Age | Commit message (Collapse) | Author | |
---|---|---|---|
2017-11-05 | libxml2: 2.9.4 -> 2.9.5 | Andrej Valek | |
Signed-off-by: Andrej Valek <andrej.valek@siemens.com> Signed-off-by: Ross Burton <ross.burton@intel.com> | |||
2017-06-23 | libxml2: Fix CVE-2017-9049 and CVE-2017-9050 | Andrej Valek | |
Fix handling of parameter-entity references There were two bugs where parameter-entity references could lead to an unexpected change of the input buffer in xmlParseNameComplex and xmlDictLookup being called with an invalid pointer. Fixes bug 781205 and bug 781361 CVE: CVE-2017-9049 CVE-2017-9050 Signed-off-by: Andrej Valek <andrej.valek@siemens.com> |