Enoch Ng 9747726708 libxpm: fix CVE-2026-4367 ...

Backport the upstream fix for CVE-2026-4367, in which the
`xpmNextWord()` function could attempt to read beyond the file's
end due to improper validation of file boundaries.

Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-4367

(From OE-Core rev: b3f8956f38b2f2cb0f260ab8853e9d028831f420)

Signed-off-by: Enoch Ng <enoch.ng@windriver.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>

2026-07-30 13:21:16 +01:00

..

0001-Fix-CVE-2026-4367-Out-of-bounds-read-in-xpmNextWord.patch

libxpm: fix CVE-2026-4367

2026-07-30 13:21:16 +01:00