Upstream release notes:
** Bug fixes
gzip no longer can mistakenly remove the wrong file if some other
process simultaneously renames a gzip destination's ancestor.
[bug present since the beginning]
gzip -d no longer rejects PKZIP signatures, local header, and data
descriptors. These can appear in well-formed streamed zip files.
[bug present since the beginning]
gzip diagnostics now quote file names containing unusual characters.
[bug present since the beginning]
A use of uninitialized memory on some malformed inputs has been fixed.
[bug present since the beginning]
A buffer overflow has been fixed when decompressing an .lzh file
after decompressing a .Z file.
[bug present since the beginning]
When decompressing an .lzh file, the output is no longer corrupted
when an internal bit buffer is not properly cleared.
[bug present since the beginning]
When decompressing an .lzh file after another .lzh file, the output is
no longer corrupted by the previous file's decoding table.
[bug present since the beginning]
gzip --synchronous no longer fails to synchronize unreadable parent
directories on platforms like GNU/Linux that have O_PATH, or to
synchronize any parent directories on platforms like FreeBSD that
have O_SEARCH but not O_PATH.
[bug introduced in gzip-1.7]
On old-fashioned or limited platforms lacking mktemp, gzexe, zdiff
and znew no longer have a race when creating a temporary file.
[bug present since the beginning]
** Changes in behavior
gzip no longer insists on the "C" locale; instead, it follows the
typical practice of using the locale specified by the environment.
This change, which is needed for file name quoting, can affect the
format of floating-point numbers output by gzip's -l and -v options.
Diagnostics are still in English, though.
gzip -l now reports "-Inf%" instead of "0.0%" for the infinite
compression ratio of an empty file.
znew's -P option is now ignored, with a warning. It was present
only to improve performance, and its implementation had too many
bugs to be worth supporting.
Drop two CVE patches that were backports.
Add a patch from upstream to fix the build for aarch64.
Consolidate patches into a single directory instead of split between
gzip-{PV}/ and files/.
Signed-off-by: Ross Burton <[email protected]>
---
...id-failure-to-build-on-linux-aarch64.patch | 44 ++++++++++
.../{gzip-1.14 => files}/wrong-path-fix.patch | 0
.../gzip/gzip-1.14/CVE-2026-41991.patch | 86 -------------------
.../gzip/gzip-1.14/CVE-2026-41992.patch | 64 --------------
.../gzip/{gzip_1.14.bb => gzip_1.15.bb} | 5 +-
5 files changed, 46 insertions(+), 153 deletions(-)
create mode 100644
meta/recipes-extended/gzip/files/0001-build-avoid-failure-to-build-on-linux-aarch64.patch
rename meta/recipes-extended/gzip/{gzip-1.14 => files}/wrong-path-fix.patch
(100%)
delete mode 100644 meta/recipes-extended/gzip/gzip-1.14/CVE-2026-41991.patch
delete mode 100644 meta/recipes-extended/gzip/gzip-1.14/CVE-2026-41992.patch
rename meta/recipes-extended/gzip/{gzip_1.14.bb => gzip_1.15.bb} (90%)
diff --git
a/meta/recipes-extended/gzip/files/0001-build-avoid-failure-to-build-on-linux-aarch64.patch
b/meta/recipes-extended/gzip/files/0001-build-avoid-failure-to-build-on-linux-aarch64.patch
new file mode 100644
index 00000000000..b737d126b25
--- /dev/null
+++
b/meta/recipes-extended/gzip/files/0001-build-avoid-failure-to-build-on-linux-aarch64.patch
@@ -0,0 +1,44 @@
+From b4ed8e73401968bcad749afb0e636dd3ec205ca7 Mon Sep 17 00:00:00 2001
+From: Jim Meyering <[email protected]>
+Date: Mon, 21 Sep 2026 01:42:18 -0700
+Subject: [PATCH] build: avoid failure to build on linux aarch64
+X-ARM-No-Footer: NoDisclaimer
+
+* gzip.c: Include gzip.h only after all system headers.
+gzip.h's "head" definition affected a subsequent signal.h-
+included system struct member named "head".
+Reported by Adam Sampson in https://bugs.gnu.org/81904
+
+Upstream-Status: Backport [gzip b4ed8e73401968bcad749afb0e636dd3ec205ca7]
+Signed-off-by: Ross Burton <[email protected]>
+---
+ gzip.c | 6 +++++-
+ 1 file changed, 5 insertions(+), 1 deletion(-)
+
+diff --git a/gzip.c b/gzip.c
+index 220f6fc..6c0af7f 100644
+--- a/gzip.c
++++ b/gzip.c
+@@ -58,7 +58,6 @@ static char const license_msg[] =
+
+ #include "tailor.h"
+
+-#include "gzip.h"
+ #include "lzw.h"
+ #include "revision.h"
+ #include "version.h"
+@@ -99,6 +98,11 @@ static char const license_msg[] =
+ # include <utimens.h>
+ #endif
+
++/* Include this only after all system headers. Otherwise, its definition
++ of "head" conflicts with member names in linux-headers 7.2.6's
++ asm/sigcontext.h pulled in via <signal.h>. */
++#include "gzip.h"
++
+ #ifndef MAX_PATH_LEN
+ # define MAX_PATH_LEN 1024 /* max pathname length */
+ #endif
+--
+2.43.0
+
diff --git a/meta/recipes-extended/gzip/gzip-1.14/wrong-path-fix.patch
b/meta/recipes-extended/gzip/files/wrong-path-fix.patch
similarity index 100%
rename from meta/recipes-extended/gzip/gzip-1.14/wrong-path-fix.patch
rename to meta/recipes-extended/gzip/files/wrong-path-fix.patch
diff --git a/meta/recipes-extended/gzip/gzip-1.14/CVE-2026-41991.patch
b/meta/recipes-extended/gzip/gzip-1.14/CVE-2026-41991.patch
deleted file mode 100644
index b1a36440209..00000000000
--- a/meta/recipes-extended/gzip/gzip-1.14/CVE-2026-41991.patch
+++ /dev/null
@@ -1,86 +0,0 @@
-From 661918c7c0d5acf52508107d6bcdeb72a526ce52 Mon Sep 17 00:00:00 2001
-From: Paul Eggert <[email protected]>
-Date: Thu, 16 Apr 2026 12:11:44 -0700
-Subject: [PATCH] gzexe: use -C if lacking mktemp
-MIME-Version: 1.0
-Content-Type: text/plain; charset=UTF-8
-Content-Transfer-Encoding: 8bit
-
-(Problem reported by Michał Majchrowicz.)
-* gzexe.in: If mktemp is needed but not installed,
-use ‘set -C’ to avoid a race when creating a temporary file.
-* zdiff.in: Use the same pattern here, even though the old
-code was probably OK anyway.
-
-CVE: CVE-2026-41991
-Upstream-Status: Backport
[https://cgit.git.savannah.gnu.org/cgit/gzip.git/commit/?id=4e6f8b24ab823146ab8776f0b7fe486ab34d4269]
-Signed-off-by: Jaipaul Cheernam <[email protected]>
----
- NEWS | 13 +++++++++----
- gzexe.in | 1 +
- zdiff.in | 7 +++----
- 3 files changed, 13 insertions(+), 8 deletions(-)
-
-diff --git a/NEWS b/NEWS
-index 881b6b6..3a05d7e 100644
---- a/NEWS
-+++ b/NEWS
-@@ -4,10 +4,6 @@ GNU gzip NEWS -*- outline
-*-
-
- ** Bug fixes
-
-- A buffer overflow has been fixed when decompressing an .lzh file
-- after decompressing a .Z file.
-- [bug present since the beginning]
--
- 'gzip -d' no longer omits the last partial output buffer when the
- input ends unexpectedly on an IBM Z platform.
- [bug introduced in gzip-1.11]
-@@ -18,6 +14,15 @@ GNU gzip NEWS -*-
outline -*-
- 'gzip -S' now rejects suffixes containing '/'.
- [bug present since the beginning]
-
-+ A buffer overflow has been fixed when decompressing an .lzh file
-+ after decompressing a .Z file.
-+ [bug present since the beginning]
-+
-+ On old-fashioned or limited platforms lacking mktemp, gzexe and
-+ zdiff no longer have a race when creating a temporary file.
-+ [bug present since the beginning]
-+
-+
- ** Changes in behavior
-
- The GZIP environment variable is now silently ignored except for the
-diff --git a/gzexe.in b/gzexe.in
-index 1267d6e..09a2571 100644
---- a/gzexe.in
-+++ b/gzexe.in
-@@ -127,6 +127,7 @@ for i do
- tmp=`mktemp "${dir}gzexeXXXXXXXXX"`
- else
- tmp=${dir}gzexe$$
-+ (umask 77; set -C; > "$tmp")
- fi && { cp -p "$file" "$tmp" 2>/dev/null || cp "$file" "$tmp"; } || {
- res=$?
- printf >&2 '%s\n' "$0: cannot copy $file"
-diff --git a/zdiff.in b/zdiff.in
-index a8689a0..c04a8c0 100644
---- a/zdiff.in
-+++ b/zdiff.in
-@@ -156,12 +156,11 @@ case $file2 in
- *) TMPDIR=/tmp/;;
- esac
- if command -v mktemp >/dev/null 2>&1; then
-- tmp=`mktemp "${TMPDIR}zdiffXXXXXXXXX"` ||
-- exit 2
-+ tmp=`mktemp "${TMPDIR}zdiffXXXXXXXXX"`
- else
-- set -C
- tmp=${TMPDIR}zdiff$$
-- fi
-+ (umask 77; set -C; > "$tmp")
-+ fi &&
- 'gzip' -cdfq -- "$file2" > "$tmp" || exit 2
- gzip_status=$(
- exec 4>&1
diff --git a/meta/recipes-extended/gzip/gzip-1.14/CVE-2026-41992.patch
b/meta/recipes-extended/gzip/gzip-1.14/CVE-2026-41992.patch
deleted file mode 100644
index f55c89978d6..00000000000
--- a/meta/recipes-extended/gzip/gzip-1.14/CVE-2026-41992.patch
+++ /dev/null
@@ -1,64 +0,0 @@
-From 63dbf6b3b9e6e781df1a6a64e609b10e23969681 Mon Sep 17 00:00:00 2001
-From: Paul Eggert <[email protected]>
-Date: Wed, 15 Apr 2026 12:00:17 -0700
-Subject: =?UTF-8?q?gzip:=20don=E2=80=99t=20mishandle=20.lzh=20after=20.Z?=
-MIME-Version: 1.0
-Content-Type: text/plain; charset=UTF-8
-Content-Transfer-Encoding: 8bit
-
-Problem reported by Michał Majchrowicz.
-* unlzh.c (read_c_len): Clear left and right when n == 0.
-
-CVE: CVE-2026-41992
-Upstream-Status: Backport
[https://cgit.git.savannah.gnu.org/cgit/gzip.git/commit/?id=63dbf6b3b9e6e781df1a6a64e609b10e23969681]
-Signed-off-by: Jaipaul Cheernam <[email protected]>
----
- NEWS | 4 ++++
- THANKS | 1 +
- unlzh.c | 6 ++++++
- 3 files changed, 11 insertions(+)
-
-diff --git a/NEWS b/NEWS
-index 6388227..8fb8918 100644
---- a/NEWS
-+++ b/NEWS
-@@ -4,6 +4,10 @@ GNU gzip NEWS -*- outline
-*-
-
- ** Bug fixes
-
-+ A buffer overflow has been fixed when decompressing an .lzh file
-+ after decompressing a .Z file.
-+ [bug present since the beginning]
-+
- 'gzip -d' no longer omits the last partial output buffer when the
- input ends unexpectedly on an IBM Z platform.
- [bug introduced in gzip-1.11]
-diff --git a/THANKS b/THANKS
-index 4e545d9..a7d25e4 100644
---- a/THANKS
-+++ b/THANKS
-@@ -186,6 +186,7 @@ Jamie Lokier [email protected]
- Richard Lloyd [email protected]
- David J. MacKenzie [email protected]
- John R MacMillan [email protected]
-+Michał Majchrowicz [email protected]
- Ron Male [email protected]
- Jakub Martisko [email protected]
- Don R. Maszle [email protected]
-diff --git a/unlzh.c b/unlzh.c
-index 3320196..a6cf109 100644
---- a/unlzh.c
-+++ b/unlzh.c
-@@ -232,6 +232,12 @@ read_c_len ()
- c = getbits(CBIT);
- for (i = 0; i < NC; i++) c_len[i] = 0;
- for (i = 0; i < 4096; i++) c_table[i] = c;
-+
-+ /* Needed in case LEFT and RIGHT are reused from a previous
-+ LZW decompression. It may be overkill to clear all of both
-+ arrays, but nobody has had time to analyze this carefully. */
-+ memzero(left, (2 * NC - 1) * sizeof *left);
-+ memzero(right, (2 * NC - 1) * sizeof *left);
- } else {
- i = 0;
- while (i < n) {
diff --git a/meta/recipes-extended/gzip/gzip_1.14.bb
b/meta/recipes-extended/gzip/gzip_1.15.bb
similarity index 90%
rename from meta/recipes-extended/gzip/gzip_1.14.bb
rename to meta/recipes-extended/gzip/gzip_1.15.bb
index d6bd36f89f9..9db300f078c 100644
--- a/meta/recipes-extended/gzip/gzip_1.14.bb
+++ b/meta/recipes-extended/gzip/gzip_1.15.bb
@@ -6,8 +6,7 @@ LICENSE = "GPL-3.0-or-later"
SRC_URI = "${GNU_MIRROR}/gzip/${BP}.tar.gz \
file://run-ptest \
- file://CVE-2026-41992.patch \
- file://CVE-2026-41991.patch \
+ file://0001-build-avoid-failure-to-build-on-linux-aarch64.patch \
"
SRC_URI:append:class-target = " file://wrong-path-fix.patch"
@@ -42,4 +41,4 @@ do_install_ptest() {
${B}/tests/Makefile > ${D}${PTEST_PATH}/src/tests/Makefile
}
-SRC_URI[sha256sum] =
"613d6ea44f1248d7370c7ccdeee0dd0017a09e6c39de894b3c6f03f981191c6b"
+SRC_URI[sha256sum] =
"545886cf57fa88a65e967fbf705903d7fcb2567c82c7342493e82e8d7b1a210b"
--
2.43.0
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#246409):
https://lists.openembedded.org/g/openembedded-core/message/246409
Mute This Topic: https://lists.openembedded.org/mt/121373771/21656
Group Owner: [email protected]
Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-
