Li Wang 355fb13d89 librsvg: CVE-2011-3146 ... Store node type separately in RsvgNode commit 34c95743ca692ea0e44778e41a7c0a129363de84 upstream The node name (formerly RsvgNode:type) cannot be used to infer the sub-type of RsvgNode that we're dealing with, since for unknown elements we put type = node-name. This lead to a (potentially exploitable) crash e.g. when the element name started with "fe" which tricked the old code into considering it as a RsvgFilterPrimitive. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-3146 https://bugzilla.gnome.org/show_bug.cgi?id=658014 [YOCTO #3581] [ CQID: WIND00376773 ] Upstream-Status: Backport (From OE-Core rev: 64de49bed598ce9d4ee0b448badc38a433712aff) Signed-off-by: Li Wang <li.wang@windriver.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>		2012-12-17 17:24:56 +00:00
..
doc_Makefile.patch	recpies: add Upstream-Status for multiple recipes' patches	2011-05-13 10:28:59 +01:00
librsvg-CVE-2011-3146.patch	librsvg: CVE-2011-3146	2012-12-17 17:24:56 +00:00