]> code.ossystems Code Review - openembedded-core.git/commit
libxslt: CVE-2015-7995
authorArmin Kuster <akuster@mvista.com>
Thu, 29 Oct 2015 23:22:41 +0000 (16:22 -0700)
committerJoshua Lock <joshua.lock@collabora.co.uk>
Thu, 5 Nov 2015 21:46:26 +0000 (21:46 +0000)
commit2ad0b4dd7262c251f991bbf7826580d89bd6e73a
treec6f6f131d0c9ef7c5a5e417602adb1e54317bbc0
parent91ca81244e683c4f24752c59ec3342cd4fb1315d
libxslt: CVE-2015-7995

This is a is being give a High rating so please consider it for
all 1.1.28 versions.

A type confusion error within the libxslt "xsltStylePreCompute()"
function in preproc.c can lead to a DoS. Confirmed in version 1.1.28,
other versions may also be affected.

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Joshua Lock <joshua.lock@collabora.co.uk>
meta/recipes-support/libxslt/libxslt/CVE-2015-7995.patch [new file with mode: 0644]
meta/recipes-support/libxslt/libxslt_1.1.28.bb