]> code.ossystems Code Review - openembedded-core.git/commit
libxml2: Fix CVE-2017-5969
authorAndrej Valek <andrej.valek@siemens.com>
Wed, 14 Jun 2017 13:01:35 +0000 (15:01 +0200)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Fri, 23 Jun 2017 10:43:39 +0000 (11:43 +0100)
commit0cae039cbe513b7998e067f4f3958af2ec65ed1a
treeb753074beb14d022b79662c7e605c1508c92b692
parent2300762fef8fc8e3e56fb07fd4076c1deeba0a9b
libxml2: Fix CVE-2017-5969

Fix NULL pointer deref in xmlDumpElementContent

Can only be triggered in recovery mode.

Fixes bug 758422

CVE: CVE-2017-5969
Signed-off-by: Andrej Valek <andrej.valek@siemens.com>
meta/recipes-core/libxml/libxml2/libxml2-CVE-2017-5969.patch [new file with mode: 0644]
meta/recipes-core/libxml/libxml2_2.9.4.bb