Hi Yoann, Any update on this ?
Thanks & Regards, Vijay On Mon, Jun 29, 2026 at 12:46 PM Vijay Anusuri <[email protected]> wrote: > From: Peter Marko <[email protected]> > > Solves CVE-2026-33846, CVE-2026-42009, CVE-2026-33845, CVE-2026-42010, > CVE-2026-3833, CVE-2026-42011, CVE-2026-42012, CVE-2026-42013, > CVE-2026-42014, CVE-2026-5260, CVE-2026-42015, CVE-2026-3832 and > CVE-2026-5419. > > Release notes: [1] > > Rebase patches and drop patch included in this release. > Add patches to fix linking with musl libc. > Increase memory needed to successfully run test key-openssl. > Drop code for previous release tarball problem. > > [1] https://github.com/gnutls/gnutls/blob/3.8.13/NEWS > > Signed-off-by: Peter Marko <[email protected]> > Signed-off-by: Mathieu Dubois-Briand <[email protected]> > Signed-off-by: Richard Purdie <[email protected]> > (cherry picked from commit 1193b0778a0f81bd75f7ec6f8f44fa44cf4b8f5e) > Signed-off-by: Vijay Anusuri <[email protected]> > --- > meta/recipes-core/images/core-image-ptest.bb | 1 + > ...ts-mini-dtls-framents-link-to-gnulib.patch | 25 +++++++++++ > ...ust-list-fault-fix-issues-in-linking.patch | 31 ++++++++++++++ > .../gnutls/gnutls/Add-ptest-support.patch | 4 +- > meta/recipes-support/gnutls/gnutls/c99.patch | 41 ------------------- > .../{gnutls_3.8.12.bb => gnutls_3.8.13.bb} | 9 ++-- > 6 files changed, 62 insertions(+), 49 deletions(-) > create mode 100644 > meta/recipes-support/gnutls/gnutls/0001-tests-mini-dtls-framents-link-to-gnulib.patch > create mode 100644 > meta/recipes-support/gnutls/gnutls/0001-tests-pkcs11-trust-list-fault-fix-issues-in-linking.patch > delete mode 100644 meta/recipes-support/gnutls/gnutls/c99.patch > rename meta/recipes-support/gnutls/{gnutls_3.8.12.bb => gnutls_3.8.13.bb} > (93%) > > diff --git a/meta/recipes-core/images/core-image-ptest.bb > b/meta/recipes-core/images/core-image-ptest.bb > index c08561296f..008b5770a8 100644 > --- a/meta/recipes-core/images/core-image-ptest.bb > +++ b/meta/recipes-core/images/core-image-ptest.bb > @@ -39,6 +39,7 @@ QB_MEM:virtclass-mcextend-python3 = "-m 2048" > QB_MEM:virtclass-mcextend-python3-cryptography = "-m 5100" > QB_MEM:virtclass-mcextend-python3-numpy = "-m 4096" > QB_MEM:virtclass-mcextend-tcl = "-m 5100" > +QB_MEM:virtclass-mcextend-gnutls = "-m 1536" > > TEST_SUITES = "ping ssh parselogs ptest" > > diff --git > a/meta/recipes-support/gnutls/gnutls/0001-tests-mini-dtls-framents-link-to-gnulib.patch > b/meta/recipes-support/gnutls/gnutls/0001-tests-mini-dtls-framents-link-to-gnulib.patch > new file mode 100644 > index 0000000000..7f999c4b22 > --- /dev/null > +++ > b/meta/recipes-support/gnutls/gnutls/0001-tests-mini-dtls-framents-link-to-gnulib.patch > @@ -0,0 +1,25 @@ > +From 68b2fb63c8df61d1480121a859f8c955f4910c01 Mon Sep 17 00:00:00 2001 > +From: Alexander Sosedkin <[email protected]> > +Date: Thu, 30 Apr 2026 13:08:01 +0200 > +Subject: [PATCH] tests/mini-dtls-framents: link to gnulib > + > +Signed-off-by: Alexander Sosedkin <[email protected]> > + > +Upstream-Status: Backport [ > https://github.com/gnutls/gnutls/commit/68b2fb63c8df61d1480121a859f8c955f4910c01 > ] > +Signed-off-by: Peter Marko <[email protected]> > +--- > + tests/Makefile.am | 1 + > + 1 file changed, 1 insertion(+) > + > +diff --git a/tests/Makefile.am b/tests/Makefile.am > +index f8797964d..1b27df751 100644 > +--- a/tests/Makefile.am > ++++ b/tests/Makefile.am > +@@ -524,6 +524,7 @@ pathbuf_CPPFLAGS = $(AM_CPPFLAGS) \ > + mini_dtls_fragments_CPPFLAGS = $(AM_CPPFLAGS) \ > + -I$(top_srcdir)/gl \ > + -I$(top_builddir)/gl > ++mini_dtls_fragments_LDADD = $(LDADD) ../gl/libgnu.la > + > + if ENABLE_PKCS11 > + if !WINDOWS > diff --git > a/meta/recipes-support/gnutls/gnutls/0001-tests-pkcs11-trust-list-fault-fix-issues-in-linking.patch > b/meta/recipes-support/gnutls/gnutls/0001-tests-pkcs11-trust-list-fault-fix-issues-in-linking.patch > new file mode 100644 > index 0000000000..b15a05d5b6 > --- /dev/null > +++ > b/meta/recipes-support/gnutls/gnutls/0001-tests-pkcs11-trust-list-fault-fix-issues-in-linking.patch > @@ -0,0 +1,31 @@ > +From 9c573a2a0e7473ab79c43a6d3ecb0ab68ce896dc Mon Sep 17 00:00:00 2001 > +From: Daiki Ueno <[email protected]> > +Date: Thu, 7 May 2026 09:42:09 +0900 > +Subject: [PATCH] tests/pkcs11/trust-list-fault: fix issues in linking > + > +This fixes the use of automake variables and also adds the linked mock > +library in .gitignore. > + > +Signed-off-by: Daiki Ueno <[email protected]> > + > +Upstream-Status: Backport [ > https://github.com/gnutls/gnutls/commit/9c573a2a0e7473ab79c43a6d3ecb0ab68ce896dc > ] > +Signed-off-by: Peter Marko <[email protected]> > +--- > + tests/Makefile.am | 4 ++-- > + 1 file changed, 2 insertions(+), 2 deletions(-) > + > +diff --git a/tests/Makefile.am b/tests/Makefile.am > +index 1b27df751..f6a60a32b 100644 > +--- a/tests/Makefile.am > ++++ b/tests/Makefile.am > +@@ -540,8 +540,8 @@ pkcs11_os_locking_ok_DEPENDENCIES = libpkcs11mock4.la > libutils.la > + pkcs11_os_locking_ok_LDADD = $(LDADD) $(LIBDL) > + pkcs11_long_label_DEPENDENCIES = libpkcs11mock4.la libutils.la > + pkcs11_long_label_LDADD = $(LDADD) $(LIBDL) > +-pkcs11_trust_fault_DEPENDENCIES = libpkcs11mock5.la libutils.la > +-pkcs11_trust_fault_LDADD = $(LDADD) $(LIBDL) > ++pkcs11_trust_list_fault_DEPENDENCIES = libpkcs11mock5.la libutils.la > ++pkcs11_trust_list_fault_LDADD = $(LDADD) $(LIBDL) > + endif > + endif > + > diff --git a/meta/recipes-support/gnutls/gnutls/Add-ptest-support.patch > b/meta/recipes-support/gnutls/gnutls/Add-ptest-support.patch > index 398c0464e0..8c867a5a40 100644 > --- a/meta/recipes-support/gnutls/gnutls/Add-ptest-support.patch > +++ b/meta/recipes-support/gnutls/gnutls/Add-ptest-support.patch > @@ -29,7 +29,7 @@ diff --git a/configure.ac b/configure.ac > index 1744813..efb9e34 100644 > --- a/configure.ac > +++ b/configure.ac > -@@ -1448,6 +1448,8 @@ AC_SUBST(LIBGNUTLS_CFLAGS) > +@@ -1413,6 +1413,8 @@ AC_SUBST(LIBGNUTLS_CFLAGS) > > AM_CONDITIONAL(NEEDS_LIBRT, test "$gnutls_needs_librt" = "yes") > > @@ -42,7 +42,7 @@ diff --git a/tests/Makefile.am b/tests/Makefile.am > index 189d068..8430b05 100644 > --- a/tests/Makefile.am > +++ b/tests/Makefile.am > -@@ -721,6 +721,12 @@ SH_LOG_COMPILER = $(SHELL) > +@@ -745,6 +745,12 @@ SH_LOG_COMPILER = $(SHELL) > AM_VALGRINDFLAGS = --suppressions=$(srcdir)/suppressions.valgrind > LOG_COMPILER = $(LOG_VALGRIND) > > diff --git a/meta/recipes-support/gnutls/gnutls/c99.patch > b/meta/recipes-support/gnutls/gnutls/c99.patch > deleted file mode 100644 > index 3f41241deb..0000000000 > --- a/meta/recipes-support/gnutls/gnutls/c99.patch > +++ /dev/null > @@ -1,41 +0,0 @@ > -From 203d8f2187bb7f483290e0f8b7b48b152b1d027f Mon Sep 17 00:00:00 2001 > -From: Ross Burton <[email protected]> > -Date: Thu, 5 Mar 2026 11:33:57 +0000 > -Subject: [PATCH] configure: make the C99 detection more resiliant > - > -autoconf 2.73 will default to C23 by default, which means that the >C99 > -detection logic in configure.ac will fail because it only handles c11 > -and c99. > - > -Instead of adding c23 to the list and then breaking again in the future, > -flip the logic around (as suggested by Zack Weinberg) and check > -explicitly for just c89. > - > -Closes #1806. > - > -Upstream-Status: Backport [ > https://gitlab.com/gnutls/gnutls/-/merge_requests/2081] > -Signed-off-by: Ross Burton <[email protected]> > ---- > - configure.ac | 6 +++--- > - 1 file changed, 3 insertions(+), 3 deletions(-) > - > -diff --git a/configure.ac b/configure.ac > -index 740fb6339..c708d8f5e 100644 > ---- a/configure.ac > -+++ b/configure.ac > -@@ -54,9 +54,9 @@ AC_USE_SYSTEM_EXTENSIONS > - # Require C99 support > - # > - AS_CASE([$ac_prog_cc_stdc], > -- [c11 | c99], [AC_DEFINE([C99_MACROS], 1, [C99 macros are supported])], > -- [AC_MSG_WARN([[Compiler does not support C99. It may not be able to > compile the project.]])] > --) > -+ [c89], > -+ [AC_MSG_WARN([[Compiler does not support C99. It may not be able to > compile the project.]])], > -+ [AC_DEFINE([C99_MACROS], 1, [C99 macros are supported])]) > - > - AM_CONDITIONAL(CROSS_COMPILING, test "$cross_compiling" = yes) > - > --- > -2.43.0 > - > diff --git a/meta/recipes-support/gnutls/gnutls_3.8.12.bb > b/meta/recipes-support/gnutls/gnutls_3.8.13.bb > similarity index 93% > rename from meta/recipes-support/gnutls/gnutls_3.8.12.bb > rename to meta/recipes-support/gnutls/gnutls_3.8.13.bb > index 8554ab943d..943864d4ba 100644 > --- a/meta/recipes-support/gnutls/gnutls_3.8.12.bb > +++ b/meta/recipes-support/gnutls/gnutls_3.8.13.bb > @@ -23,10 +23,11 @@ SRC_URI = " > https://www.gnupg.org/ftp/gcrypt/gnutls/v${SHRT_VER}/gnutls-${PV}.tar > > file://0001-Creating-.hmac-file-should-be-excuted-in-target-envi.patch \ > file://run-ptest \ > file://Add-ptest-support.patch \ > - file://c99.patch \ > + > file://0001-tests-pkcs11-trust-list-fault-fix-issues-in-linking.patch \ > + file://0001-tests-mini-dtls-framents-link-to-gnulib.patch \ > " > > -SRC_URI[sha256sum] = > "a7b341421bfd459acf7a374ca4af3b9e06608dcd7bd792b2bf470bea012b8e51" > +SRC_URI[sha256sum] = > "ffed8ec1bf09c2426d4f14aae377de4753b53e537d685e604e99a8b16ca9c97e" > > inherit autotools texinfo pkgconfig gettext lib_package gtk-doc ptest > > @@ -63,10 +64,6 @@ do_configure:prepend() { > for dir in . lib; do > rm -f ${dir}/aclocal.m4 ${dir}/m4/libtool.m4 > ${dir}/m4/lt*.m4 > done > - > - # remove on next upgrade when release tarball gets fixed > - # https://gitlab.com/gnutls/gnutls/-/issues/1797 > - cp -p ${S}/doc/stamp_enums ${S}/doc/stamp_error_codes > } > > do_compile_ptest() { > -- > 2.43.0 > >
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#239910): https://lists.openembedded.org/g/openembedded-core/message/239910 Mute This Topic: https://lists.openembedded.org/mt/120026999/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
