Divya Chellam e63738d6b1 libxml2: fix CVE-2025-49795 ...

A NULL pointer dereference vulnerability was found in libxml2 when
processing XPath XML expressions. This flaw allows an attacker to
craft a malicious XML input to libxml2, leading to a denial of service.

Pick commit from 2.13 branch

Reference:
https://security-tracker.debian.org/tracker/CVE-2025-49795

Upstream-patch:
62048278a4

(From OE-Core rev: 9f17e0911eeb49e007de8ee3e50d9f3f38e08a26)

Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>

2025-07-21 09:18:00 -07:00

..

base-files

base-files: Drop /bin/sh dependency

2025-01-27 15:47:09 +00:00

base-passwd

base-passwd: upgrade 3.6.5 -> 3.6.6

2025-01-03 10:51:27 +00:00

busybox

busybox: apply patch for CVE-2023-39810

2025-07-21 09:17:59 -07:00

coreutils

coreutils: fix cksum on musl

2025-03-28 11:19:40 +00:00

dbus

dbus-glib: Upgrade 0.112 -> 0.114

2025-03-19 11:49:45 +00:00

dbus-wait

dbus-wait: bump srcrev

2024-01-07 12:24:57 +00:00

dropbear

dropbear: add dropbearkey.service to FILES

2024-12-17 11:41:52 +00:00

ell

ell: upgrade 0.73 -> 0.74

2025-03-17 22:38:32 +00:00

expat

expat: Upgrade 2.7.0 -> 2.7.1

2025-03-28 11:19:40 +00:00

fts

fts: Fix typo in summary

2023-04-27 14:41:31 +01:00

gettext

recipes/*: remove obsolete use of acpaths

2025-02-27 10:55:16 +00:00

glib-2.0

glib-2.0: fix build issue with gobject-introspection

2025-03-17 17:09:22 +00:00

glib-networking

glib-networking: upgrade 2.78.1 -> 2.80.0

2024-07-26 12:28:42 +01:00

glibc

glibc: stable 2.41 branch updates

2025-06-26 06:46:29 -07:00

ifupdown

ifupdown: upgrade 0.8.43 -> 0.8.44

2024-09-30 17:00:50 +01:00

images

build-appliance-image: Update to walnascar head revision

2025-07-04 07:58:44 -07:00

init-ifupdown

recipes: Switch away from S = WORKDIR

2024-05-21 12:08:04 +01:00

initrdscripts

initrdscripts: add UBI support

2025-01-08 12:37:20 +00:00

initscripts

initscripts: add function log_success_msg/log_failure_msg/log_warning_msg

2025-05-14 08:33:40 -07:00

kbd

kbd: Avoid non-ASCII characters in DESCRIPTION

2025-03-18 10:27:31 +00:00

libcgroup

libcgroup_3.1.0: fix build on non-systemd systems

2024-05-09 09:48:58 +01:00

libxcrypt

libxcrypt-compat,libxcrypt: upgrade 4.4.37 -> 4.4.38

2025-02-18 11:56:04 +00:00

libxml

libxml2: fix CVE-2025-49795

2025-07-21 09:18:00 -07:00

meta

buildtools-tarball: Make buildtools respects host CA certificates

2025-05-14 08:33:40 -07:00

musl

musl: Upgrade to latest tip of trunk

2025-02-18 11:56:04 +00:00

ncurses

ncurses: Pin to C17 standard

2025-03-19 09:48:14 +00:00

netbase

netbase: upgrade 6.4 -> 6.5

2025-03-19 11:49:45 +00:00

newlib

meta/meta-selftest: Fix variable assignment whitespace

2025-02-01 13:42:34 +00:00

os-release

meta/meta-selftest: Fix variable assignment whitespace

2025-02-01 13:42:34 +00:00

ovmf

ovmf: Add PACKAGECONFIG[debug]

2025-03-08 18:08:04 +00:00

packagegroups

meta/meta-selftest: Fix variable assignment whitespace

2025-02-01 13:42:34 +00:00

picolibc

meta/meta-selftest: Fix variable assignment whitespace

2025-02-01 13:42:34 +00:00

psplash

psplash: Fix build with GCC 15

2025-03-20 11:29:03 +00:00

readline

readline: Fixed build with GCC-15

2025-03-20 11:29:04 +00:00

seatd

seatd: Create seat user and package systemd service

2024-11-28 12:37:12 +00:00

sysfsutils

sysfsutils: don't install to base_libdir

2023-06-21 18:38:25 +01:00

systemd

systemd: upgrade 257.5 -> 257.6

2025-06-20 09:21:27 -07:00

sysvinit

sysvinit: upgrade 3.13 -> 3.14

2025-03-17 22:38:32 +00:00

ttyrun

ttyrun: upgrade 2.36.0 -> 2.37.0

2025-03-17 22:38:32 +00:00

udev

eudev: Drop --output=... from kmod call in init script

2025-03-17 17:09:22 +00:00

update-rc.d

update-rc.d: add +git to PV

2024-04-23 13:40:24 +01:00

util-linux

util-linux: fix agetty segfault issue

2025-06-20 09:21:27 -07:00

volatile-binds

volatile-binds: mount-copybind: fix typo

2024-10-11 12:17:03 +01:00

zlib

zlib: Enable PIE for native builds

2024-08-29 21:58:19 +01:00