linux/poky.git/meta/recipes-core/libxml, branch warrior

libxml2: Fix CVE-2019-20388

2020-04-08T23:07:12+00:00

see: https://gitlab.gnome.org/GNOME/libxml2/merge_requests/68 (From OE-Core rev: 6c4477563bc418ec215671d6960e6e8d6bdd074b) Signed-off-by: Lee Chee Yang Signed-off-by: Richard Purdie Signed-off-by: Adrian Bunk Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

libxml2: fix CVE-2020-7595

2020-04-08T23:07:12+00:00

(From OE-Core rev: 4a031a9b14c36d7aa4599933a4f0769b83511325) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie Signed-off-by: Adrian Bunk Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

libxml2: Fix CVE-2019-19956

2020-02-21T09:44:05+00:00

(From OE-Core rev: 2be6ab4249c4f49c9ffcd9bb8fea964c8c5d449c) Signed-off-by: Rahul Chauhan Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

default-distrovars: Drop DISTRO_FEATURES_LIBC

2019-02-28T13:21:54+00:00

After eglibc was merged into glibc, Kconfig support was also dropped so these libc features therefore are not effective anymore and can be removed (From OE-Core rev: c62b1cc06613a4cdddf53290e6203559f43fc62d) Signed-off-by: Khem Raj Signed-off-by: Richard Purdie

packages: respect PACKAGE_NO_GCONV

2018-12-05T22:30:19+00:00

PACKAGE_NO_GCONV is set in libc-package.bbclass if not all of 'libc-charsets libc-locale-code libc-locales' included in DISTRO_FEATURES. And then no packages glibc-gconv-* glibc-charmap-* and glibc-localedata-* is created. Update recipes and conf file which depend on these packages to check required distro features. (From OE-Core rev: 58446992de0f16a345f1f55b66d0d34d31dc341b) Signed-off-by: Kai Kang Signed-off-by: Richard Purdie

libxml2: Make it compatible with externalsrc

2018-10-10T16:59:09+00:00

Fetch the test tar ball to a subdirectory in ${S}. This avoids the following error after having done `devtool modify libxml2`: | DEBUG: Executing shell function do_configure | find: ‘.../build/tmp/work/mips32r2el-nf-poky-linux/libxml2/2.9.4-r0/xmlconf/’: No such file or directory (From OE-Core rev: d0d55add6cb01252a46d829ade75666920b676fa) Signed-off-by: Peter Kjellerstedt Signed-off-by: Richard Purdie

libxml2: move xmlcatalog and xmllint back into libxml2-utils

2018-10-10T11:47:35+00:00

Packaging of libxml2-utils has been broken since 2011: http://git.openembedded.org/openembedded-core/commit/?id=76052861cc95fd4ad4c4b9eb6ce4cd1065ad4dc9 (From OE-Core rev: 6f49e72dbb36d0a42993e7c788c17ff03571ece7) Signed-off-by: Andre McCurdy Signed-off-by: Richard Purdie

libxml2: refresh CVE-2017-8872

2018-10-04T22:00:55+00:00

The patch associated with the CVE-2017-8872 report was never merged into libxml2, but a slightly different patch for the same problem was. Cherry-pick that as a backport, which also fixes the failing test suite. (From OE-Core rev: 512869aea6dde1bb2374601f7c4d793ac9edaa42) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

libxml2: fix CVE-2018-9251 and CVE-2018-14567

2018-08-20T16:38:23+00:00

(From OE-Core rev: b91b276696fb5e0b633b73be408bd750ac4e28ce) Signed-off-by: Hongxu Jia Signed-off-by: Richard Purdie

libxml2: Fix CVE-2018-14404

2018-08-14T10:36:31+00:00

Fix nullptr deref with XPath logic ops If the XPath stack is corrupted, for example by a misbehaving extension function, the "and" and "or" XPath operators could dereference NULL pointers. Check that the XPath stack isn't empty and optimize the logic operators slightly. CVE: CVE-2018-14404 (From OE-Core rev: 69315177732a1d260a3315fe8c4c4c44653ae0c8) Signed-off-by: Andrej Valek Signed-off-by: Richard Purdie