Patch Detail
get:
Show a patch.
patch:
Update a patch.
put:
Update a patch.
GET /api/patches/2217998/?format=api
{ "id": 2217998, "url": "http://patchwork.ozlabs.org/api/patches/2217998/?format=api", "web_url": "http://patchwork.ozlabs.org/project/buildroot/patch/20260331083702.86930-1-francois.perrad@gadz.org/", "project": { "id": 27, "url": "http://patchwork.ozlabs.org/api/projects/27/?format=api", "name": "Buildroot development", "link_name": "buildroot", "list_id": "buildroot.buildroot.org", "list_email": "buildroot@buildroot.org", "web_url": "", "scm_url": "", "webscm_url": "", "list_archive_url": "", "list_archive_url_format": "", "commit_url_format": "" }, "msgid": "<20260331083702.86930-1-francois.perrad@gadz.org>", "list_archive_url": null, "date": "2026-03-31T08:37:01", "name": "package/perl: security bump to version 5.42.2", "commit_ref": null, "pull_url": null, "state": "accepted", "archived": false, "hash": "c676120050a28a2a4b93a1ced32ee467d01dc779", "submitter": { "id": 14327, "url": "http://patchwork.ozlabs.org/api/people/14327/?format=api", "name": "Francois Perrad", "email": "francois.perrad@gadz.org" }, "delegate": null, "mbox": "http://patchwork.ozlabs.org/project/buildroot/patch/20260331083702.86930-1-francois.perrad@gadz.org/mbox/", "series": [ { "id": 498145, "url": "http://patchwork.ozlabs.org/api/series/498145/?format=api", "web_url": "http://patchwork.ozlabs.org/project/buildroot/list/?series=498145", "date": "2026-03-31T08:37:01", "name": "package/perl: security bump to version 5.42.2", "version": 1, "mbox": "http://patchwork.ozlabs.org/series/498145/mbox/" } ], "comments": "http://patchwork.ozlabs.org/api/patches/2217998/comments/", "check": "pending", "checks": "http://patchwork.ozlabs.org/api/patches/2217998/checks/", "tags": {}, "related": [], "headers": { "Return-Path": "<buildroot-bounces@buildroot.org>", "X-Original-To": [ "incoming-buildroot@patchwork.ozlabs.org", "buildroot@buildroot.org" ], "Delivered-To": [ "patchwork-incoming-buildroot@legolas.ozlabs.org", "buildroot@buildroot.org" ], "Authentication-Results": [ "legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=buildroot.org header.i=@buildroot.org\n header.a=rsa-sha256 header.s=default header.b=H9ITwGUD;\n\tdkim-atps=neutral", "legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=buildroot.org\n (client-ip=140.211.166.138; helo=smtp1.osuosl.org;\n envelope-from=buildroot-bounces@buildroot.org; receiver=patchwork.ozlabs.org)" ], "Received": [ "from smtp1.osuosl.org (smtp1.osuosl.org [140.211.166.138])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4flM1W36fQz1xtJ\n\tfor <incoming-buildroot@patchwork.ozlabs.org>;\n Tue, 31 Mar 2026 19:37:19 +1100 (AEDT)", "from localhost (localhost [127.0.0.1])\n\tby smtp1.osuosl.org (Postfix) with ESMTP id 95A99814A0;\n\tTue, 31 Mar 2026 08:37:15 +0000 (UTC)", "from smtp1.osuosl.org ([127.0.0.1])\n by localhost (smtp1.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id QtWr1W9kRSoF; Tue, 31 Mar 2026 08:37:13 +0000 (UTC)", "from lists1.osuosl.org (lists1.osuosl.org [140.211.166.142])\n\tby smtp1.osuosl.org (Postfix) with ESMTP id 71F3C81311;\n\tTue, 31 Mar 2026 08:37:13 +0000 (UTC)", "from smtp1.osuosl.org (smtp1.osuosl.org [IPv6:2605:bc80:3010::138])\n by lists1.osuosl.org (Postfix) with ESMTP id 4F6ED30E\n for <buildroot@buildroot.org>; Tue, 31 Mar 2026 08:37:12 +0000 (UTC)", "from localhost (localhost [127.0.0.1])\n by smtp1.osuosl.org (Postfix) with ESMTP id 3C61A81309\n for <buildroot@buildroot.org>; Tue, 31 Mar 2026 08:37:12 +0000 (UTC)", "from smtp1.osuosl.org ([127.0.0.1])\n by localhost (smtp1.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id ij7CYpMH2OQ8 for <buildroot@buildroot.org>;\n Tue, 31 Mar 2026 08:37:11 +0000 (UTC)", "from mail-wm1-x32d.google.com (mail-wm1-x32d.google.com\n [IPv6:2a00:1450:4864:20::32d])\n by smtp1.osuosl.org (Postfix) with ESMTPS id BCCCF812F5\n for <buildroot@busybox.net>; Tue, 31 Mar 2026 08:37:10 +0000 (UTC)", "by mail-wm1-x32d.google.com with SMTP id\n 5b1f17b1804b1-48700b1ba53so48958055e9.1\n for <buildroot@busybox.net>; Tue, 31 Mar 2026 01:37:10 -0700 (PDT)", "from vm-2404.. (181.185.66.37.rev.sfr.net. [37.66.185.181])\n by smtp.gmail.com with ESMTPSA id\n ffacd0b85a97d-43cf21e3602sm25893943f8f.4.2026.03.31.01.37.05\n (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);\n Tue, 31 Mar 2026 01:37:06 -0700 (PDT)" ], "X-Virus-Scanned": [ "amavis at osuosl.org", "amavis at osuosl.org" ], "X-Comment": "SPF check N/A for local connections - client-ip=140.211.166.142;\n helo=lists1.osuosl.org; envelope-from=buildroot-bounces@buildroot.org;\n receiver=<UNKNOWN> ", "DKIM-Filter": [ "OpenDKIM Filter v2.11.0 smtp1.osuosl.org 71F3C81311", "OpenDKIM Filter v2.11.0 smtp1.osuosl.org BCCCF812F5" ], "DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed; d=buildroot.org;\n\ts=default; t=1774946233;\n\tbh=PJ65kGFYNP0rpjWTXumHZsq3fy4oqnVv8DjK0Z2RETI=;\n\th=To:Date:Subject:List-Id:List-Unsubscribe:List-Archive:List-Post:\n\t List-Help:List-Subscribe:From:Reply-To:From;\n\tb=H9ITwGUDoY1u4+iZZWRdiqwbzEA6iOHz9j2TkzS6srnsmZYXtrwJ1uZNehGwgIYkj\n\t PA2WoeUyef5F3st3EfAeOVe3s1sGqejXYR419zaibz5G++PsBrUCo0SpXqdRJuem65\n\t OIE9JX34J0K8hodDjmHJ6HMOL+xrkJtrk9DOM/i9WdWbD3uRdWuEFTyDddJi8lCZP/\n\t 0w2uEoro+1opcB+3EaBhF5+lterLLyI1mGfgy54ADZEhMEVVZYFoZFfHeRAAR+9fcF\n\t VNCWL+z+soD9bk810fuXjtnBqYKb9wyyvnPh436XsEbsaBFf1EUphHJQhcUijY+l3C\n\t 8LWci8lEk+I4Q==", "Received-SPF": "Pass (mailfrom) identity=mailfrom;\n client-ip=2a00:1450:4864:20::32d; helo=mail-wm1-x32d.google.com;\n envelope-from=francois.perrad@gadz.org; receiver=<UNKNOWN>", "DMARC-Filter": "OpenDMARC Filter v1.4.2 smtp1.osuosl.org BCCCF812F5", "X-Google-DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=1e100.net; s=20251104; t=1774946228; x=1775551028;\n h=content-transfer-encoding:mime-version:message-id:date:subject:cc\n :to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date\n :message-id:reply-to;\n bh=OpJa1jw/B/FSEzuXKzqPlmbIjfSDbhLjbx8EM6eYAlU=;\n b=AgmsGFIQeqDmUzZ9Y2JmQubaszOhWTsiQ3x62wxRoUKQIt6uuPDWKdqc/72CBMZP5Y\n 70w18nMu/yD0/rofVPjhDfoCAqOob3z+ep0aM5sBhhp1SSdPCYbpJR/HsECm11HHg0Yb\n XPtpotE1gpzgYzshmJ+CuL6aaW7SZYBMbhRrd1TyfxjxKi7g9gsmTlOIsCfGvoP7SKlh\n 6BGa6ceD4qB2i7GkBiI8MhikZM8mOaOMxF8c/jhQqK216PHypoNTNAY0oat+enYPLC3w\n DgF79H/9fLl+3JoPwlqCvW7JiyYsgcpDWg6nRPO419aStt/vzKYOgVQ4Bsr8tNQ8plLa\n uV0w==", "X-Gm-Message-State": "AOJu0Yz6QMtnqxMAjWTY0PV53WcFeQPReRoxjQOR2N8FFtdedWXSFuM6\n HiNT1NomZWV7yiWdppr26X9Nm4a3QnltUHbV2FATSkQa0Go5DsYq3Ph5mINAewFa8Efl0Mok5Da\n WTqntNQ==", "X-Gm-Gg": "ATEYQzwUri7L19un2lwaSnLtDh3tAlV7kSpyHccciNCFUltyb/4/Uh8+63rAGUlt3m5\n Tb/mT1pVW/SxXP5BQIOLsCRZetcJSfdhLB6dE8uCZKbXBazs3C9oPIhGfjAw6YfRlm4dwXWJ6ZC\n ESTfnXw2fm/BTrjqQbGiRDOJdzR0m/59hs2BQFqqTvJ+CKfcYZiHE94Mis6t25DPhEbo5crTs7Y\n Ear6WIl8XT6n446BcX0R4AHdTwdg4vORGXfnSXv2nTd6NcT7zJUma9f8Qx8c+rzdz2egjgDXmb7\n NJgVM9U4qzdjUnUStW8uC7dPD43se3mifx94P8Sjosqgjrhq+ProkIPE0t2WQ/fG5Rng4bQH1Mc\n ofmakNKTqq8SFaQE6EVXeYzfbJc/Ef24fP7RuhGOYRjo6mXpKEmTiJbfkfmW6NwfQRe9RP24QWm\n LgW0zADfVGtZI3BOAIrdd/HfgsqGw1cLxBuebqYXQ6ApGFwerjEQ==", "X-Received": "by 2002:a05:600c:4fc9:b0:485:2fe9:336f with SMTP id\n 5b1f17b1804b1-487280ba3a8mr246125085e9.30.1774946226819;\n Tue, 31 Mar 2026 01:37:06 -0700 (PDT)", "To": "buildroot@busybox.net", "Date": "Tue, 31 Mar 2026 10:37:01 +0200", "Message-ID": "<20260331083702.86930-1-francois.perrad@gadz.org>", "X-Mailer": "git-send-email 2.43.0", "MIME-Version": "1.0", "X-Mailman-Original-DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=gadz.org; s=google; t=1774946228; x=1775551028; darn=busybox.net;\n h=content-transfer-encoding:mime-version:message-id:date:subject:cc\n :to:from:from:to:cc:subject:date:message-id:reply-to;\n bh=OpJa1jw/B/FSEzuXKzqPlmbIjfSDbhLjbx8EM6eYAlU=;\n b=pppS0izcQGmYLalOndEDlDcTceW4zZMiHbCQfLPoV+RSXTz0HbIJrF2sEcTFWSonip\n VwLhGtVtkkZnOZfTtbM+8DRMQntHYhMRIZ6vfmHZGwKSB6MN1tw06wQ8tDtQmERnCzH1\n yITqj8bLPDUSfj4+5qyaqtPxa3TCvwi22efVGMN9NAv8MUA53PUDMaW0oMEY+3on77ok\n dikiAE4aYB+lygNUuHGh7Ma4itxQJqfxX2Yx/QgjMYi2vsKrw1F1NKdqkPnI4JvtGAxr\n vojQ0HTFH0tuRLDlf7joru47NYXSmclAQm70qK1Cy4SaAMDrMOt7whKXJIBXjAKBmgRv\n VdUg==", "X-Mailman-Original-Authentication-Results": [ "smtp1.osuosl.org;\n dmarc=pass (p=reject dis=none)\n header.from=gadz.org", "smtp1.osuosl.org;\n dkim=pass (2048-bit key,\n unprotected) header.d=gadz.org header.i=@gadz.org header.a=rsa-sha256\n header.s=google header.b=pppS0izc" ], "Subject": "[Buildroot] [PATCH] package/perl: security bump to version 5.42.2", "X-BeenThere": "buildroot@buildroot.org", "X-Mailman-Version": "2.1.30", "Precedence": "list", "List-Id": "Discussion and development of buildroot <buildroot.buildroot.org>", "List-Unsubscribe": "<https://lists.buildroot.org/mailman/options/buildroot>,\n <mailto:buildroot-request@buildroot.org?subject=unsubscribe>", "List-Archive": "<http://lists.buildroot.org/pipermail/buildroot/>", "List-Post": "<mailto:buildroot@buildroot.org>", "List-Help": "<mailto:buildroot-request@buildroot.org?subject=help>", "List-Subscribe": "<https://lists.buildroot.org/mailman/listinfo/buildroot>,\n <mailto:buildroot-request@buildroot.org?subject=subscribe>", "From": "Francois Perrad via buildroot <buildroot@buildroot.org>", "Reply-To": "Francois Perrad <francois.perrad@gadz.org>", "Content-Type": "text/plain; charset=\"us-ascii\"", "Content-Transfer-Encoding": "7bit", "Errors-To": "buildroot-bounces@buildroot.org", "Sender": "\"buildroot\" <buildroot-bounces@buildroot.org>" }, "content": "fix CVE 2026-4176 : contains a vulnerable version of Compress::Raw::Zlib\n\nFor release notes, see:\nhttps://perldoc.perl.org/5.42.2/perl5422delta\n\nSigned-off-by: Francois Perrad <francois.perrad@gadz.org>\n---\n package/perl/perl.hash | 14 +++++++-------\n package/perl/perl.mk | 5 +++--\n 2 files changed, 10 insertions(+), 9 deletions(-)", "diff": "diff --git a/package/perl/perl.hash b/package/perl/perl.hash\nindex 3aefdd05b..d88de6c42 100644\n--- a/package/perl/perl.hash\n+++ b/package/perl/perl.hash\n@@ -1,12 +1,12 @@\n-# Hashes from: https://www.cpan.org/src/5.0/perl-5.42.0.tar.xz.{md5,sha1,sha256}.txt\n-md5 7a6950a9f12d01eb96a9d2ed2f4e0072 perl-5.42.0.tar.xz\n-sha1 3b557f28dcb412b115d9628c37fc94b2fda08384 perl-5.42.0.tar.xz\n-sha256 73cf6cc1ea2b2b1c110a18c14bbbc73a362073003893ffcedc26d22ebdbdd0c3 perl-5.42.0.tar.xz\n+# Hashes from: https://www.cpan.org/src/5.0/perl-5.42.2.tar.xz.{md5,sha1,sha256}.txt\n+md5 be6e70b71ec6589fc090f7303c5b3056 perl-5.42.2.tar.xz\n+sha1 dc36549204ec31680e1c7c0acb37fad0de83a339 perl-5.42.2.tar.xz\n+sha256 0a585eeb9e363c0f80482ddb3571625250c2c86aeb408853e8ea50805cfb14bb perl-5.42.2.tar.xz\n \n-# Hash from: https://github.com/arsv/perl-cross/releases/download/1.6.3/perl-cross-1.6.3.hash\n-sha256 cd57d8f8017727dc7e19cca55e1e9f22664edecf6c9f04c3515ecc13fd88e4f3 perl-cross-1.6.3.tar.gz\n+# Hash from: https://github.com/arsv/perl-cross/releases/download/1.6.4/perl-cross-1.6.4.hash\n+sha256 b6202173b0a8a43fb312867d85a8cd33527f3f234b1b6e591cdaa9895c9920c7 perl-cross-1.6.4.tar.gz\n \n # Locally calculated\n sha256 dd90d4f42e4dcadf5a7c09eea0189d93c7b37ae560c91f0f6d5233ed3b9292a2 Artistic\n sha256 8979e6dd61852041643c5c5c40ea63b2bd1b438a67d114e62cbaef808c514315 Copying\n-sha256 189e9d6ac7743ed4e832f14c9edb6f782c92d8868b447fa2684f7fe5a81465c1 README\n+sha256 16381bf5fe73ad96ed26449b52eb4a85b2a32a49763c8a788d43af80f3add548 README\ndiff --git a/package/perl/perl.mk b/package/perl/perl.mk\nindex c31a368b7..c96eb4413 100644\n--- a/package/perl/perl.mk\n+++ b/package/perl/perl.mk\n@@ -6,7 +6,7 @@\n \n # When updating the version here, also update utils/scancpan\n PERL_VERSION_MAJOR = 42\n-PERL_VERSION = 5.$(PERL_VERSION_MAJOR).0\n+PERL_VERSION = 5.$(PERL_VERSION_MAJOR).2\n PERL_SITE = https://www.cpan.org/src/5.0\n PERL_SOURCE = perl-$(PERL_VERSION).tar.xz\n PERL_LICENSE = Artistic or GPL-1.0+\n@@ -15,7 +15,7 @@ PERL_CPE_ID_VENDOR = perl\n PERL_DEPENDENCIES = $(TARGET_NLS_DEPENDENCIES)\n PERL_INSTALL_STAGING = YES\n \n-PERL_CROSS_VERSION = 1.6.3\n+PERL_CROSS_VERSION = 1.6.4\n # DO NOT refactor with the github helper (the result is not the same)\n PERL_CROSS_SITE = https://github.com/arsv/perl-cross/releases/download/$(PERL_CROSS_VERSION)\n PERL_CROSS_SOURCE = perl-cross-$(PERL_CROSS_VERSION).tar.gz\n@@ -28,6 +28,7 @@ PERL_EXTRA_DOWNLOADS = $(PERL_CROSS_SITE)/$(PERL_CROSS_SOURCE)\n define PERL_CROSS_EXTRACT\n \t$(call suitable-extractor,$(PERL_CROSS_SOURCE)) $(PERL_DL_DIR)/$(PERL_CROSS_SOURCE) | \\\n \t$(TAR) --strip-components=1 -C $(@D) $(TAR_OPTIONS) -\n+\tmv $(@D)/cnf/diffs/perl5-5.42.0 $(@D)/cnf/diffs/perl5-5.42.2\n endef\n PERL_POST_EXTRACT_HOOKS += PERL_CROSS_EXTRACT\n \n", "prefixes": [] }