mirror of
https://git.yoctoproject.org/poky
synced 2026-09-20 21:49:33 +02:00
d0d68df4c3
These patches apply the upstream fixes [1][2], which address getter-to-setter aliasing issues in libpng chunk setters that could cause stale-pointer reads, as described in [3]. [1]398cbe3df0[2]55d20aaa32[3] https://github.com/pnggroup/libpng/issues/836 Reference: https://security-tracker.debian.org/tracker/CVE-2026-34757 https://nvd.nist.gov/vuln/detail/CVE-2026-34757 Test results on qemux86-64 using ptest-runner: START: ptest-runner 2026-06-04T11:29 BEGIN: /usr/lib/libpng/ptest PASS: tests/pnggetset Testsuite summary # TOTAL: 33 # PASS: 33 # SKIP: 0 # XFAIL: 0 # FAIL: 0 # XPASS: 0 # ERROR: 0 DURATION: 80 END: /usr/lib/libpng/ptest 2026-06-04T11:31 STOP: ptest-runner TOTAL: 1 FAIL: 0 (From OE-Core rev: 392fb4216357fd4eefb6abe3788414f2e60b0889) Signed-off-by: Sudhir Dumbhare <sudumbha@cisco.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev>