mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-09-07 18:10:19 +00:00
Hetvi Thakar
2fb2b9fb1d
This patch applies the upstream 26.4.0rc2 backport for CVE-2026-42304. The upstream fix merge is referenced in [1], and the public CVE advisory is referenced in [2]. The individual backported commit links are recorded in the patch headers. [1] https://github.com/twisted/twisted/commit/2d196123264efb0027eecfe1b430be4a9babdbd8 [2] https://github.com/advisories/GHSA-grgv-6hw6-v9g4 Signed-off-by: Hetvi Thakar <hthakar@cisco.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
24 lines
1.1 KiB
Diff
24 lines
1.1 KiB
Diff
From 2dc37caa8af3559e14fc1a1b36b049851d36943c Mon Sep 17 00:00:00 2001
|
|
From: Adi Roiban <adiroiban@gmail.com>
|
|
Date: Wed, 29 Apr 2026 15:55:05 +0100
|
|
Subject: [PATCH] Update src/twisted/names/newsfragments/12626.bugfix
|
|
|
|
CVE: CVE-2026-42304
|
|
Upstream-Status: Backport [https://github.com/twisted/twisted/commit/9ca319ebf61386dd33354c4ade3946ef84ad58fb]
|
|
|
|
(cherry picked from commit 9ca319ebf61386dd33354c4ade3946ef84ad58fb)
|
|
Signed-off-by: Hetvi Thakar <hthakar@cisco.com>
|
|
---
|
|
src/twisted/names/newsfragments/12626.bugfix | 2 +-
|
|
1 file changed, 1 insertion(+), 1 deletion(-)
|
|
|
|
diff --git a/src/twisted/names/newsfragments/12626.bugfix b/src/twisted/names/newsfragments/12626.bugfix
|
|
index 44896c3e5..179b92d83 100644
|
|
--- a/src/twisted/names/newsfragments/12626.bugfix
|
|
+++ b/src/twisted/names/newsfragments/12626.bugfix
|
|
@@ -1 +1 @@
|
|
-twisted.names was fix for Denial of Service (DoS) attack via resource exhaustion during DNS name decompression. CVE-REFERENCE HERE
|
|
\ No newline at end of file
|
|
+twisted.names was fix for Denial of Service (DoS) attack via resource exhaustion during DNS name decompression. CVE-2026-42304
|
|
\ No newline at end of file
|