diff options
| author | Ovidiu Panait <ovidiu.panait@windriver.com> | 2020-09-09 11:11:53 +0300 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2020-09-10 13:48:26 +0100 |
| commit | 592a9e75f7453fbc969093a848532b190e389905 (patch) | |
| tree | 41c3a76020357989524f2ba926bdab49562156c4 /meta-poky | |
| parent | 34eee398f9ea8f0c57dfa476cdf2c91262b34893 (diff) | |
| download | poky-592a9e75f7453fbc969093a848532b190e389905.tar.gz | |
libxml2: Fix CVE-2020-24977
GNOME project libxml2 v2.9.10 and earlier have a global Buffer Overflow
vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has
been fixed in commit 8e7c20a1 (20910-GITv2.9.10-103-g8e7c20a1).
Reference:
https://gitlab.gnome.org/GNOME/libxml2/-/issues/178
Upstream patch:
https://gitlab.gnome.org/GNOME/libxml2/-/commit/50f06b3efb638efb0abd95dc62dca05ae67882c2
(From OE-Core rev: 92dc02b8f03f3586de0a2ec1463b189a3918e303)
Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta-poky')
0 files changed, 0 insertions, 0 deletions