mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-08-01 21:23:51 -09:00
e8191c3e17
Fixes the following vulnerabilities by importing upstream patches: - CVE-2026-39979:2f09060afa- CVE-2026-33948:6374ae0bcd- CVE-2026-33947:fb59f14910- CVE-2026-32316:e47e56d226- CVE-2026-40164:0c7d133c3c- CVE-2026-40612:d1a12569d9- CVE-2026-41256:5a015deae3- CVE-2026-41257:01b3cded76- CVE-2026-43894:9761ceb7d6- CVE-2026-43895:9d223f153c- CVE-2026-43896:532ccea608- CVE-2026-44777:f58787c418- CVE-2026-47770:7122866869- CVE-2026-49839:e987df0d46- CVE-2026-54679:46d1da3094Tests were stripped out of the patches. Signed-off-by: Thomas Perale <thomas.perale@mind.be> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
31 lines
1.2 KiB
Diff
31 lines
1.2 KiB
Diff
From 2f09060afab23fe9390cce7cb860b10416e1bf5f Mon Sep 17 00:00:00 2001
|
|
From: itchyny <itchyny@cybozu.co.jp>
|
|
Date: Mon, 13 Apr 2026 11:04:52 +0900
|
|
Subject: [PATCH] Fix out-of-bounds read in jv_parse_sized()
|
|
|
|
This fixes CVE-2026-39979.
|
|
|
|
Co-authored-by: Mattias Wadman <mattias.wadman@gmail.com>
|
|
Upstream: https://github.com/jqlang/jq/commit/2f09060afab23fe9390cce7cb860b10416e1bf5f
|
|
CVE: CVE-2026-39979
|
|
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
|
|
---
|
|
src/jv_parse.c | 3 ++-
|
|
1 file changed, 2 insertions(+), 1 deletion(-)
|
|
|
|
diff --git a/src/jv_parse.c b/src/jv_parse.c
|
|
index aa2054cc09..56847b5eaa 100644
|
|
--- a/src/jv_parse.c
|
|
+++ b/src/jv_parse.c
|
|
@@ -892,8 +892,9 @@ jv jv_parse_sized_custom_flags(const char* string, int length, int flags) {
|
|
|
|
if (!jv_is_valid(value) && jv_invalid_has_msg(jv_copy(value))) {
|
|
jv msg = jv_invalid_get_msg(value);
|
|
- value = jv_invalid_with_msg(jv_string_fmt("%s (while parsing '%s')",
|
|
+ value = jv_invalid_with_msg(jv_string_fmt("%s (while parsing '%.*s')",
|
|
jv_string_value(msg),
|
|
+ length,
|
|
string));
|
|
jv_free(msg);
|
|
}
|