Skip to content

libpng1.6: Update version from 1.6.36-6+deb10u2 to 1.6.36-6+deb10u3#199

Open
teradat wants to merge 1 commit intomiraclelinux:deb10.13-2from
teradat:update-libpng_1.6.36-6+deb10u3
Open

libpng1.6: Update version from 1.6.36-6+deb10u2 to 1.6.36-6+deb10u3#199
teradat wants to merge 1 commit intomiraclelinux:deb10.13-2from
teradat:update-libpng_1.6.36-6+deb10u3

Conversation

@teradat
Copy link
Copy Markdown

@teradat teradat commented Apr 6, 2026

Purpose of the Pull Request

This version fixes following CVEs.

  • CVE-2026-33416

ELA: ELA-1674-1

Test

  1. Build package
  2. Run ptest of libpng package on docker of meta-debian

How to run ptest of libpng package

  1. Prepare environment variables
  2. Run ptest on docker of meta-debian

Prepare environment variables

$ export TEST_PACKAGES="libpng"
$ export TEST_DISTROS="deby"
$ export TEST_MACHINES="qemuarm64"
$ export COMPOSE_HTTP_TIMEOUT=7200
$ export PTEST_RUNNER_TIMEOUT=7200

Run ptest on docker of meta-debian

$ cd ./meta-debian/docker/
$ make qemu_ptest

Test result

Build package

Build succeeded.

meta-debian/docker$ make build_test
docker-compose run --rm build_test
WARNING: The QEMU_PARAMS variable is not set. Defaulting to a blank string.
WARNING: The IMAGE_ROOTFS_EXTRA_SPACE variable is not set. Defaulting to a blank string.
WARNING: The no_proxy variable is not set. Defaulting to a blank string.
WARNING: The TEST_DISTRO_FEATURES variable is not set. Defaulting to a blank string.
Creating docker_build_test_run ... done
NOTE: Setup build directory.
You had no conf/local.conf file. This configuration file has therefore been
created for you with some default values. You may wish to edit it to, for
example, select a different MACHINE (target hardware). See conf/local.conf
for more information as common configuration options are commented.
You had no conf/bblayers.conf file. This configuration file has therefore been
created for you with some default values. To add additional metadata layers
into your configuration please add entries to conf/bblayers.conf.
The Yocto Project has extensive documentation about OE including a reference
manual which can be found at:
    http://yoctoproject.org/documentation
For more information about OpenEmbedded see their website:
    http://www.openembedded.org/
NOTE: Testing distro deby ...
NOTE: Testing machine qemuarm64 ...
NOTE: These recipes will be tested: libpng
NOTE: Building libpng ...
NOTE: Build libpng: PASS

Run ptest on docker of meta-debian

The ptest results were the same before and after the update.

  • After 1.6.36-6+deb10u3: libpng: PASS/SKIP/FAIL = 33/0/0
  • Before 1.6.36-6+deb10u2: libpng: PASS/SKIP/FAIL = 33/0/0
meta-debian/docker$ make qemu_ptest
docker-compose run --rm qemu_ptest
WARNING: The QEMU_PARAMS variable is not set. Defaulting to a blank string.
WARNING: The IMAGE_ROOTFS_EXTRA_SPACE variable is not set. Defaulting to a blank string.
WARNING: The no_proxy variable is not set. Defaulting to a blank string.
WARNING: The TEST_DISTRO_FEATURES variable is not set. Defaulting to a blank string.
Creating docker_qemu_ptest_run ... done
mkstemp: No such file or directory
NOTE: Setup build directory.
You had no conf/local.conf file. This configuration file has therefore been
created for you with some default values. You may wish to edit it to, for
example, select a different MACHINE (target hardware). See conf/local.conf
for more information as common configuration options are commented.
You had no conf/bblayers.conf file. This configuration file has therefore been
created for you with some default values. To add additional metadata layers
into your configuration please add entries to conf/bblayers.conf.
The Yocto Project has extensive documentation about OE including a reference
manual which can be found at:
    http://yoctoproject.org/documentation
For more information about OpenEmbedded see their website:
    http://www.openembedded.org/
NOTE: These packages will be tested: libpng
NOTE: Testing distro deby ...
NOTE: Testing machine qemuarm64 ...
Parsing recipes: 100% |#################################################################################################| Time: 0:00:05
Parsing of 1044 .bb files complete (0 cached, 1044 parsed). 1828 targets, 68 skipped, 0 masked, 0 errors.
NOTE: Resolving any missing task queue dependencies
Build Configuration:
BB_VERSION           = "1.42.0"
BUILD_SYS            = "x86_64-linux"
NATIVELSBSTRING      = "debian-10"
TARGET_SYS           = "aarch64-deby-linux"
MACHINE              = "qemuarm64"
DISTRO               = "deby"
DISTRO_VERSION       = "10.0"
TUNE_FEATURES        = "aarch64 armv8a crc"
TARGET_FPU           = ""
meta                 
meta-poky            = "warrior:d4b57c68b22027c2bedff335dee06af963e4f8a8"
meta-debian          = "update-libpng_1.6.36-6+deb10u3:76d4f0d8462785d12ae66d21b7d264709839df9e"
Initialising tasks: 100% |##############################################################################################| Time: 0:00:00
Sstate summary: Wanted 854 Found 0 Missed 854 Current 0 (0% match, 0% complete)
NOTE: Executing SetScene Tasks
NOTE: Executing RunQueue Tasks
NOTE: Tasks Summary: Attempted 2998 tasks of which 5 didn't need to be rerun and all succeeded.
NOTE: Run command: `runqemu qemuarm64 nographic slirp qemuparams=""`
nohup: redirecting stderr to stdout
NOTE: Waiting for SSH to be ready... (5s / 60s)
NOTE: Waiting for SSH to be ready... (10s / 60s)
stdin: is not a tty
Running ptest for libpng ...
libpng: PASS/SKIP/FAIL = 33/0/0
stdin: is not a tty

For infomation: before update result

meta-debian/docker$ make qemu_ptest
docker-compose run --rm qemu_ptest
WARNING: The QEMU_PARAMS variable is not set. Defaulting to a blank string.
WARNING: The IMAGE_ROOTFS_EXTRA_SPACE variable is not set. Defaulting to a blank string.
WARNING: The no_proxy variable is not set. Defaulting to a blank string.
WARNING: The TEST_DISTRO_FEATURES variable is not set. Defaulting to a blank string.
Creating docker_qemu_ptest_run ... done
mkstemp: No such file or directory
NOTE: Setup build directory.
You had no conf/local.conf file. This configuration file has therefore been
created for you with some default values. You may wish to edit it to, for
example, select a different MACHINE (target hardware). See conf/local.conf
for more information as common configuration options are commented.
You had no conf/bblayers.conf file. This configuration file has therefore been
created for you with some default values. To add additional metadata layers
into your configuration please add entries to conf/bblayers.conf.
The Yocto Project has extensive documentation about OE including a reference
manual which can be found at:
    http://yoctoproject.org/documentation
For more information about OpenEmbedded see their website:
    http://www.openembedded.org/
NOTE: These packages will be tested: libpng
NOTE: Testing distro deby ...
NOTE: Testing machine qemuarm64 ...
Parsing recipes: 100% |#################################################################################################| Time: 0:00:09
Parsing of 1044 .bb files complete (0 cached, 1044 parsed). 1828 targets, 68 skipped, 0 masked, 0 errors.
NOTE: Resolving any missing task queue dependencies
Build Configuration:
BB_VERSION           = "1.42.0"
BUILD_SYS            = "x86_64-linux"
NATIVELSBSTRING      = "debian-10"
TARGET_SYS           = "aarch64-deby-linux"
MACHINE              = "qemuarm64"
DISTRO               = "deby"
DISTRO_VERSION       = "10.0"
TUNE_FEATURES        = "aarch64 armv8a crc"
TARGET_FPU           = ""
meta                 
meta-poky            = "warrior:d4b57c68b22027c2bedff335dee06af963e4f8a8"
meta-debian          = "deb10.13-2:5569627120910450d72271eea30cf40373c1bc0b"
Initialising tasks: 100% |##############################################################################################| Time: 0:00:00
Sstate summary: Wanted 854 Found 0 Missed 854 Current 0 (0% match, 0% complete)
NOTE: Executing SetScene Tasks
NOTE: Executing RunQueue Tasks
NOTE: Tasks Summary: Attempted 2998 tasks of which 5 didn't need to be rerun and all succeeded.
NOTE: Run command: `runqemu qemuarm64 nographic slirp qemuparams=""`
nohup: redirecting stderr to stdout
NOTE: Waiting for SSH to be ready... (5s / 60s)
NOTE: Waiting for SSH to be ready... (10s / 60s)
stdin: is not a tty
Running ptest for libpng ...
libpng: PASS/SKIP/FAIL = 33/0/0
stdin: is not a tty

This version fixes following CVEs.
- CVE-2026-33416

ELA: ELA-1674-1
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant