expat: security bump to version 2.2.1
Fixes: - CVE-2017-9233 - External entity infinite loop DoS. See: https://libexpat.github.io/doc/cve-2017-9233/ - CVE-2016-9063 -- Detect integer overflow And further more: - Fix regression from fix to CVE-2016-0718 cutting off longer tag names. - Extend fix for CVE-2016-5300 (use getrandom() if available). - Extend fix for CVE-2012-0876 (Change hash algorithm to William Ahern's version of SipHash). Also add an upstream patch to fix detection of getrandom(). Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
This commit is contained in:
parent
1a050ad9b3
commit
c0ad6ded01
|
@ -0,0 +1,29 @@
|
|||
From 602e6c78ca750c082b72f8cdf4a38839b312959f Mon Sep 17 00:00:00 2001
|
||||
From: Sebastian Pipping <sebastian@pipping.org>
|
||||
Date: Sun, 18 Jun 2017 18:55:10 +0200
|
||||
Subject: [PATCH] configure.ac: Fix mis-detection of getrandom on Debian
|
||||
GNU/kFreeBSD (#50)
|
||||
|
||||
There is no such thing but we need to link (not just compile) to realize.
|
||||
|
||||
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
|
||||
---
|
||||
expat/configure.ac | 2 +-
|
||||
1 file changed, 1 insertion(+), 1 deletion(-)
|
||||
|
||||
diff --git a/expat/configure.ac b/expat/configure.ac
|
||||
index 1357c9a..444c002 100644
|
||||
--- a/expat/configure.ac
|
||||
+++ b/expat/configure.ac
|
||||
@@ -130,7 +130,7 @@ AC_LINK_IFELSE([AC_LANG_SOURCE([
|
||||
|
||||
|
||||
AC_MSG_CHECKING([for getrandom (Linux 3.17+, glibc 2.25+)])
|
||||
-AC_COMPILE_IFELSE([AC_LANG_SOURCE([
|
||||
+AC_LINK_IFELSE([AC_LANG_SOURCE([
|
||||
#include <stdlib.h> /* for NULL */
|
||||
#include <sys/random.h>
|
||||
int main() {
|
||||
--
|
||||
2.11.0
|
||||
|
|
@ -1,5 +1,5 @@
|
|||
# From https://sourceforge.net/projects/expat/files/expat/2.2.0/
|
||||
md5 2f47841c829facb346eb6e3fab5212e2 expat-2.2.0.tar.bz2
|
||||
sha1 8453bc52324be4c796fd38742ec48470eef358b3 expat-2.2.0.tar.bz2
|
||||
# From https://sourceforge.net/projects/expat/files/expat/2.2.1/
|
||||
md5 d9c3baeab58774cefc2f04faf29f2cf8 expat-2.2.1.tar.bz2
|
||||
sha1 f45eb724f182776a9cacec9ed70d549e87198987 expat-2.2.1.tar.bz2
|
||||
# Calculated based on the hashes above
|
||||
sha256 d9e50ff2d19b3538bd2127902a89987474e1a4db8e43a66a4d1a712ab9a504ff expat-2.2.0.tar.bz2
|
||||
sha256 1868cadae4c82a018e361e2b2091de103cd820aaacb0d6cfa49bd2cd83978885 expat-2.2.1.tar.bz2
|
||||
|
|
|
@ -4,7 +4,7 @@
|
|||
#
|
||||
################################################################################
|
||||
|
||||
EXPAT_VERSION = 2.2.0
|
||||
EXPAT_VERSION = 2.2.1
|
||||
EXPAT_SITE = http://downloads.sourceforge.net/project/expat/expat/$(EXPAT_VERSION)
|
||||
EXPAT_SOURCE = expat-$(EXPAT_VERSION).tar.bz2
|
||||
EXPAT_INSTALL_STAGING = YES
|
||||
|
@ -14,6 +14,8 @@ EXPAT_DEPENDENCIES = host-pkgconf
|
|||
HOST_EXPAT_DEPENDENCIES = host-pkgconf
|
||||
EXPAT_LICENSE = MIT
|
||||
EXPAT_LICENSE_FILES = COPYING
|
||||
# for 0001-configure.ac-Fix-mis-detection-of-getrandom-on-Debia.patch
|
||||
EXPAT_AUTORECONF = YES
|
||||
|
||||
$(eval $(autotools-package))
|
||||
$(eval $(host-autotools-package))
|
||||
|
|
Loading…
Reference in a new issue