mirror of
https://git.yoctoproject.org/poky
synced 2026-07-27 19:37:10 +00:00
b45fdb365d
Prevent attackers to cause a denial of service (application crash) or possibly have unspecified other impact when the application processes untrusted LZ4 frames. For example, LZ4F_createCDict_advanced in lib/lz4frame.c mishandles NULL checks. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-62813 Upstream patch: https://github.com/lz4/lz4/commit/f64efec011c058bd70348576438abac222fe6c82 (From OE-Core rev: 0a63e3e120cc6958e2963a3ad510ec7c03f1adae) Signed-off-by: David Nyström <david.nystrom@est.tech> Signed-off-by: Steve Sakoman <steve@sakoman.com>