mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-09-10 16:24:17 -09:00
678c631c5e
Buildroot LTS 2025.02.x utilises libglib2 version 2.82.5 which is prone to CVE-2025-6052 [1]. 0001-gstring-Fix-overflow-check-when-expanding-the-string.patch is included in the package/libglib2 directory. This patch mitigates CVE-2025-6052 as seen in [1], by backporting to libglib2 2.82.5. libglib2 shares part of its infrastructure with libglib2-bootstrap, by adding the patch in package/libglib2 the patch isn't applied to libglib2-bootstrap. When building libglib2, the patch was correctly applied in output/build/host-libglib2-2.82.5/glib/gstring.c . When building libglib2-bootstrap it was verified that the patch was not applied here. Signed-off-by: Tim Soubry <tim.soubry@mind.be> [Arnout: fix checkpackage error] Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>