[Buildroot] [PATCHv2] package/libxml2: add upstream security fix for CVE-2019-20388

Thomas Petazzoni thomas.petazzoni at bootlin.com
Tue Feb 18 17:39:27 UTC 2020


On Tue, 18 Feb 2020 10:31:34 +0100
Thomas De Schampheleire <patrickdepinguin at gmail.com> wrote:

> From: Thomas De Schampheleire <thomas.de_schampheleire at nokia.com>
> 
> Fixes CVE-2019-20388: xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10
> allows an xmlSchemaValidateStream memory leak.
> 
> Signed-off-by: Thomas De Schampheleire <thomas.de_schampheleire at nokia.com>
> ---
> v2: add sob line inside patch (ThomasP)

Applied to master, thanks.

Thomas
-- 
Thomas Petazzoni, CTO, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com


More information about the buildroot mailing list