util-linux: Fix CVE-2026-27456

Pick patch from [1] as 2.39.x upstream backport of [2] mentioned in Debian report in [3].

[1] 79164668a4
[2] 0ba0f14caa
[3] https://security-tracker.debian.org/tracker/CVE-2026-27456

(From OE-Core rev: 9da42b7e29d39a2650d146d9e4a1ffcdb8c1f1ca)

Signed-off-by: Hugo SIMELIERE (Schneider Electric) <hsimeliere.opensource@witekio.com>
Reviewed-by: Bruno VERNAY <bruno.vernay@se.com>
Signed-off-by: Jeremy Rosen <jeremy.rosen@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
This commit is contained in:
Hugo SIMELIERE (Schneider Electric)
2026-05-20 12:59:58 +02:00
committed by Paul Barker
parent 7204e2e6d6
commit 83670737fd
2 changed files with 116 additions and 0 deletions

View File

@@ -46,6 +46,7 @@ SRC_URI = "${KERNELORG_MIRROR}/linux/utils/util-linux/v${MAJOR_VERSION}/util-lin
file://sys-utils-hwclock-rtc-fix-pointer-usage.patch \
file://CVE-2025-14104-01.patch \
file://CVE-2025-14104-02.patch \
file://CVE-2026-27456.patch \
"
SRC_URI[sha256sum] = "7b6605e48d1a49f43cc4b4cfc59f313d0dd5402fa40b96810bd572e167dfed0f"