openeuler-ci-bot 0eaf306133

!78 fix CVE-2024-28757 and CVE-2023-52426 ...

From: @pshysimon 
Reviewed-by: @hubin95 
Signed-off-by: @hubin95

2024-04-08 08:13:51 +00:00

backport-001-CVE-2023-52426.patch

fix CVE-2024-28757 and CVE-2023-52426

2024-04-03 15:26:54 +08:00

backport-002-CVE-2023-52426.patch

fix CVE-2024-28757 and CVE-2023-52426

2024-04-03 15:26:54 +08:00

backport-003-CVE-2023-52426.patch

fix CVE-2024-28757 and CVE-2023-52426

2024-04-03 15:26:54 +08:00

backport-004-CVE-2023-52426.patch

fix CVE-2024-28757 and CVE-2023-52426

2024-04-03 15:26:54 +08:00

backport-0001-CVE-2022-40674.patch

fix CVE-2022-40674

2022-09-15 16:07:54 +08:00

backport-0002-CVE-2022-40674.patch

fix CVE-2022-40674

2022-09-15 16:07:54 +08:00

backport-Autotools-Give-test-suite-access-to-internal-symbols.patch

fix CVE-2013-0340 and fix reading uninitialized variable

2021-07-02 15:07:35 +08:00

backport-CVE-2013-0340-Autotools-CMake-Suppress-Wpedantic-ms-format-false-p.patch

fix CVE-2013-0340 and fix reading uninitialized variable

2021-07-02 15:07:35 +08:00

backport-CVE-2013-0340-Changes-Document-protection-against-billion-laughs-a.patch

fix CVE-2013-0340 and fix reading uninitialized variable

2021-07-02 15:07:35 +08:00

backport-CVE-2013-0340-doc-reference.html-Document-billion-laughs-attack-pr.patch

fix CVE-2013-0340 and fix reading uninitialized variable

2021-07-02 15:07:35 +08:00

backport-CVE-2013-0340-lib-Add-prefix-expat-to-EXPAT_ENTROPY_DEBUG-1-stderr.patch

fix CVE-2013-0340 and fix reading uninitialized variable

2021-07-02 15:07:35 +08:00

backport-CVE-2013-0340-lib-Address-Cppcheck-2.4.1-warning-uninitvar.patch

fix CVE-2013-0340 and fix reading uninitialized variable

2021-07-02 15:07:35 +08:00

backport-CVE-2013-0340-lib-Allow-test-suite-to-access-raw-accounting-values.patch

fix CVE-2013-0340 and fix reading uninitialized variable

2021-07-02 15:07:35 +08:00

backport-CVE-2013-0340-lib-Fix-accounting-of-CDATA-sections-inside.patch

fix CVE-2013-0340 and fix reading uninitialized variable

2021-07-02 15:07:35 +08:00

backport-CVE-2013-0340-lib-Make-EXPAT_ENTROPY_DEBUG-consistent-with-other-E.patch

fix CVE-2013-0340 and fix reading uninitialized variable

2021-07-02 15:07:35 +08:00

backport-CVE-2013-0340-lib-Protect-against-billion-laughs-attacks-approach-.patch

fix CVE-2013-0340 and fix reading uninitialized variable

2021-07-02 15:07:35 +08:00

backport-CVE-2013-0340-tests-Cover-accounting-of-CDATA-sections.patch

fix CVE-2013-0340 and fix reading uninitialized variable

2021-07-02 15:07:35 +08:00

backport-CVE-2013-0340-tests-Cover-accounting.patch

fix CVE-2013-0340 and fix reading uninitialized variable

2021-07-02 15:07:35 +08:00

backport-CVE-2013-0340-tests-Cover-billion-laughs-attack-protection-API.patch

fix CVE-2013-0340 and fix reading uninitialized variable

2021-07-02 15:07:35 +08:00

backport-CVE-2013-0340-tests-Cover-helper-unsignedCharToPrintable.patch

fix CVE-2013-0340 and fix reading uninitialized variable

2021-07-02 15:07:35 +08:00

backport-CVE-2013-0340-xmlwf-Add-support-for-custom-attack-protection-param.patch

fix CVE-2013-0340 and fix reading uninitialized variable

2021-07-02 15:07:35 +08:00

backport-CVE-2013-0340-xmlwf-Include-expat_config.h-so-we-can-check-for-mac.patch

fix CVE-2013-0340 and fix reading uninitialized variable

2021-07-02 15:07:35 +08:00

backport-CVE-2013-0340-xmlwf.1-Document-arguments-a-and-b.patch

fix CVE-2013-0340 and fix reading uninitialized variable

2021-07-02 15:07:35 +08:00

backport-CVE-2021-45960.patch

fix CVE-2021-45960 CVE-2021-46143 CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827

2022-01-17 10:34:09 +08:00

backport-CVE-2021-46143.patch

fix CVE-2021-45960 CVE-2021-46143 CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827

2022-01-17 10:34:09 +08:00

backport-CVE-2022-22822-CVE-2022-22823-CVE-2022-22824-CVE-2022-22825-CVE-2022-22826-CVE-2022-22827.patch

fix CVE-2021-45960 CVE-2021-46143 CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827

2022-01-17 10:34:09 +08:00

backport-CVE-2022-23852-lib-Detect-and-prevent-integer-overflow-in-XML_GetBu.patch

Fix CVE-2022-23852CVE-2022-23990

2022-02-07 14:41:01 +08:00

backport-CVE-2022-23852-tests-Cover-integer-overflow-in-XML_GetBuffer-CVE-20.patch

Fix CVE-2022-23852CVE-2022-23990

2022-02-07 14:41:01 +08:00

backport-CVE-2022-23990-lib-Prevent-integer-overflow-in-doProlog-CVE-2022-23.patch

Fix CVE-2022-23852CVE-2022-23990

2022-02-07 14:41:01 +08:00

backport-CVE-2022-25235-lib-Add-missing-validation-of-encoding.patch

Fix CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315

2022-02-26 11:55:50 +08:00

backport-CVE-2022-25236-lib-Protect-against-malicious-namespace-declarations.patch

Fix CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315

2022-02-26 11:55:50 +08:00

backport-CVE-2022-25313-Prevent-stack-exhaustion-in-build_model.patch

Fix CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315

2022-02-26 11:55:50 +08:00

backport-CVE-2022-25314-Prevent-integer-overflow-in-copyString.patch

Fix CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315

2022-02-26 11:55:50 +08:00

backport-CVE-2022-25315-Prevent-integer-overflow-in-storeRawNames.patch

Fix CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315

2022-02-26 11:55:50 +08:00

backport-CVE-2022-43680.patch

fix CVE-2022-43680

2022-10-29 10:16:32 +08:00

backport-CVE-2024-28757-001.patch

fix CVE-2024-28757 and CVE-2023-52426

2024-04-03 15:26:54 +08:00

backport-CVE-2024-28757-002.patch

fix CVE-2024-28757 and CVE-2023-52426

2024-04-03 15:26:54 +08:00

backport-CVE-2024-28757-003.patch

fix CVE-2024-28757 and CVE-2023-52426

2024-04-03 15:26:54 +08:00

backport-CVE-2024-28757-004.patch

fix CVE-2024-28757 and CVE-2023-52426

2024-04-03 15:26:54 +08:00

backport-Fix-build_model-regression.patch

Fix CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315

2022-02-26 11:55:50 +08:00

backport-lib-Drop-unused-macro-UTF8_GET_NAMING.patch

Relax fix to CVE-2022-25236

2022-03-07 17:44:44 +08:00

backport-lib-Fix-harmless-use-of-uninitialized-memory.patch

Relax fix to CVE-2022-25236

2022-03-07 17:44:44 +08:00

backport-lib-Relax-fix-to-CVE-2022-25236-with-regard-to-RFC-3.patch

Relax fix to CVE-2022-25236

2022-03-07 17:44:44 +08:00

backport-runtests.c-Fix-for-DEXPAT_DTD-OFF.patch

Fix CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315

2022-02-26 11:55:50 +08:00

backport-tests-Cover-CVE-2022-25236.patch

Fix CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315

2022-02-26 11:55:50 +08:00

backport-tests-Cover-missing-validation-of-encoding.patch

Fix CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315

2022-02-26 11:55:50 +08:00

backport-tests-Cover-overeager-DTD-destruction-in-XML_Externa.patch

fix CVE-2022-43680

2022-10-29 10:16:32 +08:00

backport-tests-Cover-relaxed-fix-to-CVE-2022-25236.patch

Relax fix to CVE-2022-25236

2022-03-07 17:44:44 +08:00

backport-tests-Protect-against-nested-element-declaration-mod.patch

Fix CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315

2022-02-26 11:55:50 +08:00

backport-xmlparse.c-Fix-reading-uninitialized-variable-404.patch

fix CVE-2013-0340 and fix reading uninitialized variable

2021-07-02 15:07:35 +08:00

backport-xmlwf-Extract-macro-XMLWF_SHIFT_ARGUMENT.patch

fix CVE-2013-0340 and fix reading uninitialized variable

2021-07-02 15:07:35 +08:00

Don-t-add-to-NULL-in-iterator.patch

- quality enhancement synchronization github patch

2020-06-28 10:55:13 +08:00

expat-2.2.9.tar.gz

update to 2.2.9

2020-05-11 16:31:24 +08:00

expat.spec

fix CVE-2024-28757 and CVE-2023-52426

2024-04-03 15:26:54 +08:00

xmlparse.c-Fix-undefined-behavior-for-XML_UNICODE.patch

- quality enhancement synchronization github patch

2020-06-28 10:55:13 +08:00

Description

No description provided

8.7 MiB

Languages

Diff 100%