Debian uses libxml2 2.9.4 in Stretch. This adds their security related
fixes from 2.9.4+dfsg1-2.2+deb9u2 to LEDE's 17.01 release.
Fixed CVEs:
CVE-2016-4658
CVE-2016-5131
CVE-2017-0663
CVE-2017-15412
CVE-2017-7375
CVE-2017-7376
CVE-2017-9047
CVE-2017-9048
CVE-2017-9049
CVE-2017-9050
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
Host compilation overwrites "$(STAGING_DIR)/host/bin/xml2-config
with an unpatched variant. So apply the same sed expression before
installing the file during host install.
Thanks to @zyxmon for spotting this.
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
Beside some improvements, this also fixes several CVEs, for full
list see upstream changelog at:
https://mail.gnome.org/archives/xml/2015-November/msg00012.html
The patch needed for musl was accepted upstream, so we can remove it.
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
The previous fix (#557) forced -lz into LDFLAGS instead of fixing the
real issue where configure was failing to detect zlib in the first
place. This was happening because it was looking in /lib, resulting in
conflicts with the host libraries.
Signed-off-by: James Le Cuirot <james.le-cuirot@yakara.com>
Compilation of libxml2 on some distributions is problematic (at least
archlinux) for OpenWrt. This commit fixes the issue. Issue is caused
because configuration for some reason does not find gzopen from zlib.
This patch issues linker to include zlib anyway, if host system doesn't
have this issue, it is not a problem as linker should not link libs
twice anyway.
Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
[ Slightly modified commit message ]
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
Several packages may depend on host compiled packages during
the build time (such as the new LTS versions of telephony packages).
This commit adds an option to use the libxml2 to be built as
a host package. Usage would be following:
PKG_BUILD_DEPENDS:=libxml2/host
Signed-off-by: Jiri Slachta <slachta@cesnet.cz>
