mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-09-27 12:30:34 -09:00
Code Issues Packages Projects Releases Wiki Activity

package/libxml2: security bump version to 2.15.4

Browse Source 
https://download.gnome.org/sources/libxml2/2.15/libxml2-2.15.4.news

Fixes the following security issues:

- xmlregexp: Prevent out-of-bounds read in NXT macro
- fix: add missing overflow checks in dict.c, uri.c, and valid.c
- xmlregexp: Calc string length after null checking
- xpointer: Check overflow in xmlXPtrEvalXPtrPart
- xmlIO: Check for int overflow before calling writecallback
- fix(xinclude): propagate parseFlags in xmlXIncludeProcess and
  xmlXIncludeProcessTree

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
This commit is contained in:
Bernd Kuhls
2026-09-05 08:21:20 +02:00
committed by Fiona Klute
parent 47c45f7f62
commit 270ef20df1
2 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
package/libxml2/libxml2.hash
View File

@@ -1,4 +1,4 @@
# From https://download.gnome.org/sources/libxml2/2.15/libxml2-2.15.3.sha256sum
sha256 78262a6e7ac170d6528ebfe2efccdf220191a5af6a6cd61ea4a9a9a5042c7a07 libxml2-2.15.3.tar.xz
# From https://download.gnome.org/sources/libxml2/2.15/libxml2-2.15.4.sha256sum
sha256 98087fd181d9070724f3fbc65c7377db03038eb92bd882374daff44940138821 libxml2-2.15.4.tar.xz
# License files, locally calculated
sha256 5d4873884a890122a4b9b20ad56ac6f7da1d796a5bfcf04a427970ac96217626 Copyright

2
package/libxml2/libxml2.mk
View File

@@ -5,7 +5,7 @@
################################################################################
LIBXML2_VERSION_MAJOR = 2.15
LIBXML2_VERSION = $(LIBXML2_VERSION_MAJOR).3
LIBXML2_VERSION = $(LIBXML2_VERSION_MAJOR).4
LIBXML2_SOURCE = libxml2-$(LIBXML2_VERSION).tar.xz
LIBXML2_SITE = \
https://download.gnome.org/sources/libxml2/$(LIBXML2_VERSION_MAJOR)