diff options
| author | Fabrice Fontaine <fontaine.fabrice@gmail.com> | 2019-01-28 21:55:38 +0100 |
|---|---|---|
| committer | Peter Korsgaard <peter@korsgaard.com> | 2019-01-28 22:19:06 +0100 |
| commit | cb3397e633b51a62edc4927e4f2c9350fbec9e65 (patch) | |
| tree | 544156d232b3e425ae96b5e4725c80a87ed66361 /package/libxml2/0001-CVE-2017-8872.patch | |
| parent | fc166894b3f257c4cb20d84368c918f3335dadf5 (diff) | |
| download | buildroot-cb3397e633b51a62edc4927e4f2c9350fbec9e65.tar.gz buildroot-cb3397e633b51a62edc4927e4f2c9350fbec9e65.zip | |
libxml2: security bump to version 2.9.9
- Fixes CVE-2018-9251 and CVE-2018-14567:
https://gitlab.gnome.org/GNOME/libxml2/commit/2240fbf5912054af025fb6e01e26375100275e74
- Fixes CVE-2018-14404: https://gitlab.gnome.org/GNOME/libxml2/issues/5
- Remove patch: CVE-2017-8872 was fixed by
https://gitlab.gnome.org/GNOME/libxml2/issues/26
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Diffstat (limited to 'package/libxml2/0001-CVE-2017-8872.patch')
| -rw-r--r-- | package/libxml2/0001-CVE-2017-8872.patch | 33 |
1 files changed, 0 insertions, 33 deletions
diff --git a/package/libxml2/0001-CVE-2017-8872.patch b/package/libxml2/0001-CVE-2017-8872.patch deleted file mode 100644 index b7a75c19a7..0000000000 --- a/package/libxml2/0001-CVE-2017-8872.patch +++ /dev/null @@ -1,33 +0,0 @@ -From 8b329effb610f4138e4e680f6a6867570f6d6179 Mon Sep 17 00:00:00 2001 -From: Baruch Siach <baruch@tkos.co.il> -Date: Fri, 9 Feb 2018 10:58:11 +0200 -Subject: [PATCH] CVE-2017-8872 - -Taken from attachment to upstream bug report comment #9. - -https://bugzilla.gnome.org/show_bug.cgi?id=775200#c9 -https://bugzilla.gnome.org/attachment.cgi?id=366193&action=diff - -Signed-off-by: Baruch Siach <baruch@tkos.co.il> ---- - parser.c | 4 ++++ - 1 file changed, 4 insertions(+) - -diff --git a/parser.c b/parser.c -index 1c5e036ea265..025111067ae8 100644 ---- a/parser.c -+++ b/parser.c -@@ -12467,6 +12467,10 @@ xmlHaltParser(xmlParserCtxtPtr ctxt) { - ctxt->input->cur = BAD_CAST""; - ctxt->input->base = ctxt->input->cur; - ctxt->input->end = ctxt->input->cur; -+ if (ctxt->input->buf) -+ xmlBufEmpty (ctxt->input->buf->buffer); -+ else -+ ctxt->input->length = 0; - } - } - --- -2.15.1 - |
