diff options
author | Yi Zhao <yi.zhao@windriver.com> | 2016-06-17 11:20:58 +0800 |
---|---|---|
committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2016-06-23 14:21:50 +0100 |
commit | 6589de727ba9c9901fdd53d31bd88ad0f17f3905 (patch) | |
tree | a8a3ef39383714061a5df6478c12d01e36db3400 /meta/recipes-core/expat/expat.inc | |
parent | 8b3d3ac84f787bf4ecccdcbcb97f2dac56acd45c (diff) | |
download | openembedded-core-6589de727ba9c9901fdd53d31bd88ad0f17f3905.tar.gz openembedded-core-6589de727ba9c9901fdd53d31bd88ad0f17f3905.tar.bz2 openembedded-core-6589de727ba9c9901fdd53d31bd88ad0f17f3905.zip |
expat: CVE-2016-0718
Fix CVE-2016-0718: expat XML parser crashes on malformed input
External References:
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-0718
https://bugzilla.redhat.com/show_bug.cgi?id=1296102
https://bugzilla.suse.com/show_bug.cgi?id=979441
Patch from:
https://bugzilla.redhat.com/show_bug.cgi?id=1296102
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Diffstat (limited to 'meta/recipes-core/expat/expat.inc')
-rw-r--r-- | meta/recipes-core/expat/expat.inc | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/meta/recipes-core/expat/expat.inc b/meta/recipes-core/expat/expat.inc index fe9d7e74f0..3d8429c513 100644 --- a/meta/recipes-core/expat/expat.inc +++ b/meta/recipes-core/expat/expat.inc @@ -6,6 +6,7 @@ LICENSE = "MIT" SRC_URI = "${SOURCEFORGE_MIRROR}/expat/expat-${PV}.tar.bz2 \ file://autotools.patch \ + file://CVE-2016-0718.patch \ " inherit autotools lib_package gzipnative |