From patchwork Thu Oct 29 05:46:07 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Anuj Mittal X-Patchwork-Id: 102320 X-Patchwork-Delegate: anuj.mittal@oss.qualcomm.com Received: from mx0b-0031df01.pphosted.com (mx0b-0031df01.pphosted.com [205.220.180.131]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.5626.1793252780862880809 for ; Wed, 28 Oct 2026 22:46:21 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@qualcomm.com header.s=qcppdkim1 header.b=hWLA3JUR; dkim=pass header.i=@oss.qualcomm.com header.s=google header.b=BYirGFgK; spf=permerror, err=parse error for token &{10 18 %{ir}.%{v}.%{d}.spf.has.pphosted.com}: invalid domain name (domain: oss.qualcomm.com, ip: 205.220.180.131, mailfrom: anuj.mittal@oss.qualcomm.com) Received: from pps.filterd (m0279868.ppops.net [127.0.0.1]) by mx0a-0031df01.pphosted.com (8.18.1.11/8.18.1.11) with ESMTP id 69T5Gvmv2974002 for ; Thu, 29 Oct 2026 05:46:19 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=qualcomm.com; h= content-transfer-encoding:date:from:message-id:mime-version :subject:to; s=qcppdkim1; bh=DLw0LPkJt9nWdL+S8Q91I7jr52XW5uq/LEs 3p02yxCs=; b=hWLA3JURYhOrOZO2RaRaQXNHSyUYO+7OPMT/UXKnBT16e307ZM6 U4/dY8hUtdwFmhh73DQNidyvlIpCuut4kebrfxylBNIipN44NMmMQNom1ChO4f+v nLjsB+xX3dDJ2FteYhzjg/ESZ1NTSav71lYPNQiWQqOpMQKwyNMyEECkmXey9DXI sSaicvszF+UZuXyL7PW1M0q1ZbYYaT7gi19fAGheNUpyB3TrzIS4YxFndG7IQyZ9 C65kNB5QRbbhuXovz5XtCjbRpnt5Fla9yFuqeVmN61g66P6kAoZSvzeM3H0NDZf9 m1V69cUaeduvI/tZeF2X49p4z9I8ME5kZbw== Received: from mail-dy1-f200.google.com (mail-dy1-f200.google.com [74.125.82.200]) by mx0a-0031df01.pphosted.com (PPS) with ESMTPS id 4hknkpab7n-1 (version=TLSv1.3 cipher=TLS_AES_128_GCM_SHA256 bits=128 verify=NOT) for ; Thu, 29 Oct 2026 05:46:19 +0000 (GMT) Received: by mail-dy1-f200.google.com with SMTP id 5a478bee46e88-36637676140so2607217eec.0 for ; Wed, 28 Oct 2026 22:46:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=oss.qualcomm.com; s=google; t=1793252778; x=1793857578; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:message-id:date:subject:to :from:from:to:cc:subject:date:message-id:reply-to:content-type; bh=DLw0LPkJt9nWdL+S8Q91I7jr52XW5uq/LEs3p02yxCs=; b=BYirGFgKP0V64xaAWD3XBG1Aqz+PtLcLfik3ZQN6KEAckPBa6QATGh0KUlYwj69NpP TsXA1HRKpfghDNomMW8rsrwwYoZD9js+PW9P6b32QjZ9CetQay8xSo637OtHiYoWmAFn X+H4T7715e/vzf7JonBTDuJjKj97Th8n8e/sPlo7JEPv+wge20Warn73rIK7QbfnfelO ptW91pt6sWhJi4XhyFX8+sg95mHPcwYctBIE4K7tkxNOrH1NDe5sgPaeZysF2xuh9biD dhSDIO6QeI5u6jnX2mruHdbZ1OhkTSZqVSEvj0qAwyME/ZBpeMWv5Y2c3sng5JjqHDek ernQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793252778; x=1793857578; h=content-transfer-encoding:mime-version:message-id:date:subject:to :from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to:content-type; bh=DLw0LPkJt9nWdL+S8Q91I7jr52XW5uq/LEs3p02yxCs=; b=iW0Ky8M9MM7ItqkZVUYP7R0+depUxihoq9FQhAqZL6WxyNZnLZRXSqpjjskZB4C3yX j88kgewbC4ZJXG0QcrAPirgh/j+B2aDbiA1BYEHvG+1siTxgkSig8SE9scemUp6aOC9j KTCOG2/OlzWGJIHA/t8W9N4qsG+AJuAi2DkDuRN+aM0PC0zQSPhLk5F5LH1A63fScfNo Usp4AMYynFGOES7z92ZzYO3ltoAm0XIo9otADF3UZpCfJ6KFfYxkDHRS+m3vd6gwVLj6 uR+EpIngowG8CohyHKgOCJb3qF/oRojTD+fycGRckSvhxa5pbJLGEXy7/fy1H76nx0fq vUtA== X-Gm-Message-State: AFq9FYItASsxhdMqh8Eo9UTwNjVD5mHTtAh9+KtyAFohRN4r/Uescxmj OoRdblVtR4Kal7ft1nirn6+i9IXVT4lXtlvnznLntY+z5ubtndHgdNPeISJP05zrnFT/MryLiqs pLBE8QXa2ksMjJ6ihr7GgL/WgP60akBSKNl4XMfRNm0uYCCgDHESsHiuSOchfIo6XedOmi4KcE3 eaBpBxRakcpmqoM0yOBVN+NA== X-Gm-Gg: AYBFou2rCV5EXl7aW9qat+xPBpdqNhLcOC8Cm4NXRN/iY/ZFA4+mcA/Uil1Ha7kKX0b oqx6pxdrth+kV2j/wLdHDXdn/nWP1Yp/u3ifcX/dz4KLAtXcee3xGekeABLoMasbO0HZ4wiD21W uyjtOsx7yrs5yWehk2z6GoewX5K7KZ1aSluCa4SbMiysFRnqi8bqQuGMshhVl2iujk0iWmx/t9y 1WMYihHktpumgAOR4NJt06WktwKDbeF0rGCffD/if5gZAslr1ebpcWb2OSQsc+5hS1UucYAmTD9 wYVADWklLr+LT7/ft248QTF21jvC2g+grlzhyXiJufXGUdiBhvVtn6EUm82LzTIudKrraAHa7Qf 8GW8Kdy5unQce0+/VHQmRDUc6HAr/Z3WyWN0CrHuScXYY8woDmsotg8VaIQlNKq/n+P6ohKvrSo L/X/UP X-Received: by 2002:a05:7300:fa19:b0:369:faa2:1fb2 with SMTP id 5a478bee46e88-36a2007c0c1mr6583987eec.8.1793252778244; Wed, 28 Oct 2026 22:46:18 -0700 (PDT) X-Received: by 2002:a05:7300:fa19:b0:369:faa2:1fb2 with SMTP id 5a478bee46e88-36a2007c0c1mr6583941eec.8.1793252777283; Wed, 28 Oct 2026 22:46:17 -0700 (PDT) Received: from hu-anujmitt-hyd.qualcomm.com ([202.46.23.25]) by smtp.gmail.com with ESMTPSA id 5a478bee46e88-36a239d3073sm15670298eec.29.2026.10.28.22.46.16 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 28 Oct 2026 22:46:16 -0700 (PDT) From: Anuj Mittal To: openembedded-devel@lists.openembedded.org Subject: [wrynose][meta-oe][PATCH 1/6] c-ares: upgrade 1.34.8 -> 1.34.9 Date: Thu, 29 Oct 2026 11:16:07 +0530 Message-ID: <20261029054612.2642345-1-anuj.mittal@oss.qualcomm.com> X-Mailer: git-send-email 2.55.0 MIME-Version: 1.0 X-Authority-Analysis: v=2.4 cv=Ju9kP84C c=1 sm=1 tr=0 ts=6ae2ddab cx=c_pps a=PfFC4Oe2JQzmKTvty2cRDw==:117 a=ZePRamnt/+rB5gQjfz0u9A==:17 a=660iZSQnnn4A:10 a=s4-Qcg_JpJYA:10 a=VkNPw1HP01LnGYTKEx00:22 a=u7WPNUs3qKkmUXheDGA7:22 a=ZpdpYltYx_vBUK5n70dp:22 a=tO0qcCukAAAA:20 a=pGLkceISAAAA:8 a=EUspDBNiAAAA:8 a=p_pR1EfkuHc1GyC3nJ4A:9 a=6Ab_bkdmUrQuMsNx7PHu:22 a=bA3UWDv6hWIuX7UZL3qL:22 X-Proofpoint-ORIG-GUID: qG7gkMuMN_sdzl4cr6JZyxrX7q5OHt3D X-Proofpoint-GUID: qG7gkMuMN_sdzl4cr6JZyxrX7q5OHt3D X-Proofpoint-Spam-Info: AW1haW4tMjYxMDI5MDAyMSBTYWx0ZWRfX6EXM5c2zQZGD I3zcEkgONp1oEAt3L2wfVdJMcLKHGUBuFZg4heInCoWHsk9CDPegVcRTQ+mc7Mq8KvkLkFo8ZZ2 n9+qUL20lZchzIOOJxHbjC+AHRvnoho= X-Proofpoint-Spam-Details-Enc: AW1haW4tMjYxMDI5MDAyMSBTYWx0ZWRfXxHqtWYFo9IJr aTMkdiD6btgiPeaadpJyCQ31i/xfUgtNBkuP7zSs8/rhu10mL6wKyKrdK/e6qr4V8QWFIv+LT70 7cHOIPjlwMZmBhLVCA9t8d4JUiO/hKDVVagxk+GUZiqvnv7b23vQd5iinqq8+M4fEtbRSYL2ARC RPVzjeWoboTk/n+pYien9X7LlXfU0EzmJ7wmrgJaUvG0BbeMryiot3DgUDwFrDocYTKeArjwFRQ 4J2jmqW+pTR4YRry3t8PGsgmV9hhQBoXc29Bc9kfmGI7WKfQ3te3dM8zhY9VUup6TY8i4rInDuH Y68uuG873NGP9Y8bCU1M1icrLMTdhdHq4Rd2RPTxZK0Ee7rmN5kDrmfMTncXhTJu01RBNVIkUvm i8rTiZmGv6ZD4VDLoGAgH3sPuT6ULrPgzjH/arGhRRbk5QR9yvtwC1f92I8geUMEpHFEVMQr/UO PjgKhQpKXt1E6HC6R5g== X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1176,Hydra:6.1.138,FMLib:17.12.100.49 definitions=2026-10-29_02,2026-10-21_02,2025-10-01_01 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 impostorscore=0 phishscore=0 adultscore=0 bulkscore=0 clxscore=1015 suspectscore=0 spamscore=0 lowpriorityscore=0 priorityscore=1501 malwarescore=0 classifier=typeunknown authscore=0 authtc= authcc= route=outbound adjust=0 reason=mlx scancount=1 engine=8.22.0-2610190000 definitions=main-2610290021 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Thu, 29 Oct 2026 05:46:27 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131632 From: Jason Schonberg This is a security release. Memory corruption, buffer overflows, uninitialized memory, use-after-free Changelog: https://github.com/c-ares/c-ares/releases/tag/v1.34.9 Signed-off-by: Jason Schonberg Signed-off-by: Khem Raj (cherry picked from commit 556ffbf22a9915e86f5923564ae75644ba0ba207) Signed-off-by: Anuj Mittal --- .../c-ares/{c-ares_1.34.8.bb => c-ares_1.34.9.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-oe/recipes-support/c-ares/{c-ares_1.34.8.bb => c-ares_1.34.9.bb} (93%) diff --git a/meta-oe/recipes-support/c-ares/c-ares_1.34.8.bb b/meta-oe/recipes-support/c-ares/c-ares_1.34.9.bb similarity index 93% rename from meta-oe/recipes-support/c-ares/c-ares_1.34.8.bb rename to meta-oe/recipes-support/c-ares/c-ares_1.34.9.bb index b86b0976c2..386d916466 100644 --- a/meta-oe/recipes-support/c-ares/c-ares_1.34.8.bb +++ b/meta-oe/recipes-support/c-ares/c-ares_1.34.9.bb @@ -7,7 +7,7 @@ LIC_FILES_CHKSUM = "file://LICENSE.md;md5=d3e72a10e08191f2ca1be3f3228d78f3" SRC_URI = "https://github.com/c-ares/c-ares/releases/download/v${PV}/${BPN}-${PV}.tar.gz \ file://run-ptest" -SRC_URI[sha256sum] = "c222b6d681096f9444d2c4863d2c1174019e27cacca0a4a5c114d36dd7d7bf78" +SRC_URI[sha256sum] = "9364b70a12eb59a06830fb488d9357f90100dff0d98b23ea3593a183d43e6f2f" PACKAGECONFIG ?= "${@bb.utils.contains('PTEST_ENABLED', '1', 'tests', '', d)}" PACKAGECONFIG[manpages] = "" From patchwork Thu Oct 29 05:46:08 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Anuj Mittal X-Patchwork-Id: 102321 X-Patchwork-Delegate: anuj.mittal@oss.qualcomm.com Received: from mx0b-0031df01.pphosted.com (mx0b-0031df01.pphosted.com [205.220.180.131]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.5610.1793252781977413407 for ; Wed, 28 Oct 2026 22:46:22 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@qualcomm.com header.s=qcppdkim1 header.b=GzJ0qS8F; dkim=pass header.i=@oss.qualcomm.com header.s=google header.b=gvq91yrt; spf=permerror, err=parse error for token &{10 18 %{ir}.%{v}.%{d}.spf.has.pphosted.com}: invalid domain name (domain: oss.qualcomm.com, ip: 205.220.180.131, mailfrom: anuj.mittal@oss.qualcomm.com) Received: from pps.filterd (m0279870.ppops.net [127.0.0.1]) by mx0a-0031df01.pphosted.com (8.18.1.11/8.18.1.11) with ESMTP id 69T5HEtk3282666 for ; Thu, 29 Oct 2026 05:46:20 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=qualcomm.com; h= content-transfer-encoding:date:from:in-reply-to:message-id :mime-version:references:subject:to; s=qcppdkim1; bh=LQN+BoiPd9I ToDzGextpY69L8nVB3aXrLxP9Sh5yod0=; b=GzJ0qS8FfAzYgH60R17uw3Psfzd ma13DGzR1YW4/I5ANWVSVPO1C4msAFgi9umdjpgcdsHXgOiDdAen3zu8zNimj6gd /uY2pOFo/KC+u+M+/i19ohd+4wtZxdDfSFu2fdYyza2VDQDEtqoGolGrb6ne51SV JoO0f1ZyWGMqm0SjwGqy4yehrNSpuMua0lijD5ghp7rCCRVqBpFJSM/zI6qbIXGl v6OEpDw6Dg3kmILK01+cAUHcsRqBTgnRLcandT7UAcosqsy3W7L/PCRBvQjrUXAa WuFzatIocKC1f2UICngVxcRGLi4YYpFROd4PBBK4nY+HfUdfpOdMCSDvfwQ== Received: from mail-dy1-f197.google.com (mail-dy1-f197.google.com [74.125.82.197]) by mx0a-0031df01.pphosted.com (PPS) with ESMTPS id 4hkpgpt2xs-1 (version=TLSv1.3 cipher=TLS_AES_128_GCM_SHA256 bits=128 verify=NOT) for ; Thu, 29 Oct 2026 05:46:20 +0000 (GMT) Received: by mail-dy1-f197.google.com with SMTP id 5a478bee46e88-36998507c13so2658748eec.0 for ; Wed, 28 Oct 2026 22:46:20 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=oss.qualcomm.com; s=google; t=1793252780; x=1793857580; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to:content-type; bh=LQN+BoiPd9IToDzGextpY69L8nVB3aXrLxP9Sh5yod0=; b=gvq91yrtdLnNKg6jjq1IXDeTvhTs3sPTRjDIeXKpEp2QhHCTRxzijOmTW4nZvPbLRV xEhNDVLCpxTd0JCtBltKlufEyUCbWHazkijKeOyUgV/JNM7CLr1qeyaYMRWziDefM53E Al1eDSSU2CRk/Lo1nM0ZYb3dM6rSahxcsakludVd2b6uRk/BuZpAv2nYONuZ7lLamk02 Ifn3oCNEVO5aNTNHYL3damtfjeu1z6Zqr9w97I13wk+dR65zDBxge/qYGjmOGFnICW+P 3/IXR1hLinL/2cyXAltcHlBYwM2KETmaI6AVIicwrpB5vnSBOvCDRVNtFWzEilbp2fIl GZtw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793252780; x=1793857580; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to:content-type; bh=LQN+BoiPd9IToDzGextpY69L8nVB3aXrLxP9Sh5yod0=; b=YLPpHmZxYPJbl0/NpjqH1VscmIJ0Oyi60cEUWKsj49OoprNUeHTSeMrTXL/E/W1n+F NiUlsP3sYcBUTn+cbdjsvWxhmSg81Z4oKmOvZjEPTW6dimXK9lg+vEsNjkDVQitX3GQj V+4fv4iYhunT+/dlSWsN/KXUrGggTXFeX/xWbnR5nkAF+EjeXVRUNrZ5dmGsaoQ9/Y8K X6toyvwlrkIwd4iIKfFu9/Eic34Aenea9KucQxnAGz1aS0bGXVZp+8I0ROROE7u6u5yv IHJVsnMrUhFKKqDG5LayCRnpJ9Hhuq5cjVikpRCL2bgm8SDvefIfX7H+5KeNBxB20cW5 qYZg== X-Gm-Message-State: AFq9FYLj5zzccJu+Gak3QEEElggml5dYrcUl2A945ikz7rz5LoIkVIlB TA8JIViQIUQwaZsNUcfFKDlUPqOgjFmpurcXUN/afOhIdXSCZM4tmzebWqtWvL8gKLTVcEOMawk Oi/pzyN0JSouCnFCXAI84R6bdwE7kWpuXbgseGJ+pBw8lYxCFZYTLCwk3P9YChGcoNmiJV4bEec ooid08buqzghLG29UFvhZN2w== X-Gm-Gg: AYBFou10ZCW7aPFw704Qq/I8tDfzK2mhLeG+IfegHQBwWqkG6YnjS8izoGj4BL5Ujjh Sbnc0aw60JV+iIot6PKC2vsIF6njoHHSX1x7x1ZFDHzpiqDyRtfontSsXG9mcIz/DsHDYVzgEIj xQiCj0fH+oYQdAa73mLwpSyFcBhUnZV2uJPFFpnDfDKwTnqCojzc6OSuvMXkcIRAHLPjupktgbw JJaFo1Ln2o5ipNa07FULtvl5o2xPnHI/8H7vOcWoM6UWptxy9SKe8WTv9h0k+e9kWVSHHgxJasB Yff5wZnirK+wdtu42vmhRMQL0Qaqw57gP2ceqiCgrxsjqyuWSuHT3K+qgRnf1G4CSmq7A1scBKG pqtHqLxTf6GsU9bGu2Je2KuoUcHGnd5NBq1EyWV98JWnTambVFT75oTsXC9OD2DoqeXP9WtAG2b gQUXO0 X-Received: by 2002:a05:693c:41d7:20b0:367:3d68:8480 with SMTP id 5a478bee46e88-36a20115c41mr5959059eec.0.1793252779432; Wed, 28 Oct 2026 22:46:19 -0700 (PDT) X-Received: by 2002:a05:693c:41d7:20b0:367:3d68:8480 with SMTP id 5a478bee46e88-36a20115c41mr5959035eec.0.1793252778874; Wed, 28 Oct 2026 22:46:18 -0700 (PDT) Received: from hu-anujmitt-hyd.qualcomm.com ([202.46.23.25]) by smtp.gmail.com with ESMTPSA id 5a478bee46e88-36a239d3073sm15670298eec.29.2026.10.28.22.46.17 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 28 Oct 2026 22:46:18 -0700 (PDT) From: Anuj Mittal To: openembedded-devel@lists.openembedded.org Subject: [wrynose][meta-oe][PATCH 2/6] php: upgrade 8.5.11 -> 8.5.12 Date: Thu, 29 Oct 2026 11:16:08 +0530 Message-ID: <20261029054612.2642345-2-anuj.mittal@oss.qualcomm.com> X-Mailer: git-send-email 2.55.0 In-Reply-To: <20261029054612.2642345-1-anuj.mittal@oss.qualcomm.com> References: <20261029054612.2642345-1-anuj.mittal@oss.qualcomm.com> MIME-Version: 1.0 X-Proofpoint-Spam-Details-Enc: AW1haW4tMjYxMDI5MDAyMSBTYWx0ZWRfX3lYbXgGOHCTz M4YFI3rMhgmMu6Ko8vlXqZ5JRSDV4wbVG7DS7d9lJrbSBcDC8tcsdrULGBhRRlxRWAHHtk3lb1B qUGC6MabLPbmD8rU3On0DlSZtFGWF9jopmq73VD4mue0mYnZxTq3ntNBar0pgIYuCuzFOX/txv3 yLkInU2RBIWsSx33vScMBvGcnQdslhw31f832iA+FwIjvzyiSCFr18vJVxhHPPI0xsMoVe+QhKr 05a3PliddH5sDV8MPvey8Ic6/ajZ/F3Y3Ldi9awoyXqnyRJzn3GJkHUeu6ta5XXKhCks/7C3U/r hvPC3rP9EuHbme/dnY74rWWPb0KIHC/ude3fCRma0DZaAgRNCyVuMOGcRIXhPlJyKwEc0nU+w8k H4y60JTxK7tL2XsoI17RT1LNi+JRadf9TwdgJ4WzRfB/Z8XUdKwqMAxTKsdVBN7ThClfs5sOyA3 MwfeP2OWC1+AM4fbkMA== X-Proofpoint-Spam-Info: AW1haW4tMjYxMDI5MDAyMSBTYWx0ZWRfX59WwAtS3PAnc FUw3jIPmVN0Z2T+Ujdzp8LhjOW4PDB9mUZRT64hv6L2BKFvn3X4esqgQuIHRoV6nhFgr4wQ4dha QpTKxP99fhl6/E+pK65cZqC3K9dpZTc= X-Proofpoint-ORIG-GUID: VnGIG4eJYyS7wyH465dhZ4Pbx8W3BfwQ X-Proofpoint-GUID: VnGIG4eJYyS7wyH465dhZ4Pbx8W3BfwQ X-Authority-Analysis: v=2.4 cv=T4oZ3PKQ c=1 sm=1 tr=0 ts=6ae2ddac cx=c_pps a=Uww141gWH0fZj/3QKPojxA==:117 a=ZePRamnt/+rB5gQjfz0u9A==:17 a=660iZSQnnn4A:10 a=s4-Qcg_JpJYA:10 a=VkNPw1HP01LnGYTKEx00:22 a=u7WPNUs3qKkmUXheDGA7:22 a=gowsoOTTUOVcmtlkKump:22 a=67BIL_jfAAAA:8 a=pGLkceISAAAA:8 a=EUspDBNiAAAA:8 a=xKIf62KCRASQS_O3hEYA:9 a=PxkB5W3o20Ba91AHUih5:22 X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1176,Hydra:6.1.138,FMLib:17.12.100.49 definitions=2026-10-29_02,2026-10-21_02,2025-10-01_01 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 suspectscore=0 adultscore=0 bulkscore=0 priorityscore=1501 spamscore=0 clxscore=1015 lowpriorityscore=0 malwarescore=0 impostorscore=0 phishscore=0 classifier=typeunknown authscore=0 authtc= authcc= route=outbound adjust=0 reason=mlx scancount=1 engine=8.22.0-2610190000 definitions=main-2610290021 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Thu, 29 Oct 2026 05:46:27 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131633 From: Jason Schonberg This is a security update. Fixes unauthenticated remote code execution. CVE-2026-109618 CVE-2026-109619 Advisory: https://www.php.net/archive/2026.php#2026-10-21-5 Changelog: https://www.php.net/ChangeLog-8.php#8.5.12 Signed-off-by: Jason Schonberg Signed-off-by: Khem Raj (cherry picked from commit 898ac0ba1caaefb583cb3785c8c466360fc18f63) Signed-off-by: Anuj Mittal --- meta-oe/recipes-devtools/php/{php_8.5.11.bb => php_8.5.12.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-oe/recipes-devtools/php/{php_8.5.11.bb => php_8.5.12.bb} (99%) diff --git a/meta-oe/recipes-devtools/php/php_8.5.11.bb b/meta-oe/recipes-devtools/php/php_8.5.12.bb similarity index 99% rename from meta-oe/recipes-devtools/php/php_8.5.11.bb rename to meta-oe/recipes-devtools/php/php_8.5.12.bb index 831e926880..f9759cf7a5 100644 --- a/meta-oe/recipes-devtools/php/php_8.5.11.bb +++ b/meta-oe/recipes-devtools/php/php_8.5.12.bb @@ -32,7 +32,7 @@ UPSTREAM_CHECK_REGEX = "releases/tag/php-(?P\d+(\.\d+)+)" S = "${UNPACKDIR}/php-${PV}" -SRC_URI[sha256sum] = "dc940716a8c73e531c0078eecb955d595d321ec2cc9d47149cf0089ea6e18f64" +SRC_URI[sha256sum] = "ffb60edc437ced63b5137e4984db379a8111c50049c711510d8b958277efc1a8" CVE_PRODUCT = "php:php php_group:php" From patchwork Thu Oct 29 05:46:09 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Anuj Mittal X-Patchwork-Id: 102322 X-Patchwork-Delegate: anuj.mittal@oss.qualcomm.com Received: from mx0b-0031df01.pphosted.com (mx0b-0031df01.pphosted.com [205.220.180.131]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.5611.1793252783486105363 for ; Wed, 28 Oct 2026 22:46:23 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@qualcomm.com header.s=qcppdkim1 header.b=ToBlAvgF; dkim=pass header.i=@oss.qualcomm.com header.s=google header.b=eyVsSthj; spf=permerror, err=parse error for token &{10 18 %{ir}.%{v}.%{d}.spf.has.pphosted.com}: invalid domain name (domain: oss.qualcomm.com, ip: 205.220.180.131, mailfrom: anuj.mittal@oss.qualcomm.com) Received: from pps.filterd (m0279873.ppops.net [127.0.0.1]) by mx0a-0031df01.pphosted.com (8.18.1.11/8.18.1.11) with ESMTP id 69T5GqYZ3294103 for ; Thu, 29 Oct 2026 05:46:22 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=qualcomm.com; h= content-transfer-encoding:date:from:in-reply-to:message-id :mime-version:references:subject:to; s=qcppdkim1; bh=7u7pUi/Aodc F/MLRSTbhElgDiL2C5Jbvsz8ogJtEqzc=; b=ToBlAvgFjsoH3TTi+6hsJS1xhiJ 9ZAG9BjVgZkdvIz9rFYIWpCtohaVN5IteSDf+Cuhcy0CdFRF5FBczVB3KPsSjSkh hZwIS98R1cg+sERA0HLDf48WJg2W53nrtEum3dI7lWVAwSPDPkXeHLXLcYlPriLm 2WbmAZdPj3AIX43lJ8x6n6at9ny2V4syBeAM86vFxAEhJbI4l16NXPrhdASe/o88 wvM9jdnZv1FhMSfoiGFDLgZU+uKaBj6Y05CQs5hXYjbyQUTBDQE4x6yCwO3qTo23 NmVX+O/gTL/TEjzMLJ2l2cDyhm0TPWUCsexLNQ8GEdYtr1gIuXFVTNWXqPA== Received: from mail-dy1-f198.google.com (mail-dy1-f198.google.com [74.125.82.198]) by mx0a-0031df01.pphosted.com (PPS) with ESMTPS id 4hkxshr996-1 (version=TLSv1.3 cipher=TLS_AES_128_GCM_SHA256 bits=128 verify=NOT) for ; Thu, 29 Oct 2026 05:46:22 +0000 (GMT) Received: by mail-dy1-f198.google.com with SMTP id 5a478bee46e88-3552883bd19so1552671eec.1 for ; Wed, 28 Oct 2026 22:46:22 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=oss.qualcomm.com; s=google; t=1793252781; x=1793857581; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to:content-type; bh=7u7pUi/AodcF/MLRSTbhElgDiL2C5Jbvsz8ogJtEqzc=; b=eyVsSthjgGjo7e1ofX3RYMO5jnGhhbpaGyju7HzlfMmdLPUNd0RHk+74M2H/lMl2qd 5rv5sHMeD1sFhLU0YrtPXxsQe9Rl6sHZRFCzvR75jGoO5rz7vI136D0gKT+NT/gHCtaY iCOcxAM6TjJDyMREsbOH6H7VFzq3iNPewMVBqBKlBt0GeNiWRv63it/aXKBo4WYeRbXZ TeHg89LllNxsICcMxG83sybT0TQjv1Jdn36RE7o+Vtqsrw4xg8mi8dWaNyWMC9iY2sU3 NZsfkoTxufCm5/yXCrpZpViSs2JHkUKbLIvjcWeKqRrO7pWwsDptdug6UuPvLPiCeAMo ygvg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793252781; x=1793857581; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to:content-type; bh=7u7pUi/AodcF/MLRSTbhElgDiL2C5Jbvsz8ogJtEqzc=; b=EI9Oh6uTCCbr4LBKPzbYTfaZdrvqakrb62u8DVqrzjvl+JInUvyCsb5EXDka3xRZxl iUdZblW4He9siZy/GeG9AHvU0O+tiNTmHgvKbgZ3XeRtCDXgWtX7n3v+yLRX3B2U5RZu nendE4umZGYE2506xi44TzK+/BHp9BjBN4+oz2Mv7u1F3AbQBuGt9ddmBrsDU3LiTmMd dX7Cea7pgaYZ+Ap7UtLxOmN5zQzmkGxHRR4WQwgehnXvOydl97ViqxbJ8dujy2Qd+7uE YLa9sPopenu6bP5HHEFQzhTGB7EeGuEyooudB05bSlnIRAG9mq0HOmwzRdka4ZbwSCUI Hubw== X-Gm-Message-State: AFq9FYI+l7cNn0jUUksK9cHow56L9yGS2H8uW6iXRxlb9+fJlWJcqnjW mGQO/E5f9rXThRf1oxMpIMWCbMFtyvaagfjXbucIkSK31MUNzF0RkNaU/aot1ayGHMwa8mUbI2a uiDq1pJu3ImIydwqGg4e/Lzw3STx6/aY/pRaWlAHPmp2NLKlGN+WLK0AuWY0HjHfCU4dB1Scm9h 98SwZxHIaTK5AxQtMbTOxVVw== X-Gm-Gg: AYBFou16IFdYj1ucqDiOczWhRFmM+Iy81q3wkdJptItNC+BaAM4GFSzOisG4It15k8h yasKQ73AnhExa46X0o39DJD+ATqJuuqVVMDTf7lj54/hYBibYbGGsS3dt3UDQ3tO43zXzi3hqMs Sfbf9iU0YqsfDt40efU2WHH3gdhCqa4LFz/k9+9pdRMSe0HBplcFC5xe5FLcw7oKFyuUsLbFGrE KevMz2X8u5Rngr3h0C2h4G7r6MZQmpqXn5TowcDYB8H7ikYbdqa2YB3CX8Q7sboRMw6YyPV1/GK KvzGOJZm5D5pmfx74gnC4XtqwVhD7knfgOvPV8g1i/kuqM83lRcXE0Pfl1PeHw6kJyTppncL6K4 4LuKXFodQfqztlHLKL5NFbVA0HuWHdCW2rGt+CLHYcHgIfWabdo702UURKbiQshUH33boD8w0S6 MPl8sP X-Received: by 2002:a05:693c:88d6:10b0:35d:4185:5395 with SMTP id 5a478bee46e88-36a2043440emr6692534eec.16.1793252781077; Wed, 28 Oct 2026 22:46:21 -0700 (PDT) X-Received: by 2002:a05:693c:88d6:10b0:35d:4185:5395 with SMTP id 5a478bee46e88-36a2043440emr6692505eec.16.1793252780407; Wed, 28 Oct 2026 22:46:20 -0700 (PDT) Received: from hu-anujmitt-hyd.qualcomm.com ([202.46.23.25]) by smtp.gmail.com with ESMTPSA id 5a478bee46e88-36a239d3073sm15670298eec.29.2026.10.28.22.46.19 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 28 Oct 2026 22:46:20 -0700 (PDT) From: Anuj Mittal To: openembedded-devel@lists.openembedded.org Subject: [wrynose][meta-oe][PATCH 3/6] brotli: upgrade 1.2.0 -> 1.2.1 Date: Thu, 29 Oct 2026 11:16:09 +0530 Message-ID: <20261029054612.2642345-3-anuj.mittal@oss.qualcomm.com> X-Mailer: git-send-email 2.55.0 In-Reply-To: <20261029054612.2642345-1-anuj.mittal@oss.qualcomm.com> References: <20261029054612.2642345-1-anuj.mittal@oss.qualcomm.com> MIME-Version: 1.0 X-Proofpoint-GUID: Yvo035brSMzxZqhitZE22QUcZOuxjwUB X-Authority-Analysis: v=2.4 cv=H6BOUOYi c=1 sm=1 tr=0 ts=6ae2ddae cx=c_pps a=wEP8DlPgTf/vqF+yE6f9lg==:117 a=ZePRamnt/+rB5gQjfz0u9A==:17 a=660iZSQnnn4A:10 a=s4-Qcg_JpJYA:10 a=VkNPw1HP01LnGYTKEx00:22 a=u7WPNUs3qKkmUXheDGA7:22 a=rJkE3RaqiGZ5pbrm-msn:22 a=nZOtpAppAAAA:20 a=NEAV23lmAAAA:8 a=pGLkceISAAAA:8 a=EUspDBNiAAAA:8 a=puEJAWS3Ic2CCawLBr4A:9 a=bBxd6f-gb0O0v-kibOvt:22 a=bA3UWDv6hWIuX7UZL3qL:22 X-Proofpoint-Spam-Info: AW1haW4tMjYxMDI5MDAyMSBTYWx0ZWRfX6e150J8O92/K 68P2oHBIx7FeHNRZpppPJyYrOxHiGR+3mPd6AJVk9J7EDBr9zc7MniTeExGwRvXo8Zf9B0ZiLf7 I+Mor7Z13PgCAmwNe0L0ba56l2v4j/0= X-Proofpoint-Spam-Details-Enc: AW1haW4tMjYxMDI5MDAyMSBTYWx0ZWRfX77P614fE3SJa tEECtzvjRVQXhpyo/hKot3rDvx4noHvUM20t4l4qM1p5S/A1fxHaGV5SV3j9FS2QUVAfgnsaXGZ JBSjp3944/r72ubI3CUXshRCZu4QSvghsqEopNjgFmZsSKGmYubonmSaSZEXibIrTW4eVkfJzow rrAROelxGh24UA0VzdwPOxzwMhcFzlOSBwr7SPa0Ehh1aHBsh5OTi/J/l1Y1f7YcBdVn1ndhXw0 VgrinPusEILspznY7S/DsC+bGv9WXpzgO1LT+7me8q6s4qqY7/Cuc71NBrm9xditpK1cAGL3Cx2 u2quskLkm0ApjzzcADv7jpziuommxhkpIDzScIX0u7iDO8xXbgFBJ3r2L5mrXCquyoJCOdk7Agj 71OAkRMsn9JYnIecvROXcsVmSRYUzEIPogWfBUXqdagBQ2hsjmRzijr+KRVknvtRrnY4qNJpngY GuWHc4puKkgqj0fSpIw== X-Proofpoint-ORIG-GUID: Yvo035brSMzxZqhitZE22QUcZOuxjwUB X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1176,Hydra:6.1.138,FMLib:17.12.100.49 definitions=2026-10-29_02,2026-10-21_02,2025-10-01_01 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 malwarescore=0 clxscore=1015 spamscore=0 impostorscore=0 bulkscore=0 priorityscore=1501 lowpriorityscore=0 suspectscore=0 adultscore=0 phishscore=0 classifier=typeunknown authscore=0 authtc= authcc= route=outbound adjust=0 reason=mlx scancount=1 engine=8.22.0-2610190000 definitions=main-2610290021 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Thu, 29 Oct 2026 05:46:27 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131634 From: Jason Schonberg This is a security release CVE-2026-111497: out-of-bounds write permits remote code execution Changelog: https://github.com/google/brotli/releases/tag/v1.2.1 Signed-off-by: Jason Schonberg Signed-off-by: Khem Raj (cherry picked from commit b5d66bf60d7664e5fa15dfabcfdb7986ea83d386) Signed-off-by: Anuj Mittal --- .../brotli/{brotli_1.2.0.bb => brotli_1.2.1.bb} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) rename meta-oe/recipes-extended/brotli/{brotli_1.2.0.bb => brotli_1.2.1.bb} (79%) diff --git a/meta-oe/recipes-extended/brotli/brotli_1.2.0.bb b/meta-oe/recipes-extended/brotli/brotli_1.2.1.bb similarity index 79% rename from meta-oe/recipes-extended/brotli/brotli_1.2.0.bb rename to meta-oe/recipes-extended/brotli/brotli_1.2.1.bb index 84495a3236..dca16cb79b 100644 --- a/meta-oe/recipes-extended/brotli/brotli_1.2.0.bb +++ b/meta-oe/recipes-extended/brotli/brotli_1.2.1.bb @@ -6,8 +6,8 @@ BUGTRACKER = "https://github.com/google/brotli/issues" LICENSE = "MIT" LIC_FILES_CHKSUM = "file://${S}/LICENSE;md5=941ee9cd1609382f946352712a319b4b" -SRC_URI = "git://github.com/google/brotli.git;branch=master;protocol=https" -SRCREV = "028fb5a23661f123017c060daa546b55cf4bde29" +SRC_URI = "git://github.com/google/brotli.git;branch=v${@oe.utils.trim_version('${PV}')};protocol=https;tag=v${PV}" +SRCREV = "db24a98aed38a16de78cc05ca15cdd8dc2a0d92d" inherit cmake lib_package From patchwork Thu Oct 29 05:46:10 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Anuj Mittal X-Patchwork-Id: 102323 X-Patchwork-Delegate: anuj.mittal@oss.qualcomm.com Received: from mx0b-0031df01.pphosted.com (mx0b-0031df01.pphosted.com [205.220.180.131]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.5627.1793252785078277203 for ; Wed, 28 Oct 2026 22:46:25 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@qualcomm.com header.s=qcppdkim1 header.b=py2Um9nr; dkim=pass header.i=@oss.qualcomm.com header.s=google header.b=NZZat58U; spf=permerror, err=parse error for token &{10 18 %{ir}.%{v}.%{d}.spf.has.pphosted.com}: invalid domain name (domain: oss.qualcomm.com, ip: 205.220.180.131, mailfrom: anuj.mittal@oss.qualcomm.com) Received: from pps.filterd (m0279869.ppops.net [127.0.0.1]) by mx0a-0031df01.pphosted.com (8.18.1.11/8.18.1.11) with ESMTP id 69T5H1x13829043 for ; Thu, 29 Oct 2026 05:46:23 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=qualcomm.com; h= content-transfer-encoding:date:from:in-reply-to:message-id :mime-version:references:subject:to; s=qcppdkim1; bh=csz+m/fc0j6 8W4LVpcwec6zS4im/XmvUQrfFYpA6vLw=; b=py2Um9nrobmkRZ2Kc9aL2JhuyrK pRu9hie9rzxeeWpW+uzOTTwZfY2t/CMbpy+JTfGJrMIrD+Q8/zzNWmEySYXl4xFY 8tyjUDRSXjC0gAOKmOo6hvEAWGQ/N3PMYakYA8pcQsGlqDFlrfmIn7rlLAnI/p3G P/z2JJwjNLlI0ReTs6rIA+BgYeHHJRpAiKbAmOG2aQ6G3nwl6ABNZeB++PKrXIJU aFAIuaoxn5g5QsYabAohqoNv6+PC8E+YBlB3b+aLVYC5Mvt1BGk8HRDb2TI2W0Ce TLUQo9jXpo9xgXHOHrCWpkF3NFQz2jpmqxMK5/33nWSjHp1Gf7zIkfRVoiw== Received: from mail-dy1-f199.google.com (mail-dy1-f199.google.com [74.125.82.199]) by mx0a-0031df01.pphosted.com (PPS) with ESMTPS id 4hktmp945f-1 (version=TLSv1.3 cipher=TLS_AES_128_GCM_SHA256 bits=128 verify=NOT) for ; Thu, 29 Oct 2026 05:46:23 +0000 (GMT) Received: by mail-dy1-f199.google.com with SMTP id 5a478bee46e88-30bcb065bfdso2855749eec.0 for ; Wed, 28 Oct 2026 22:46:23 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=oss.qualcomm.com; s=google; t=1793252783; x=1793857583; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to:content-type; bh=csz+m/fc0j68W4LVpcwec6zS4im/XmvUQrfFYpA6vLw=; b=NZZat58UekgsE1d6dPgrDMbS0BU49vHiWsSvX5m7vzZhCiAUx2LdcAOcOzVgEXT2Ky vzWUDMr6uuXr7MP4zPfhVbhH07JHV5Ovt8Am6P20nE5NBJFOMVUIxy87Vubcxhwe4OlR AlijNlJwHTHDQZUNm6CIoQlVwzqwM3VfXYzXGmxi9y/9FbfPdJSNtlODi6fnfJ5rd7M0 s1SP3SkgkGQGE+tyr5QtuVjWAUgcie1LGD/Bx0cNlj2iXeO/EqCCwfZpqtZ/e7ZnjB7B pgl2FSSq1TIq9qEWkzf2eWXRdlTUx0Lz2oKEdBjXPa+17d0SSSyPX4h5TgfDRAiRdnpd 55OQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793252783; x=1793857583; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to:content-type; bh=csz+m/fc0j68W4LVpcwec6zS4im/XmvUQrfFYpA6vLw=; b=qiLNEbrUGlGFrdNkFEfU9nQizYNT2y86bLgap3fGORb0QtwqDOmIvYotTSufiVwspM B4lnMXAFJaWWDCTdpqkZw8/bP/6HT6jT9Rwa50WneAxsx60nSrYygnEIm50nTwwl49xL kUsxZ241t8Kh6kRlElF0j25wmXWx4KKEHTtzN4ZCU8yLzv1/TvhzHKR2pHKAa+88CcRu Qfu6Z1YVGhRn4SoDD6cyg3/HjJexl2NZcdAq22IvBDPawpDyjLjEf3U3uWqvndo5XDvH lOxfvfOGfCKwUYbT3t8yL4V7tgKImp0FbruUqvqWt2VYgEcCG9sELy85XUGFDL8KQQDQ 2pYQ== X-Gm-Message-State: AFq9FYIKaXm3RHx4MXf3fERSR0RE6IlKwhfSdmhHfQDH87/7vn18n8Ps QC5pbRm+OY0qZ3eyuZeqVdFNOE+P3iH7p0jeOzIXoNQs3feAU7WwwdaRb7EWl01h0xFPI2jnHcx bgQHF4mEC/Vl00nywH3h1ePAsx5jK1TExcDct3FZXfaL0MCR+Zv4bzV/SToyZnYMmovUjfcB1mj kD3CQwwl3E1AOqF9ghXOZM0w== X-Gm-Gg: AYBFou3ppRuA4Sls73xORszQ6JY2v9dJPrp7eviQBRaSecPGdSQJsRpoS2xsbh0xpWM bpfan9fOqsFIbSIzLHOK4GcSuYDF5u2XfuUX+lUScDhGM1z/EXOOhOv6//pS6LJ+tYU6MWKHDbT 0z5Zry/30FVfTQ5OYYYM3pTAbjbmSnbylJPfRh3oXjqzzefdPn+u4FI/MtJiba5RXwrWZbkQGiW O/yTkrnbHQGG7lDqZEKE0BbxPe6XLuSj3sUpU1CWowmTmEnlre/MWqjl8wa5VV2yPgu5BKufsAd bAEHXEUi6ctL0pbKvolKqOpMR4xcX9xscyQnyDbnH0kb4IfQXWhqYW2L409ZTVujsz91e6P4YNu cgg2LmhDTntDMHbRAgaaX+bdcKvT6vSy7+i6YD1GiztWA2lnKofB43p7arEx3URaXzs3GU2qkk2 kDQLQx X-Received: by 2002:a05:693c:860a:20b0:36a:2289:c599 with SMTP id 5a478bee46e88-36a2289c638mr6618507eec.29.1793252782577; Wed, 28 Oct 2026 22:46:22 -0700 (PDT) X-Received: by 2002:a05:693c:860a:20b0:36a:2289:c599 with SMTP id 5a478bee46e88-36a2289c638mr6618465eec.29.1793252782076; Wed, 28 Oct 2026 22:46:22 -0700 (PDT) Received: from hu-anujmitt-hyd.qualcomm.com ([202.46.23.25]) by smtp.gmail.com with ESMTPSA id 5a478bee46e88-36a239d3073sm15670298eec.29.2026.10.28.22.46.20 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 28 Oct 2026 22:46:21 -0700 (PDT) From: Anuj Mittal To: openembedded-devel@lists.openembedded.org Subject: [wrynose][meta-python][PATCH 4/6] python3-brotli: Upgrade 1.2.0 -> 1.2.1 Date: Thu, 29 Oct 2026 11:16:10 +0530 Message-ID: <20261029054612.2642345-4-anuj.mittal@oss.qualcomm.com> X-Mailer: git-send-email 2.55.0 In-Reply-To: <20261029054612.2642345-1-anuj.mittal@oss.qualcomm.com> References: <20261029054612.2642345-1-anuj.mittal@oss.qualcomm.com> MIME-Version: 1.0 X-Proofpoint-Spam-Details-Enc: AW1haW4tMjYxMDI5MDAyMSBTYWx0ZWRfX3wh0bGj6BoFh 128+AK7pcADax6zQGfPFsbuZCDhnMKAQ5XXC46SGVE6PcMReK3VZnG+M8mDPNW/j5hYet8iOEdH 6r2TqN6DKcESneBy/dbfn0DPLQ/WiFqkMCWPywZxvl8cRLOPeyqr9ggsEDTRDJs+D4OXUvDMiX1 R2hrORs5bI8dnm3WFOrFm4EgWi6YuWpiSnakcZWoK/d4Ik+UjY6JWU9B7XVUwSrBImp/8pY8+h8 YdDMuPrpsvrKE20A73n4MmH3461cvq8JIwghzZ60LHqspRhWRM4X/oy2LL+0R+NzrVenB1MavLj P+mAsk2iTEVhaC4m0gb5FS1MNRbOiO7RM28kV33esarPQhgIXlIeGHxryk0ZkLG+mhk+FbyKpn/ H+LwA9EXekbyZKw7FBepKiFI/K6/Elx5eMy824hNJOwfjkdnrHKmFVYRPyj23emnaUdYbnIaTCw 1XMKaS4jhCbD5JezMpg== X-Authority-Analysis: v=2.4 cv=crYOAF4i c=1 sm=1 tr=0 ts=6ae2ddaf cx=c_pps a=cFYjgdjTJScbgFmBucgdfQ==:117 a=ZePRamnt/+rB5gQjfz0u9A==:17 a=660iZSQnnn4A:10 a=s4-Qcg_JpJYA:10 a=VkNPw1HP01LnGYTKEx00:22 a=u7WPNUs3qKkmUXheDGA7:22 a=_glEPmIy2e8OvE2BGh3C:22 a=k-42gJp3AAAA:8 a=EUspDBNiAAAA:8 a=Qs3lcTOfiu_M5rj6SRMA:9 a=scEy_gLbYbu1JhEsrz4S:22 a=uCSXFHLys93vLW5PjgO_:22 X-Proofpoint-Spam-Info: AW1haW4tMjYxMDI5MDAyMSBTYWx0ZWRfX21Qhqwmyayu7 oBWenZFbYVISqunUlW7zhs7i1mLkCj6jPiHkNjnac4npHnMVxHhhwKliuTYZM1HAsckE9kdbLdp hDNaPawZUv+fvEkvGYol+Y723WPGP0A= X-Proofpoint-GUID: K_yd4MSyZkVG1chn9b7pSbH9ZLnvtW_O X-Proofpoint-ORIG-GUID: K_yd4MSyZkVG1chn9b7pSbH9ZLnvtW_O X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1176,Hydra:6.1.138,FMLib:17.12.100.49 definitions=2026-10-29_02,2026-10-21_02,2025-10-01_01 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 spamscore=0 malwarescore=0 lowpriorityscore=0 impostorscore=0 clxscore=1015 adultscore=0 suspectscore=0 priorityscore=1501 bulkscore=0 phishscore=0 classifier=typeunknown authscore=0 authtc= authcc= route=outbound adjust=0 reason=mlx scancount=1 engine=8.22.0-2610190000 definitions=main-2610290021 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Thu, 29 Oct 2026 05:46:27 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131635 From: Leon Anavi Upgrade to release 1.2.1: - CVE-2026-111497: out-of-bounds write permits remote code execution Signed-off-by: Leon Anavi Signed-off-by: Khem Raj (cherry picked from commit 6a79ef1cfe1ab5018e017696e9ac3ca4bf053600) Signed-off-by: Anuj Mittal --- .../python/{python3-brotli_1.2.0.bb => python3-brotli_1.2.1.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-python/recipes-devtools/python/{python3-brotli_1.2.0.bb => python3-brotli_1.2.1.bb} (84%) diff --git a/meta-python/recipes-devtools/python/python3-brotli_1.2.0.bb b/meta-python/recipes-devtools/python/python3-brotli_1.2.1.bb similarity index 84% rename from meta-python/recipes-devtools/python/python3-brotli_1.2.0.bb rename to meta-python/recipes-devtools/python/python3-brotli_1.2.1.bb index f4cdab65b6..b2cf801aa4 100644 --- a/meta-python/recipes-devtools/python/python3-brotli_1.2.0.bb +++ b/meta-python/recipes-devtools/python/python3-brotli_1.2.1.bb @@ -9,7 +9,7 @@ UPSTREAM_CHECK_PYPI_PACKAGE = "${PYPI_PACKAGE}" CVE_PRODUCT = "brotli" -SRC_URI[sha256sum] = "e310f77e41941c13340a95976fe66a8a95b01e783d430eeaf7a2f87e0a57dd0a" +SRC_URI[sha256sum] = "02b2f7b5a83485efe448a44ddf7983def05c3bb1dcf917d4f7154070260e13de" inherit pypi pkgconfig python_setuptools_build_meta From patchwork Thu Oct 29 05:46:11 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Anuj Mittal X-Patchwork-Id: 102324 X-Patchwork-Delegate: anuj.mittal@oss.qualcomm.com Received: from mx0b-0031df01.pphosted.com (mx0b-0031df01.pphosted.com [205.220.180.131]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.5628.1793252787346140668 for ; Wed, 28 Oct 2026 22:46:27 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@qualcomm.com header.s=qcppdkim1 header.b=lCYjVNKX; dkim=pass header.i=@oss.qualcomm.com header.s=google header.b=eXhobRNi; spf=permerror, err=parse error for token &{10 18 %{ir}.%{v}.%{d}.spf.has.pphosted.com}: invalid domain name (domain: oss.qualcomm.com, ip: 205.220.180.131, mailfrom: anuj.mittal@oss.qualcomm.com) Received: from pps.filterd (m0279869.ppops.net [127.0.0.1]) by mx0a-0031df01.pphosted.com (8.18.1.11/8.18.1.11) with ESMTP id 69T5H7It3829254 for ; Thu, 29 Oct 2026 05:46:26 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=qualcomm.com; h= content-transfer-encoding:date:from:in-reply-to:message-id :mime-version:references:subject:to; s=qcppdkim1; bh=3pzAbDz0a6B bEEiatqD0j5B/u6DqDw5H6N2waJWGlnw=; b=lCYjVNKXKCLo12etJVxglqiQRKP TDAQO6lD3w+89Mrus+doXcBj+YbxBWmn3EXI63zpmA8CC7VrUgVfr/2wVYedJ6ip 7PZS5ACQIldYAXCV2KpE80ZyuAkbWHp3QNVjVXwTeuhgHc9wPzmlI776etJYdrVP ouIC86SBxVuV2dfIYshHwNFxOeDyt0Rm8kQJMBrWCTbRveMO64AOyuD0v6Asl3zc kgNZG2AYPGGMQfqKMB9Dzk89xwa16QVfZjTdnRsneKB/++RA6WAKhCIErYf0MXBn IwuzqJzQmEaXDuq/ojrP9IV5tYCBq8vuvie+4DgF2whI/I7ZIjQba7msc5w== Received: from mail-dy1-f199.google.com (mail-dy1-f199.google.com [74.125.82.199]) by mx0a-0031df01.pphosted.com (PPS) with ESMTPS id 4hktmp945m-1 (version=TLSv1.3 cipher=TLS_AES_128_GCM_SHA256 bits=128 verify=NOT) for ; Thu, 29 Oct 2026 05:46:25 +0000 (GMT) Received: by mail-dy1-f199.google.com with SMTP id 5a478bee46e88-36637676140so2607324eec.0 for ; Wed, 28 Oct 2026 22:46:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=oss.qualcomm.com; s=google; t=1793252785; x=1793857585; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to:content-type; bh=3pzAbDz0a6BbEEiatqD0j5B/u6DqDw5H6N2waJWGlnw=; b=eXhobRNiQMDLxGD7FYGyDpIXvZZ4Ye5FEFQZHlE79CsZENR+Jqv55/r8fuiLJcabUH YGRj8mf+p6VyNbIErl3gxc5oNtXADfKqmQonBHeTFBEN+ry0TR7uMjCEZ9CdZixvX/CI KI3nSYY8Bsz2nJ8+1vZ6rzG3bhBG0gvxNtV+ZiJzhTXHsabSY722rtjLZga8aQC61tWa WG/wSS2Dcyk7/sMzZy3i2PbFsYAMd7SOUIyJqNqeHXdjjGtsuwKA/KfVGOEVDinuv4v0 SXG6+hPQZlkj6Q6Hu/Yw1pFdKZMKhn4BFL9vTDEypLezH+NSfrnuDuOLLoGX/pEdahy+ 0XfQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793252785; x=1793857585; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to:content-type; bh=3pzAbDz0a6BbEEiatqD0j5B/u6DqDw5H6N2waJWGlnw=; b=Elz0GgOjnd2Jo2guprxhkFqFM1SWld75QVjRZctsQaKaIOWmBVcddtdjAxdOl8CNlH SK0PEF5GkLVpIq/2u5wNZbP4lkC4vxDwHPcKoztu8l1LNE5JKycxRbVKb0Ss03h0nOtm fWliSNr614MoBVbt7o6veCFZTEtyKGaNttoanPOU7CIWgAq+KUFcaVqYAHzH1HsHETpR HAAJQn4pm/N0coCbF29cb3sP5wxSJuOtD5K3QrNe6ShMzAbp1aE63UZGbXxfZmB+z+nI o2rvnIDHM83IwpIlaVMEqBkaZvcGsGmPZRr0ppjE/N1gh0rS72DaKkf7umUDp80wwOTy /HWQ== X-Gm-Message-State: AFq9FYLMSNIv4Go5rwFh1lIeLkuwsWiViVIbUAE0N6Nr9AEhnKBMcLPm wko8TLGBgFF/NQL6WQf6DM9HqVaLW5pzYQDRy6+07HWZbYYFQjt2KbiDjyr3a9SJNMU+iJh1lth DbeQqhLEmWGvQZgYh4ntdl9NR/r2RDZnBYUE4BkMeI3oUKDUw9vW/E3it4h2WtItRrZvMuIzj5K R3eoLJRjISyltwSj2+6YFdkA== X-Gm-Gg: AYBFou30CMdbV1MR8bnCgCo6+6uVQGwAxz+J/4DsGkrtIv4IontR16itiziDuioQUHK ksD1qs/VUhiwmbFzcy2fC3TFbLRU2P+ZRRJtXGUOZIQsRw26coS+5z1IUaT0BW6msRSMIamX+q3 famFC2lzDBa+sFHTUzYyHIpTjN21ymHglR6VPJ3i9pM8Mw5BCvsVnngjkEg3h0/3h3QTsZI2i/u uX48QpEwvJ2yoq9Ppp4tT0MNVdIRkI2bRDgUQKtjAFahtD2WYf+L/zui4jNXDbDaiKQszfqmb1G Cz9ApDfrJn+nFcr1AD2nYPLVuwnZm/hoq3TYEoSKMJa5a3aPDvrpGxEtzk/5rCGZOtGsswZyCzy fQoc/xkopaAK9lsRfGDc4fmoKC2ndXl5jzWjGyttoxfkNtl+P82PP/ctge6kZT3jpY0+t8Jeq+z THb9nZ X-Received: by 2002:a05:693c:368e:b0:369:d992:e3 with SMTP id 5a478bee46e88-36a2013b2b0mr6321532eec.32.1793252784391; Wed, 28 Oct 2026 22:46:24 -0700 (PDT) X-Received: by 2002:a05:693c:368e:b0:369:d992:e3 with SMTP id 5a478bee46e88-36a2013b2b0mr6321495eec.32.1793252783710; Wed, 28 Oct 2026 22:46:23 -0700 (PDT) Received: from hu-anujmitt-hyd.qualcomm.com ([202.46.23.25]) by smtp.gmail.com with ESMTPSA id 5a478bee46e88-36a239d3073sm15670298eec.29.2026.10.28.22.46.22 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 28 Oct 2026 22:46:23 -0700 (PDT) From: Anuj Mittal To: openembedded-devel@lists.openembedded.org Subject: [wrynose][meta-oe][PATCH 5/6] pcp: Add readline-native and ncurses-native to pcp-native DEPENDS Date: Thu, 29 Oct 2026 11:16:11 +0530 Message-ID: <20261029054612.2642345-5-anuj.mittal@oss.qualcomm.com> X-Mailer: git-send-email 2.55.0 In-Reply-To: <20261029054612.2642345-1-anuj.mittal@oss.qualcomm.com> References: <20261029054612.2642345-1-anuj.mittal@oss.qualcomm.com> MIME-Version: 1.0 X-Proofpoint-Spam-Details-Enc: AW1haW4tMjYxMDI5MDAyMSBTYWx0ZWRfXx4IRAmxJnec7 qYTMth4plqsaZ/0mQIrDnHUH+DRL5Vl/yhRtopTEzkXu6MbF+9R3RAPY53LKAliLgheuWSkF+IA wNvixN9dVqFhgIC1yb5+3QDJ2P1DD7XePpSlIdcUsHWjW7zi9tB6fkQ6gkfV0BpTPZeP37zePG5 UVt0F+Cnc3msTMJc2UwglkiI10TnFissmiWfCf+fEg4eHlnYph6A4qkR1JrVYJcLCkbRQ0f9Io6 ZnbCeHGQUiTn2HKzaPMmNnbWR111GRflpWxK/9JGXNZxmEbM5vKzEot4dUQVwwCrXD4yt4BRdD1 hAZ0AOWkjgYevXxkbZOP7k049Cnh3VcBO3m7UMYn8qf8jMApETMEKGwQ2KjSdTutZN5R7kOnGrB gk+AWietU2dbPX3JEVEAdCYG/aY5rpDUKtGCwuHRCw7W22O60mXCc4TfcWVIm5y7jYPTp1tZxW3 Iop2+MoQOnk8LGm66Og== X-Authority-Analysis: v=2.4 cv=crYOAF4i c=1 sm=1 tr=0 ts=6ae2ddb1 cx=c_pps a=cFYjgdjTJScbgFmBucgdfQ==:117 a=ZePRamnt/+rB5gQjfz0u9A==:17 a=660iZSQnnn4A:10 a=s4-Qcg_JpJYA:10 a=VkNPw1HP01LnGYTKEx00:22 a=u7WPNUs3qKkmUXheDGA7:22 a=_glEPmIy2e8OvE2BGh3C:22 a=EUspDBNiAAAA:8 a=NHFlQX0OANvMoQo-VLIA:9 a=scEy_gLbYbu1JhEsrz4S:22 X-Proofpoint-Spam-Info: AW1haW4tMjYxMDI5MDAyMSBTYWx0ZWRfX9BOyn7RNJfMQ zgNAPlQTBmRQpdJM+Tw46OUbzJxh7wvi1MY1gS1CpI4nnqfCZLvWyfLmk78HkhZm7ogfSqtcZ5A hvJytb21LKK1TRrg4bnMVti5cWCUN3U= X-Proofpoint-GUID: PfXSkYT5ihQTT_ms2aGJnYnDu2qn8s30 X-Proofpoint-ORIG-GUID: PfXSkYT5ihQTT_ms2aGJnYnDu2qn8s30 X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1176,Hydra:6.1.138,FMLib:17.12.100.49 definitions=2026-10-29_02,2026-10-21_02,2025-10-01_01 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 spamscore=0 malwarescore=0 lowpriorityscore=0 impostorscore=0 clxscore=1015 adultscore=0 suspectscore=0 priorityscore=1501 bulkscore=0 phishscore=0 classifier=typeunknown authscore=0 authtc= authcc= route=outbound adjust=0 reason=mlx scancount=1 engine=8.22.0-2610190000 definitions=main-2610290021 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Thu, 29 Oct 2026 05:46:28 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131636 From: Khem Raj pcp-native compiles the pcp sources src/pmns/lex.l which does '#include '. The native recipe only depended on python3/setuptools/flex/bison, so with the header search correctly limited to the sysroot 0001-configure-Limit-the-header-search-to-sysroot.patch the build fails on hosts without readline development headers installed: lex.l:25:10: fatal error: readline/readline.h: No such file or directory Depend on readline-native (and ncurses-native, which readline links against) so the headers and libraries come from the native sysroot rather than the build host, mirroring the target recipe DEPENDS. This makes the native build reproducible and host independent. Verified by building pcp-native from scratch Signed-off-by: Khem Raj (cherry picked from commit 155fd062e2bdb54061d457f7e2e4e20eb8248038) Signed-off-by: Anuj Mittal --- meta-oe/recipes-support/pcp/pcp-native_6.3.8.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-oe/recipes-support/pcp/pcp-native_6.3.8.bb b/meta-oe/recipes-support/pcp/pcp-native_6.3.8.bb index c4064d8330..e25cf2e8e4 100644 --- a/meta-oe/recipes-support/pcp/pcp-native_6.3.8.bb +++ b/meta-oe/recipes-support/pcp/pcp-native_6.3.8.bb @@ -1,7 +1,7 @@ require pcp.inc inherit python3native native #autotools-brokensep -DEPENDS = "python3-native python3-setuptools-native flex-native bison-native" +DEPENDS = "python3-native python3-setuptools-native flex-native bison-native readline-native ncurses-native" export PCP_DIR = "${D}" export PCP_TMP_DIR = "${D}/tmp" From patchwork Thu Oct 29 05:46:12 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Anuj Mittal X-Patchwork-Id: 102325 X-Patchwork-Delegate: anuj.mittal@oss.qualcomm.com Received: from mx0b-0031df01.pphosted.com (mx0b-0031df01.pphosted.com [205.220.180.131]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.5612.1793252788347342578 for ; Wed, 28 Oct 2026 22:46:28 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@qualcomm.com header.s=qcppdkim1 header.b=aR6uqRyN; dkim=pass header.i=@oss.qualcomm.com header.s=google header.b=fcHZ8+76; spf=permerror, err=parse error for token &{10 18 %{ir}.%{v}.%{d}.spf.has.pphosted.com}: invalid domain name (domain: oss.qualcomm.com, ip: 205.220.180.131, mailfrom: anuj.mittal@oss.qualcomm.com) Received: from pps.filterd (m0279870.ppops.net [127.0.0.1]) by mx0a-0031df01.pphosted.com (8.18.1.11/8.18.1.11) with ESMTP id 69T5H6KY3282385 for ; Thu, 29 Oct 2026 05:46:27 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=qualcomm.com; h= content-transfer-encoding:date:from:in-reply-to:message-id :mime-version:references:subject:to; s=qcppdkim1; bh=a1n/K76mLeA sdc8KHlVm1KFEu+AU0O6r3Du+FWpJeQI=; b=aR6uqRyN5GPoQ2PRqXjHqspldsP onA/zzk0hc5gAFPxCyEsdDthTwqeB2XdZUqwdOb/e1PnE8pH+J/+jRUDLsJasjNP y8/dY5fuScVd2m0td2gd33xJo8bS3HKXgZE9aW3yqFw0wqcT4lHHe0m7VDGfMPPD 8QyJijE5nLyZcGNN/4GxoW4PDWfcyFtE5oVkXnh+nYSOwxxVxn8KTUpg4qPJTQmK pKBCIR1osKRx4bVM4NX0oeAF80y2ab7tknvoHV16ISKdvI8aavSODMlIQBw4hRGi NaWN3hQaElUNT4XnLf50W2GsGLdqhbJjs4GMgPq0xdO29LmKZcUd1EvDhIA== Received: from mail-dy1-f197.google.com (mail-dy1-f197.google.com [74.125.82.197]) by mx0a-0031df01.pphosted.com (PPS) with ESMTPS id 4hkpgpt2y7-1 (version=TLSv1.3 cipher=TLS_AES_128_GCM_SHA256 bits=128 verify=NOT) for ; Thu, 29 Oct 2026 05:46:27 +0000 (GMT) Received: by mail-dy1-f197.google.com with SMTP id 5a478bee46e88-36a1e2485fdso3822290eec.1 for ; Wed, 28 Oct 2026 22:46:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=oss.qualcomm.com; s=google; t=1793252786; x=1793857586; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to:content-type; bh=a1n/K76mLeAsdc8KHlVm1KFEu+AU0O6r3Du+FWpJeQI=; b=fcHZ8+76ruz4a9F/FvD1wWpfNN84zmMi9gAjtlyUiCLahkuG/IL9y/YPOFz5qMDdRx CSubIDpNAYybhzvQepiZVR+HyKDzEuUDWvhtbkChOiOcPAjkValQvf6PSjIdeaEyjeJD /wHmblZ8pJKZZd7YJwPmcTS4t6IiZ/5NVtWELs4ZhQcgudYw6KLwgn++a6NZGYcrvOBL t+JEG3Xno5yvYg52OiQ2E+PoqgHicetVUJ1EgE/tez4t/abB5d2/hV2HaqOmD6sBus0m OPneM9Y6CJaFdgxLDW6pIIMXFgDaDCPj01A0JCO/P7XSCmeSbmRpf1U0//EI/qhXgMXm W78w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793252786; x=1793857586; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to:content-type; bh=a1n/K76mLeAsdc8KHlVm1KFEu+AU0O6r3Du+FWpJeQI=; b=ygomOfEVf/rnQkKoswer0+rjhEnigASF2l2G+Xa+grt4lAbGH9gv3r671YXmNHwDGk thtyGL/TxKiIUnc7+SW6JZF60btENubR6E+XluJUb5LS2oJxuukkoyAVh/OgJHsVixu4 KMfgdSjcgqZvIiSXKa8mPAyaO/LqfxdGXkerLD6L+dQsAxCToxCZoV0aw/PlwwvNzgU1 82gj03iAIvoIRkissOgqGfcf5hxDihDLL0lYjopY35BOLQFt7RzlEklWk88fTg9u3BpP 5FL937SHQjKvG52prxXcHaBoyD7j/keqZj69rOqICvjehRFJ9OB/6lvxS7+6/3/fGodN OaNQ== X-Gm-Message-State: AFq9FYKwp6g1FGxxRW3G/83i3A9polD6UP8KHlTcmCqJROq/cakED0JV zwie3yz1oWXU/EOMn4vXaFO/GBO5SFE61mpMGNXf56tQCveCe2qFeGD/VMOnmHK7b1ukiaPN3Z8 zOF/hTXQe6bg9BJVwWpQIyA+0leXzVt2jUgl3bQ/DE3AcpBvTmGJ7bH7uKkgjgh7GMudkgUAQft 4LtY4k1XWPpZ4CkC50Sg8nZA== X-Gm-Gg: AYBFou2Dd8UG0X/ckr0A+WApu/Ovah+2fNRWtuJNGiGaH1m/iyqU8HIELX8MxdOFckW ktAWBlX1HFQUFEp13vbT4w33G4pML2xVdfuTLI8wZZqcxRnksnftKrvZEgxWtI/PIrhCi0MZWiO AQGex/oqTtCqvSC1+7lZL5hJ3kNeN9GDCzKApwhoA6IGd+bMJId4AAzkbd2Ue6yQ4P6AcLD/adA mvkp/Yd0iVkovaLfsxaUrBmT14gTLXveTYhs/JTa0xfdAQMqj18boXpgksjrDtafzfocQyb0fS5 KXMfXeIPdL47a0iBLGJwgo6x/wFKhAb8cjgYqGtReFIrLrfk42QYjGPJX7CFfbmihRGzbk2NhXH 63oS3UCb4FtaIjuMo3/om5hFhr7d2IY6SKpeMTFf83MW96SMHuZNPertL3fkqexGJ1TqtoT0Lqd mVn68m X-Received: by 2002:a05:693c:881a:20b0:35e:f1a5:9ba6 with SMTP id 5a478bee46e88-36a202869c9mr6457490eec.5.1793252786018; Wed, 28 Oct 2026 22:46:26 -0700 (PDT) X-Received: by 2002:a05:693c:881a:20b0:35e:f1a5:9ba6 with SMTP id 5a478bee46e88-36a202869c9mr6457458eec.5.1793252785253; Wed, 28 Oct 2026 22:46:25 -0700 (PDT) Received: from hu-anujmitt-hyd.qualcomm.com ([202.46.23.25]) by smtp.gmail.com with ESMTPSA id 5a478bee46e88-36a239d3073sm15670298eec.29.2026.10.28.22.46.24 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 28 Oct 2026 22:46:24 -0700 (PDT) From: Anuj Mittal To: openembedded-devel@lists.openembedded.org Subject: [wrynose][meta-networking][PATCH 6/6] frr: Fix native clippy failing to load libatomic.so.1 Date: Thu, 29 Oct 2026 11:16:12 +0530 Message-ID: <20261029054612.2642345-6-anuj.mittal@oss.qualcomm.com> X-Mailer: git-send-email 2.55.0 In-Reply-To: <20261029054612.2642345-1-anuj.mittal@oss.qualcomm.com> References: <20261029054612.2642345-1-anuj.mittal@oss.qualcomm.com> MIME-Version: 1.0 X-Proofpoint-Spam-Details-Enc: AW1haW4tMjYxMDI5MDAyMSBTYWx0ZWRfX2otdGs4W6SNH Zlfwoc4k2gk8d9kc0+5JvHiCS/xaCfvBl3id9duypeh5uyVVAZIdFUJQWo78NEpAfJUDqTnsUmo Ur1UObYcLixzDUtGCObQ9EYPJJk6QewBHG4yhqv23MbczrOFHtOpjre1jljCa82VvNTcOAiNLzK i0Hi86nHlDeLF8lg5lozcvSA8ck4h5wAY7KFjTSVRCaus5xnUgnM6rTzocRiAAV4Zdjomhrjj7p hLHIx2i/aEfFs7Z9518dRnh3gw5lXLCT0mqKuCOjnvfxLSK8QQfo4yIO2SgKxEWkNdGYQZqzI/F ltfBPFp/KXyZnfZ5QbHNRfr2ZUoDZTTHvooksmGivy5moNz10YBMT1OP0/XVXBQbtbPMZRmbuLG wWCpVELpnZBI51iAblF2C/tPvcfov6rvGqrArDt1X24IJRxfsYf3A0LNAuzT3MkCoB0CsHTSKAI gaVnQ0ThNJwsFaqswiA== X-Proofpoint-Spam-Info: AW1haW4tMjYxMDI5MDAyMSBTYWx0ZWRfX8SMPH00Kl5Uq QGH+UFOKIrdCmwDxwzLJzEaPvVZXM7utc4uMeDRbmJqKi8DGmfNc24b2ruDFe8GA3gB7jz55GQd xNWIWQtbIT/ysAiCgwlF+qwCScRVGtA= X-Proofpoint-ORIG-GUID: ZSHw3nlO8MtSchuYMzE-fRSW3B8xJoem X-Proofpoint-GUID: ZSHw3nlO8MtSchuYMzE-fRSW3B8xJoem X-Authority-Analysis: v=2.4 cv=T4oZ3PKQ c=1 sm=1 tr=0 ts=6ae2ddb3 cx=c_pps a=Uww141gWH0fZj/3QKPojxA==:117 a=ZePRamnt/+rB5gQjfz0u9A==:17 a=660iZSQnnn4A:10 a=s4-Qcg_JpJYA:10 a=VkNPw1HP01LnGYTKEx00:22 a=u7WPNUs3qKkmUXheDGA7:22 a=gowsoOTTUOVcmtlkKump:22 a=EUspDBNiAAAA:8 a=myS4-9Of38x73851HoIA:9 a=PxkB5W3o20Ba91AHUih5:22 X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1176,Hydra:6.1.138,FMLib:17.12.100.49 definitions=2026-10-29_02,2026-10-21_02,2025-10-01_01 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 suspectscore=0 adultscore=0 bulkscore=0 priorityscore=1501 spamscore=0 clxscore=1015 lowpriorityscore=0 malwarescore=0 impostorscore=0 phishscore=0 classifier=typeunknown authscore=0 authtc= authcc= route=outbound adjust=0 reason=mlx scancount=1 engine=8.22.0-2610190000 definitions=main-2610290021 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Thu, 29 Oct 2026 05:46:38 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131637 From: Khem Raj frr's configure links libatomic whenever the toolchain merely has it: AC_CHECK_LIB([atomic], [main], [LIBS="$LIBS -latomic"], [], []) This probe only asks whether -latomic links, never whether frr needs a symbol from it. On x86-64 the atomics frr uses are inlined, so the resulting native clippy references no __atomic_* symbol at all, yet still records a DT_NEEDED on libatomic.so.1. Nothing prunes it: ASNEEDED is part of TARGET_LDFLAGS only, so native links get no --as-needed. Nothing can satisfy it either: clippy's RUNPATH points solely into recipe-sysroot-native, there is no libatomic-native, and uninative only rewrites the ELF interpreter. buildtools-extended-tarball ships nativesdk-libatomic, so on hosts using buildtools (Rocky 8, Alma 8, openSUSE on the autobuilder) the probe succeeds at link time while the loader cannot find libatomic later, and the target do_compile dies executing clippy: clippy: error while loading shared libraries: libatomic.so.1: cannot open shared object file: No such file or directory Hosts with a system libatomic in the default loader path, such as Ubuntu with libatomic1 installed, only avoid this by accident. Link native clippy with --as-needed so the unused libatomic dependency is dropped, making the frr-native artifact independent of the build host. Fixes [YOCTO #15590] and [YOCTO #15590] Signed-off-by: Khem Raj (cherry picked from commit 1c1e7a0bc7977f2cd7c3d8e95a8dc1ffda20b365) Signed-off-by: Anuj Mittal --- meta-networking/recipes-protocols/frr/frr_10.6.1.bb | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/meta-networking/recipes-protocols/frr/frr_10.6.1.bb b/meta-networking/recipes-protocols/frr/frr_10.6.1.bb index 1cd102f0da..8f53cf68d5 100644 --- a/meta-networking/recipes-protocols/frr/frr_10.6.1.bb +++ b/meta-networking/recipes-protocols/frr/frr_10.6.1.bb @@ -67,6 +67,14 @@ LDFLAGS:append:mipsel = " -latomic" LDFLAGS:append:powerpc = " -latomic" LDFLAGS:append:riscv32 = " -latomic" +# configure links -latomic whenever the toolchain merely has it +# (AC_CHECK_LIB([atomic],[main])) rather than when it is needed. buildtools ships +# libatomic, so clippy gets a DT_NEEDED that the loader cannot resolve later: +# BUILD_LDFLAGS has no --as-needed, there is no libatomic-native, and uninative +# only rewrites the interpreter. Hosts without a system libatomic then fail with +# "clippy: error while loading shared libraries: libatomic.so.1". +LDFLAGS:append:class-native = " -Wl,--as-needed" + SYSTEMD_PACKAGES = "${PN}" SYSTEMD_SERVICE:${PN} = "frr.service" SYSTEMD_AUTO_ENABLE = "disable"