1 Commits

Author SHA1 Message Date
Divya Chellam
e63738d6b1 libxml2: fix CVE-2025-49795
A NULL pointer dereference vulnerability was found in libxml2 when
processing XPath XML expressions. This flaw allows an attacker to
craft a malicious XML input to libxml2, leading to a denial of service.

Pick commit from 2.13 branch

Reference:
https://security-tracker.debian.org/tracker/CVE-2025-49795

Upstream-patch:
62048278a4

(From OE-Core rev: 9f17e0911eeb49e007de8ee3e50d9f3f38e08a26)

Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-21 09:18:00 -07:00