From patchwork Tue Mar 27 22:58:07 2012 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Gustavo Zacarias X-Patchwork-Id: 149050 Return-Path: X-Original-To: incoming@patchwork.ozlabs.org Delivered-To: patchwork-incoming@bilbo.ozlabs.org Received: from whitealder.osuosl.org (whitealder.osuosl.org [140.211.166.138]) by ozlabs.org (Postfix) with ESMTP id 3DEC8B6F62 for ; Wed, 28 Mar 2012 09:58:24 +1100 (EST) Received: from localhost (localhost [127.0.0.1]) by whitealder.osuosl.org (Postfix) with ESMTP id B27308D382; Tue, 27 Mar 2012 22:58:21 +0000 (UTC) X-Virus-Scanned: amavisd-new at osuosl.org Received: from whitealder.osuosl.org ([127.0.0.1]) by localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tBlWlQ0esdLL; Tue, 27 Mar 2012 22:58:19 +0000 (UTC) Received: from ash.osuosl.org (ash.osuosl.org [140.211.166.34]) by whitealder.osuosl.org (Postfix) with ESMTP id 4985F8D38C; Tue, 27 Mar 2012 22:58:19 +0000 (UTC) X-Original-To: buildroot@lists.busybox.net Delivered-To: buildroot@osuosl.org Received: from whitealder.osuosl.org (whitealder.osuosl.org [140.211.166.138]) by ash.osuosl.org (Postfix) with ESMTP id 272638F753 for ; Tue, 27 Mar 2012 22:58:17 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by whitealder.osuosl.org (Postfix) with ESMTP id 0D8448D3C8 for ; Tue, 27 Mar 2012 22:58:17 +0000 (UTC) X-Virus-Scanned: amavisd-new at osuosl.org Received: from whitealder.osuosl.org ([127.0.0.1]) by localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AzIjBaf8xDEf for ; Tue, 27 Mar 2012 22:58:14 +0000 (UTC) X-Greylist: domain auto-whitelisted by SQLgrey-1.7.6 Received: from loknar.toptech.com.ar (loknar.toptech.com.ar [74.118.36.95]) by whitealder.osuosl.org (Postfix) with ESMTPS id 9390D8D382 for ; Tue, 27 Mar 2012 22:58:14 +0000 (UTC) Received: from asgard (host10.190-30-120.telecom.net.ar [190.30.120.10]) (authenticated bits=0) by loknar.toptech.com.ar (8.14.4/8.14.4) with ESMTP id q2RMw9xN030378 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 27 Mar 2012 19:58:11 -0300 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=zacarias.com.ar; s=dkey; t=1332889092; bh=koFYQ8Bb9V8WYCRKBPnVi8uecw7ue1OKY0MJMI5tMzE=; h=From:To:Cc:Subject:Date:Message-Id; b=CvGBKznxOgShFlewaM2wiRhfEweg+sDlSZ1cKs1EbGBiMVlImmh2alU45akhoWuch 62NgBL0gzU/224oAJ39WvDwXW0GsYZugQ9ABKx6qFbQOBlfMFES4isktkywlKXOHl4 erLeYFH20I+gV4yjwUc7r4lB/l4eCuvfH9v9gYv0= Received: by asgard (sSMTP sendmail emulation); Tue, 27 Mar 2012 19:58:08 -0300 From: Gustavo Zacarias To: buildroot@busybox.net Date: Tue, 27 Mar 2012 19:58:07 -0300 Message-Id: <1332889087-26867-1-git-send-email-gustavo@zacarias.com.ar> X-Mailer: git-send-email 1.7.3.4 X-Virus-Scanned: clamav-milter 0.97.3 at loknar X-Virus-Status: Clean Subject: [Buildroot] [PATCH] expat: security bump to version 2.1.0 X-BeenThere: buildroot@busybox.net X-Mailman-Version: 2.1.14 Precedence: list List-Id: Discussion and development of buildroot List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , MIME-Version: 1.0 Errors-To: buildroot-bounces@busybox.net Sender: buildroot-bounces@busybox.net Fixes for CVE-2012-1147, CVE-2009-3720, CVE-2009-3560, CVE-2012-1148 and CVE-2012-0876. Signed-off-by: Gustavo Zacarias --- package/expat/expat-2.0.1-CVE-2009-3560.patch | 14 -------------- package/expat/expat.mk | 4 ++-- 2 files changed, 2 insertions(+), 16 deletions(-) delete mode 100644 package/expat/expat-2.0.1-CVE-2009-3560.patch diff --git a/package/expat/expat-2.0.1-CVE-2009-3560.patch b/package/expat/expat-2.0.1-CVE-2009-3560.patch deleted file mode 100644 index 7cadc47..0000000 --- a/package/expat/expat-2.0.1-CVE-2009-3560.patch +++ /dev/null @@ -1,14 +0,0 @@ -http://nvd.nist.gov/nvd.cfm?cvename=CVE-2009-3560 - ---- a/lib/xmlparse.c -+++ b/lib/xmlparse.c -@@ -3703,6 +3703,9 @@ doProlog(XML_Parser parser, - return XML_ERROR_UNCLOSED_TOKEN; - case XML_TOK_PARTIAL_CHAR: - return XML_ERROR_PARTIAL_CHAR; -+ case -XML_TOK_PROLOG_S: -+ tok = -tok; -+ break; - case XML_TOK_NONE: - #ifdef XML_DTD - /* for internal PE NOT referenced between declarations */ diff --git a/package/expat/expat.mk b/package/expat/expat.mk index b179383..ea008db 100644 --- a/package/expat/expat.mk +++ b/package/expat/expat.mk @@ -4,8 +4,8 @@ # ############################################################# -EXPAT_VERSION = 2.0.1 -EXPAT_SITE = http://$(BR2_SOURCEFORGE_MIRROR).dl.sourceforge.net/sourceforge/expat +EXPAT_VERSION = 2.1.0 +EXPAT_SITE = http://$(BR2_SOURCEFORGE_MIRROR).dl.sourceforge.net/project/expat/expat/$(EXPAT_VERSION) EXPAT_INSTALL_STAGING = YES EXPAT_INSTALL_STAGING_OPT = DESTDIR=$(STAGING_DIR) installlib EXPAT_INSTALL_TARGET_OPT = DESTDIR=$(TARGET_DIR) installlib