From cb3397e633b51a62edc4927e4f2c9350fbec9e65 Mon Sep 17 00:00:00 2001 From: Fabrice Fontaine Date: Mon, 28 Jan 2019 21:55:38 +0100 Subject: libxml2: security bump to version 2.9.9 - Fixes CVE-2018-9251 and CVE-2018-14567: https://gitlab.gnome.org/GNOME/libxml2/commit/2240fbf5912054af025fb6e01e26375100275e74 - Fixes CVE-2018-14404: https://gitlab.gnome.org/GNOME/libxml2/issues/5 - Remove patch: CVE-2017-8872 was fixed by https://gitlab.gnome.org/GNOME/libxml2/issues/26 Signed-off-by: Fabrice Fontaine Signed-off-by: Peter Korsgaard --- package/libxml2/0001-CVE-2017-8872.patch | 33 -------------------------------- 1 file changed, 33 deletions(-) delete mode 100644 package/libxml2/0001-CVE-2017-8872.patch (limited to 'package/libxml2/0001-CVE-2017-8872.patch') diff --git a/package/libxml2/0001-CVE-2017-8872.patch b/package/libxml2/0001-CVE-2017-8872.patch deleted file mode 100644 index b7a75c19a7..0000000000 --- a/package/libxml2/0001-CVE-2017-8872.patch +++ /dev/null @@ -1,33 +0,0 @@ -From 8b329effb610f4138e4e680f6a6867570f6d6179 Mon Sep 17 00:00:00 2001 -From: Baruch Siach -Date: Fri, 9 Feb 2018 10:58:11 +0200 -Subject: [PATCH] CVE-2017-8872 - -Taken from attachment to upstream bug report comment #9. - -https://bugzilla.gnome.org/show_bug.cgi?id=775200#c9 -https://bugzilla.gnome.org/attachment.cgi?id=366193&action=diff - -Signed-off-by: Baruch Siach ---- - parser.c | 4 ++++ - 1 file changed, 4 insertions(+) - -diff --git a/parser.c b/parser.c -index 1c5e036ea265..025111067ae8 100644 ---- a/parser.c -+++ b/parser.c -@@ -12467,6 +12467,10 @@ xmlHaltParser(xmlParserCtxtPtr ctxt) { - ctxt->input->cur = BAD_CAST""; - ctxt->input->base = ctxt->input->cur; - ctxt->input->end = ctxt->input->cur; -+ if (ctxt->input->buf) -+ xmlBufEmpty (ctxt->input->buf->buffer); -+ else -+ ctxt->input->length = 0; - } - } - --- -2.15.1 - -- cgit v1.2.3