From 89775366577178f95943226dde30c4b92e5e8266 Mon Sep 17 00:00:00 2001 From: PengLAI Code Date: Sat, 29 Aug 2026 13:10:59 +0800 Subject: [PATCH] [CVE] [Anolis] add patch to fix CVE-2026-19411 to #IKBW4L Origin: PengLAI Code project: TC2024080204 Assisted-by: PengLAI Code --- CVE-2026-19411.patch | 27 +++++++++++++++++++++++++++ shim.spec | 9 ++++++++- 2 files changed, 35 insertions(+), 1 deletion(-) create mode 100644 CVE-2026-19411.patch diff --git a/CVE-2026-19411.patch b/CVE-2026-19411.patch new file mode 100644 index 0000000..ddb1d13 --- /dev/null +++ b/CVE-2026-19411.patch @@ -0,0 +1,27 @@ +From: PengLAI Code +Date: Sat, 29 Aug 2026 05:09:32 +0000 +Subject: [PATCH] Fix CVE-2026-19411 in shim + +CVE: CVE-2026-19411 +Bug: CVE-2026-19411 + +--- + shim.c | 5 +++++ + 1 file changed, 5 insertions(+) + +diff --git a/shim.c b/shim.c +--- a/shim.c ++++ b/shim.c +@@ -767,7 +767,12 @@ + CHAR16 *bootpath = NULL; + int ret = 0; + ++ if (li == NULL || li->FilePath == NULL) ++ return 0; ++ + bootpath = DevicePathToStr(li->FilePath); ++ if (bootpath == NULL) ++ return 0; + + /* Check the beginning of the string and the end, to avoid + * caring about which arch this is. */ diff --git a/shim.spec b/shim.spec index 658c261..047c56d 100644 --- a/shim.spec +++ b/shim.spec @@ -1,4 +1,4 @@ -%define anolis_release 3 +%define anolis_release 4 %global grub_version 2.06 %global fwupd_version 1.5.8 @@ -47,6 +47,9 @@ Patch0006: fix-CVE-2023-40549.patch Patch0007: fix-CVE-2023-40550.patch # https://github.com/rhboot/shim/commit/5a5147d1e19cf90ec280990c84061ac3f67ea1ab Patch0008: fix-CVE-2023-40551.patch +# CVE-2026-19411 +# Source: anolis +Patch0009: CVE-2026-19411.patch BuildRequires: efi-filesystem BuildRequires: efi-srpm-macros >= 5 @@ -174,6 +177,10 @@ install -m 0644 %{SOURCE1} %{buildroot}%{_sysconfdir}/dnf/protected.d/ %files debugsource -f build-%{efiarch}/debugsource.list %changelog +* Sat Aug 29 2026 PengLAI Code - 15.7-4 +- Fix CVE-2026-19411 +- Patch generated by PengLAI Code Agent + * Tue Aug 19 2025 wenxin - 15.7-3 - Add patch to fix CVEs - fix CVE-2023-40546 -- Gitee