mirrors/poky
1
0
Fork 0
mirror of https://git.yoctoproject.org/poky synced 2026-03-30 08:02:22 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
e173db21d0899a5cb185f01f8aaf92156d3e910c
poky/meta
History
Steve Sakoman e173db21d0 expat: fix CVE-2022-25313 
In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack
exhaustion in build_model via a large nesting depth in the DTD element.

Backport patch from:
9b4ce651b2

Also add patch which fixes a regression introduced in the above fix:
https://github.com/libexpat/libexpat/pull/566

CVE: CVE-2022-25313

(From OE-Core rev: 8105700b1d6d23c87332f453bdc7379999bb4b03)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-03-09 17:30:48 +00:00
..
classes
default-distrovars.inc: Switch connectivity check to a yoctoproject.org page
2022-02-23 23:43:42 +00:00
conf
default-distrovars.inc: Switch connectivity check to a yoctoproject.org page
2022-02-23 23:43:42 +00:00
files
sdk: fix search for dynamic loader
2022-02-23 23:43:42 +00:00
lib
parselogs: add a couple systemd false positives
2022-01-22 17:56:53 +00:00
recipes-bsp
grub: add a fix for a crash in scripts
2022-03-02 00:21:37 +00:00
recipes-connectivity
openssl: Add fix for CVE-2021-4160
2022-03-02 00:21:36 +00:00
recipes-core
expat: fix CVE-2022-25313
2022-03-09 17:30:48 +00:00
recipes-devtools
go: fix CVE-2022-23772
2022-03-09 17:30:48 +00:00
recipes-extended
libarchive: Fix for CVE-2021-36976
2022-03-09 17:30:48 +00:00
recipes-gnome
gobject-introspection: Don't write $HOME into scripts
2021-10-23 23:14:17 +01:00
recipes-graphics
freetype: add missing CVE tag CVE-2020-15999
2022-02-23 23:43:42 +00:00
recipes-kernel
linux-firmware: upgrade 20211216 -> 20220209
2022-02-23 23:43:42 +00:00
recipes-multimedia
tiff: fix for CVE-2022-22844
2022-03-02 00:21:36 +00:00
recipes-rt
rt-tests: set branch name in SRC_URI
2021-09-10 16:21:36 +01:00
recipes-sato
puzzles: Upstream changed to main branch for development
2022-03-02 00:21:36 +00:00
recipes-support
vim: Upgrade 8.2.4314 -> 8.2.4424
2022-02-23 23:43:43 +00:00
site
site: Make sys_siglist default to no
2020-10-06 14:15:21 +01:00
COPYING.MIT
…
recipes.txt
Remove LSB support
2019-08-29 14:05:12 +01:00