Roland Kovacs 6269788fef libxml2: fix CVE-2025-49795 ...

A NULL pointer dereference vulnerability was found in libxml2 when processing
XPath XML expressions. This flaw allows an attacker to craft a malicious XML
input to libxml2, leading to a denial of service.

(From OE-Core rev: b144c3ef3ba1797d925ea44d9450a6ec0fe32047)

Signed-off-by: Roland Kovacs <roland.kovacs@est.tech>
Signed-off-by: Steve Sakoman <steve@sakoman.com>

2025-07-29 07:59:52 -07:00

..

base-files

base-files: Drop /bin/sh dependency

2025-02-14 06:38:54 -08:00

base-passwd

sysroot user management postinsts: run with /bin/sh -e to report errors when they happen

2024-01-27 08:20:02 +00:00

busybox

busybox: apply patch for CVE-2023-39810

2025-07-21 09:07:21 -07:00

coreutils

coreutils: fix CVE-2025-5278

2025-06-25 08:35:09 -07:00

dbus

dbus: disable assertions and enable only modular tests

2024-02-21 22:20:10 +00:00

dbus-wait

dbus-wait: bump srcrev

2024-01-07 12:24:57 +00:00

dropbear

dropbear: backport fix for concurrent channel open/close

2024-12-06 05:50:25 -08:00

ell

ell: upgrade 0.63 -> 0.64

2024-05-03 06:12:21 -07:00

expat

expat: patch CVE-2024-8176

2025-04-07 06:34:44 -07:00

fts

fts: Fix typo in summary

2023-04-27 14:41:31 +01:00

gettext

gettext: fix a parallel build issue

2024-07-23 06:05:47 -07:00

glib-2.0

glib-2.0: fix CVE-2025-4373

2025-05-27 09:38:57 -07:00

glib-networking

glib-networking: submit eagain.patch upstream

2024-08-01 06:08:09 -07:00

glibc

glibc: stable 2.39 branch updates

2025-06-25 08:35:09 -07:00

ifupdown

ifupdown: install missing directories

2023-06-28 23:02:50 +01:00

images

build-appliance-image: Update to scarthgap head revision

2025-07-11 08:17:11 -07:00

init-ifupdown

init-ifupdown: modify interfaces for busybox

2024-04-12 17:27:53 +01:00

initrdscripts

initramfs-framework: fix typos

2024-08-26 05:18:44 -07:00

initscripts

initscripts: add function log_success_msg/log_failure_msg/log_warning_msg

2025-05-02 08:20:12 -07:00

kbd

kbd: update license

2024-04-14 06:28:02 +01:00

libcgroup

libcgroup_3.1.0: fix build on non-systemd systems

2024-05-23 08:55:01 -07:00

libxcrypt

libxcrypt: correct the check for a working libucontext.h

2024-07-03 06:28:37 -07:00

libxml

libxml2: fix CVE-2025-49795

2025-07-29 07:59:52 -07:00

meta

Revert "cve-update-nvd2-native: Tweak to work better with NFS DL_DIR"

2025-05-02 08:20:12 -07:00

musl

musl: doesn't support riscv32

2024-01-19 00:16:42 +00:00

ncurses

ncurses: switch to new mirror

2024-07-17 05:36:14 -07:00

netbase

netbase: upgrade 6.3 -> 6.4

2022-11-08 22:47:16 +00:00

newlib

libgloss: Do not apply non-existent patch

2024-06-14 05:19:22 -07:00

os-release

os-release: Fix VERSION_CODENAME in case it is empty

2024-08-26 05:18:44 -07:00

ovmf

ovmf-native: remove .pyc files from install

2025-01-09 06:25:36 -08:00

packagegroups

packagegroup-core-boot: recommend ifupdown

2024-04-12 17:27:53 +01:00

psplash

psplash: upgrade to latest revision

2023-12-06 22:55:49 +00:00

readline

readline: Apply patches from readline-8.2-patches

2024-03-30 22:25:43 +00:00

seatd

seatd: upgrade 0.7.0 -> 0.8.0

2023-09-26 10:35:27 +01:00

sysfsutils

sysfsutils: don't install to base_libdir

2023-06-21 18:38:25 +01:00

systemd

timedated: wait for jobs before SetNTP response

2025-07-21 09:07:22 -07:00

sysvinit

sysvinit: backport patch for fixing one issue of pidof

2024-11-26 06:11:30 -08:00

ttyrun

ttyrun: define CVE_PRODUCT

2024-06-05 05:57:12 -07:00

udev

udev-extraconf: fix network.sh script did not configure hotplugged interfaces

2024-11-26 06:11:30 -08:00

update-rc.d

update-rc.d: add +git to PV

2024-06-05 05:57:12 -07:00

util-linux

util-linux: Add fix to isolate test fstab entries using CUSTOM_FSTAB

2025-06-02 07:12:34 -07:00

volatile-binds

volatile-binds: Calculate the name of the /var/lib service

2023-10-30 08:50:46 +00:00

zlib

zlib: upgrade 1.3 -> 1.3.1

2024-02-16 15:14:26 +00:00