Mirror of git.yoctoproject.org/poky https://git.enea.com/cgit/linux/poky.git/atom?h=uninative-2.8 2020-02-15T10:34:38+00:00 2020-02-15T10:34:38+00:00 Richard Purdie richard.purdie@linuxfoundation.org 2020-02-15T10:32:53+00:00 urn:sha1:7f2af8bd795ace46828952a7812f0bbdf26529ab (From OE-Core rev: aca3900b9302e619fa6cd3b8a7b3fcae3b2ffe8d) Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2020-02-15T10:26:42+00:00 Lee Chee Yang chee.yang.lee@intel.com 2020-02-14T11:28:10+00:00 urn:sha1:c066af580bc5a9e6b0ef9a0eb59bc6ab6a17bb89 see: https://gitlab.gnome.org/GNOME/libxml2/merge_requests/68 (From OE-Core rev: 12a5eb0ea6f530ad7be2e58d4091b4edadbf461b) Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2020-02-05T12:00:34+00:00 Anuj Mittal anuj.mittal@intel.com 2020-02-04T05:47:06+00:00 urn:sha1:0ca68e153dc933878c805d7bda6c72b55043fd12 (From OE-Core rev: f2f7aa9a495774fe5a2e3947584cb3503bd1eaf1) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2019-12-16T23:25:49+00:00 Alexander Kanavin alex.kanavin@gmail.com 2019-12-12T18:14:23+00:00 urn:sha1:d62895e112e25f72308cb31f70aeb16d7eefb008 (From OE-Core rev: de72e0440bc36fab09a7e3c13d3967c97dcda66b) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2019-05-12T16:55:11+00:00 Hongxu Jia hongxu.jia@windriver.com 2019-05-12T08:16:29+00:00 urn:sha1:311f07ebe562933be27847fa6b083ffb50f77919 - Drop backported fix-CVE-2017-8872.patch, fix-CVE-2018-14404.patch and 0001-Fix-infinite-loop-in-LZMA-decompression.patch (From OE-Core rev: dc51f92b2a6f2439fa93b9b0c1d8c4c13e884813) Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2018-10-04T22:00:55+00:00 Ross Burton ross.burton@intel.com 2018-10-04T09:20:20+00:00 urn:sha1:95969ef3dd184c02c1beceb3e34ca6cfef72cd53 The patch associated with the CVE-2017-8872 report was never merged into libxml2, but a slightly different patch for the same problem was. Cherry-pick that as a backport, which also fixes the failing test suite. (From OE-Core rev: 512869aea6dde1bb2374601f7c4d793ac9edaa42) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2018-08-20T16:38:23+00:00 Hongxu Jia hongxu.jia@windriver.com 2018-08-17T07:22:41+00:00 urn:sha1:e18f891394e7c6dc0917597f394b424d5e47642d (From OE-Core rev: b91b276696fb5e0b633b73be408bd750ac4e28ce) Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2018-08-14T10:36:31+00:00 Andrej Valek andrej.valek@siemens.com 2018-08-09T08:06:37+00:00 urn:sha1:6b5b26b458cb602db05ff1bf1a141a185333d5f7 Fix nullptr deref with XPath logic ops If the XPath stack is corrupted, for example by a misbehaving extension function, the "and" and "or" XPath operators could dereference NULL pointers. Check that the XPath stack isn't empty and optimize the logic operators slightly. CVE: CVE-2018-14404 (From OE-Core rev: 69315177732a1d260a3315fe8c4c4c44653ae0c8) Signed-off-by: Andrej Valek <andrej.valek@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2018-07-05T10:39:06+00:00 Hongxu Jia hongxu.jia@windriver.com 2018-07-04T01:39:14+00:00 urn:sha1:956ddcc9d480fe960637d897b9a0992eab8700a1 The htmlParseTryOrFinish function in HTMLparser.c in libxml2 2.9.4 allows attackers to cause a denial of service (buffer over-read) or information disclosure. https://bugzilla.gnome.org/show_bug.cgi?id=775200 (From OE-Core rev: dac867dc63af70ae992c50697d2be95c3e7b58bb) Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> 2018-05-04T12:28:01+00:00 Andrej Valek andrej.valek@siemens.com 2018-03-20T09:47:15+00:00 urn:sha1:ce8d120bfc1015ea23944ebbcfa3b536eeea2d6c (From OE-Core rev: de24ead63802523daa19ce8528ac95d9e041eaf8) Signed-off-by: Andrej Valek <andrej.valek@siemens.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>