From patchwork Sun Nov 15 05:50:55 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: auh@yoctoproject.org X-Patchwork-Id: 104088 Received: from a27-31.smtp-out.us-west-2.amazonses.com (a27-31.smtp-out.us-west-2.amazonses.com [54.240.27.31]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.3014.1794721856430542263 for ; Sat, 14 Nov 2026 21:50:56 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@yoctoproject.org header.s=lvjh2tk576v2ro5mi6k4dt3mc6wpqbky header.b=t95gBmZS; dkim=pass header.i=@amazonses.com header.s=hsbnp7p3ensaochzwyq5wwmceodymuwv header.b=WBlHnsJO; spf=pass (domain: us-west-2.amazonses.com, ip: 54.240.27.31, mailfrom: 010101a1ddc2382f-472e6246-6f10-4118-9a84-c6389afa7523-000000@us-west-2.amazonses.com) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=lvjh2tk576v2ro5mi6k4dt3mc6wpqbky; d=yoctoproject.org; t=1794721855; h=Content-Type:MIME-Version:From:To:Cc:Subject:Message-Id:Date; bh=AoR2bJ72pcTDsImymlCFSa/1cfeZkp1rxKeNpyiJAYA=; b=t95gBmZS+e3JxbXJOOtB9dpqhMNMG/NPJqd7d8ZqSPnoBT8WMbUknS7nv4Gm44ku HjuTVLIsdnLD/YIfidO8TWzNN71XVTfl+rbry+zv/VkafFTsWKqMShnwttyVpGnuHDK J1YO3rhtWqsGaspr1IBVadEm5oXsztkd4VBQVw6s= DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=hsbnp7p3ensaochzwyq5wwmceodymuwv; d=amazonses.com; t=1794721855; h=Content-Type:MIME-Version:From:To:Cc:Subject:Message-Id:Date:Feedback-ID; bh=AoR2bJ72pcTDsImymlCFSa/1cfeZkp1rxKeNpyiJAYA=; b=WBlHnsJOdSGiiAFHKNZn7FOeKAZOaudog2QBmN6Ej+Htrs9L/cSfdMi9JCNEdLfV JM9oSRV0Gp3qNaOfwkib/zoM7aUIFp/QJabl0iEJOB08/n4XeWrG42rtHKBa6XaUvnn 9qLuUJ/bUmr051G47SqrgB5TnKpnlQBgEsEb9WMg= MIME-Version: 1.0 From: auh@yoctoproject.org To: Ross Burton Cc: openembedded-core@lists.openembedded.org Subject: [AUH] libical: upgrading to 4.0.8 SUCCEEDED Message-ID: <010101a1ddc2382f-472e6246-6f10-4118-9a84-c6389afa7523-000000@us-west-2.amazonses.com> Date: Sun, 15 Nov 2026 05:50:55 +0000 Feedback-ID: ::1.us-west-2.9np3MYPs3fEaOBysGKSlUD4KtcmPijcmS9Az2Hwf7iQ=:AmazonSES X-SES-Outgoing: 2026.11.15-54.240.27.31 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Sun, 15 Nov 2026 05:51:01 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/250230 Hello, this email is a notification from the Auto Upgrade Helper that the automatic attempt to upgrade the recipe(s) *libical* to *4.0.8* has Succeeded. Next steps: - apply the patch: git am 0001-libical-upgrade-4.0.7-4.0.8.patch - check the changes to upstream patches and summarize them in the commit message, - compile an image that contains the package - perform some basic sanity tests - amend the patch and sign it off: git commit -s --reset-author --amend - send it to the appropriate mailing list Alternatively, if you believe the recipe should not be upgraded at this time, you can fill RECIPE_NO_UPDATE_REASON in respective recipe file so that automatic upgrades would no longer be attempted. Please review the attached files for further information and build/update failures. Any problem please file a bug at https://bugzilla.yoctoproject.org/enter_bug.cgi?product=Automated%20Update%20Handler Regards, The Upgrade Helper -- >8 -- From 76e9425e16f39b6d5df4a397ae252ac707cc0344 Mon Sep 17 00:00:00 2001 From: Upgrade Helper Date: Sun, 15 Nov 2026 05:48:08 +0000 Subject: [PATCH] libical: upgrade 4.0.7 -> 4.0.8 # Libical v4.0.7 ## Overview This is a patch release and is fully source and binary compatible with version 4.0.0. [Note: the libicalvcard is a released as a *Technical Preview*. As such, its API is not finalized and no source or binary compatibility is guaranteed with that library in the 4.0.x series.] ## ReleaseNotes - libicalvcard: - `vcardcomponent_clone()` and friends now deep-copy TEXTLIST values (e.g. NICKNAME, CATEGORIES) and structured parameters (JSCOMPS), and keep the property group. Previously the clone shared them with the original, so freeing both freed the same memory twice. - Fixed a use-after-free and a memory leak when converting a vCalendar procedure alarm (PALARM) whose attachment is a plain path name. - libical: - Fix busy status of recurring events in `icalcomponent_foreach_recurrence()`. - Fix `icalvalue_decode_ical_string()` and `icallangbind_property_eval_string()` reading past the end of a string that ends in a backslash or a newline. - `icaltimezone_truncate_vtimezone()` no longer reads the RRULE after freeing it when the new DTSTART is within a year of UNTIL (RSCALE rules), and no longer uses an uninitialized onset when no RRULE occurrence falls before the window close. - Fix IMAGE and STRUCTURED-DATA given by URI (with or without VALUE=URI) parsing to a URI value, whose string `icalproperty_get_image()` and `icalproperty_get_structureddata()` then read as an icalattach pointer. - Fix use-after-free and double free in `icalcomponent_merge_component()` when both calendars have a VTIMEZONE with the same TZID. Every VTIMEZONE of the merged calendar is now merged, and a conflicting VTIMEZONE is added under a renamed TZID (e.g. "Zone1") that its events use. - Fix out-of-bounds access to the year days bitmask in the recurrence iterator when an RSCALE date falls outside the year (e.g. BYWEEKNO with a DTSTART before the calendar's epoch). - Fix `icalrecur_iterator_set_range()` for a reverse range on a rule without UNTIL, which started the iteration at year 0 instead of at 'from'. - Fix `icalparser_clean()` for proper reuse by resetting internal structure values and clearing the root component to avoid a use-after-free. - Behavior change: The typed icalvalue getters now check that the value type of the icalvalue uses the same union member as the expected value type of the getter, as the vcardvalue getters have done since version 4.0.6. If the type mismatches, then they return the zero value for the expected value type. The typed setters error with ICAL_BADARG_ERROR instead of overwriting a value held in another union member. - libicalss: - Fix heap-buffer-overflow in `icalspanlist_as_freebusy_matrix()` for busy spans that start before or end after the spanlist. `icalspanlist_from_vfreebusy()` now sets the spanlist start/end from DTSTART/DTEND and marks FBTYPE=FREE periods as free (all others as busy). - Buildsystem changes: - Fix CMake command target_link_libraries() to use all-keywords as required since CMake v4.4.4. - When cross-compiling, don't build/install ical-glib-src-generator w/o existing binary Please see the [CHANGELOG](https://github.com/libical/libical/blob/4.0/CHANGELOG.md) for more. # Libical v4.0.8 ## Overview This is a patch release and is fully source and binary compatible with version 4.0.0. Version 4.0.8 will likely be the last release in the 4.0.x series. Version 4.1.0 is on our planning board for the next release. [Note: the libicalvcard is a released as a *Technical Preview*. As such, its API is not finalized and no source or binary compatibility is guaranteed with that library in the 4.0.x series.] ## ReleaseNotes - Built-in timezones updated to tzdata2026f. - libicalvcard: - BDAY, ANNIVERSARY and DEATHDATE with a timestamp value, such as `19531015T231000Z`, were written with `VALUE=TIMESTAMP`. RFC 6350 does not allow TIMESTAMP for these properties, but a TIMESTAMP is a valid DATE-TIME value. The VALUE parameter is now omitted. - Various fixes for fuzzer issues (OOM and cpu time). - libicalvcal: - Fix an out-of-bounds write when decoding a BASE64 value whose padding contains more than two `=` characters. The decoder computed the output length as `3 - pad`, which wrapped to a huge value when `pad` exceeded 3 and was then used as the size of a `memcpy`. - Reject a vCalendar RRULE/EXRULE interval of 0 or one that does not fit in a short. Such an interval was converted into an iCalendar RRULE that never advances, so expanding it (e.g. with `icalcomponent_foreach_recurrence()`) looped forever. - Fix an out-of-bounds read in the lexer. When a value folded across lines put a newline at the last slot of the lookahead ring buffer, `lexLookahead()` peeked at the next character with `lexB [Changelog truncated as it exceeds 5000 characters; the full changelog can be found in an attachment to the AUH email] --- .../libical/{libical_4.0.7.bb => libical_4.0.8.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-support/libical/{libical_4.0.7.bb => libical_4.0.8.bb} (96%) diff --git a/meta/recipes-support/libical/libical_4.0.7.bb b/meta/recipes-support/libical/libical_4.0.8.bb similarity index 96% rename from meta/recipes-support/libical/libical_4.0.7.bb rename to meta/recipes-support/libical/libical_4.0.8.bb index cbfcb0675e..fcd49b176c 100644 --- a/meta/recipes-support/libical/libical_4.0.7.bb +++ b/meta/recipes-support/libical/libical_4.0.8.bb @@ -11,7 +11,7 @@ LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=6d9294493d031c817783b0400a126c89 \ SECTION = "libs" SRC_URI = "${GITHUB_BASE_URI}/download/v${PV}/${BP}.tar.gz" -SRC_URI[sha256sum] = "47c05bc96e41416578cf1803bb2ba3f8d292cb17d5ac2fca539dee922bae8a94" +SRC_URI[sha256sum] = "cd486bb3ece8256c34f1a236e174992c66ecb46b592a65f3f55d24d49eb66a5d" inherit cmake pkgconfig gobject-introspection vala github-releases