Changes in v4:
- Split combined patch into 8 individual patch files, one per
  upstream commit.
- Each patch includes:
  - Upstream-Status: Backport [<upstream commit URL>]
  - CVE: CVE-2026-33846
  - Signed-off-by from upstream author and submitter
- Single recipe commit that adds all 8 patches to SRC_URI,
  preserving bisectability.

Changes in v3:
- Squashed CVE fix and musl LDADD fix into a single commit to
  preserve bisectability as suggested by Yoann Congal.

Changes in v2:
- Added a separate commit to fix musl build failure for the
  mini-dtls-fragments test (missing LDADD for gnulib).

v1:
- Only contained the CVE fix. The musl build failed due to
  missing link to gnulib in the new test binary.

Tested with:
  echo 'MACHINE = "qemuarm64"' >> conf/local.conf
  echo 'TCLIBC = "musl"' >> conf/local.conf
  bitbake gnutls

Pritam Srichandan Sahoo (1):
  gnutls: fix CVE-2026-33846

 ...fragments-implement-a-basic-DTLS-tes.patch | 258 ++++++++++++++++++
 ...merge_handshake_packet-using-recv_bu.patch |  96 +++++++
 ...s-add-more-checks-to-DTLS-reassembly.patch |  65 +++++
 ...fragments-extend-with-a-1816-reprodu.patch | 159 +++++++++++
 ...fragments-extend-with-fragmenting-Cl.patch | 149 ++++++++++
 ...ch-DTLS-datagrams-by-sequence-number.patch |  42 +++
 ...fragments-1839-mismatching-message_s.patch | 104 +++++++
 ...ts-mini-dtls-framents-link-to-gnulib.patch |  27 ++
 meta/recipes-support/gnutls/gnutls_3.8.12.bb  |   8 +
 9 files changed, 908 insertions(+)
 create mode 100644 
meta/recipes-support/gnutls/gnutls/0001-tests-mini-dtls-fragments-implement-a-basic-DTLS-tes.patch
 create mode 100644 
meta/recipes-support/gnutls/gnutls/0002-buffers-shorten-merge_handshake_packet-using-recv_bu.patch
 create mode 100644 
meta/recipes-support/gnutls/gnutls/0003-buffers-add-more-checks-to-DTLS-reassembly.patch
 create mode 100644 
meta/recipes-support/gnutls/gnutls/0004-tests-mini-dtls-fragments-extend-with-a-1816-reprodu.patch
 create mode 100644 
meta/recipes-support/gnutls/gnutls/0005-tests-mini-dtls-fragments-extend-with-fragmenting-Cl.patch
 create mode 100644 
meta/recipes-support/gnutls/gnutls/0006-buffers-match-DTLS-datagrams-by-sequence-number.patch
 create mode 100644 
meta/recipes-support/gnutls/gnutls/0007-tests-mini-dtls-fragments-1839-mismatching-message_s.patch
 create mode 100644 
meta/recipes-support/gnutls/gnutls/0008-tests-mini-dtls-framents-link-to-gnulib.patch

-- 
2.53.0

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#240587): 
https://lists.openembedded.org/g/openembedded-core/message/240587
Mute This Topic: https://lists.openembedded.org/mt/120192225/21656
Group Owner: [email protected]
Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub 
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

  • [OE-core] [wrynose][PAT... Pritam Srichandan Sahoo via lists.openembedded.org

Reply via email to