From 822ae72861d7789c1379c13f025c183014cbc3c3 Mon Sep 17 00:00:00 2001 From: Gyorgy Sarvari Date: Thu, 30 Apr 2026 23:46:26 +1200 Subject: [PATCH] xdg-dbus-proxy: upgrade 0.1.6 -> 0.1.7 Contains fix for CVE-2026-34080. Since it is tracked without version info by NVD, mark it explicitily as patched. Drop the patch that is included in this release. While here, also add the recipe to the ptest list - it's a fast one, runs under a second. Changelog: - Drop the autotools build system - Unbreak the CI - Prevent a crash on disconnect - Fix building with glibc >= 2.43 - Fix the eavesdrop filtering to prevent message interception Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj Signed-off-by: Ankur Tyagi Signed-off-by: Anuj Mittal --- .../{xdg-dbus-proxy_0.1.6.bb => xdg-dbus-proxy_0.1.7.bb} | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) rename meta-oe/recipes-support/xdg-dbus-proxy/{xdg-dbus-proxy_0.1.6.bb => xdg-dbus-proxy_0.1.7.bb} (75%) diff --git a/meta-oe/recipes-support/xdg-dbus-proxy/xdg-dbus-proxy_0.1.6.bb b/meta-oe/recipes-support/xdg-dbus-proxy/xdg-dbus-proxy_0.1.7.bb similarity index 75% rename from meta-oe/recipes-support/xdg-dbus-proxy/xdg-dbus-proxy_0.1.6.bb rename to meta-oe/recipes-support/xdg-dbus-proxy/xdg-dbus-proxy_0.1.7.bb index 43536f5d7b..36b046482e 100644 --- a/meta-oe/recipes-support/xdg-dbus-proxy/xdg-dbus-proxy_0.1.6.bb +++ b/meta-oe/recipes-support/xdg-dbus-proxy/xdg-dbus-proxy_0.1.7.bb @@ -11,8 +11,10 @@ DEPENDS = " \ inherit meson pkgconfig -SRC_URI = "git://github.com/flatpak/xdg-dbus-proxy.git;protocol=https;branch=main" +SRC_URI = "git://github.com/flatpak/xdg-dbus-proxy.git;protocol=https;branch=main;tag=${PV}" -SRCREV = "1c1989e56f94b9eb3b7567f8a6e8a0aa16cba496" +SRCREV = "6a170fa77e3cbecb48f9dd2478fe5c0a119eb467" + +CVE_STATUS[CVE-2026-34080] = "fixed-version: fixed in 0.1.7" BBCLASSEXTEND = "native"