diff options
| author |   Li Wang <li.wang@windriver.com> | 2012-12-13 14:51:22 +0800 |
|---|---|---|
| committer |   Saul Wold <sgw@linux.intel.com> | 2012-12-14 15:17:21 -0800 |
| commit | 64de49bed598ce9d4ee0b448badc38a433712aff (patch) | |
| tree | c5cab7c61c170b7de2ce26ff5e8c1bceb96ecb98 /meta/recipes-gnome/librsvg/librsvg_2.32.1.bb | |
| parent | bc601f96f34ad17a87f599b58e502ec1b2c13fa3 (diff) | |
| download | openembedded-core-64de49bed598ce9d4ee0b448badc38a433712aff.tar.gz | |
librsvg: CVE-2011-3146
Store node type separately in RsvgNode
commit 34c95743ca692ea0e44778e41a7c0a129363de84 upstream
The node name (formerly RsvgNode:type) cannot be used to infer
the sub-type of RsvgNode that we're dealing with, since for unknown
elements we put type = node-name. This lead to a (potentially exploitable)
crash e.g. when the element name started with "fe" which tricked
the old code into considering it as a RsvgFilterPrimitive.
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-3146
https://bugzilla.gnome.org/show_bug.cgi?id=658014
[YOCTO #3581]
[ CQID: WIND00376773 ]
Upstream-Status: Backport
Signed-off-by: Li Wang <li.wang@windriver.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
Diffstat (limited to 'meta/recipes-gnome/librsvg/librsvg_2.32.1.bb')
| -rw-r--r-- | meta/recipes-gnome/librsvg/librsvg_2.32.1.bb | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/meta/recipes-gnome/librsvg/librsvg_2.32.1.bb b/meta/recipes-gnome/librsvg/librsvg_2.32.1.bb index 4f838e0318..3621045b38 100644 --- a/meta/recipes-gnome/librsvg/librsvg_2.32.1.bb +++ b/meta/recipes-gnome/librsvg/librsvg_2.32.1.bb @@ -11,7 +11,7 @@ DEPENDS = "gtk+ cairo libxml2" DEPENDS_class-native = "cairo-native pango-native gdk-pixbuf-native" BBCLASSEXTEND = "native" -PR = "r10" +PR = "r11" inherit autotools pkgconfig gnome gtk-doc @@ -23,7 +23,9 @@ PACKAGECONFIG_class-native = "" PACKAGECONFIG[croco] = "--with-croco,--without-croco,libcroco" -SRC_URI += "file://doc_Makefile.patch" +SRC_URI += "file://doc_Makefile.patch \ + file://librsvg-CVE-2011-3146.patch \ + " SRC_URI[archive.md5sum] = "4b00d0fee130c936644892c152f42db7" SRC_URI[archive.sha256sum] = "91b98051f352fab8a6257688d6b2fd665b4648ed66144861f2f853ccf876d334" |