From patchwork Wed Sep 21 08:16:12 2022 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Florin Diaconescu X-Patchwork-Id: 13081 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id D8A7AECAAD8 for ; Wed, 21 Sep 2022 08:19:50 +0000 (UTC) Received: from mail-wm1-f43.google.com (mail-wm1-f43.google.com [209.85.128.43]) by mx.groups.io with SMTP id smtpd.web09.4001.1663748386310517568 for ; Wed, 21 Sep 2022 01:19:46 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20210112 header.b=iRspU+vH; spf=pass (domain: gmail.com, ip: 209.85.128.43, mailfrom: florin.diaconescu009@gmail.com) Received: by mail-wm1-f43.google.com with SMTP id l8so3883107wmi.2 for ; Wed, 21 Sep 2022 01:19:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc:subject:date; bh=sdhvoyIqNn9REW3urXe6RFKnCyVxwCz36dvVhmQJvw4=; b=iRspU+vHIuZwHbZ77OhH2zw+75BqJXYhHg8rH4nFunIUXPCi3TcFpHjmJDmRWUts7j 5llsIKNICSBmiOf7mN50/IMyZodPo00/M5OJ2DoY3jM3bciLsENxT/7tfOh1dn/MbZJ4 SpNHNTEekSRGYGAij4xGJo/lfLEbWQ2UBXiTjoXYYobPlhKZs3PJ891wQd428NVzfibG QdqL1i/2SEZvPM3NUO1tGjcckiAEyKac7ELBZYcP6dvhpwApNrHBbFRkVd56vN0E7KdT aAmivQ7ZICtHHwJrnKgUhCBL0dgDFEPaf3AhMGuxP7xUhf26v0vxwdHrNfWu58MC1Z44 NFLQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-message-state:from:to:cc:subject:date; bh=sdhvoyIqNn9REW3urXe6RFKnCyVxwCz36dvVhmQJvw4=; b=0hkHIQw3rVWdFrTCN7mxHM+/1O8ODPbtGM25HVf8GrZpx7i2OJh8QSCAcsIN+MI+Fu mT5d6u5lkp63iComBpLO7/IQ2+BE0oRtVXKVuSwaMjUDgC7VxnIea7n4YL8VoFoua6An 0tEmU/Pyyai1lk/1V5Llr7yV1dSsSIAYcxTsBo0lcmKHPH9prwqYWyCfL7mtDMuNpHt0 r1BIjWCyWS/ehRHiNHxMmGg/tLCdI30HgKJv6i13odP+UThcdKFmTPz9bKnZ3pZb9Ec+ jFtg1NIC6c8auh+b4FrP9cIqGhN6zJegdcfhzvZ7XMecXFJvZoNiAB7QN3YQpphOka0W wjdw== X-Gm-Message-State: ACrzQf088m0cJloW85cisek+da1gSZJ3Sej+AtZskh84ymzrilEZkixz SOm6O9pVDwMqIuD4BcVB6FOckn8RJyVGmY18 X-Google-Smtp-Source: AMsMyM5s3NInqca65iewTEN/12GxatgSxUP94wAm0CIOuM20t2YNyv4ifnMJyVwkM7Fn7NN19985bw== X-Received: by 2002:a05:600c:1c19:b0:3b4:c1cb:d46d with SMTP id j25-20020a05600c1c1900b003b4c1cbd46dmr4980626wms.172.1663748384154; Wed, 21 Sep 2022 01:19:44 -0700 (PDT) Received: from FDIACONESCU-KS0.lenovo.com ([84.232.223.213]) by smtp.gmail.com with ESMTPSA id z8-20020a05600c0a0800b003a342933727sm2502107wmp.3.2022.09.21.01.19.43 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 21 Sep 2022 01:19:43 -0700 (PDT) From: Florin Diaconescu To: openembedded-core@lists.openembedded.org Cc: Florin Diaconescu Subject: [PATCH] expat: upgrade 2.4.8 -> 2.4.9 Date: Wed, 21 Sep 2022 11:16:12 +0300 Message-Id: <20220921081611.240-1-florin.diaconescu009@gmail.com> X-Mailer: git-send-email 2.25.1 MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 21 Sep 2022 08:19:50 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/170938 Changelog: ========= Security fixes: #629 #640 CVE-2022-40674 -- Heap use-after-free vulnerability in function doContent. Expected impact is denial of service or potentially arbitrary code execution. Bug fixes: #634 MinGW: Fix mis-compilation for -D__USE_MINGW_ANSI_STDIO=0 #614 docs: Fix documentation on effect of switch XML_DTD on symbol visibility in doc/reference.html Other changes: #638 MinGW: Make fix-xmltest-log.sh drop more Wine bug output #596 #625 Autotools: Sync CMake templates with CMake 3.22 #608 CMake: Migrate from use of CMAKE_*_POSTFIX to dedicated variables EXPAT_*_POSTFIX to stop affecting other projects #597 #599 Windows|CMake: Add missing -DXML_STATIC to test runners and fuzzers #512 #621 Windows|CMake: Render .def file from a template to fix linking with -DEXPAT_DTD=OFF and/or -DEXPAT_ATTR_INFO=ON #611 #621 MinGW|CMake: Apply MSVC .def file when linking #622 #624 MinGW|CMake: Sync library name with GNU Autotools, i.e. produce libexpat-1.dll rather than libexpat.dll by default. Filename libexpat.dll.a is unaffected. #632 MinGW|CMake: Set missing variable CMAKE_RC_COMPILER in toolchain file "cmake/mingw-toolchain.cmake" to avoid error "windres: Command not found" on e.g. Ubuntu 20.04 #597 #627 CMake: Unify inconsistent use of set() and option() in context of public build time options to take need for set(.. FORCE) in projects using Expat by means of add_subdirectory(..) off Expat's users' shoulders #626 #641 Stop exporting API symbols when building a static library #644 Resolve use of deprecated "fgrep" by "grep -F" #620 CMake: Make documentation on variables a bit more consistent #636 CMake: Drop leading whitespace from a #cmakedefine line in file expat_config.h.cmake #594 xmlwf: Fix harmless variable mix-up in function nsattcmp #592 #593 #610 Address Cppcheck warnings #643 Address Clang 15 compiler warnings #642 #644 Version info bumped from 9:8:8 to 9:9:8; see https://verbump.de/ for what these numbers do Infrastructure: #597 #598 CI: Windows: Start covering MSVC 2022 #619 CI: macOS: Migrate off deprecated macOS 10.15 #632 CI: Linux: Make migration off deprecated Ubuntu 18.04 work #643 CI: Upgrade Clang from 14 to 15 #637 apply-clang-format.sh: Add support for BSD find #633 coverage.sh: Exclude MinGW headers #635 coverage.sh: Fix name collision for -funsigned-char Special thanks to: David Faure Felix Wilhelm Frank Bergmann Rhodri James Rosen Penev Thijs Schreijer Vincent Torri and Google Project Zero Signed-off-by: Florin Diaconescu --- meta/recipes-core/expat/{expat_2.4.8.bb => expat_2.4.9.bb} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) rename meta/recipes-core/expat/{expat_2.4.8.bb => expat_2.4.9.bb} (84%) diff --git a/meta/recipes-core/expat/expat_2.4.8.bb b/meta/recipes-core/expat/expat_2.4.9.bb similarity index 84% rename from meta/recipes-core/expat/expat_2.4.8.bb rename to meta/recipes-core/expat/expat_2.4.9.bb index 980c488640..cb007708c7 100644 --- a/meta/recipes-core/expat/expat_2.4.8.bb +++ b/meta/recipes-core/expat/expat_2.4.9.bb @@ -4,7 +4,7 @@ HOMEPAGE = "https://github.com/libexpat/libexpat" SECTION = "libs" LICENSE = "MIT" -LIC_FILES_CHKSUM = "file://COPYING;md5=9e2ce3b3c4c0f2670883a23bbd7c37a9" +LIC_FILES_CHKSUM = "file://COPYING;md5=7b3b078238d0901d3b339289117cb7fb" VERSION_TAG = "${@d.getVar('PV').replace('.', '_')}" @@ -14,7 +14,7 @@ SRC_URI = "https://github.com/libexpat/libexpat/releases/download/R_${VERSION_TA UPSTREAM_CHECK_URI = "https://github.com/libexpat/libexpat/releases/" -SRC_URI[sha256sum] = "a247a7f6bbb21cf2ca81ea4cbb916bfb9717ca523631675f99b3d4a5678dcd16" +SRC_URI[sha256sum] = "7f44d1469b110773a94b0d5abeeeffaef79f8bd6406b07e52394bcf48126437a" EXTRA_OECMAKE:class-native += "-DEXPAT_BUILD_DOCS=OFF"