diff options
| author | Joe Slater <joe.slater@windriver.com> | 2022-03-24 08:32:57 -0700 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2022-04-03 20:49:03 +0100 |
| commit | eb28aafdc9b5872d4f3a06fd611583a1b4252d84 (patch) | |
| tree | 94db5e378673be70213d26f2f582b4b288feb7c1 /meta/recipes-core/libxml/libxml2_2.9.10.bb | |
| parent | d6dfaada89d0ae6200843e5202c25a3e8d6dee5a (diff) | |
| download | poky-eb28aafdc9b5872d4f3a06fd611583a1b4252d84.tar.gz | |
libxml2: Fix CVE-2022-23308
The first patch is the fix in version 2.9.13. The second
patch was added later and fixes a regression introduced
by the first.
(From OE-Core rev: 38e97e67f053cc7b86dd487d8e65b9e68237c73b)
Signed-off-by: Joe Slater <joe.slater@windriver.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-core/libxml/libxml2_2.9.10.bb')
| -rw-r--r-- | meta/recipes-core/libxml/libxml2_2.9.10.bb | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/meta/recipes-core/libxml/libxml2_2.9.10.bb b/meta/recipes-core/libxml/libxml2_2.9.10.bb index cabf911816..778312f662 100644 --- a/meta/recipes-core/libxml/libxml2_2.9.10.bb +++ b/meta/recipes-core/libxml/libxml2_2.9.10.bb | |||
| @@ -30,6 +30,8 @@ SRC_URI = "http://www.xmlsoft.org/sources/libxml2-${PV}.tar.gz;name=libtar \ | |||
| 30 | file://CVE-2021-3518-0002.patch \ | 30 | file://CVE-2021-3518-0002.patch \ |
| 31 | file://CVE-2021-3537.patch \ | 31 | file://CVE-2021-3537.patch \ |
| 32 | file://CVE-2021-3541.patch \ | 32 | file://CVE-2021-3541.patch \ |
| 33 | file://CVE-2022-23308.patch \ | ||
| 34 | file://CVE-2022-23308-fix-regression.patch \ | ||
| 33 | " | 35 | " |
| 34 | 36 | ||
| 35 | SRC_URI[libtar.md5sum] = "10942a1dc23137a8aa07f0639cbfece5" | 37 | SRC_URI[libtar.md5sum] = "10942a1dc23137a8aa07f0639cbfece5" |