Patch Detail
get:
Show a patch.
patch:
Update a patch.
put:
Update a patch.
GET /api/1.1/patches/2225291/?format=api
{ "id": 2225291, "url": "http://patchwork.ozlabs.org/api/1.1/patches/2225291/?format=api", "web_url": "http://patchwork.ozlabs.org/project/buildroot/patch/20260420195520.191853-1-thomas.perale@mind.be/", "project": { "id": 27, "url": "http://patchwork.ozlabs.org/api/1.1/projects/27/?format=api", "name": "Buildroot development", "link_name": "buildroot", "list_id": "buildroot.buildroot.org", "list_email": "buildroot@buildroot.org", "web_url": "", "scm_url": "", "webscm_url": "" }, "msgid": "<20260420195520.191853-1-thomas.perale@mind.be>", "date": "2026-04-20T19:55:20", "name": "package/cups: security bump to v2.4.17", "commit_ref": null, "pull_url": null, "state": "accepted", "archived": false, "hash": "bb234db678f1bd00176c4e8bf0d86c3164ecd485", "submitter": { "id": 87308, "url": "http://patchwork.ozlabs.org/api/1.1/people/87308/?format=api", "name": "Thomas Perale", "email": "thomas.perale@mind.be" }, "delegate": { "id": 89618, "url": "http://patchwork.ozlabs.org/api/1.1/users/89618/?format=api", "username": "juju", "first_name": "Julien", "last_name": "Olivain", "email": "juju@cotds.org" }, "mbox": "http://patchwork.ozlabs.org/project/buildroot/patch/20260420195520.191853-1-thomas.perale@mind.be/mbox/", "series": [ { "id": 500671, "url": "http://patchwork.ozlabs.org/api/1.1/series/500671/?format=api", "web_url": "http://patchwork.ozlabs.org/project/buildroot/list/?series=500671", "date": "2026-04-20T19:55:20", "name": "package/cups: security bump to v2.4.17", "version": 1, "mbox": "http://patchwork.ozlabs.org/series/500671/mbox/" } ], "comments": "http://patchwork.ozlabs.org/api/patches/2225291/comments/", "check": "pending", "checks": "http://patchwork.ozlabs.org/api/patches/2225291/checks/", "tags": {}, "headers": { "Return-Path": "<buildroot-bounces@buildroot.org>", "X-Original-To": [ "incoming-buildroot@patchwork.ozlabs.org", "buildroot@buildroot.org" ], "Delivered-To": [ "patchwork-incoming-buildroot@legolas.ozlabs.org", "buildroot@buildroot.org" ], "Authentication-Results": [ "legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=buildroot.org header.i=@buildroot.org\n header.a=rsa-sha256 header.s=default header.b=HWbTZurh;\n\tdkim-atps=neutral", "legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=buildroot.org\n (client-ip=2605:bc80:3010::136; helo=smtp3.osuosl.org;\n envelope-from=buildroot-bounces@buildroot.org; receiver=patchwork.ozlabs.org)" ], "Received": [ "from smtp3.osuosl.org (smtp3.osuosl.org [IPv6:2605:bc80:3010::136])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4fzx6t4TD0z1yCv\n\tfor <incoming-buildroot@patchwork.ozlabs.org>;\n Tue, 21 Apr 2026 05:55:34 +1000 (AEST)", "from localhost (localhost [127.0.0.1])\n\tby smtp3.osuosl.org (Postfix) with ESMTP id E6FAE61112;\n\tMon, 20 Apr 2026 19:55:27 +0000 (UTC)", "from smtp3.osuosl.org ([127.0.0.1])\n by localhost (smtp3.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id nC53nj4dFS2X; Mon, 20 Apr 2026 19:55:26 +0000 (UTC)", "from lists1.osuosl.org (lists1.osuosl.org [140.211.166.142])\n\tby smtp3.osuosl.org (Postfix) with ESMTP id 6AD2E6110B;\n\tMon, 20 Apr 2026 19:55:26 +0000 (UTC)", "from smtp2.osuosl.org (smtp2.osuosl.org [IPv6:2605:bc80:3010::133])\n by lists1.osuosl.org (Postfix) with ESMTP id C2FB3259\n for <buildroot@buildroot.org>; Mon, 20 Apr 2026 19:55:25 +0000 (UTC)", "from localhost (localhost [127.0.0.1])\n by smtp2.osuosl.org (Postfix) with ESMTP id A9536403E5\n for <buildroot@buildroot.org>; Mon, 20 Apr 2026 19:55:25 +0000 (UTC)", "from smtp2.osuosl.org ([127.0.0.1])\n by localhost (smtp2.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id QlLsI9bUVnHc for <buildroot@buildroot.org>;\n Mon, 20 Apr 2026 19:55:25 +0000 (UTC)", "from mail-wm1-x32d.google.com (mail-wm1-x32d.google.com\n [IPv6:2a00:1450:4864:20::32d])\n by smtp2.osuosl.org (Postfix) with ESMTPS id 925C440895\n for <buildroot@buildroot.org>; Mon, 20 Apr 2026 19:55:24 +0000 (UTC)", "by mail-wm1-x32d.google.com with SMTP id\n 5b1f17b1804b1-488c2690057so34252175e9.0\n for <buildroot@buildroot.org>; Mon, 20 Apr 2026 12:55:24 -0700 (PDT)", "from arch (94.105.119.19.dyn.edpnet.net. [94.105.119.19])\n by smtp.gmail.com with ESMTPSA id\n 5b1f17b1804b1-488fc14a61asm287777145e9.15.2026.04.20.12.55.20\n (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);\n Mon, 20 Apr 2026 12:55:20 -0700 (PDT)" ], "X-Virus-Scanned": [ "amavis at osuosl.org", "amavis at osuosl.org" ], "X-Comment": "SPF check N/A for local connections - client-ip=140.211.166.142;\n helo=lists1.osuosl.org; envelope-from=buildroot-bounces@buildroot.org;\n receiver=<UNKNOWN> ", "DKIM-Filter": [ "OpenDKIM Filter v2.11.0 smtp3.osuosl.org 6AD2E6110B", "OpenDKIM Filter v2.11.0 smtp2.osuosl.org 925C440895" ], "DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed; d=buildroot.org;\n\ts=default; t=1776714926;\n\tbh=ZaLbFsNjkJjVg0Nfy0x3nfXoiv2xyEuCHMWnshz9vDw=;\n\th=To:Cc:Date:Subject:List-Id:List-Unsubscribe:List-Archive:\n\t List-Post:List-Help:List-Subscribe:From:Reply-To:From;\n\tb=HWbTZurhND7Bd1PHmaIxB0g4BqBYH5+vhkwwNi4/rjVZ7OETl4Wa2N/jS5gkMkwoE\n\t iDp7JV8NXQ9IYNSX85zYvrJZScOcRFzGltBbftTOWdKhFlMvl8aD0IVbEshpoEllUP\n\t xw5SuCoEag1aBkW/gtiQKgPt7+yuDwn2dbSwor9Yk48oeLI4x/zV1oqRAd52uDgT6x\n\t 69ZSJLuoemd05cwqgS4jEeEJnv/8KEzqrlm9bkplNEZglIDn8RJbOzy6jnGZIU34iW\n\t xKuW6skCxddikKpD+qoT7FrK2O2aIy9lQNv3+6D+hmPd48Gaia7WZ6lts6kigV40fU\n\t HAQyTWagTJMKA==", "Received-SPF": "Pass (mailfrom) identity=mailfrom;\n client-ip=2a00:1450:4864:20::32d; helo=mail-wm1-x32d.google.com;\n envelope-from=thomas.perale@essensium.com; receiver=<UNKNOWN>", "DMARC-Filter": "OpenDMARC Filter v1.4.2 smtp2.osuosl.org 925C440895", "X-Google-DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=1e100.net; s=20251104; t=1776714922; x=1777319722;\n h=content-transfer-encoding:mime-version:message-id:date:subject:cc\n :to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date\n :message-id:reply-to;\n bh=yJu4dCnS9iQAALm/LGXs92WUz5f1CcnvRu/Gh8tvxfE=;\n b=mMTRsF/0nk09Q7W5pottrYDzIXwPfnnkgIemKU59tMSVJU6fgkiO62Iq1n8y3o2ke9\n tansqbl0tB9Sv5mMNx2AKPXEMXchSQWVWd2S3RmeBHf63iQWsIPRpTjzr4+DS3w3oHzH\n 0lGsf+V4pvc5VpeRLtNM/5H1RUISGeiE7NDNazoFri+EAODHXiaKTs/dV973k7Ub7ErN\n ik9oe2x6PUbzyNaCfo3jIZ7nYvAWUEuerMzCZf7bN36mTmN18OPzOQbxJexNt035WsO0\n Rls9rZpMWHqHrMGCNjRZSyXxlq92mmFPS9DuM4fOutpXejsGBk/iLueKSRV1+KD4ec9x\n /IjQ==", "X-Gm-Message-State": "AOJu0YxLR3K2+oijlwxSC4zmeMuGNXgJ4kUbA3oK7pZ1YMR7kOLN2zii\n DZlrIAwOq/zOQ8yr7+H1Lcv8yoytBTSU4hWvuPQXgIA9DnYknzBUTxg8fLACEd5M4s1ESr5NgEB\n W9xKQ", "X-Gm-Gg": "AeBDieuMxupf86M95CtvW2Evn/ryYqP5qFIXUpZqRcWRWgRiZFUs2Fp95iH1KfFDRQs\n Hr9/CpRMHhn97jjvD6KNa9L2jfsq6L5N/VVwRiUrx0EUfIMG9U4BE/Kw4mp1CBg5EoCex38JgA0\n tsS5d303LtaJE4VYGlId8Ow8hG5kxBB/fctgkYNegmTt1zX6kPSsYj6k9GKQ7wQLxhohVGnN+Hw\n TENkDHybo7I5hzOPlh8um7t9BbDg3wQTqXp2C4N6edBkYPejhMokC4zy5rP+i6KYf0tVGxdvu/2\n jkejpJUJbB20GmBOi+HuPDsa7lBQKemtsc7LhqTiwQBZmU2z063odQ7M2JWzz2Xsd6nbDozxfAd\n YXe04XUJ7QccTko1S2GEbqja6RtuYxk3yXsGzKOR6pyiWLGiZXy4y8wp74FQ9RPaVfXqtFPwvSe\n Aeh03Jj9a4ecsvkvzwO5Nw1oh09U/npTBAjDMQM0+LR79FFASGn8AxP3cHx9DsmAVH9w==", "X-Received": "by 2002:a05:600c:5295:b0:486:fbd1:9dc0 with SMTP id\n 5b1f17b1804b1-488fb780463mr202343195e9.22.1776714921267;\n Mon, 20 Apr 2026 12:55:21 -0700 (PDT)", "To": "buildroot@buildroot.org", "Cc": "Angelo Compagnucci <angelo.compagnucci@gmail.com>,\n Olivier Schonken <olivier.schonken@gmail.com>", "Date": "Mon, 20 Apr 2026 21:55:20 +0200", "Message-ID": "<20260420195520.191853-1-thomas.perale@mind.be>", "X-Mailer": "git-send-email 2.53.0", "MIME-Version": "1.0", "X-Mailman-Original-DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=mind.be; s=google; t=1776714922; x=1777319722; darn=buildroot.org;\n h=content-transfer-encoding:mime-version:message-id:date:subject:cc\n :to:from:from:to:cc:subject:date:message-id:reply-to;\n bh=yJu4dCnS9iQAALm/LGXs92WUz5f1CcnvRu/Gh8tvxfE=;\n b=CUrDRliSKXLG35Gg0GYLLJU4hLfGVfqZ/FndyqRd/1ANjqn4Am4+oEpEGi30+LpN3Z\n yqn9OzmFJrQgjEcHUPcLSX7l7Lntt2YXPX6owGAMsqf5jn+INlUi6JD9Ht9oND9IxkEQ\n aJCunZfkgVAsZ28buMh7ieB3qDOcJAx6MpLGnC7NubfRlWDHT6FCiSnbRY7rlpjWYU8y\n JvZ5sLR7mkA7afbL4vqC0Gs8WJItW4Ajr30G2DBXL8PEwCNZQ09+xY9yxciIFQ8W19m4\n 9fOwminzHZcSWNcYf7QOoBZSVSWsFxr0g1DgMgw4n5TiyUDZt9lrXmSzzzvQj78CFuiW\n gZ/Q==", "X-Mailman-Original-Authentication-Results": [ "smtp2.osuosl.org;\n dmarc=pass (p=quarantine dis=none)\n header.from=mind.be", "smtp2.osuosl.org;\n dkim=pass (2048-bit key,\n unprotected) header.d=mind.be header.i=@mind.be header.a=rsa-sha256\n header.s=google header.b=CUrDRliS" ], "Subject": "[Buildroot] [PATCH] package/cups: security bump to v2.4.17", "X-BeenThere": "buildroot@buildroot.org", "X-Mailman-Version": "2.1.30", "Precedence": "list", "List-Id": "Discussion and development of buildroot <buildroot.buildroot.org>", "List-Unsubscribe": "<https://lists.buildroot.org/mailman/options/buildroot>,\n <mailto:buildroot-request@buildroot.org?subject=unsubscribe>", "List-Archive": "<http://lists.buildroot.org/pipermail/buildroot/>", "List-Post": "<mailto:buildroot@buildroot.org>", "List-Help": "<mailto:buildroot-request@buildroot.org?subject=help>", "List-Subscribe": "<https://lists.buildroot.org/mailman/listinfo/buildroot>,\n <mailto:buildroot-request@buildroot.org?subject=subscribe>", "From": "Thomas Perale via buildroot <buildroot@buildroot.org>", "Reply-To": "Thomas Perale <thomas.perale@mind.be>", "Content-Type": "text/plain; charset=\"us-ascii\"", "Content-Transfer-Encoding": "7bit", "Errors-To": "buildroot-bounces@buildroot.org", "Sender": "\"buildroot\" <buildroot-bounces@buildroot.org>" }, "content": "For more information about the release, see:\n\n- https://github.com/OpenPrinting/cups/releases/tag/v2.4.17\n- https://github.com/OpenPrinting/cups/blob/2.4.x/CHANGES.md\n\nThe new release 2.4.17 contains the following security fixes:\n\n- CVE-2026-27447: The scheduler treated local user and group names as\n case-insensitive.\n https://www.cve.org/CVERecord?id=CVE-2026-27447\n\n- CVE-2026-34978: The RSS notifier could write outside the scheduler's\n RSS directory.\n https://www.cve.org/CVERecord?id=CVE-2026-34978\n\n- CVE-2026-34979: The scheduler did not always allocate enough memory\n for a job's options string.\n https://www.cve.org/CVERecord?id=CVE-2026-34979\n\n- CVE-2026-34980: The scheduler did not filter control characters from\n option values.\n https://www.cve.org/CVERecord?id=CVE-2026-34980\n\n- CVE-2026-34990: The scheduler incorrectly allowed local certificates\n over the loopback interface.\n https://www.cve.org/CVERecord?id=CVE-2026-34990\n\n- CVE-2026-39314: Fixed the range check for job password strings.\n https://www.cve.org/CVERecord?id=CVE-2026-39314\n\n- CVE-2026-39316: Fixed a printer subscription bug in the scheduler.\n https://www.cve.org/CVERecord?id=CVE-2026-39316\n\n- CVE-2026-41079: Fixed a SNMP string conversion bug in the backends.\n https://www.cve.org/CVERecord?id=CVE-2026-41079\n\nAlso updated patch offsets.\n\nSigned-off-by: Thomas Perale <thomas.perale@mind.be>\n---\n package/cups/0001-Remove-man-from-BUILDDIRS-in-configure.patch | 2 +-\n package/cups/0004-Remove-PIE-flags-from-the-build.patch | 2 +-\n package/cups/cups.hash | 2 +-\n package/cups/cups.mk | 2 +-\n 4 files changed, 4 insertions(+), 4 deletions(-)", "diff": "diff --git a/package/cups/0001-Remove-man-from-BUILDDIRS-in-configure.patch b/package/cups/0001-Remove-man-from-BUILDDIRS-in-configure.patch\nindex 30c3ddb48f..3c00bb1b49 100644\n--- a/package/cups/0001-Remove-man-from-BUILDDIRS-in-configure.patch\n+++ b/package/cups/0001-Remove-man-from-BUILDDIRS-in-configure.patch\n@@ -18,7 +18,7 @@ diff --git a/config-scripts/cups-common.m4 b/config-scripts/cups-common.m4\n index 613f01ddf..6f1bcb07e 100644\n --- a/config-scripts/cups-common.m4\n +++ b/config-scripts/cups-common.m4\n-@@ -462,7 +462,7 @@ LIBHEADERS=\"\\$(COREHEADERS) \\$(DRIVERHEADERS)\"\n+@@ -467,7 +467,7 @@ LIBHEADERS=\"\\$(COREHEADERS) \\$(DRIVERHEADERS)\"\n LIBHEADERSPRIV=\"\\$(COREHEADERSPRIV) \\$(DRIVERHEADERSPRIV)\"\n \n AS_CASE([\"$COMPONENTS\"], [all], [\ndiff --git a/package/cups/0004-Remove-PIE-flags-from-the-build.patch b/package/cups/0004-Remove-PIE-flags-from-the-build.patch\nindex e4081d0e07..82251d0fec 100644\n--- a/package/cups/0004-Remove-PIE-flags-from-the-build.patch\n+++ b/package/cups/0004-Remove-PIE-flags-from-the-build.patch\n@@ -23,7 +23,7 @@ diff --git a/Makedefs.in b/Makedefs.in\n index 0d8df733b..2560c0c36 100644\n --- a/Makedefs.in\n +++ b/Makedefs.in\n-@@ -156,7 +156,7 @@ ALL_CXXFLAGS\t=\t-I.. -D_CUPS_SOURCE $(CXXFLAGS) \\\n+@@ -154,7 +154,7 @@ ALL_CXXFLAGS\t=\t-I.. -D_CUPS_SOURCE $(CXXFLAGS) \\\n \t\t\t$(ONDEMANDFLAGS) $(OPTIONS)\n ALL_DSOFLAGS\t=\t-L../cups @ARCHFLAGS@ @RELROFLAGS@ $(DSOFLAGS) $(OPTIM)\n ALL_LDFLAGS\t=\t-L../cups @LDARCHFLAGS@ @RELROFLAGS@ $(LDFLAGS) \\\ndiff --git a/package/cups/cups.hash b/package/cups/cups.hash\nindex 7c08a68c10..e421c6457b 100644\n--- a/package/cups/cups.hash\n+++ b/package/cups/cups.hash\n@@ -1,4 +1,4 @@\n # Locally calculated:\n-sha256 0339587204b4f9428dd0592eb301dec0bf9ea6ea8dce5d9690d56be585aba92d cups-2.4.16-source.tar.gz\n+sha256 89c703238de210d4f4f4e5d4269e3d60c4b2f487aad75a8a1eaecd659e4d0b77 cups-2.4.17-source.tar.gz\n sha256 cfc7749b96f63bd31c3c42b5c471bf756814053e847c10f3eb003417bc523d30 LICENSE\n sha256 977206f041b9a6f47ac00531e1242c0fab7063da71178f8d868b167b70866b6d NOTICE\ndiff --git a/package/cups/cups.mk b/package/cups/cups.mk\nindex d3e6094c67..f79e3846df 100644\n--- a/package/cups/cups.mk\n+++ b/package/cups/cups.mk\n@@ -4,7 +4,7 @@\n #\n ################################################################################\n \n-CUPS_VERSION = 2.4.16\n+CUPS_VERSION = 2.4.17\n CUPS_SOURCE = cups-$(CUPS_VERSION)-source.tar.gz\n CUPS_SITE = https://github.com/OpenPrinting/cups/releases/download/v$(CUPS_VERSION)\n CUPS_LICENSE = Apache-2.0 with GPL-2.0/LGPL-2.0 exception\n", "prefixes": [] }