summaryrefslogtreecommitdiff
path: root/package/libxml2
AgeCommit message (Collapse)Author
2016-11-05libxml2: add upstream security fixesBaruch Siach
Fixes: CVE-2016-5131, CVE-2016-4658. Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-08-11libxml2: fix m68k uclinux compileWaldemar Brodkorb
The GCC manual suggest when getting: relocation truncated to fit: R_68K_GOT16O foobar to use -mxgot. Fixes: http://autobuild.buildroot.net/results/8a4e26bb1c0c64759e3914eced0a36baa0967f0b/ Signed-off-by: Waldemar Brodkorb <wbx@openadk.org> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-05-23libxml2: security bump to version 2.9.4Baruch Siach
Fixes a bunch of security issues including: CVE-2016-1762: Heap-based buffer overread in xmlNextChar CVE-2016-1834: heap-buffer-overflow in xmlStrncat CVE-2016-3705: Missing increments of recursion depth counter to XML parser A few more security fixes are listed in the release announcement at https://mail.gnome.org/archives/xml/2016-May/msg00023.html. Also fixes: http://autobuild.buildroot.net/results/6db/6db405a097b192876c0b1b8d59051d614563c617/ http://autobuild.buildroot.net/results/62a/62addf4abd2a0df8222a81a83c16b2b9a61c9481/ http://autobuild.buildroot.net/results/204/20402690ad05d10d456a219da5252a38badf1da0/ Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-12-13package/libxml2: Remove autoreconfBernd Kuhls
Autoreconf is not necessary since we do not patch this package anymore. LIBXML2_AUTORECONF was added back in 2012 https://git.busybox.net/buildroot/commit/package/libxml2?id=aa5d9ba3b86f21be934fdb436525a833bf120305 and apparently not removed along with the patches applied before https://git.busybox.net/buildroot/commit/package/libxml2?id=dc0e7cfc3e4050ce7c0404b11f747bf1500c50b7 Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-11-22libxml2: security bump to version 2.9.3Danomi Manchego
- Fixes: - CVE-2015-5312 - Another entity expansion issue - CVE-2015-7497 - Avoid an heap buffer overflow in xmlDictComputeFastQKey - CVE-2015-7500 - Fix memory access error due to incorrect entities boundaries - CVE-2015-8242 - Buffer overead with HTML parser in push mode - Incorporates upstreamed patches as well, which also fixed: - CVE-2015-1819 - The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML Entity Expansion (XEE) attack. - CVE-2015-7941 - out-of-bounds memory access. - CVE-2015-7942 - heap-buffer-overflow in xmlParseConditionalSections. - CVE-2015-8035 - DoS via crafted xz file. Signed-off-by: Danomi Manchego <danomimanchego123@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-11-18libxml2: add several security patchesGustavo Zacarias
Fixes: CVE-2015-1819 - The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML Entity Expansion (XEE) attack. CVE-2015-7941 - out-of-bounds memory access. CVE-2015-7942 - heap-buffer-overflow in xmlParseConditionalSections. CVE-2015-8035 - DoS via crafted xz file. All patches upstream. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-04-11package/libxml2: Fix musl compileBernd Kuhls
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-04-01packages: remove (non-)lfs dependencies and tweaksGustavo Zacarias
Now that largefile is mandatory removes package dependencies and conditionals. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-03-25package/libxml2: add optional LZMA supportYann E. MORIN
LZMA support is provided by xz, since liblzma is long dead. Contrary to zlib, liblzma uses pkg-config, so we do not need to add the full path to libzma. Reported-by: vdm on IRC Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2014-12-30package/libxml2: fix libxml2-config.cmakeSamuel Martin
This patch aligns the libxml2-config.cmake module to what the libxml-2.0.pc set. This patch has already been sent upstream: https://mail.gnome.org/archives/xml/2014-December/msg00015.html Signed-off-by: Samuel Martin <s.martin49@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2014-10-18libxml2: explicitly state zlib dirGustavo Zacarias
Pass the zlib directory prefix to --with-zlib otherwise it expands into absolute (distribution) directories leading to bad test results in configure. Fixes: http://autobuild.buildroot.net/results/303/303d6d165c5423944122bf430575c018479733f8/build-end.log Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2014-10-17libxml2: security bump to version 2.9.2Gustavo Zacarias
Fixes: CVE-2014-3660 - billion laugh variant CVE-2014-0191 - Do not fetch external parameter entities Also add hash file. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2014-10-04packages: rename FOO_CONF_OPT into FOO_CONF_OPTSThomas De Schampheleire
To be consistent with the recent change of FOO_MAKE_OPT into FOO_MAKE_OPTS, make the same change for FOO_CONF_OPT. Sed command used: find * -type f | xargs sed -i 's#_CONF_OPT\>#&S#g' Signed-off-by: Thomas De Schampheleire <thomas.de.schampheleire@gmail.com> Reviewed-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2014-07-17package/mesa3d: Remove dependency for the libxml2 module of host-pythonBernd Kuhls
Remove the ugly BR2_PACKAGE_HOST_LIBXML2_PYTHON hack as well as mesa3d was the only package needing it, this is not the case anymore since: http://cgit.freedesktop.org/mesa/mesa/commit/configure.ac?id=2de70fe23f320ce4f559e37057fe07b7af99cf5a Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2014-04-16host-libxml2: Prefer python2 when python3 is also installedBernd Kuhls
Fixes mesa3d build errors: http://autobuild.buildroot.net/results/d10/d105a0b3ca11fad34f9a2dae0dae9bd041d918a6/ http://autobuild.buildroot.net/results/d71/d7121443715024d15a66ff1abf1261803c10cd35/ http://autobuild.buildroot.net/results/ce6/ce64164d76972f82acab277afc9c95a876c6433e/ checking for python2... python2 checking python2 module: libxml2... no configure: error: failed to find required module libxml2 make: *** [/home/test/test/1/output/build/mesa3d-10.0.4/.stamp_configured] Error 1 mesa3d needs python2 bindings installed by libxml2. To enforce their build option BR2_PACKAGE_HOST_LIBXML2_PYTHON is used exclusively by mesa3d so this patch does not affect other packages. Without this patch host-libxml2 installs the python bindings in $(HOST_DIR)/usr/lib/$(PYTHON3_VERSION_MAJOR) using this defconfig: BR2_PACKAGE_MESA3D=y BR2_PACKAGE_PYTHON3=y because $(HOST_DIR)/usr/bin/python points to $(HOST_DIR)/usr/bin/python3: Quote from host-libxml2 configure log: Found python in /home/fli4l/br2/buildroot/output/host/usr/bin/python Found Python version 3.4 HOST_$(PACKAGE)_NEEDS_HOST_PYTHON does not work here because libxml2 does not use the python-package infrastructure. libxml2-python2.patch extends the python detection code in host-libxml2 to first look for python2, to keep the patch small I did not update the indentions: Found python2 in /home/fli4l/br2/buildroot/output/host/usr/bin/python2 Found Python version 2.7 Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Tested-by: Samuel Martin <s.martin49@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2014-02-26libxml2: do not detect zlib/lzma when not availableThomas Petazzoni
The host-libxml2 package does not depend on zlib or lzma, but may detect versions available on the host. This can cause problems in the following situation: 1 host-libxml2 is built, finds an available lzma library in the system, enables lzma support by using it. 2 host-xz is built, which installs a different version of the lzma library into $(HOST_DIR) 3 host-libxslt is built, tries to link against libxml2, which fails because now the visible lzma library is the one from $(HOST_DIR)/usr/lib and no longer the one libxml2 was built agains. To fix this, this patch passes --without-zlib and --without-lzma to the host package. In addition, since the target variant of libxml2 does not have provisions to depend on the target lzma, we also pass --without-lzma for the target variant. The case of zlib for the target was already properly taken into account. Fixes: http://autobuild.buildroot.org/results/6dc/6dcef647eb0f0db7de3f34194eb15ceebc645b39/ Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2013-12-25Config.in files: fix incorrect indentationThomas De Schampheleire
Tab instead of spaces Signed-off-by: Thomas De Schampheleire <thomas.de.schampheleire@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2013-06-28package/libxml2: bumping version to 2.9.1Carsten Schoenert
Signed-off-by: Carsten Schoenert <c.schoenert@gmail.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2013-06-06Normalize separator size to 80Alexandre Belloni
Signed-off-by: Alexandre Belloni <alexandre.belloni@free-electrons.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2013-05-17libxml2: depend on zlib and libiconv if appropriateSimon Dawson
Signed-off-by: Simon Dawson <spdawson@gmail.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2013-02-08package: use <pkg>_CONFIG_SCRIPTS wherever possibleThomas Petazzoni
Use the <pkg>_CONFIG_SCRIPTS mechanism in all packages for which it does all what the package was doing. A few packages, like libxslt, are for now left out, since they need some additional fixup (for example a fixup of includedir). Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Acked-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2013-01-20packages: remove all := signsThomas Petazzoni
Finally get rid of all := used for variable definitions in packages, as we suggest in our manual and during the review of new packages. While I was at it, I also sometimes added a few missing new lines between the header and the first variable definition. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2012-12-16libxml2: bump to version 2.9.0Gustavo Zacarias
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2012-12-16host-libxml2: enable debug for mesa3dArnout Vandecappelle
The API generation script in mesa3d requires libxml2 to be built with debug, because it uses the lsCountNode function which is only available in debug mode. Note that this is the second "temporary" hack to make mesa3d work. See http://lists.busybox.net/pipermail/buildroot/2012-November/061936.html for possible more fundamental solutions. Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2012-11-17libxml2: add support for building host library with python supportVellemans Noel
Patch based on the initial work of Will Wagner (Thanks Will). libxml2 host library with python support is required to build mesa3d (7.10.1) Signed-off-by: Vellemans Noel <noel.vellemans@visionbms.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2012-10-29packages: switch to host-pkgconfGustavo Zacarias
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Acked-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2012-10-04libxml2: add license infoGustavo Zacarias
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2012-07-17all packages: rename XXXTARGETS to xxx-packageArnout Vandecappelle (Essensium/Mind)
Also remove the redundant $(call ...). This is a purely mechanical change, performed with find package linux toolchain boot -name \*.mk | \ xargs sed -i -e 's/$(eval $(call GENTARGETS))/$(eval $(generic-package))/' \ -e 's/$(eval $(call AUTOTARGETS))/$(eval $(autotools-package))/' \ -e 's/$(eval $(call CMAKETARGETS))/$(eval $(cmake-package))/' Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2012-07-17all packages: use new host-xxx-package macrosArnout Vandecappelle (Essensium/Mind)
This is a purely mechanical change, performed with find package linux toolchain boot -name \*.mk | \ xargs sed -i -e 's/$(eval $(call GENTARGETS,host))/$(eval $(host-generic-package))/' \ -e 's/$(eval $(call AUTOTARGETS,host))/$(eval $(host-autotools-package))/' \ -e 's/$(eval $(call CMAKETARGETS,host))/$(eval $(host-cmake-package))/' Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2012-06-12libxml2: bump to version 2.8.0Gustavo Zacarias
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2012-03-14libxml2: ensure patches are applied in the correct orderPeter Korsgaard
Some of the patches depends on eachother, so rename them to ensure they get applied in the correct order. Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2012-03-11libxml2: add multiple security patchesGustavo Zacarias
Fixes for CVE-2011-1944, CVE-2011-2821, CVE-2011-2834, CVE-2011-3919, CVE-2012-0841 and others from upstream. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2011-09-29package: remove useless arguments from AUTOTARGETSThomas Petazzoni
Thanks to the pkgparentdir and pkgname functions, we can rewrite the AUTOTARGETS macro in a way that avoids the need for each package to repeat its name and the directory in which it is present. [Peter: pkgdir->pkgparentdir] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2011-05-02libxml2: fixup configure optionsGustavo Zacarias
Some configure options changed so adjust. Forcibly disabling threads isn't good and also it's detected by configure when there are no threads. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2011-03-07libxml2: remove xml2-config script from TARGET_DIRThomas Petazzoni
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2010-12-22libxml2: bump to version 2.7.8Gustavo Zacarias
Bump libxml2 to version 2.7.8. Re-enable libtool patch now that we handle libtool2 in package infra. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2010-11-05Remove support for shared configuration cacheThomas Petazzoni
The configuration cache shared between packages, while being in principle a nice idea to speed-up the configuration of packages by avoiding repetitive identical checks, turned out to be unreliable due to the subtle differences between similar but not identical checks in different packages. After spending some time trying to fix those, we concluded that supporting the shared configuration cache is definitely too hard and too unreliable, and that we'd better get rid of it altogether. This patch therefore removes the shared configuration cache infrastructure and usage. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2010-09-12libxml2: convert old-style hook to new-style hookThomas Petazzoni
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2010-07-30Globally remove aclocal directories from targetMalte Starostik
* Remove $(TARGET_DIR)/usr/share/aclocal from target-finalize when not installing devfiles and * Remove some (now) redundant cleanup from individual packages Signed-off-by: Malte Starostik <m-starostik@versanet.de> Acked-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2010-05-05Remove gtk-doc documentations from targetPaulius Zaleckas
On my target rootfs it is installed documentation for: atk, cairo, gdk, gdk-pixbuf, gio, glib, gobject, gtk, pango It ocupies 34M of space. Configure option --disable-gtk-doc doesn't prevent installation of it. So we should remove them manually if documentation is disabled. [Peter: also remove manual rm's from hal/libxml2/libglade] Signed-off-by: Paulius Zaleckas <paulius.zaleckas@gmail.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2010-05-02packages: remove useless HOST_*_LIBTOOL_PATCHThomas Petazzoni
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2010-03-29libxml2: bump versionPeter Korsgaard
Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2010-03-22package: remove redundant DISABLE_{IPV6,NLS,LARGEFILE} configure argsPeter Korsgaard
Makefile.autotools.in automatically adds these to the configure invocation, so there's no need to explicitly list them. Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2010-02-20libxml2: do not apply libtool patch when compiling for hostThomas Petazzoni
The libtool patch is not applied when building for the target because it does not apply, so do not attempt to apply it when building for the host. This fixes libxml2 build for the host. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2010-01-28libxml2: bump to version 2.7.6Sagaert Johan
Signed-off-by: Sagaert Johan <sagaert.johan@skynet.be> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2009-12-15libxml2: convert to autotools infrastructure for host packageThomas Petazzoni
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2009-11-23libxml2: fix build with BR2_CONFIG_CACHEPeter Korsgaard
Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2009-10-01buildroot: silence ./configure step when building with 'make -s'Peter Korsgaard
We have been passing -q to ./configure when using 'make -s' for packages using Makefile.autotools.in for some time. Do the same for packages using autotools, but not using the Makefile.autotools.in infrastructure, taking care to not do it for packages with hand written configure scripts. Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2009-09-03package: Remove unnecessary dependencies on uclibc.Will Newton
A C library will have been built by the toolchain makefiles, so there is no need for packages to explicitly depend on uclibc. Signed-off-by: Will Newton <will.newton@gmail.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2009-07-30libxml2: Bump version to 2.7.3.Will Newton
Closes #491 - Deletion of reject files no longer required as they have gone from the upstream release. Signed-off-by: Will Newton <will.newton@gmail.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
generated by cgit v1.2.3 (git 2.39.1) at 2024-06-03 01:45:00 +0000