diff options
| author | Yi Zhao <yi.zhao@windriver.com> | 2016-06-17 11:20:58 +0800 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2016-06-23 14:26:14 +0100 |
| commit | a02911390cc09d9f2ac15142982142c459a143d5 (patch) | |
| tree | cddb42ea5a7d0481fa136f4926b80ebeab4c8fbe /meta/recipes-core/expat/expat.inc | |
| parent | c0238cb902054296025446ed41a98bf4ed89dd04 (diff) | |
| download | poky-a02911390cc09d9f2ac15142982142c459a143d5.tar.gz | |
expat: CVE-2016-0718
Fix CVE-2016-0718: expat XML parser crashes on malformed input
External References:
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-0718
https://bugzilla.redhat.com/show_bug.cgi?id=1296102
https://bugzilla.suse.com/show_bug.cgi?id=979441
Patch from:
https://bugzilla.redhat.com/show_bug.cgi?id=1296102
(From OE-Core rev: 6589de727ba9c9901fdd53d31bd88ad0f17f3905)
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-core/expat/expat.inc')
| -rw-r--r-- | meta/recipes-core/expat/expat.inc | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/meta/recipes-core/expat/expat.inc b/meta/recipes-core/expat/expat.inc index fe9d7e74f0..3d8429c513 100644 --- a/meta/recipes-core/expat/expat.inc +++ b/meta/recipes-core/expat/expat.inc | |||
| @@ -6,6 +6,7 @@ LICENSE = "MIT" | |||
| 6 | 6 | ||
| 7 | SRC_URI = "${SOURCEFORGE_MIRROR}/expat/expat-${PV}.tar.bz2 \ | 7 | SRC_URI = "${SOURCEFORGE_MIRROR}/expat/expat-${PV}.tar.bz2 \ |
| 8 | file://autotools.patch \ | 8 | file://autotools.patch \ |
| 9 | file://CVE-2016-0718.patch \ | ||
| 9 | " | 10 | " |
| 10 | 11 | ||
| 11 | inherit autotools lib_package gzipnative | 12 | inherit autotools lib_package gzipnative |