<feed xmlns='http://www.w3.org/2005/Atom'>
<title>linux/poky.git/meta/recipes-core/expat, branch 2.3_M2</title>
<subtitle>Mirror of git.yoctoproject.org/poky</subtitle>
<id>https://git.enea.com/cgit/linux/poky.git/atom?h=2.3_M2</id>
<link rel='self' href='https://git.enea.com/cgit/linux/poky.git/atom?h=2.3_M2'/>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/'/>
<updated>2017-01-28T23:32:16+00:00</updated>
<entry>
<title>gzip/pigz/expat/image: Simplify gzip-native/pigz-native</title>
<updated>2017-01-28T23:32:16+00:00</updated>
<author>
<name>Richard Purdie</name>
<email>richard.purdie@linuxfoundation.org</email>
</author>
<published>2017-01-27T12:34:40+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=ab0f46400c113c0d893be872727a67739d5e794d'/>
<id>urn:sha1:ab0f46400c113c0d893be872727a67739d5e794d</id>
<content type='text'>
With recipe specific sysroots, the gzip-replacement-native dance/class
is obsolete, simplify the code accordingly.

(From OE-Core rev: 39865fdf3698a130f792d41853f9c9ca1901e335)

Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>expat: Upgrade 2.1.1 -&gt; 2.2.0</title>
<updated>2016-07-20T09:28:48+00:00</updated>
<author>
<name>Jussi Kukkonen</name>
<email>jussi.kukkonen@intel.com</email>
</author>
<published>2016-07-13T12:54:03+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=b3e40449e28485d682c40afd297cb2d8bcd4c4ac'/>
<id>urn:sha1:b3e40449e28485d682c40afd297cb2d8bcd4c4ac</id>
<content type='text'>
Remove a patch that is no longer needed.
License checksum changes because of a copyright year change.

(From OE-Core rev: 911510181ac933d5d1fc7d88890eb67d5d338acf)

Signed-off-by: Jussi Kukkonen &lt;jussi.kukkonen@intel.com&gt;
Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>expat: CVE-2016-0718</title>
<updated>2016-06-23T13:26:14+00:00</updated>
<author>
<name>Yi Zhao</name>
<email>yi.zhao@windriver.com</email>
</author>
<published>2016-06-17T03:20:58+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=a02911390cc09d9f2ac15142982142c459a143d5'/>
<id>urn:sha1:a02911390cc09d9f2ac15142982142c459a143d5</id>
<content type='text'>
Fix CVE-2016-0718: expat XML parser crashes on malformed input

External References:
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-0718
https://bugzilla.redhat.com/show_bug.cgi?id=1296102
https://bugzilla.suse.com/show_bug.cgi?id=979441

Patch from:
https://bugzilla.redhat.com/show_bug.cgi?id=1296102

(From OE-Core rev: 6589de727ba9c9901fdd53d31bd88ad0f17f3905)

Signed-off-by: Yi Zhao &lt;yi.zhao@windriver.com&gt;
Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>expat: Upgrade 2.1.0 -&gt; 2.1.1</title>
<updated>2016-05-17T13:43:28+00:00</updated>
<author>
<name>Jussi Kukkonen</name>
<email>jussi.kukkonen@intel.com</email>
</author>
<published>2016-05-16T13:22:46+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=d4099e1042a71993d0368b4b846947b7a06ea742'/>
<id>urn:sha1:d4099e1042a71993d0368b4b846947b7a06ea742</id>
<content type='text'>
* Remove backported CVE patch
* Update autotools patch
* Update SRC_URI to match current archive type

(From OE-Core rev: 8a5a90aa6a7f398803f432038d56cdfea1651aaa)

Signed-off-by: Jussi Kukkonen &lt;jussi.kukkonen@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>expat: CVE-2015-1283</title>
<updated>2016-01-07T13:40:16+00:00</updated>
<author>
<name>Zhixiong Chi</name>
<email>Zhixiong.Chi@windriver.com</email>
</author>
<published>2015-12-24T09:29:59+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=30c06a412e3a85eb2770f6aeb6f9b3ce632ca19d'/>
<id>urn:sha1:30c06a412e3a85eb2770f6aeb6f9b3ce632ca19d</id>
<content type='text'>
Add CVE-2015-1283 patch for fixing integer overflow bug in expat.

Details are at below link:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1283

Patch comes from:
https://hg.mozilla.org/releases/mozilla-esr31/rev/2f3e78643f5c
https://codereview.chromium.org/1224303003

(From OE-Core rev: c89c5383e304a52b604a3672ac93fd88b5eb8b41)

Signed-off-by: Zhixiong Chi &lt;Zhixiong.Chi@windriver.com&gt;
Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>recipes: convert remaining SUMMARY/DESCRIPTION cosmetic issues (part 2)</title>
<updated>2014-02-20T14:28:13+00:00</updated>
<author>
<name>Matthieu Crapet</name>
<email>Matthieu.Crapet@ingenico.com</email>
</author>
<published>2014-02-19T15:13:54+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=b88321ac7879686d66eae3f48bec186bfc75c325'/>
<id>urn:sha1:b88321ac7879686d66eae3f48bec186bfc75c325</id>
<content type='text'>
Completes previous commit b5292d4115a4555a66b5e35acdc67dd71fb8577f.
Updates SUMMARY[doc] (meta/conf/documentation.conf).

Changes:
- rename DESCRIPTION with length &lt; 80 to (non present tag) SUMMARY
- drop final point character at the end of SUMMARY string
- remove trailing whitespace of SUMMARY line

Note: don't bump PR

(From OE-Core rev: ad17dfd31a2b97b3e610a0ea0889f5ecb2a63b97)

Signed-off-by: Matthieu Crapet &lt;Matthieu.Crapet@ingenico.com&gt;
Signed-off-by: Saul Wold &lt;sgw@linux.intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>recipes: Remove PR = r0 from all recipes</title>
<updated>2013-10-30T14:52:04+00:00</updated>
<author>
<name>Richard Purdie</name>
<email>richard.purdie@linuxfoundation.org</email>
</author>
<published>2013-10-29T11:14:13+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=5e427966756700e596740778f16b96d03e8568c8'/>
<id>urn:sha1:5e427966756700e596740778f16b96d03e8568c8</id>
<content type='text'>
Remove all PR = "r0" from all .bb files in oe-core. This was done
with the command sed -e '/^PR.*=.*r0\"/d' recipes*/*/*.bb -i

We've switching to the PR server, PR bumps are no longer needed and
this saves people either accidentally bumping them or forgetting to
remove the lines (r0 is the default anyway).

(From OE-Core rev: 58ae94f1b06d0e6234413dbf9869bde85f154c85)

Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>expat: update to upstream version 2.1.0</title>
<updated>2012-05-16T06:34:28+00:00</updated>
<author>
<name>Marko Lindqvist</name>
<email>cazfi74@gmail.com</email>
</author>
<published>2012-05-10T21:43:51+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=120e29504caa88ce21a8a75a7cec8a2cb857e61b'/>
<id>urn:sha1:120e29504caa88ce21a8a75a7cec8a2cb857e61b</id>
<content type='text'>
(From OE-Core rev: 445f2721f92bae4a9ae86e13f14775e924dc7f84)

Signed-off-by: Marko Lindqvist &lt;cazfi74@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>gzip/pigz-native: Install into a prefix to avoid clashing with system binaries</title>
<updated>2012-03-21T15:33:07+00:00</updated>
<author>
<name>Richard Purdie</name>
<email>richard.purdie@linuxfoundation.org</email>
</author>
<published>2012-03-21T11:26:09+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=40f95685e6a3b4359d2ab2fea1418fe5e4bd0aa1'/>
<id>urn:sha1:40f95685e6a3b4359d2ab2fea1418fe5e4bd0aa1</id>
<content type='text'>
Due to the system providing a copy of gzip, we face some issues when we
'shadow' that copy with our own leading to a varient of race type bugs,
and issues for example if a dependency such as libz is missing but the
binary is still present. We usually rely on our dependency logic to protect
us from this but for gzip, we don't have this protection since its not listed
by all its users (and doing so would be impractical).

This patch installed pigz and gzip into their own directory which we only
add to PATH when we explictly want these binaries in much the same way we do
with perl-native. This means dependency logic is correct when we use the binary
and everything should work well.

The patch adds an explict dependency into image.bbclass since the accelerated
speed of compression is most appreciated at rootfs time.

(From OE-Core rev: 7a98c0ef28822ae1fcee45b14db3edcfd4c7ad8f)

Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>libxml-parser-perl, libxml-simple-perl, expat, sgmlspl-native, git: bump PR to rebuild after perl upgrade</title>
<updated>2011-10-25T07:36:16+00:00</updated>
<author>
<name>Martin Jansa</name>
<email>martin.jansa@gmail.com</email>
</author>
<published>2011-10-25T07:31:35+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=fc94f925e848684244a38dcffe15cb1192dfbed8'/>
<id>urn:sha1:fc94f925e848684244a38dcffe15cb1192dfbed8</id>
<content type='text'>
* this isn't probably complete list.. just what failed here

(From OE-Core rev: f586aaa8d00361a9597a546d665077c75cf4d520)

Signed-off-by: Martin Jansa &lt;Martin.Jansa@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
</feed>
