Le jeu. 18 juin 2026 à 10:49, Harish Sadineni <[email protected]> a écrit :
> > On 6/16/2026 2:13 PM, Yoann Congal wrote: > > CAUTION: This email comes from a non Wind River email account! > > Do not click links or open attachments unless you recognize the sender > and know the content is safe. > > > > On Mon Apr 20, 2026 at 6:24 AM CEST, Harish via lists.openembedded.org > Sadineni wrote: > >> From: Harish Sadineni <[email protected]> > >> > >> CVE: CVE-2025-69646 > >> > >> PR 33638 > >> * dwarf.c (display_debug_rnglists_list): Return bool. Rename > >> "inital_length" to plain "length". Verify length is large > >> enough to read header. Limit length to rest of section. > >> Similarly limit offset_entry_count. > >> (display_debug_ranges): Check display_debug_rnglists_unit_header > >> return status. Stop output on error. > >> > >> Upstream-Status: Backport [ > https://sourceware.org/git/?p=binutils-gdb.git;a=patch;h=598704a00cbac5e85c2bedd363357b5bf6fcee33 > ] > >> > >> Signed-off-by: Harish Sadineni <[email protected]> > >> --- > > Hello Harish, > > > > This patch was lost for a time, my fault, sorry. > > > > Now, when I try to apply it, do_patch fails for binutils. Could you > > rebase on the latest scarthgap and send a v2? > Hi Yoann, > > CVE-2025-69648 is a duplicate of CVE-2025-69646. > > The fix for CVE-2025-69648 has already been merged into Scarthgap, so > the corresponding fix for CVE-2025-69646 is already present > and no additional patch is required. > That explains the do_patch failure... In that case, CVE-2025-69646 needs to be added to the "CVE: " line in https://git.openembedded.org/openembedded-core/tree/meta/recipes-devtools/binutils/binutils/CVE-2025-69648.patch?h=scarthgap What do you think? If that's correct, could you please send the patch for it? Thanks!Could you handle it please? Thanks, > Harish > > > > Thanks! > > > [...] -- Yoann Congal Smile ECS
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#239070): https://lists.openembedded.org/g/openembedded-core/message/239070 Mute This Topic: https://lists.openembedded.org/mt/118915007/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
