1 Commits

Author SHA1 Message Date
Divya Chellam
58aa4f3e1b libxml2: fix CVE-2025-6021
A flaw was found in libxml2's xmlBuildQName function, where integer
overflows in buffer size calculations can lead to a stack-based buffer
overflow. This issue can result in memory corruption or a denial
of service when processing crafted input.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-6021

Upstream-patch:
17d950ae33

(From OE-Core rev: 99a239d9146c5ecf158cd9db7823ec1aff45fd48)

Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-07-21 09:17:59 -07:00