Hello, this email is a notification from the Auto Upgrade Helper that the automatic attempt to upgrade the recipe(s) *libslirp* to *4.9.6* has Succeeded.
Next steps:
- apply the patch: git am 0001-libslirp-upgrade-4.9.5-4.9.6.patch
- check the changes to upstream patches and summarize them in the commit
message,
- compile an image that contains the package
- perform some basic sanity tests
- amend the patch and sign it off: git commit -s --reset-author --amend
- send it to the appropriate mailing list
Alternatively, if you believe the recipe should not be upgraded at this time,
you can fill RECIPE_NO_UPDATE_REASON in respective recipe file so that
automatic upgrades would no longer be attempted.
Please review the attached files for further information and build/update
failures.
Any problem please file a bug at
https://bugzilla.yoctoproject.org/enter_bug.cgi?product=Automated%20Update%20Handler
Regards,
The Upgrade Helper
-- >8 --
>From dbfb42c57dbfac4828bfc3c7410ec1684783bc28 Mon Sep 17 00:00:00 2001
From: Upgrade Helper <[email protected]>
Date: Sun, 25 Oct 2026 05:11:13 +0000
Subject: [PATCH] libslirp: upgrade 4.9.5 -> 4.9.6
## [4.9.6] - 2026-10-25
## Security
- Fix Buffer Underflow in `tftp_handle_rrq()` When Handling Empty Filename
#100
- Fix Echo Reply Length Desynchronization in `icmp_receive()` and
`icmp6_receive()` #105
- Reject martians
- tftp: check actual available room
## Fixed
- Fix memory leak of tftp_server_name #99
- Fix Protocol Type Mismatch in `icmp6_receive()`: IPv4 `ICMP_UNREACH` Emitted
as ICMPv6 #101
- Fix Double Socket Descriptor Leak in `fork_exec()` on Argument Parsing
Failure #102
- Fix Socket Heap Memory & Buffer Leak in `slirp_state_load()` on
Deserialization or Validation Failure #103
- Avoid Non-Reentrant Static Variable in `tcp_emu()` #104
- pingtest: use SLIRP_CONFIG_VERSION_MAX
- icmp: preserve guest TTL and forward traceroute ICMP errors !166
- dns: proxy DNS queries sent to the virtual gateway address !163
- tftp: Drop TFTP_BLOCKSIZE_MAX
- Fix bounds-check in processing OEM commands (CVE-2026-95507)
- Fix bounds-check in dhcpv6 against MTU (CVE-2026-95508)
[Unreleased]:
https://gitlab.freedesktop.org/slirp/libslirp/compare/v4.9.6...master
[4.9.5]: https://gitlab.freedesktop.org/slirp/libslirp/compare/v4.9.5...v4.9.6
---
.../slirp/{libslirp_4.9.5.bb => libslirp_4.9.6.bb} | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
rename meta/recipes-connectivity/slirp/{libslirp_4.9.5.bb =>
libslirp_4.9.6.bb} (92%)
diff --git a/meta/recipes-connectivity/slirp/libslirp_4.9.5.bb
b/meta/recipes-connectivity/slirp/libslirp_4.9.6.bb
similarity index 92%
rename from meta/recipes-connectivity/slirp/libslirp_4.9.5.bb
rename to meta/recipes-connectivity/slirp/libslirp_4.9.6.bb
index d77121bf30..9d231f111d 100644
--- a/meta/recipes-connectivity/slirp/libslirp_4.9.5.bb
+++ b/meta/recipes-connectivity/slirp/libslirp_4.9.6.bb
@@ -6,7 +6,7 @@ LIC_FILES_CHKSUM =
"file://COPYRIGHT;md5=f95a9bf4a7e411164fe843697ccda59e \
file://LICENSE;md5=cfea6044642fd63b90ce9d79f5db64d9"
SRC_URI =
"git://gitlab.freedesktop.org/slirp/libslirp.git;protocol=https;branch=master;tag=v${PV}"
-SRCREV = "390848f47391f412451b2d259d8527fabb51e5e3"
+SRCREV = "392af90207fc51dd9f9044ee9b1f963f3c851c2c"
UPSTREAM_CHECK_GITTAGREGEX = "v(?P<pver>\d+(\.\d+)+)"
DEPENDS = "glib-2.0"
--
2.47.1
packages/x86-64-v3-poky-linux/libslirp: PV changed from "4.9.5" to "4.9.6" packages/x86-64-v3-poky-linux/libslirp: SRC_URI changed from "git://gitlab.freedesktop.org/slirp/libslirp.git;protocol=https;branch=master;tag=v4.9.5" to "git://gitlab.freedesktop.org/slirp/libslirp.git;protocol=https;branch=master;tag=v4.9.6" packages/x86-64-v3-poky-linux/libslirp: PKGV changed from 4.9.5 [default] to 4.9.6 [default] packages/x86-64-v3-poky-linux/libslirp/libslirp-dbg: PV changed from "4.9.5" to "4.9.6" packages/x86-64-v3-poky-linux/libslirp/libslirp-dbg: PKGV changed from 4.9.5 [default] to 4.9.6 [default] packages/x86-64-v3-poky-linux/libslirp/libslirp-dbg: PKGSIZE changed from 598568 to 608568 (+2%) packages/x86-64-v3-poky-linux/libslirp/libslirp-dev: PV changed from "4.9.5" to "4.9.6" packages/x86-64-v3-poky-linux/libslirp/libslirp-dev: PKGV changed from 4.9.5 [default] to 4.9.6 [default] packages/x86-64-v3-poky-linux/libslirp/libslirp-doc: PV changed from "4.9.5" to "4.9.6" packages/x86-64-v3-poky-linux/libslirp/libslirp-doc: PKGV changed from 4.9.5 [default] to 4.9.6 [default] packages/x86-64-v3-poky-linux/libslirp/libslirp-locale: PV changed from "4.9.5" to "4.9.6" packages/x86-64-v3-poky-linux/libslirp/libslirp-locale: PKGV changed from 4.9.5 [default] to 4.9.6 [default] packages/x86-64-v3-poky-linux/libslirp/libslirp-src: PV changed from "4.9.5" to "4.9.6" packages/x86-64-v3-poky-linux/libslirp/libslirp-src: PKGV changed from 4.9.5 [default] to 4.9.6 [default] packages/x86-64-v3-poky-linux/libslirp/libslirp-src: FILELIST: directory renamed /usr/src/debug/libslirp/4.9.5/src -> /usr/src/debug/libslirp/4.9.6/src packages/x86-64-v3-poky-linux/libslirp/libslirp-src: PKGSIZE changed from 590033 to 607086 (+3%) packages/x86-64-v3-poky-linux/libslirp/libslirp-staticdev: PV changed from "4.9.5" to "4.9.6" packages/x86-64-v3-poky-linux/libslirp/libslirp-staticdev: PKGV changed from 4.9.5 [default] to 4.9.6 [default] packages/x86-64-v3-poky-linux/libslirp/libslirp: PV changed from "4.9.5" to "4.9.6" packages/x86-64-v3-poky-linux/libslirp/libslirp: PKGV changed from 4.9.5 [default] to 4.9.6 [default] packages/x86-64-v3-poky-linux/libslirp/libslirp: PKGSIZE changed from 152793 to 156889 (+3%)
0001-libslirp-upgrade-4.9.5-4.9.6.patch
Description: Binary data
## [4.9.6] - 2026-10-25
## Security
- Fix Buffer Underflow in `tftp_handle_rrq()` When Handling Empty Filename
#100
- Fix Echo Reply Length Desynchronization in `icmp_receive()` and
`icmp6_receive()` #105
- Reject martians
- tftp: check actual available room
## Fixed
- Fix memory leak of tftp_server_name #99
- Fix Protocol Type Mismatch in `icmp6_receive()`: IPv4 `ICMP_UNREACH` Emitted
as ICMPv6 #101
- Fix Double Socket Descriptor Leak in `fork_exec()` on Argument Parsing
Failure #102
- Fix Socket Heap Memory & Buffer Leak in `slirp_state_load()` on
Deserialization or Validation Failure #103
- Avoid Non-Reentrant Static Variable in `tcp_emu()` #104
- pingtest: use SLIRP_CONFIG_VERSION_MAX
- icmp: preserve guest TTL and forward traceroute ICMP errors !166
- dns: proxy DNS queries sent to the virtual gateway address !163
- tftp: Drop TFTP_BLOCKSIZE_MAX
- Fix bounds-check in processing OEM commands (CVE-2026-95507)
- Fix bounds-check in dhcpv6 against MTU (CVE-2026-95508)
[Unreleased]:
https://gitlab.freedesktop.org/slirp/libslirp/compare/v4.9.6...master
[4.9.5]: https://gitlab.freedesktop.org/slirp/libslirp/compare/v4.9.5...v4.9.6
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#248598): https://lists.openembedded.org/g/openembedded-core/message/248598 Mute This Topic: https://lists.openembedded.org/mt/121923968/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
