expat: add fix for CVE-2016-0718
authorGustavo Zacarias <gustavo@zacarias.com.ar>
Thu, 19 May 2016 12:33:54 +0000 (09:33 -0300)
committerThomas Petazzoni <thomas.petazzoni@free-electrons.com>
Sun, 22 May 2016 21:06:41 +0000 (23:06 +0200)
commitf53b54ad115013261f8435cf005166c6b8698706
tree922d4c6def238a50c757c0d6e47c78fa1503ded3
parent7f5a1b3a5cae60d07c1497cd4aa2cf6d45f8257d
expat: add fix for CVE-2016-0718

Fixes:
CVE-2016-0718 - The Expat XML parser mishandles certain kinds of
malformed input documents, resulting in buffer overflows during
processing and error reporting. The overflows can manifest as a
segmentation fault or as memory corruption during a parse operation. The
bugs allow for a denial of service attack in many applications by an
unauthenticated attacker, and could conceivably result in remote code
execution.

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
package/expat/0001-fix-CVE-2016-0718.patch [new file with mode: 0644]