From 872ba7a5b033bce1472133d8b720c6610ead0675 Mon Sep 17 00:00:00 2001 From: Wang Mingyu Date: Thu, 25 Jun 2026 17:00:44 +0800 Subject: [PATCH] haveged: upgrade 1.9.22 -> 1.9.24 Changelog: =========== - Add --no-command / -C flag to disable command mode at runtime - Disable command mode in haveged.service and haveged-once.service - Enable PrivateNetwork=true and remove ReadWritePaths=/dev/shm in service files - Add PractRand example to man page - Use O_EXCL with sem_open to prevent semaphore pre-planting attacks [pyllyukko] - Recover stale semaphores after SIGKILL by unlinking and retrying - Add sem_close before sem_unlink for proper cleanup ordering - Fix compilation when NO_COMMAND_MODE is defined - Fix out-of-bounds memory access in safein()/safeout() on socket errors - Reject command socket connections from different user namespaces - Use O_NOFOLLOW for PID file to prevent symlink attacks - Open random device with O_CLOEXEC to prevent fd leak across execv - Restrict semaphore permissions from 0644 to 0600 Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj --- .../haveged/{haveged_1.9.22.bb => haveged_1.9.24.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-oe/recipes-extended/haveged/{haveged_1.9.22.bb => haveged_1.9.24.bb} (94%) diff --git a/meta-oe/recipes-extended/haveged/haveged_1.9.22.bb b/meta-oe/recipes-extended/haveged/haveged_1.9.24.bb similarity index 94% rename from meta-oe/recipes-extended/haveged/haveged_1.9.22.bb rename to meta-oe/recipes-extended/haveged/haveged_1.9.24.bb index 281fe1c2c9..68c8d2bdb2 100644 --- a/meta-oe/recipes-extended/haveged/haveged_1.9.22.bb +++ b/meta-oe/recipes-extended/haveged/haveged_1.9.24.bb @@ -6,7 +6,7 @@ HOMEPAGE = "https://www.issihosts.com/haveged/index.html" LICENSE = "GPL-3.0-only" LIC_FILES_CHKSUM = "file://COPYING;md5=d32239bcb673463ab874e80d47fae504" -SRCREV = "21bad00a09233855fbea14ac062bc72b5eabc9a6" +SRCREV = "b52433d9234863050d52358f4a6cea86fbfb8e52" SRC_URI = "git://github.com/jirka-h/haveged.git;branch=master;protocol=https;tag=v${PV} \ "