Commit Graph

5 Commits

Author SHA1 Message Date
Richard Purdie ce26a57e04 Revert "expat: Don't use getrandom() in the -native case"
This reverts commit 450942db7f4638eba7ec262901fe1d7e1b1f6070.

Applied in error to the pyro branch.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-09-11 23:51:59 +01:00
Richard Purdie 960a653e0c expat: Don't use getrandom() in the -native case
getrandom() is only available in glibc 2.25+ and uninative may relocate
binaries onto systems that don't have this function. For now, force
the code to the older codepath until we can come up with a better solution
for this kind of issue.

(From OE-Core rev: da9ac8092497c3f2c246d3534f47e42cb2d9e4e8)

(From OE-Core rev: 450942db7f4638eba7ec262901fe1d7e1b1f6070)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-09-11 22:15:58 +01:00
Jussi Kukkonen b3e40449e2 expat: Upgrade 2.1.1 -> 2.2.0
Remove a patch that is no longer needed.
License checksum changes because of a copyright year change.

(From OE-Core rev: 911510181ac933d5d1fc7d88890eb67d5d338acf)

Signed-off-by: Jussi Kukkonen <jussi.kukkonen@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-07-20 10:28:48 +01:00
Yi Zhao a02911390c expat: CVE-2016-0718
Fix CVE-2016-0718: expat XML parser crashes on malformed input

External References:
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-0718
https://bugzilla.redhat.com/show_bug.cgi?id=1296102
https://bugzilla.suse.com/show_bug.cgi?id=979441

Patch from:
https://bugzilla.redhat.com/show_bug.cgi?id=1296102

(From OE-Core rev: 6589de727ba9c9901fdd53d31bd88ad0f17f3905)

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-06-23 14:26:14 +01:00
Jussi Kukkonen d4099e1042 expat: Upgrade 2.1.0 -> 2.1.1
* Remove backported CVE patch
* Update autotools patch
* Update SRC_URI to match current archive type

(From OE-Core rev: 8a5a90aa6a7f398803f432038d56cdfea1651aaa)

Signed-off-by: Jussi Kukkonen <jussi.kukkonen@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-05-17 14:43:28 +01:00