On Tue Sep 29, 2026 at 6:18 AM CEST, Hetvi Thakar -X (hthakar - E INFOCHIPS PRIVATE LIMITED at Cisco) via lists.openembedded.org wrote: > From: Hetvi Thakar <[email protected]> > > This patch applies the upstream fix as referenced in [2], > using the commit shown in [1]. > > [1] > https://github.com/GNOME/libxml2/commit/90f293ba74d28b1d570920382e707586f68ebf35 > [2] https://nvd.nist.gov/vuln/detail/CVE-2026-86143 > > Signed-off-by: Hetvi Thakar <[email protected]> > --- > .../libxml/libxml2/CVE-2026-86143.patch | 91 +++++++++++++++++++ > meta/recipes-core/libxml/libxml2_2.12.10.bb | 1 + > 2 files changed, 92 insertions(+) > create mode 100644 meta/recipes-core/libxml/libxml2/CVE-2026-86143.patch > > diff --git a/meta/recipes-core/libxml/libxml2/CVE-2026-86143.patch > b/meta/recipes-core/libxml/libxml2/CVE-2026-86143.patch > new file mode 100644 > index 0000000000..228b5136bb > --- /dev/null > +++ b/meta/recipes-core/libxml/libxml2/CVE-2026-86143.patch > @@ -0,0 +1,91 @@ > +From 83259eee08067b547d2aaedd436504939b2c343b Mon Sep 17 00:00:00 2001 > +From: Daniel Garcia Moreno <[email protected]> > +Date: Mon, 4 May 2026 09:54:34 +0200 > +Subject: [PATCH] xmlIO: Check for int overflow before calling writecallback > + > +Fix https://gitlab.gnome.org/GNOME/libxml2/-/work_items/1111 > + > +CVE: CVE-2026-86143 > +Upstream-Status: Backport > [https://github.com/GNOME/libxml2/commit/90f293ba74d28b1d570920382e707586f68ebf35] > + > +Backport Changes: > +- Change nbchars to size_t in both Scarthgap write functions before > assigning the size_t result of xmlBufUse(). Add the INT_MAX guard to both > xmlOutputBufferWrite() callback paths. The upstream commit assumes earlier > refactoring that changed nbchars to size_t and routed > xmlOutputBufferWriteEscape() through the protected write path; the existing > flush guards are retained. ^ wrap at 80 chars please. Also, this is not easy to understand, can you make it clearer?
> + > +(cherry picked from commit 90f293ba74d28b1d570920382e707586f68ebf35) > +Signed-off-by: Hetvi Thakar <[email protected]> Thanks! -- Yoann Congal Smile ECS
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#247125): https://lists.openembedded.org/g/openembedded-core/message/247125 Mute This Topic: https://lists.openembedded.org/mt/121485379/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
