Li Wang caa1d03089 librsvg: CVE-2011-3146 ...

Store node type separately in RsvgNode

commit 34c95743ca692ea0e44778e41a7c0a129363de84 upstream

The node name (formerly RsvgNode:type) cannot be used to infer
the sub-type of RsvgNode that we're dealing with, since for unknown
elements we put type = node-name. This lead to a (potentially exploitable)
crash e.g. when the element name started with "fe" which tricked
the old code into considering it as a RsvgFilterPrimitive.
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-3146

https://bugzilla.gnome.org/show_bug.cgi?id=658014

[YOCTO #3581]
[ CQID: WIND00376773 ]
Upstream-Status: Backport

(From OE-Core rev: 6d030fcb69221da073ce413049deb8447934bed5)

Signed-off-by: Li Wang <li.wang@windriver.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>

Resolved merge conflicts with denzil branch.

Fixes denzil bug [YOCTO #3651].

Signed-off-by: Scott Garman <scott.a.garman@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2013-01-03 12:34:25 +00:00

..

classes

boot-directdisk: Fix kernel location after STAGING_KERNEL_DIR change

2013-01-03 12:34:24 +00:00

conf

kernel: Add kernel headers to kernel-dev package

2012-09-28 16:53:09 +01:00

files

common-license: Add ICU generic

2012-03-25 12:23:39 +01:00

lib

buildhistory_analysis: fix error when version specifier missing

2012-08-21 11:16:45 +01:00

recipes-bsp

grub,guile,cpio,tar,wget: Fix gnulib for absense of gets in eglibc

2013-01-03 12:34:23 +00:00

recipes-connectivity

openssl: Use ${CFLAGS} not ${FULL_OPTIMIZATION}

2012-12-07 15:58:18 +00:00

recipes-core

libxml2: patch for CVE-2012-2871

2013-01-03 12:34:25 +00:00

recipes-devtools

squashfs: fix CVE-2012-4025

2013-01-03 12:34:25 +00:00

recipes-extended

sysklogd: removed tabs from syslog.conf

2013-01-03 12:34:23 +00:00

recipes-gnome

librsvg: CVE-2011-3146

2013-01-03 12:34:25 +00:00

recipes-graphics

freetype: patches for CVE-2012-5668, 5669, and 5670

2013-01-03 12:34:25 +00:00

recipes-kernel

dtc.inc: fix for libdir == /usr/lib64

2012-08-21 11:16:39 +01:00

recipes-multimedia

gst-plugins-good: disable (uninstalled) examples

2012-12-07 15:58:15 +00:00

recipes-qt

qt4-embedded: fix QT_ARCH usage in QT_CONFIG_FLAGS

2012-06-21 11:59:35 +01:00

recipes-rt

core-image-rt-*.bb: require munges DESCRIPTION

2012-04-16 22:30:03 +01:00

recipes-sato

webkit-gtk: Apply work around for all PowerPC targets

2012-06-21 11:59:32 +01:00

recipes-support

gettext,m4,augeas,gnutls: Account for removal of gets in eglibc 2.16

2013-01-03 12:34:22 +00:00

site

powerpc64-linux: Update cached autoconf values for libpcap on powerpc64

2012-02-10 14:38:41 +00:00

COPYING.MIT

Add missing licence files (COPYING.MIT)

2006-07-23 13:52:32 +00:00

recipes.txt

meta/recipes.txt: correct Qt capitalisation

2011-09-07 22:54:17 +01:00