[meta-oe,whinlatter,2/24] libgpiod: update to v2.2.4

Message ID	20260430114649.4184890-2-ankur.tyagi85@gmail.com
State	Under Review
Delegated to:	Anuj Mittal
Headers	show Return-Path: <ankur.tyagi85@gmail.com> ip: 209.85.216.43, mailfrom: ankur.tyagi85@gmail.com) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Bartosz Golaszewski <bartosz.golaszewski@oss.qualcomm.com>, Khem Raj <khem.raj@oss.qualcomm.com>, Ankur Tyagi <ankur.tyagi85@gmail.com> Subject: [oe][meta-oe][whinlatter][PATCH 2/24] libgpiod: update to v2.2.4 Date: Thu, 30 Apr 2026 23:46:25 +1200 Message-ID: <20260430114649.4184890-2-ankur.tyagi85@gmail.com> In-Reply-To: <20260430114649.4184890-1-ankur.tyagi85@gmail.com> References: <20260430114649.4184890-1-ankur.tyagi85@gmail.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	[meta-oe,whinlatter,1/24] libgpiod: update to v2.2.3 \| expand [meta-oe,whinlatter,1/24] libgpiod: update to v2.2.3 [meta-oe,whinlatter,2/24] libgpiod: update to v2.2.4 [meta-oe,whinlatter,3/24] xdg-dbus-proxy: upgrade 0.1.6 -> 0.1.7 [meta-networking,whinlatter,4/24] corosync: patch CVE-2026-35091 [meta-networking,whinlatter,5/24] corosync: patch CVE-2026-35092 [meta-webserver,whinlatter,6/24] monkey: fix QA issue [meta-webserver,whinlatter,7/24] monkey: patch CVEs [meta-python,whinlatter,8/24] python3-ecdsa: Upgrade 0.19.1 -> 0.19.2 [meta-python,whinlatter,9/24] python3-werkzeug: upgrade 3.1.6 -> 3.1.7 [meta-python,whinlatter,10/24] python3-werkzeug: upgrade 3.1.7 -> 3.1.8 [meta-python,whinlatter,11/24] python3-tzdata: upgrade 2025.2 -> 2025.3 [meta-python,whinlatter,12/24] python3-tzdata: upgrade 2025.3 -> 2026.1 [meta-python,whinlatter,13/24] python3-bitarray: upgrade 3.8.0 -> 3.8.1 [meta-python,whinlatter,14/24] python3-gpiod: update to v2.4.2 [meta-python,whinlatter,15/24] python3-django: upgrade 5.2.12 -> 5.2.13 [meta-python,whinlatter,16/24] python3-django: upgrade 4.2.29 -> 4.2.30 [meta-networking,whinlatter,17/24] wolfssl: patch CVE-2026-1005 [meta-networking,whinlatter,18/24] wolfssl: patch CVE-2026-3580 [meta-networking,whinlatter,19/24] wolfssl: patch CVE-2026-5188 [meta-networking,whinlatter,20/24] wolfssl: patch CVE-2026-5392 [meta-networking,whinlatter,21/24] wolfssl: patch CVE-2026-5446 [meta-networking,whinlatter,22/24] wolfssl: patch CVE-2026-5447 [meta-networking,whinlatter,23/24] wolfssl: patch CVE-2026-5772 [meta-networking,whinlatter,24/24] wolfssl: patch CVE-2026-5778

Message ID

20260430114649.4184890-2-ankur.tyagi85@gmail.com

State

Under Review

Delegated to:

Anuj Mittal

Headers

From: ankur.tyagi85@gmail.com
To: openembedded-devel@lists.openembedded.org
Cc: Bartosz Golaszewski <bartosz.golaszewski@oss.qualcomm.com>,
	Khem Raj <khem.raj@oss.qualcomm.com>,
	Ankur Tyagi <ankur.tyagi85@gmail.com>
Subject: [oe][meta-oe][whinlatter][PATCH 2/24] libgpiod: update to v2.2.4
Date: Thu, 30 Apr 2026 23:46:25 +1200
Message-ID: <20260430114649.4184890-2-ankur.tyagi85@gmail.com>
In-Reply-To: <20260430114649.4184890-1-ankur.tyagi85@gmail.com>
References: <20260430114649.4184890-1-ankur.tyagi85@gmail.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit

Series

[meta-oe,whinlatter,1/24] libgpiod: update to v2.2.3 | expand

Commit Message

Ankur Tyagi April 30, 2026, 11:46 a.m. UTC

From: Bartosz Golaszewski <bartosz.golaszewski@oss.qualcomm.com>

Bug-fix release addressing several issues discovered during an
AI-augmented security audit. The most severe bug was found in the C
extension code of the python bindings - which also get an update - but
there were some memory leaks and integer overflow bugs in the core C
library as well as in tools and DBus daemon.

Full changelog:

Bug fixes:
- fix buffer over-read bugs when translating uAPI structs to library types
- fix variable and argument types where necessary
- sanitize values returned by the kernel to avoid potential buffer overflows
- fix memory leaks in gpio-tools
- add missing return value checks in gpio-tools
- fix period parsing in gpio-tools
- use correct loop counter in error path in gpio-manager

Improvements:
- make tests work with newer coreutils by removing cases checking tools'
  behavior on SIGINT which stopped working due to changes in behavior of the
  timeout tool

Also: drop the patch that's now upstream from the recipe.

Signed-off-by: Bartosz Golaszewski <bartosz.golaszewski@oss.qualcomm.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
 .../libgpiod/{libgpiod_2.2.3.bb => libgpiod_2.2.4.bb}           | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta-oe/recipes-support/libgpiod/{libgpiod_2.2.3.bb => libgpiod_2.2.4.bb} (98%)

diff --git a/meta-oe/recipes-support/libgpiod/libgpiod_2.2.3.bb b/meta-oe/recipes-support/libgpiod/libgpiod_2.2.4.bb
similarity index 98%
rename from meta-oe/recipes-support/libgpiod/libgpiod_2.2.3.bb
rename to meta-oe/recipes-support/libgpiod/libgpiod_2.2.4.bb
index a23d65bcaa..4617f5643b 100644
--- a/meta-oe/recipes-support/libgpiod/libgpiod_2.2.3.bb
+++ b/meta-oe/recipes-support/libgpiod/libgpiod_2.2.4.bb
@@ -13,7 +13,7 @@  FILESEXTRAPATHS:prepend := "${THISDIR}/${BPN}-2.x:"
 
 SRC_URI += "file://gpio-manager.init"
 
-SRC_URI[sha256sum] = "70012b0262e4b90f140431efa841ca89643b02ea6c09f507e23cec664a51b71a"
+SRC_URI[sha256sum] = "13207176b0eb9b3e0f02552d5f49f5a6a449343ce47416158bb484d9d3019592"
 
 # Enable all project features for ptest
 PACKAGECONFIG[tests] = " \

[meta-oe,whinlatter,2/24] libgpiod: update to v2.2.4

Commit Message

Patch