haveged: upgrade 1.9.20 -> 1.9.22

Changelog:
===========
* Add ReadWritePaths=/dev/shm to systemd service for semaphore creation
  under ProtectSystem=full sandboxing
* Fix privilege escalation via command socket (CVE-2026-41054)
* Check peer credentials before reading command (CVE-2026-41054)
* Handle failing opening of semaphore
* Fix /dev/shm permissions to use sticky bit
* Use chmod after mkdir to ensure correct /dev/shm permissions
* Update libtool: add lib64 search paths, remove dead code

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
This commit is contained in:
Wang Mingyu
2026-05-27 17:47:15 +08:00
committed by Khem Raj
parent 8a256f4677
commit c814e5e56d
@@ -6,8 +6,8 @@ HOMEPAGE = "https://www.issihosts.com/haveged/index.html"
LICENSE = "GPL-3.0-only" LICENSE = "GPL-3.0-only"
LIC_FILES_CHKSUM = "file://COPYING;md5=d32239bcb673463ab874e80d47fae504" LIC_FILES_CHKSUM = "file://COPYING;md5=d32239bcb673463ab874e80d47fae504"
SRCREV = "e2d96806273caa9ce7457e2f8669a3c40517ca27" SRCREV = "21bad00a09233855fbea14ac062bc72b5eabc9a6"
SRC_URI = "git://github.com/jirka-h/haveged.git;branch=master;protocol=https \ SRC_URI = "git://github.com/jirka-h/haveged.git;branch=master;protocol=https;tag=v${PV} \
" "
UPSTREAM_CHECK_URI = "https://github.com/jirka-h/haveged/releases" UPSTREAM_CHECK_URI = "https://github.com/jirka-h/haveged/releases"