Re: [Buildroot] [PATCH 1/2] package/libgpiod2: security bump to 2.2.4

[Julien Olivain via buildroot <buildroot@buildroot.org>]

On 10/04/2026 16:57, Marcus Hoffmann via buildroot wrote:
> Bug fixes:
> - fix buffer over-read bugs when translating uAPI structs to library 
> types
> - fix variable and argument types where necessary
> - sanitize values returned by the kernel to avoid potential buffer 
> overflows
> - fix memory leaks in gpio-tools
> - add missing return value checks in gpio-tools
> - fix period parsing in gpio-tools
> - use correct loop counter in error path in gpio-manager
> 
> Improvements:
> - make tests work with newer coreutils by removing cases checking 
> tools'
>   behavior on SIGINT which stopped working due to changes in behavior 
> of the
>   timeout tool
> 
> See: 
> https://git.kernel.org/pub/scm/libs/libgpiod/libgpiod.git/tree/NEWS?h=v2.2.4
> 
> Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>

Series applied to master, thanks. I added a comment in the commit log
that the no CVE published for this. We usually mark bumps as "security"
only when there is an advisory, but since the changelog was explicitly
mentioning those security fixes, I kept the "security" but added the
comment. See:
https://gitlab.com/buildroot.org/buildroot/-/commit/6ac53518a0ceb0611ee08adef500fc8d2994d21a

Best regards,

Julien.
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot