diff options
| author | Ovidiu Panait <ovidiu.panait@windriver.com> | 2020-09-09 11:11:53 +0300 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2020-09-17 12:51:24 +0100 |
| commit | f2422aad3b7ea08935df880a63b3be81daf0c898 (patch) | |
| tree | 5d1417f0432d947ba498022669e7435fa22a498f /meta/classes/package_deb.bbclass | |
| parent | c68c4aa22c86b91b5f2c7c4c175c7ad7b38105c7 (diff) | |
| download | poky-f2422aad3b7ea08935df880a63b3be81daf0c898.tar.gz | |
libxml2: Fix CVE-2020-24977
GNOME project libxml2 v2.9.10 and earlier have a global Buffer Overflow
vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has
been fixed in commit 8e7c20a1 (20910-GITv2.9.10-103-g8e7c20a1).
Reference:
https://gitlab.gnome.org/GNOME/libxml2/-/issues/178
Upstream patch:
https://gitlab.gnome.org/GNOME/libxml2/-/commit/50f06b3efb638efb0abd95dc62dca05ae67882c2
(From OE-Core rev: d5406b389fcae8fb0f5fc9cc7dbf7ee819c04bc8)
Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 92dc02b8f03f3586de0a2ec1463b189a3918e303)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/classes/package_deb.bbclass')
0 files changed, 0 insertions, 0 deletions