diff mbox series

[mickledore,02/30] libxml2: upgrade 2.10.3 -> 2.10.4

Message ID	5514070805c7c0f63fe8199832269b7857d5b8e4.1688092011.git.steve@sakoman.com
State	New
Headers	show Return-Path: <steve@sakoman.com> ip: 209.85.215.172, mailfrom: steve@sakoman.com) From: Steve Sakoman <steve@sakoman.com> To: openembedded-core@lists.openembedded.org Subject: [OE-core][mickledore 02/30] libxml2: upgrade 2.10.3 -> 2.10.4 Date: Thu, 29 Jun 2023 16:28:38 -1000 Message-Id: <5514070805c7c0f63fe8199832269b7857d5b8e4.1688092011.git.steve@sakoman.com> In-Reply-To: <cover.1688092011.git.steve@sakoman.com> References: <cover.1688092011.git.steve@sakoman.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	[mickledore,01/30] tiff: Security fix for CVE-2023-25434 and CVE-2023-26965 \| expand [mickledore,01/30] tiff: Security fix for CVE-2023-25434 and CVE-2023-26965 [mickledore,02/30] libxml2: upgrade 2.10.3 -> 2.10.4 [mickledore,03/30] gtk4: upgrade 4.10.3 -> 4.10.4 [mickledore,04/30] apr: upgrade 1.7.3 -> 1.7.4 [mickledore,05/30] bno_plot.py, btt_plot.py: Ask for python3 specifically [mickledore,06/30] python3-numpy: remove NPY_INLINE, use inline instead [mickledore,07/30] systemd: fix a dead link under /var/log [mickledore,08/30] weston-init: make sure the render group exists [mickledore,09/30] weston-init: add weston user to the render group [mickledore,10/30] weston-init: add the weston user to the wayland group [mickledore,11/30] weston-init: fix the mixed indentation [mickledore,12/30] weston-init: guard against systemd configs [mickledore,13/30] weston-init: add profile to point users to global socket [mickledore,14/30] glibc: Pass linker choice via compiler flags [mickledore,15/30] useradd-example: package typo correction [mickledore,16/30] scripts/runqemu: split lock dir creation into a reusable function [mickledore,17/30] scripts/runqemu: allocate unfsd ports in a way that doesn't race or clash with u… [mickledore,18/30] oeqa/selftest/bbtests: add non-existent prefile/postfile tests [mickledore,19/30] qemu: a pending patch was submitted and accepted upstream [mickledore,20/30] maintainers.inc: unassign Adrian Bunk from wireless-regdb [mickledore,21/30] maintainers.inc: unassign Alistair Francis from opensbi [mickledore,22/30] maintainers.inc: unassign Chase Qi from libc-test [mickledore,23/30] maintainers.inc: unassign Oleksandr Kravchuk from python3 and all other items [mickledore,24/30] maintainers.inc: unassign Ricardo Neri from ovmf [mickledore,25/30] babeltrace2: Always use BFD linker when building tests with ld-is-lld distro fea… [mickledore,26/30] gobject-introspection: remove obsolete DEPENDS [mickledore,27/30] parted: Add missing libuuid to linker cmdline for libparted-fs-resize.so [mickledore,28/30] useradd-staticids.bbclass: improve error message [mickledore,29/30] devtool: Fix the wrong variable in srcuri_entry [mickledore,30/30] grub: submit determinism.patch upstream

Commit Message

Steve Sakoman June 30, 2023, 2:28 a.m. UTC

From: Wang Mingyu <wangmy@fujitsu.com>

Changelog:
==========
### Security

- [CVE-2023-29469] Hashing of empty dict strings isn't deterministic
- [CVE-2023-28484] Fix null deref in xmlSchemaFixupComplexType
- schemas: Fix null-pointer-deref in xmlSchemaCheckCOSSTDerivedOK

### Regressions

- SAX2: Ignore namespaces in HTML documents
- io: Fix "buffer full" error with certain buffer sizes

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
(cherry picked from commit 9ddbbf2f86f046784c3baa58de5606a73e9e24f4)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
---
 .../libxml/{libxml2_2.10.3.bb => libxml2_2.10.4.bb}             | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-core/libxml/{libxml2_2.10.3.bb => libxml2_2.10.4.bb} (97%)

diff mbox series

Patch

diff --git a/meta/recipes-core/libxml/libxml2_2.10.3.bb b/meta/recipes-core/libxml/libxml2_2.10.4.bb
similarity index 97%
rename from meta/recipes-core/libxml/libxml2_2.10.3.bb
rename to meta/recipes-core/libxml/libxml2_2.10.4.bb
index 0ccd48964f..288631504c 100644
--- a/meta/recipes-core/libxml/libxml2_2.10.3.bb
+++ b/meta/recipes-core/libxml/libxml2_2.10.4.bb
@@ -21,7 +21,7 @@  SRC_URI += "http://www.w3.org/XML/Test/xmlts20130923.tar;subdir=${BP};name=testt
            file://libxml-m4-use-pkgconfig.patch \
            "
 
-SRC_URI[archive.sha256sum] = "5d2cc3d78bec3dbe212a9d7fa629ada25a7da928af432c93060ff5c17ee28a9c"
+SRC_URI[archive.sha256sum] = "ed0c91c5845008f1936739e4eee2035531c1c94742c6541f44ee66d885948d45"
 SRC_URI[testtar.sha256sum] = "c6b2d42ee50b8b236e711a97d68e6c4b5c8d83e69a2be4722379f08702ea7273"
 
 BINCONFIG = "${bindir}/xml2-config"