[Midnightbsd-cvs] [MidnightBSD/mports] 21867e: archivers/gzip: fix CVE-2026-41992

[Lucas Holt]

  Branch: refs/heads/archivers/gzip
  Home:   https://github.com/MidnightBSD/mports
  Commit: 21867e2042f64ccbe3fff82c810c219e9dffb992
      https://github.com/MidnightBSD/mports/commit/21867e2042f64ccbe3fff82c810c219e9dffb992
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-27 (Thu, 27 Aug 2026)

  Changed paths:
    M archivers/gzip/Makefile
    A archivers/gzip/files/patch-unlzh.c

  Log Message:
  -----------
  archivers/gzip: fix CVE-2026-41992

Clear the shared LZH decoding arrays before starting a stream so stale state from prior LZW input cannot cause an out-of-bounds read. Bump PORTREVISION for the patched package.

AI-Assisted-by: OpenAI Codex <noreply at openai.com>
Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications