To: ['Chen Qi ', 'Chen Qi '] To: openembedded-core@lists.openembedded.org Subject: [AUH] util-linux,util-linux-libuuid: upgrading to 2.42.3,2.42.3 FAILED Attachments: /srv/pokybuild/yocto-worker/auh/build/build/upgrade-helper/20260903050102/all/util-linux,util-linux-libuuid/util-linux-libuuid-changelog.txt /srv/pokybuild/yocto-worker/auh/build/build/upgrade-helper/20260903050102/all/util-linux,util-linux-libuuid/util-linux-changelog.txt /srv/pokybuild/yocto-worker/auh/build/build/upgrade-helper/20260903050102/all/util-linux,util-linux-libuuid/bitbake-output-qemux86-64.txt /srv/pokybuild/yocto-worker/auh/build/build/upgrade-helper/20260903050102/all/util-linux,util-linux-libuuid/0001-util-linux-util-linux-libuuid-upgrade-2.42.2-2.42.3-.patch Hello, this email is a notification from the Auto Upgrade Helper that the automatic attempt to upgrade the recipe(s) *util-linux,util-linux-libuuid* to *2.42.3,2.42.3* has Failed(do_compile). Detailed error information: do_compile failed Next steps: - apply the patch: git am 0001-util-linux-util-linux-libuuid-upgrade-2.42.2-2.42.3-.patch - check the changes to upstream patches and summarize them in the commit message, - compile an image that contains the package - perform some basic sanity tests - amend the patch and sign it off: git commit -s --reset-author --amend - send it to the appropriate mailing list Alternatively, if you believe the recipe should not be upgraded at this time, you can fill RECIPE_NO_UPDATE_REASON in respective recipe file so that automatic upgrades would no longer be attempted. Please review the attached files for further information and build/update failures. Any problem please file a bug at https://bugzilla.yoctoproject.org/enter_bug.cgi?product=Automated%20Update%20Handler Regards, The Upgrade Helper -- >8 -- From cdaa5542eb029c463c1c66a957fe8ef4a033eca6 Mon Sep 17 00:00:00 2001 From: Upgrade Helper Date: Thu, 3 Sep 2026 05:13:18 +0000 Subject: [PATCH] util-linux,util-linux-libuuid: upgrade 2.42.2 -> 2.42.3,2.42.2 -> 2.42.3 Source: Documentation/releases/v2.42-ReleaseNotes, Documentation/releases/v2.42.2-ReleaseNotes, Documentation/releases/v2.42.3-ReleaseNotes util-linux 2.42 Release Notes ============================= Security fixes: CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop device. The SUID mount follows symlinks when resolving loop backing file paths. On systems where non-root users are permitted to mount loop devices (via 'user' option in fstab), this allows access to arbitrary files. CWE-190 - Integer overflow in libblkid parse_dos_extended(). A crafted MBR disk image can cause uint32_t wraparound in EBR chain processing, causing reported partitions to not match the on-disk layout. Tools like udisks may then register a partition at logical sector 0. Release highlights: The NTFS mount type (kernel FS driver) can be changed by the compile option --with-ntfs-mounttype=, the default is ntfs3. login(1) now uses the original FQDN (as specified by "-h ") to configure the PAM RHOST item. All previous versions used the hostname without domain. This may affect users who use login(1) for remote access (rlogin, rsh) and pam_access to define access rules. (Don't worry, if you still use rlogin then security is already irrelevant for you.) login(1), if configured with LOGIN_SHELL_FALLBACK in login.defs, can fall back to another valid shell from /etc/shells if the user's configured shell is inaccessible due to administrative errors. agetty reads issue file(s) in a way compatible with libeconf and systemd, hermetic-usr and drop-ins are now supported. For more details see https://uapi-group.org/specifications/specs/configuration_files_specification/ agetty uses netlink to get network interface information for issue file output. The libsmartcols-based tools with JSON support can now produce additional JSON formats. The output format may be changed by LIBSMARTCOLS_JSON={lines,compact} environment variable. column(1) now supports colors. New command copyfilerange(1) to copy file ranges using the copy_file_range() syscall. New command getino(1) to print the unique inode number associated with a process file descriptor or namespace for a given PID. fadvise(1) now supports --fd to address a file by file descriptor rather than by path. fallocate(1) now supports --report-holes to scan the file and report the distribution of holes. A significant performance regression has been fixed in hardlink(1). hexdump(1) now supports FIEMAP-based sparse file optimization. kill(1), waitpid(1) and nsenter(1) now support the PID:INO convention to precisely address processes. mount(8) now supports --beneath to atomically replace a filesystem at a mountpoint. mount(8) now supports --exclusive to ensure that the filesystem is mounted as a unique instance and that the superblock is not reused by the kernel. libmount now reads filesystem information from udevd (with fallback to classic libblkid-based detection). This feature can be disabl [Changelog truncated as it exceeds 3000 characters; the full changelog can be found in an attachment to the AUH email] Source: Documentation/releases/v2.42-ReleaseNotes, Documentation/releases/v2.42.2-ReleaseNotes, Documentation/releases/v2.42.3-ReleaseNotes util-linux 2.42 Release Notes ============================= Security fixes: CVE-2026-27456 - mount(8) TOCTOU symlink attack via loop device. The SUID mount follows symlinks when resolving loop backing file paths. On systems where non-root users are permitted to mount loop devices (via 'user' option in fstab), this allows access to arbitrary files. CWE-190 - Integer overflow in libblkid parse_dos_extended(). A crafted MBR disk image can cause uint32_t wraparound in EBR chain processing, causing reported partitions to not match the on-disk layout. Tools like udisks may then register a partition at logical sector 0. Release highlights: The NTFS mount type (kernel FS driver) can be changed by the compile option --with-ntfs-mounttype=, the default is ntfs3. login(1) now uses the original FQDN (as specified by "-h ") to configure the PAM RHOST item. All previous versions used the hostname without domain. This may affect users who use login(1) for remote access (rlogin, rsh) and pam_access to define access rules. (Don't worry, if you still use rlogin then security is already irrelevant for you.) login(1), if configured with LOGIN_SHELL_FALLBACK in login.defs, can fall back to another valid shell from /etc/shells if the user's configured shell is inaccessible due to administrative errors. agetty reads issue file(s) in a way compatible with libeconf and systemd, hermetic-usr and drop-ins are now supported. For more details see https://uapi-group.org/specifications/specs/configuration_files_specification/ agetty uses netlink to get network interface information for issue file output. The libsmartcols-based tools with JSON support can now produce additional JSON formats. The output format may be changed by LIBSMARTCOLS_JSON={lines,compact} environment variable. column(1) now supports colors. New command copyfilerange(1) to copy file ranges using the copy_file_range() syscall. New command getino(1) to print the unique inode number associated with a process file descriptor or namespace for a given PID. fadvise(1) now supports --fd to address a file by file descriptor rather than by path. fallocate(1) now supports --report-holes to scan the file and report the distribution of holes. A significant performance regression has been fixed in hardlink(1). hexdump(1) now supports FIEMAP-based sparse file optimization. kill(1), waitpid(1) and nsenter(1) now support the PID:INO convention to precisely address processes. mount(8) now supports --beneath to atomically replace a filesystem at a mountpoint. mount(8) now supports --exclusive to ensure that the filesystem is mounted as a unique instance and that the superblock is not reused by the kernel. libmount now reads filesystem information from udevd (with fallback to classic libblkid-based detection). This feature can be disabl [Changelog truncated as it exceeds 3000 characters; the full changelog can be found in an attachment to the AUH email] --- ...l-linux-libuuid_2.42.2.bb => util-linux-libuuid_2.42.3.bb} | 0 meta/recipes-core/util-linux/util-linux.inc | 2 +- .../0001-tests-script-Disable-size-option-test.patch | 2 +- .../util-linux/util-linux/avoid_parallel_tests.patch | 4 ++-- .../util-linux/util-linux/configure-sbindir.patch | 4 ++-- .../util-linux/util-linux/display_testname_for_subtest.patch | 2 +- meta/recipes-core/util-linux/util-linux/ptest.patch | 2 +- .../util-linux/{util-linux_2.42.2.bb => util-linux_2.42.3.bb} | 0 8 files changed, 8 insertions(+), 8 deletions(-) rename meta/recipes-core/util-linux/{util-linux-libuuid_2.42.2.bb => util-linux-libuuid_2.42.3.bb} (100%) rename meta/recipes-core/util-linux/{util-linux_2.42.2.bb => util-linux_2.42.3.bb} (100%) diff --git a/meta/recipes-core/util-linux/util-linux-libuuid_2.42.2.bb b/meta/recipes-core/util-linux/util-linux-libuuid_2.42.3.bb similarity index 100% rename from meta/recipes-core/util-linux/util-linux-libuuid_2.42.2.bb rename to meta/recipes-core/util-linux/util-linux-libuuid_2.42.3.bb diff --git a/meta/recipes-core/util-linux/util-linux.inc b/meta/recipes-core/util-linux/util-linux.inc index ee9291fb4f..a905bea952 100644 --- a/meta/recipes-core/util-linux/util-linux.inc +++ b/meta/recipes-core/util-linux/util-linux.inc @@ -19,7 +19,7 @@ SRC_URI = "${KERNELORG_MIRROR}/linux/utils/util-linux/v${MAJOR_VERSION}/util-lin file://0001-tests-script-Disable-size-option-test.patch \ " -SRC_URI[sha256sum] = "03a05d3adf9602ef128f2da05b84b3205ce60c351e5737c0370f74000679ce8a" +SRC_URI[sha256sum] = "66ac7c0e725278eb2b039e3104f2c91119341d941b41bac7a285c695f940bd57" CVE_PRODUCT = "util-linux" diff --git a/meta/recipes-core/util-linux/util-linux/0001-tests-script-Disable-size-option-test.patch b/meta/recipes-core/util-linux/util-linux/0001-tests-script-Disable-size-option-test.patch index 924c8c6827..31a6a910c2 100644 --- a/meta/recipes-core/util-linux/util-linux/0001-tests-script-Disable-size-option-test.patch +++ b/meta/recipes-core/util-linux/util-linux/0001-tests-script-Disable-size-option-test.patch @@ -1,4 +1,4 @@ -From 078231e4ecb5fa12107cd463f42e4c63ef3ff15c Mon Sep 17 00:00:00 2001 +From 1a237ea247ffe5a6561b60b407092620e91c0708 Mon Sep 17 00:00:00 2001 From: Paul Barker Date: Mon, 5 Jan 2026 09:56:41 +0000 Subject: [PATCH] tests: script: Disable size option test diff --git a/meta/recipes-core/util-linux/util-linux/avoid_parallel_tests.patch b/meta/recipes-core/util-linux/util-linux/avoid_parallel_tests.patch index 44a8d768d2..053e524ca7 100644 --- a/meta/recipes-core/util-linux/util-linux/avoid_parallel_tests.patch +++ b/meta/recipes-core/util-linux/util-linux/avoid_parallel_tests.patch @@ -1,4 +1,4 @@ -From 4303ca5212f78fa276be750e077303f5090b7e33 Mon Sep 17 00:00:00 2001 +From 9679bd524bbd193ab01a3a170397ca7f21f5a34d Mon Sep 17 00:00:00 2001 From: Tudor Florea Date: Mon, 14 Jun 2021 14:00:31 +0200 Subject: [PATCH] util-linux: Add ptest @@ -14,7 +14,7 @@ Upstream-Status: Inappropriate 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/configure.ac b/configure.ac -index e2061e7..f816656 100644 +index ea3875e..9e0377e 100644 --- a/configure.ac +++ b/configure.ac @@ -11,7 +11,7 @@ AC_CONFIG_MACRO_DIR([m4]) diff --git a/meta/recipes-core/util-linux/util-linux/configure-sbindir.patch b/meta/recipes-core/util-linux/util-linux/configure-sbindir.patch index 6d50cfd2c0..f8e5e4408e 100644 --- a/meta/recipes-core/util-linux/util-linux/configure-sbindir.patch +++ b/meta/recipes-core/util-linux/util-linux/configure-sbindir.patch @@ -1,4 +1,4 @@ -From d91f680b43b0c70ee7c4f3b74996c342ca15129e Mon Sep 17 00:00:00 2001 +From d24163b76ea4c2881be71baa8425e22c6cf94cae Mon Sep 17 00:00:00 2001 From: Phil Blundell Date: Mon, 24 Sep 2012 07:24:51 +0100 Subject: [PATCH] util-linux: Ensure that ${sbindir} is respected @@ -14,7 +14,7 @@ Upstream-Status: Inappropriate [configuration] 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/configure.ac b/configure.ac -index 13bed69..e2061e7 100644 +index 50ed64d..ea3875e 100644 --- a/configure.ac +++ b/configure.ac @@ -110,7 +110,10 @@ AC_SUBST([runstatedir]) diff --git a/meta/recipes-core/util-linux/util-linux/display_testname_for_subtest.patch b/meta/recipes-core/util-linux/util-linux/display_testname_for_subtest.patch index 1382e10c30..b9d48a7401 100644 --- a/meta/recipes-core/util-linux/util-linux/display_testname_for_subtest.patch +++ b/meta/recipes-core/util-linux/util-linux/display_testname_for_subtest.patch @@ -1,4 +1,4 @@ -From 42cfda0aa633f3a6786be1e490202cc9fe89e4e5 Mon Sep 17 00:00:00 2001 +From 52d9226b78d54b16260d3341aecc2b4c112b9a78 Mon Sep 17 00:00:00 2001 From: Tudor Florea Date: Thu, 3 Dec 2015 04:08:00 +0100 Subject: [PATCH] Display testname for subtest diff --git a/meta/recipes-core/util-linux/util-linux/ptest.patch b/meta/recipes-core/util-linux/util-linux/ptest.patch index 3c529f2ea5..d4ab0093fa 100644 --- a/meta/recipes-core/util-linux/util-linux/ptest.patch +++ b/meta/recipes-core/util-linux/util-linux/ptest.patch @@ -1,4 +1,4 @@ -From 238020ed859acb41f1f43352afc28db14cecb34e Mon Sep 17 00:00:00 2001 +From b4544bd0a9b947491a15cc04bd22a4d9e0b882d6 Mon Sep 17 00:00:00 2001 From: Tudor Florea Date: Thu, 3 Dec 2015 04:08:00 +0100 Subject: [PATCH] Define TESTS variable diff --git a/meta/recipes-core/util-linux/util-linux_2.42.2.bb b/meta/recipes-core/util-linux/util-linux_2.42.3.bb similarity index 100% rename from meta/recipes-core/util-linux/util-linux_2.42.2.bb rename to meta/recipes-core/util-linux/util-linux_2.42.3.bb -- 2.47.1