buildroot/package/libxml2/libxml2.mk, branch 2016.08

libxml2: fix m68k uclinux compile

2016-08-10T22:02:03+00:00

The GCC manual suggest when getting: relocation truncated to fit: R_68K_GOT16O foobar to use -mxgot. Fixes: http://autobuild.buildroot.net/results/8a4e26bb1c0c64759e3914eced0a36baa0967f0b/ Signed-off-by: Waldemar Brodkorb Signed-off-by: Thomas Petazzoni

libxml2: security bump to version 2.9.4

2016-05-23T18:09:38+00:00

Fixes a bunch of security issues including: CVE-2016-1762: Heap-based buffer overread in xmlNextChar CVE-2016-1834: heap-buffer-overflow in xmlStrncat CVE-2016-3705: Missing increments of recursion depth counter to XML parser A few more security fixes are listed in the release announcement at https://mail.gnome.org/archives/xml/2016-May/msg00023.html. Also fixes: http://autobuild.buildroot.net/results/6db/6db405a097b192876c0b1b8d59051d614563c617/ http://autobuild.buildroot.net/results/62a/62addf4abd2a0df8222a81a83c16b2b9a61c9481/ http://autobuild.buildroot.net/results/204/20402690ad05d10d456a219da5252a38badf1da0/ Signed-off-by: Baruch Siach Signed-off-by: Thomas Petazzoni

package/libxml2: Remove autoreconf

2015-12-13T21:50:13+00:00

Autoreconf is not necessary since we do not patch this package anymore. LIBXML2_AUTORECONF was added back in 2012 https://git.busybox.net/buildroot/commit/package/libxml2?id=aa5d9ba3b86f21be934fdb436525a833bf120305 and apparently not removed along with the patches applied before https://git.busybox.net/buildroot/commit/package/libxml2?id=dc0e7cfc3e4050ce7c0404b11f747bf1500c50b7 Signed-off-by: Bernd Kuhls Signed-off-by: Thomas Petazzoni

libxml2: security bump to version 2.9.3

2015-11-22T12:44:47+00:00

- Fixes: - CVE-2015-5312 - Another entity expansion issue - CVE-2015-7497 - Avoid an heap buffer overflow in xmlDictComputeFastQKey - CVE-2015-7500 - Fix memory access error due to incorrect entities boundaries - CVE-2015-8242 - Buffer overead with HTML parser in push mode - Incorporates upstreamed patches as well, which also fixed: - CVE-2015-1819 - The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML Entity Expansion (XEE) attack. - CVE-2015-7941 - out-of-bounds memory access. - CVE-2015-7942 - heap-buffer-overflow in xmlParseConditionalSections. - CVE-2015-8035 - DoS via crafted xz file. Signed-off-by: Danomi Manchego Signed-off-by: Thomas Petazzoni

packages: remove (non-)lfs dependencies and tweaks

2015-04-01T20:47:22+00:00

Now that largefile is mandatory removes package dependencies and conditionals. Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni

package/libxml2: add optional LZMA support

2015-03-24T23:31:26+00:00

LZMA support is provided by xz, since liblzma is long dead. Contrary to zlib, liblzma uses pkg-config, so we do not need to add the full path to libzma. Reported-by: vdm on IRC Signed-off-by: "Yann E. MORIN" Signed-off-by: Thomas Petazzoni

libxml2: explicitly state zlib dir

2014-10-18T17:26:00+00:00

Pass the zlib directory prefix to --with-zlib otherwise it expands into absolute (distribution) directories leading to bad test results in configure. Fixes: http://autobuild.buildroot.net/results/303/303d6d165c5423944122bf430575c018479733f8/build-end.log Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni

libxml2: security bump to version 2.9.2

2014-10-17T12:17:48+00:00

Fixes: CVE-2014-3660 - billion laugh variant CVE-2014-0191 - Do not fetch external parameter entities Also add hash file. Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard

packages: rename FOO_CONF_OPT into FOO_CONF_OPTS

2014-10-04T16:54:16+00:00

To be consistent with the recent change of FOO_MAKE_OPT into FOO_MAKE_OPTS, make the same change for FOO_CONF_OPT. Sed command used: find * -type f | xargs sed -i 's#_CONF_OPT\>#&S#g' Signed-off-by: Thomas De Schampheleire Reviewed-by: "Yann E. MORIN" Signed-off-by: Thomas Petazzoni

package/mesa3d: Remove dependency for the libxml2 module of host-python

2014-07-17T08:04:33+00:00

Remove the ugly BR2_PACKAGE_HOST_LIBXML2_PYTHON hack as well as mesa3d was the only package needing it, this is not the case anymore since: http://cgit.freedesktop.org/mesa/mesa/commit/configure.ac?id=2de70fe23f320ce4f559e37057fe07b7af99cf5a Signed-off-by: Bernd Kuhls Signed-off-by: Thomas Petazzoni