From: Wang Mingyu <[email protected]>

Changelog:
===========
- Add --no-command / -C flag to disable command mode at runtime
- Disable command mode in haveged.service and haveged-once.service
- Enable PrivateNetwork=true and remove ReadWritePaths=/dev/shm in service files
- Add PractRand example to man page
- Use O_EXCL with sem_open to prevent semaphore pre-planting attacks [pyllyukko]
- Recover stale semaphores after SIGKILL by unlinking and retrying
- Add sem_close before sem_unlink for proper cleanup ordering
- Fix compilation when NO_COMMAND_MODE is defined
- Fix out-of-bounds memory access in safein()/safeout() on socket errors
- Reject command socket connections from different user namespaces
- Use O_NOFOLLOW for PID file to prevent symlink attacks
- Open random device with O_CLOEXEC to prevent fd leak across execv
- Restrict semaphore permissions from 0644 to 0600

Signed-off-by: Wang Mingyu <[email protected]>
---
 .../haveged/{haveged_1.9.22.bb => haveged_1.9.24.bb}            | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta-oe/recipes-extended/haveged/{haveged_1.9.22.bb => 
haveged_1.9.24.bb} (94%)

diff --git a/meta-oe/recipes-extended/haveged/haveged_1.9.22.bb 
b/meta-oe/recipes-extended/haveged/haveged_1.9.24.bb
similarity index 94%
rename from meta-oe/recipes-extended/haveged/haveged_1.9.22.bb
rename to meta-oe/recipes-extended/haveged/haveged_1.9.24.bb
index 281fe1c2c9..68c8d2bdb2 100644
--- a/meta-oe/recipes-extended/haveged/haveged_1.9.22.bb
+++ b/meta-oe/recipes-extended/haveged/haveged_1.9.24.bb
@@ -6,7 +6,7 @@ HOMEPAGE = "https://www.issihosts.com/haveged/index.html";
 LICENSE = "GPL-3.0-only"
 LIC_FILES_CHKSUM = "file://COPYING;md5=d32239bcb673463ab874e80d47fae504"
 
-SRCREV = "21bad00a09233855fbea14ac062bc72b5eabc9a6"
+SRCREV = "b52433d9234863050d52358f4a6cea86fbfb8e52"
 SRC_URI = 
"git://github.com/jirka-h/haveged.git;branch=master;protocol=https;tag=v${PV} \
 "
 
-- 
2.43.0

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#127736): 
https://lists.openembedded.org/g/openembedded-devel/message/127736
Mute This Topic: https://lists.openembedded.org/mt/119970671/21656
Group Owner: [email protected]
Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub 
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to