linux/poky.git/meta/recipes-support/libxslt, branch morty

libxslt: Fix CVE-2017-5029

2017-08-29T15:50:53+00:00

Backport upstream patch to fix CVE-2017-5029. (From OE-Core rev: 5266e74c990df1cf965d162d9695eb5a698883ae) (From OE-Core rev: 172f76a1a43921d92a385d6d123dffaf27eb368f) (From OE-Core rev: 25b87ebfce7216b18e85b6bc5fc7f20bcf4cf31d) Signed-off-by: Fan Xin Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

libxslt: Add build fix (with ld-is-gold)

2017-08-29T15:50:53+00:00

Libraries must be linked with "-lm", otherwise gold fails to link binaries with those libraries. (From OE-Core rev: 9175164380b50852a21a05d4e81294394c5486f4) (From OE-Core rev: 3bd47a7db76cead77d0aa2b3b29f8513469dbe60) Signed-off-by: Jussi Kukkonen Signed-off-by: Ross Burton Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

libxslt: update to 1.1.29

2016-06-04T13:13:35+00:00

Drop upstreamed CVE-2015-7995.patch Rebase pkgconfig.patch (From OE-Core rev: f83217590d3157c1db502ddb27b94fe1c704185b) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

Add "CVE:" tag to current patches in OE-core

2016-01-11T23:26:32+00:00

The currnet patches in OE-core doesn't have the "CVE:" tag, now part of the policy of the patches. This is patch add this tag to several patches. There might be patches that I miss; the tag can be added in the future. (From OE-Core rev: 065ebeb3e15311d0d45385e15bf557b1c95b1669) Signed-off-by: Mariano Lopez Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

libxslt: use proper SRC_URI

2015-12-16T12:12:16+00:00

Remove extra / from SRC_URI (From OE-Core rev: 6bad80d2f7630aa013c986fee9751a888cacef47) Signed-off-by: Maxin B. John Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

package_regex.inc: split the rest of the entries to their recipes

2015-12-08T10:20:52+00:00

(From OE-Core rev: 73e2555cc7d529a93362b3fcfea3fbc7a4c60ca1) Signed-off-by: Alexander Kanavin Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

libxslt: CVE-2015-7995

2015-11-16T11:39:35+00:00

This is a is being give a High rating so please consider it for all 1.1.28 versions. A type confusion error within the libxslt "xsltStylePreCompute()" function in preproc.c can lead to a DoS. Confirmed in version 1.1.28, other versions may also be affected. (From OE-Core rev: 0f89bbab6588a1171259801fa879516740030acb) Signed-off-by: Armin Kuster Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

boost/libxslt: Enable nativesdk to unbreak

2015-05-03T10:43:50+00:00

When run , the make will be broken because nativesdk-boost and nativesdk-libxslt don't exist. nativesdk-boost is depended by nativesdk-curlpp. nativesdk-libxslt is depended by nativesdk-python-lxml. In condition that meta-openembedded is compiled in. Add nativesdk building for boost and libxslt. (From OE-Core rev: 1bb2c58ef7de3a1d52b4a29ca3cc230defe6c21d) Signed-off-by: Li Zhou Signed-off-by: Richard Purdie

libxslt: create wrapper to avoid host system referencing

2014-12-05T18:01:05+00:00

By default, xsltproc from libxslt would use configuration files under /etc/xml. To avoid host system contamination, we create a wrapper for this command to make it use configuration files in the sysroot directory. (From OE-Core rev: f14ecfa98baf98edf47b6820d3b0b3af376c5623) Signed-off-by: Chen Qi Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

binconfig-disabled: Add class and use

2014-06-16T14:31:40+00:00

This adds a binconfig-disabled class which can be used by recipes where a -config file is installed but we wish to disable it and just rely on the .pc files instead. Rather than simply deleting it, we make the script "exit 1" so that it can be found in PATH and raise a build error rather than something silently falling back to the build system for example. Rather than randomly finding -config files, this adds in the specification of a list of binconfig scripts which is more deterministic and maintainable moving forward. This patch converts various users in OE-Core to use this, a world build of OE-Core tests out ok with this change. There will likely be issues in other layers however, hence this being a RFT. (From OE-Core rev: 5870bd272b0b077d0826fb900b251884c1c05061) Signed-off-by: Richard Purdie