CVSROOT: /cvs
Module name: ports
Changes by: [email protected] 2026/10/24 07:29:04
Modified files:
games/godot/pack2: Makefile
games/godot/pack3: Makefile
Added files:
games/godot/pack2/patches:
patch-core_io_resource_format_binary_cpp
patch-core_string_optimized_translation_cpp
patch-core_string_optimized_translation_h
patch-modules_hdr_image_loader_hdr_cpp
patch-thirdparty_README_md
patch-thirdparty_misc_patches_smaz-0002-decompress-input-bounds_patch
patch-thirdparty_misc_smaz_c
games/godot/pack3/patches:
patch-core_io_resource_format_binary_cpp
patch-core_string_optimized_translation_cpp
patch-core_string_optimized_translation_h
patch-modules_hdr_image_loader_hdr_cpp
patch-thirdparty_README_md
patch-thirdparty_misc_patches_smaz-0002-decompress-input-bounds_patch
patch-thirdparty_misc_smaz_c
Log message:
Backport security fixes for godot44 and godot. Those address
out-of-bounds read/write and heap overflow vulnerabilities.
CVE-2026-110734, 110735, and 110736, all of "disputed" severity.
There is a godot3 version of this being worked on upstream, but it
currently doesn't build.
Thanks to jca@ for pointing me to it.
