<feed xmlns='http://www.w3.org/2005/Atom'>
<title>linux/poky.git/meta/recipes-core/libxml, branch daisy</title>
<subtitle>Mirror of git.yoctoproject.org/poky</subtitle>
<id>https://git.enea.com/cgit/linux/poky.git/atom?h=daisy</id>
<link rel='self' href='https://git.enea.com/cgit/linux/poky.git/atom?h=daisy'/>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/'/>
<updated>2014-10-09T20:17:32+00:00</updated>
<entry>
<title>libxml2: fix python packaging for nativesdk</title>
<updated>2014-10-09T20:17:32+00:00</updated>
<author>
<name>Paul Eggleton</name>
<email>paul.eggleton@linux.intel.com</email>
</author>
<published>2014-06-05T09:46:17+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=e46461568437206534ba7328742919ec908071b3'/>
<id>urn:sha1:e46461568437206534ba7328742919ec908071b3</id>
<content type='text'>
We enable the python module in nativesdk-libxml2, but the python binary
used is in the native sysroot and thus you get the module installed in
the wrong path. Even with that fixed the python files are still
unpackaged, so create an ${PN}-python package and add them to it. (This
does not affect the libxml target build at all since python is disabled
for that.)

(From OE-Core rev: 360fc811ff843c63f796e958517a5152f07e851d)

Signed-off-by: Paul Eggleton &lt;paul.eggleton@linux.intel.com&gt;
Signed-off-by: Saul Wold &lt;sgw@linux.intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>libxml2: fix CVE-2014-0191</title>
<updated>2014-05-29T12:42:22+00:00</updated>
<author>
<name>Maxin B. John</name>
<email>maxin.john@enea.com</email>
</author>
<published>2014-05-07T12:24:15+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=090cb60d49587b5fdacc13fc85e7b1c656173739'/>
<id>urn:sha1:090cb60d49587b5fdacc13fc85e7b1c656173739</id>
<content type='text'>
It was discovered that libxml2, a library providing support to read,
modify and write XML files, incorrectly performs entity substituton in
the doctype prolog, even if the application using libxml2 disabled any
entity substitution. A remote attacker could provide a
specially-crafted XML file that, when processed, would lead to the
exhaustion of CPU and memory resources or file descriptors.

Reference: https://access.redhat.com/security/cve/CVE-2014-0191

(From OE-Core rev: 674bd59d5e357a4aba18c472ac21712a660a84af)

(From OE-Core rev: 51f674ab1f7dac049060c58f89e84c5d1275a87b)

Signed-off-by: Maxin B. John &lt;maxin.john@enea.com&gt;
Signed-off-by: Saul Wold &lt;sgw@linux.intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>libxml2: remove patch for CVE-2012-2871</title>
<updated>2013-09-17T13:35:17+00:00</updated>
<author>
<name>Ross Burton</name>
<email>ross.burton@intel.com</email>
</author>
<published>2013-09-17T09:22:17+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=06078af4cabefcd3a861821bd2f72b524a99c114'/>
<id>urn:sha1:06078af4cabefcd3a861821bd2f72b524a99c114</id>
<content type='text'>
This CVE patch is actually against Chromium as they ship an internal fork of
libxml2 and breaks ABI.  The real issue has been resolved in libxslt 1.1.27, and
we're shipping 1.1.28.

(From OE-Core rev: e6c60252ab4ba6842f63c6b8a519a85f2ff238fb)

Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>Upstream-Status: Correct capitalization</title>
<updated>2013-07-18T20:23:43+00:00</updated>
<author>
<name>Saul Wold</name>
<email>sgw@linux.intel.com</email>
</author>
<published>2013-07-15T23:44:42+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=8f91b1cfc43cd47b5330af06f2e1bac0c4b52c24'/>
<id>urn:sha1:8f91b1cfc43cd47b5330af06f2e1bac0c4b52c24</id>
<content type='text'>
(From OE-Core rev: 2d5c457bf888771891e9c29e82ec5a5cecace528)

Signed-off-by: Saul Wold &lt;sgw@linux.intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>libxml2: Add ptest</title>
<updated>2013-07-10T08:42:01+00:00</updated>
<author>
<name>Mihaela Sendrea</name>
<email>mihaela.sendrea@enea.com</email>
</author>
<published>2013-07-04T14:23:43+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=4b0ab26071909713e7b21ac4a544e6641139f8cd'/>
<id>urn:sha1:4b0ab26071909713e7b21ac4a544e6641139f8cd</id>
<content type='text'>
Install libxml2 test suite and run it as ptest.

(From OE-Core rev: 22cf4cc85fbe21a53ca4684b0b06b9af20b2ecc5)

Signed-off-by: Mihaela Sendrea &lt;mihaela.sendrea@enea.com&gt;
Signed-off-by: Saul Wold &lt;sgw@linux.intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>libxml2: added python dependency to nativesdk</title>
<updated>2013-06-11T14:38:02+00:00</updated>
<author>
<name>Felipe F. Tonello</name>
<email>eu@felipetonello.com</email>
</author>
<published>2013-06-07T17:18:01+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=407bce925b496808224e50ca37286f3937129042'/>
<id>urn:sha1:407bce925b496808224e50ca37286f3937129042</id>
<content type='text'>
This is necessary since libxml2 has python dependency.

This patch will fix this error:
...
/path/to/build/system/4.7.2/ld: cannot find -lpython2.7
...
ERROR: Task 4152 (virtual:nativesdk:meta/recipes-core/libxml/libxml2_2.9.0.bb, do_compile) failed with exit code '1'

(From OE-Core rev: 4f2b3e3831bdc5707eacdab571ab207d8b09953e)

Signed-off-by: Felipe F. Tonello &lt;eu@felipetonello.com&gt;
Signed-off-by: Saul Wold &lt;sgw@linux.intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>libxml2: Update to 2.9.1</title>
<updated>2013-05-12T08:37:29+00:00</updated>
<author>
<name>Saul Wold</name>
<email>sgw@linux.intel.com</email>
</author>
<published>2013-05-07T20:53:17+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=23e850c332504af128a338fae67cf8957bf20bd1'/>
<id>urn:sha1:23e850c332504af128a338fae67cf8957bf20bd1</id>
<content type='text'>
Copyright date and generalize authors clause

(From OE-Core rev: 3b4fe8c1b681d5e5bb1d1a7c6d68016681667873)

Signed-off-by: Saul Wold &lt;sgw@linux.intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>libxml2 CVE-2012-2871</title>
<updated>2012-12-17T17:24:56+00:00</updated>
<author>
<name>Li Wang</name>
<email>li.wang@windriver.com</email>
</author>
<published>2012-12-13T05:54:21+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=8780c5ddf2916bbd42fc67b79c286652aebb1546'/>
<id>urn:sha1:8780c5ddf2916bbd42fc67b79c286652aebb1546</id>
<content type='text'>
the patch come from:
http://src.chromium.org/viewvc/chrome/trunk/src/third_party/libxml/src \
/include/libxml/tree.h?r1=56276&amp;r2=149930

libxml2 2.9.0-rc1 and earlier, as used in Google Chrome before 21.0.1180.89,
does not properly support a cast of an unspecified variable during handling
of XSL transforms, which allows remote attackers to cause a denial of service
or possibly have unknown other impact via a crafted document, related to the
_xmlNs data structure in include/libxml/tree.h.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-2871

[YOCTO #3580]
[ CQID: WIND00376779 ]
Upstream-Status: Pending

(From OE-Core rev: bc601f96f34ad17a87f599b58e502ec1b2c13fa3)

Signed-off-by: Li Wang &lt;li.wang@windriver.com&gt;
Signed-off-by: Saul Wold &lt;sgw@linux.intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>libxml2: update PR to contain INC_PR to reflect the update of inc file</title>
<updated>2012-12-04T18:02:00+00:00</updated>
<author>
<name>Zhenhua Luo</name>
<email>b19537@freescale.com</email>
</author>
<published>2012-12-04T09:57:11+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=2fc707a55c8d6b3f2dc3e636f8c579531ef3535d'/>
<id>urn:sha1:2fc707a55c8d6b3f2dc3e636f8c579531ef3535d</id>
<content type='text'>
(From OE-Core rev: 4c18e34f113bc46b0619fc8576475694224f8b40)

Signed-off-by: Zhenhua Luo &lt;b19537@freescale.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>libxml2: add --with-fexceptions in configure flags to support exception handling in C++ programs</title>
<updated>2012-12-03T14:47:57+00:00</updated>
<author>
<name>Zhenhua Luo</name>
<email>b19537@freescale.com</email>
</author>
<published>2012-11-30T08:31:57+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=b7a7e6eebac711642944295ad62c996d6a75891c'/>
<id>urn:sha1:b7a7e6eebac711642944295ad62c996d6a75891c</id>
<content type='text'>
Without this flag, the library has a problem with C++ programs using exception handling.

(From OE-Core rev: ff5552a8432298c32aec2ace72656b0d7059dad3)

Signed-off-by: Zhenhua Luo &lt;b19537@freescale.com&gt;
Signed-off-by: Saul Wold &lt;sgw@linux.intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
</feed>
