Patch Detail
get:
Show a patch.
patch:
Update a patch.
put:
Update a patch.
GET /api/patches/2217999/?format=api
{ "id": 2217999, "url": "http://patchwork.ozlabs.org/api/patches/2217999/?format=api", "web_url": "http://patchwork.ozlabs.org/project/buildroot/patch/20260331083722.86951-1-francois.perrad@gadz.org/", "project": { "id": 27, "url": "http://patchwork.ozlabs.org/api/projects/27/?format=api", "name": "Buildroot development", "link_name": "buildroot", "list_id": "buildroot.buildroot.org", "list_email": "buildroot@buildroot.org", "web_url": "", "scm_url": "", "webscm_url": "", "list_archive_url": "", "list_archive_url_format": "", "commit_url_format": "" }, "msgid": "<20260331083722.86951-1-francois.perrad@gadz.org>", "list_archive_url": null, "date": "2026-03-31T08:37:22", "name": "[for,2025.02.x] package/perl: security bump to version 5.40.4", "commit_ref": null, "pull_url": null, "state": "new", "archived": false, "hash": "5249bc07c81643b1d7df618aa0d283a41f2ec271", "submitter": { "id": 14327, "url": "http://patchwork.ozlabs.org/api/people/14327/?format=api", "name": "Francois Perrad", "email": "francois.perrad@gadz.org" }, "delegate": null, "mbox": "http://patchwork.ozlabs.org/project/buildroot/patch/20260331083722.86951-1-francois.perrad@gadz.org/mbox/", "series": [ { "id": 498146, "url": "http://patchwork.ozlabs.org/api/series/498146/?format=api", "web_url": "http://patchwork.ozlabs.org/project/buildroot/list/?series=498146", "date": "2026-03-31T08:37:22", "name": "[for,2025.02.x] package/perl: security bump to version 5.40.4", "version": 1, "mbox": "http://patchwork.ozlabs.org/series/498146/mbox/" } ], "comments": "http://patchwork.ozlabs.org/api/patches/2217999/comments/", "check": "pending", "checks": "http://patchwork.ozlabs.org/api/patches/2217999/checks/", "tags": {}, "related": [], "headers": { "Return-Path": "<buildroot-bounces@buildroot.org>", "X-Original-To": [ "incoming-buildroot@patchwork.ozlabs.org", "buildroot@buildroot.org" ], "Delivered-To": [ "patchwork-incoming-buildroot@legolas.ozlabs.org", "buildroot@buildroot.org" ], "Authentication-Results": [ "legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=buildroot.org header.i=@buildroot.org\n header.a=rsa-sha256 header.s=default header.b=QhrEshNO;\n\tdkim-atps=neutral", "legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=buildroot.org\n (client-ip=140.211.166.136; helo=smtp3.osuosl.org;\n envelope-from=buildroot-bounces@buildroot.org; receiver=patchwork.ozlabs.org)" ], "Received": [ "from smtp3.osuosl.org (smtp3.osuosl.org [140.211.166.136])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4flM1v4yV4z1xtJ\n\tfor <incoming-buildroot@patchwork.ozlabs.org>;\n Tue, 31 Mar 2026 19:37:39 +1100 (AEDT)", "from localhost (localhost [127.0.0.1])\n\tby smtp3.osuosl.org (Postfix) with ESMTP id 5D664607A3;\n\tTue, 31 Mar 2026 08:37:37 +0000 (UTC)", "from smtp3.osuosl.org ([127.0.0.1])\n by localhost (smtp3.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id CNVobQXDa7Dq; Tue, 31 Mar 2026 08:37:36 +0000 (UTC)", "from lists1.osuosl.org (lists1.osuosl.org [140.211.166.142])\n\tby smtp3.osuosl.org (Postfix) with ESMTP id 743C160EFA;\n\tTue, 31 Mar 2026 08:37:36 +0000 (UTC)", "from smtp1.osuosl.org (smtp1.osuosl.org [IPv6:2605:bc80:3010::138])\n by lists1.osuosl.org (Postfix) with ESMTP id ED6332C5\n for <buildroot@buildroot.org>; Tue, 31 Mar 2026 08:37:34 +0000 (UTC)", "from localhost (localhost [127.0.0.1])\n by smtp1.osuosl.org (Postfix) with ESMTP id D3A5481452\n for <buildroot@buildroot.org>; Tue, 31 Mar 2026 08:37:34 +0000 (UTC)", "from smtp1.osuosl.org ([127.0.0.1])\n by localhost (smtp1.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id dewNvtD78vrh for <buildroot@buildroot.org>;\n Tue, 31 Mar 2026 08:37:34 +0000 (UTC)", "from mail-wm1-x330.google.com (mail-wm1-x330.google.com\n [IPv6:2a00:1450:4864:20::330])\n by smtp1.osuosl.org (Postfix) with ESMTPS id BCBFB81521\n for <buildroot@busybox.net>; Tue, 31 Mar 2026 08:37:33 +0000 (UTC)", "by mail-wm1-x330.google.com with SMTP id\n 5b1f17b1804b1-486ff201041so53387125e9.1\n for <buildroot@busybox.net>; Tue, 31 Mar 2026 01:37:33 -0700 (PDT)", "from vm-2404.. (181.185.66.37.rev.sfr.net. [37.66.185.181])\n by smtp.gmail.com with ESMTPSA id\n ffacd0b85a97d-43cf2580168sm26060383f8f.36.2026.03.31.01.37.29\n (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);\n Tue, 31 Mar 2026 01:37:29 -0700 (PDT)" ], "X-Virus-Scanned": [ "amavis at osuosl.org", "amavis at osuosl.org" ], "X-Comment": "SPF check N/A for local connections - client-ip=140.211.166.142;\n helo=lists1.osuosl.org; envelope-from=buildroot-bounces@buildroot.org;\n receiver=<UNKNOWN> ", "DKIM-Filter": [ "OpenDKIM Filter v2.11.0 smtp3.osuosl.org 743C160EFA", "OpenDKIM Filter v2.11.0 smtp1.osuosl.org BCBFB81521" ], "DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed; d=buildroot.org;\n\ts=default; t=1774946256;\n\tbh=4hD6G5LytHV6xIs9KzVqIRzvGV8Teg8tOMouU9wJXlY=;\n\th=To:Date:Subject:List-Id:List-Unsubscribe:List-Archive:List-Post:\n\t List-Help:List-Subscribe:From:Reply-To:From;\n\tb=QhrEshNObwVKb4Xef63JejsGmeLKMMDbGfTde7ODy8XAhfMun+9T9U20E+ihfrjug\n\t N8Ez6a+OnegaNhl5eixqpM4U+sBOqXz+8K16kHusdW0pC16LTVp3Eupc1oJYNeffjK\n\t iVXNmTrXpz7kbJT+S2lZ2rQOVDc6WJzr0hqmkDbBDNJf97qy2PDoYIly6+U2X7IVq4\n\t KXtnu1OT9BwttcN26BQ8BWwAKw9i6BoeGCtRnURAVcG/Lwib0vKJC1KSQOehY7/BrW\n\t wGCQQwqYc+zYdVJIzoUsF9iRlGgkSwPT+omLdOGxX3ah7DSgFEJ4zAMQ+z4jlsbyKL\n\t +JKdGcgdx5ipg==", "Received-SPF": "Pass (mailfrom) identity=mailfrom;\n client-ip=2a00:1450:4864:20::330; helo=mail-wm1-x330.google.com;\n envelope-from=francois.perrad@gadz.org; receiver=<UNKNOWN>", "DMARC-Filter": "OpenDMARC Filter v1.4.2 smtp1.osuosl.org BCBFB81521", "X-Google-DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=1e100.net; s=20251104; t=1774946252; x=1775551052;\n h=content-transfer-encoding:mime-version:message-id:date:subject:cc\n :to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date\n :message-id:reply-to;\n bh=BXT+Wjn3SJcaDIiA5LMn7Qc6WYgsJFZQ/e5Ub2BdSL4=;\n b=gzAi6iQGaPTQUvdLAoJYnCS/vSCbLkB4ReBbHul3tvmdAZVQJbizDG9S9W7mTHcZPx\n RF5gDU5Czwwu9maFhNFsihFe9n9qyyky0hTaSs6Y5uro9tqXHjMIo722O0CIrlDmHGFA\n ANB3ob+tptuJ64Twuc0oA5KQSGo/Ek69wj/6pGVnOBxYAbk3QfXIoWhLmY/DgRTK/27Y\n D9k6kQWo39j8EGObh3qUWJaRs6FlSRHKsZeVHbuG4PALjxELuMmD26UJFVGqE1I2peEC\n UINVB01PSFByo7pAWRU7Bho0UlloIqErMEAjxr7NF3q4E6CUjzy7lVji/ND3D6XCbIn+\n ySfA==", "X-Gm-Message-State": "AOJu0YzuDtsth60awxPaOTfg3fLnrPzwVEfFQSVI1ET2hEmMmEN1k784\n kHd6IbWY7TUjSXVQuO+Q3tbeMsE5TMRu8Zh6OoHoQGjfU8F6v1d1BBbI3tmak599sN5j3vcyt3S\n V0T4pWA==", "X-Gm-Gg": "ATEYQzyjcjXYFrT9Drb4vW9SbqmZQWCUfi0EvNh/DPZbxVJKDgqDhGsM5VeBdh3IZDP\n tqP1K5tQPRTq9z386MUYSjfdnD94Rv//S4z6qvmvv/bPjKidiN84O3XuI2+k4avtRS6w1IqSBMj\n YKwrd67PFGbuNGrHJFFTEIoFEbMVWv0CdFqZG2sZrghidK6CvtASivt4xxeuFehhjbWEY9COE4f\n uuBgziBmIX2Qr6D/m5ZyYcyZMGF5B64ft86LmdkyQ2oharjsn4lBGQeGZNcR7SkpYzBAnR70+fg\n WCDV778oXCCjMB5MEnctPYE3Vrf44OHm7ve2CWv2o9HOO+4h+/9lOmdj2jktsPGSA41tRO2bMFM\n tvjlYQAVegKoELUMUFsALe/L5MoWU+P8U+wCajPd1HRF8J5Tvy2OxBiBdlo4KYN3qB0TJnZFVM9\n Kldayxh94QpTQuMsXNnxRfrVUJIt8q56KXNILGFz0rH4VzYDyY1qcLEojV9gbv", "X-Received": "by 2002:a05:600c:3f0a:b0:485:2f4a:6ae6 with SMTP id\n 5b1f17b1804b1-48727d5941emr298587165e9.6.1774946250576;\n Tue, 31 Mar 2026 01:37:30 -0700 (PDT)", "To": "buildroot@busybox.net", "Date": "Tue, 31 Mar 2026 10:37:22 +0200", "Message-ID": "<20260331083722.86951-1-francois.perrad@gadz.org>", "X-Mailer": "git-send-email 2.43.0", "MIME-Version": "1.0", "X-Mailman-Original-DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=gadz.org; s=google; t=1774946252; x=1775551052; darn=busybox.net;\n h=content-transfer-encoding:mime-version:message-id:date:subject:cc\n :to:from:from:to:cc:subject:date:message-id:reply-to;\n bh=BXT+Wjn3SJcaDIiA5LMn7Qc6WYgsJFZQ/e5Ub2BdSL4=;\n b=lTl/bstump4ZFdcsX5RYl79/Au3cTk1yyqrmboszVqvy4i1LPTGgsDDDpAIObUutIB\n 8GTRqS+oDsKO+UKQhJNRY8bFhlbyDUetjMNFl3Fz3jhUJckTyBPeVWt0L8Ig21/hlp1C\n nah34Q7qZZskCs4yj38vbqCfnkMvc6v0F7XneBbuozEjVDkVMd0IL658SxZSvtq9Cj19\n +oDfFcNbA2uxG91fyY7WStCZTr6RX8mqlHgcqRrVoKJ2+rO+uQhJZtZce1q3kVUdCdX6\n 8U1emLwJajteF/UTL+ek9nR8OSVrtXVzNPhZn+fG+tFJqhrfeAgxQa9xHCNq6uOqfWAW\n Kxfg==", "X-Mailman-Original-Authentication-Results": [ "smtp1.osuosl.org;\n dmarc=pass (p=reject dis=none)\n header.from=gadz.org", "smtp1.osuosl.org;\n dkim=pass (2048-bit key) header.d=gadz.org header.i=@gadz.org\n header.a=rsa-sha256 header.s=google header.b=lTl/bstu" ], "Subject": "[Buildroot] [PATCH for 2025.02.x] package/perl: security bump to\n version 5.40.4", "X-BeenThere": "buildroot@buildroot.org", "X-Mailman-Version": "2.1.30", "Precedence": "list", "List-Id": "Discussion and development of buildroot <buildroot.buildroot.org>", "List-Unsubscribe": "<https://lists.buildroot.org/mailman/options/buildroot>,\n <mailto:buildroot-request@buildroot.org?subject=unsubscribe>", "List-Archive": "<http://lists.buildroot.org/pipermail/buildroot/>", "List-Post": "<mailto:buildroot@buildroot.org>", "List-Help": "<mailto:buildroot-request@buildroot.org?subject=help>", "List-Subscribe": "<https://lists.buildroot.org/mailman/listinfo/buildroot>,\n <mailto:buildroot-request@buildroot.org?subject=subscribe>", "From": "Francois Perrad via buildroot <buildroot@buildroot.org>", "Reply-To": "Francois Perrad <francois.perrad@gadz.org>", "Content-Type": "text/plain; charset=\"us-ascii\"", "Content-Transfer-Encoding": "7bit", "Errors-To": "buildroot-bounces@buildroot.org", "Sender": "\"buildroot\" <buildroot-bounces@buildroot.org>" }, "content": "fix CVE 2026-4176 : contains a vulnerable version of Compress::Raw::Zlib\n\nFor release notes, see:\nhttps://perldoc.perl.org/5.40.4/perl5404delta\n\nSigned-off-by: Francois Perrad <francois.perrad@gadz.org>\n---\n package/perl/perl.hash | 14 +++++++-------\n package/perl/perl.mk | 6 +++---\n 2 files changed, 10 insertions(+), 10 deletions(-)", "diff": "diff --git a/package/perl/perl.hash b/package/perl/perl.hash\nindex 0035c448c..2fe7b5c21 100644\n--- a/package/perl/perl.hash\n+++ b/package/perl/perl.hash\n@@ -1,12 +1,12 @@\n-# Hashes from: https://www.cpan.org/src/5.0/perl-5.40.3.tar.xz.{md5,sha1,sha256}.txt\n-md5 f526a5975a7cc6f53f28326437b1eb39 perl-5.40.3.tar.xz\n-sha1 7c95250ceff00d649c1f5afa511987a2c4da61d3 perl-5.40.3.tar.xz\n-sha256 65f63b4763ab6cb9bb3d5731dd10369e1705be3c59be9847d453eb60b349ab43 perl-5.40.3.tar.xz\n+# Hashes from: https://www.cpan.org/src/5.0/perl-5.40.4.tar.xz.{md5,sha1,sha256}.txt\n+md5 2e83cf578d5044444eb9e445f58cf36f perl-5.40.4.tar.xz\n+sha1 85790a2f35446a9dca6749a563117a36bf381a2e perl-5.40.4.tar.xz\n+sha256 eb0b1116b84ded552f686c9ee40c83000d8388c454f54197ca1d3a3b17246bd3 perl-5.40.4.tar.xz\n \n-# Hash from: https://github.com/arsv/perl-cross/releases/download/1.6.3/perl-cross-1.6.3.hash\n-sha256 cd57d8f8017727dc7e19cca55e1e9f22664edecf6c9f04c3515ecc13fd88e4f3 perl-cross-1.6.3.tar.gz\n+# Hash from: https://github.com/arsv/perl-cross/releases/download/1.6.4/perl-cross-1.6.4.hash\n+sha256 b6202173b0a8a43fb312867d85a8cd33527f3f234b1b6e591cdaa9895c9920c7 perl-cross-1.6.4.tar.gz\n \n # Locally calculated\n sha256 dd90d4f42e4dcadf5a7c09eea0189d93c7b37ae560c91f0f6d5233ed3b9292a2 Artistic\n sha256 d77d235e41d54594865151f4751e835c5a82322b0e87ace266567c3391a4b912 Copying\n-sha256 af805523b88a8ebb60afc009caaf247a498208502f7b8b3d9d3e329fcfb1dc3b README\n+sha256 52bbfb0dbdd5301ab21cc43d0b1d649189eaa3c0caad60a0798657b8c011ab0e README\ndiff --git a/package/perl/perl.mk b/package/perl/perl.mk\nindex a301b93e4..41bb8d5dc 100644\n--- a/package/perl/perl.mk\n+++ b/package/perl/perl.mk\n@@ -6,7 +6,7 @@\n \n # When updating the version here, also update utils/scancpan\n PERL_VERSION_MAJOR = 40\n-PERL_VERSION = 5.$(PERL_VERSION_MAJOR).3\n+PERL_VERSION = 5.$(PERL_VERSION_MAJOR).4\n PERL_SITE = https://www.cpan.org/src/5.0\n PERL_SOURCE = perl-$(PERL_VERSION).tar.xz\n PERL_LICENSE = Artistic or GPL-1.0+\n@@ -15,7 +15,7 @@ PERL_CPE_ID_VENDOR = perl\n PERL_DEPENDENCIES = $(TARGET_NLS_DEPENDENCIES)\n PERL_INSTALL_STAGING = YES\n \n-PERL_CROSS_VERSION = 1.6.3\n+PERL_CROSS_VERSION = 1.6.4\n # DO NOT refactor with the github helper (the result is not the same)\n PERL_CROSS_SITE = https://github.com/arsv/perl-cross/releases/download/$(PERL_CROSS_VERSION)\n PERL_CROSS_SOURCE = perl-cross-$(PERL_CROSS_VERSION).tar.gz\n@@ -28,7 +28,7 @@ PERL_EXTRA_DOWNLOADS = $(PERL_CROSS_SITE)/$(PERL_CROSS_SOURCE)\n define PERL_CROSS_EXTRACT\n \t$(call suitable-extractor,$(PERL_CROSS_SOURCE)) $(PERL_DL_DIR)/$(PERL_CROSS_SOURCE) | \\\n \t$(TAR) --strip-components=1 -C $(@D) $(TAR_OPTIONS) -\n-\tmv $(@D)/cnf/diffs/perl5-5.40.2 $(@D)/cnf/diffs/perl5-5.40.3\n+\tmv $(@D)/cnf/diffs/perl5-5.40.3 $(@D)/cnf/diffs/perl5-5.40.4\n endef\n PERL_POST_EXTRACT_HOOKS += PERL_CROSS_EXTRACT\n \n", "prefixes": [ "for", "2025.02.x" ] }