Openembedded Core Discussions
 help / color / mirror / Atom feed
From: Paul Barker <paul@pbarker.dev>
To: Fabien Thomas <fabien.thomas@smile.fr>,
	 openembedded-core@lists.openembedded.org
Subject: Re: [OE-core][wrynose 03/17] libarchive: fix CVE-2026-14164
Date: Sun, 16 Aug 2026 10:36:22 +0100	[thread overview]
Message-ID: <bc68aa3b2ccc7def8130e240e82c9d4977a12121.camel@pbarker.dev> (raw)
In-Reply-To: <444439890165ed1ceb7dbf68655d320c554e6acd.1786633048.git.fabien.thomas@smile.fr>

On Thu, 2026-08-13 at 17:21 +0200, Fabien Thomas wrote:
> From: Daniel Turull <daniel.turull@ericsson.com>
> 
> Backport patch to fix CVE-2026-14164.
> 
> References:
>   https://nvd.nist.gov/vuln/detail/CVE-2026-14164
> 
> Upstream fix:
>   https://github.com/libarchive/libarchive/commit/f774f03b40cb109348e5c6d52b59c864e3cfa8e8
> 
> Tested with ptest:
> Before: PASSED: 5, FAILED: 0, SKIPPED: 0
> After: PASSED: 5, FAILED: 0, SKIPPED: 0
> 
> Signed-off-by: Daniel Turull <daniel.turull@ericsson.com>
> Signed-off-by: Fabien Thomas <fabien.thomas@smile.fr>

Hi Fabien,

Please drop this one, I've replied to the original patch [1].

[1]: https://lore.kernel.org/openembedded-core/0447ebc9d29b0736de8ba0c75f155ed4f880d072.camel@pbarker.dev/

-- 
Paul Barker



  reply	other threads:[~2026-08-16  9:36 UTC|newest]

Thread overview: 20+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2026-08-13 15:21 [OE-core][wrynose 00/17] Patch review Fabien Thomas
2026-08-13 15:21 ` [OE-core][wrynose 01/17] selftest: uboot: remove duplicated KVM presence test Fabien Thomas
2026-08-13 15:21 ` [OE-core][wrynose 02/17] bind: upgrade 9.20.23 -> 9.20.26 Fabien Thomas
2026-08-13 15:21 ` [OE-core][wrynose 03/17] libarchive: fix CVE-2026-14164 Fabien Thomas
2026-08-16  9:36   ` Paul Barker [this message]
2026-08-13 15:21 ` [OE-core][wrynose 04/17] python3-pyopenssl: set CVE_PRODUCT Fabien Thomas
2026-08-13 15:21 ` [OE-core][wrynose 05/17] python3-pyyaml: " Fabien Thomas
2026-08-13 15:21 ` [OE-core][wrynose 06/17] python3-xmltodict: " Fabien Thomas
2026-08-13 15:21 ` [OE-core][wrynose 07/17] python3-certifi: " Fabien Thomas
2026-08-13 15:21 ` [OE-core][wrynose 08/17] python3-idna: " Fabien Thomas
2026-08-13 15:21 ` [OE-core][wrynose 09/17] cpan_build: disable .packlist and html doc Fabien Thomas
2026-08-13 15:22 ` [OE-core][wrynose 10/17] glibc: CVE-2026-5358 add CVE_STATUS Fabien Thomas
2026-08-16 10:19   ` Paul Barker
2026-08-13 15:22 ` [OE-core][wrynose 11/17] gstreamer1.0: set status for CVE-2026-5056 Fabien Thomas
2026-08-13 15:22 ` [OE-core][wrynose 12/17] python3-pip: set CVE_PRODUCT Fabien Thomas
2026-08-13 15:22 ` [OE-core][wrynose 13/17] oe-selftest: fitimage: Do not expect kernel property in DTBO config subnodes Fabien Thomas
2026-08-13 15:22 ` [OE-core][wrynose 14/17] kernel-fit-image.bbclass: Do not include " Fabien Thomas
2026-08-13 15:22 ` [OE-core][wrynose 15/17] kernel-fit-image.bbclass: Fix operation with KERNEL_DTBVENDORED = "1" Fabien Thomas
2026-08-13 15:22 ` [OE-core][wrynose 16/17] kernel-fit-image: Add KERNEL_DTBVENDORED support for FIT_CONF_DEFAULT_DTB Fabien Thomas
2026-08-13 15:22 ` [OE-core][wrynose 17/17] oe-selftest: fitimage: Add tests for KERNEL_DTBVENDORED Fabien Thomas

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=bc68aa3b2ccc7def8130e240e82c9d4977a12121.camel@pbarker.dev \
    --to=paul@pbarker.dev \
    --cc=fabien.thomas@smile.fr \
    --cc=openembedded-core@lists.openembedded.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox