From patchwork Thu Aug 20 14:47:34 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: "Jakub Szczudlo (Nokia)" X-Patchwork-Id: 95930 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 59B79C5DF85 for ; Thu, 20 Aug 2026 14:47:42 +0000 (UTC) Received: from MRWPR03CU001.outbound.protection.outlook.com (MRWPR03CU001.outbound.protection.outlook.com [40.107.130.38]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.367.1787237259882501533 for ; Thu, 20 Aug 2026 07:47:40 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@nokia.com header.s=selector1 header.b=ZZuDVpGP; spf=permerror, err=parse error for token &{10 18 %{i}._ip.%{h}._ehlo.%{d}._spf.vali.email}: invalid domain name (domain: nokia.com, ip: 40.107.130.38, mailfrom: jakub.szczudlo@nokia.com) ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=cjQ6ObqKTUpTYxM9rXO91nfnoLFVtpfI8MRHCyjXq78qQ5BmExepP+GHM2yDtBL+NTbYTpB8bjFSMvkn3SAgn+vHR/HHt4Zik90UpvFBIolJYajrXzE44hL5EdO/tLbrEuY4ucHJkiN6hzCbBEKPcad/LZjzB3HFDbL0YIa5p0iuCsv4vsAKfyLloV363bAliJptucn8feziEA8ZELIIfGp6UlQgb5WM/oCd0iOz+NeSNqPDlIhF9Cd4q9tjZ0v2Yv0VuLd/v6jLgA3ByWS9DNvaA848sGCBoYT96HsQTYAXYJhAioUMn+wxOljCKgDos4MIGr05YsbmppoutS+OpQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=V/PwfANed5nruknWORT588keftiNRNEpyRC9LN0Z6aQ=; b=wc2aTM93VdDJ/0wNCnFs8lVRwTHYww1yQ0mySXo2fO3CRsnBHhF/FCs25Zjm91Nbr6i/KL2eZfXlnP40hWgiczFUSrRSaYP3tkkFS6ohoQZWEycA5w4iwDoMVf2Idh/zRZahzdjVMmsw+Vt89bH4FiupNPt8b/+Oo6xYNgPo80dqmakM/VdmsSDykR8RWmVsbXkzisQgE7Q68wC6twAxjq/t85hjqVSfy3v3d3gvbt/QU+CWwkdchfaWxMvFINBrgbqBAw3JjWzX5+Ss+q1U0u22llYwz/K4HuqUdXX975J/2IxdKR8N8SkFyyNoQBnoDQ2fPC0unB4yitP5h7CSKw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nokia.com; dmarc=pass action=none header.from=nokia.com; dkim=pass header.d=nokia.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nokia.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=V/PwfANed5nruknWORT588keftiNRNEpyRC9LN0Z6aQ=; b=ZZuDVpGPb73cj29bGQc7oD6jfPQ6bz66jUvye2oXXBO0DUHQb0jN+Z8+oHMbblqv30OyWmYBtyNDlwaWzl4ofcc1gvYwkfvq3seeU3QgAKkIatzYvNqyUnXKoYpvFE+TVbAleqCoJZSBPUCxK+QmlcrMOA6XVtXX1llr+kA1z0Uvr6K5Yd1TQegY/oH16m5dG4Jf8wHuGKZM0QyJ0xNrXj1Sq7PV9DqTGDQNCdupL6dft7bnOJ96PcPm2NQboCkjT6Dj89ujPx1P5P1au8HHb/I5R/cmyJ7ZCoFOp1GjYXClmvYq0DFC/OCYwMAZpW44d35J9zE1kplF+qYPE8Hhww== Received: from FRWPR07MB10660.eurprd07.prod.outlook.com (2603:10a6:d10:183::9) by DB5PR07MB9584.eurprd07.prod.outlook.com (2603:10a6:10:4a9::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.360.3; Thu, 20 Aug 2026 14:47:34 +0000 Received: from FRWPR07MB10660.eurprd07.prod.outlook.com ([fe80::9105:401:e0a2:a997]) by FRWPR07MB10660.eurprd07.prod.outlook.com ([fe80::9105:401:e0a2:a997%4]) with mapi id 15.21.0360.003; Thu, 20 Aug 2026 14:47:34 +0000 From: "Jakub Szczudlo (Nokia)" To: "openembedded-core@lists.openembedded.org" CC: "Jakub Szczudlo (Nokia)" Subject: [wrynose][PATCH] gnutls: fix CVE-2026-42010 Thread-Topic: [wrynose][PATCH] gnutls: fix CVE-2026-42010 Thread-Index: AQHdMLLWwIRaU+Qj8kOnJBUi0XB5FA== Date: Thu, 20 Aug 2026 14:47:34 +0000 Message-ID: <20260820144727.4893-1-jakub.szczudlo@nokia.com> Accept-Language: en-US, en-150 Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=nokia.com; x-ms-publictraffictype: Email x-ms-traffictypediagnostic: FRWPR07MB10660:EE_|DB5PR07MB9584:EE_ x-ms-office365-filtering-correlation-id: ece0c15d-7aff-4f2d-6cf7-08defec9f8c2 x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0;ARA:13230040|376014|366016|23010399003|1800799024|10067099003|56012099006|29003799003|12006099003|25016099003|11063799006|18002099003|38070700021|13003099007; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:FRWPR07MB10660.eurprd07.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(376014)(366016)(23010399003)(1800799024)(10067099003)(56012099006)(29003799003)(12006099003)(25016099003)(11063799006)(18002099003)(38070700021)(13003099007);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?q?f2YjE3HNsJyTLq0/8AOYS14ziKtL?= =?utf-8?q?VlV4lgwUsFw+5llz1eW4QmbBTVLQsCHKluvDy9/hPw6sCI39tYD8WnHlP//XQeY+h?= =?utf-8?q?C1QoRCR/jWoOJLZl5VEckMsKJ0JscpByivMMn/a86+63GNnDsQLF3DsXrn9JheJWn?= =?utf-8?q?zQ31TBOLoaKXMOGuQaZMW0CycBxlMGruimiUpUvN/sFSFTsDJwe5Nq7q133ZMYBAa?= =?utf-8?q?NKt66LcCTamHhzRivKjNwjQrzdlVbvGgxgpOnB8oNhiQGq66Tr4+dEbtiztKT7a1W?= =?utf-8?q?T2tykgkeZT2KfVz2jeOOCCWiqbzi8VH/nCw2iPOMfCNRLtK+ZE9gyuHEewVwGWuBx?= =?utf-8?q?NmgFynOrpgVOj106OOKtA1/mkHWRJtFQp1Yr9O0d+Yp3Nfb4n/P4wumL2osaPt0eY?= =?utf-8?q?MyHLe8yh9UMVHpvg85KwpMcfOEYi3ZbW3mjeNhZJBrcWWgPpYxRTZGVy75Xq3wrrA?= =?utf-8?q?ltY3ReBAejn9f///e0ZgldAklFZDnYQmX2RjH/cEvj1ytlgZK125UicO6SQcdzIKW?= =?utf-8?q?K9UmIQfY0wzSIzAsl2WduRVeYBx5innXwUPhhJ3KmSF4StKUHRnh/kNxOHkQe8if2?= =?utf-8?q?xuK9EmUqCl0OGn8qRmXWoVVRVSNOVaoHsyKQftRZW05Lltg8a8C29D56wKLiW0gUg?= =?utf-8?q?Lr3e4ClHpF95jNxLnr0amdT5qxCs8gIfMhPPlp/hqJgLwxhvF3TgTlM6pe82n+4u6?= =?utf-8?q?Of8aCX92VYa3wbUIa9nuaEtGtCjKnwrN/7YLDUIhePuCf6GEE6yJhHSSSBlmexnOY?= =?utf-8?q?tL9t7xHSc52X+42HLpcqz6d+9IBU/PmXVSWM+DLeeFoyTzXaUsdbGs7ibkpCnf7Gr?= =?utf-8?q?SA95ddv1N0CZyPRO/5RQ0PKGBv1eKAqdZjR999tcm/0cSphPjoTod/4/q1dFEyFka?= =?utf-8?q?HqcYLDh/nrijFuoUIXDu769Ol7dQFwA1QqHBpOwlAwQJtpU48MuNgqhq6blI3gWSf?= =?utf-8?q?5LjpfqK4ib3hHg1bxIXI2EtPxd7+YpsY9kIThtY0nsmu0D0sQMm72i9xbRx8NrlcD?= =?utf-8?q?u06SJFa2FIXNbTylmD6yLvKnLno2eWUnt3RKJJ6lD04WrnhV7hjoFU2qeXUW63R2C?= =?utf-8?q?5rqGYtJ5repwXcG1K0XiAnfLJLHnC0As5HoC/tWB0SrDL3zhKAj2CAe7S1COXRTYm?= =?utf-8?q?kEqArx2QRdEqvUWUA7G9ThFCJlro4mSl2s6ih3S08neMltxf+rKDEnJGK7wgSbVj5?= =?utf-8?q?gq4VV8i/3KjhWXyiHCY2rR/GfHhlw5whSjen95u7Y5oOQYW2l3HvCB7h7EUn+qlWZ?= =?utf-8?q?KIDOBJ0G/fnFNjg3cl4JYttlpwWh5VyvnpDUxsXhow1og2hAFZHFjh/Ou1kLxN8UU?= =?utf-8?q?hEmP4QcCWnXMbjDiUlpkWC1Z+KPpqGs7YP7pY2PkagJlon8bxjh2onouiWdFtY5pG?= =?utf-8?q?f8WJ5aMLXVZs0i5MJ1QiEl42a8x1CF88sYHSdLbNUaY/Jqwl/dq2ufsINIEXYCwrI?= =?utf-8?q?hHOSSWbxCmJ0N+OjE9J1P1J0aMGkEcFRpqv0Ep+yBNO+oUm2NMYuVhcxQXLuy+j9Z?= =?utf-8?q?nnlPj3V/C6fRF29FGwq85eZTOFunAllnhzsLh8SEJSGVb0tYe1LsVM+J42p7i2SaU?= =?utf-8?q?j4/Y/NI7Imj4veey7NGguhfEB2ysNK56RucvUYnRUx4LdmnqyJZJgDKtKCZCN+v0r?= =?utf-8?q?LuP5DYcg3vzp57Ug9YEoQ/4O1CJTOF9Q=3D=3D?= MIME-Version: 1.0 X-OriginatorOrg: nokia.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: FRWPR07MB10660.eurprd07.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: ece0c15d-7aff-4f2d-6cf7-08defec9f8c2 X-MS-Exchange-CrossTenant-originalarrivaltime: 20 Aug 2026 14:47:34.8095 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5d471751-9675-428d-917b-70f44f9630b0 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: MGriGoqSh5zVdcG2wYSQgXRwITfWScxlJdWagPNVCSo4eiy5Miz+xeNZivz3JKp1KSaR3GQJDegqALd009j4KCyOC9P2UD/oZ95XhgMggJs= X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB5PR07MB9584 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Thu, 20 Aug 2026 14:47:42 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/243869 Backport patch to fix CVE-2026-42010. References: https://nvd.nist.gov/vuln/detail/CVE-2026-42010 Upstream fix: https://gitlab.com/gnutls/gnutls/-/commit/cb1833afd9b6309563211b1c0a7c291f52ca98d5 Tested with ptest Signed-off-by: Jakub Szczudlo --- .../gnutls/gnutls/CVE-2026-42010.patch | 41 +++++++++++++++++++ meta/recipes-support/gnutls/gnutls_3.8.12.bb | 1 + 2 files changed, 42 insertions(+) create mode 100644 meta/recipes-support/gnutls/gnutls/CVE-2026-42010.patch diff --git a/meta/recipes-support/gnutls/gnutls/CVE-2026-42010.patch b/meta/recipes-support/gnutls/gnutls/CVE-2026-42010.patch new file mode 100644 index 0000000000..b94a32afff --- /dev/null +++ b/meta/recipes-support/gnutls/gnutls/CVE-2026-42010.patch @@ -0,0 +1,41 @@ +From cb1833afd9b6309563211b1c0a7c291f52ca98d5 Mon Sep 17 00:00:00 2001 +From: Alexander Sosedkin +Date: Tue, 21 Apr 2026 19:26:10 +0200 +Subject: [PATCH] lib/auth/rsa_psk: fix binary PSK identity lookup + +A server looking up PSK username with a NUL-character in it +was wrongfully matching username truncated at a NUL-character. +Fix the check to compare up to the full username length. + +CVE: CVE-2026-42010 +Upstream-Status: Backport [https://gitlab.com/gnutls/gnutls/-/commit/cb1833afd9b6309563211b1c0a7c291f52ca98d5] + +Reported-by: Joshua Rogers of AISLE Research Team +Fixes: #1850 +Fixes: CVE-2026-42010 +Fixes: GNUTLS-SA-2026-04-29-4 +CVSS: 7.1 High CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N +Signed-off-by: Alexander Sosedkin +Signed-off-by: Peter Marko +Signed-off-by: Jakub Szczudlo +--- + lib/auth/rsa_psk.c | 3 +-- + 1 file changed, 1 insertion(+), 2 deletions(-) + +diff --git a/lib/auth/rsa_psk.c b/lib/auth/rsa_psk.c +index cc92b4aa96..27caf18769 100644 +--- a/lib/auth/rsa_psk.c ++++ b/lib/auth/rsa_psk.c +@@ -321,8 +321,7 @@ static int _gnutls_proc_rsa_psk_client_kx(gnutls_session_t session, + * filled in if the key is not found. + */ + ret = _gnutls_psk_pwd_find_entry(session, info->username, +- strlen(info->username), &pwd_psk, +- NULL); ++ info->username_len, &pwd_psk, NULL); + if (ret < 0) + return gnutls_assert_val(ret); + +-- +GitLab + diff --git a/meta/recipes-support/gnutls/gnutls_3.8.12.bb b/meta/recipes-support/gnutls/gnutls_3.8.12.bb index 3ad011742e..b38a7bbe82 100644 --- a/meta/recipes-support/gnutls/gnutls_3.8.12.bb +++ b/meta/recipes-support/gnutls/gnutls_3.8.12.bb @@ -37,6 +37,7 @@ SRC_URI = "https://www.gnupg.org/ftp/gcrypt/gnutls/v${SHRT_VER}/gnutls-${PV}.tar file://CVE-2026-42009_p1.patch \ file://CVE-2026-42009_p2.patch \ file://CVE-2026-3833.patch \ + file://CVE-2026-42010.patch \ " SRC_URI[sha256sum] = "a7b341421bfd459acf7a374ca4af3b9e06608dcd7bd792b2bf470bea012b8e51"