On Sun, Dec 14, 2025 at 1:05 AM Gyorgy Sarvari <[email protected]> wrote: > > On 12/13/25 20:21, Ankur Tyagi via lists.openembedded.org wrote: > > I don't see the commit[1] which fixes this CVE in the current recipe > > version. > > > > [1] > > https://github.com/civetweb/civetweb/commit/782e18903515f43bafbf2e668994e82bdfa51133 > > > > The recipe fetches b6ef58f4c4c7fbe90fd1065bccf45b143345f1a6, which is > from 30/Sep/2025. > The fix is 782e18903515f43bafbf2e668994e82bdfa51133, from 2/Sep/2025 > >
Sorry for the confusion, I had recipe open from my 'scarthgap' workspace recipe which fetches d7ba35bbb649209c66e582d5a0244ba988a15159 Your patch is correct. > The first and last line are interesting from this log only: > > $ ~/git/civetweb]$ git log -n 30 --oneline > b6ef58f4 (HEAD) Do not scan third party projects <== recipe revision > 3784be9d AppVeyor: Add Visual Studio 2022 > cafd5f8f Format code > 3ee51c19 Update sqlite3 > 8543cf79 Appveyor: Deactivate SSL for VS2019 / VS2022 > 9cabe415 Merge branch 'master' of https://github.com/civetweb/civetweb > b4afd1e3 Merge pull request #1358 from DL6ER/lua-5.5 > c7df0249 Fix timer test > b20a7bc1 Set minimum CMAKE version for tests > 2fefc5c8 Add Lua 5.5 support > 618790d4 Unittest: fix alignment > acaf7e3f Use atomic operations in timer test > 4bd10c49 AppVeyor build: Replace obsolete Visual Studio builds by new one > b3a34ad2 Merge branch 'master' of https://github.com/civetweb/civetweb > 98dab2e1 Merge pull request #1355 from aryanrahar/fix/uri-len-dup > 48b58d1b Merge branch 'master' into fix/uri-len-dup > e06d8d96 Merge pull request #1352 from > mfranzen0906/feature/replace-asterisk-with-origin > 7b7bde47 Merge pull request #1350 from Geeoon/various-typo-fixes > a9900426 Merge pull request #1341 from yubiuser/prevent/CRLF > c5844556 Merge pull request #1347 from > krispybyte/fix/uri-processing-heap-overflow > dfb58aad Merge pull request #1354 from > civetweb/dependabot/github_actions/master/actions/checkout-5 > 3e7ecedd Update SECURITY.md and LICENSE.md > d8c74f7c Update README > 782e1890 Make parsing of URL encoded forms more robust <== Referenced fix >
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#122641): https://lists.openembedded.org/g/openembedded-devel/message/122641 Mute This Topic: https://lists.openembedded.org/mt/116695314/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
