On Mon, 2026-07-06 at 17:25 +0530, Siva Balasubramanian wrote: > 2.41.4 and 2.41.5 are point releases in the same 2.41 stable series and > contain only bug fixes and security fixes (no new features, no API/ABI > breaks), so the upgrade complies with the stable branch policy. > > Among the fixes pulled in: > - Several mount(8) TOCTOU / symlink hardening fixes (incl. CVE-2026-27456) > - libblkid integer overflow in parse_dos_extended() and a use-after-free > in partition probing > - pam_lastlog2: fix libpam linking in the autotools build so > pam_lastlog2.so links against libpam (fixes the runtime "undefined > symbol: pam_syslog" / dlopen failure) [YOCTO #16320] > > Drop two backports that are now part of the release: > - 0001-loopdev-add-LOOPDEV_FL_NOFOLLOW-to-prevent-symlink-a.patch > (upstream f55f9906, released in 2.41.4) > - the pam_lastlog2 libpam linking backport (upstream 5683ed6320e0, > cherry-picked to the 2.41 stable branch as c8d0af0421f6, released in > 2.41.5)
Hi Siva, I just see one backport dropped in this patch. I don't see any pam_lastlog2 backport in the current wrynose branch, is this related to a patch that wasn't applied or something you're carrying locally? Best regards, -- Paul Barker
signature.asc
Description: This is a digitally signed message part
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#240891): https://lists.openembedded.org/g/openembedded-core/message/240891 Mute This Topic: https://lists.openembedded.org/mt/120137966/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
