diff options
| author |   Yi Zhao <yi.zhao@windriver.com> | 2016-06-17 11:20:58 +0800 |
|---|---|---|
| committer |   Richard Purdie <richard.purdie@linuxfoundation.org> | 2016-06-23 14:21:50 +0100 |
| commit | 6589de727ba9c9901fdd53d31bd88ad0f17f3905 (patch) | |
| tree | a8a3ef39383714061a5df6478c12d01e36db3400 /meta/recipes-core/expat/expat.inc | |
| parent | 8b3d3ac84f787bf4ecccdcbcb97f2dac56acd45c (diff) | |
| download | openembedded-core-contrib-6589de727ba9c9901fdd53d31bd88ad0f17f3905.tar.gz | |
expat: CVE-2016-0718
Fix CVE-2016-0718: expat XML parser crashes on malformed input
External References:
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-0718
https://bugzilla.redhat.com/show_bug.cgi?id=1296102
https://bugzilla.suse.com/show_bug.cgi?id=979441
Patch from:
https://bugzilla.redhat.com/show_bug.cgi?id=1296102
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Diffstat (limited to 'meta/recipes-core/expat/expat.inc')
| -rw-r--r-- | meta/recipes-core/expat/expat.inc | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/meta/recipes-core/expat/expat.inc b/meta/recipes-core/expat/expat.inc index fe9d7e74f0..3d8429c513 100644 --- a/meta/recipes-core/expat/expat.inc +++ b/meta/recipes-core/expat/expat.inc @@ -6,6 +6,7 @@ LICENSE = "MIT" SRC_URI = "${SOURCEFORGE_MIRROR}/expat/expat-${PV}.tar.bz2 \ file://autotools.patch \ + file://CVE-2016-0718.patch \ " inherit autotools lib_package gzipnative |