Andrej Valek b611c4c7c0 libxml2: Fix CVE-2017-9047 and CVE-2017-9048 ...

xmlSnprintfElementContent failed to correctly check the available
buffer space in two locations.

Fixes bug 781333 and bug 781701

CVE: CVE-2017-9047 CVE-2017-9048
(From OE-Core rev: bb0af023e811907b4e641b39f654ca921ac8794a)

(From OE-Core rev: d549b8f3836b2ffda5c59a7ae4d955846c558646)

Signed-off-by: Andrej Valek <andrej.valek@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2017-07-27 22:36:44 +01:00

..

base-files

base-files: profile: Do not assume that the tty command exists

2017-04-10 23:00:42 +01:00

base-passwd

base-passwd/useradd: Various improvements to useradd with RSS

2017-04-14 09:47:08 +01:00

bsd-headers

bsd-headers: set SUMMARY instead of DESCRIPTION

2016-05-30 15:58:10 +01:00

busybox

busybox: make bash a valid login shell if enabled

2017-04-29 11:17:23 +01:00

console-tools

console-tools: fix string formatting issue

2017-02-15 20:06:42 -08:00

coreutils

recipes: Move out stale GPLv2 versions to a seperate layer

2017-03-07 20:05:31 +00:00

dbus

meta: start to ignore the largefile distro feature

2017-03-08 11:52:56 +00:00

dbus-wait

recipes: Add missing pkgconfig class inherits

2014-06-03 16:49:19 +01:00

dropbear

dropbear: drop support for DSA host keys in dropbear init script

2017-03-10 14:50:10 +00:00

expat

gzip/pigz/expat/image: Simplify gzip-native/pigz-native

2017-01-28 23:32:16 +00:00

fts

fts: Reduce duplication in MIPS variants.

2016-11-15 15:19:52 +00:00

gettext

gettext: split recipe's description

2017-03-17 16:53:06 +00:00

glib-2.0

glib-2.0: improve determinism for GIO ptests

2017-03-11 16:09:14 +00:00

glib-networking

glib-networking: remove intltool dependency

2016-11-23 11:10:11 +00:00

glibc

bitbake.conf: Add COMPONENTS_DIR for ${STAGING_DIR}-components

2017-05-11 16:55:59 +01:00

ifupdown

ifupdown: Fix initscript

2017-03-27 20:22:51 +01:00

images

build-appliance-image: Update to pyro head revision

2017-07-12 07:06:10 +01:00

init-ifupdown

meta: set proper S value

2015-01-23 11:36:27 +00:00

initrdscripts

gummiboot: Remove/change gummiboot references with systemd-boot

2017-01-09 13:39:11 +00:00

initscripts

initscripts/sysfs.sh: mount configfs if present

2017-03-01 23:27:08 +00:00

kbd

kbd: update to 2.0.4

2017-03-01 23:27:09 +00:00

libcgroup

libcgroup: Add dependency on fts when building on musl

2016-01-24 09:40:26 +00:00

libxml

libxml2: Fix CVE-2017-9047 and CVE-2017-9048

2017-07-27 22:36:44 +01:00

meta

meta-ide-support: exclude this recipe from rm_work

2017-04-05 23:22:12 +01:00

musl

musl: Upgrade to latest tip

2017-04-11 18:10:17 +01:00

ncurses

ncurses: Drop incorrect option

2017-04-10 23:00:44 +01:00

netbase

netbase: upgrade to version 5.4

2017-01-19 22:47:21 +00:00

os-release

meta: remove True option to getVar calls

2016-12-16 10:23:23 +00:00

ovmf

ovmf: avoid linking with gold

2017-03-31 10:10:29 +01:00

packagegroups

nativesdk-packagegroup-sdk-host.bb: add cmake

2017-03-17 16:53:06 +00:00

psplash

psplash: Add PACKAGE_WRITE_DEPS for postinst

2017-01-20 11:53:50 +00:00

readline

readline: Remove unused patch

2017-03-16 22:11:32 +00:00

sysfsutils

package_regex.inc: split sourceforge related entries to their own recipes

2015-12-08 10:20:52 +00:00

systemd

systemd: make vconsole a PACKAGECONFIG option

2017-04-01 08:14:58 +01:00

sysvinit

sysvinit-inittab: fix getty device removal

2016-12-16 10:23:23 +00:00

udev

eudev: set LGPL-2.1+ for libudev package

2017-04-10 23:00:43 +01:00

update-rc.d

update-rc.d: Correct trivial typo in DESCRIPTION line.

2016-08-01 11:47:11 +01:00

util-linux

util-linux,shadow: Make 'nologin' alternative command

2017-03-22 11:35:20 +00:00

volatile-binds

volatile-binds: correct some errors reported by systemd

2017-04-01 08:14:57 +01:00

zlib

zlib: Upgrade 1.2.8 -> 1.2.11

2017-03-08 11:52:57 +00:00