Armin Kuster 01b93fb33d libxml2: fix CVE-2015-7942 and CVE-2015-8035 ...

CVE-2015-7942 libxml2: heap-based buffer overflow in xmlParseConditionalSections()
CVE-2015-8035 libxml2: DoS when parsing specially crafted XML document if XZ support is enabled

[YOCTO #8641]

(From OE-Core master rev: 27de51f4ad21d9b896e7d48041e7cdf20c564a38)

(From OE-Core rev: fdaf0f8f8b034f19639f66e1d30088bb9abfc68d)

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Joshua Lock <joshua.lock@collabora.co.uk>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2016-01-15 13:14:34 +00:00

..

base-files

base-files: Check for /run and /var/lock softlinks on upgrade

2015-04-20 15:03:11 +01:00

base-passwd

base-passwd: fix SRC_URI

2015-02-03 14:53:51 +00:00

busybox

busybox: remove CVE-2014-9645 patch (already upstream in 1.23.x)

2015-05-15 18:12:44 +01:00

console-tools

console-tools: Remove floating runtime dependency on flex

2014-04-24 17:55:13 +01:00

coreutils

coreutils: import prebuilt manpages from Gentoo

2015-02-17 22:35:02 +00:00

dbus

dbus: CVE-2015-0245: prevent forged ActivationFailure

2015-06-28 09:44:18 +01:00

dbus-wait

recipes: Add missing pkgconfig class inherits

2014-06-03 16:49:19 +01:00

dropbear

dropbear: upgrade to 2014.66

2015-01-07 23:35:06 +00:00

expat

recipes: convert remaining SUMMARY/DESCRIPTION cosmetic issues (part 2)

2014-02-20 14:28:13 +00:00

gettext

gettext_0.16.1: add -lrt and -lpthread to LDFLAGS for uclibc builds

2015-12-08 13:27:33 +00:00

glib-2.0

glib-2.0: add HOMEPAGE

2015-01-07 23:35:13 +00:00

glib-networking

glib-networking: Inherit gettext

2014-08-15 18:21:48 +01:00

glibc

glibc: fix the big endian loader name on AArch64

2015-12-08 13:27:35 +00:00

images

build-appliance-image: Update to fido head revision

2015-09-29 14:59:45 +01:00

init-ifupdown

meta: set proper S value

2015-01-23 11:36:27 +00:00

initrdscripts

init-install-efi.sh: Avoid /mnt/mtab creation if already present

2015-12-08 13:27:12 +00:00

initscripts

initscripts: urandom: respect ${localstatedir} instead of hardcoding /var

2015-08-09 16:37:45 -07:00

jpeg

recipes: convert remaining SUMMARY/DESCRIPTION cosmetic issues (part 2)

2014-02-20 14:28:13 +00:00

kbd

kbd: Upgrade to 2.0.2

2014-07-17 12:28:51 +01:00

libcgroup

meta: enable parallel build for several recipes

2015-02-15 21:58:27 +00:00

libxml

libxml2: fix CVE-2015-7942 and CVE-2015-8035

2016-01-15 13:14:34 +00:00

meta

uninative-tarball: delete the packagedata task

2015-05-15 18:12:46 +01:00

ncurses

ncurses: fix native builds when host has gcc5

2015-06-28 09:44:17 +01:00

netbase

netbase: upgrade to 5.3

2014-11-25 13:03:25 +00:00

os-release

os-release: add LIC_FILES_CHKSUM

2015-03-22 08:50:02 +00:00

packagegroups

packagegroup zeroconf: nss-mdns is libc dependant

2015-03-20 11:03:48 +00:00

psplash

psplash: update to latest git version

2014-11-06 16:45:20 +00:00

readline

readline: actually apply readline63-003 (aka CVE-2014-2524)

2015-12-08 13:27:34 +00:00

sysfsutils

recipes: convert remaining SUMMARY/DESCRIPTION cosmetic issues (part 2)

2014-02-20 14:28:13 +00:00

systemd

systemd: fix networking setup when ipv6 modules are missing

2015-12-08 13:27:12 +00:00

sysvinit

sysvinit-inittab: Fix no tty in runlevel 1.

2015-03-22 08:49:58 +00:00

uclibc

uclibc: backport upstream fix for SH4

2015-12-08 13:27:30 +00:00

udev

udev-cache: improve error handling

2015-05-15 18:12:47 +01:00

update-rc.d

update-rc.d: fix to handle priority numbers correctly

2014-06-01 14:29:30 +01:00

util-linux

util-linux: Add lastb to alternatives

2015-05-15 18:12:49 +01:00

volatile-binds

volatile-binds: correct path of command umount

2015-08-09 16:37:43 -07:00

zlib

zlib: clean up base_libdir symlink

2015-06-28 09:44:08 +01:00