Ovidiu Panait f2422aad3b libxml2: Fix CVE-2020-24977 ...

GNOME project libxml2 v2.9.10 and earlier have a global Buffer Overflow
vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has
been fixed in commit 8e7c20a1 (20910-GITv2.9.10-103-g8e7c20a1).

Reference:
https://gitlab.gnome.org/GNOME/libxml2/-/issues/178

Upstream patch:
50f06b3efb

(From OE-Core rev: d5406b389fcae8fb0f5fc9cc7dbf7ee819c04bc8)

Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 92dc02b8f03f3586de0a2ec1463b189a3918e303)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2020-09-17 12:51:24 +01:00

..

libxml2

libxml2: Fix CVE-2020-24977

2020-09-17 12:51:24 +01:00

libxml2_2.9.10.bb

libxml2: Fix CVE-2020-24977

2020-09-17 12:51:24 +01:00