From 6ac53518a0ceb0611ee08adef500fc8d2994d21a Mon Sep 17 00:00:00 2001 From: Marcus Hoffmann Date: Fri, 10 Apr 2026 16:57:05 +0200 Subject: [PATCH] package/libgpiod2: security bump to 2.2.4 Bug fixes: - fix buffer over-read bugs when translating uAPI structs to library types - fix variable and argument types where necessary - sanitize values returned by the kernel to avoid potential buffer overflows - fix memory leaks in gpio-tools - add missing return value checks in gpio-tools - fix period parsing in gpio-tools - use correct loop counter in error path in gpio-manager Improvements: - make tests work with newer coreutils by removing cases checking tools' behavior on SIGINT which stopped working due to changes in behavior of the timeout tool See: https://git.kernel.org/pub/scm/libs/libgpiod/libgpiod.git/tree/NEWS?h=v2.2.4 Note: this commit is marked as "security" update because it contains security related bugfixes, but no CVE or advisory are published at the time of this commit. Signed-off-by: Marcus Hoffmann [Julien: add note in the commit log] Signed-off-by: Julien Olivain --- package/libgpiod2/libgpiod2.hash | 2 +- package/libgpiod2/libgpiod2.mk | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/package/libgpiod2/libgpiod2.hash b/package/libgpiod2/libgpiod2.hash index 157e605ed5..a12752261a 100644 --- a/package/libgpiod2/libgpiod2.hash +++ b/package/libgpiod2/libgpiod2.hash @@ -1,4 +1,4 @@ # From https://www.kernel.org/pub/software/libs/libgpiod/sha256sums.asc -sha256 70012b0262e4b90f140431efa841ca89643b02ea6c09f507e23cec664a51b71a libgpiod-2.2.3.tar.xz +sha256 13207176b0eb9b3e0f02552d5f49f5a6a449343ce47416158bb484d9d3019592 libgpiod-2.2.4.tar.xz # Hash for license file sha256 f646ad5159efb51c1130a4b43c31f0759750b1e254d2acf510f368ee2e2085c3 COPYING diff --git a/package/libgpiod2/libgpiod2.mk b/package/libgpiod2/libgpiod2.mk index 8803a282fe..d83fdbd94a 100644 --- a/package/libgpiod2/libgpiod2.mk +++ b/package/libgpiod2/libgpiod2.mk @@ -6,7 +6,7 @@ # Be careful when bumping versions. # Dependency on kernel header versions may change. -LIBGPIOD2_VERSION = 2.2.3 +LIBGPIOD2_VERSION = 2.2.4 LIBGPIOD2_SOURCE = libgpiod-$(LIBGPIOD2_VERSION).tar.xz LIBGPIOD2_SITE = https://www.kernel.org/pub/software/libs/libgpiod LIBGPIOD2_LICENSE = LGPL-2.1+