mirrors/poky
1
0
Fork 0
mirror of https://git.yoctoproject.org/poky synced 2026-03-09 16:59:40 +01:00
Code Issues Packages Projects Releases Wiki Activity

avahi: patch CVE-2025-68468

Browse Source 
(From OE-Core rev: 1eebd6d5bd5d930aa8ec68f73789ff0bd742441c)

Signed-off-by: Amaury Couderc <amaury.couderc@est.tech>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 9f2ed8adc37a42b561b3c4853cf8106fba39889e)
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
Amaury Couderc
2026-02-09 15:21:00 +01:00
committed by Richard Purdie
parent a57370d30c
commit 0d954471b5
2 changed files with 33 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
meta/recipes-connectivity/avahi/avahi_0.8.bb
View File

@@ -38,6 +38,7 @@ SRC_URI = "${GITHUB_BASE_URI}/download/v${PV}/avahi-${PV}.tar.gz \
file://CVE-2024-52616.patch \
file://CVE-2024-52615.patch \
file://CVE-2025-68276.patch \
file://CVE-2025-68468.patch \
"
GITHUB_BASE_URI = "https://github.com/avahi/avahi/releases/"

32
meta/recipes-connectivity/avahi/files/CVE-2025-68468.patch Normal file
View File

@@ -0,0 +1,32 @@
From 483f83828cfda965fac914ff1b39c63c256372b2 Mon Sep 17 00:00:00 2001
From: Hugo Muis <198191869+friendlyhugo@users.noreply.github.com>
Date: Sun, 2 Mar 2025 18:06:24 +0100
Subject: [PATCH] core: fix DoS bug by removing incorrect assertion
Closes https://github.com/avahi/avahi/issues/683
CVE: CVE-2025-68468
Upstream-Status: Backport
[https://github.com/avahi/avahi/commit/f66be13d7f31a3ef806d226bf8b67240179d309a]
Signed-off-by: Amaury Couderc <amaury.couderc@est.tech>
---
avahi-core/browse.c | 1 -
1 file changed, 1 deletion(-)
diff --git a/avahi-core/browse.c b/avahi-core/browse.c
index 86e4432..79595fe 100644
--- a/avahi-core/browse.c
+++ b/avahi-core/browse.c
@@ -295,7 +295,6 @@ static void lookup_multicast_callback(
lookup_drop_cname(l, interface, protocol, 0, r);
else {
/* It's a normal record, so let's call the user callback */
- assert(avahi_key_equal(b->key, l->key));
b->callback(b, interface, protocol, event, r, flags, b->userdata);
}
--
2.43.0