e67ed59e1d1-3ad41b47541so1962819a91.1 for ; Mon, 26 Oct 2026 03:19:07 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1793009947; x=1793614747; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=Rjv6WFBMQzG1BHncFUbXUizK8biVToiSEkCYlL2AO20=; b=Ro+A5AnYUbWBnbL+b+99W1U5G4Cl9EVhXsgXfkyDfz8JZeJRgEhlHFps9bXvJMWvZe U2w9QKCpEe0ap+Aymk1JZZT+GBZV/7epMkWpKOfZb47Lw3FEsOs21Xp5gK5ebhjrIwgR FRi1gnSlzdwjIfV4W/WiHjnojADfIMacsWqzosNLA+oFbQUaUsLsGz2oqksHO5O+DGyr gZgEFvpbDfN3UkIwhAxjugiE6rXVOhXE77GhRMkb2ChpAfoaayGP/p1UhgcF0U8ndAzF 38vZP1zQm8HTqrU9Pzg+kXqWfJd21l2BmGc0OY2QabhR2otb2vlVIO9RhY4JALXSeIq2 ow/A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793009947; x=1793614747; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=Rjv6WFBMQzG1BHncFUbXUizK8biVToiSEkCYlL2AO20=; b=Pc3ZA7DqBThZJsCM95ZPLRU28tcRT2tnY07iWHoXETwPeoLYRTD53sJPZOZ7O6fVAJ uKdZqVeE4VKVOR6cjpvmesBSk6DaB66xnDl6v9eqxZq/OhjMbOZj2g0Is0M2sdrP0GSX Vnj5pwWZvcwpT9pOijZ1aojY/J4IOsp4ZCoOu3H9IuUUiV5d9WW2ZPaCZr8zI038PQUz GUSRGkTOGTB7N5o0ZiQPQCmucNVCV+xR8cAo2udXMTbTXbBAo+j60j1c63wnoI+2uBtP fKfdiU1HxJ2NHYWAdEyFXnWQqvo/xvH/lN/fw0WiCkdUwF1IYli/Imu39FafBfRp+m6u DnBA== X-Gm-Message-State: AFq9FYJ9e8ESWKnKXFZ3BHv5l5WQt6L9FW3Q5EA73r1FvmpHsjajyDa4 YARyejjvq+KrfK1nwBDiVsL2G8Uy5h9Doag41ICNHcckxkgvaAbMFzs9BFqQrA== X-Gm-Gg: AYBFou3zwQfxDh54fuHfyqY8B0MXPQE4Res/6EDyasvgS3DRFcAoknjzeRJH1cvdUZX +A0OApWfIlGeVRFwJI55kf7+/jYxsmVHuMMS3fNwoAXgXWTTmxa+eL+4sg2Z+xDlDSPnvf/GaYX wdTNpCnZMEAXtpcqzIgTroutI+Dp07gj0ixURW+bteSxAHB1c1jCIQ4X7+NYYecg1O5kOohRnp7 OuXLRFUlT35/D/qrTWCwIj09oZUspcnr/3mbNV3sNNzZQonhiNa+T6yf0nMi5YqEjN6dGf9Rq4R wUHaXUvVP1JZasHLXmrj1MlJKem9SEGuL3hPIzVTZEi7eotdjAYO3tmhDF6iZFTTfd5QTsn7Jtf 1yDyj8yWS7y5BC/2nY5UIg3DyQIYj9hYmfbvsANmrvkAZzCfXi1Ul6d0+gA1IZigcyXriU0MBO9 yNI/v+7+EcS7Ec/c1Y2PMrt/WA7aiHkLEXmTparnnnql8h15/4hzpk+PwQWwBdXYDiQkfESfCq1 mVllGuEBFV6aQ6p8WxgTKhWGFLLtTWZqcDakGj9NaHFvh1crKVGHVnVNUZEqCTuHrXAMO1SWju+ b/UDYojPr4qDz+RJZgJoaVfYqeBqQ2k= X-Received: by 2002:a17:90b:37ce:b0:3a4:adea:50ad with SMTP id 98e67ed59e1d1-3adeae8b8demr5326696a91.27.1793009946973; Mon, 26 Oct 2026 03:19:06 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-cd8ccc4648dsm1383583a12.14.2026.10.26.03.19.05 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 26 Oct 2026 03:19:06 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-networking][blacksail][PATCH 2/10] unbound: upgrade 1.26.1 -> 1.26.2 Date: Mon, 26 Oct 2026 23:18:42 +1300 Message-ID: <20261026101850.1470035-2-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261026101850.1470035-1-ankur.tyagi85@gmail.com> References: <20261026101850.1470035-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Mon, 26 Oct 2026 10:19:12 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131424 From: Ankur Tyagi Details: https://github.com/NLnetLabs/unbound/releases/tag/release-1.26.2 Signed-off-by: Ankur Tyagi --- .../unbound/{unbound_1.26.1.bb => unbound_1.26.2.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-networking/recipes-support/unbound/{unbound_1.26.1.bb => unbound_1.26.2.bb} (98%) diff --git a/meta-networking/recipes-support/unbound/unbound_1.26.1.bb b/meta-networking/recipes-support/unbound/unbound_1.26.2.bb similarity index 98% rename from meta-networking/recipes-support/unbound/unbound_1.26.1.bb rename to meta-networking/recipes-support/unbound/unbound_1.26.2.bb index f426ce351e..8894a59d07 100644 --- a/meta-networking/recipes-support/unbound/unbound_1.26.1.bb +++ b/meta-networking/recipes-support/unbound/unbound_1.26.2.bb @@ -14,7 +14,7 @@ SRC_URI = "git://github.com/NLnetLabs/unbound.git;protocol=https;branch=master;t file://run-ptest \ " -SRCREV = "13b6717f1716810523ffb60f971a6c9c5e8ce127" +SRCREV = "f0cd7067d950921427c91ade4ecf060e944f88eb" inherit autotools pkgconfig systemd update-rc.d ptest From patchwork Mon Oct 26 10:18:43 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101969 Received: from mail-pg1-f174.google.com (mail-pg1-f174.google.com [209.85.215.174]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.39574.1793009950283873767 for ; Mon, 26 Oct 2026 03:19:10 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=PtggjtKR; spf=pass (domain: gmail.com, ip: 209.85.215.174, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pg1-f174.google.com with SMTP id 41be03b00d2f7-cd5e2d696e0so1479391a12.1 for ; Mon, 26 Oct 2026 03:19:10 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1793009949; x=1793614749; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=jzwb18IX82J2jZjACC1WDiXNaFJqOJrGuwWoGPsrXa8=; b=PtggjtKR0aX7hd9sLRRdYnyLKOD4kt44+MGx/v+KgP/XAaIppzo/Xy1u7jWExD/bDM yXv81BnlB5GXRgUdlRT/1FXZgeiBYYhsDAV4JAERisKr6z/C8SN3TxHtq9J4+nM9PoFO HmWjiiEWTKqB/QE3kdy1dwK0zKUpPENLFSnLN9uaFcD2EBo37eRiEmKtbreTsc1RLzqC MtiROrLO/2l0epOSFCehNq0bnl+S1EVRsnKOeWcvqT4RA+wi1+UkTy5Jd8hMh1SqKIkf viiYnpdB68QYmPv/6uTd19l/sjcET7JCupLfwgPQp7lxiz8CN2Ta58w1N9OcZj7/eShH B72A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793009949; x=1793614749; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=jzwb18IX82J2jZjACC1WDiXNaFJqOJrGuwWoGPsrXa8=; b=zjIPfoaaXaoMdyjPfajIW58jOjNzoT0UaD5Xxt3I9rjV1N+r+Rp7Rah4Xv5/PGNyP8 nYApLNP6hd2qCMUKDiMeXGctFscvWvVaWnBRaAb9vvqfwYBNMdiiP6Yxj3+WwzTFjePg 7EOupSMFPn52k7EFg219yGQq+thwwUpRfk9zaHpPyMclZwUVunwivNsdTo0owcU+CoRq FXU8OlD0x9Xgyp40irIS9+pS2Bw/AM7X+Fvc5Fr0W4drSoRzGru9dZE6RxOwfMDZCjKC z1/tI8nvTx/3a2NDvaAo1C+MqqKb4HOwdQrh7H1LSg3EsXEndYgNbW9oA3oUVaYw5n8p AqaQ== X-Gm-Message-State: AFq9FYJcMnWGTbYEE9LLO8uJTIETSE4BztgE024/Lv63wMgLE6TOyThU RTLF7Lfl5Pq9p9PCjxW1yARqMAIfpCC+b5lLwQCk6ALXxW3ewco6aokvxyokRg== X-Gm-Gg: AYBFou0qEtt6NxzeSUYuMPLA5lIRST7O235aBfgigpXXh6MgQhFnaitUVAhrYZHgmAR W7MvySrZ3bXBVI1W6F0T5/1im0I+No97gPKneD3mzmwdVCTszTWJZ1pUx1JLGS+NprrkUzWpYNy uGVUYIi988VA6vQTp+uiR09dFGQdyAZjPBUYZ8dk+5zjCACL1VYOlKbl+jiHes9QAoAp/ys8TdW r82CSR33KCsK6Vevm+QQ7vBlV1veKFR55A/RcyAFuXia/w9elh54/Fj24Wu5q2Jrgh2QOOZAH// ihT6pFhlCftrvhRspk3CLf0W9v1CiQVx3wlgDtM0VxMieleTVYucc8i5ErxhUUTQ0KRXgo8qJrv twV0NkT6gInSMHcKSQ+F1GqK7jw4JZhxD/LPvm2Sf7IZjwua69368Gw6KKFMcrx5Ow2u6O5qTf3 qFGtUHfU1SW6rT4nfr1qlfMX7KQkpQpRGUnYkdMzkIPSHXxK+PcpElT4cwHKR28MuPL7K70PDYp gjHUj6PwV7JzDmiZzuEPFyyjU1+v/nUA2hcWCU7FRKqv/VCo/7PHoGIA+qvAXUwPRNq3K62yD40 b/Bz/He44Fk74GLDeTu3zTSCX58ky7A= X-Received: by 2002:a05:6a20:db97:b0:3e2:278c:297a with SMTP id adf61e73a8af0-3e7b0bc785bmr5587623637.6.1793009949465; Mon, 26 Oct 2026 03:19:09 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-cd8ccc4648dsm1383583a12.14.2026.10.26.03.19.07 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 26 Oct 2026 03:19:09 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi , Khem Raj Subject: [oe][meta-networking][blacksail][PATCH 3/10] ntpsec: upgrade 1.2.5 -> 1.2.6 Date: Mon, 26 Oct 2026 23:18:43 +1300 Message-ID: <20261026101850.1470035-3-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261026101850.1470035-1-ankur.tyagi85@gmail.com> References: <20261026101850.1470035-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Mon, 26 Oct 2026 10:19:12 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131425 From: Ankur Tyagi Changelog: https://gitlab.com/NTPsec/ntpsec/-/blob/NTPsec_1_2_6/NEWS.adoc?ref_type=tags Signed-off-by: Ankur Tyagi Signed-off-by: Khem Raj (cherry picked from commit b730ef39a1ee020404c54922e1467403c1533a25) Signed-off-by: Ankur Tyagi --- .../recipes-support/ntpsec/{ntpsec_1.2.5.bb => ntpsec_1.2.6.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-networking/recipes-support/ntpsec/{ntpsec_1.2.5.bb => ntpsec_1.2.6.bb} (98%) diff --git a/meta-networking/recipes-support/ntpsec/ntpsec_1.2.5.bb b/meta-networking/recipes-support/ntpsec/ntpsec_1.2.6.bb similarity index 98% rename from meta-networking/recipes-support/ntpsec/ntpsec_1.2.5.bb rename to meta-networking/recipes-support/ntpsec/ntpsec_1.2.6.bb index 26348f7c4b..832619edc4 100644 --- a/meta-networking/recipes-support/ntpsec/ntpsec_1.2.5.bb +++ b/meta-networking/recipes-support/ntpsec/ntpsec_1.2.6.bb @@ -17,7 +17,7 @@ SRC_URI = "https://ftp.ntpsec.org/pub/releases/ntpsec-${PV}.tar.gz \ file://0001-wscript-Add-BISONFLAGS-support.patch \ " -SRC_URI[sha256sum] = "6fb191cddaf607e7754b1f6915a1a61dc4018b3e4eef3d2ffacec961c9682949" +SRC_URI[sha256sum] = "8023beb9a0c86a93f0bf94d43fd388c71a6fa54d80bcbd747d899915191bb592" UPSTREAM_CHECK_URI = "ftp://ftp.ntpsec.org/pub/releases/" From patchwork Mon Oct 26 10:18:44 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101971 Received: from mail-pf1-f174.google.com (mail-pf1-f174.google.com [209.85.210.174]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.39576.1793009953100556818 for ; Mon, 26 Oct 2026 03:19:13 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=NNhCzSQj; spf=pass (domain: gmail.com, ip: 209.85.210.174, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pf1-f174.google.com with SMTP id d2e1a72fcca58-8a06b436dffso1320707b3a.3 for ; Mon, 26 Oct 2026 03:19:13 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1793009952; x=1793614752; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=uCALeqgmEZs/AjQm6TdkycJoCCdzjvHnY9QjOJo46z4=; b=NNhCzSQj5LlxEpVZNSKFMO5SGV52/IL7DgXdhreExsC+f+7rsrmaDJcTqZbwU96PiL PsOaUdbF6ywxzvM/gFmoX8m/L4mTlFQ3gP9dOWBeZtEWUBVQF75CU1YfY77XKRlFE7oA LOa18dJ72vKl9tIDB+cflKNJRLPUVtXquSm8bm1a6fnCoxPHf0ZaRLih8W2gtoodqqWg oGupXu4w2mMLD04hNO8xvSgQ/iFfh0BFUL9NyTjPUWTK078phCtLFnq3/wHKxlPT6OGb sYnddtp7uKny61+Sq9PE4mSISVlNAvP95qpzAZpOarsS6A/m9PQ2JFU3M8ZMRLWHRn+T uIfQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793009952; x=1793614752; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=uCALeqgmEZs/AjQm6TdkycJoCCdzjvHnY9QjOJo46z4=; b=yKXyd4gUhrQQryUy74UoUtdvqeXyl07DxO07wSpH6geM5Igva2lwndsqimP23wRBYR QqxQ/9d3LG7RqKgyNojE6SCGoq+dTKZ0bhDIxnc1jCjQ7HDlYZOGyErcCvcgPIpucagN x9s969ymCwLmTSBrqClyFe/hMJpLMQhz665VNsjt/wl32iIPyMeuKiCnS/f3q7DNxd5t YQ88b9VVjSt4OJasCX6u6eJRNOqkLESlBI4AbBIsSLf1ie584WW6ho8QMkv4IC93yjuz O/vGHS2knHj5GXEaMncSKQQ/pRduvbNIbyyI+QaoV3CrH+ZJRH3+MuqAYDYwtzz8g7D+ KS2g== X-Gm-Message-State: AFq9FYK2Kptg5+xNzudSRWkTQgCJo0iIgVidqiwfu4HfFdc7+koNBazC Ciao/MqsC19HuBkrpGSdtIKhS47pls5wSIlRUYtcL5kx3b6b7jYTx680ix8mLw== X-Gm-Gg: AYBFou3BxsA1fVtnhsKTAxTa8uztGRxYbF52ml17Y32MWEQZuF/pf1vzCd9a86RN7HR NZvE7OOulT50G4cp+FTpUrbeBWLlffNsSyOuxmhq9HiIcJByntnGUL4qnOBTlFIGKt31yhFf5ry wUepJ9FFlfEpwo7UCxX5x+zzN1BfkOBfkq96PYUIeSGEJqSTdfNBwKDRbisWMvGja5X4BIUUR33 +pHFiEbFs6mZdIe4cgJGPIY4WKfZLgeigrS6fBTPoJIDaqhEESp4n9IWz7QY8DyDh+Meq9nTMa4 2mtPCdI+dSiJmA64MjbbAnLSS822+Mip6wUP4c7JoSZJ+geiUXyqQp0n/13hWQ1XqRlQTNervIY DrvoWBCVx3eua5JR713yYfLNZrQOo95Gku/Y+JOd8S1HpBYdKyzQDLDoSbdIRtAsvs1RPKAO5qX YuLg1Hd88NJJLbCsa91f1DuxRSPxMNvUssmAB6UHQph6Q/XCMbG6I1m4DsR96/84Spvb63sgrFW 3sJZXr7ddUFRxD8YfD9r9c+YooZ0olOyazN1O7NINFw6wzWU/kpwgbEVdVEMe5SJOK6AvaLLSqg UqBwPQLZRI9nBaO6QW/wvET9CQtouqk= X-Received: by 2002:a05:6a20:d28e:b0:3e2:1787:da07 with SMTP id adf61e73a8af0-3e7cd4b9c74mr4393864637.56.1793009952428; Mon, 26 Oct 2026 03:19:12 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-cd8ccc4648dsm1383583a12.14.2026.10.26.03.19.09 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 26 Oct 2026 03:19:12 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Jason Schonberg , Khem Raj , Ankur Tyagi Subject: [oe][meta-oe][blacksail][PATCH 4/10] brotli: upgrade 1.2.0 -> 1.2.1 Date: Mon, 26 Oct 2026 23:18:44 +1300 Message-ID: <20261026101850.1470035-4-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261026101850.1470035-1-ankur.tyagi85@gmail.com> References: <20261026101850.1470035-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Mon, 26 Oct 2026 10:19:22 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131426 From: Jason Schonberg This is a security release CVE-2026-111497: out-of-bounds write permits remote code execution Changelog: https://github.com/google/brotli/releases/tag/v1.2.1 Signed-off-by: Jason Schonberg Signed-off-by: Khem Raj (cherry picked from commit b5d66bf60d7664e5fa15dfabcfdb7986ea83d386) Signed-off-by: Ankur Tyagi --- .../brotli/{brotli_1.2.0.bb => brotli_1.2.1.bb} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) rename meta-oe/recipes-extended/brotli/{brotli_1.2.0.bb => brotli_1.2.1.bb} (79%) diff --git a/meta-oe/recipes-extended/brotli/brotli_1.2.0.bb b/meta-oe/recipes-extended/brotli/brotli_1.2.1.bb similarity index 79% rename from meta-oe/recipes-extended/brotli/brotli_1.2.0.bb rename to meta-oe/recipes-extended/brotli/brotli_1.2.1.bb index 84495a3236..dca16cb79b 100644 --- a/meta-oe/recipes-extended/brotli/brotli_1.2.0.bb +++ b/meta-oe/recipes-extended/brotli/brotli_1.2.1.bb @@ -6,8 +6,8 @@ BUGTRACKER = "https://github.com/google/brotli/issues" LICENSE = "MIT" LIC_FILES_CHKSUM = "file://${S}/LICENSE;md5=941ee9cd1609382f946352712a319b4b" -SRC_URI = "git://github.com/google/brotli.git;branch=master;protocol=https" -SRCREV = "028fb5a23661f123017c060daa546b55cf4bde29" +SRC_URI = "git://github.com/google/brotli.git;branch=v${@oe.utils.trim_version('${PV}')};protocol=https;tag=v${PV}" +SRCREV = "db24a98aed38a16de78cc05ca15cdd8dc2a0d92d" inherit cmake lib_package From patchwork Mon Oct 26 10:18:45 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101972 Received: from mail-pj1-f53.google.com (mail-pj1-f53.google.com [209.85.216.53]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.39902.1793009955793746875 for ; Mon, 26 Oct 2026 03:19:15 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=M2ep7kZF; spf=pass (domain: gmail.com, ip: 209.85.216.53, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pj1-f53.google.com with SMTP id 98e67ed59e1d1-3ab752f6244so2642601a91.2 for ; Mon, 26 Oct 2026 03:19:15 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1793009955; x=1793614755; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=+v+kFaeUGo9KEUia8cHGBQBko9kHDBMiE6A9qBQY2Pg=; b=M2ep7kZFUlpcC66LV+yLj4YAh6eK+mNvKkTuYgRfVKTrFSHgCgmIeOqWHwumJC4iT7 4QU6rzhLGdsfqM6zOd7WDBjkVpR/3meYbSiPbWehiUUIl+xHrSGLtGxjYfhQ8/KAtRNu /5t1SysgxeYm0cKOWlqdHICmL+381zdr6g837qz49H0BUfWAyMSZMvt66+zrqxYq13U6 TwYhKXn9rL14LaHSBfrx5lVvenE/uIkNkDluroVoSqbjMudHeghGnLLg5EZ41SzHEIoS C9jaEY85uEwRqlM7JfpBGkLIywmjDI7kw4VNUT5Kl1IuLxD1/bg9g+CDqaJrskMxBnk2 aFSQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793009955; x=1793614755; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=+v+kFaeUGo9KEUia8cHGBQBko9kHDBMiE6A9qBQY2Pg=; b=YwF9lOYi35ZTjz39vwwaDYKmV4mF1N0QdlsNz1IiOJuJ9nhMELP2svePKd0ErhZRxe NmP5ISVMZ/M73z/rUwD3UsylJfBaGmjc4wiPlRg1T2/75uX+MLMAiOJEYQTHuHqqFAkL osRQBw2tn8HpWMsmUmY7yVj4eaKLiaO0GCTgMdT5Unfa9CZRTqQw48xqeZV+364ELZcZ Ww5oNEGjFKR1pGa+pNM/brb72HwG5qDW4Hc0h0van7yjH7U+NxU+KOvSPL8KWUQL5N/I DvxFzsOQE0RiLbgedK+iHNl9gwwOB+aHaXEvBm1fRI/hwSjxFmR7Dadsmh7zSg99tC3O mRXQ== X-Gm-Message-State: AFq9FYJJ0ZfLY38TddJOk7/KG0M4E0Y/CHgWcmpgp9VJFVnMCoVXjQ0j 1KX2VetfMpqYUiGPhJGAomSX2xzVj5j0uPN3UGpSpX88HEILnO3U/Movra3R8w== X-Gm-Gg: AYBFou0xF3IE/WqMrOZ0SBl0Qfhd0fPqdeTxBN5LI7o/ghTosS9bG6LUOLI2PElEPIo ElT3lWeKeyIf05Hr/Xa4N9XtEFSaMdrhxJnqG8Mz0eunCvFoobwYEUEqmsuBKf1P+0HVjPNnWBY IXJHx8UIkgfrFpzxJRXi7yq8yfYMzMTOVdrAP6YEPO7KXsX4niJ/KejtILfnDLP3+t6Bw5nH4Rj kTrBb3QSAsey4u9w7ooI3X9+PGlEbN1BBZcXOEEyAWYUL3h3Bal6BCWCxbceTjG+2/IstTkDcCj MlyORlrwzil3ax0tcMStSGkVS+y++gZITY/KNfGQnLwfRyDNUq3FPd+A/Z+Yu0PeN3PhIuccKnt HKOqUKiGfvSxBLp+eArskPdPWCJBSSaVONQtLklZ4eQMeCo6RTNpdTJtIaDIkPTD9dgQI5sVFoL gb6VkCcJqWoZLBmcaQsbHTBALXCydyCIKmPXd1KSU3DZW3VcFF2eN1bwO49Ygw9dgUBhSHnb3cE Z3tFuF5cOp1C3q1YYVRcF9SyWAK7NYGMMj0igOqBJ9NzRbZBxrY9/H6k4ncU60pwjEj+dipHZg3 g89Hndqiw1HEW2d8CcJNq7mRzUuOjDY= X-Received: by 2002:a17:90b:3f4c:b0:3ac:95d7:2fa5 with SMTP id 98e67ed59e1d1-3adeae7b904mr5412508a91.44.1793009955214; Mon, 26 Oct 2026 03:19:15 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-cd8ccc4648dsm1383583a12.14.2026.10.26.03.19.12 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 26 Oct 2026 03:19:14 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Jason Schonberg , Khem Raj , Ankur Tyagi Subject: [oe][meta-oe][blacksail][PATCH 5/10] php: upgrade 8.5.11 -> 8.5.12 Date: Mon, 26 Oct 2026 23:18:45 +1300 Message-ID: <20261026101850.1470035-5-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261026101850.1470035-1-ankur.tyagi85@gmail.com> References: <20261026101850.1470035-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Mon, 26 Oct 2026 10:19:22 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131427 From: Jason Schonberg This is a security update. Fixes unauthenticated remote code execution. CVE-2026-109618 CVE-2026-109619 Advisory: https://www.php.net/archive/2026.php#2026-10-21-5 Changelog: https://www.php.net/ChangeLog-8.php#8.5.12 Signed-off-by: Jason Schonberg Signed-off-by: Khem Raj (cherry picked from commit 898ac0ba1caaefb583cb3785c8c466360fc18f63) Signed-off-by: Ankur Tyagi --- meta-oe/recipes-devtools/php/{php_8.5.11.bb => php_8.5.12.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-oe/recipes-devtools/php/{php_8.5.11.bb => php_8.5.12.bb} (99%) diff --git a/meta-oe/recipes-devtools/php/php_8.5.11.bb b/meta-oe/recipes-devtools/php/php_8.5.12.bb similarity index 99% rename from meta-oe/recipes-devtools/php/php_8.5.11.bb rename to meta-oe/recipes-devtools/php/php_8.5.12.bb index 831e926880..f9759cf7a5 100644 --- a/meta-oe/recipes-devtools/php/php_8.5.11.bb +++ b/meta-oe/recipes-devtools/php/php_8.5.12.bb @@ -32,7 +32,7 @@ UPSTREAM_CHECK_REGEX = "releases/tag/php-(?P\d+(\.\d+)+)" S = "${UNPACKDIR}/php-${PV}" -SRC_URI[sha256sum] = "dc940716a8c73e531c0078eecb955d595d321ec2cc9d47149cf0089ea6e18f64" +SRC_URI[sha256sum] = "ffb60edc437ced63b5137e4984db379a8111c50049c711510d8b958277efc1a8" CVE_PRODUCT = "php:php php_group:php" From patchwork Mon Oct 26 10:18:46 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101973 Received: from mail-pf1-f179.google.com (mail-pf1-f179.google.com [209.85.210.179]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.39905.1793009958382724568 for ; Mon, 26 Oct 2026 03:19:18 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=CYOo+7cM; spf=pass (domain: gmail.com, ip: 209.85.210.179, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pf1-f179.google.com with SMTP id d2e1a72fcca58-8a06ca6e8f4so1951276b3a.1 for ; Mon, 26 Oct 2026 03:19:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1793009958; x=1793614758; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=qH93jwhvZJyHUAbhW12B/pfHM99JoC6WKuPR4kR2qi0=; b=CYOo+7cMlrBfXpkAg7Y7Ebb5RtsXkbvBU1zyvtcuewwt+VN7nXCD6NHFspMSR01vLJ dk3I/mcwhsyN9hhlpRV5DwAz7bljWE1u3eI1WDYREqG6Hs84AjYTqDkBpLJikpDxpjAF /xZX+B/076GX50yzRjy3Cg06wjBmzAkD9yiqnEnrpeYBQn9UwoM41Q2T5jRi2iqoNq1k C70Kb140xjy+RNTjxYt0A5npGq7DTOfWRr69YE6LA4tlSUIQoFlauS0LTi2sDaI2JUex aszBh2s2CBTCG33zr2Z2HQdwnvDa2G3HjrgwRPi2ZHssps/KTZEwRVGzlejRGqj7uhdQ ZgEQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793009958; x=1793614758; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=qH93jwhvZJyHUAbhW12B/pfHM99JoC6WKuPR4kR2qi0=; b=ic2j9KuPm8FY8Qf4MMowCOSkDndB4DM3oZNALxYjspCFHh5cJBxv7DLRPGUcW7xfzq 3n5dlnxNDnevB9UTWJ7h2AV1MPM8WS0a/i0J61pBVs/fCRazyvi1/c7OQhAvVHpnyDYd Dd3H2kyA5zKa1UOKUMOn+ZFtmLBdh/J8cO/g7JKk9QwMfduG57FR6PToFeUR2862gGmu siT64vIzfXQOAYRexZo3b5JEfpmxGD4l3iYP1rE62ExLJA3J3ZIMdZ5trh+Yo7e8otsN o8fXPpOot4Zd71+PJtDUWfaV8LBEc84H4j6Adw05UJHZ+oBt3UvO2eXUTkHT2QUb40Ug hWWQ== X-Gm-Message-State: AFq9FYILJ7+J4FDOIpjhU1F0aYPZ0yYzPGh0SlQWx3GoTT92qqCybWVS vOQCRbt81/s99dmGoSD47anN+Fb9nm2XJDP96dHRww9nWbgE7DUOfoa4tgjOdw== X-Gm-Gg: AYBFou3fF9R1G1iceMtDsPsALQr+XBR/hfN5ckgB5GzfJAURrXiDjZqkUbOiBhTc1lZ 7xUcjYYqYo4SQ42SnrDhIaQ1HugE/3AZaVv7vYP6/NnixhzfoGINM094NAxbpEN79MNFhEqfTqa dtEfkpEKye+b3vzRz7z7hTsct8yquEx5Up6ZAhZkcrG7huUelK3VryFzo0bNTaijktOqsJuTPAR XKNKcWDnV+ShaPqT+06qIzXBTAq814bVPlbTBeBuB3JK82Q33lenhod3/d5PcmzWITFVJbwbxS0 WFYOrSS+wvKViI/S62qaVG28HAw5LtkdM1aXvHpN6CpXBTKixFI6nlwhDxYJTRhIvxVr7SG9Fk8 yi6d7hy41sTwGraQhaGovkA4rbZ9u+P/Xc8ohGHFkcCLlMfvAdBU3KA8TgvFIsv7fC8weZQfwas qhWzeGhSaLb19JDP6ZQUQpAmGOYVPnXY4/bRm0tCim79mmlivbSZFOUUwsmGfue+4AjsT+mHxtZ E+D4YbWm3XrESNkkoLR/kIiiRaYv/3OPr0VzOHnDz7b0EzvOaoBhsdNmuBGeM+cpwBFFceHfCeq jngYNXGeYDZejMvrogYdgvWnq3haCACZ3KTHuunBbRZmv8R86eFX X-Received: by 2002:a05:6a20:3c8e:b0:3e2:3ce:4ebd with SMTP id adf61e73a8af0-3e7cd58c8ffmr5800392637.49.1793009957660; Mon, 26 Oct 2026 03:19:17 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-cd8ccc4648dsm1383583a12.14.2026.10.26.03.19.15 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 26 Oct 2026 03:19:17 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi , Khem Raj Subject: [oe][meta-webserver][blacksail][PATCH 6/10] apache2: upgrade 2.4.68 -> 2.4.69 Date: Mon, 26 Oct 2026 23:18:46 +1300 Message-ID: <20261026101850.1470035-6-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261026101850.1470035-1-ankur.tyagi85@gmail.com> References: <20261026101850.1470035-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Mon, 26 Oct 2026 10:19:22 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131428 From: Ankur Tyagi Changelog: https://downloads.apache.org/httpd/CHANGES_2.4.69 Signed-off-by: Khem Raj (cherry picked from commit cf030e73b8e0fa463a81ace8f13c82a9f1281ebe) Also dropped patch that is part of the upstream version. Signed-off-by: Ankur Tyagi --- ...mod_md-Add-OpenSSL-4.0-compatibility.patch | 47 ------------------- .../{apache2_2.4.68.bb => apache2_2.4.69.bb} | 3 +- 2 files changed, 1 insertion(+), 49 deletions(-) delete mode 100644 meta-webserver/recipes-httpd/apache2/apache2/0011-mod_md-Add-OpenSSL-4.0-compatibility.patch rename meta-webserver/recipes-httpd/apache2/{apache2_2.4.68.bb => apache2_2.4.69.bb} (98%) diff --git a/meta-webserver/recipes-httpd/apache2/apache2/0011-mod_md-Add-OpenSSL-4.0-compatibility.patch b/meta-webserver/recipes-httpd/apache2/apache2/0011-mod_md-Add-OpenSSL-4.0-compatibility.patch deleted file mode 100644 index ee127681ec..0000000000 --- a/meta-webserver/recipes-httpd/apache2/apache2/0011-mod_md-Add-OpenSSL-4.0-compatibility.patch +++ /dev/null @@ -1,47 +0,0 @@ -From 6cd9ea8dcb5bf68a195e90578c7f05e12eba5468 Mon Sep 17 00:00:00 2001 -From: Rainer Jung -Date: Wed, 17 Jun 2026 09:48:52 +0000 -Subject: [PATCH] mod_md: Add OpenSSL 4.0 compatibility - -* Use getters instead of direct member access. - -* Struct was made opaque in OpenSSL 4. Getters exist since OpenSSL 1.1.0. - -* Keep OpenSSL 1.0.2 compatibility. - -Merge from icing/md: -https://github.com/icing/mod_md/commit/9fd90380db0722f0ccc14ff1c4da0ca21d4da75c - -Backport of r1935161 from trunk, [mod_md CTR] - - -Upstream-Status: Backport [https://github.com/apache/httpd/commit/6cd9ea8dcb5bf68a195e90578c7f05e12eba5468] ---- -diff --git a/modules/md/md_ocsp.c b/modules/md/md_ocsp.c -index aee799a7b39..2e7f14dff31 100644 ---- a/modules/md/md_ocsp.c -+++ b/modules/md/md_ocsp.c -@@ -533,13 +533,23 @@ static const char *certid_summary(const OCSP_CERTID *certid, apr_pool_t *p) - serial = issuer = key = "???"; - OCSP_id_get0_info(&aname_hash, &amd_nid, &akey_hash, &aserial, (OCSP_CERTID*)certid); - if (aname_hash) { -+#if OPENSSL_VERSION_NUMBER < 0x10100000L - data.len = (apr_size_t)aname_hash->length; - data.data = (const char*)aname_hash->data; -+#else -+ data.len = (apr_size_t)ASN1_STRING_length(aname_hash); -+ data.data = (const char*)ASN1_STRING_get0_data(aname_hash); -+#endif - md_data_to_hex(&issuer, 0, p, &data); - } - if (akey_hash) { -+#if OPENSSL_VERSION_NUMBER < 0x10100000L - data.len = (apr_size_t)akey_hash->length; - data.data = (const char*)akey_hash->data; -+#else -+ data.len = (apr_size_t)ASN1_STRING_length(akey_hash); -+ data.data = (const char*)ASN1_STRING_get0_data(akey_hash); -+#endif - md_data_to_hex(&key, 0, p, &data); - } - if (aserial) { diff --git a/meta-webserver/recipes-httpd/apache2/apache2_2.4.68.bb b/meta-webserver/recipes-httpd/apache2/apache2_2.4.69.bb similarity index 98% rename from meta-webserver/recipes-httpd/apache2/apache2_2.4.68.bb rename to meta-webserver/recipes-httpd/apache2/apache2_2.4.69.bb index f178007ab7..fba4667bd1 100644 --- a/meta-webserver/recipes-httpd/apache2/apache2_2.4.68.bb +++ b/meta-webserver/recipes-httpd/apache2/apache2_2.4.69.bb @@ -16,7 +16,6 @@ SRC_URI = "${APACHE_MIRROR}/httpd/httpd-${PV}.tar.bz2 \ file://0008-Fix-perl-install-directory-to-usr-bin.patch \ file://0009-support-apxs.in-force-destdir-to-be-empty-string.patch \ file://0001-make_exports.awk-not-expose-the-path.patch \ - file://0011-mod_md-Add-OpenSSL-4.0-compatibility.patch \ " SRC_URI:append:class-target = " \ @@ -28,7 +27,7 @@ SRC_URI:append:class-target = " \ " LIC_FILES_CHKSUM = "file://LICENSE;md5=bddeddfac80b2c9a882241d008bb41c3" -SRC_URI[sha256sum] = "68c74d4df38c26bed4dfbdb8f3baf1eb532f3872357becc1bba5d136f6b63c06" +SRC_URI[sha256sum] = "c5e6ebc66e349b87d7fc6916ae7cc2a808ed348003de134cf9e9d89d3e2cc73d" S = "${UNPACKDIR}/httpd-${PV}" From patchwork Mon Oct 26 10:18:47 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101974 Received: from mail-pf1-f173.google.com (mail-pf1-f173.google.com [209.85.210.173]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.39906.1793009960815713841 for ; Mon, 26 Oct 2026 03:19:20 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=okrMePpP; spf=pass (domain: gmail.com, ip: 209.85.210.173, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pf1-f173.google.com with SMTP id d2e1a72fcca58-8a05da1cc1fso905538b3a.2 for ; Mon, 26 Oct 2026 03:19:20 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1793009960; x=1793614760; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=TgHhFatbRtW33acQKC7ipwW7T/BNqa2AranbMop6hCE=; b=okrMePpPQcX/1GxnwMCyclnXPg/MuvdYGeb1DLclb2bjPJ4Wht6iG4CaskZnAi0Blj GMTfXJQ+2X26lZ3qEgZMSZUNGMLCBYnBhJY6e3hoEElaEDE2UJ0XOPUfSMZh9MuLf+HY MwzHV0rHXloFaUNdvNwnfBJYmOC1mrwKltlDWNYPZZVLpCvuezinNINrcE5abCraZYa7 bW3k3L19esuIu18hb4A51tdUPUUB9QDxDar1BJAl/4YVVcBxIO0fiV7aGfqBG5xcXHu7 6EdUwBVrP4rT31eU1szZzIxTIxuq8r6eJaWQ63GZiC7r+oxpnesOLVXwH1ICk5b16Mb0 RH+A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793009960; x=1793614760; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=TgHhFatbRtW33acQKC7ipwW7T/BNqa2AranbMop6hCE=; b=I7Fbmt434TFQibs/eJ3pynuwxilpYSMonMRq+nMZazWO8nk/jGIoAKgUsk3A9yPU/J rY/IWFexvNEd4SJirYToh5/DOnePi0TuFTFp+mGoQv08xdwtcuQv3FFTg4RIznO9LdJH xyMQTEQC6wUOUsCQJS5r95PJSjtem+WcE+vEbsAvaRM7NxE+Z004KqmrJhgtUYcGkbal AI0KLCOctmd4fEyjEV4ATNrZk2m7PRFyefD7ujk4cpvAh+DO463PgNHanef+nkT9boT/ 6MK3W4mBuple4ZwM1GFGH5i/rKWEEjA5Mwho21h38P5XWmKZpxTltb5jzQopAezppzyM cF7Q== X-Gm-Message-State: AFq9FYLndzocrR3ZLAIbS9djQKnIDhhqLOQ34z7GMupb+M5dzPuRPDgm 3iINdkw4aoUX2NfUCByNc9uKLEOhthGaDyhFWcQTFIpuXhYeUAG13DyVKhyJfQ== X-Gm-Gg: AYBFou16nUjn6k9GzcMvJqEF6zj4YroMi6AgjJXcRXeLI8JOYHZZLQPFE51ZfEf9qXv GywzUTXgddsEpxAnlnm+kpg7nfb7A8umcE/Uj6X0YwVLHM0KoMSyjHH/pcPEkOH72ZohEvdhsTE gN5QqwYWQutGcha07QW4yOPccTtN/0VASWvIMYIfPZ6mX5iAqerV6RAmAqv90xJO9xc+X2xRElo qukn8bawDedo3zEPzo3CKCdyn0whaGP7PM/lAmNJgEYiko0WCfAQtAo5cVhA8DMIWt9dzxqCkXh yCZhdav7TPHHw4A/rKXFMpR5x7mryGzPZ5pXjYMoJiQEd2+0NcvvSrVUOSldf/MkqYXBqpotXPM I32hvYojwXBK/iFXnAL1KLE3DEXpnPQgTVabwAOVQKjkWG+i30+FTOtHMemGTpvCyxol/Y5ntuj t7lGMl0d15GYNCyNjN8TpiSNO2N7HIsGuHsQUGEqHRjOyCz+/7KDK/CDDZ1KUoMBtoCQa5LIXZf z5Biteygj1yyEDgJTgv7oZ7GAHZ8AXvFzSoh5+BG5tSTXlOrRDHZzqsPkG5FO+FPLxrl23CbqKi Q5BvQ1oXlnMILOPbpFgH70WTGKkOImfDztMc11sYGn70pV0YJdBM X-Received: by 2002:a05:6a21:880d:b0:3e1:f7a7:2d2b with SMTP id adf61e73a8af0-3e7af80076emr4514948637.5.1793009960188; Mon, 26 Oct 2026 03:19:20 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-cd8ccc4648dsm1383583a12.14.2026.10.26.03.19.18 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 26 Oct 2026 03:19:19 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi , Khem Raj Subject: [oe][meta-oe][blacksail][PATCH 7/10] 7zip: upgrade 26.03 -> 26.04 Date: Mon, 26 Oct 2026 23:18:47 +1300 Message-ID: <20261026101850.1470035-7-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261026101850.1470035-1-ankur.tyagi85@gmail.com> References: <20261026101850.1470035-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Mon, 26 Oct 2026 10:19:22 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131429 From: Ankur Tyagi Changelog: https://github.com/ip7z/7zip/releases/tag/26.04 Signed-off-by: Ankur Tyagi Signed-off-by: Khem Raj (cherry picked from commit 1c45c216f647175c121e7b7f5fb19c8a042ed99e) Signed-off-by: Ankur Tyagi --- meta-oe/recipes-extended/7zip/{7zip_26.03.bb => 7zip_26.04.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-oe/recipes-extended/7zip/{7zip_26.03.bb => 7zip_26.04.bb} (98%) diff --git a/meta-oe/recipes-extended/7zip/7zip_26.03.bb b/meta-oe/recipes-extended/7zip/7zip_26.04.bb similarity index 98% rename from meta-oe/recipes-extended/7zip/7zip_26.03.bb rename to meta-oe/recipes-extended/7zip/7zip_26.04.bb index ca50aed8ea..49437b807d 100644 --- a/meta-oe/recipes-extended/7zip/7zip_26.03.bb +++ b/meta-oe/recipes-extended/7zip/7zip_26.04.bb @@ -12,7 +12,7 @@ SRC_URI = "git://github.com/ip7z/7zip.git;protocol=https;branch=main;tag=${PV} \ file://0001-Remove-treating-warning-as-errors.patch \ file://7z_wrapper.sh \ " -SRCREV = "0766b733fe3e06dd2a7f9a3cfbf2108ac73abd17" +SRCREV = "9128b80e3a471108678e2b3ec3c985861c8d7b0f" UPSTREAM_CHECK_URI = "https://github.com/ip7z/7zip/releases/latest" From patchwork Mon Oct 26 10:18:48 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101976 Received: from mail-pj1-f46.google.com (mail-pj1-f46.google.com [209.85.216.46]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.39909.1793009963515161521 for ; Mon, 26 Oct 2026 03:19:23 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=T7iizrIP; spf=pass (domain: gmail.com, ip: 209.85.216.46, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pj1-f46.google.com with SMTP id 98e67ed59e1d1-3adc4590de4so1918165a91.2 for ; Mon, 26 Oct 2026 03:19:23 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1793009963; x=1793614763; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=4BRrJmT57+W6tD4KjOXFDKVPQwPydRPm1M1QGOHUlGI=; b=T7iizrIPgLg1Cs/HBzHIST16OB8xc6i/sN2fIOvVIGyYhW0X6P5u+dNF7lBMRXQRMU ukaRxTQkk304hjUGBalLwfKZrDect3J5OWPhanO5tsT/6kxQbhS4Le4g9oQkUXs/QLz+ C5CfNNHcszqGRSLsLND+BE4X56R0atinHyhgLXdA5Vx4RUaVZ7QmMgfmoBTezyFN84Iu vz1mUfvctbpXqIjRJf9ZfEpLdSgQroJWmhcCBpeSDuJ2yHlJWmYI223hWPPpl0LOJHPQ LfhKXuB6hioH7REOKN4nFO03PqYWIjasQFy7guaig3lSuUj7W5khudnnlmz28URzmgQl RK5w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793009963; x=1793614763; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=4BRrJmT57+W6tD4KjOXFDKVPQwPydRPm1M1QGOHUlGI=; b=ImM3mJkiYaA76BEz+qylLzHSSiFznzp+BUE7MjTfsOqzAisH4shqiAWgL3O8UMD4Tf OU2ttxhfzjR3If+2KOwCKDHnUMnJgUBmwx74AtoBQ1JrdhRMHeHYVPYvC/RQlHamr6j3 DHLvhBC0+fiBL42bD5nwqQBhzNgQk9LNQtBAkLFqU3tr9gM7C6BINE0b/n5M/vbyzhaz h+oAYutgiBy6/+QnQFlSXl3ga+i2HlMEW278JXnTaSIdjRx+84EoK8maClvTaON7N359 +h+4jZwXXV7CanVi9c3K+kapR0fvkJAn5FKBnIMZWcc2PqK80/2UN5pXVAeqL9P/Mnl/ gh3Q== X-Gm-Message-State: AFq9FYLlcKKoaitsYbpO1vsAtPsDSVMMFqBUOOfgzm6BqM4O79KnT5Bo Q/quUUnOaiXAvFvXfT/kfesECiSqNhivPxyQuZ7tVSpjlrv7TJ9krwZwrebkJA== X-Gm-Gg: AYBFou2NTREnNe6qaPlIA2Rh8ATDEdpq2MTS6JwRcaCNF2k4p4FnXSB4z1ynTefWWD5 4lnMKlie1p9mfbP2TSHi15BCjEAortSti7fCijJt1vRFEwE8von0SW0P9sb7W/Vf3TeA3wLcz9f YX+9pvcE7UtFL9vCxRX9GK+IOZyqKXOl8UsfGkA7L3wzDQx0CLnCYsVKSz8dj7/6NAPW5OPRAFo M7whBDQmw+7w8+RbwPmkmvQSPDvaA1iDGbYbJlwRCUbhVIQSwZrWxWU5jFVNJZUcRIqz0OoJpHa Pt9VmiQsjOBgwRov/LzT+jv8vf3zwE48HapWxge+n4f5xD1bOJ5FV5/x/pvgEU2RioC87FQJC9W Ux+v1r2b/RFB4mpeRRtypCbe7afqmTi6qUOPfjueNF9bTnzdGFLWDsqM73jr5T8tOOQnKmkin+o 3+pf+xJm3Zk1VVcWPS0qvwN90knVSDNkdCPUVeQlqUOv4DL9bs5oZfbetyHYUZV/UM2oyuZwaXE cgpHTCmC+zk7x+Wet1lnyNWb40AQYU1ON5gGpbXm3YoxlJWR+oVnRJfJt0BhmYGUYSx64OxDn+T aRX+6EqVcOungYEksZxsq/CyRvzM1/s= X-Received: by 2002:a17:90b:5286:b0:3ab:36c4:b502 with SMTP id 98e67ed59e1d1-3adead5c836mr5412076a91.30.1793009962787; Mon, 26 Oct 2026 03:19:22 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-cd8ccc4648dsm1383583a12.14.2026.10.26.03.19.20 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 26 Oct 2026 03:19:22 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi , Khem Raj Subject: [oe][meta-oe][blacksail][PATCH 8/10] 7zip: upgrade 26.04 -> 26.05 Date: Mon, 26 Oct 2026 23:18:48 +1300 Message-ID: <20261026101850.1470035-8-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261026101850.1470035-1-ankur.tyagi85@gmail.com> References: <20261026101850.1470035-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Mon, 26 Oct 2026 10:19:32 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131430 From: Ankur Tyagi Changelog: https://github.com/ip7z/7zip/releases/tag/26.05 Signed-off-by: Ankur Tyagi Signed-off-by: Khem Raj (cherry picked from commit 533d0a63ac2a38e77746e32458e09461f12737b6) Signed-off-by: Ankur Tyagi --- meta-oe/recipes-extended/7zip/{7zip_26.04.bb => 7zip_26.05.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-oe/recipes-extended/7zip/{7zip_26.04.bb => 7zip_26.05.bb} (98%) diff --git a/meta-oe/recipes-extended/7zip/7zip_26.04.bb b/meta-oe/recipes-extended/7zip/7zip_26.05.bb similarity index 98% rename from meta-oe/recipes-extended/7zip/7zip_26.04.bb rename to meta-oe/recipes-extended/7zip/7zip_26.05.bb index 49437b807d..050673f678 100644 --- a/meta-oe/recipes-extended/7zip/7zip_26.04.bb +++ b/meta-oe/recipes-extended/7zip/7zip_26.05.bb @@ -12,7 +12,7 @@ SRC_URI = "git://github.com/ip7z/7zip.git;protocol=https;branch=main;tag=${PV} \ file://0001-Remove-treating-warning-as-errors.patch \ file://7z_wrapper.sh \ " -SRCREV = "9128b80e3a471108678e2b3ec3c985861c8d7b0f" +SRCREV = "b88c6bc09339de32f7d18bbab900686b244f42ba" UPSTREAM_CHECK_URI = "https://github.com/ip7z/7zip/releases/latest" From patchwork Mon Oct 26 10:18:49 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101977 Received: from mail-pg1-f178.google.com (mail-pg1-f178.google.com [209.85.215.178]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.39581.1793009965964596726 for ; Mon, 26 Oct 2026 03:19:26 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=GoLdn0iV; spf=pass (domain: gmail.com, ip: 209.85.215.178, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pg1-f178.google.com with SMTP id 41be03b00d2f7-cc4be0e5351so859629a12.0 for ; Mon, 26 Oct 2026 03:19:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1793009965; x=1793614765; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=75VYq1DXQg+OBSh6+P6xeaheaAaQsaT1yu2VLaj86xo=; b=GoLdn0iVMw6gsobiczJWq2N+B8Qb2H+WxEFA7lTexd7g2YhHKlXNicBW+lkbgMn0hF kg1gX1711PtFeQZ1bNUf1UjsR6IfIyRR7kOw/KZ1G+wLAgJDjLablcenIr3zSFDSAdgc /UzNeyl5ONpUZPzPWEQPmK47NR/93+9hGsCSD2L8uQ8bIkxsQxFTKzBpHmKY6+Ahfe5K OQSI92XFdLBxqVYfBCT3iqt06hgDNG9r5XmA+drsxN0v5ZsmP0yP7SwFWwKnFGG58qPb OTKlzTA/RmC9VhPGnzQBa981clVbvE8nPdZzJoHP5/bYRVRMAVwjhLrVtAGFtTpT6ELw HacQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793009965; x=1793614765; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=75VYq1DXQg+OBSh6+P6xeaheaAaQsaT1yu2VLaj86xo=; b=ouxTfOd29hX8a4yH/cy+k6+g2UaNPfUnPX5fWxH9HU2980qpBKagDVl3Y96YGaL5O1 FgJhbzyELLvcp9auBhSqAs9FqUumeahQppvOw5GWDOWmo1K1Nq38BAX12W/bBRGkySYZ 4HnIP5MFjPFfhpqQ8M5MxwRpKhQdOlgfIfJy7rw65ZGGcD6jJUnVxH234GqfNvCNisX8 K/MVqaejkZaRjzPJCdh/j8Qw5115FSS9TG8L/G38uh89+ZxCuwBrUdjmkoK5HMvX9czy YYYsssOX32iM5tjs6phT7w4+o/pLIVWZAEzjajA9+K+slzQnKbk1YS2HAhGwzaM11Cd4 gxpg== X-Gm-Message-State: AFq9FYJfG3ZOGeiA0FpA9CHydq0U9XdHTkuF8aMMFoDP0nwSrZnQzM6D agrXQha+m4iJ46gY+Ji9VWnWKc+LGjSRdOrPneHGG3Y3ty+tUIM3mB+jFvkH9g== X-Gm-Gg: AYBFou0HT5q6pZUM1XxXY6Wg41iAwbaG/Z5rOZz3WTQ5bsPFhMtRzePiCnkxKansAHe 9rCOG8n6+/pcAqg9bfPcFGdiWUxpxtw1RUICUnZG/o8Znw7sZChy5Tl6uOnXkIDPBcxUU/DK+Z6 LdJ5yTCeHs0IBrs6K56zHwP1Eb8O+XtnrtIt/3DTVTpxdWajykQ5cqvTogNZBSxtvIrNC3czY5K ECmZX5SK3DZ5AwR4YzrP5tykqv3GBY4vyb188yq/Hvzk4oRLqx6xzB6MqIg8jHTtQgTWzLAtOZx 3rie66la1G/3YgLv3tVAkrqNqZRPVgqMO4c3m6Cy669nvHeSWDeGOQikrnTvzzEuy/jtUznwCmg rXLNn47FinvzhkyIIoQEwcGCkh+vjySBjcpHjIvU6czPm9kkeGnyS0mhDVFnT//vkVqVLia2uYS HNBxfBAYsrh95mMUkRLtFcI+87X0WZtMlbVIcKqUaa/2l5219U9Kf5BIovso1IWqnrhWuXb41aq tOXewOSoqXia233vGp3MPeDM5l9MOocvMepOSvr2doA/+UeDSzMs4vI/YdbB8K4VlrNUvgsGHRH hn0usEjmEdRyuYeF6FKebBtOLY9RKk8= X-Received: by 2002:a17:90b:5787:b0:3a0:a912:e759 with SMTP id 98e67ed59e1d1-3adeaae6cf0mr5460984a91.25.1793009965136; Mon, 26 Oct 2026 03:19:25 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-cd8ccc4648dsm1383583a12.14.2026.10.26.03.19.23 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 26 Oct 2026 03:19:24 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-python][blacksail][PATCH 9/10] python3-brotli: upgrade 1.2.0 -> 1.2.1 Date: Mon, 26 Oct 2026 23:18:49 +1300 Message-ID: <20261026101850.1470035-9-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261026101850.1470035-1-ankur.tyagi85@gmail.com> References: <20261026101850.1470035-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Mon, 26 Oct 2026 10:19:32 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131431 From: Ankur Tyagi Changelog: https://github.com/google/brotli/blob/v1.2.1/CHANGELOG.md#121---2026-10-21 Signed-off-by: Ankur Tyagi --- .../python/{python3-brotli_1.2.0.bb => python3-brotli_1.2.1.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-python/recipes-devtools/python/{python3-brotli_1.2.0.bb => python3-brotli_1.2.1.bb} (81%) diff --git a/meta-python/recipes-devtools/python/python3-brotli_1.2.0.bb b/meta-python/recipes-devtools/python/python3-brotli_1.2.1.bb similarity index 81% rename from meta-python/recipes-devtools/python/python3-brotli_1.2.0.bb rename to meta-python/recipes-devtools/python/python3-brotli_1.2.1.bb index 8e493fd0a0..2c1bf23f64 100644 --- a/meta-python/recipes-devtools/python/python3-brotli_1.2.0.bb +++ b/meta-python/recipes-devtools/python/python3-brotli_1.2.1.bb @@ -7,7 +7,7 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=941ee9cd1609382f946352712a319b4b" CVE_PRODUCT = "brotli" -SRC_URI[sha256sum] = "e310f77e41941c13340a95976fe66a8a95b01e783d430eeaf7a2f87e0a57dd0a" +SRC_URI[sha256sum] = "02b2f7b5a83485efe448a44ddf7983def05c3bb1dcf917d4f7154070260e13de" inherit pypi pkgconfig python_setuptools_build_meta From patchwork Mon Oct 26 10:18:50 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 101975 Received: from mail-pf1-f179.google.com (mail-pf1-f179.google.com [209.85.210.179]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.39910.1793009967894080271 for ; Mon, 26 Oct 2026 03:19:27 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=oGU218oh; spf=pass (domain: gmail.com, ip: 209.85.210.179, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pf1-f179.google.com with SMTP id d2e1a72fcca58-8a05f2d5cd3so1080336b3a.0 for ; Mon, 26 Oct 2026 03:19:27 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1793009967; x=1793614767; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=GiyYSqYPPUSOJHTQeV/4naIalJhC2vsmp1jzqh526q4=; b=oGU218ohjmfGWaEp5butTsfGct2dpsrpLLAvm39/4XUqHZ8Lr30tlXmD3hzwR0zpt5 5s+E55UqSI5FJivt4+/PaL77MSzkfgvhLAR+c5s8CBBb92iZ/xy4EZJ3P747O8qKri18 P1XP+Iglk0GFtHVloOgrCLkD30gblY4V/WwqEJdiWP+pZY/gFA1m6w2urpdJ2Shlrric Gs7dm3SeBr72KwxgBEYcSfczfUFf9KCfitmjaNqA5zJJpoN7vj0ZCs4t53ghcUxszYjE WM0gQbIzxLEHFkgDTrs6obTJPolx5sE4r33Vmxng2LyoCfgpwxKX+xVKoXim5vW+Ax7l qxCw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793009967; x=1793614767; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=GiyYSqYPPUSOJHTQeV/4naIalJhC2vsmp1jzqh526q4=; b=nRk3DR2masTdqjFj/ZgM0vZKfN3wP4CfKr9ceaf5Ck3J0k6QfPMEyQzynp4bKjvmIP zJg+wlYR+vOYfWqi5y9YY8xsqD3QqIrnqv+oPjaVi5mg3++aT+pTz2Db0EAVyG72KfV5 tdMBrD/U6H4wa8VEqOWzJw057EOe9DnlxKLIEWDHV6lfQwBHo5S+6ioPclb26om65xrD q/ujN6jNw0zQFaNvuXaCkP0qT7iOqw+TWq3tFLlmItq5I2gvA276BvtttZLj6Uc02/lf 02yQik6ZQattG+7/iRK85jwUbUk6Q0gpRA7pyB/OzUl+tEVBVlrip9DmTssuM4/Hi9WX p0ug== X-Gm-Message-State: AFq9FYLJNMFGsurstgorK1Y1XiA0xR5gYaWZp2cVNwhck3Ax+/kUmLOi TPmaStzymvVQuEoVgNpR8FJfvTYmHDn6fmNPe+1GB24UxHj8gd3LihRiyeaM/A== X-Gm-Gg: AYBFou24U376Oquz8bd85Xzakk5Gicc+uNkzNSpqbl+0cORCzZ5/HMnMy/MhFggll2t tm9GM3NVmjMzIvQ0Ak1/9QKfJfY6+b1Yp/EPotpJuAgiXsZRlFaLSuGcWwnUtvwLYIEJb/DZB3k dy49G2BobxoWd0S14Z638J1345tyRRG87YwBmZqgxAkCr4tlrG/6QOC6WnsDcl9uehingGiHCDl 0T0xCuH4cplRbrwPtO8UoKtyZ3M1NQkvs7ZyTfCmhw3khmZjSCWFFrNwqVnQG4Q1qBMZmqiB1Qn hOqxo8Hwx2kVw8Qmyd/x4Xe6zonmX4wYMqJJXwH6SUhi1+PC1V4LTxeOYoyAoOuAze6y0nuwnJc BdIqrsIc+8XTSApydRpscYpDXY/P7Sny86sHpTpxkUZcJmIkl0UR+utsRf3QYHoOoPtKFAJ3kXY 2l5lV0Y0zAH5ntvkKvD4DTDOMurBokL2ONtqjq/6EVaxy9JKWzZoe1XCdEI9sfQlIoHzFElaKxF l8SeXjluLiPXsVzcC9kL5dX7W7MctleaYRuZXKH7uQiRaY3q+5c/iK7Xr3vZe+Dqt8x+EMF7+Uz zYtT+ZMnW0pu/Xf3TqX3oUQsXACbd5o= X-Received: by 2002:a05:6a20:430a:b0:3de:4a1c:a95 with SMTP id adf61e73a8af0-3e7cd5507e4mr5313765637.91.1793009967258; Mon, 26 Oct 2026 03:19:27 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.brunswick.com ([203.211.105.219]) by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-cd8ccc4648dsm1383583a12.14.2026.10.26.03.19.25 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 26 Oct 2026 03:19:26 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [oe][meta-python][blacksail][PATCH 10/10] python3-oauthlib: patch CVE-2026-49265 Date: Mon, 26 Oct 2026 23:18:50 +1300 Message-ID: <20261026101850.1470035-10-ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20261026101850.1470035-1-ankur.tyagi85@gmail.com> References: <20261026101850.1470035-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Mon, 26 Oct 2026 10:19:32 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131432 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-49265 Signed-off-by: Ankur Tyagi --- .../python3-oauthlib/CVE-2026-49265.patch | 51 +++++++++++++++++++ .../python/python3-oauthlib_3.3.1.bb | 2 + 2 files changed, 53 insertions(+) create mode 100644 meta-python/recipes-devtools/python/python3-oauthlib/CVE-2026-49265.patch diff --git a/meta-python/recipes-devtools/python/python3-oauthlib/CVE-2026-49265.patch b/meta-python/recipes-devtools/python/python3-oauthlib/CVE-2026-49265.patch new file mode 100644 index 0000000000..8cbc368b6c --- /dev/null +++ b/meta-python/recipes-devtools/python/python3-oauthlib/CVE-2026-49265.patch @@ -0,0 +1,51 @@ +From f3510969587daff0de06a233cf6be3a6233b3429 Mon Sep 17 00:00:00 2001 +From: Jonathan Huot +Date: Sat, 11 Jul 2026 13:15:29 +0200 +Subject: [PATCH] Improve PKCE code comparison + +(cherry picked from commit 74664d3fe037a354e180e305135c6bab1747a6b0) + +CVE: CVE-2026-49265 +Upstream-Status: Backport [https://github.com/oauthlib/oauthlib/commit/74664d3fe037a354e180e305135c6bab1747a6b0] + +Dropped changes to the CHANGELOG file. + +Signed-off-by: Ankur Tyagi +--- + oauthlib/oauth2/rfc6749/grant_types/authorization_code.py | 8 +++++--- + 1 file changed, 5 insertions(+), 3 deletions(-) + +diff --git a/oauthlib/oauth2/rfc6749/grant_types/authorization_code.py b/oauthlib/oauth2/rfc6749/grant_types/authorization_code.py +index 09dc619..c73314a 100644 +--- a/oauthlib/oauth2/rfc6749/grant_types/authorization_code.py ++++ b/oauthlib/oauth2/rfc6749/grant_types/authorization_code.py +@@ -4,6 +4,7 @@ oauthlib.oauth2.rfc6749.grant_types + """ + import base64 + import hashlib ++import hmac + import json + import logging + +@@ -44,9 +45,10 @@ def code_challenge_method_s256(verifier, challenge): + + .. _`Section 4.3`: https://tools.ietf.org/html/rfc7636#section-4.3 + """ +- return base64.urlsafe_b64encode( ++ expected = base64.urlsafe_b64encode( + hashlib.sha256(verifier.encode()).digest() +- ).decode().rstrip('=') == challenge ++ ).decode().rstrip('=') ++ return hmac.compare_digest(expected, challenge) + + + def code_challenge_method_plain(verifier, challenge): +@@ -58,7 +60,7 @@ def code_challenge_method_plain(verifier, challenge): + + .. _`Section 4.3`: https://tools.ietf.org/html/rfc7636#section-4.3 + """ +- return verifier == challenge ++ return hmac.compare_digest(verifier, challenge) + + + class AuthorizationCodeGrant(GrantTypeBase): diff --git a/meta-python/recipes-devtools/python/python3-oauthlib_3.3.1.bb b/meta-python/recipes-devtools/python/python3-oauthlib_3.3.1.bb index bdc1f0e7b4..c375b172c7 100644 --- a/meta-python/recipes-devtools/python/python3-oauthlib_3.3.1.bb +++ b/meta-python/recipes-devtools/python/python3-oauthlib_3.3.1.bb @@ -4,6 +4,8 @@ HOMEPAGE = "https://github.com/idan/oauthlib" LICENSE = "BSD-3-Clause" LIC_FILES_CHKSUM = "file://LICENSE;md5=2699a9fb0d71d5eafd75d8d7c302f7df" +SRC_URI += "file://CVE-2026-49265.patch" + SRC_URI[sha256sum] = "0f0f8aa759826a193cf66c12ea1af1637f87b9b4622d46e866952bb022e538c9" CVE_PRODUCT = "oauthlib"