mbox series

[wrynose,v2,0/2] gnutls: fix CVE-2026-33846

Message ID 20260709053106.1630373-1-PritamSrichandan.Sahoo@windriver.com
Headers show
Series gnutls: fix CVE-2026-33846 | expand

Message

Sahoo, Pritam Srichandan July 9, 2026, 5:31 a.m. UTC
Changes in v2:
- Added a separate commit to fix musl build failure for the
  mini-dtls-fragments test (missing LDADD for gnulib).

v1:
- Only contained the CVE fix. The musl build failed due to
  missing link to gnulib in the new test binary.

v2:
- Added the musl build fix as a separate commit. Build now
  succeeds with musl.

Tested with:
  echo 'MACHINE = "qemuarm64"' >> conf/local.conf
  echo 'TCLIBC = "musl"' >> conf/local.conf
  bitbake gnutls

Pritam Srichandan Sahoo (2):
  gnutls: fix CVE-2026-33846
  gnutls: link mini-dtls-fragments test to gnulib

 ...ts-mini-dtls-framents-link-to-gnulib.patch |  25 +
 .../gnutls/gnutls/CVE-2026-33846.patch        | 862 ++++++++++++++++++
 meta/recipes-support/gnutls/gnutls_3.8.12.bb  |   2 +
 3 files changed, 889 insertions(+)
 create mode 100644 meta/recipes-support/gnutls/gnutls/0001-tests-mini-dtls-framents-link-to-gnulib.patch
 create mode 100644 meta/recipes-support/gnutls/gnutls/CVE-2026-33846.patch