Hi Paul,

The pam_lastlog2 libpam linking fix (YOCTO #16320) is included
natively in 2.41.5.

Thanks,
Siva

On Tue, Jul 14, 2026 at 6:59 PM Paul Barker <[email protected]> wrote:

> On Mon, 2026-07-06 at 17:25 +0530, Siva Balasubramanian wrote:
> > 2.41.4 and 2.41.5 are point releases in the same 2.41 stable series and
> > contain only bug fixes and security fixes (no new features, no API/ABI
> > breaks), so the upgrade complies with the stable branch policy.
> >
> > Among the fixes pulled in:
> >  - Several mount(8) TOCTOU / symlink hardening fixes (incl.
> CVE-2026-27456)
> >  - libblkid integer overflow in parse_dos_extended() and a use-after-free
> >    in partition probing
> >  - pam_lastlog2: fix libpam linking in the autotools build so
> >    pam_lastlog2.so links against libpam (fixes the runtime "undefined
> >    symbol: pam_syslog" / dlopen failure) [YOCTO #16320]
> >
> > Drop two backports that are now part of the release:
> >  - 0001-loopdev-add-LOOPDEV_FL_NOFOLLOW-to-prevent-symlink-a.patch
> >    (upstream f55f9906, released in 2.41.4)
> >  - the pam_lastlog2 libpam linking backport (upstream 5683ed6320e0,
> >    cherry-picked to the 2.41 stable branch as c8d0af0421f6, released in
> >    2.41.5)
>
> Hi Siva,
>
> I just see one backport dropped in this patch. I don't see any
> pam_lastlog2 backport in the current wrynose branch, is this related to
> a patch that wasn't applied or something you're carrying locally?
>
> Best regards,
>
> --
> Paul Barker
>
>

-- 

Sivakumar B
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#240953): 
https://lists.openembedded.org/g/openembedded-core/message/240953
Mute This Topic: https://lists.openembedded.org/mt/120137966/21656
Group Owner: [email protected]
Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub 
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to