]> code.ossystems Code Review - openembedded-core.git/commit
libxslt: CVE-2015-7995
authorArmin Kuster <akuster@mvista.com>
Thu, 29 Oct 2015 23:22:41 +0000 (16:22 -0700)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Mon, 16 Nov 2015 11:33:47 +0000 (11:33 +0000)
commit0f89bbab6588a1171259801fa879516740030acb
tree16356c27ec5958989d20eb3932b60693c1405806
parent97ecc213e4c75bcf0b7975f82cd8d01f88c427e2
libxslt: CVE-2015-7995

This is a is being give a High rating so please consider it for
all 1.1.28 versions.

A type confusion error within the libxslt "xsltStylePreCompute()"
function in preproc.c can lead to a DoS. Confirmed in version 1.1.28,
other versions may also be affected.

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
meta/recipes-support/libxslt/libxslt/CVE-2015-7995.patch [new file with mode: 0644]
meta/recipes-support/libxslt/libxslt_1.1.28.bb