Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package aria2 for openSUSE:Factory checked in at 2026-09-22 20:30:54 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/aria2 (Old) and /work/SRC/openSUSE:Factory/.aria2.new.383539 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "aria2" Tue Sep 22 20:30:54 2026 rev:87 rq:1379734 version:1.37.0 Changes: -------- --- /work/SRC/openSUSE:Factory/aria2/aria2.changes 2026-07-14 13:57:10.649902111 +0200 +++ /work/SRC/openSUSE:Factory/.aria2.new.383539/aria2.changes 2026-09-22 20:32:34.584278357 +0200 @@ -1,0 +2,7 @@ +Tue Sep 22 17:32:12 UTC 2026 - Martin Pluskal <[email protected]> + +- CVE-2026-75421: stack buffer underflow in IOFile::getLine() when + a line begins with a NUL byte (boo#1276754) + * aria2-Fix-stack-buffer-underflow-in-IOFile-getLine.patch + +------------------------------------------------------------------- New: ---- aria2-Fix-stack-buffer-underflow-in-IOFile-getLine.patch ----------(New B)---------- New: a line begins with a NUL byte (boo#1276754) * aria2-Fix-stack-buffer-underflow-in-IOFile-getLine.patch ----------(New E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ aria2.spec ++++++ --- /var/tmp/diff_new_pack.2tfS3J/_old 2026-09-22 20:32:35.604321124 +0200 +++ /var/tmp/diff_new_pack.2tfS3J/_new 2026-09-22 20:32:35.608321292 +0200 @@ -26,6 +26,8 @@ Source0: https://github.com/aria2/aria2/releases/download/release-%{version}/%{name}-%{version}.tar.xz #PATCH-FIX-UPSTREAM bsc#1257934 Fix build with Nettle 4.0 Patch0: aria2-Fix-build-with-nette4.patch +#PATCH-FIX-UPSTREAM CVE-2026-75421 boo#1276754 https://github.com/aria2/aria2/pull/2376 +Patch1: aria2-Fix-stack-buffer-underflow-in-IOFile-getLine.patch BuildRequires: gcc-c++ BuildRequires: pkgconfig BuildRequires: pkgconfig(cppunit) ++++++ aria2-Fix-stack-buffer-underflow-in-IOFile-getLine.patch ++++++ >From cc516929944474e9c992d6d9bcd8ed217e04fb5f Mon Sep 17 00:00:00 2001 From: Zhai Liangliang <[email protected]> Date: Fri, 7 Aug 2026 17:05:07 +0800 Subject: [PATCH] stack-buffer-underflow in function aria2::IOFile::getLine --- src/IOFile.cc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/IOFile.cc b/src/IOFile.cc index 3302dda2c5..edc6cafdb2 100644 --- a/src/IOFile.cc +++ b/src/IOFile.cc @@ -87,7 +87,7 @@ std::string IOFile::getLine() while (gets(buf.data(), buf.size())) { size_t len = strlen(buf.data()); bool lineBreak = false; - if (buf[len - 1] == '\n') { + if (len > 0 && buf[len - 1] == '\n') { --len; lineBreak = true; }
