{"id":2221988,"url":"http://patchwork.ozlabs.org/api/1.1/patches/2221988/?format=json","web_url":"http://patchwork.ozlabs.org/project/buildroot/patch/20260410145709.271512-1-buildroot@bubu1.eu/","project":{"id":27,"url":"http://patchwork.ozlabs.org/api/1.1/projects/27/?format=json","name":"Buildroot development","link_name":"buildroot","list_id":"buildroot.buildroot.org","list_email":"buildroot@buildroot.org","web_url":"","scm_url":"","webscm_url":""},"msgid":"<20260410145709.271512-1-buildroot@bubu1.eu>","date":"2026-04-10T14:57:05","name":"[1/2] package/libgpiod2: security bump to 2.2.4","commit_ref":null,"pull_url":null,"state":"accepted","archived":false,"hash":"e29033fa4bcb3d7756a8e13f4fd3757df25abc5f","submitter":{"id":87807,"url":"http://patchwork.ozlabs.org/api/1.1/people/87807/?format=json","name":"Marcus Hoffmann","email":"buildroot@bubu1.eu"},"delegate":{"id":89618,"url":"http://patchwork.ozlabs.org/api/1.1/users/89618/?format=json","username":"juju","first_name":"Julien","last_name":"Olivain","email":"juju@cotds.org"},"mbox":"http://patchwork.ozlabs.org/project/buildroot/patch/20260410145709.271512-1-buildroot@bubu1.eu/mbox/","series":[{"id":499474,"url":"http://patchwork.ozlabs.org/api/1.1/series/499474/?format=json","web_url":"http://patchwork.ozlabs.org/project/buildroot/list/?series=499474","date":"2026-04-10T14:57:06","name":"[1/2] package/libgpiod2: security bump to 2.2.4","version":1,"mbox":"http://patchwork.ozlabs.org/series/499474/mbox/"}],"comments":"http://patchwork.ozlabs.org/api/patches/2221988/comments/","check":"pending","checks":"http://patchwork.ozlabs.org/api/patches/2221988/checks/","tags":{},"headers":{"Return-Path":"","X-Original-To":["incoming-buildroot@patchwork.ozlabs.org","buildroot@buildroot.org"],"Delivered-To":["patchwork-incoming-buildroot@legolas.ozlabs.org","buildroot@buildroot.org"],"Authentication-Results":["legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=buildroot.org header.i=@buildroot.org\n header.a=rsa-sha256 header.s=default header.b=sikgksun;\n\tdkim-atps=neutral","legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=buildroot.org\n (client-ip=140.211.166.138; helo=smtp1.osuosl.org;\n envelope-from=buildroot-bounces@buildroot.org; receiver=patchwork.ozlabs.org)"],"Received":["from smtp1.osuosl.org (smtp1.osuosl.org [140.211.166.138])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4fsg1T3znrz1y2d\n\tfor ;\n Sat, 11 Apr 2026 00:59:09 +1000 (AEST)","from localhost (localhost [127.0.0.1])\n\tby smtp1.osuosl.org (Postfix) with ESMTP id 6D8E4832DC;\n\tFri, 10 Apr 2026 14:59:06 +0000 (UTC)","from smtp1.osuosl.org ([127.0.0.1])\n by localhost (smtp1.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id Iz6Bx9ZjzpLo; Fri, 10 Apr 2026 14:59:04 +0000 (UTC)","from lists1.osuosl.org (lists1.osuosl.org [140.211.166.142])\n\tby smtp1.osuosl.org (Postfix) with ESMTP id 8A9F7832C6;\n\tFri, 10 Apr 2026 14:59:04 +0000 (UTC)","from smtp1.osuosl.org (smtp1.osuosl.org [IPv6:2605:bc80:3010::138])\n by lists1.osuosl.org (Postfix) with ESMTP id 152FF1F6\n for ; Fri, 10 Apr 2026 14:59:03 +0000 (UTC)","from localhost (localhost [127.0.0.1])\n by smtp1.osuosl.org (Postfix) with ESMTP id 06BB1832C6\n for ; Fri, 10 Apr 2026 14:59:03 +0000 (UTC)","from smtp1.osuosl.org ([127.0.0.1])\n by localhost (smtp1.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id j2MLoru8cWm7 for ;\n Fri, 10 Apr 2026 14:59:02 +0000 (UTC)","from smtp.bubu1.eu (smtp.bubu1.eu [176.9.145.28])\n by smtp1.osuosl.org (Postfix) with ESMTPS id 2135E8329E\n for ; Fri, 10 Apr 2026 14:59:01 +0000 (UTC)","from bubutux.fritz.box (unknown [212.37.174.96])\n (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n key-exchange X25519MLKEM768 server-signature RSA-PSS (4096 bits)\n server-digest\n SHA256) (No client certificate requested)\n by smtp.bubu1.eu (Postfix) with ESMTPSA id 3E3642C84735;\n Fri, 10 Apr 2026 16:58:59 +0200 (CEST)"],"X-Virus-Scanned":["amavis at osuosl.org","amavis at osuosl.org"],"X-Comment":"SPF check N/A for local connections - client-ip=140.211.166.142;\n helo=lists1.osuosl.org; envelope-from=buildroot-bounces@buildroot.org;\n receiver= ","DKIM-Filter":["OpenDKIM Filter v2.11.0 smtp1.osuosl.org 8A9F7832C6","OpenDKIM Filter v2.11.0 smtp1.osuosl.org 2135E8329E"],"DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed; d=buildroot.org;\n\ts=default; t=1775833144;\n\tbh=cpSjlKWIklnwhpWnvtOCeP/ircG55/J2E5Yz5Yt8riw=;\n\th=To:Date:Subject:List-Id:List-Unsubscribe:List-Archive:List-Post:\n\t List-Help:List-Subscribe:From:Reply-To:Cc:From;\n\tb=sikgksunHvHjJ2mt2ajfrw//4SlQo90IoYDp3/1OGUe+JXbxMDY9/YnsOu/hrQTWa\n\t t+a8GdpquUPUo0dR87yth94eaBtEhYxP5i7lmfh8OlZdnqcORqCyctO8YzSpl+2VVH\n\t CZzC9gfwUFG3/4AuHlhAoMJYD4CR1KAIgbMyh5bxRaAKW0Gu8rmd9zQQ+4HP/gGzBz\n\t 38Rf/7Ye2hCPmhxS9gT2GhiNNDucS9F4xQjRsZrEGxyyjcc2j9fA2Dc3/Jkw+Il0vt\n\t bYCOPHpMu2AgVdDp+ZmIgpVbVYgVCg5qrmXZOFB1FGGrIPMEqe3ZaBeVnJM+FiLi0r\n\t B1o5Ci3SaCMUA==","Received-SPF":"Pass (mailfrom) identity=mailfrom; client-ip=176.9.145.28;\n helo=smtp.bubu1.eu; envelope-from=buildroot@bubu1.eu; receiver=","DMARC-Filter":"OpenDMARC Filter v1.4.2 smtp1.osuosl.org 2135E8329E","To":"buildroot@buildroot.org","Date":"Fri, 10 Apr 2026 16:57:05 +0200","Message-ID":"<20260410145709.271512-1-buildroot@bubu1.eu>","X-Mailer":"git-send-email 2.53.0","MIME-Version":"1.0","X-Mailman-Original-DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/simple;\n d=bubu1.eu; s=bubu;\n t=1775833139; bh=zb8qmeUkPuFnVlJ9onmBLl1xLDsz038wz1AavQnpUfs=;\n h=From:To:Cc:Subject:Date;\n b=T1MAZfzTl+MDW0e7rmHWICwGyMhKPlk+dSPQT2e/C30MvFMi3xfGcpXHG0mnjjj0S\n Xm2k4RyPUJtexY32n3JwnJmk2qy+0akS7YBxIJ0d+pN0woMGT1Qh+5AH84aoESsM+e\n 6bol6nXtyQSUWBO2vfr4Qrt02ckpOO9aAq9xiaocu5XpyjweSPZd20UUqq3DYbQBXD\n ocRre1tOGOHwzdkZ41MDuumjLs/mRVPhBLKcjFHFpeE4dxvbQ6acIR6JOO+WyKWxkc\n qTR7Ch0EcPEtBxh/6SIpxD5XX47VuKMpZVpefhBvKYGjUSLywiGY5HPC3b6EmtShgH\n 8bfhLxQYKDJaA==","X-Mailman-Original-Authentication-Results":["smtp1.osuosl.org;\n dmarc=pass (p=reject dis=none)\n header.from=bubu1.eu","smtp1.osuosl.org;\n dkim=pass (2048-bit key) header.d=bubu1.eu header.i=@bubu1.eu\n header.a=rsa-sha256 header.s=bubu header.b=T1MAZfzT"],"Subject":"[Buildroot] [PATCH 1/2] package/libgpiod2: security bump to 2.2.4","X-BeenThere":"buildroot@buildroot.org","X-Mailman-Version":"2.1.30","Precedence":"list","List-Id":"Discussion and development of buildroot ","List-Unsubscribe":",\n ","List-Archive":"","List-Post":"","List-Help":"","List-Subscribe":",\n ","From":"Marcus Hoffmann via buildroot ","Reply-To":"Marcus Hoffmann ","Cc":"Boerge Struempfel ","Content-Type":"text/plain; charset=\"us-ascii\"","Content-Transfer-Encoding":"7bit","Errors-To":"buildroot-bounces@buildroot.org","Sender":"\"buildroot\" "},"content":"Bug fixes:\n- fix buffer over-read bugs when translating uAPI structs to library types\n- fix variable and argument types where necessary\n- sanitize values returned by the kernel to avoid potential buffer overflows\n- fix memory leaks in gpio-tools\n- add missing return value checks in gpio-tools\n- fix period parsing in gpio-tools\n- use correct loop counter in error path in gpio-manager\n\nImprovements:\n- make tests work with newer coreutils by removing cases checking tools'\n behavior on SIGINT which stopped working due to changes in behavior of the\n timeout tool\n\nSee: https://git.kernel.org/pub/scm/libs/libgpiod/libgpiod.git/tree/NEWS?h=v2.2.4\n\nSigned-off-by: Marcus Hoffmann \n---\n package/libgpiod2/libgpiod2.hash | 2 +-\n package/libgpiod2/libgpiod2.mk | 2 +-\n 2 files changed, 2 insertions(+), 2 deletions(-)","diff":"diff --git a/package/libgpiod2/libgpiod2.hash b/package/libgpiod2/libgpiod2.hash\nindex 157e605ed5..a12752261a 100644\n--- a/package/libgpiod2/libgpiod2.hash\n+++ b/package/libgpiod2/libgpiod2.hash\n@@ -1,4 +1,4 @@\n # From https://www.kernel.org/pub/software/libs/libgpiod/sha256sums.asc\n-sha256 70012b0262e4b90f140431efa841ca89643b02ea6c09f507e23cec664a51b71a libgpiod-2.2.3.tar.xz\n+sha256 13207176b0eb9b3e0f02552d5f49f5a6a449343ce47416158bb484d9d3019592 libgpiod-2.2.4.tar.xz\n # Hash for license file\n sha256 f646ad5159efb51c1130a4b43c31f0759750b1e254d2acf510f368ee2e2085c3 COPYING\ndiff --git a/package/libgpiod2/libgpiod2.mk b/package/libgpiod2/libgpiod2.mk\nindex 8803a282fe..d83fdbd94a 100644\n--- a/package/libgpiod2/libgpiod2.mk\n+++ b/package/libgpiod2/libgpiod2.mk\n@@ -6,7 +6,7 @@\n \n # Be careful when bumping versions.\n # Dependency on kernel header versions may change.\n-LIBGPIOD2_VERSION = 2.2.3\n+LIBGPIOD2_VERSION = 2.2.4\n LIBGPIOD2_SOURCE = libgpiod-$(LIBGPIOD2_VERSION).tar.xz\n LIBGPIOD2_SITE = https://www.kernel.org/pub/software/libs/libgpiod\n LIBGPIOD2_LICENSE = LGPL-2.1+\n","prefixes":["1/2"]}