mirror of
https://git.yoctoproject.org/poky
synced 2026-09-20 12:49:33 +02:00
83b4945732
resolv: More types as unknown in ns_sprintrrf (CVE-2026-5435) Specifically, CERT, TKEY, TSIG, OPT. This removes the buggy implementations of TSIG, fixing bug 34033, and partially fixing bug 34069. Reference: [1] https://nvd.nist.gov/vuln/detail/CVE-2026-5435 [2] https://sourceware.org/bugzilla/show_bug.cgi?id=34033 [3] https://sourceware.org/git/?p=glibc.git;a=commit;h=ca44a6609c29a683b03575fa035c6d17aa591e72 (From OE-Core rev: 336e429b4d0048964cf883c187438ca7c5aca2ea) Signed-off-by: Hemanth Kumar M D <Hemanth.KumarMD@windriver.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> [YC: This patch will change output of a debug and deprecated function. Upstream chose to remove the vulnerable implementation instead of fixing it. See: https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0011 ] Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>