87 Commits

Author SHA1 Message Date
Linux_zhang
a8307d1b64 fix CVE-2022-49043 2025-02-11 15:59:09 +08:00
openeuler-ci-bot
7513645901
!253 【轻量级 PR】:fix bad date in changelog
From: @zhangshaoning_uniontech 
Reviewed-by: @dillon_chen 
Signed-off-by: @dillon_chen
2024-06-17 09:43:36 +00:00
张少宁
59483f13ae
fix bad date in changelog
Signed-off-by: 张少宁 <zhangshaoning@uniontech.com>
2024-06-17 05:37:47 +00:00
openeuler-ci-bot
7a071580f0
!239 fix CVE-2024-34459
From: @cenhuilin 
Reviewed-by: @dillon_chen 
Signed-off-by: @dillon_chen
2024-05-16 09:09:59 +00:00
cenhuilin
e61c08dc4b fix CVE-2024-34459 2024-05-14 10:42:26 +08:00
openeuler-ci-bot
3c53f29772
!230 fix CVE-2022-2309
From: @zhuofeng6 
Reviewed-by: @hubin95 
Signed-off-by: @hubin95
2024-03-26 07:10:46 +00:00
zhuofeng
241736ed93 fix CVE-2022-2309 2024-03-26 14:29:45 +08:00
openeuler-ci-bot
a9888febbe
!223 fix CVE-2024-25062
From: @willwolf 
Reviewed-by: @hubin95 
Signed-off-by: @hubin95
2024-02-20 01:58:58 +00:00
willwolf
7626453fca fix CVE-2024-25062
Signed-off-by: willwolf <hehuazhen@huawei.com>
2024-02-19 15:04:44 +08:00
openeuler-ci-bot
a5b4b3b355
!212 [sync] PR-211: fix CVE-2023-45322
From: @openeuler-sync-bot 
Reviewed-by: @gaoruoshu 
Signed-off-by: @gaoruoshu
2023-10-30 03:05:33 +00:00
willwolf
44a51b57b0 fix CVE-2023-45322
Signed-off-by: willwolf <hehuazhen@huawei.com>
(cherry picked from commit f182b37f3087868dd30322b5ccc3a82e2f00e78a)
2023-10-30 10:18:50 +08:00
openeuler-ci-bot
dcc268d2ae
!200 parser: Fix old SAX1 parser with custom callbacks
From: @li_ning_jie 
Reviewed-by: @dillon_chen 
Signed-off-by: @dillon_chen
2023-09-28 08:28:24 +00:00
liningjie
d5bf2ad303 parser: Fix old SAX1 parser with custom callbacks 2023-09-26 14:17:53 +08:00
openeuler-ci-bot
9b92f64e6e
!173 fix CVE-2023-28484 CVE-2023-29469
From: @BruceGW 
Reviewed-by: @hubin95 
Signed-off-by: @hubin95
2023-04-23 03:54:56 +00:00
BruceGW
af8676cc97 fix CVE-2023-28484 CVE-2023-29469 2023-04-23 11:51:06 +08:00
openeuler-ci-bot
ea24272e05
!164 backport upstream patches
From: @fly_fzc 
Reviewed-by: @ziyangc, @xiezhipeng1 
Signed-off-by: @xiezhipeng1
2022-11-21 06:35:03 +00:00
fly_fzc
0128c8e2b0 backport upstream patches 2022-11-21 10:42:39 +08:00
openeuler-ci-bot
6f64859169
!160 fix CVE-2022-40303 CVE-2022-40304
From: @fly_fzc 
Reviewed-by: @ziyangc, @hubin95 
Signed-off-by: @hubin95
2022-11-08 12:49:27 +00:00
fly_fzc
8c40086f01 fix CVE-2022-40303 CVE-2022-40304 2022-11-08 17:14:14 +08:00
openeuler-ci-bot
08c8f7924c
!154 remove recommend in spec
From: @hubin95 
Reviewed-by: @xiezhipeng1 
Signed-off-by: @xiezhipeng1
2022-09-15 01:31:31 +00:00
hubin
f625f9fc9f remove recommend in spec
Signed-off-by: hubin <hubin73@huawei.com>
2022-09-14 17:40:17 +08:00
openeuler-ci-bot
98b0a5100d
!151 Fix Obsoletes in spec
From: @fly_fzc 
Reviewed-by: @ziyangc, @xiezhipeng1 
Signed-off-by: @xiezhipeng1
2022-09-13 03:17:46 +00:00
fly_fzc
3d54850386 Fix Obsoletes in spec 2022-09-13 09:21:35 +08:00
openeuler-ci-bot
ae40636549
!146 Fix CVE-2016-3709
From: @fly_fzc 
Reviewed-by: @ziyangc, @xiezhipeng1 
Signed-off-by: @xiezhipeng1
2022-08-08 08:28:36 +00:00
fly_fzc
a22899ccc7 Fix CVE-2016-3709 2022-08-08 11:14:03 +08:00
openeuler-ci-bot
5386ff1a76
!137 Fix memory leaks in xmlACatalogAdd when xmlHashAddEntry failed
From: @fly_fzc 
Reviewed-by: @xiezhipeng1 
Signed-off-by: @xiezhipeng1
2022-06-24 07:22:03 +00:00
fuanan
2cb02bdd35 Fix memory leaks in xmlACatalogAdd when xmlHashAddEntry failed 2022-06-24 10:07:40 +08:00
openeuler-ci-bot
477a8f01fc
!130 Fix memory leaks for xmlACatalogAdd
From: @fly_fzc 
Reviewed-by: @licihua 
Signed-off-by: @licihua
2022-06-16 13:29:40 +00:00
fuanan
54189c84f0 Fix memory leaks for xmlACatalogAdd 2022-06-16 20:06:35 +08:00
openeuler-ci-bot
b0aeae3e5e
!127 fix CVE-2022-29824
From: @fly_fzc 
Reviewed-by: @xiezhipeng1 
Signed-off-by: @xiezhipeng1
2022-05-09 02:50:25 +00:00
fuanan
0812abf4b4 fix CVE-2022-29824 2022-05-09 09:51:59 +08:00
openeuler-ci-bot
78068ee6b5
!119 fix CVE-2022-23308
From: @fly_fzc 
Reviewed-by: @xiezhipeng1 
Signed-off-by: @xiezhipeng1
2022-03-14 09:08:10 +00:00
fuanan
dd365e186a fix CVE-2022-23308 2022-03-09 11:54:11 +08:00
openeuler-ci-bot
6d825831b1
!112 fix valgrind errors in xmlParseBalancedChunkMemoryRecover
From: @fly_fzc 
Reviewed-by: @xiezhipeng1 
Signed-off-by: @xiezhipeng1
2022-03-09 03:25:37 +00:00
fuanan
3270cc329a fix valgrind errors in xmlParseBalancedChunkMemoryRecover 2022-02-26 16:51:43 +08:00
openeuler-ci-bot
4eb164c040
!107 use upstream patch refix heap-use-after-free in xmlAddNextSibling and xmlAddChild
From: @fly_fzc 
Reviewed-by: @xiezhipeng1 
Signed-off-by: @xiezhipeng1
2022-02-12 03:32:13 +00:00
fuanan
4b9d60a380 use upstream patch refix heap-use-after-free in xmlAddNextSibling and xmlAddChild 2022-02-12 11:16:28 +08:00
openeuler-ci-bot
3ffa9ce323 !95 backport upstream patches
From: @panxh_purple
Reviewed-by: @xiezhipeng1
Signed-off-by: @xiezhipeng1
2021-12-02 08:53:20 +00:00
panxiaohe
0e9039296a backport upstream patches 2021-12-02 14:41:13 +08:00
openeuler-ci-bot
c9ea9ded2f !93 revert commit 382544
From: @henry-fan
Reviewed-by: @xiezhipeng1
Signed-off-by: @xiezhipeng1
2021-11-27 08:14:35 +00:00
Wentao Fan
16413ab2cb revert commit 382544
Signed-off-by: Wentao Fan <fanwentao@huawei.com>
2021-11-27 15:53:43 +08:00
openeuler-ci-bot
d5a0113c09 !90 fix issues about SEGV, memleak, null deref, overflow, etc.
From: @panxh_purple
Reviewed-by: @xiezhipeng1
Signed-off-by: @xiezhipeng1
2021-11-11 12:41:45 +00:00
panxiaohe
a3d08d8657 fix issues about SEGV, memleak, overflow, etc. 2021-11-11 20:19:02 +08:00
openeuler-ci-bot
cf302c5c47 !87 Fix heap-use-after-free in xmlAddNextSibling and xmlAddChild
From: @panxh_purple
Reviewed-by: @xiezhipeng1
Signed-off-by: @xiezhipeng1
2021-11-11 11:35:41 +00:00
panxiaohe
ed681a2b71 Fix heap-use-after-free in xmlAddNextSibling and xmlAddChild 2021-11-11 17:12:29 +08:00
openeuler-ci-bot
da7b539a6c !80 fix memleaks in xmlXIncludeProcessFlags
From: @panxh_purple
Reviewed-by: @xiezhipeng1
Signed-off-by: @xiezhipeng1
2021-11-09 11:42:46 +00:00
panxiaohe
579dae2d55 fix memleaks in xmlXIncludeProcessFlags 2021-11-09 16:59:12 +08:00
openeuler-ci-bot
4e315f2552 !75 [sync] PR-73: 修复FUZZ发现问题Null-deref in xmlSchemaGetComponentTargetNs
From: @openeuler-sync-bot
Reviewed-by: @xiezhipeng1
Signed-off-by: @xiezhipeng1
2021-10-30 08:48:28 +00:00
huangduirong
deb136681a fix null deref in xmlSchemaGetComponentTargetNs
(cherry picked from commit cea8343440f6d8e76a281c4bf2818a1fcd9a5231)
2021-10-30 16:06:41 +08:00
openeuler-ci-bot
8666e65196 !69 fix fuzz issues
From: @panxh_purple
Reviewed-by: @xiezhipeng1
Signed-off-by: @xiezhipeng1
2021-10-25 01:03:39 +00:00