From patchwork Fri Oct 2 07:15:54 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Jaipaul Cheernam X-Patchwork-Id: 99863 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 135E1CA5FE1 for ; Fri, 2 Oct 2026 07:16:16 +0000 (UTC) Received: from DU2PR03CU002.outbound.protection.outlook.com (DU2PR03CU002.outbound.protection.outlook.com [52.101.65.19]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.5975.1790925367210363324 for ; Fri, 02 Oct 2026 00:16:09 -0700 Authentication-Results: mx.groups.io; dkim=fail reason="dkim: body hash did not verify" header.i=@est.tech header.s=selector1 header.b=D3c8oXnj; spf=pass (domain: est.tech, ip: 52.101.65.19, mailfrom: jaipaul.cheernam@est.tech) ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=xzNEhCBrA7eXMrS4UqzeiDOUI/5rnnsBslm2zx9FbMjIIKPwBw6IQaiE4A/Nz8TEFzPZ6RAutgNMa74xpO4ZLHtr3yk55gGsayXE0nPw2dET1+7CBLXdf9OSGaVhlY25Z/bdiP/uFZBLPtQlaKzBvJ8QXWp38CAo9HlWGv3W8NKx8Z/9LWSe2fwlkeuiRlNXHcGcpimSt858rgG/USF53nvRVOrX9T7HStMuCtKNLCUtJjz7VzQ819FSBTgZJAwH0GUIE7oUsdwnpsa1tgmPuBgZNKGFzP8ZafgPIL47hmrUdT7nAZNEmByTDYDlHT0HL5TUP2+wN2Ghe831DHpvvw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=UQWRqlMKf/FF2AM3NxvQwKsfi4ElkaHML+9ARUToDLo=; b=wB2nY6ngmphIA/ASpNCvJU6IXNtHHk7xaTFCSYrRDolisiG28CYS0Hg1H49VC0c0QpUcKbvof6OFZGxxJuqM+MPygA4nek+qQOb9TD+fivr2TwHEm2osiao/yzY93W7seXTbEd/9c9MXkctzCNLu/CthPYTq2evL0wvuPQW5IKY8WzNt/hrZZVsux4qmWsNjCLVeo1pB/3fSVwwb8Z4yUKURjrZh2I4eQ6h51bfk2M6WCbcn1etEBHCy8l8Qc7DMXYYkHV2IHbkut/jC2XyzUlGAdkuHpV8y9Ae94xsZymrP3lE7OswEP8FdvMhuUz7G4pvaBDU0bu88XyFT8gS8Ug== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=est.tech; dmarc=pass action=none header.from=est.tech; dkim=pass header.d=est.tech; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=est.tech; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=UQWRqlMKf/FF2AM3NxvQwKsfi4ElkaHML+9ARUToDLo=; b=D3c8oXnj7+1b/tqqern1hKby/lEoxLqWdpR4IHZReNIDNFDZ5F6pbP2N5t//OZgjf9fTVyXe0+Yi3m5z4S/bxrlT4sO6qSzlUjmrp3OXQXCcHksw8oJbyGxd/uzI6JO2ShHEljECiXwL1Y0/lA719EHRa8G0vTHCmGMdkvU5LPUCJk8YYBr3+ybPVLu+36cZS03sQUnhxmzt4mvUNbCoiWI7fmyUUelnR85Yn3Ykb+ML8kP+4vlD+PMNvq1Xax/5f+O5L1+s9wc5d8Xazmx+HSn2xZlEL1yvJOQnE8GppI5bwBQMDye0ejIQUM4sqxtfaSJye0M2hRchTmfxFC/WcA== Authentication-Results: mx.microsoft.com 1; dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=est.tech; Received: from AM6P189MB3107.EURP189.PROD.OUTLOOK.COM (2603:10a6:20b:6c0::19) by DU7PPFF852A1B5A.EURP189.PROD.OUTLOOK.COM (2603:10a6:18:3::aee) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.472.18; Fri, 2 Oct 2026 07:16:01 +0000 Received: from AM6P189MB3107.EURP189.PROD.OUTLOOK.COM ([fe80::bc97:3847:8f02:acb]) by AM6P189MB3107.EURP189.PROD.OUTLOOK.COM ([fe80::bc97:3847:8f02:acb%6]) with mapi id 15.21.0472.016; Fri, 2 Oct 2026 07:16:01 +0000 From: Jaipaul Cheernam To: openembedded-core@lists.openembedded.org Subject: [PATCH 1/4] libjitterentropy: upgrade 3.6.3 -> 3.7.0 Date: Fri, 2 Oct 2026 09:15:54 +0200 Message-ID: <20261002071557.74249-2-jaipaul.cheernam@est.tech> X-Mailer: git-send-email 2.39.5 (Apple Git-154) In-Reply-To: <20261002071557.74249-1-jaipaul.cheernam@est.tech> References: <20261002071557.74249-1-jaipaul.cheernam@est.tech> X-ClientProxiedBy: LO4P123CA0608.GBRP123.PROD.OUTLOOK.COM (2603:10a6:600:314::8) To AM6P189MB3107.EURP189.PROD.OUTLOOK.COM (2603:10a6:20b:6c0::19) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: AM6P189MB3107:EE_|DU7PPFF852A1B5A:EE_ X-MS-Office365-Filtering-Correlation-Id: ba1ef7f6-842a-41d4-aab9-08df20550325 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|23010399003|376014|1800799024|366016|10067099003|56012099006|3023799007|6133799003|11063799006|18002099003|22082099003; X-Microsoft-Antispam-Message-Info: OV92Jo5tNfE9M21P8MLEFDPo6XIe+c89T7Vlui6SWylGj9M0Y3xonMW5Dew1CUJdGvb6+MqfEelLQFPi6ORIynzFD+++yGxhOfRMh50jmc2bzapy3pMZEBxVsCbxg/fnuydICKO60jxNDZu+fcpLZv00twBCHe/SHkNcmVIlCWosv6BVk/NwuAp8umjYx7PzdvLmzbpxtU0DutwZCznZmJUKlbMkHgjSx7rwjgD5Aqa5ddkR6JG9/sX5+UefbiPJl7Ul3rETs4eQa8meQv4Rub+aNYzZf+XtvKxt4NKVeDCJU9pjkaFujzTFyYNscYNbk/lf7Zg1xL51b+lTDLXEe69G0WQ9kCcUqm6u/FJCS9Cpe19S2DEZXx7asPE46pUXdd4POOXGF3I8Ah7NaLMY87sUnTXvxuYKIMiEo/TCF5o6zpGfEFvEbaM5RBtaP/Y/+8gtQ3b2RrYvBdTHZHkkr3uz/4oyrO+gJZvdxfQk8rY= X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AM6P189MB3107.EURP189.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(23010399003)(376014)(1800799024)(366016)(10067099003)(56012099006)(3023799007)(6133799003)(11063799006)(18002099003)(22082099003);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: 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 X-OriginatorOrg: est.tech X-MS-Exchange-CrossTenant-Network-Message-Id: ba1ef7f6-842a-41d4-aab9-08df20550325 X-MS-Exchange-CrossTenant-AuthSource: AM6P189MB3107.EURP189.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 02 Oct 2026 07:16:00.8134 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: d2585e63-66b9-44b6-a76e-4f4b217d97fd X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: wuNfIMFReFLOc0QH1izMS71noklzoiOcXr+170V5tLwKt8k5iJ8R2ZSI3Al/2HnbkwBLcA5SXyA+sG9Rnz7ClFp+UByc9cZYWJe+ovq0gzA= X-MS-Exchange-Transport-CrossTenantHeadersStamped: DU7PPFF852A1B5A List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 02 Oct 2026 07:16:16 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/247069 Source: CHANGES.md 3.7.0 * Add secure memory implementation for Linux and {Net,Open,Free}BSD, MacOS and Windows * Update supported CMake version to 3.10 * doc: use Doxygen-style comments * NTG.1 compliance: Modify startup such that the memory access and SHA-3 loop are treated as independent noise sources which are sampled to collect at least 240 bits each before first block of random numbers is released * Remove all code when JENT_CONF_DISABLE_LOOP_SHUFFLE is unset. This code is already discouraged for a long time. Now it is taken out for good. * If cache size cannot be detected from base system (e.g. virtualization), use the requested memory size. * Change the stuck test to always calculate the absolute values of the 2nd and 3rd discrete derivation of time. * Replace SHA3-256 output generation with XDRBG-256 * Prune the jitterentropy.h header file of internal definitions and delcarations which are moved to src/jitterentropy-internal.h. With that, jitterentropy.h only contains the API. This modification does not alter the Jitter RNG behavior at all. * Update secure storage memory implementation for libgcrypt and OpenSSL * Add API jent_status License-Update: copyright years updated. Signed-off-by: Jaipaul Cheernam --- .../{libjitterentropy_3.6.3.bb => libjitterentropy_3.7.0.bb} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) rename meta/recipes-support/libjitterentropy/{libjitterentropy_3.6.3.bb => libjitterentropy_3.7.0.bb} (89%) diff --git a/meta/recipes-support/libjitterentropy/libjitterentropy_3.6.3.bb b/meta/recipes-support/libjitterentropy/libjitterentropy_3.7.0.bb similarity index 89% rename from meta/recipes-support/libjitterentropy/libjitterentropy_3.6.3.bb rename to meta/recipes-support/libjitterentropy/libjitterentropy_3.7.0.bb index 776cfe9785f..ed3d850e81a 100644 --- a/meta/recipes-support/libjitterentropy/libjitterentropy_3.6.3.bb +++ b/meta/recipes-support/libjitterentropy/libjitterentropy_3.7.0.bb @@ -5,12 +5,12 @@ stamp. It is a small-scale, yet fast entropy source that is viable in almost \ all environments and on a lot of CPU architectures." HOMEPAGE = "http://www.chronox.de/jent.html" LICENSE = "BSD-3-Clause OR GPL-2.0-only" -LIC_FILES_CHKSUM = "file://LICENSE;md5=e01027c4ad1fe5a4768f8488c945d491 \ +LIC_FILES_CHKSUM = "file://LICENSE;md5=fcaa2e2fa77c4ea22e45bf79e9a41093 \ file://LICENSE.gplv2;md5=eb723b61539feef013de476e68b5c50a \ file://LICENSE.bsd;md5=66a5cedaf62c4b2637025f049f9b826f \ " SRC_URI = "git://github.com/smuellerDD/jitterentropy-library.git;branch=master;protocol=https;tag=v${PV}" -SRCREV = "c90ff465dcdb6a6949542c72a26a8ab496daa8cb" +SRCREV = "e783cf1c450bce4d72f95c9f9c84546a6094976a" do_configure[noexec] = "1" From patchwork Fri Oct 2 07:15:55 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Jaipaul Cheernam X-Patchwork-Id: 99861 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 33070CA5FC4 for ; Fri, 2 Oct 2026 07:16:16 +0000 (UTC) Received: from DU2PR03CU002.outbound.protection.outlook.com (DU2PR03CU002.outbound.protection.outlook.com [52.101.65.19]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.5975.1790925367210363324 for ; Fri, 02 Oct 2026 00:16:10 -0700 Authentication-Results: mx.groups.io; dkim=fail reason="dkim: body hash did not verify" header.i=@est.tech header.s=selector1 header.b=S/WMgzf2; spf=pass (domain: est.tech, ip: 52.101.65.19, mailfrom: jaipaul.cheernam@est.tech) ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=rtEuB3C3zGUQbrnFXHLsasz9IQOwJ5E4++u/vRelvxn1s8ImnW5zjjlTIjshHGYLf9dUv77v/9aerRDe6ILfcePMBAIAAjDqhKFkiqikSdPGpml203D0/gJPm+xTKABFcrMi7FbOXwuZq3r013vdnhUpVz0qLMKBmLTlXTG3Zv2D+PzPmW4gVK3qCJhKneyn4lDYqNuedNs98HdilSTpcyiNTK+1mv5QjHKhXb0mBnmP/DWKfChOlHYlysgULJt++tRqF9TYMQv4W1BUqJjasJ7fS+ERPi85rrixmyoIQ8YUY4pIx2JKG9XIDx9MzD96TI08IG5BPPSI0kZQwrF/sA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=U226zUDZQ22MbgMbZoZ0z3leojG1FwpuPHGtZJDpi7I=; b=yxruzHatyk8SMk5A2cmqBSGbLbbdG+w1GLDVBbkgjfEBzEahKLPu9/nnpRh/7EylIMUMkfh3zzuUdCY5r19iEcIbeoDCeJz/sz6US0G0ItxGp0sQBH645sjjiP658KTH0TcT5fB6+ELRN8UtxzcysTLlUWsAQyciroBZemL2QccOgNI6WRIK3MDkLIV6qMrQUvDNnBrWpncICdQADfAmQi154CXL2KJmF59g17/0IVdGVn8dB+P4HbknUJgxdDjv+YgUi4xt9msplvWUDq29oMV+LUQxDrYdxC1drcW9h58j91GzarnAtLmrUCSijpuS03rf8YX31HdAnufjkgwhgw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=est.tech; dmarc=pass action=none header.from=est.tech; dkim=pass header.d=est.tech; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=est.tech; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=U226zUDZQ22MbgMbZoZ0z3leojG1FwpuPHGtZJDpi7I=; b=S/WMgzf2DpTEpfQe9or4tsbwZ1HHLYcbZ+XAcXBKnq7EeIBKkWF9frVHXsXfoonirYDHBzCNbiFUZb3hNAkSWPrGpU+w3CwLZ1hpPn+jSYctX/rxc8FAKFVKSQZw/RA/wR7T8fpYUQgMCPxi75+xnwVeHF9yN3PAoi60MQ1DYWoPAGdwkGqBiw1Mq2FFVlhpfTvaxIZQG6J/4RXrZ9ogK57L3hZdbRkSgP/mXqMZQU188XCqZg5rfBg+PHYFpTvqd0+7386cO9kTZpCBff/Zu1CVgGaKNKoXIprhYMmnsaTKNsGsVr24/kJwNeTr55s1SUQK6ot87Wqh8kDa6P8Y/g== Authentication-Results: mx.microsoft.com 1; dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=est.tech; Received: from AM6P189MB3107.EURP189.PROD.OUTLOOK.COM (2603:10a6:20b:6c0::19) by DU7PPFF852A1B5A.EURP189.PROD.OUTLOOK.COM (2603:10a6:18:3::aee) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.472.18; Fri, 2 Oct 2026 07:16:04 +0000 Received: from AM6P189MB3107.EURP189.PROD.OUTLOOK.COM ([fe80::bc97:3847:8f02:acb]) by AM6P189MB3107.EURP189.PROD.OUTLOOK.COM ([fe80::bc97:3847:8f02:acb%6]) with mapi id 15.21.0472.016; Fri, 2 Oct 2026 07:16:02 +0000 From: Jaipaul Cheernam To: openembedded-core@lists.openembedded.org Subject: [PATCH 2/4] libjitterentropy: Fix HOMEPAGE Date: Fri, 2 Oct 2026 09:15:55 +0200 Message-ID: <20261002071557.74249-3-jaipaul.cheernam@est.tech> X-Mailer: git-send-email 2.39.5 (Apple Git-154) In-Reply-To: <20261002071557.74249-1-jaipaul.cheernam@est.tech> References: <20261002071557.74249-1-jaipaul.cheernam@est.tech> X-ClientProxiedBy: LO4P123CA0161.GBRP123.PROD.OUTLOOK.COM (2603:10a6:600:188::22) To AM6P189MB3107.EURP189.PROD.OUTLOOK.COM (2603:10a6:20b:6c0::19) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: AM6P189MB3107:EE_|DU7PPFF852A1B5A:EE_ X-MS-Office365-Filtering-Correlation-Id: fafa07be-7afb-4985-da73-08df20550417 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|23010399003|376014|1800799024|366016|10067099003|56012099006|11063799006|18002099003|22082099003; X-Microsoft-Antispam-Message-Info: 4X01VFCBhBoHsHzyik/T2D5a53h1lFc0CqeQG8uyH91XajKlo6ESReXamw5zKSUdy49BeLuPIjlcpUAvknLv//O3oZKI8zsuGsD51fXid2XZMK4PtFoKfgmTgVieSvpsiQ+loZoxqz94Z8kJ+3zGk0aLrCDVu9ZZLGyu3ehETyuf570Ui8ewHSauLpUmwykxLxynMasZbiaosCvv//S+9rAGzNttbbT1mGX7vXjhZFrA8XETUZ6Pco4N1DlFizZ2AJtYShHUPP0W9rkGfj2/rom9HmpPo0Y9pF6i1bLCgp1dOas4lM4rMANhoJ9Z22Nj8ynMMfeasL6yztqp6fl2eVGg0qeib/hedLl8kyiMsj/60CnblB1QAD/qxMO1dUh9DvdA5OAmpqtZ7As4C0xzC9Bnd5XiZBak+2AUTTyZyq/BbNut0H2bRz0kEuagsn66QCdEf+BoCYsNNkvkDw8P/vlrocnT2sLpWF8/qL7Q7HE9nesA9liU4P6Xd3kudZttoPXFIaLTiUE3ahTBpYAmMt9fLD2ECoaG7C9Lpyy0OBGXAOjLKwcdiEB/iMy93HeS9z2yRcSYzN/FR/RmU1Vwqj7wpfWrEWEBml7T8za8CcTXsNyINtqGI2m0CA/aSJAb X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AM6P189MB3107.EURP189.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(23010399003)(376014)(1800799024)(366016)(10067099003)(56012099006)(11063799006)(18002099003)(22082099003);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: YTvkHcRz6QU3UfPYsdlMbsmiiyBSwuX3agDw55Avohe5SInvP1RNE6ESKyX4ifLGr3OrLZD9eIG8JDSdhPEARTi4o/Sjsltk/wV8FX42yOOEWg7xMtAefBkuBcmBYUvXt103XHahE9Yp0hRFgFhiaPzaYxypgeFm5k9NWRAEh9z1rp/Cr56DRAQCs5ePF/krmUF7W7gLDGtnMGoNW5r+6Z7UENhlB/72VjiPr0b7IV3tc0cdkUHBSBoUOKUkR9NytCF20H7Xic6MLygleh6cNrHP9apAShKf034JUg9V66fv8DNY9wM8EtMrU5T8Kekwj+ZzhDAvkgV+8Rp9HzLJMy4DcQ6PIX2T+jt6I1IDg+1gaHfN4b6A6pWBadT5qkCTkY488YJNBl89Isdz0YcvdEkV5LPfhzzIBq5jKECZjR6BR9P3SdMzzyFt0SHsvvRk/n9SvC6rj43pSDtGU8XExWUBGZIZMPbVStUsv0ITkhNWROdx6+/E2bDgahKJEeziSneSdUi/UVqfBUe27/9NRKH7kk0+a+WaVgT/awjpjlmVYPPKypLuGg2FPKUWmOdVW3QeO6DTs1LPXq1XMSl/OW2i9Bb2XeMK7XbTVYwhPL6L0mMLS2OuPN1n1oOPTIS8SJyHcSruhqC8fYbEdZ1nCwr7GLSILYdc105LsmB9kU0DdWn7OWHytqQ3kKdqzt/rqE/9LMWHCjjlbQBJw8Gmpy5H8dTe1nvBwgL3G/8Ch7dHrK70suSMIciHEc702uA6+TLXc5eTuNFxyhbSxRwz8e4HFBDJdSSKYITVwW77eLjFyBuyhrHJrLsv1G1zK0SU+5XTlaakmXilU3OGVypl28Qo/u4aWcuuY2bWL53aH0XOBnDiBOLksmIJwEyygYXgZ0NnWTFdEYVvUb2hp6ukemP784+dE9ZxhbC23tLhcasO1MlHXdcjoQtd0dyXdF+vlAOaO34swmXbM0pRQc6nfUINEgOcKxdnoytiClvVUc3WMQOhniGU9LE1Pjch5o92i3eY1tC2qR4XbxiVPPKqjse7LdkxpaFTvRpoHHHuszEvZQwVxjIg5lKjt2P87tuFZ0/YPj69ji4zuHIPY0pCYFN1tsqsJKfn6waFeUXW0HqkGotY7e2Pn0USfrZ3OoADuw/so9cFd19wmk+Ij6sACNOfPvA26ZFpANFcnjTHllNYB7iH4Qd0kNiChuRFklPYhvJ/dloOZfSxuu/ins1XVm5JgIdLJ8VWDobFYJ8obJ6fQJqDA1XMOEg4Z1S0F80J5Ixz2gu1ptypQV+1dWx8OnXpPre9i/i5GqvQiI/0Lr/EI4mu0ZeD+XEpu/xqEgTlroqVJgZ8865TDqUfONMr0eBpjHqH6op8kD7QpRhhTdu511yJb/bgym8vVvMcdKu2wzJeI6r7p2odNIXxq5LoC8f3G/3spEHLcsXqHvooxwlLMZJ4YXOhNQNrw3Kbo2of+tDlgIxxGw45AAyAwLC9IhIXAcFeNY6DSSJ7Pzpe6KI6pkiCBtMJ68m/QJmyJThJRZGBKULWF5yhX5LfH3EHDIEOPRNSYSl950BpBXJAeCZyOzWZjHQKhjVyx/Xfr9REPKWdz+MthV6BhE+f1wdQ/yQBt0lIa92otX7Ywa9VaBlj+CZQWD6Jd5MwV80RmTCbkGdKYQE8AMEV9Oth9gjEnIX4/5Agiq0/OciCmHqKBxxMLxSt/Lqa9ZrcpQDEJSaqTBAlJxub9Mgx1T1iOm/Lyg== X-OriginatorOrg: est.tech X-MS-Exchange-CrossTenant-Network-Message-Id: fafa07be-7afb-4985-da73-08df20550417 X-MS-Exchange-CrossTenant-AuthSource: AM6P189MB3107.EURP189.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 02 Oct 2026 07:16:02.3832 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: d2585e63-66b9-44b6-a76e-4f4b217d97fd X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: 2exFoCIeHfPwrHiRC0C8au+qraoGUC9OFmQSU6UZx9vV7IZWJQxq5Y4DV+7rX6RKhzKhlOYeamijVVR4Yz01ZDVp1n0hanrCInVIN8VYavc= X-MS-Exchange-Transport-CrossTenantHeadersStamped: DU7PPFF852A1B5A List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 02 Oct 2026 07:16:16 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/247070 - Fix URL for HOMEPAGE Signed-off-by: Jaipaul Cheernam --- meta/recipes-support/libjitterentropy/libjitterentropy_3.7.0.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-support/libjitterentropy/libjitterentropy_3.7.0.bb b/meta/recipes-support/libjitterentropy/libjitterentropy_3.7.0.bb index ed3d850e81a..fc74b1a3611 100644 --- a/meta/recipes-support/libjitterentropy/libjitterentropy_3.7.0.bb +++ b/meta/recipes-support/libjitterentropy/libjitterentropy_3.7.0.bb @@ -3,7 +3,7 @@ DESCRIPTION = "The Jitter RNG provides a noise source using the CPU execution ti It does not depend on any system resource other than a high-resolution time \ stamp. It is a small-scale, yet fast entropy source that is viable in almost \ all environments and on a lot of CPU architectures." -HOMEPAGE = "http://www.chronox.de/jent.html" +HOMEPAGE = "https://www.chronox.de/jent" LICENSE = "BSD-3-Clause OR GPL-2.0-only" LIC_FILES_CHKSUM = "file://LICENSE;md5=fcaa2e2fa77c4ea22e45bf79e9a41093 \ file://LICENSE.gplv2;md5=eb723b61539feef013de476e68b5c50a \ From patchwork Fri Oct 2 07:15:56 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Jaipaul Cheernam X-Patchwork-Id: 99862 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 41AEBCA5FE3 for ; Fri, 2 Oct 2026 07:16:16 +0000 (UTC) Received: from DU2PR03CU002.outbound.protection.outlook.com (DU2PR03CU002.outbound.protection.outlook.com [52.101.65.19]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.5975.1790925367210363324 for ; Fri, 02 Oct 2026 00:16:10 -0700 Authentication-Results: mx.groups.io; dkim=fail reason="dkim: body hash did not verify" header.i=@est.tech header.s=selector1 header.b=Q11llmEK; spf=pass (domain: est.tech, ip: 52.101.65.19, mailfrom: jaipaul.cheernam@est.tech) ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=gD/Go26xa2KS7FScxGh0M0CgdMD810pn8YZeL/edYoYzx448aw1n794Lz0K9BFrDC5dYSVpU75EjZuhLKnOaXKg6zfV/wPi7dxVFFFUSeLSdJG0sTjqxg28zyNXWEsjam+/50sClXCjledFUhUguZLOZDOqob+C2c04hpCVQH6Ya/JvH+9g91VbJd0JpO58QUP0wExBeitS3eNWt8ElJoVWZ59if2nCRqkqutiRq+wMQq8taQT+peFO2HpR0tVXPespBv6ef+iWysVrupWtilGMgdklThbnQj5TmavASqml0o2/VaH3WDGjzegzY1aKhlOPN3lgRpJ4Kojtjv5VrJw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=QQKehHo88reaQ/hOV6ms7i6z9oAjb0i7MUv1qmuj7Uw=; b=r/IkR21p3xPYgpDPKYZo+hpj0ErOHN+sK0uWlOOtdcGnfLH1cBd7IJTMarwixKQ5xCd0luGkfXUnSb0212XW59qgKJJlhCghYyF8yeTvOwacSJaPeJO/AvswdJwaTPB5PZv2XKGrww+lTlp6GsN3EI47Zcr1QzWEiT8t8SAAwHDYwevr288Cj9GO+ElIh6fkNsiN2ILCPUw6flKagLYrK5reqgW1m6ST3+73dembjwrpkIA2PREbCavet+xc6+3duE17AQvGDIkjyTaGy2k9Ua7w72HPnJtOFUKOjPaIcsAOOJf6taYU0tyeEOzq4NIijHqh42TmRLvSARSsu4K5MQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=est.tech; dmarc=pass action=none header.from=est.tech; dkim=pass header.d=est.tech; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=est.tech; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=QQKehHo88reaQ/hOV6ms7i6z9oAjb0i7MUv1qmuj7Uw=; b=Q11llmEKt0aVwfq9BeGjtLA1A0OWv6CaUSepMFtdrPvpTaJokqj4ilirevAjUHsun0Jyd83QYcGsbvISrTJBwPXBz8P3V1RL3NnQoO3vfv6UAcnI2lXyr25CK3ilUUYhlNE1pEKtdu77TWDEVifzPPJvOR2yjhQyJrJDfzz4/ZVPEWgPOQ2UQUlXoBP26/v5D5jtLP7Laa3geVbiOqDOlaJ7OhSkQMfaKQQRgcdGI2hz39+tVDClIVryQDeDGHEGZDMRIs9iWJNcb32/BMSck2jc1iWgxAQWCfjBAyhv81U3vPLiLtbXNZ5raELB5orECa3rTkRpvH6/OYDbjlLXQw== Authentication-Results: mx.microsoft.com 1; dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=est.tech; Received: from AM6P189MB3107.EURP189.PROD.OUTLOOK.COM (2603:10a6:20b:6c0::19) by DU7PPFF852A1B5A.EURP189.PROD.OUTLOOK.COM (2603:10a6:18:3::aee) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.472.18; Fri, 2 Oct 2026 07:16:04 +0000 Received: from AM6P189MB3107.EURP189.PROD.OUTLOOK.COM ([fe80::bc97:3847:8f02:acb]) by AM6P189MB3107.EURP189.PROD.OUTLOOK.COM ([fe80::bc97:3847:8f02:acb%6]) with mapi id 15.21.0472.016; Fri, 2 Oct 2026 07:16:04 +0000 From: Jaipaul Cheernam To: openembedded-core@lists.openembedded.org Subject: [PATCH 3/4] shadow: upgrade 4.20.2 -> 4.20.3 Date: Fri, 2 Oct 2026 09:15:56 +0200 Message-ID: <20261002071557.74249-4-jaipaul.cheernam@est.tech> X-Mailer: git-send-email 2.39.5 (Apple Git-154) In-Reply-To: <20261002071557.74249-1-jaipaul.cheernam@est.tech> References: <20261002071557.74249-1-jaipaul.cheernam@est.tech> X-ClientProxiedBy: LO0P265CA0011.GBRP265.PROD.OUTLOOK.COM (2603:10a6:600:355::19) To AM6P189MB3107.EURP189.PROD.OUTLOOK.COM (2603:10a6:20b:6c0::19) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: AM6P189MB3107:EE_|DU7PPFF852A1B5A:EE_ X-MS-Office365-Filtering-Correlation-Id: 779cd3d7-0ea2-44df-ce3a-08df205504f3 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|23010399003|376014|1800799024|366016|10067099003|260925021911599003|260925021311599003|260925022911599003|56012099006|11063799006|18002099003|22082099003; X-Microsoft-Antispam-Message-Info: 7vnOYyg1O7Q2pZvLQYC9FQHu/O/aWDrJhVYIihV/zogQKrdZ/EdllgLhqluRNhVnFoAx0M4A9Ehpz993sazF/dQMSpZjjLmzfF31nm8BjNkL5Mh/t64SaMsDfizM7u5Xdwa92T7C60D+IpYXq9UcPxWqYZCsmp+l3pTsaFh83pUQ7aiegPII3vKrQTpOQKcdUcfdZUyopSBqi1DA8nP3dfAn8mR+eILy3XFCX8Ws1tO+Tq8w0Gkal/IrZVWG8UgmqJETrIUH9P3iGHojWVixVqZR/LxV64ftcNZaJrbK0jMLDfj0UcP3SMt32M04enCci1KRQ8bxMv0c+p+Se7SFLCrIDxEaF05Up7yx+/m6n1TrJXAacWzomw9wz1B0Svi1TR2GXtKRAajbt/aD2L2zyzwFNlyg0xYEjzKrqlexzln8LNuDWERFRle28HLctE4mDVJ1gE5Jbrycrmg46fC884ZS4/sHGOY5MW5dXxKmNDBFUfGUfZNE0KfvFtIowgt0Yv+neCusKVB//2kHwQyRkmztZpfdvF5W0n1sgbdEPhOns6oIBF8E8MNepT8uX/2kDFR12A1lYab2DAP5YFyXro5u4NJ4VjBIIn//z/CwSy/3BpfWEhxjqGzz8UpXOu5jOIX5vPTsssyK/E+c6SHoBYyfPdzG4dOGPDX7PuvQaWY= X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AM6P189MB3107.EURP189.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(23010399003)(376014)(1800799024)(366016)(10067099003)(260925021911599003)(260925021311599003)(260925022911599003)(56012099006)(11063799006)(18002099003)(22082099003);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: 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 X-OriginatorOrg: est.tech X-MS-Exchange-CrossTenant-Network-Message-Id: 779cd3d7-0ea2-44df-ce3a-08df205504f3 X-MS-Exchange-CrossTenant-AuthSource: AM6P189MB3107.EURP189.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 02 Oct 2026 07:16:03.8572 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: d2585e63-66b9-44b6-a76e-4f4b217d97fd X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: b0/aqJpqDQton93xPtEx+vrMx5e75JdhqPoNFBz1Oh9iu4hicP8ZRHg2FFzNCBqJRS0FutaAS4zQGSKrF1UzeFZLDRx2dThbTDZqv4nc2Tw= X-MS-Exchange-Transport-CrossTenantHeadersStamped: DU7PPFF852A1B5A List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 02 Oct 2026 07:16:16 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/247071 ChangeLog: https://github.com/shadow-maint/shadow/releases/tag/4.20.3 Compare log: https://github.com/shadow-maint/shadow/compare/4.20.2...4.20.3 Signed-off-by: Jaipaul Cheernam --- meta/recipes-extended/shadow/files/notallylog.patch | 2 +- .../shadow/{shadow_4.20.2.bb => shadow_4.20.3.bb} | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) rename meta/recipes-extended/shadow/{shadow_4.20.2.bb => shadow_4.20.3.bb} (98%) diff --git a/meta/recipes-extended/shadow/files/notallylog.patch b/meta/recipes-extended/shadow/files/notallylog.patch index 6d6957bbf83..b3b30026ce2 100644 --- a/meta/recipes-extended/shadow/files/notallylog.patch +++ b/meta/recipes-extended/shadow/files/notallylog.patch @@ -1,4 +1,4 @@ -From 20dc49519cc177d4c829f4dd5cc277ada24376d7 Mon Sep 17 00:00:00 2001 +From a7d45933186754a1190509b46c51c56d48089004 Mon Sep 17 00:00:00 2001 From: Richard Purdie Date: Tue, 21 Apr 2026 11:30:52 +0100 Subject: [PATCH] shadow: Disable tallylog execution diff --git a/meta/recipes-extended/shadow/shadow_4.20.2.bb b/meta/recipes-extended/shadow/shadow_4.20.3.bb similarity index 98% rename from meta/recipes-extended/shadow/shadow_4.20.2.bb rename to meta/recipes-extended/shadow/shadow_4.20.3.bb index cf7d253a7f1..f11ae61a85e 100644 --- a/meta/recipes-extended/shadow/shadow_4.20.2.bb +++ b/meta/recipes-extended/shadow/shadow_4.20.3.bb @@ -23,7 +23,7 @@ SRC_URI:append:class-target = " \ SRC_URI:append:class-native = " \ file://notallylog.patch \ " -SRC_URI[sha256sum] = "e5016b40541ee6fa02ea3d409547cef6e7eea9b31f0e3482e4874f87c1d0c7c5" +SRC_URI[sha256sum] = "39006c9daf9228ddda9156605201fc9f59c43f9fdecc83c78bbe0e72d9ffd58c" UPSTREAM_CHECK_REGEX = "releases/tag/v?(?P\d+(\.\d+)+)$" # Additional Policy files for PAM From patchwork Fri Oct 2 07:15:57 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Jaipaul Cheernam X-Patchwork-Id: 99860 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id DE5F7CA5FD9 for ; Fri, 2 Oct 2026 07:16:14 +0000 (UTC) Received: from DU2PR03CU002.outbound.protection.outlook.com (DU2PR03CU002.outbound.protection.outlook.com [52.101.65.19]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.5975.1790925367210363324 for ; Fri, 02 Oct 2026 00:16:11 -0700 Authentication-Results: mx.groups.io; dkim=fail reason="dkim: body hash did not verify" header.i=@est.tech header.s=selector1 header.b=G/w8+cLz; spf=pass (domain: est.tech, ip: 52.101.65.19, mailfrom: jaipaul.cheernam@est.tech) ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=fPm5LqGRQlnSnffFJt9Gfb2skft4dwDrCSKmHJX/B9Ea4u1uzCd36cuTGDnz58ozaE4npu9L7XYBm1ke+Yy78aBKmtvb7iNmwBDmNo3LGwoURmSJnL58Qb4q1tEJ9CBQv1iIsgQDVmM+EFg4Rz362hPbQbQnXuwXcWZt0v+ofSEIVO4a4wMouFuZpSZgpyHUbh79nW2aC2nrv4WEc5A9Tbw5oeDle/urC/XAiW8uAS6CbHE20ikjsjXqk5ijsSZSV2b2ortApngBGN366K72jxz7Vjy+UuYWsj9obo1CmdyJb8WLVZtHUG5wMC9HuDjhUu5u+HA0uSoaBXVFSzzQkA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=qpX1SH3HW6QuxhSxAmE5QdZXM4P/cBOpJLpWJXut/f8=; b=cI2PsBjfRf3i+i5hUg7ITpKr8zk+veeYdZuGnU5ToYEwFQIo0YJdyXpn9Hx0r/qZ5qzLqx5ZXo82NYIttQTtzCe7Uj+c4Su0EJClGrJFYoQWKwGHXORKXYnzc8TlPZtt/ZTmGzPjOlCJXSei8/c7DrZDfeL7pAt/L+tC+22jg0k+lkGOPaTWiz1D06f9/0tARJHZf8GBImAl1a6ZA8AF+lMzPVUhxsyHdQOtp9FgjwuDq6Mr6gVCIBvItaz33naoMcVTC0H18nE825RcDjXYJ143v+x/FMVFwF74pyIOuP/iNrBszksJeRfl+7nb3x7HEPuV6omz8/KCaBGpOdaI/A== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=est.tech; dmarc=pass action=none header.from=est.tech; dkim=pass header.d=est.tech; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=est.tech; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=qpX1SH3HW6QuxhSxAmE5QdZXM4P/cBOpJLpWJXut/f8=; b=G/w8+cLzCqKw2ALR7FtGLflV89XUskoopu9LOUHKhvDRftctSqtSAj90gLJeQcuMCfTQqykTYe0IC2Lclg9pbfe8/9lGyUBE8eiaeGsUTtIwE1lIZ18GzJcUbOmeP4AFJn7sv8Xl5zsYqGhljzOi6DpSv9KOVL6pF6kV4ebZJ7IiCICtKwk49yXNFt2QdU8MMXsOJVpBdiWZKw4lE3GKkhgVpQnh3TWK7g6gbTAaOSwT+uU1rbKNGw3RsGNT3jwCHG4VvGIb+9BFB1doUg2opNdp3BJ0r54aAooZx5eqQUXzYQz9sQWnekDmyu+vCbiyBbpFK2Mi+fc7RdevvX3LEg== Authentication-Results: mx.microsoft.com 1; dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=est.tech; Received: from AM6P189MB3107.EURP189.PROD.OUTLOOK.COM (2603:10a6:20b:6c0::19) by DU7PPFF852A1B5A.EURP189.PROD.OUTLOOK.COM (2603:10a6:18:3::aee) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.472.18; Fri, 2 Oct 2026 07:16:05 +0000 Received: from AM6P189MB3107.EURP189.PROD.OUTLOOK.COM ([fe80::bc97:3847:8f02:acb]) by AM6P189MB3107.EURP189.PROD.OUTLOOK.COM ([fe80::bc97:3847:8f02:acb%6]) with mapi id 15.21.0472.016; Fri, 2 Oct 2026 07:16:05 +0000 From: Jaipaul Cheernam To: openembedded-core@lists.openembedded.org Subject: [PATCH 4/4] glib-networking: upgrade 2.80.1 -> 2.90.0 Date: Fri, 2 Oct 2026 09:15:57 +0200 Message-ID: <20261002071557.74249-5-jaipaul.cheernam@est.tech> X-Mailer: git-send-email 2.39.5 (Apple Git-154) In-Reply-To: <20261002071557.74249-1-jaipaul.cheernam@est.tech> References: <20261002071557.74249-1-jaipaul.cheernam@est.tech> X-ClientProxiedBy: LO4P265CA0325.GBRP265.PROD.OUTLOOK.COM (2603:10a6:600:390::14) To AM6P189MB3107.EURP189.PROD.OUTLOOK.COM (2603:10a6:20b:6c0::19) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: AM6P189MB3107:EE_|DU7PPFF852A1B5A:EE_ X-MS-Office365-Filtering-Correlation-Id: a0f375d9-448c-4f89-db5d-08df205505c5 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|23010399003|376014|1800799024|366016|10067099003|260925021911599003|260925021311599003|260925022911599003|56012099006|6133799003|11063799006|18002099003|22082099003; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AM6P189MB3107.EURP189.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(23010399003)(376014)(1800799024)(366016)(10067099003)(260925021911599003)(260925021311599003)(260925022911599003)(56012099006)(6133799003)(11063799006)(18002099003)(22082099003);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: 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 X-OriginatorOrg: est.tech X-MS-Exchange-CrossTenant-Network-Message-Id: a0f375d9-448c-4f89-db5d-08df205505c5 X-MS-Exchange-CrossTenant-AuthSource: AM6P189MB3107.EURP189.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 02 Oct 2026 07:16:05.2568 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: d2585e63-66b9-44b6-a76e-4f4b217d97fd X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: SwzFYA8xRxLrTsC88Nn7BeuXIcx+8v17J1t4FgM4q1eFRtLVbOKMGhUXTVSCJuodtzdM0IoVS6wNBZAbeOppsrO26c6jYMY99eQG2XYHXcc= X-MS-Exchange-Transport-CrossTenantHeadersStamped: DU7PPFF852A1B5A List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 02 Oct 2026 07:16:14 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/247072 NEWS: https://gitlab.gnome.org/GNOME/glib-networking/-/blob/2.90.0/NEWS 2.90.0 - September 10, 2026 =========================== * Bugs fixed: - !286 meson: Remove version checks that are always true (correctmost) 2.90.alpha - June 25, 2026 ========================== * Bugs fixed: - #222 test fails with openssl 3.4.x (Michael Catanzaro) - #226 (CVE-2025-60018) (#YWH-PGM9867-106) Out of Bond Reads on glib- networking through tls/openssl/gtlscertificate-openssl.c via "g_tls_certificate_openssl_get_property()" due to Incorrect BIO_write Return Value Validation in Certificate PEM Export (Michael Catanzaro) - #228 (CVE-2026-2574) (#YWH-PGM9867-150) OOB Read on glib-networking through tls/openssl/gtlsclientconnection-openssl.c via g_tls_client_connection_openssl_get_property() (Michael Catanzaro) - #231 (CVE-2026-10028) (#YWH-PGM9867-278) Infinite loop in certification path building (Michael Catanzaro) - !261 meson: Introduce option for enable/disable tests (Leonid Zaburunov) - !263 openssl: check return value of g_tls_bio_alloc() and BIO_new() (Michael Catanzaro) - !265 openssl: delete support for OCSP stapling (Michael Catanzaro) - !268 Fix file database and PKCS11 test failures and update CI! (Michael Catanzaro) - !270 Fix miscellaneous safety issues reported by bug hunters (Michael Catanzaro) - !271 Delete gtlshttp (Michael Catanzaro) - !272 Fix connection test reusing a GError (Michael Catanzaro) - !273 openssl: fix error code confusion (Michael Catanzaro) - !274 ci: add catch for reporting stack traces (Michael Catanzaro) - !277 Require OpenSSL 1.1.1 or newer (Michael Catanzaro) - !280 Some fixes found with kiro (Ignacio Casal Quinteiro) - !281 Fix various memory leaks (Michael Catanzaro) - !283 openssl: refactor error handling code (Michael Catanzaro) - !284 openssl: use ERR_clear_error() all over the place (Michael Catanzaro) - !285 gnutls: always notify accepted-cas property after handshake (Michael Catanzaro) - Drop the four backported OpenSSL CVE patches (CVE-2025-60018, CVE-2025-60019, CVE-2026-2574); all are now included upstream in 2.90.0. Signed-off-by: Jaipaul Cheernam --- ...-check-return-value-when-writing-to-.patch | 82 ---------- ...heck-return-value-of-g_tls_bio_alloc.patch | 42 ----- ...enssl-check-return-values-of-BIO_new.patch | 146 ------------------ ...of-bounds-read-in-accepted-cas-prope.patch | 48 ------ ...ng_2.80.1.bb => glib-networking_2.90.0.bb} | 10 +- 5 files changed, 4 insertions(+), 324 deletions(-) delete mode 100644 meta/recipes-core/glib-networking/glib-networking/0001-openssl-properly-check-return-value-when-writing-to-.patch delete mode 100644 meta/recipes-core/glib-networking/glib-networking/0002-openssl-check-return-value-of-g_tls_bio_alloc.patch delete mode 100644 meta/recipes-core/glib-networking/glib-networking/0003-openssl-check-return-values-of-BIO_new.patch delete mode 100644 meta/recipes-core/glib-networking/glib-networking/0004-openssl-fix-out-of-bounds-read-in-accepted-cas-prope.patch rename meta/recipes-core/glib-networking/{glib-networking_2.80.1.bb => glib-networking_2.90.0.bb} (81%) diff --git a/meta/recipes-core/glib-networking/glib-networking/0001-openssl-properly-check-return-value-when-writing-to-.patch b/meta/recipes-core/glib-networking/glib-networking/0001-openssl-properly-check-return-value-when-writing-to-.patch deleted file mode 100644 index 72f0c0c61ef..00000000000 --- a/meta/recipes-core/glib-networking/glib-networking/0001-openssl-properly-check-return-value-when-writing-to-.patch +++ /dev/null @@ -1,82 +0,0 @@ -From 330f59dcb39386b3d640ce94fcd3f75e1668ad88 Mon Sep 17 00:00:00 2001 -From: Michael Catanzaro -Date: Mon, 4 Aug 2025 15:10:21 -0500 -Subject: [PATCH 1/3] openssl: properly check return value when writing to BIO - objects - -In particular, we will read out of bounds, and then write the invalid -memory, if BIO_write() fails when getting the PROP_CERTIFICATE_PEM -property. Here we attempt to check the return value, but the check is -not correct. - -This also fixes a leak of the BIO in the same place. - -Also add error checking to PROP_SUBJECT_NAME and PROP_ISSUER_NAME, for -good measure. - -Fixes #226 - -CVE: CVE-2025-60018 -Upstream-Status: Backport -Signed-off-by: Ross Burton ---- - tls/openssl/gtlscertificate-openssl.c | 25 +++++++++++++++---------- - 1 file changed, 15 insertions(+), 10 deletions(-) - -diff --git a/tls/openssl/gtlscertificate-openssl.c b/tls/openssl/gtlscertificate-openssl.c -index 648f3e8..b536559 100644 ---- a/tls/openssl/gtlscertificate-openssl.c -+++ b/tls/openssl/gtlscertificate-openssl.c -@@ -362,15 +362,12 @@ g_tls_certificate_openssl_get_property (GObject *object, - case PROP_CERTIFICATE_PEM: - bio = BIO_new (BIO_s_mem ()); - -- if (!PEM_write_bio_X509 (bio, openssl->cert) || !BIO_write (bio, "\0", 1)) -- certificate_pem = NULL; -- else -+ if (PEM_write_bio_X509 (bio, openssl->cert) == 1 && BIO_write (bio, "\0", 1) == 1) - { - BIO_get_mem_data (bio, &certificate_pem); - g_value_set_string (value, certificate_pem); -- -- BIO_free_all (bio); - } -+ BIO_free_all (bio); - break; - - case PROP_PRIVATE_KEY: -@@ -411,8 +408,12 @@ g_tls_certificate_openssl_get_property (GObject *object, - case PROP_SUBJECT_NAME: - bio = BIO_new (BIO_s_mem ()); - name = X509_get_subject_name (openssl->cert); -- X509_NAME_print_ex (bio, name, 0, XN_FLAG_SEP_COMMA_PLUS); -- BIO_write (bio, "\0", 1); -+ if (X509_NAME_print_ex (bio, name, 0, XN_FLAG_SEP_COMMA_PLUS) < 0 || -+ BIO_write (bio, "\0", 1) != 1) -+ { -+ BIO_free_all (bio); -+ break; -+ } - BIO_get_mem_data (bio, (char **)&name_string); - g_value_set_string (value, name_string); - BIO_free_all (bio); -@@ -421,9 +422,13 @@ g_tls_certificate_openssl_get_property (GObject *object, - case PROP_ISSUER_NAME: - bio = BIO_new (BIO_s_mem ()); - name = X509_get_issuer_name (openssl->cert); -- X509_NAME_print_ex (bio, name, 0, XN_FLAG_SEP_COMMA_PLUS); -- BIO_write (bio, "\0", 1); -- BIO_get_mem_data (bio, &name_string); -+ if (X509_NAME_print_ex (bio, name, 0, XN_FLAG_SEP_COMMA_PLUS) < 0 || -+ BIO_write (bio, "\0", 1) != 1) -+ { -+ BIO_free_all (bio); -+ break; -+ } -+ BIO_get_mem_data (bio, (char **)&name_string); - g_value_set_string (value, name_string); - BIO_free_all (bio); - break; --- -2.43.0 - diff --git a/meta/recipes-core/glib-networking/glib-networking/0002-openssl-check-return-value-of-g_tls_bio_alloc.patch b/meta/recipes-core/glib-networking/glib-networking/0002-openssl-check-return-value-of-g_tls_bio_alloc.patch deleted file mode 100644 index 9c3d19f373d..00000000000 --- a/meta/recipes-core/glib-networking/glib-networking/0002-openssl-check-return-value-of-g_tls_bio_alloc.patch +++ /dev/null @@ -1,42 +0,0 @@ -From b5a3a8b28b7616403d5454f5f1816c933c34cdac Mon Sep 17 00:00:00 2001 -From: Michael Catanzaro -Date: Thu, 21 Aug 2025 16:58:54 -0500 -Subject: [PATCH 2/3] openssl: check return value of g_tls_bio_alloc() - -This function may fail, in which case the parameter remains -uninitialized. We'd better not dereference it in that case. - -CVE: CVE-2025-60019 -Upstream-Status: Backport -Signed-off-by: Ross Burton ---- - tls/openssl/gtlsbio.c | 6 ++++-- - 1 file changed, 4 insertions(+), 2 deletions(-) - -diff --git a/tls/openssl/gtlsbio.c b/tls/openssl/gtlsbio.c -index 0f603fe..1e54943 100644 ---- a/tls/openssl/gtlsbio.c -+++ b/tls/openssl/gtlsbio.c -@@ -370,7 +370,8 @@ g_tls_bio_new_from_iostream (GIOStream *io_stream) - GTlsBio *gbio; - - ret = g_tls_bio_alloc (&gbio); -- gbio->io_stream = g_object_ref (io_stream); -+ if (ret) -+ gbio->io_stream = g_object_ref (io_stream); - - return ret; - } -@@ -382,7 +383,8 @@ g_tls_bio_new_from_datagram_based (GDatagramBased *socket) - GTlsBio *gbio; - - ret = g_tls_bio_alloc (&gbio); -- gbio->socket = g_object_ref (socket); -+ if (ret) -+ gbio->socket = g_object_ref (socket); - - return ret; - } --- -2.43.0 - diff --git a/meta/recipes-core/glib-networking/glib-networking/0003-openssl-check-return-values-of-BIO_new.patch b/meta/recipes-core/glib-networking/glib-networking/0003-openssl-check-return-values-of-BIO_new.patch deleted file mode 100644 index 1e925da980c..00000000000 --- a/meta/recipes-core/glib-networking/glib-networking/0003-openssl-check-return-values-of-BIO_new.patch +++ /dev/null @@ -1,146 +0,0 @@ -From 9c22e08b41255543bc15017123ed6c64b97b9b7c Mon Sep 17 00:00:00 2001 -From: Michael Catanzaro -Date: Thu, 21 Aug 2025 17:21:01 -0500 -Subject: [PATCH 3/3] openssl: check return values of BIO_new() - -We probably need to check even more return values of even more OpenSSL -functions, but these ones allocate memory and that's particularly -important to get right. - -CVE: CVE-2025-60019 -Upstream-Status: Backport -Signed-off-by: Ross Burton ---- - tls/openssl/gtlscertificate-openssl.c | 42 ++++++++++++++++++++------- - 1 file changed, 32 insertions(+), 10 deletions(-) - -diff --git a/tls/openssl/gtlscertificate-openssl.c b/tls/openssl/gtlscertificate-openssl.c -index b536559..4fa5286 100644 ---- a/tls/openssl/gtlscertificate-openssl.c -+++ b/tls/openssl/gtlscertificate-openssl.c -@@ -166,6 +166,9 @@ export_privkey_to_der (GTlsCertificateOpenssl *openssl, - goto err; - - bio = BIO_new (BIO_s_mem ()); -+ if (!bio) -+ goto err; -+ - if (i2d_PKCS8_PRIV_KEY_INFO_bio (bio, pkcs8) == 0) - goto err; - -@@ -199,6 +202,9 @@ export_privkey_to_pem (GTlsCertificateOpenssl *openssl) - return NULL; - - bio = BIO_new (BIO_s_mem ()); -+ if (!bio) -+ goto out; -+ - ret = PEM_write_bio_PKCS8PrivateKey (bio, openssl->key, NULL, NULL, 0, NULL, NULL); - if (ret == 0) - goto out; -@@ -211,7 +217,7 @@ export_privkey_to_pem (GTlsCertificateOpenssl *openssl) - result = g_strdup (data); - - out: -- BIO_free_all (bio); -+ g_clear_pointer (&bio, BIO_free_all); - return result; - } - -@@ -232,6 +238,9 @@ maybe_import_pkcs12 (GTlsCertificateOpenssl *openssl) - return; - - bio = BIO_new (BIO_s_mem ()); -+ if (!bio) -+ goto import_failed; -+ - status = BIO_write (bio, openssl->pkcs12_data->data, openssl->pkcs12_data->len); - if (status <= 0) - goto import_failed; -@@ -323,7 +332,7 @@ g_tls_certificate_openssl_get_property (GObject *object, - guint8 *data; - BIO *bio; - GByteArray *byte_array; -- char *certificate_pem; -+ const char *certificate_pem; - long size; - - const ASN1_TIME *time_asn1; -@@ -362,12 +371,12 @@ g_tls_certificate_openssl_get_property (GObject *object, - case PROP_CERTIFICATE_PEM: - bio = BIO_new (BIO_s_mem ()); - -- if (PEM_write_bio_X509 (bio, openssl->cert) == 1 && BIO_write (bio, "\0", 1) == 1) -+ if (bio && PEM_write_bio_X509 (bio, openssl->cert) == 1 && BIO_write (bio, "\0", 1) == 1) - { - BIO_get_mem_data (bio, &certificate_pem); - g_value_set_string (value, certificate_pem); - } -- BIO_free_all (bio); -+ g_clear_pointer (&bio, BIO_free_all); - break; - - case PROP_PRIVATE_KEY: -@@ -407,6 +416,8 @@ g_tls_certificate_openssl_get_property (GObject *object, - - case PROP_SUBJECT_NAME: - bio = BIO_new (BIO_s_mem ()); -+ if (!bio) -+ break; - name = X509_get_subject_name (openssl->cert); - if (X509_NAME_print_ex (bio, name, 0, XN_FLAG_SEP_COMMA_PLUS) < 0 || - BIO_write (bio, "\0", 1) != 1) -@@ -421,6 +432,8 @@ g_tls_certificate_openssl_get_property (GObject *object, - - case PROP_ISSUER_NAME: - bio = BIO_new (BIO_s_mem ()); -+ if (!bio) -+ break; - name = X509_get_issuer_name (openssl->cert); - if (X509_NAME_print_ex (bio, name, 0, XN_FLAG_SEP_COMMA_PLUS) < 0 || - BIO_write (bio, "\0", 1) != 1) -@@ -533,8 +546,11 @@ g_tls_certificate_openssl_set_property (GObject *object, - break; - CRITICAL_IF_CERTIFICATE_INITIALIZED ("certificate-pem"); - bio = BIO_new_mem_buf ((gpointer)string, -1); -- openssl->cert = PEM_read_bio_X509 (bio, NULL, NULL, NULL); -- BIO_free (bio); -+ if (bio) -+ { -+ openssl->cert = PEM_read_bio_X509 (bio, NULL, NULL, NULL); -+ BIO_free (bio); -+ } - if (openssl->cert) - openssl->have_cert = TRUE; - else if (!openssl->construct_error) -@@ -554,8 +570,11 @@ g_tls_certificate_openssl_set_property (GObject *object, - CRITICAL_IF_KEY_INITIALIZED ("private-key"); - - bio = BIO_new_mem_buf (bytes->data, bytes->len); -- openssl->key = d2i_PrivateKey_bio (bio, NULL); -- BIO_free (bio); -+ if (bio) -+ { -+ openssl->key = d2i_PrivateKey_bio (bio, NULL); -+ BIO_free (bio); -+ } - if (openssl->key) - openssl->have_key = TRUE; - else if (!openssl->construct_error) -@@ -575,8 +594,11 @@ g_tls_certificate_openssl_set_property (GObject *object, - CRITICAL_IF_KEY_INITIALIZED ("private-key-pem"); - - bio = BIO_new_mem_buf ((gpointer)string, -1); -- openssl->key = PEM_read_bio_PrivateKey (bio, NULL, NULL, NULL); -- BIO_free (bio); -+ if (bio) -+ { -+ openssl->key = PEM_read_bio_PrivateKey (bio, NULL, NULL, NULL); -+ BIO_free (bio); -+ } - if (openssl->key) - openssl->have_key = TRUE; - else if (!openssl->construct_error) --- -2.43.0 - diff --git a/meta/recipes-core/glib-networking/glib-networking/0004-openssl-fix-out-of-bounds-read-in-accepted-cas-prope.patch b/meta/recipes-core/glib-networking/glib-networking/0004-openssl-fix-out-of-bounds-read-in-accepted-cas-prope.patch deleted file mode 100644 index d3673656ad5..00000000000 --- a/meta/recipes-core/glib-networking/glib-networking/0004-openssl-fix-out-of-bounds-read-in-accepted-cas-prope.patch +++ /dev/null @@ -1,48 +0,0 @@ -From be2173eb9b769255df9474a9128e642b60894f10 Mon Sep 17 00:00:00 2001 -From: Michael Catanzaro -Date: Thu, 12 Mar 2026 12:47:00 -0500 -Subject: [PATCH] openssl: fix out of bounds read in accepted-cas property - getter - -The d2i and i2d functions are quite dangerous because they advance the -provided pointer, so we have to pass a temporary pointer if we're later -going to do anything with the original pointer. - -I've audited the codebase and found this is our only such mistake. - -Fixes #228 (CVE-2026-2574) - -Part-of: - - -(cherry picked from commit c3c84b269165f2a312d47fa15c5cbc7f8ead7631) - -Co-authored-by: Michael Catanzaro - -CVE: CVE-2026-2574 -Upstream-Status: Backport -Signed-off-by: Ross Burton ---- - tls/openssl/gtlsclientconnection-openssl.c | 4 +++- - 1 file changed, 3 insertions(+), 1 deletion(-) - -diff --git a/tls/openssl/gtlsclientconnection-openssl.c b/tls/openssl/gtlsclientconnection-openssl.c -index e98fb0b..e2ff0d4 100644 ---- a/tls/openssl/gtlsclientconnection-openssl.c -+++ b/tls/openssl/gtlsclientconnection-openssl.c -@@ -141,9 +141,11 @@ g_tls_client_connection_openssl_get_property (GObject *object, - if (size > 0) - { - unsigned char *ca; -+ unsigned char *tmp; - - ca = g_malloc (size); -- size = i2d_X509_NAME (sk_X509_NAME_value (openssl->ca_list, i), &ca); -+ tmp = ca; -+ size = i2d_X509_NAME (sk_X509_NAME_value (openssl->ca_list, i), &tmp); - if (size > 0) - accepted_cas = g_list_prepend (accepted_cas, g_byte_array_new_take ( - ca, size)); --- -2.43.0 - diff --git a/meta/recipes-core/glib-networking/glib-networking_2.80.1.bb b/meta/recipes-core/glib-networking/glib-networking_2.90.0.bb similarity index 81% rename from meta/recipes-core/glib-networking/glib-networking_2.80.1.bb rename to meta/recipes-core/glib-networking/glib-networking_2.90.0.bb index aa13900da1e..1850712690c 100644 --- a/meta/recipes-core/glib-networking/glib-networking_2.80.1.bb +++ b/meta/recipes-core/glib-networking/glib-networking_2.90.0.bb @@ -13,7 +13,7 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=4fbd65380cdd255951079008b364516c \ SECTION = "libs" DEPENDS = "glib-2.0-native glib-2.0" -SRC_URI[archive.sha256sum] = "b80e2874157cd55071f1b6710fa0b911d5ac5de106a9ee2a4c9c7bee61782f8e" +SRC_URI[archive.sha256sum] = "83a75e3d9c36b66ee86d3281c2fc997816101968a5126ba322b2acb9a74dd8c0" # Upstream note that for the openssl backend, half the tests where this backend don't return # the expected error code or don't work as expected so default to gnutls @@ -28,11 +28,9 @@ PACKAGECONFIG[gnomeproxy] = "-Dgnome_proxy=enabled,-Dgnome_proxy=disabled,gsetti inherit gnomebase gettext upstream-version-is-even gio-module-cache ptest-gnome -SRC_URI += "file://0001-openssl-properly-check-return-value-when-writing-to-.patch \ - file://0002-openssl-check-return-value-of-g_tls_bio_alloc.patch \ - file://0003-openssl-check-return-values-of-BIO_new.patch \ - file://0004-openssl-fix-out-of-bounds-read-in-accepted-cas-prope.patch \ - file://run-ptest" +SRC_URI += "\ + file://run-ptest \ + " FILES:${PN} += "\ ${libdir}/gio/modules/libgio*.so \