Hi Yoann, Something went wrong from myside. I will check and share v2 .
Apologies for the confusion. Regards, Jaipaul ________________________________ From: Yoann Congal <[email protected]> Sent: Wednesday, July 8, 2026 5:19 PM To: Jaipaul Cheernam <[email protected]>; [email protected] <[email protected]> Subject: Re: [OE-core] [PATCH] gzip: fix CVE-2026-41992 On Tue Jul 7, 2026 at 4:34 PM CEST, Jaipaul Cheernam via lists.openembedded.org wrote: > Backport upstream fix for a global buffer overflow in the LZH > decompression logic (unlzh.c). The left[] and right[] global arrays > shared across LZW and LZH decompression routines are not reinitialized > between files processed in the same invocation, allowing an > out-of-bounds read in the LZH decoder. > > Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-41992 > Signed-off-by: Jaipaul Cheernam <[email protected]> > --- > .../gzip/gzip-1.14/CVE-2026-41992.patch | 32 +++++++++++++++++++ > meta/recipes-extended/gzip/gzip_1.14.bb | 1 + > 2 files changed, 33 insertions(+) > create mode 100644 meta/recipes-extended/gzip/gzip-1.14/CVE-2026-41992.patch > > diff --git a/meta/recipes-extended/gzip/gzip-1.14/CVE-2026-41992.patch > b/meta/recipes-extended/gzip/gzip-1.14/CVE-2026-41992.patch > new file mode 100644 > index 0000000000..5d3534fcb1 > --- /dev/null > +++ b/meta/recipes-extended/gzip/gzip-1.14/CVE-2026-41992.patch > @@ -0,0 +1,32 @@ > +From 63dbf6b3b9e6e781df1a6a64e609b10e23969681 Mon Sep 17 00:00:00 2001 > +From: Paul Eggert <[email protected]> > +Date: Wed, 15 Apr 2026 12:00:17 -0700 > +Subject: gzip: don't mishandle .lzh after .Z > + > +Problem reported by Michal Majchrowicz. > +* unlzh.c (read_c_len): Clear left and right when n == 0. > + > +CVE: CVE-2026-41992 > +Upstream-Status: Backport > [https://cgit.git.savannah.gnu.org/cgit/gzip.git/commit/?id=63dbf6b3b9e6e781df1a6a64e609b10e23969681] > +Signed-off-by: Jaipaul Cheernam <[email protected]> Hello, This patch is slightly different from upstream (without explanation): -Subject: =?UTF-8?q?gzip:=20don=E2=80=99t=20mishandle=20.lzh=20after=20.Z?= -MIME-Version: 1.0 -Content-Type: text/plain; charset=UTF-8 -Content-Transfer-Encoding: 8bit +Subject: gzip: don't mishandle .lzh after .Z -Problem reported by Michał Majchrowicz. +Problem reported by Michal Majchrowicz. ... and the THANKS file was dropped. Michał name was transcribed as Michal. I don't know how "nitpickery" it is... Regards, -- Yoann Congal Smile ECS
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#240504): https://lists.openembedded.org/g/openembedded-core/message/240504 Mute This Topic: https://lists.openembedded.org/mt/120157118/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
