Skip to content

[Medium] Patch reaper for CVE-2026-2739 #16134

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
SumitJenaHCL wants to merge 1 commit into
base: main
Choose a base branch
from
Open

[Medium] Patch reaper for CVE-2026-2739 #16134

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
131 changes: 131 additions & 0 deletions SPECS/reaper/CVE-2026-2739.patch
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,131 @@
From 33df26b5771e824f303a79ec6407409376baa64b Mon Sep 17 00:00:00 2001
From: Kirill Fomichev <fanatid@ya.ru>
Date: Wed, 18 Feb 2026 20:38:33 -0500
Subject: [PATCH] Fix CVE-2026-2739 by Kirill Fomichev

Upstream Patch Reference: https://github.com/indutny/bn.js/commit/33df26b5771e824f303a79ec6407409376baa64b.patch
---
src/ui/node_modules/asn1.js/node_modules/bn.js/lib/bn.js | 5 +++++
src/ui/node_modules/bn.js/lib/bn.js | 5 +++++
src/ui/node_modules/create-ecdh/node_modules/bn.js/lib/bn.js | 5 +++++
.../node_modules/diffie-hellman/node_modules/bn.js/lib/bn.js | 5 +++++
src/ui/node_modules/elliptic/node_modules/bn.js/lib/bn.js | 5 +++++
.../node_modules/miller-rabin/node_modules/bn.js/lib/bn.js | 5 +++++
.../node_modules/public-encrypt/node_modules/bn.js/lib/bn.js | 5 +++++
7 files changed, 35 insertions(+)

diff --git a/src/ui/node_modules/asn1.js/node_modules/bn.js/lib/bn.js b/src/ui/node_modules/asn1.js/node_modules/bn.js/lib/bn.js
index 3a4371ea..f580acf1 100644
--- a/src/ui/node_modules/asn1.js/node_modules/bn.js/lib/bn.js
+++ b/src/ui/node_modules/asn1.js/node_modules/bn.js/lib/bn.js
@@ -2128,6 +2128,11 @@
this.words[this.length - 1] &= mask;
}

+ if (this.length === 0) {
+ this.words[0] = 0;
+ this.length = 1;
+ }
+
return this.strip();
};

diff --git a/src/ui/node_modules/bn.js/lib/bn.js b/src/ui/node_modules/bn.js/lib/bn.js
index adecc949..48e0e2e3 100644
--- a/src/ui/node_modules/bn.js/lib/bn.js
+++ b/src/ui/node_modules/bn.js/lib/bn.js
@@ -2215,6 +2215,11 @@
this.words[this.length - 1] &= mask;
}

+ if (this.length === 0) {
+ this.words[0] = 0;
+ this.length = 1;
+ }
+
return this._strip();
};

diff --git a/src/ui/node_modules/create-ecdh/node_modules/bn.js/lib/bn.js b/src/ui/node_modules/create-ecdh/node_modules/bn.js/lib/bn.js
index 3a4371ea..04349f6d 100644
--- a/src/ui/node_modules/create-ecdh/node_modules/bn.js/lib/bn.js
+++ b/src/ui/node_modules/create-ecdh/node_modules/bn.js/lib/bn.js
@@ -2128,6 +2128,11 @@
this.words[this.length - 1] &= mask;
}

+ if (this.length === 0) {
+ this.words[0] = 0;
+ this.length = 1;
+ }
+
return this.strip();
};

diff --git a/src/ui/node_modules/diffie-hellman/node_modules/bn.js/lib/bn.js b/src/ui/node_modules/diffie-hellman/node_modules/bn.js/lib/bn.js
index 3a4371ea..04349f6d 100644
--- a/src/ui/node_modules/diffie-hellman/node_modules/bn.js/lib/bn.js
+++ b/src/ui/node_modules/diffie-hellman/node_modules/bn.js/lib/bn.js
@@ -2128,6 +2128,11 @@
this.words[this.length - 1] &= mask;
}

+ if (this.length === 0) {
+ this.words[0] = 0;
+ this.length = 1;
+ }
+
return this.strip();
};

diff --git a/src/ui/node_modules/elliptic/node_modules/bn.js/lib/bn.js b/src/ui/node_modules/elliptic/node_modules/bn.js/lib/bn.js
index 3a4371ea..04349f6d 100644
--- a/src/ui/node_modules/elliptic/node_modules/bn.js/lib/bn.js
+++ b/src/ui/node_modules/elliptic/node_modules/bn.js/lib/bn.js
@@ -2128,6 +2128,11 @@
this.words[this.length - 1] &= mask;
}

+ if (this.length === 0) {
+ this.words[0] = 0;
+ this.length = 1;
+ }
+
return this.strip();
};

diff --git a/src/ui/node_modules/miller-rabin/node_modules/bn.js/lib/bn.js b/src/ui/node_modules/miller-rabin/node_modules/bn.js/lib/bn.js
index 3a4371ea..04349f6d 100644
--- a/src/ui/node_modules/miller-rabin/node_modules/bn.js/lib/bn.js
+++ b/src/ui/node_modules/miller-rabin/node_modules/bn.js/lib/bn.js
@@ -2128,6 +2128,11 @@
this.words[this.length - 1] &= mask;
}

+ if (this.length === 0) {
+ this.words[0] = 0;
+ this.length = 1;
+ }
+
return this.strip();
};

diff --git a/src/ui/node_modules/public-encrypt/node_modules/bn.js/lib/bn.js b/src/ui/node_modules/public-encrypt/node_modules/bn.js/lib/bn.js
index 3a4371ea..04349f6d 100644
--- a/src/ui/node_modules/public-encrypt/node_modules/bn.js/lib/bn.js
+++ b/src/ui/node_modules/public-encrypt/node_modules/bn.js/lib/bn.js
@@ -2128,6 +2128,11 @@
this.words[this.length - 1] &= mask;
}

+ if (this.length === 0) {
+ this.words[0] = 0;
+ this.length = 1;
+ }
+
return this.strip();
};

--
2.45.4

6 changes: 5 additions & 1 deletion SPECS/reaper/reaper.spec
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@
Summary: Reaper for cassandra is a tool for running Apache Cassandra repairs against single or multi-site clusters.
Name: reaper
Version: 3.1.1
Release: 22%{?dist}
Release: 23%{?dist}
License: ASL 2.0
Vendor: Microsoft Corporation
Distribution: Mariner
Expand Down Expand Up @@ -57,6 +57,7 @@ Patch21: CVE-2025-12816.patch
Patch22: CVE-2025-66031.patch
Patch23: CVE-2025-66030.patch
Patch24: CVE-2024-6485.patch
Patch25: CVE-2026-2739.patch

BuildRequires: git
BuildRequires: javapackages-tools
Expand Down Expand Up @@ -205,6 +206,9 @@ fi
%{_unitdir}/cassandra-%{name}.service

%changelog
* Fri Mar 06 2026 Sumit Jena <v-sumitjena@microsoft.com> - 3.1.1-23
- Patch CVE-2026-2739

* Tue Dec 09 2025 Akhila Guruju <v-guakhila@microsoft.com> - 3.1.1-22
- Patch CVE-2024-6485

Expand Down
Loading