26ec7c4d02
Expat 2.5.0 has been released earlier today. Most importantly, this release fixes CVE-2022-43680: a heap use-after-free vulnerability after overeager destruction of a shared DTD in function XML_ExternalEntityParserCreate in out-of-memory situations, with expected impact of denial of service or potentially arbitrary code execution. https://blog.hartwork.org/posts/expat-2-5-0-released https://github.com/libexpat/libexpat/blob/R_2_5_0/expat/Changes Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
22 lines
705 B
Makefile
22 lines
705 B
Makefile
################################################################################
|
|
#
|
|
# expat
|
|
#
|
|
################################################################################
|
|
|
|
EXPAT_VERSION = 2.5.0
|
|
EXPAT_SITE = http://downloads.sourceforge.net/project/expat/expat/$(EXPAT_VERSION)
|
|
EXPAT_SOURCE = expat-$(EXPAT_VERSION).tar.xz
|
|
EXPAT_INSTALL_STAGING = YES
|
|
EXPAT_LICENSE = MIT
|
|
EXPAT_LICENSE_FILES = COPYING
|
|
EXPAT_CPE_ID_VENDOR = libexpat_project
|
|
EXPAT_CPE_ID_PRODUCT = libexpat
|
|
|
|
EXPAT_CONF_OPTS = \
|
|
--without-docbook --without-examples --without-tests --without-xmlwf
|
|
HOST_EXPAT_CONF_OPTS = --without-docbook --without-examples --without-tests
|
|
|
|
$(eval $(autotools-package))
|
|
$(eval $(host-autotools-package))
|