Steve Sakoman 5eab654048 expat: fix CVE-2022-23852 ...

Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer
for configurations with a nonzero XML_CONTEXT_BYTES.

Backport patch from:
847a645152

CVE: CVE-2022-23852
(From OE-Core rev: 37b618d44ebd965ba17bb61ddf6428cdaea876e5)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2022-02-16 09:48:51 +00:00

..

classes

cve-check: add lockfile to task

2022-01-22 17:56:52 +00:00

conf

kernel: introduce python3-dtschema-wrapper

2022-01-25 12:06:55 +00:00

files

common-licenses: add "Unlicense" license file

2021-10-07 15:10:33 +01:00

lib

parselogs: add a couple systemd false positives

2022-01-22 17:56:53 +00:00

recipes-bsp

grub: add a fix for CVE-2020-25647

2022-02-16 09:48:51 +00:00

recipes-connectivity

openssl: Add reproducibility fix

2022-01-11 22:28:38 +00:00

recipes-core

expat: fix CVE-2022-23852

2022-02-16 09:48:51 +00:00

recipes-devtools

valgrind: skip flakey ptest (gdbserver_tests/hginfo)

2022-01-22 17:56:52 +00:00

recipes-extended

ghostscript: fix CVE-2021-45949

2022-02-16 09:48:51 +00:00

recipes-gnome

gobject-introspection: Don't write $HOME into scripts

2021-10-23 23:14:17 +01:00

recipes-graphics

Revert "weston: Use systemd notify,"

2022-01-25 12:06:55 +00:00

recipes-kernel

lttng-tools: Add missing DEPENDS on bison-native

2022-01-25 12:06:55 +00:00

recipes-multimedia

speex: fix CVE-2020-23903

2022-01-25 12:06:55 +00:00

recipes-rt

rt-tests: set branch name in SRC_URI

2021-09-10 16:21:36 +01:00

recipes-sato

webkitgtk: Fix reproducibility in minibrowser

2021-11-15 11:53:55 +00:00

recipes-support

libpcre2: update SRC_URI

2022-01-11 22:28:38 +00:00

site

site: Make sys_siglist default to no

2020-10-06 14:15:21 +01:00

COPYING.MIT

…

recipes.txt

Remove LSB support

2019-08-29 14:05:12 +01:00