summary refs log tree commit diff
path: root/gnu/packages/patches/libxslt-CVE-2015-7995.patch
diff options
context:
space:
mode:
authorLeo Famulari <leo@famulari.name>2016-06-07 20:42:16 -0400
committerLeo Famulari <leo@famulari.name>2016-06-12 22:09:39 -0400
commit28b33172c9d67795e3ac641f9230b99905c90664 (patch)
treedbf0ec9115748940549b46fb377281c6aaa3da0d /gnu/packages/patches/libxslt-CVE-2015-7995.patch
parentee86e7e14859533045e1f7727ae731ba6ba72daf (diff)
downloadguix-28b33172c9d67795e3ac641f9230b99905c90664.tar.gz
gnu: libxslt: Update to 1.1.29.
* gnu/packages/patches/libxslt-CVE-2015-7995.patch,
gnu/packages/patches/libxslt-remove-date-timestamps.patch: Delete files.
* gnu/packages/xml.scm: Update to 1.1.29.
[source]: Remove patches.
Diffstat (limited to 'gnu/packages/patches/libxslt-CVE-2015-7995.patch')
-rw-r--r--gnu/packages/patches/libxslt-CVE-2015-7995.patch29
1 files changed, 0 insertions, 29 deletions
diff --git a/gnu/packages/patches/libxslt-CVE-2015-7995.patch b/gnu/packages/patches/libxslt-CVE-2015-7995.patch
deleted file mode 100644
index f291d5b387..0000000000
--- a/gnu/packages/patches/libxslt-CVE-2015-7995.patch
+++ /dev/null
@@ -1,29 +0,0 @@
-From 7ca19df892ca22d9314e95d59ce2abdeff46b617 Mon Sep 17 00:00:00 2001
-From: Daniel Veillard <veillard@redhat.com>
-Date: Thu, 29 Oct 2015 19:33:23 +0800
-Subject: [PATCH] Fix for type confusion in preprocessing attributes
-
-CVE-2015-7995 http://www.openwall.com/lists/oss-security/2015/10/27/10
-We need to check that the parent node is an element before dereferencing
-its namespace
----
- libxslt/preproc.c | 3 ++-
- 1 file changed, 2 insertions(+), 1 deletion(-)
-
-diff --git a/libxslt/preproc.c b/libxslt/preproc.c
-index 0eb80a0..7f69325 100644
---- a/libxslt/preproc.c
-+++ b/libxslt/preproc.c
-@@ -2249,7 +2249,8 @@ xsltStylePreCompute(xsltStylesheetPtr style, xmlNodePtr inst) {
- 	} else if (IS_XSLT_NAME(inst, "attribute")) {
- 	    xmlNodePtr parent = inst->parent;
- 
--	    if ((parent == NULL) || (parent->ns == NULL) ||
-+	    if ((parent == NULL) ||
-+	        (parent->type != XML_ELEMENT_NODE) || (parent->ns == NULL) ||
- 		((parent->ns != inst->ns) &&
- 		 (!xmlStrEqual(parent->ns->href, inst->ns->href))) ||
- 		(!xmlStrEqual(parent->name, BAD_CAST "attribute-set"))) {
--- 
-2.6.3
-