mirrors/poky
1
0
Fork 0
mirror of https://git.yoctoproject.org/poky synced 2026-09-15 15:49:32 +02:00
Code Issues Packages Projects Releases Wiki Activity

expat: fix CVE-2018-20843

Browse Source 
(From OE-Core rev: aad245ea1c55f8e778ae3420c5c31e94301e7cba)

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
Anuj Mittal
2019-07-29 07:21:00 +08:00
committed by Richard Purdie
parent 9e0a120c8e
commit d49de3810a
2 changed files with 27 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
meta/recipes-core/expat/expat/CVE-2018-20843.patch Normal file
View File

@@ -0,0 +1,26 @@
From 11f8838bf99ea0a6f0b76f9760c43704d00c4ff6 Mon Sep 17 00:00:00 2001
From: Sebastian Pipping <sebastian@pipping.org>
Date: Wed, 12 Jun 2019 15:42:22 +0200
Subject: [PATCH] xmlparse.c: Fix extraction of namespace prefix from XML name
(#186)
Upstream-Status: Backport
CVE: CVE-2018-20843
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
---
expat/lib/xmlparse.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/expat/lib/xmlparse.c b/expat/lib/xmlparse.c
index 30d55c5c..737d7cd2 100644
--- a/expat/lib/xmlparse.c
+++ b/expat/lib/xmlparse.c
@@ -6071,7 +6071,7 @@ setElementTypePrefix(XML_Parser parser, ELEMENT_TYPE *elementType)
else
poolDiscard(&dtd->pool);
elementType->prefix = prefix;
-
+ break;
}
}
return 1;

1
meta/recipes-core/expat/expat_2.2.6.bb
View File

@@ -9,6 +9,7 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=5b8620d98e49772d95fc1d291c26aa79"
SRC_URI = "${SOURCEFORGE_MIRROR}/expat/expat-${PV}.tar.bz2 \ SRC_URI = "${SOURCEFORGE_MIRROR}/expat/expat-${PV}.tar.bz2 \
file://autotools.patch \ file://autotools.patch \
file://libtool-tag.patch \ file://libtool-tag.patch \
file://CVE-2018-20843.patch;striplevel=2 \
" "
SRC_URI[md5sum] = "ca047ae951b40020ac831c28859161b2" SRC_URI[md5sum] = "ca047ae951b40020ac831c28859161b2"