3580 2012-12-13 05:39:41 +0000 Security Advisory - libxml2 - CVE-2012-2871 2013-02-28 19:26:12 +0000 1 1 7 Build System, Metadata & Runtime OE-Core core 1.4 x86 Multiple RESOLVED FIXED P3 Medium+ normal Future 1 li.wang li.wang jessica.zhang li.wang meta.mr.watcher meta.watcher sgw song.liu zhenfeng.zhao --- --- --- oldest_to_newest 28215 0 li.wang 2012-12-13 05:39:41 +0000 libxml2 2.9.0-rc1 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly support a cast of an unspecified variable during handling of XSL transforms, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document, related to the _xmlNs data structure in include/libxml/tree.h.Per: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-2871 30276 1 sgw 2013-02-28 19:26:12 +0000 http://git.yoctoproject.org/cgit/cgit.cgi/poky/commit/?id=8780c5ddf2916bbd42fc67b79c286652aebb1546 Patch in both 1.4 and 1.3.1