]> code.ossystems Code Review - openembedded-core.git/commit
libxml2: Fix CVE-2017-0663
authorAndrej Valek <andrej.valek@siemens.com>
Wed, 14 Jun 2017 13:07:56 +0000 (15:07 +0200)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Fri, 23 Jun 2017 10:43:39 +0000 (11:43 +0100)
commita965be7b6a1d730851b4a3bc8fd534b9b2334227
tree625ae75fdeea3a33ce4fe5cfd47966f11df45f1f
parent0cae039cbe513b7998e067f4f3958af2ec65ed1a
libxml2: Fix CVE-2017-0663

Fix type confusion in xmlValidateOneNamespace

Comment out code that casts xmlNsPtr to xmlAttrPtr. ID types
on namespace declarations make no practical sense anyway.

Fixes bug 780228

CVE: CVE-2017-0663
Signed-off-by: Andrej Valek <andrej.valek@siemens.com>
meta/recipes-core/libxml/libxml2/libxml2-CVE-2017-0663.patch [new file with mode: 0644]
meta/recipes-core/libxml/libxml2_2.9.4.bb