starlingx/tools
Code Issues Proposed changes

libxml2: fix CVE-2016-4658

Browse Source 
Fix use after free memory corruption involving XPointer ranges by
advancing to version 2.9.1-6.el7_9.6.

Testing

build-pkgs; build-iso (not used); create designer patch
install patch
execute sanity test
remove patch
execute sanity test

--- sanity test ---
#!/bin/python
import libxml2, sys
doc = libxml2.parseFile("/etc/firewalld/zones/public.xml")
print doc.name
---

Closes-Bug: 1954718
Signed-off-by: Joe Slater <joe.slater@windriver.com>
Change-Id: I18ca9f179b6db2f95dfd532f62195f69b29add9b
This commit is contained in:
Joe Slater 2021-12-22 11:31:09 -05:00
parent 6563846502
commit e225629101
4 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
centos-mirror-tools/config/centos/compiler/rpms_centos.lst
View File

@ -159,7 +159,7 @@ libXfixes-5.0.3-1.el7.x86_64.rpm
libXfixes-devel-5.0.3-1.el7.x86_64.rpm
libXft-2.3.2-2.el7.x86_64.rpm
libXft-devel-2.3.2-2.el7.x86_64.rpm
# libxml2-2.9.1-6.el7_2.3.x86_64.rpm provided by mock
# libxml2-2.9.1-6.el7_9.6.x86_64.rpm provided by mock
libXrender-0.9.10-1.el7.x86_64.rpm
libXrender-devel-0.9.10-1.el7.x86_64.rpm
libxshmfence-1.2-1.el7.x86_64.rpm

4
centos-mirror-tools/config/centos/distro/rpms_centos.lst
View File

@ -536,8 +536,8 @@ libxkbcommon-devel-0.7.1-3.el7.x86_64.rpm
libxkbfile-1.0.9-3.el7.x86_64.rpm
libxklavier-5.4-7.el7.x86_64.rpm
libxklavier-devel-5.4-7.el7.x86_64.rpm
# libxml2-2.9.1-6.el7_2.3.x86_64.rpm provided by mock
libxml2-devel-2.9.1-6.el7_2.3.x86_64.rpm
# libxml2-2.9.1-6.el7_9.6.x86_64.rpm provided by mock
libxml2-devel-2.9.1-6.el7_9.6.x86_64.rpm
libXmu-1.1.2-2.el7.x86_64.rpm
libXpm-3.5.12-1.el7.x86_64.rpm
libXrandr-1.5.1-2.el7.x86_64.rpm

4
centos-mirror-tools/config/centos/flock/rpms_centos.lst
View File

@ -523,8 +523,8 @@ libxcb-1.13-1.el7.x86_64.rpm
libXext-1.3.3-3.el7.x86_64.rpm
libXfont-1.5.4-1.el7.x86_64.rpm
libXi-1.7.9-1.el7.x86_64.rpm
# libxml2-2.9.1-6.el7_2.3.x86_64.rpm provided by mock
libxml2-python-2.9.1-6.el7_2.3.x86_64.rpm
# libxml2-2.9.1-6.el7_9.6.x86_64.rpm provided by mock
libxml2-python-2.9.1-6.el7_9.6.x86_64.rpm
libXpm-devel-3.5.12-1.el7.x86_64.rpm
libxslt-1.1.28-6.el7.x86_64.rpm
libxslt-devel-1.1.28-6.el7.x86_64.rpm

2
centos-mirror-tools/config/centos/mock/rpms_centos.lst
View File

@ -86,7 +86,7 @@ libuser-0.60-9.el7.x86_64.rpm
libutempter-1.1.6-4.el7.x86_64.rpm
libuuid-2.23.2-59.el7.x86_64.rpm
libverto-0.2.5-4.el7.x86_64.rpm
libxml2-2.9.1-6.el7_2.3.x86_64.rpm
libxml2-2.9.1-6.el7_9.6.x86_64.rpm
lua-5.1.4-15.el7.x86_64.rpm
lz4-1.7.5-2.el7.x86_64.rpm
lzo-2.06-8.el7.x86_64.rpm