mirror of
https://git.yoctoproject.org/poky
synced 2026-03-04 06:19:40 +01:00
Use-after-free of ID and IDREF attributes, which could result in denial of service. https://nvd.nist.gov/vuln/detail/CVE-2022-23308 CVE: CVE-2022-23308 (From OE-Core rev: 6c2f91ce93921c9bfe52c62c0347b992df98d62d) Signed-off-by: Ralph Siemsen <ralph.siemsen@linaro.org> Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>