Hello, On Mon Oct 12, 2026 at 7:48 PM CEST, Rohini Sangam via lists.openembedded.org wrote: > Pick patch from [1] also mentioned at Debian tracker in [2] > > [1] > https://github.com/pmqs/IO-Compress/commit/f2db247bf90d4cc7ee2710be384946081f3b4610 > [2] https://security-tracker.debian.org/tracker/CVE-2026-48962 > > Signed-off-by: Rohini Sangam <[email protected]> > --- > .../perl/files/CVE-2026-48962.patch | 168 ++++++++++++++++++ > meta/recipes-devtools/perl/perl_5.38.4.bb | 1 + > 2 files changed, 169 insertions(+) > create mode 100644 meta/recipes-devtools/perl/files/CVE-2026-48962.patch > > diff --git a/meta/recipes-devtools/perl/files/CVE-2026-48962.patch > b/meta/recipes-devtools/perl/files/CVE-2026-48962.patch > new file mode 100644 > index 0000000000..b883f8e13e > --- /dev/null > +++ b/meta/recipes-devtools/perl/files/CVE-2026-48962.patch > @@ -0,0 +1,168 @@ > +From f2db247bf90d4cc7ee2710be384946081f3b4610 Mon Sep 17 00:00:00 2001 > +From: pmqs <[email protected]> > +Date: Sat, 16 May 2026 17:48:34 +0100 > +Subject: [PATCH] remove use of eval in globmapper. #73 > + > +CVE: CVE-2026-48962 > +Upstream-Status: Backport > [https://github.com/pmqs/IO-Compress/commit/f2db247bf90d4cc7ee2710be384946081f3b4610] > + > +Signed-off-by: Rohini Sangam <[email protected]> > +--- > + cpan/IO-Compress/lib/File/GlobMapper.pm | 52 ++++++++++++++++++++----- > + cpan/IO-Compress/t/globmapper.t | 52 ++++++++++++++++++++++++- > + 2 files changed, 94 insertions(+), 10 deletions(-) > + > +diff --git a/cpan/IO-Compress/lib/File/GlobMapper.pm > b/cpan/IO-Compress/lib/File/GlobMapper.pm > +index f015b16..8936146 100644 > +--- a/cpan/IO-Compress/lib/File/GlobMapper.pm > ++++ b/cpan/IO-Compress/lib/File/GlobMapper.pm > +@@ -29,6 +29,11 @@ our ($VERSION, @EXPORT_OK); > + $VERSION = '1.001'; > + @EXPORT_OK = qw( globmap ); > + > ++our $BEGIN_DELIM = "\xFF"######################### ^ that # block is new and does not look right.
Can you check? Regards, -- Yoann Congal Smile ECS
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#247754): https://lists.openembedded.org/g/openembedded-core/message/247754 Mute This Topic: https://lists.openembedded.org/mt/121719641/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
