Hi Anuj, I have sent the upgrade to 2.6.0 , it includes the complete security fix for CVE-2023-52426 and CVE-2023-52425.
Regards Meenali ________________________________ From: Mittal, Anuj <anuj.mit...@intel.com> Sent: 11 March 2024 08:37 To: Gupta, Meenali <meenali.gu...@windriver.com>; openembedded-core@lists.openembedded.org <openembedded-core@lists.openembedded.org> Subject: Re: [oe-core][kirkstone][PATCH 1/1] expat: fix CVE-2023-52426 CAUTION: This email comes from a non Wind River email account! Do not click links or open attachments unless you recognize the sender and know the content is safe. On Thu, 2024-03-07 at 16:08 -0800, Meenali Gupta via lists.openembedded.org wrote: > From: Meenali Gupta <meenali.gu...@windriver.com> > > A flaw was found in Expat (libexpat). If XML_DTD is undefined at > compile time, a recursive XML Entity > Expansion condition can be triggered. This issue may lead to a > condition where data is expanded exponentially, > which will quickly consume system resources and cause a denial of > service. > > Signed-off-by: Meenali Gupta <meenali.gu...@windriver.com> > --- > .../expat/expat/CVE-2023-52426.patch | 429 > ++++++++++++++++++ > meta/recipes-core/expat/expat_2.5.0.bb | 1 + > 2 files changed, 430 insertions(+) > create mode 100644 meta/recipes-core/expat/expat/CVE-2023- > 52426.patch > > diff --git a/meta/recipes-core/expat/expat/CVE-2023-52426.patch > b/meta/recipes-core/expat/expat/CVE-2023-52426.patch > new file mode 100644 > index 0000000000..b78a8ee0dc > --- /dev/null > +++ b/meta/recipes-core/expat/expat/CVE-2023-52426.patch > @@ -0,0 +1,429 @@ > +From 0f075ec8ecb5e43f8fdca5182f8cca4703da0404 Mon Sep 17 00:00:00 > 2001 > +From: Sebastian Pipping <sebast...@pipping.org> > +Date: Thu, 26 Oct 2023 00:43:22 +0200 > +Subject: [PATCH] lib|xmlwf|cmake: Extend scope of billion laughs > attack > + protection > + > +.. from "defined(XML_DTD)" to "defined(XML_DTD) || XML_GE==1". > + > +CVE: CVE-2023-52426 > +Upstream-Status: Backport > [https://github.com/libexpat/libexpat/commit/0f075ec8ecb5e43f8fdca518 > 2f8cca4703da0404] The PR that this commit is part of includes other commits as well. Is there any reason why only this is included or required? I didn't check in detail but as an example, it seems this commit uses EXPAT_GE which was introduced in an earlier commit in that PR: https://github.com/libexpat/libexpat/pull/777/commits/daa89e42c005cc7f4f7af9eee271ae0723d30300 So, is this supposed to work as intended? Thanks, Anuj > + > +Signed-off-by: Meenali Gupta <meenali.gu...@windriver.com> > +--- > + CMakeLists.txt | 8 ++++- > + lib/expat.h | 8 +++-- > + lib/internal.h | 2 +- > + lib/libexpat.def.cmake | 4 +-- > + lib/xmlparse.c | 71 ++++++++++++++++++++++----------------- > --- > + xmlwf/xmlwf.c | 18 ++++++----- > + 6 files changed, 62 insertions(+), 49 deletions(-) > + > +diff --git a/CMakeLists.txt b/CMakeLists.txt > +index 2b4c13c..183c5c2 100644 > +--- a/CMakeLists.txt > ++++ b/CMakeLists.txt > +@@ -381,7 +381,13 @@ if(EXPAT_SHARED_LIBS) > + endif() > + endmacro() > + > +- _expat_def_file_toggle(EXPAT_DTD _EXPAT_COMMENT_DTD) > ++ if(EXPAT_DTD OR EXPAT_GE) > ++ set(_EXPAT_DTD_OR_GE TRUE) > ++ else() > ++ set(_EXPAT_DTD_OR_GE FALSE) > ++ endif() > ++ > ++ _expat_def_file_toggle(_EXPAT_DTD_OR_GE > _EXPAT_COMMENT_DTD_OR_GE) > + _expat_def_file_toggle(EXPAT_ATTR_INFO > _EXPAT_COMMENT_ATTR_INFO) > + > + > configure_file("${CMAKE_CURRENT_SOURCE_DIR}/lib/libexpat.def.cmake" > "${CMAKE_CURRENT_BINARY_DIR}/lib/libexpat.def") > +diff --git a/lib/expat.h b/lib/expat.h > +index 1c83563..33c94af 100644 > +--- a/lib/expat.h > ++++ b/lib/expat.h > +@@ -1038,13 +1038,15 @@ typedef struct { > + XMLPARSEAPI(const XML_Feature *) > + XML_GetFeatureList(void); > + > +-#ifdef XML_DTD > +-/* Added in Expat 2.4.0. */ > ++#if defined(XML_DTD) || XML_GE == 1 > ++/* Added in Expat 2.4.0 for XML_DTD defined and > ++ * added in Expat 2.6.0 for XML_GE == 1. */ > + XMLPARSEAPI(XML_Bool) > + XML_SetBillionLaughsAttackProtectionMaximumAmplification( > + XML_Parser parser, float maximumAmplificationFactor); > + > +-/* Added in Expat 2.4.0. */ > ++/* Added in Expat 2.4.0 for XML_DTD defined and > ++ * added in Expat 2.6.0 for XML_GE == 1. */ > + XMLPARSEAPI(XML_Bool) > + XML_SetBillionLaughsAttackProtectionActivationThreshold( > + XML_Parser parser, unsigned long long > activationThresholdBytes); > +diff --git a/lib/internal.h b/lib/internal.h > +index e09f533..1851925 100644 > +--- a/lib/internal.h > ++++ b/lib/internal.h > +@@ -154,7 +154,7 @@ extern "C" { > + void _INTERNAL_trim_to_complete_utf8_characters(const char *from, > + const char > **fromLimRef); > + > +-#if defined(XML_DTD) > ++#if defined(XML_DTD) || XML_GE == 1 > + unsigned long long testingAccountingGetCountBytesDirect(XML_Parser > parser); > + unsigned long long > testingAccountingGetCountBytesIndirect(XML_Parser parser); > + const char *unsignedCharToPrintable(unsigned char c); > +diff --git a/lib/libexpat.def.cmake b/lib/libexpat.def.cmake > +index cf434a2..61a4f00 100644 > +--- a/lib/libexpat.def.cmake > ++++ b/lib/libexpat.def.cmake > +@@ -75,5 +75,5 @@ EXPORTS > + XML_SetHashSalt @67 > + ; internal @68 removed with version 2.3.1 > + ; added with version 2.4.0 > +-@_EXPAT_COMMENT_DTD@ > XML_SetBillionLaughsAttackProtectionActivationThreshold @69 > +-@_EXPAT_COMMENT_DTD@ > XML_SetBillionLaughsAttackProtectionMaximumAmplification @70 > ++@_EXPAT_COMMENT_DTD_OR_GE@ > XML_SetBillionLaughsAttackProtectionActivationThreshold @69 > ++@_EXPAT_COMMENT_DTD_OR_GE@ > XML_SetBillionLaughsAttackProtectionMaximumAmplification @70 > +diff --git a/lib/xmlparse.c b/lib/xmlparse.c > +index b6c2eca..e23441e 100644 > +--- a/lib/xmlparse.c > ++++ b/lib/xmlparse.c > +@@ -408,7 +408,7 @@ enum XML_Account { > + XML_ACCOUNT_NONE /* i.e. do not account, was > accounted already */ > + }; > + > +-#ifdef XML_DTD > ++#if defined(XML_DTD) || XML_GE == 1 > + typedef unsigned long long XmlBigCount; > + typedef struct accounting { > + XmlBigCount countBytesDirect; > +@@ -424,7 +424,7 @@ typedef struct entity_stats { > + unsigned int maximumDepthSeen; > + int debugLevel; > + } ENTITY_STATS; > +-#endif /* XML_DTD */ > ++#endif /* defined(XML_DTD) || XML_GE == 1 */ > + > + typedef enum XML_Error PTRCALL Processor(XML_Parser parser, const > char *start, > + const char *end, const > char **endPtr); > +@@ -562,7 +562,7 @@ static XML_Parser parserCreate(const XML_Char > *encodingName, > + > + static void parserInit(XML_Parser parser, const XML_Char > *encodingName); > + > +-#ifdef XML_DTD > ++#if defined(XML_DTD) || XML_GE == 1 > + static float accountingGetCurrentAmplification(XML_Parser > rootParser); > + static void accountingReportStats(XML_Parser originParser, const > char *epilog); > + static void accountingOnAbort(XML_Parser originParser); > +@@ -585,7 +585,7 @@ static void entityTrackingOnClose(XML_Parser > parser, ENTITY *entity, > + > + static XML_Parser getRootParserOf(XML_Parser parser, > + unsigned int *outLevelDiff); > +-#endif /* XML_DTD */ > ++#endif /* defined(XML_DTD) || XML_GE == 1 */ > + > + static unsigned long getDebugLevel(const char *variableName, > + unsigned long > defaultDebugLevel); > +@@ -703,7 +703,7 @@ struct XML_ParserStruct { > + enum XML_ParamEntityParsing m_paramEntityParsing; > + #endif > + unsigned long m_hash_secret_salt; > +-#ifdef XML_DTD > ++#if defined(XML_DTD) || XML_GE == 1 > + ACCOUNTING m_accounting; > + ENTITY_STATS m_entity_stats; > + #endif > +@@ -1163,7 +1163,7 @@ parserInit(XML_Parser parser, const XML_Char > *encodingName) { > + #endif > + parser->m_hash_secret_salt = 0; > + > +-#ifdef XML_DTD > ++#if defined(XML_DTD) || XML_GE == 1 > + memset(&parser->m_accounting, 0, sizeof(ACCOUNTING)); > + parser->m_accounting.debugLevel = > getDebugLevel("EXPAT_ACCOUNTING_DEBUG", 0u); > + parser->m_accounting.maximumAmplificationFactor > +@@ -2522,8 +2522,9 @@ XML_GetFeatureList(void) { > + #ifdef XML_ATTR_INFO > + {XML_FEATURE_ATTR_INFO, XML_L("XML_ATTR_INFO"), 0}, > + #endif > +-#ifdef XML_DTD > +- /* Added in Expat 2.4.0. */ > ++#if defined(XML_DTD) || XML_GE == 1 > ++ /* Added in Expat 2.4.0 for XML_DTD defined and > ++ * added in Expat 2.6.0 for XML_GE == 1. */ > + > {XML_FEATURE_BILLION_LAUGHS_ATTACK_PROTECTION_MAXIMUM_AMPLIFICATION_D > EFAULT, > + XML_L("XML_BLAP_MAX_AMP"), > + (long int) > +@@ -2537,7 +2538,7 @@ XML_GetFeatureList(void) { > + return features; > + } > + > +-#ifdef XML_DTD > ++#if defined(XML_DTD) || XML_GE == 1 > + XML_Bool XMLCALL > + XML_SetBillionLaughsAttackProtectionMaximumAmplification( > + XML_Parser parser, float maximumAmplificationFactor) { > +@@ -2559,7 +2560,7 @@ > XML_SetBillionLaughsAttackProtectionActivationThreshold( > + parser->m_accounting.activationThresholdBytes = > activationThresholdBytes; > + return XML_TRUE; > + } > +-#endif /* XML_DTD */ > ++#endif /* defined(XML_DTD) || XML_GE == 1 */ > + > + /* Initially tag->rawName always points into the parse buffer; > + for those TAG instances opened while the current parse buffer > was > +@@ -2645,13 +2646,13 @@ externalEntityInitProcessor2(XML_Parser > parser, const char *start, > + int tok = XmlContentTok(parser->m_encoding, start, end, &next); > + switch (tok) { > + case XML_TOK_BOM: > +-#ifdef XML_DTD > ++#if defined(XML_DTD) || XML_GE == 1 > + if (! accountingDiffTolerated(parser, tok, start, next, > __LINE__, > + XML_ACCOUNT_DIRECT)) { > + accountingOnAbort(parser); > + return XML_ERROR_AMPLIFICATION_LIMIT_BREACH; > + } > +-#endif /* XML_DTD */ > ++#endif /* defined(XML_DTD) || XML_GE == 1 */ > + > + /* If we are at the end of the buffer, this would cause the > next stage, > + i.e. externalEntityInitProcessor3, to pass control directly > to > +@@ -2765,7 +2766,7 @@ doContent(XML_Parser parser, int > startTagLevel, const ENCODING *enc, > + for (;;) { > + const char *next = s; /* XmlContentTok doesn't always set the > last arg */ > + int tok = XmlContentTok(enc, s, end, &next); > +-#ifdef XML_DTD > ++#if defined(XML_DTD) || XML_GE == 1 > + const char *accountAfter > + = ((tok == XML_TOK_TRAILING_RSQB) || (tok == > XML_TOK_TRAILING_CR)) > + ? (haveMore ? s /* i.e. 0 bytes */ : end) > +@@ -2831,14 +2832,14 @@ doContent(XML_Parser parser, int > startTagLevel, const ENCODING *enc, > + XML_Char ch = (XML_Char)XmlPredefinedEntityName( > + enc, s + enc->minBytesPerChar, next - enc- > >minBytesPerChar); > + if (ch) { > +-#ifdef XML_DTD > ++#if defined(XML_DTD) || XML_GE == 1 > + /* NOTE: We are replacing 4-6 characters original input for > 1 character > + * so there is no amplification and hence recording > without > + * protection. */ > + accountingDiffTolerated(parser, tok, (char *)&ch, > + ((char *)&ch) + sizeof(XML_Char), > __LINE__, > + XML_ACCOUNT_ENTITY_EXPANSION); > +-#endif /* XML_DTD */ > ++#endif /* defined(XML_DTD) || XML_GE == 1 */ > + if (parser->m_characterDataHandler) > + parser->m_characterDataHandler(parser->m_handlerArg, &ch, > 1); > + else if (parser->m_defaultHandler) > +@@ -4040,7 +4041,7 @@ doCdataSection(XML_Parser parser, const > ENCODING *enc, const char **startPtr, > + for (;;) { > + const char *next = s; /* in case of XML_TOK_NONE or > XML_TOK_PARTIAL */ > + int tok = XmlCdataSectionTok(enc, s, end, &next); > +-#ifdef XML_DTD > ++#if defined(XML_DTD) || XML_GE == 1 > + if (! accountingDiffTolerated(parser, tok, s, next, __LINE__, > account)) { > + accountingOnAbort(parser); > + return XML_ERROR_AMPLIFICATION_LIMIT_BREACH; > +@@ -4192,7 +4193,7 @@ doIgnoreSection(XML_Parser parser, const > ENCODING *enc, const char **startPtr, > + *eventPP = s; > + *startPtr = NULL; > + tok = XmlIgnoreSectionTok(enc, s, end, &next); > +-# ifdef XML_DTD > ++#if defined(XML_DTD) || XML_GE == 1 > + if (! accountingDiffTolerated(parser, tok, s, next, __LINE__, > + XML_ACCOUNT_DIRECT)) { > + accountingOnAbort(parser); > +@@ -4284,7 +4285,7 @@ processXmlDecl(XML_Parser parser, int > isGeneralTextEntity, const char *s, > + const XML_Char *storedversion = NULL; > + int standalone = -1; > + > +-#ifdef XML_DTD > ++#if defined(XML_DTD) || XML_GE == 1 > + if (! accountingDiffTolerated(parser, XML_TOK_XML_DECL, s, next, > __LINE__, > + XML_ACCOUNT_DIRECT)) { > + accountingOnAbort(parser); > +@@ -4491,7 +4492,7 @@ entityValueInitProcessor(XML_Parser parser, > const char *s, const char *end, > + */ > + else if (tok == XML_TOK_BOM && next == end > + && ! parser->m_parsingStatus.finalBuffer) { > +-# ifdef XML_DTD > ++# if defined(XML_DTD) || XML_GE == 1 > + if (! accountingDiffTolerated(parser, tok, s, next, __LINE__, > + XML_ACCOUNT_DIRECT)) { > + accountingOnAbort(parser); > +@@ -4707,11 +4708,13 @@ doProlog(XML_Parser parser, const ENCODING > *enc, const char *s, const char *end, > + } > + } > + role = XmlTokenRole(&parser->m_prologState, tok, s, next, enc); > +-#ifdef XML_DTD > ++#if defined(XML_DTD) || XML_GE == 1 > + switch (role) { > + case XML_ROLE_INSTANCE_START: // bytes accounted in > contentProcessor > + case XML_ROLE_XML_DECL: // bytes accounted in > processXmlDecl > +- case XML_ROLE_TEXT_DECL: // bytes accounted in > processXmlDecl > ++ # ifdef XML_DTD > ++ case XML_ROLE_TEXT_DECL: // bytes accounted in processXmlDecl > ++# endif > + break; > + default: > + if (! accountingDiffTolerated(parser, tok, s, next, __LINE__, > account)) { > +@@ -5648,7 +5651,7 @@ epilogProcessor(XML_Parser parser, const char > *s, const char *end, > + for (;;) { > + const char *next = NULL; > + int tok = XmlPrologTok(parser->m_encoding, s, end, &next); > +-#ifdef XML_DTD > ++#if defined(XML_DTD) || XML_GE == 1 > + if (! accountingDiffTolerated(parser, tok, s, next, __LINE__, > + XML_ACCOUNT_DIRECT)) { > + accountingOnAbort(parser); > +@@ -5728,7 +5731,7 @@ processInternalEntity(XML_Parser parser, > ENTITY *entity, XML_Bool betweenDecl) { > + return XML_ERROR_NO_MEMORY; > + } > + entity->open = XML_TRUE; > +-#ifdef XML_DTD > ++#if defined(XML_DTD) || XML_GE == 1 > + entityTrackingOnOpen(parser, entity, __LINE__); > + #endif > + entity->processed = 0; > +@@ -5762,9 +5765,9 @@ processInternalEntity(XML_Parser parser, > ENTITY *entity, XML_Bool betweenDecl) { > + entity->processed = (int)(next - textStart); > + parser->m_processor = internalEntityProcessor; > + } else { > +-#ifdef XML_DTD > ++#if defined(XML_DTD) || XML_GE == 1 > + entityTrackingOnClose(parser, entity, __LINE__); > +-#endif /* XML_DTD */ > ++#endif /* defined(XML_DTD) || XML_GE == 1 */ > + entity->open = XML_FALSE; > + parser->m_openInternalEntities = openEntity->next; > + /* put openEntity back in list of free instances */ > +@@ -5813,7 +5816,7 @@ internalEntityProcessor(XML_Parser parser, > const char *s, const char *end, > + return result; > + } > + > +-#ifdef XML_DTD > ++#if defined(XML_DTD) || XML_GE == 1 > + entityTrackingOnClose(parser, entity, __LINE__); > + #endif > + entity->open = XML_FALSE; > +@@ -5892,7 +5895,7 @@ appendAttributeValue(XML_Parser parser, const > ENCODING *enc, XML_Bool isCdata, > + const char *next > + = ptr; /* XmlAttributeValueTok doesn't always set the last > arg */ > + int tok = XmlAttributeValueTok(enc, ptr, end, &next); > +-#ifdef XML_DTD > ++#if defined(XML_DTD) || XML_GE == 1 > + if (! accountingDiffTolerated(parser, tok, ptr, next, __LINE__, > account)) { > + accountingOnAbort(parser); > + return XML_ERROR_AMPLIFICATION_LIMIT_BREACH; > +@@ -5957,14 +5960,14 @@ appendAttributeValue(XML_Parser parser, > const ENCODING *enc, XML_Bool isCdata, > + XML_Char ch = (XML_Char)XmlPredefinedEntityName( > + enc, ptr + enc->minBytesPerChar, next - enc- > >minBytesPerChar); > + if (ch) { > +-#ifdef XML_DTD > ++#if defined(XML_DTD) || XML_GE == 1 > + /* NOTE: We are replacing 4-6 characters original input for > 1 character > + * so there is no amplification and hence recording > without > + * protection. */ > + accountingDiffTolerated(parser, tok, (char *)&ch, > + ((char *)&ch) + sizeof(XML_Char), > __LINE__, > + XML_ACCOUNT_ENTITY_EXPANSION); > +-#endif /* XML_DTD */ > ++#endif /* defined(XML_DTD) || XML_GE == 1 */ > + if (! poolAppendChar(pool, ch)) > + return XML_ERROR_NO_MEMORY; > + break; > +@@ -6042,14 +6045,14 @@ appendAttributeValue(XML_Parser parser, > const ENCODING *enc, XML_Bool isCdata, > + enum XML_Error result; > + const XML_Char *textEnd = entity->textPtr + entity- > >textLen; > + entity->open = XML_TRUE; > +-#ifdef XML_DTD > ++#if defined(XML_DTD) || XML_GE == 1 > + entityTrackingOnOpen(parser, entity, __LINE__); > + #endif > + result = appendAttributeValue(parser, parser- > >m_internalEncoding, > + isCdata, (const char > *)entity->textPtr, > + (const char *)textEnd, pool, > + > XML_ACCOUNT_ENTITY_EXPANSION); > +-#ifdef XML_DTD > ++#if defined(XML_DTD) || XML_GE == 1 > + entityTrackingOnClose(parser, entity, __LINE__); > + #endif > + entity->open = XML_FALSE; > +@@ -6105,7 +6108,7 @@ storeEntityValue(XML_Parser parser, const > ENCODING *enc, > + = entityTextPtr; /* XmlEntityValueTok doesn't always set > the last arg */ > + int tok = XmlEntityValueTok(enc, entityTextPtr, entityTextEnd, > &next); > + > +-#ifdef XML_DTD > ++#if defined(XML_DTD) || XML_GE == 1 > + if (! accountingDiffTolerated(parser, tok, entityTextPtr, next, > __LINE__, > + account)) { > + accountingOnAbort(parser); > +@@ -7651,7 +7654,7 @@ copyString(const XML_Char *s, const > XML_Memory_Handling_Suite *memsuite) { > + return result; > + } > + > +-#ifdef XML_DTD > ++#if defined(XML_DTD) || XML_GE == 1 > + > + static float > + accountingGetCurrentAmplification(XML_Parser rootParser) { > +@@ -8382,7 +8385,7 @@ unsignedCharToPrintable(unsigned char c) { > + assert(0); /* never gets here */ > + } > + > +-#endif /* XML_DTD */ > ++#endif /* defined(XML_DTD) || XML_GE == 1 */ > + > + static unsigned long > + getDebugLevel(const char *variableName, unsigned long > defaultDebugLevel) { > +diff --git a/xmlwf/xmlwf.c b/xmlwf/xmlwf.c > +index 471f2a2..be23f5a 100644 > +--- a/xmlwf/xmlwf.c > ++++ b/xmlwf/xmlwf.c > +@@ -1062,9 +1062,10 @@ tmain(int argc, XML_Char **argv) { > + " (needs a floating point number greater or equal than > 1.0)")); > + exit(XMLWF_EXIT_USAGE_ERROR); > + } > +-#ifndef XML_DTD > +- ftprintf(stderr, T("Warning: Given amplification limit > ignored") T( > +- ", xmlwf has been compiled without DTD > support.\n")); > ++#if ! defined(XML_DTD) && XML_GE == 0 > ++ ftprintf(stderr, > ++ T("Warning: Given amplification limit ignored") > ++ T(", xmlwf has been compiled without DTD/GE > support.\n")); > + #endif > + break; > + } > +@@ -1083,9 +1084,10 @@ tmain(int argc, XML_Char **argv) { > + exit(XMLWF_EXIT_USAGE_ERROR); > + } > + attackThresholdGiven = XML_TRUE; > +-#ifndef XML_DTD > +- ftprintf(stderr, T("Warning: Given attack threshold ignored") > T( > +- ", xmlwf has been compiled without DTD > support.\n")); > ++#if ! defined(XML_DTD) && XML_GE == 0 > ++ ftprintf(stderr, > ++ T("Warning: Given attack threshold ignored") > ++ T(", xmlwf has been compiled without DTD/GE > support.\n")); > + #endif > + break; > + } > +@@ -1120,13 +1122,13 @@ tmain(int argc, XML_Char **argv) { > + } > + > + if (attackMaximumAmplification != -1.0f) { > +-#ifdef XML_DTD > ++#if defined(XML_DTD) || XML_GE == 1 > + XML_SetBillionLaughsAttackProtectionMaximumAmplification( > + parser, attackMaximumAmplification); > + #endif > + } > + if (attackThresholdGiven) { > +-#ifdef XML_DTD > ++#if defined(XML_DTD) || XML_GE == 1 > + XML_SetBillionLaughsAttackProtectionActivationThreshold( > + parser, attackThresholdBytes); > + #else > +-- > +2.40.0 > diff --git a/meta/recipes-core/expat/expat_2.5.0.bb b/meta/recipes- > core/expat/expat_2.5.0.bb > index 7080f934d1..e427020534 100644 > --- a/meta/recipes-core/expat/expat_2.5.0.bb > +++ b/meta/recipes-core/expat/expat_2.5.0.bb > @@ -10,6 +10,7 @@ VERSION_TAG = "${@d.getVar('PV').replace('.', > '_')}" > > SRC_URI = > "https://github.com/libexpat/libexpat/releases/download/R_${VERSION_T > AG}/expat-${PV}.tar.bz2 \ > file://run-ptest \ > + file://CVE-2023-52426.patch \ > " > > UPSTREAM_CHECK_URI = > "https://github.com/libexpat/libexpat/releases/"; > > >
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#196973): https://lists.openembedded.org/g/openembedded-core/message/196973 Mute This Topic: https://lists.openembedded.org/mt/104800121/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
