buildroot/package/libxml2, branch 2016.02

package/libxml2: Remove autoreconf

2015-12-13T21:50:13+00:00

Autoreconf is not necessary since we do not patch this package anymore. LIBXML2_AUTORECONF was added back in 2012 https://git.busybox.net/buildroot/commit/package/libxml2?id=aa5d9ba3b86f21be934fdb436525a833bf120305 and apparently not removed along with the patches applied before https://git.busybox.net/buildroot/commit/package/libxml2?id=dc0e7cfc3e4050ce7c0404b11f747bf1500c50b7 Signed-off-by: Bernd Kuhls Signed-off-by: Thomas Petazzoni

libxml2: security bump to version 2.9.3

2015-11-22T12:44:47+00:00

- Fixes: - CVE-2015-5312 - Another entity expansion issue - CVE-2015-7497 - Avoid an heap buffer overflow in xmlDictComputeFastQKey - CVE-2015-7500 - Fix memory access error due to incorrect entities boundaries - CVE-2015-8242 - Buffer overead with HTML parser in push mode - Incorporates upstreamed patches as well, which also fixed: - CVE-2015-1819 - The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML Entity Expansion (XEE) attack. - CVE-2015-7941 - out-of-bounds memory access. - CVE-2015-7942 - heap-buffer-overflow in xmlParseConditionalSections. - CVE-2015-8035 - DoS via crafted xz file. Signed-off-by: Danomi Manchego Signed-off-by: Thomas Petazzoni

libxml2: add several security patches

2015-11-18T21:21:31+00:00

Fixes: CVE-2015-1819 - The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML Entity Expansion (XEE) attack. CVE-2015-7941 - out-of-bounds memory access. CVE-2015-7942 - heap-buffer-overflow in xmlParseConditionalSections. CVE-2015-8035 - DoS via crafted xz file. All patches upstream. Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni

package/libxml2: Fix musl compile

2015-04-11T13:34:11+00:00

Signed-off-by: Bernd Kuhls Signed-off-by: Thomas Petazzoni

packages: remove (non-)lfs dependencies and tweaks

2015-04-01T20:47:22+00:00

Now that largefile is mandatory removes package dependencies and conditionals. Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni

package/libxml2: add optional LZMA support

2015-03-24T23:31:26+00:00

LZMA support is provided by xz, since liblzma is long dead. Contrary to zlib, liblzma uses pkg-config, so we do not need to add the full path to libzma. Reported-by: vdm on IRC Signed-off-by: "Yann E. MORIN" Signed-off-by: Thomas Petazzoni

package/libxml2: fix libxml2-config.cmake

2014-12-30T10:19:00+00:00

This patch aligns the libxml2-config.cmake module to what the libxml-2.0.pc set. This patch has already been sent upstream: https://mail.gnome.org/archives/xml/2014-December/msg00015.html Signed-off-by: Samuel Martin Signed-off-by: Peter Korsgaard

libxml2: explicitly state zlib dir

2014-10-18T17:26:00+00:00

Pass the zlib directory prefix to --with-zlib otherwise it expands into absolute (distribution) directories leading to bad test results in configure. Fixes: http://autobuild.buildroot.net/results/303/303d6d165c5423944122bf430575c018479733f8/build-end.log Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni

libxml2: security bump to version 2.9.2

2014-10-17T12:17:48+00:00

Fixes: CVE-2014-3660 - billion laugh variant CVE-2014-0191 - Do not fetch external parameter entities Also add hash file. Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard

packages: rename FOO_CONF_OPT into FOO_CONF_OPTS

2014-10-04T16:54:16+00:00

To be consistent with the recent change of FOO_MAKE_OPT into FOO_MAKE_OPTS, make the same change for FOO_CONF_OPT. Sed command used: find * -type f | xargs sed -i 's#_CONF_OPT\>#&S#g' Signed-off-by: Thomas De Schampheleire Reviewed-by: "Yann E. MORIN" Signed-off-by: Thomas Petazzoni