mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-09-09 07:51:59 -09:00
d98e3f11e9
Fixes following CVE's:
- CVE-2025-15281
wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory
https://www.cve.org/CVERecord?id=CVE-2025-15281
https://sourceware.org/cgit/glibc/tree/advisories/GLIBC-SA-2026-0003
fixed by upstream commit:
https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=cbf39c26b25801e9bc88499b4fd361ac172d4125
- CVE-2026-0861
Integer overflow in memalign leads to heap corruption
https://www.cve.org/CVERecord?id=CVE-2026-0861
https://sourceware.org/cgit/glibc/tree/advisories/GLIBC-SA-2026-0001
fixed by upstream commit:
https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=b0ec8fb689df862171f0f78994a3bdeb51313545
- CVE-2026-0915
getnetbyaddr and getnetbyaddr_r leak stack contents to DNS resovler
https://www.cve.org/CVERecord?id=CVE-2026-0915
https://sourceware.org/cgit/glibc/tree/advisories/GLIBC-SA-2026-0002
fixed by upstream commit:
https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=453e6b8dbab935257eb0802b0c97bca6b67ba30e
For a full list of changes, see:
https://sourceware.org/git/?p=glibc.git;a=shortlog;h=cbf39c26b25801e9bc88499b4fd361ac172d4125
Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
[Julien: add extra info in commit log]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 18de297a5a)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Buildroot is a simple, efficient and easy-to-use tool to generate embedded Linux systems through cross-compilation. The documentation can be found in docs/manual. You can generate a text document with 'make manual-text' and read output/docs/manual/manual.text. Online documentation can be found at https://buildroot.org/docs.html To build and use the buildroot stuff, do the following: 1) run 'make menuconfig' 2) select the target architecture and the packages you wish to compile 3) run 'make' 4) wait while it compiles 5) find the kernel, bootloader, root filesystem, etc. in output/images You do not need to be root to build or run buildroot. Have fun! Buildroot comes with a basic configuration for a number of boards. Run 'make list-defconfigs' to view the list of provided configurations. Please feed suggestions, bug reports, insults, and bribes back to the buildroot mailing list: buildroot@buildroot.org You can also find us on #buildroot on OFTC IRC. If you would like to contribute patches, please read https://buildroot.org/manual.html#submitting-patches