diff options
author | Alexander Kanavin <alexander.kanavin@linux.intel.com> | 2016-06-03 12:14:59 +0300 |
---|---|---|
committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2016-06-04 14:13:35 +0100 |
commit | 9b937870cbe5dfaddb5a5b8e3405c9c03936667f (patch) | |
tree | befca0d5be521b6a26b3ce8a23a3d7ddf3de9c33 /meta | |
parent | eddd0ec9eeecae8af0266784132c0207cf1b9924 (diff) | |
download | poky-9b937870cbe5dfaddb5a5b8e3405c9c03936667f.tar.gz |
libxslt: update to 1.1.29
Drop upstreamed CVE-2015-7995.patch
Rebase pkgconfig.patch
(From OE-Core rev: f83217590d3157c1db502ddb27b94fe1c704185b)
Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta')
-rw-r--r-- | meta/recipes-support/libxslt/libxslt/0001-Use-pkg-config-to-find-gcrypt-and-libxml2.patch (renamed from meta/recipes-support/libxslt/libxslt/pkgconfig.patch) | 42 | ||||
-rw-r--r-- | meta/recipes-support/libxslt/libxslt/CVE-2015-7995.patch | 34 | ||||
-rw-r--r-- | meta/recipes-support/libxslt/libxslt_1.1.29.bb (renamed from meta/recipes-support/libxslt/libxslt_1.1.28.bb) | 8 |
3 files changed, 31 insertions, 53 deletions
diff --git a/meta/recipes-support/libxslt/libxslt/pkgconfig.patch b/meta/recipes-support/libxslt/libxslt/0001-Use-pkg-config-to-find-gcrypt-and-libxml2.patch index 89d14c944d..71867067b6 100644 --- a/meta/recipes-support/libxslt/libxslt/pkgconfig.patch +++ b/meta/recipes-support/libxslt/libxslt/0001-Use-pkg-config-to-find-gcrypt-and-libxml2.patch | |||
@@ -1,14 +1,22 @@ | |||
1 | Use pkg-config to find gcrypt and libxml2. | 1 | From ed71ac9548a2bb6ecd2dc5ad880c604975f872b0 Mon Sep 17 00:00:00 2001 |
2 | From: Alexander Kanavin <alex.kanavin@gmail.com> | ||
3 | Date: Thu, 2 Jun 2016 14:20:04 +0300 | ||
4 | Subject: [PATCH] Use pkg-config to find gcrypt and libxml2. | ||
2 | 5 | ||
3 | Upstream-Status: Pending [libxml2 is upstreamable] | 6 | Upstream-Status: Pending [libxml2 is upstreamable] |
4 | 7 | ||
5 | RP 2014/5/22 | 8 | RP 2014/5/22 |
6 | 9 | ||
7 | Index: libxslt-1.1.28/configure.in | 10 | Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> |
8 | =================================================================== | 11 | --- |
9 | --- libxslt-1.1.28.orig/configure.in 2014-05-13 16:46:02.278474967 +0000 | 12 | configure.in | 70 +++++++++++------------------------------------------------- |
10 | +++ libxslt-1.1.28/configure.in 2014-05-13 16:53:56.510472561 +0000 | 13 | 1 file changed, 12 insertions(+), 58 deletions(-) |
11 | @@ -376,6 +376,8 @@ | 14 | |
15 | diff --git a/configure.in b/configure.in | ||
16 | index 8bdf45a..0b2b312 100644 | ||
17 | --- a/configure.in | ||
18 | +++ b/configure.in | ||
19 | @@ -377,6 +377,8 @@ AC_SUBST(pythondir) | ||
12 | AC_SUBST(PYTHON_SUBDIR) | 20 | AC_SUBST(PYTHON_SUBDIR) |
13 | AC_SUBST(PYTHON_LIBS) | 21 | AC_SUBST(PYTHON_LIBS) |
14 | 22 | ||
@@ -16,12 +24,12 @@ Index: libxslt-1.1.28/configure.in | |||
16 | + | 24 | + |
17 | AC_ARG_WITH(crypto, [ --with-crypto Add crypto support to exslt (on)]) | 25 | AC_ARG_WITH(crypto, [ --with-crypto Add crypto support to exslt (on)]) |
18 | WITH_CRYPTO=0 | 26 | WITH_CRYPTO=0 |
19 | if test "$with_crypto" = "no" ; then | 27 | CRYPTO_TESTDIR= |
20 | @@ -391,26 +393,13 @@ | 28 | @@ -394,27 +396,14 @@ case $host in |
21 | WITH_CRYPTO=1 | 29 | CRYPTO_TESTDIR=crypto |
22 | ;; | 30 | ;; |
23 | *) | 31 | *) |
24 | - AC_PATH_PROG(LIBGCRYPT_CONFIG, libgcrypt-config, no) | 32 | - AC_PATH_TOOL(LIBGCRYPT_CONFIG, libgcrypt-config, no) |
25 | - if test "$LIBGCRYPT_CONFIG" != "no" ; then | 33 | - if test "$LIBGCRYPT_CONFIG" != "no" ; then |
26 | - LIBGCRYPT_VERSION=`$LIBGCRYPT_CONFIG --version` | 34 | - LIBGCRYPT_VERSION=`$LIBGCRYPT_CONFIG --version` |
27 | - if test VERSION_TO_NUMBER(echo $LIBGCRYPT_VERSION) -lt VERSION_TO_NUMBER(echo "1.1.42") | 35 | - if test VERSION_TO_NUMBER(echo $LIBGCRYPT_VERSION) -lt VERSION_TO_NUMBER(echo "1.1.42") |
@@ -37,20 +45,21 @@ Index: libxslt-1.1.28/configure.in | |||
37 | + PKG_CHECK_MODULES(LIBGCRYPT, [libgcrypt >= 1.1.42], [ | 45 | + PKG_CHECK_MODULES(LIBGCRYPT, [libgcrypt >= 1.1.42], [ |
38 | + AC_DEFINE(HAVE_GCRYPT, 1, [Define if gcrypt library is available.]) | 46 | + AC_DEFINE(HAVE_GCRYPT, 1, [Define if gcrypt library is available.]) |
39 | + echo 'Crypto extensions will be available.' | 47 | + echo 'Crypto extensions will be available.' |
40 | WITH_CRYPTO=1 | 48 | WITH_CRYPTO=1 |
49 | CRYPTO_TESTDIR=crypto | ||
41 | - fi | 50 | - fi |
42 | - else | 51 | - else |
43 | - LIBGCRYPT_CFLAGS="" | 52 | - LIBGCRYPT_CFLAGS="" |
44 | - LIBGCRYPT_LIBS="" | 53 | - LIBGCRYPT_LIBS="" |
45 | - echo 'Crypto extensions will not be available. Install libgcrypt and reconfigure to make available.' | 54 | - echo 'Crypto extensions will not be available. Install libgcrypt and reconfigure to make available.' |
46 | - fi | 55 | - fi |
47 | + ], [ | 56 | + ], [ |
48 | + echo 'Crypto extensions will not be available. Install libgcrypt >= 1.1.42 and reconfigure to make available.' | 57 | + echo 'Crypto extensions will not be available. Install libgcrypt >= 1.1.42 and reconfigure to make available.' |
49 | + ]) | 58 | + ]) |
50 | esac | 59 | esac |
51 | fi | 60 | fi |
52 | AC_SUBST(WITH_CRYPTO) | 61 | AC_SUBST(WITH_CRYPTO) |
53 | @@ -471,24 +460,8 @@ | 62 | @@ -476,24 +465,8 @@ dnl original work - Mathieu Lacage 30/03/2000 |
54 | dnl some tweaking - David Härdeman 30/10/2001 | 63 | dnl some tweaking - David Härdeman 30/10/2001 |
55 | dnl | 64 | dnl |
56 | 65 | ||
@@ -75,7 +84,7 @@ Index: libxslt-1.1.28/configure.in | |||
75 | AC_ARG_WITH(libxml-src, | 84 | AC_ARG_WITH(libxml-src, |
76 | [ --with-libxml-src=[DIR] For libxml thats not installed yet (sets all three above)], | 85 | [ --with-libxml-src=[DIR] For libxml thats not installed yet (sets all three above)], |
77 | LIBXML_SRC="$withval" | 86 | LIBXML_SRC="$withval" |
78 | @@ -551,28 +524,9 @@ | 87 | @@ -556,28 +529,9 @@ then |
79 | fi | 88 | fi |
80 | fi | 89 | fi |
81 | 90 | ||
@@ -107,7 +116,7 @@ Index: libxslt-1.1.28/configure.in | |||
107 | 116 | ||
108 | AC_SUBST(CFLAGS) | 117 | AC_SUBST(CFLAGS) |
109 | AC_SUBST(CPPFLAGS) | 118 | AC_SUBST(CPPFLAGS) |
110 | @@ -597,7 +551,7 @@ | 119 | @@ -602,7 +556,7 @@ fi |
111 | 120 | ||
112 | if test "$with_plugins" = "yes" ; then | 121 | if test "$with_plugins" = "yes" ; then |
113 | AC_MSG_CHECKING([libxml2 module support]) | 122 | AC_MSG_CHECKING([libxml2 module support]) |
@@ -116,3 +125,6 @@ Index: libxslt-1.1.28/configure.in | |||
116 | if test "${WITH_MODULES}" = "1"; then | 125 | if test "${WITH_MODULES}" = "1"; then |
117 | AC_MSG_RESULT(yes) | 126 | AC_MSG_RESULT(yes) |
118 | else | 127 | else |
128 | -- | ||
129 | 2.8.1 | ||
130 | |||
diff --git a/meta/recipes-support/libxslt/libxslt/CVE-2015-7995.patch b/meta/recipes-support/libxslt/libxslt/CVE-2015-7995.patch deleted file mode 100644 index f4113efba9..0000000000 --- a/meta/recipes-support/libxslt/libxslt/CVE-2015-7995.patch +++ /dev/null | |||
@@ -1,34 +0,0 @@ | |||
1 | From 7ca19df892ca22d9314e95d59ce2abdeff46b617 Mon Sep 17 00:00:00 2001 | ||
2 | From: Daniel Veillard <veillard@redhat.com> | ||
3 | Date: Thu, 29 Oct 2015 19:33:23 +0800 | ||
4 | Subject: Fix for type confusion in preprocessing attributes | ||
5 | |||
6 | CVE-2015-7995 http://www.openwall.com/lists/oss-security/2015/10/27/10 | ||
7 | We need to check that the parent node is an element before dereferencing | ||
8 | its namespace | ||
9 | |||
10 | Upstream-Status: Backport | ||
11 | CVE: CVE-2015-7995 | ||
12 | |||
13 | https://git.gnome.org/browse/libxslt/commit/?id=7ca19df892ca22d9314e95d59ce2abdeff46b617 | ||
14 | |||
15 | Signed-off-by: Armin Kuster <akuster@mvista.com> | ||
16 | |||
17 | --- | ||
18 | libxslt/preproc.c | 3 ++- | ||
19 | 1 file changed, 2 insertions(+), 1 deletion(-) | ||
20 | |||
21 | Index: libxslt-1.1.28/libxslt/preproc.c | ||
22 | =================================================================== | ||
23 | --- libxslt-1.1.28.orig/libxslt/preproc.c | ||
24 | +++ libxslt-1.1.28/libxslt/preproc.c | ||
25 | @@ -2245,7 +2245,8 @@ xsltStylePreCompute(xsltStylesheetPtr st | ||
26 | } else if (IS_XSLT_NAME(inst, "attribute")) { | ||
27 | xmlNodePtr parent = inst->parent; | ||
28 | |||
29 | - if ((parent == NULL) || (parent->ns == NULL) || | ||
30 | + if ((parent == NULL) || | ||
31 | + (parent->type != XML_ELEMENT_NODE) || (parent->ns == NULL) || | ||
32 | ((parent->ns != inst->ns) && | ||
33 | (!xmlStrEqual(parent->ns->href, inst->ns->href))) || | ||
34 | (!xmlStrEqual(parent->name, BAD_CAST "attribute-set"))) { | ||
diff --git a/meta/recipes-support/libxslt/libxslt_1.1.28.bb b/meta/recipes-support/libxslt/libxslt_1.1.29.bb index 23ac599de5..be747e608d 100644 --- a/meta/recipes-support/libxslt/libxslt_1.1.28.bb +++ b/meta/recipes-support/libxslt/libxslt_1.1.29.bb | |||
@@ -10,11 +10,11 @@ DEPENDS = "libxml2" | |||
10 | 10 | ||
11 | SRC_URI = "ftp://xmlsoft.org/libxslt/libxslt-${PV}.tar.gz \ | 11 | SRC_URI = "ftp://xmlsoft.org/libxslt/libxslt-${PV}.tar.gz \ |
12 | file://pkgconfig_fix.patch \ | 12 | file://pkgconfig_fix.patch \ |
13 | file://pkgconfig.patch \ | 13 | file://0001-Use-pkg-config-to-find-gcrypt-and-libxml2.patch \ |
14 | file://CVE-2015-7995.patch" | 14 | " |
15 | 15 | ||
16 | SRC_URI[md5sum] = "9667bf6f9310b957254fdcf6596600b7" | 16 | SRC_URI[md5sum] = "a129d3c44c022de3b9dcf6d6f288d72e" |
17 | SRC_URI[sha256sum] = "5fc7151a57b89c03d7b825df5a0fae0a8d5f05674c0e7cf2937ecec4d54a028c" | 17 | SRC_URI[sha256sum] = "b5976e3857837e7617b29f2249ebb5eeac34e249208d31f1fbf7a6ba7a4090ce" |
18 | 18 | ||
19 | UPSTREAM_CHECK_REGEX = "libxslt-(?P<pver>\d+(\.\d+)+)\.tar" | 19 | UPSTREAM_CHECK_REGEX = "libxslt-(?P<pver>\d+(\.\d+)+)\.tar" |
20 | 20 | ||