Bug 10868 - CVE-2016-5131 for libxml
Summary: CVE-2016-5131 for libxml
Status: RESOLVED FIXED
Alias: None
Product: Security - Recipe Upgrade
Classification: Build System, Metadata & Runtime
Component: security (show other bugs)
Version: unspecified
Hardware: x86 Multiple
: Undecided normal
Target Milestone: ---
Assignee: Saul Wold
QA Contact:
URL:
Whiteboard:
Depends on:
Blocks:
 
Reported: 2017-01-02 07:39 UTC by Ismo Puustinen
Modified: 2018-02-02 20:38 UTC (History)
2 users (show)

See Also:
OS type for building Yocto: ---
Type of Regression: ---
Verified:
Documentation change: No (bug/feature does not impact docs)

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Ismo Puustinen 2017-01-02 07:39:22 UTC 
See https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-5131 :

Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the XPointer range-to function.
Comment 1 Paul Eggleton 2017-09-27 22:56:18 UTC 
The patch for this is in master, pyro and morty - can we mark this resolved?
Comment 2 Stephano Cetola 2018-02-02 20:38:43 UTC 
pyro:
96ef568f75dded56a2123b63dcc8b443f796afe0
640bd2b98ff33e49b42f1087650ebe20d92259a4

morty:
68b0f3a0bf8dfdf49be4aed1745a7f50662c555d
1e284447b9bf42e1fd6080f5a50fe01c8267a4e6