On Fri Jul 3, 2026 at 5:18 PM CEST, Yoann Congal wrote: > On Mon Jun 29, 2026 at 9:16 AM CEST, Vijay Anusuri via lists.openembedded.org > wrote: >> From: Peter Marko <[email protected]> >> >> Solves CVE-2026-33846, CVE-2026-42009, CVE-2026-33845, CVE-2026-42010, >> CVE-2026-3833, CVE-2026-42011, CVE-2026-42012, CVE-2026-42013, >> CVE-2026-42014, CVE-2026-5260, CVE-2026-42015, CVE-2026-3832 and >> CVE-2026-5419. >> >> Release notes: [1] >> >> Rebase patches and drop patch included in this release. >> Add patches to fix linking with musl libc. >> Increase memory needed to successfully run test key-openssl. >> Drop code for previous release tarball problem. >> >> [1] https://github.com/gnutls/gnutls/blob/3.8.13/NEWS >> >> Signed-off-by: Peter Marko <[email protected]> >> Signed-off-by: Mathieu Dubois-Briand <[email protected]> >> Signed-off-by: Richard Purdie <[email protected]> >> (cherry picked from commit 1193b0778a0f81bd75f7ec6f8f44fa44cf4b8f5e) >> Signed-off-by: Vijay Anusuri <[email protected]> >> --- > Hello Vijay, > > Sorry but the linked changelog lists new features and evolution not > limited to bugfixes: >> ** libgnutls: Allow fetching object type metadata for PKCS#11 keys >> A new library function, gnutls_pkcs11_obj_get_pk_algorithm, >> has been added to check the public key algorithms of PKCS#11 key objects. >> Object types other than CKO_PRIVATE_KEY are currently not supported. >> Contributed by Ghadi Elie Rahme (!2074). >> >> ** API and ABI modifications: >> gnutls_hpke_kem_t: New enum >> gnutls_hpke_kdf_t: New enum >> gnutls_hpke_aead_t: New enum >> gnutls_hpke_mode_t: New enum >> gnutls_hpke_role_t: New enum >> gnutls_hpke_context_st: New context structure >> gnutls_hpke_init: New function >> gnutls_hpke_deinit: New function >> gnutls_hpke_encap: New function >> gnutls_hpke_seal: New function >> gnutls_hpke_decap: New function >> gnutls_hpke_open: New function >> gnutls_hpke_derive_keypair: New function >> gnutls_hpke_export: New function >> gnutls_pkcs11_obj_get_pk_algorithm: New function > > Thus, this upgrade is not acceptable on the stable branch, sorry. > > Regards,
And also, FYI, this upgrade was requested (and rejected) before: https://lore.kernel.org/all/[email protected]/ Regards, -- Yoann Congal Smile ECS
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#240124): https://lists.openembedded.org/g/openembedded-core/message/240124 Mute This Topic: https://lists.openembedded.org/mt/120026999/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
