diff options
| author | Steve Sakoman <steve@sakoman.com> | 2021-07-21 07:12:14 -1000 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2021-08-10 11:14:10 +0100 |
| commit | f30d69e51f475773bf8e05a7ed328b9f908879b7 (patch) | |
| tree | 1ee852a17ab5e6a156995dc3c6f50f9e79393f06 /meta/recipes-core/libxml/libxml2_2.9.10.bb | |
| parent | 4542e5f944051c56235930a8a457a473026fa219 (diff) | |
| download | poky-f30d69e51f475773bf8e05a7ed328b9f908879b7.tar.gz | |
libxml2: fix CVE-2021-3541
A flaw was found in libxml2. Exponential entity expansion attack
is possible bypassing all existing protection mechanisms and leading
to denial of service.
https://nvd.nist.gov/vuln/detail/CVE-2021-3541
CVE: 2021-3541
(From OE-Core rev: 1699293a7011797895c284d6ad664c66badba426)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-core/libxml/libxml2_2.9.10.bb')
| -rw-r--r-- | meta/recipes-core/libxml/libxml2_2.9.10.bb | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/meta/recipes-core/libxml/libxml2_2.9.10.bb b/meta/recipes-core/libxml/libxml2_2.9.10.bb index b5fb3e6315..60dc71f38d 100644 --- a/meta/recipes-core/libxml/libxml2_2.9.10.bb +++ b/meta/recipes-core/libxml/libxml2_2.9.10.bb | |||
| @@ -26,6 +26,7 @@ SRC_URI = "http://www.xmlsoft.org/sources/libxml2-${PV}.tar.gz;name=libtar \ | |||
| 26 | file://CVE-2021-3517.patch \ | 26 | file://CVE-2021-3517.patch \ |
| 27 | file://CVE-2021-3537.patch \ | 27 | file://CVE-2021-3537.patch \ |
| 28 | file://CVE-2021-3518.patch \ | 28 | file://CVE-2021-3518.patch \ |
| 29 | file://CVE-2021-3541.patch \ | ||
| 29 | " | 30 | " |
| 30 | 31 | ||
| 31 | SRC_URI[libtar.md5sum] = "10942a1dc23137a8aa07f0639cbfece5" | 32 | SRC_URI[libtar.md5sum] = "10942a1dc23137a8aa07f0639cbfece5" |