mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-09-01 16:10:25 +00:00
Hetvi Thakar
2fb2b9fb1d
This patch applies the upstream 26.4.0rc2 backport for CVE-2026-42304. The upstream fix merge is referenced in [1], and the public CVE advisory is referenced in [2]. The individual backported commit links are recorded in the patch headers. [1] https://github.com/twisted/twisted/commit/2d196123264efb0027eecfe1b430be4a9babdbd8 [2] https://github.com/advisories/GHSA-grgv-6hw6-v9g4 Signed-off-by: Hetvi Thakar <hthakar@cisco.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
31 lines
1.2 KiB
Diff
31 lines
1.2 KiB
Diff
From 094d33d4073368ab1a85fcf63e3b75addb01fd6a Mon Sep 17 00:00:00 2001
|
|
From: Tomas Illuminati Balbin <dev@tomasilluminati.com>
|
|
Date: Mon, 20 Apr 2026 09:17:13 -0300
|
|
Subject: [PATCH] Update src/twisted/names/dns.py
|
|
|
|
Co-authored-by: Adi Roiban <adiroiban@gmail.com>
|
|
|
|
CVE: CVE-2026-42304
|
|
Upstream-Status: Backport [https://github.com/twisted/twisted/commit/86e1b5490de5baa8ca284d1e6f4f0ade3e8ad7e0]
|
|
|
|
(cherry picked from commit 86e1b5490de5baa8ca284d1e6f4f0ade3e8ad7e0)
|
|
Signed-off-by: Hetvi Thakar <hthakar@cisco.com>
|
|
---
|
|
src/twisted/names/dns.py | 3 +--
|
|
1 file changed, 1 insertion(+), 2 deletions(-)
|
|
|
|
diff --git a/src/twisted/names/dns.py b/src/twisted/names/dns.py
|
|
index 7142d9e75..93e4080bf 100644
|
|
--- a/src/twisted/names/dns.py
|
|
+++ b/src/twisted/names/dns.py
|
|
@@ -2784,8 +2784,7 @@ class Message(tputil.FancyEqMixin):
|
|
# performed across every name in this message. It is installed on
|
|
# the context variable so nested record decoders pick it up without
|
|
# needing to thread it through each signature.
|
|
- token = _decodeContextVar.set(_DecodeContext())
|
|
- try:
|
|
+ with _decodeContextVar.set(_DecodeContext()):
|
|
self.queries = []
|
|
for i in range(nqueries):
|
|
q = Query()
|