mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-09-09 07:51:59 -09:00
Code Issues Packages Projects Releases Wiki Activity

package/libxml2: security bump to version 2.11.7

Browse Source 
Fix CVE-2024-25062: An issue was discovered in libxml2 before 2.11.7 and
2.12.x before 2.12.5. When using the XML Reader interface with DTD
validation and XInclude expansion enabled, processing crafted XML
documents can lead to an xmlValidatePopElement use-after-free.

https://gitlab.gnome.org/GNOME/libxml2/-/blob/v2.11.7/NEWS

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
This commit is contained in:
Peter Korsgaard
2024-03-18 16:15:54 +01:00
parent e7249d3e2d
commit efbe754fde
2 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
package/libxml2/libxml2.hash
View File

@@ -1,4 +1,4 @@
# From https://download.gnome.org/sources/libxml2/2.11/libxml2-2.11.6.sha256sum
sha256 c90eee7506764abbe07bb616b82da452529609815aefef423d66ef080eb0c300 libxml2-2.11.6.tar.xz
# From https://download.gnome.org/sources/libxml2/2.11/libxml2-2.11.7.sha256sum
sha256 fb27720e25eaf457f94fd3d7189bcf2626c6dccf4201553bc8874d50e3560162 libxml2-2.11.7.tar.xz
# License files, locally calculated
sha256 c5c63674f8a83c4d2e385d96d1c670a03cb871ba2927755467017317878574bd Copyright

2
package/libxml2/libxml2.mk
View File

@@ -5,7 +5,7 @@
################################################################################
LIBXML2_VERSION_MAJOR = 2.11
LIBXML2_VERSION = $(LIBXML2_VERSION_MAJOR).6
LIBXML2_VERSION = $(LIBXML2_VERSION_MAJOR).7
LIBXML2_SOURCE = libxml2-$(LIBXML2_VERSION).tar.xz
LIBXML2_SITE = \
https://download.gnome.org/sources/libxml2/$(LIBXML2_VERSION_MAJOR)