buildroot/package/libcroco, branch 2017.02.2

libcroco: add upstream security fixes

2017-04-28T12:27:01+00:00

These have been added to upstream git after 0.6.12 was released. CVE-2017-7960 - The cr_input_new_from_uri function in cr-input.c in libcroco 0.6.11 and 0.6.12 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted CSS file. CVE-2017-7961 - The cr_tknzr_parse_rgb function in cr-tknzr.c in libcroco 0.6.11 and 0.6.12 has an "outside the range of representable values of type long" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted CSS file. For more details, see: https://blogs.gentoo.org/ago/2017/04/17/libcroco-heap-overflow-and-undefined-behavior/ Signed-off-by: Peter Korsgaard (cherry picked from commit 52bfb4b1ce25d870f9bab72d285f326ec7d0ad77) Signed-off-by: Peter Korsgaard

libcroco: add explicit dependencies for host variant

2016-07-03T07:07:18+00:00

Signed-off-by: Julien Floret Signed-off-by: Thomas Petazzoni

libcroco: fix typo in license file

2016-01-20T16:27:25+00:00

Otherwise it won't be saved. Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard

libcroco: bump to version 0.6.11

2015-12-18T09:06:47+00:00

Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni

libcroco: new package

2015-12-15T21:36:24+00:00

It's required for the librsvg upgrade (ditto host variant). Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni