mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-10-20 19:58:34 +00:00
Fixes CVE-2026-107816: an out-of-bounds heap read in the qc_info plugin when reading information_schema.query_cache_info after caching a query that contains embedded null bytes, which could disclose adjacent heap memory or crash the server. Drop c21bb11be28ae9b2432b2a661bf38a197cf9514d.patch, which is already included upstream in 11.4.13. Disable the DuckDB storage engine (new in 11.4.13) via -DPLUGIN_DUCKDB=NO: it bundles its own CMake subproject that is not cross-compile aware and fails do_compile in a cross environment. CVE: CVE-2026-107816 Signed-off-by: Poornima Lokesh <Poornima.Lokesh@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>