buildroot/package/expat, branch 2016.08

expat: add explicit dependencies for host variant

2016-07-03T06:48:05+00:00

Signed-off-by: Julien Floret Signed-off-by: Thomas Petazzoni

expat: security bump to version 2.2.0

2016-06-23T19:11:14+00:00

Fixes: CVE-2016-4472 - Improve insufficient fix to CVE-2015-1283 / CVE-2015-2716 introduced with Expat 2.1.1 CVE-2016-5300 - Use more entropy for hash initialization than the original fix to CVE-2012-0876 CVE-2012-6702 - Resolve troublesome internal call to srand that was introduced with Expat 2.1.0 when addressing CVE-2012-0876 Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard

expat: add fix for CVE-2016-0718

2016-05-22T21:06:41+00:00

Fixes: CVE-2016-0718 - The Expat XML parser mishandles certain kinds of malformed input documents, resulting in buffer overflows during processing and error reporting. The overflows can manifest as a segmentation fault or as memory corruption during a parse operation. The bugs allow for a denial of service attack in many applications by an unauthenticated attacker, and could conceivably result in remote code execution. Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni

expat: bump to version 2.1.1

2016-03-14T07:48:43+00:00

Drop 0001-fix-CVE-2015-1283.patch since it's upstream. Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard

expat: add security patch for CVE-2015-1283

2015-09-01T19:56:34+00:00

Fixes: CVE-2015-1283 - Multiple integer overflows in the XML_GetBuffer function. Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard

package: add hashes for SourceForge-hosted packages

2014-12-28T21:21:16+00:00

Since SourceForge sometimes serves us faulty tarballs, we can tons of autobuild failures: http://autobuild.buildroot.org/results/9fb/9fba5bf086a4e7a29e5f7156ec43847db7aacfc4/ http://autobuild.buildroot.org/results/6c8/6c837b244c45ac3b3a887734a371cd6d226cf216/ ... Fix that by adding hash files for all SourceForge-hosted packages (thos etht did not already have it). We normally prefer to use hashes published by upstream, but hunting them all one by one is a tedious task, so those hashes were all locally computed with a script that searched for SF-hosted packages, downloades the associated tarball, computed the hash, and stored it in the corresponding .hash file. Also, SF publishes sha1 hashes, while I used the stronger sha256, since sha1 is now considered to be relatively weak. Signed-off-by: "Yann E. MORIN" Cc: Peter Korsgaard Cc: Thomas Petazzoni Cc: Maxime Hadjinlian Cc: Richard Braun Cc: Nathaniel Roach Signed-off-by: Thomas Petazzoni

packages: rename FOO_INSTALL_STAGING_OPT into FOO_INSTALL_STAGING_OPTS

2014-10-04T16:49:36+00:00

To be consistent with the recent change of FOO_MAKE_OPT into FOO_MAKE_OPTS, make the same change for FOO_INSTALL_STAGING_OPT. Sed command used: find * -type f | xargs sed -i 's#_INSTALL_STAGING_OPT\>#&S#g' Signed-off-by: Thomas De Schampheleire Reviewed-by: "Yann E. MORIN" Signed-off-by: Thomas Petazzoni

packages: rename FOO_INSTALL_TARGET_OPT into FOO_INSTALL_TARGET_OPTS

2014-10-04T16:48:33+00:00

To be consistent with the recent change of FOO_MAKE_OPT into FOO_MAKE_OPTS, make the same change for FOO_INSTALL_TARGET_OPT. Sed command used: find * -type f | xargs sed -i 's#_INSTALL_TARGET_OPT\>#&S#g' Signed-off-by: Thomas De Schampheleire Reviewed-by: "Yann E. MORIN" Signed-off-by: Thomas Petazzoni

trivial: add space in 'bool"package"' construct in Config.in

2013-07-19T21:44:09+00:00

In early buildroot, it apparently was customary to have following style in Config.in files: bool"expat" Nowadays, only two packages remain with this style: diffutils and expat. This trivial patch lines them up with the style: bool "expat" Signed-off-by: Thomas De Schampheleire Signed-off-by: Peter Korsgaard

Normalize separator size to 80

2013-06-06T20:30:24+00:00

Signed-off-by: Alexandre Belloni Signed-off-by: Peter Korsgaard