]> code.ossystems Code Review - openembedded-core.git/commit
Code Review / openembedded-core.git / commit
? search:
summary | shortlog | log | commit | commitdiff | review | tree
(parent: bb0af02) | patch
libxml2: Fix CVE-2017-9049 and CVE-2017-9050
authorAndrej Valek <andrej.valek@siemens.com>
Wed, 14 Jun 2017 12:58:47 +0000 (14:58 +0200)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Fri, 23 Jun 2017 10:43:38 +0000 (11:43 +0100)
commit2300762fef8fc8e3e56fb07fd4076c1deeba0a9b
treea8298cb62c90f2964c70ff4d2d7a108ad17ad623tree | snapshot
parentbb0af023e811907b4e641b39f654ca921ac8794acommit | diff
libxml2: Fix CVE-2017-9049 and CVE-2017-9050

Fix handling of parameter-entity references

There were two bugs where parameter-entity references could lead to an
unexpected change of the input buffer in xmlParseNameComplex and
xmlDictLookup being called with an invalid pointer.

Fixes bug 781205 and bug 781361

CVE: CVE-2017-9049 CVE-2017-9050
Signed-off-by: Andrej Valek <andrej.valek@siemens.com>
meta/recipes-core/libxml/libxml2/libxml2-CVE-2017-9049_CVE-2017-9050.patch [new file with mode: 0644] blob
meta/recipes-core/libxml/libxml2_2.9.4.bb diff | blob | history
Mirror of the official openembedded-core repository