Commit Graph

34 Commits

Author SHA1 Message Date
Michael Heimpold af9503372e libxml2: update to 2.10.4
This fixes:
    - CVE-2023-29469
    - CVE-2023-28484

Full changelog:
https://download.gnome.org/sources/libxml2/2.10/libxml2-2.10.4.news

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2023-05-13 09:40:02 +02:00
Michael Heimpold 37fd7c0316 libxml2: update to 2.10.3
This fixes:
    - CVE-2022-40303
    - CVE-2022-40304

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit c2742973b0)
2022-10-17 22:05:59 +02:00
Michael Heimpold 1e329ed5e9 libxml2: update to 2.10.2
This fixes:
- CVE-2022-2309

Release Notes:
- https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.10.0
- https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.10.1
- https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.10.2

Also drop removed docbook compile switch.
Disable PKG_FIXUP to allow backporting.

Signed-off-by: Nick Hainke <vincent@systemli.org>
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit dc21121cf9c1c51649f0ffdaffd26326e53b4f45)
2022-09-20 07:59:57 +02:00
Michael Heimpold a60cb1fbd2 libxml2: update to 2.9.14
This fixes CVE-2022-29824.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit c12e1cfcab)
2022-05-31 21:37:00 +02:00
Michael Heimpold 81fd836f97 libxml2: update to 2.9.13
This fixes CVE-2022-23308.

Also switch to GNOME as download source and xz tarball.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2022-03-15 21:25:46 +01:00
Daniel Golle 3b13df4adc
libxml2: build host static lib with -fPIC
libxslt/host is complaing that static libxml2 should be with -fPIC.
Unconditionally enable -fPIC for for host build of libxml2.

Fixes: dc701d61b ("libxml2: don't build host shared libraries")
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-11-24 11:10:51 +00:00
Rosen Penev dc701d61b9 libxml2: don't build host shared libraries
Avoids having to add

HOST_LDFLAGS: -Wl,-rpath,$(STAGING_DIR_HOSTPKG)/lib

for packages that rely on shared libraries.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-10-23 17:03:12 -07:00
Michael Heimpold 6b932d3ff7 libxml2: update to 2.9.12
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2021-05-19 00:12:32 +02:00
Ilya Lipnitskiy 5d8d4fbbcb
treewide: Run refresh on all packages
The crude loop I wrote to come up with this changeset:

  find -L package/feeds/packages/ -name patches | \
  sed 's/patches$/refresh/' | sort | xargs make

Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com>
2021-02-20 16:02:15 -08:00
Michael Heimpold d18692c926 libxml2: allow building with iconv support (fixes #14637)
Instead of hard disabling iconv support, just rely on the global setting.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2021-02-07 23:21:32 +01:00
Jan Pavlinec 87d4ab43bd
libxml: patch security issues
Fixes:
CVE-2019-20388
CVE-2020-24977
CVE-2020-7595

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-09-11 12:14:05 +02:00
Michael Heimpold 10e867d026 libxml2: update to 2.9.10
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2019-11-30 22:01:54 +01:00
Sebastian Kemper cf31c75e40 libxml2: install xml2-config with host triplet
Currently only xml2-config is installed, for both the normal libxml2
package as well as the host package. The problem with that is that due
to multilib considerations the build host may have xml2-config installed
with a host triplet prefix, like x86_64-pc-linux-gnu-xml2-config (and
xml2-config as a symbolic link to it). Gentoo for instance sets it up
like this.

Packages may actually search for a prefixed xml2-config before searching
for xml2-config. An example would be Asterisk:

checking for x86_64-pc-linux-gnu-xml2-config... /usr/bin/x86_64-pc-linux-gnu-xml2-config

This then introduces wrong information into the build, for instance
bad includes:

~/tmp/openwrt $ /usr/bin/x86_64-pc-linux-gnu-xml2-config --cflags
-I/usr/include/libxml2

When the intention is to use OpenWrt's own (host) libxml2 one would like
to see this output used instead:

~/tmp/openwrt $ ./staging_dir/hostpkg/bin/xml2-config --cflags
-I/home/sk/tmp/openwrt/staging_dir/hostpkg/include/libxml2

This commit addresses this by installing xml2-config with a suitable
prefix and creating a symbolic link xml2-config. This is done for both
the host package and the normal package. The latter also needs this fix
because the target may use the same triplet as the host system (for
instance x86_64 cross-compiling for x86_64).

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-10-27 10:58:26 +01:00
Sebastian Kemper 5db1865c07 libxml2/host: revert xml2-config prefix fix
Commit 218f0229a4594b32d9db6ad0678cdce7e2663e27 added a workaround for a
problem. The host compile overwrote xml2-config in
"$(STAGING_DIR)/host/bin". The workaround fixed the issue for regular
target packages. But it didn't leave a proper xml2-config script for
host packages.

Times have changed. Host packages are now installed in
"$(STAGING_DIR_HOSTPKG). So there is no longer any danger of the host
package overwriting the xml2-config script for target packages. So
revert the mentioned commit, leaving us with two proper xml2-config
scripts, one for target package builds and one for host package builds.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-10-23 00:17:50 +02:00
Michael Heimpold 290e23ac61 libxml2: add -dev and -utils packages (closes #8591)
This introduces a libxml2-dev package which contains most stuff
required for developing against libxml2 (on the target), and
the libxml2-utils package which contains the xmllint and xmlcatalog
command line binaries which are provided by libxml2.

Reported-by: Valentín Kivachuk <vk18496@gmail.com>
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2019-06-13 23:19:24 +02:00
Michael Heimpold d5f0331c91 libxml2: update to 2.9.9
Also drop the CVE patches which are already covered by this new release.

Compile tested for and run tested on mxs platform.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2019-01-03 21:08:46 +01:00
Rosen Penev b7870ea711 libxml2: Fix CVE-2018-14404
Embarrasingly, I missed this one last time.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-21 13:59:56 -07:00
Rosen Penev 0d9b5dd468 libxml2: Fix CVE-2018-9251 and CVE-2018-14567
Also added the CPE ID.

Taken from Fedora.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-17 18:46:27 -07:00
Michael Heimpold 1160b4dce7 libxml2: update to 2.9.8
Also drop obviously dead download mirrors.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2018-03-06 21:38:42 +01:00
Michael Heimpold 93fad8456a libxml2: update to 2.9.7
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2017-11-03 22:22:30 +01:00
Stijn Tintel 6d4f6a31fe libxml2: install cmake module
Since version 2.9.2, libxml2 provides its own cmake module. Install it
to avoid packages built with cmake and requiring libxml2 to fall back to
cmake's FindLibXml2 module, which seems to detect host libxml2 instead
of the one in staging_dir.

Fixes #4917.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2017-10-20 17:46:51 +03:00
Michael Heimpold 7d7105a481 libxml2: upgrade to 2.9.6
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2017-10-07 21:18:59 +02:00
Michael Heimpold 9428822c4b libxml2: upgrade to 2.9.5
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2017-09-04 20:53:14 +02:00
Etienne Champetier 4006865ae8 treewide: run "make check FIXUP=1"
fix Makefile chmod (644)
replace MD5SUM with HASH
add PKG_MIRROR_HASH when PKG_SOURCE_PROTO:=git

(PKG_SOURCE_PROTO:=svn tarballs are not reproducible for now)

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2017-08-29 21:41:14 -07:00
Michael Heimpold a0a49e1d3c libxml2: upgrade to 2.9.4
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2016-05-31 21:31:52 +02:00
Michael Heimpold f75da5729b libxml2: prevent host compile to overwrite xml2-config (closes #2566)
Host compilation overwrites "$(STAGING_DIR)/host/bin/xml2-config
with an unpatched variant. So apply the same sed expression before
installing the file during host install.

Thanks to @zyxmon for spotting this.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2016-04-02 23:24:03 +02:00
Michael Heimpold 55421fe27b libxml2: upgrade to 2.9.3
Beside some improvements, this also fixes several CVEs, for full
list see upstream changelog at:
https://mail.gnome.org/archives/xml/2015-November/msg00012.html

The patch needed for musl was accepted upstream, so we can remove it.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2015-11-20 21:53:15 +01:00
Alexander Couzens 71c0915496 libxml2: disable parallel build
libxml2 fails to build in one of three runs.

Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
2015-08-26 16:11:09 +02:00
Michael Heimpold dd538b6e02 libxml2: fix build error with musl libc (fixes #454)
Thanks to nakarotori for spotting this.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2014-12-21 15:54:15 +01:00
James Le Cuirot a540959020 libxml2: Fix zlib detection the right way
The previous fix (#557) forced -lz into LDFLAGS instead of fixing the
real issue where configure was failing to detect zlib in the first
place. This was happening because it was looking in /lib, resulting in
conflicts with the host libraries.

Signed-off-by: James Le Cuirot <james.le-cuirot@yakara.com>
2014-12-02 11:14:42 +00:00
Michael Heimpold 4281b37484 libxml2: fix compilation on archlinux and gentoo
Compilation of libxml2 on some distributions is problematic (at least
archlinux) for OpenWrt. This commit fixes the issue. Issue is caused
because configuration for some reason does not find gzopen from zlib.
This patch issues linker to include zlib anyway, if host system doesn't
have this issue, it is not a problem as linker should not link libs
twice anyway.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

[ Slightly modified commit message ]
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2014-11-26 00:01:44 +01:00
Jiri Slachta 4b3cf1a604 libxml2: add host compile
Several packages may depend on host compiled packages during
the build time (such as the new LTS versions of telephony packages).

This commit adds an option to use the libxml2 to be built as
a host package. Usage would be following:

	PKG_BUILD_DEPENDS:=libxml2/host

Signed-off-by: Jiri Slachta <slachta@cesnet.cz>
2014-11-21 05:06:04 +01:00
Steven Barth 5a7ea72967 libxml2: update to 2.9.2
fixes CVE-2014-3660, CVE-2014-0191 among other issues

Signed-off-by: Steven Barth <steven@midlink.org>
2014-10-20 10:57:42 +02:00
Michael Heimpold ee15782a9f libxml2: import from packages
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2014-06-17 21:46:44 +02:00