Li Wang 3f8f1ea957 librsvg: CVE-2011-3146 ...

Store node type separately in RsvgNode

commit 34c95743ca692ea0e44778e41a7c0a129363de84 upstream

The node name (formerly RsvgNode:type) cannot be used to infer
the sub-type of RsvgNode that we're dealing with, since for unknown
elements we put type = node-name. This lead to a (potentially exploitable)
crash e.g. when the element name started with "fe" which tricked
the old code into considering it as a RsvgFilterPrimitive.
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-3146

https://bugzilla.gnome.org/show_bug.cgi?id=658014

[YOCTO #3581]
[ CQID: WIND00376773 ]
Upstream-Status: Backport

(From OE-Core rev: fdd6da5933a3e7dd1e0ca2afd7107839b4fa65e8)

Signed-off-by: Li Wang <li.wang@windriver.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2013-01-07 11:32:14 +00:00

..

classes

bootimg: Use FAT 32 for images larger than 512MB

2013-01-07 11:32:13 +00:00

conf

bitbake.conf: Add CCACHE_DISABLE to BS_HASHBASE_WHITELIST

2012-10-02 18:12:48 +01:00

files

bzip license: bzip2 not bzip.

2012-10-10 15:24:13 +01:00

lib/oe

distrodata: Update distrocheck functions

2012-10-03 17:37:33 +01:00

recipes-bsp

grub: disable lzma, device-mapper, zfs and nvpair

2012-09-19 17:56:27 +01:00

recipes-connectivity

libnss-mdns: fix mDNS resolving speed

2013-01-07 11:32:13 +00:00

recipes-core

Revert "initrdscripts: fix udevd in the live boot init scripts"

2013-01-07 11:32:13 +00:00

recipes-devtools

autogen: use pkg-config directly instead of guile-config

2012-12-13 15:21:43 +00:00

recipes-extended

cups CVE-2011-3170

2013-01-07 11:32:14 +00:00

recipes-gnome

librsvg: CVE-2011-3146

2013-01-07 11:32:14 +00:00

recipes-graphics

libdrm: Explicitly disable the cairo dependency

2012-10-10 15:24:11 +01:00

recipes-kernel

lttng-modules: remove unused lttng-syscalls patch

2012-12-13 15:21:40 +00:00

recipes-lsb4/perl

libi18n-collate-perl: add it

2012-09-10 13:01:54 +01:00

recipes-multimedia

pulseaudio: explicitly set --with-database=simple

2012-12-13 15:21:44 +00:00

recipes-qt

qt4: Avoid circular dependencies with multilib

2012-10-03 10:02:21 +01:00

recipes-rt

rt: Add hwlatdetect to rt images

2012-09-12 15:13:53 +01:00

recipes-sato

sato-icon-theme: fix build

2012-12-13 15:21:45 +00:00

recipes-support

libproxy: Fix for CVE-2012-4504

2012-12-13 15:21:42 +00:00

site

site/common-linux: fix incorrect size of pid_t for apr

2012-07-02 16:47:44 +01:00

COPYING.MIT

Add missing licence files (COPYING.MIT)

2006-07-23 13:52:32 +00:00

recipes.txt

recipes.txt: Add entries for "recipes-rt" and "recipes-support"

2012-07-09 16:58:56 +01:00