diff options
| author | Andrej Valek <andrej.valek@siemens.com> | 2016-12-12 14:20:20 +0100 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2017-01-11 11:46:53 +0000 |
| commit | cf810d5cc17cb6b9f53d21a404c89afe372accb7 (patch) | |
| tree | 019dde324ae5740f4cd411c1c3ae13b4bf0396e4 /meta/classes | |
| parent | 68b0f3a0bf8dfdf49be4aed1745a7f50662c555d (diff) | |
| download | openembedded-core-cf810d5cc17cb6b9f53d21a404c89afe372accb7.tar.gz openembedded-core-cf810d5cc17cb6b9f53d21a404c89afe372accb7.tar.bz2 openembedded-core-cf810d5cc17cb6b9f53d21a404c89afe372accb7.zip | |
libxml2: fix CVE-2016-4658 Disallow namespace nodes in XPointer points and ranges
Namespace nodes must be copied to avoid use-after-free errors.
But they don't necessarily have a physical representation in a
document, so simply disallow them in XPointer ranges.
(From OE-Core rev: 00e928bd1c2aed9caeaf9e411743805d2139a023)
Signed-off-by: Andrej Valek <andrej.valek@siemens.com>
Signed-off-by: Pascal Bach <pascal.bach@siemens.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Diffstat (limited to 'meta/classes')
0 files changed, 0 insertions, 0 deletions