librsvg: CVE-2011-3146
Store node type separately in RsvgNode commit 34c95743ca692ea0e44778e41a7c0a129363de84 upstream The node name (formerly RsvgNode:type) cannot be used to infer the sub-type of RsvgNode that we're dealing with, since for unknown elements we put type = node-name. This lead to a (potentially exploitable) crash e.g. when the element name started with "fe" which tricked the old code into considering it as a RsvgFilterPrimitive. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-3146 https://bugzilla.gnome.org/show_bug.cgi?id=658014 [YOCTO #3581] [ CQID: WIND00376773 ] Upstream-Status: Backport (From OE-Core rev: 64de49bed598ce9d4ee0b448badc38a433712aff) Signed-off-by: Li Wang <li.wang@windriver.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
parent
8780c5ddf2
commit
355fb13d89
File diff suppressed because it is too large
Load Diff
|
@ -11,7 +11,7 @@ DEPENDS = "gtk+ cairo libxml2"
|
|||
DEPENDS_class-native = "cairo-native pango-native gdk-pixbuf-native"
|
||||
BBCLASSEXTEND = "native"
|
||||
|
||||
PR = "r10"
|
||||
PR = "r11"
|
||||
|
||||
inherit autotools pkgconfig gnome gtk-doc
|
||||
|
||||
|
@ -23,7 +23,9 @@ PACKAGECONFIG_class-native = ""
|
|||
|
||||
PACKAGECONFIG[croco] = "--with-croco,--without-croco,libcroco"
|
||||
|
||||
SRC_URI += "file://doc_Makefile.patch"
|
||||
SRC_URI += "file://doc_Makefile.patch \
|
||||
file://librsvg-CVE-2011-3146.patch \
|
||||
"
|
||||
|
||||
SRC_URI[archive.md5sum] = "4b00d0fee130c936644892c152f42db7"
|
||||
SRC_URI[archive.sha256sum] = "91b98051f352fab8a6257688d6b2fd665b4648ed66144861f2f853ccf876d334"
|
||||
|
|
Loading…
Reference in New Issue