Andrej Valek 93b0d29184 libxml2: Fix CVE-2017-9049 and CVE-2017-9050 ...

Fix handling of parameter-entity references

There were two bugs where parameter-entity references could lead to an
unexpected change of the input buffer in xmlParseNameComplex and
xmlDictLookup being called with an invalid pointer.

Fixes bug 781205 and bug 781361

CVE: CVE-2017-9049 CVE-2017-9050
(From OE-Core rev: 2300762fef8fc8e3e56fb07fd4076c1deeba0a9b)

(From OE-Core rev: a409c50a09b12caa434b2b06bdcfb6beba43f67f)

Signed-off-by: Andrej Valek <andrej.valek@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2017-07-27 22:36:44 +01:00

..

classes

classes/buildhistory: fix failures collecting output signatures

2017-07-27 22:36:43 +01:00

conf

Revert "bitbake.conf: Add sdl-config to HOSTTOOLS if using host SDL"

2017-06-27 13:49:45 +01:00

files

ext-sdk-prepare.py: use quiet mode when preparing sysroot

2017-04-19 10:38:37 +01:00

lib

package_manager: flush installed_pkgs file before oe-pkgdata-util uses it

2017-07-07 09:19:08 +01:00

recipes-bsp

u-boot-mkimage: fix nativesdk build

2017-07-07 09:19:08 +01:00

recipes-connectivity

bind: Security fix CVE-2016-6170

2017-04-29 11:17:23 +01:00

recipes-core

libxml2: Fix CVE-2017-9049 and CVE-2017-9050

2017-07-27 22:36:44 +01:00

recipes-devtools

tcf-agent: kill with USR2 in systemd stop

2017-07-20 11:00:23 +01:00

recipes-extended

ghostscript: CVE-2016-7977, CVE-2016-7978, CVE-2016-7979, CVE-2017-9216

2017-06-05 23:30:22 +01:00

recipes-gnome

nativesdk-packagegroup-sdk-host: replace smartpm with dnf

2017-03-14 14:42:17 +00:00

recipes-graphics

piglit: add patches for unbuildable surfaceless Mesa test

2017-06-12 17:03:17 +01:00

recipes-kernel

cryptodev-linux: update SRC_URI

2017-05-27 14:52:29 +01:00

recipes-lsb4

libpng12: Use rm instead of unlink

2017-03-10 14:50:11 +00:00

recipes-multimedia

gst-player: Disable visualizations as workaround

2017-04-29 11:17:23 +01:00

recipes-rt

meta: remove True option to getVar calls

2016-12-16 10:23:23 +00:00

recipes-sato

webkitgtk: Fix build on aarch64

2017-03-17 16:53:05 +00:00

recipes-support

libgcrypt: fix CVE-2017-7526

2017-07-19 11:30:22 +01:00

site

siteinfo.bbclass: Add mipsisa{32, 64}r6{el, } support

2016-10-07 16:43:57 +01:00

COPYING.GPLv2

Fix license notices for OE-Core

2014-01-02 12:58:54 +00:00

COPYING.MIT

…

recipes.txt

qt4: remove recipes and classes

2016-01-07 13:40:14 +00:00