diff options
| author | Mark Felder <feld@FreeBSD.org> | 2016-06-20 19:13:44 +0000 |
|---|---|---|
| committer | Mark Felder <feld@FreeBSD.org> | 2016-06-20 19:13:44 +0000 |
| commit | 0c017ca3e175d631370ca60c3564939e0474df67 (patch) | |
| tree | 10048118c6c22db52314f07a1e578651e9287199 /textproc/libxslt/files/patch-CVE-2015-7995 | |
| parent | Update vuxml for libxslt vulnerabilities (diff) | |
textproc/libxslt: Update to 1.1.29
Changelog: https://git.gnome.org/browse/libxslt/commit/NEWS?id=9a1b3ddf6034aa2f6a30b4b7ea4bfc3c4037cd58
Absent from the Changelog are the CVEs Google discovered, CVE-2016-1683
and CVE-2016-1684. This library needs to be updated to ensure
www/chromium is no longer vulnerable to these CVEs. Additionally the
changelog notes a fix for CVE-2015-7995, but we solved that previously
with a patch to the port.
PR: 210298
MFH: 2016Q2
Security: CVE-2016-1683
Security: CVE-2016-1684
Notes
Notes:
svn path=/head/; revision=417174
Diffstat (limited to 'textproc/libxslt/files/patch-CVE-2015-7995')
| -rw-r--r-- | textproc/libxslt/files/patch-CVE-2015-7995 | 29 |
1 files changed, 0 insertions, 29 deletions
diff --git a/textproc/libxslt/files/patch-CVE-2015-7995 b/textproc/libxslt/files/patch-CVE-2015-7995 deleted file mode 100644 index 9e83afc98b02..000000000000 --- a/textproc/libxslt/files/patch-CVE-2015-7995 +++ /dev/null @@ -1,29 +0,0 @@ -From 7ca19df892ca22d9314e95d59ce2abdeff46b617 Mon Sep 17 00:00:00 2001 -From: Daniel Veillard <veillard@redhat.com> -Date: Thu, 29 Oct 2015 19:33:23 +0800 -Subject: Fix for type confusion in preprocessing attributes - -CVE-2015-7995 http://www.openwall.com/lists/oss-security/2015/10/27/10 -We need to check that the parent node is an element before dereferencing -its namespace ---- - libxslt/preproc.c | 3 ++- - 1 file changed, 2 insertions(+), 1 deletion(-) - -diff --git a/libxslt/preproc.c b/libxslt/preproc.c -index 0eb80a0..7f69325 100644 ---- libxslt/preproc.c -+++ libxslt/preproc.c -@@ -2249,7 +2249,8 @@ xsltStylePreCompute(xsltStylesheetPtr style, xmlNodePtr inst) { - } else if (IS_XSLT_NAME(inst, "attribute")) { - xmlNodePtr parent = inst->parent; - -- if ((parent == NULL) || (parent->ns == NULL) || -+ if ((parent == NULL) || -+ (parent->type != XML_ELEMENT_NODE) || (parent->ns == NULL) || - ((parent->ns != inst->ns) && - (!xmlStrEqual(parent->ns->href, inst->ns->href))) || - (!xmlStrEqual(parent->name, BAD_CAST "attribute-set"))) { --- -cgit v0.11.2 - |