[oe][meta-oe][PATCH v2 1/2] smarty: update CVE_PRODUCT

[oe][meta-oe][PATCH v2 1/2] smarty: update CVE_PRODUCT

[ankur.tyagi85]

From: Ankur Tyagi <ankur.tyagi85@gmail.com>

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
changes in v2:
- CVE_PRODUCT change in a separate patch
---
 meta-oe/recipes-support/smarty/smarty_5.4.5.bb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/meta-oe/recipes-support/smarty/smarty_5.4.5.bb b/meta-oe/recipes-support/smarty/smarty_5.4.5.bb
index 047f10589d..7f99b9b5d7 100644
--- a/meta-oe/recipes-support/smarty/smarty_5.4.5.bb
+++ b/meta-oe/recipes-support/smarty/smarty_5.4.5.bb
@@ -34,4 +34,4 @@ FILES:${PN} += "${datadir}/php/smarty3/"
 
 RDEPENDS:${PN} = "php"
 
-CVE_STATUS[CVE-2020-10375] = "cpe-incorrect: The recipe used in the meta-openembedded is a different smarty package compared to the one which has the CVE issue."
+CVE_PRODUCT = "smarty:smarty"

[oe][meta-oe][PATCH v2 2/2] smarty: upgrade 5.4.5 -> 5.4.6

[ankur.tyagi85]

From: Ankur Tyagi <ankur.tyagi85@gmail.com>

Changelog:
https://github.com/smarty-php/smarty/blob/v5.6.0/CHANGELOG.md

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
changes in v2:
- CVE_PRODUCT change in a separate patch
---
 .../recipes-support/smarty/{smarty_5.4.5.bb => smarty_5.4.6.bb} | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta-oe/recipes-support/smarty/{smarty_5.4.5.bb => smarty_5.4.6.bb} (95%)

diff --git a/meta-oe/recipes-support/smarty/smarty_5.4.5.bb b/meta-oe/recipes-support/smarty/smarty_5.4.6.bb
similarity index 95%
rename from meta-oe/recipes-support/smarty/smarty_5.4.5.bb
rename to meta-oe/recipes-support/smarty/smarty_5.4.6.bb
index 7f99b9b5d7..88afc55c15 100644
--- a/meta-oe/recipes-support/smarty/smarty_5.4.5.bb
+++ b/meta-oe/recipes-support/smarty/smarty_5.4.6.bb
@@ -12,7 +12,7 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=2c0f216b2120ffc367e20f2b56df51b3"
 
 SRC_URI = "git://github.com/smarty-php/smarty.git;protocol=https;branch=master;tag=v${PV}"
 
-SRCREV = "e26f82d02c4d18fc82094c28fbc65f711e39ed5d"
+SRCREV = "1fc41e385da8a27a87bec5914392ab662a7bb8ec"
 
 
 INHIBIT_DEFAULT_DEPS = "1"

Re: [oe][meta-oe][PATCH v2 2/2] smarty: upgrade 5.4.5 -> 5.4.6

[Khem Raj]

[-- Attachment #1: Type: text/plain, Size: 2009 bytes --]

some builds are failing

https://errors.yoctoproject.org/Errors/Details/888473/

On Mon, Nov 17, 2025 at 6:55 PM Ankur Tyagi via lists.openembedded.org
<ankur.tyagi85=gmail.com@lists.openembedded.org> wrote:

> From: Ankur Tyagi <ankur.tyagi85@gmail.com>
>
> Changelog:
> https://github.com/smarty-php/smarty/blob/v5.6.0/CHANGELOG.md
>
> Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
> ---
> changes in v2:
> - CVE_PRODUCT change in a separate patch
> ---
>  .../recipes-support/smarty/{smarty_5.4.5.bb => smarty_5.4.6.bb} | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
>  rename meta-oe/recipes-support/smarty/{smarty_5.4.5.bb => smarty_5.4.6.bb}
> (95%)
>
> diff --git a/meta-oe/recipes-support/smarty/smarty_5.4.5.bb
> b/meta-oe/recipes-support/smarty/smarty_5.4.6.bb
> similarity index 95%
> rename from meta-oe/recipes-support/smarty/smarty_5.4.5.bb
> rename to meta-oe/recipes-support/smarty/smarty_5.4.6.bb
> index 7f99b9b5d7..88afc55c15 100644
> --- a/meta-oe/recipes-support/smarty/smarty_5.4.5.bb
> +++ b/meta-oe/recipes-support/smarty/smarty_5.4.6.bb
> @@ -12,7 +12,7 @@ LIC_FILES_CHKSUM =
> "file://LICENSE;md5=2c0f216b2120ffc367e20f2b56df51b3"
>
>  SRC_URI = "git://
> github.com/smarty-php/smarty.git;protocol=https;branch=master;tag=v${PV}
> <http://github.com/smarty-php/smarty.git;protocol=https;branch=master;tag=v$%7BPV%7D>
> "
>
> -SRCREV = "e26f82d02c4d18fc82094c28fbc65f711e39ed5d"
> +SRCREV = "1fc41e385da8a27a87bec5914392ab662a7bb8ec"
>
>
>  INHIBIT_DEFAULT_DEPS = "1"
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#121803):
> https://lists.openembedded.org/g/openembedded-devel/message/121803
> Mute This Topic: https://lists.openembedded.org/mt/116350977/1997914
> Group Owner: openembedded-devel+owner@lists.openembedded.org
> Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [
> raj.khem@gmail.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>
>

[-- Attachment #2: Type: text/html, Size: 4020 bytes --]

Re: [oe][meta-oe][PATCH v2 2/2] smarty: upgrade 5.4.5 -> 5.4.6

[Ankur Tyagi]

On Wed, Nov 19, 2025 at 5:20 AM Khem Raj <raj.khem@gmail.com> wrote:
>
> some builds are failing
>
> https://errors.yoctoproject.org/Errors/Details/888473/
>

thanks Khem, sent v3 to fix them

> On Mon, Nov 17, 2025 at 6:55 PM Ankur Tyagi via lists.openembedded.org <ankur.tyagi85=gmail.com@lists.openembedded.org> wrote:
>>
>> From: Ankur Tyagi <ankur.tyagi85@gmail.com>
>>
>> Changelog:
>> https://github.com/smarty-php/smarty/blob/v5.6.0/CHANGELOG.md
>>
>> Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
>> ---
>> changes in v2:
>> - CVE_PRODUCT change in a separate patch
>> ---
>>  .../recipes-support/smarty/{smarty_5.4.5.bb => smarty_5.4.6.bb} | 2 +-
>>  1 file changed, 1 insertion(+), 1 deletion(-)
>>  rename meta-oe/recipes-support/smarty/{smarty_5.4.5.bb => smarty_5.4.6.bb} (95%)
>>
>> diff --git a/meta-oe/recipes-support/smarty/smarty_5.4.5.bb b/meta-oe/recipes-support/smarty/smarty_5.4.6.bb
>> similarity index 95%
>> rename from meta-oe/recipes-support/smarty/smarty_5.4.5.bb
>> rename to meta-oe/recipes-support/smarty/smarty_5.4.6.bb
>> index 7f99b9b5d7..88afc55c15 100644
>> --- a/meta-oe/recipes-support/smarty/smarty_5.4.5.bb
>> +++ b/meta-oe/recipes-support/smarty/smarty_5.4.6.bb
>> @@ -12,7 +12,7 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=2c0f216b2120ffc367e20f2b56df51b3"
>>
>>  SRC_URI = "git://github.com/smarty-php/smarty.git;protocol=https;branch=master;tag=v${PV}"
>>
>> -SRCREV = "e26f82d02c4d18fc82094c28fbc65f711e39ed5d"
>> +SRCREV = "1fc41e385da8a27a87bec5914392ab662a7bb8ec"
>>
>>
>>  INHIBIT_DEFAULT_DEPS = "1"
>>
>> -=-=-=-=-=-=-=-=-=-=-=-
>> Links: You receive all messages sent to this group.
>> View/Reply Online (#121803): https://lists.openembedded.org/g/openembedded-devel/message/121803
>> Mute This Topic: https://lists.openembedded.org/mt/116350977/1997914
>> Group Owner: openembedded-devel+owner@lists.openembedded.org
>> Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [raj.khem@gmail.com]
>> -=-=-=-=-=-=-=-=-=-=-=-
>>