On 12/13/25 20:21, Ankur Tyagi via lists.openembedded.org wrote: > I don't see the commit[1] which fixes this CVE in the current recipe > version. > > [1] > https://github.com/civetweb/civetweb/commit/782e18903515f43bafbf2e668994e82bdfa51133 >
The recipe fetches b6ef58f4c4c7fbe90fd1065bccf45b143345f1a6, which is from 30/Sep/2025. The fix is 782e18903515f43bafbf2e668994e82bdfa51133, from 2/Sep/2025 The first and last line are interesting from this log only: $ ~/git/civetweb]$ git log -n 30 --oneline b6ef58f4 (HEAD) Do not scan third party projects <== recipe revision 3784be9d AppVeyor: Add Visual Studio 2022 cafd5f8f Format code 3ee51c19 Update sqlite3 8543cf79 Appveyor: Deactivate SSL for VS2019 / VS2022 9cabe415 Merge branch 'master' of https://github.com/civetweb/civetweb b4afd1e3 Merge pull request #1358 from DL6ER/lua-5.5 c7df0249 Fix timer test b20a7bc1 Set minimum CMAKE version for tests 2fefc5c8 Add Lua 5.5 support 618790d4 Unittest: fix alignment acaf7e3f Use atomic operations in timer test 4bd10c49 AppVeyor build: Replace obsolete Visual Studio builds by new one b3a34ad2 Merge branch 'master' of https://github.com/civetweb/civetweb 98dab2e1 Merge pull request #1355 from aryanrahar/fix/uri-len-dup 48b58d1b Merge branch 'master' into fix/uri-len-dup e06d8d96 Merge pull request #1352 from mfranzen0906/feature/replace-asterisk-with-origin 7b7bde47 Merge pull request #1350 from Geeoon/various-typo-fixes a9900426 Merge pull request #1341 from yubiuser/prevent/CRLF c5844556 Merge pull request #1347 from krispybyte/fix/uri-processing-heap-overflow dfb58aad Merge pull request #1354 from civetweb/dependabot/github_actions/master/actions/checkout-5 3e7ecedd Update SECURITY.md and LICENSE.md d8c74f7c Update README 782e1890 Make parsing of URL encoded forms more robust <== Referenced fix
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#122640): https://lists.openembedded.org/g/openembedded-devel/message/122640 Mute This Topic: https://lists.openembedded.org/mt/116695314/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
