packages/libs/libxml2/Makefile, branch openwrt-19.07

libxml2: update to 2.9.14

2022-06-02T13:27:28Z

This fixes CVE-2022-29824. Signed-off-by: Michael Heimpold (cherry picked from commit c12e1cfcab318d0a5b48d63d5952af418e62822e) Signed-off-by: Šimon Bořek

libxml2: update to 2.9.13

2022-06-02T13:27:22Z

This fixes CVE-2022-23308. Also switch to GNOME as download source and xz tarball. Signed-off-by: Michael Heimpold (cherry picked from commit 81fd836f97aee93c8cfcb4ebbf901c2a99c3525c) Signed-off-by: Šimon Bořek

libxml2: update to 2.9.12

2022-06-02T13:26:05Z

Signed-off-by: Michael Heimpold (cherry picked from commit 6b932d3ff77c63fe01080139c147c86da12f0c88) Signed-off-by: Šimon Bořek

libxml2: update to 2.9.10

2022-06-02T13:12:45Z

Signed-off-by: Michael Heimpold (cherry picked from commit 10e867d0261a0e7d6a94a672104e7f25ae884eff) [remove no longer needed CVE-2019-19956 patch (fixed in libxml2 2.9.10)] Signed-off-by: Šimon Bořek

libxml2: patch security issues

2020-09-15T08:47:25Z

Fixes CVE-2019-19956 CVE-2020-24977 CVE-2019-20388 CVE-2020-7595 Signed-off-by: Jan Pavlinec

libxml2: install xml2-config with host triplet

2020-02-01T14:39:19Z

Currently only xml2-config is installed, for both the normal libxml2 package as well as the host package. The problem with that is that due to multilib considerations the build host may have xml2-config installed with a host triplet prefix, like x86_64-pc-linux-gnu-xml2-config (and xml2-config as a symbolic link to it). Gentoo for instance sets it up like this. Packages may actually search for a prefixed xml2-config before searching for xml2-config. An example would be Asterisk: checking for x86_64-pc-linux-gnu-xml2-config... /usr/bin/x86_64-pc-linux-gnu-xml2-config This then introduces wrong information into the build, for instance bad includes: ~/tmp/openwrt $ /usr/bin/x86_64-pc-linux-gnu-xml2-config --cflags -I/usr/include/libxml2 When the intention is to use OpenWrt's own (host) libxml2 one would like to see this output used instead: ~/tmp/openwrt $ ./staging_dir/hostpkg/bin/xml2-config --cflags -I/home/sk/tmp/openwrt/staging_dir/hostpkg/include/libxml2 This commit addresses this by installing xml2-config with a suitable prefix and creating a symbolic link xml2-config. This is done for both the host package and the normal package. The latter also needs this fix because the target may use the same triplet as the host system (for instance x86_64 cross-compiling for x86_64). Signed-off-by: Sebastian Kemper

libxml2/host: revert xml2-config prefix fix

2020-02-01T14:37:57Z

Commit 218f0229a4594b32d9db6ad0678cdce7e2663e27 added a workaround for a problem. The host compile overwrote xml2-config in "$(STAGING_DIR)/host/bin". The workaround fixed the issue for regular target packages. But it didn't leave a proper xml2-config script for host packages. Times have changed. Host packages are now installed in "$(STAGING_DIR_HOSTPKG). So there is no longer any danger of the host package overwriting the xml2-config script for target packages. So revert the mentioned commit, leaving us with two proper xml2-config scripts, one for target package builds and one for host package builds. Signed-off-by: Sebastian Kemper

libxml2: update to 2.9.9

2019-01-03T20:08:46Z

Also drop the CVE patches which are already covered by this new release. Compile tested for and run tested on mxs platform. Signed-off-by: Michael Heimpold

libxml2: Fix CVE-2018-14404

2018-08-21T20:59:56Z

Embarrasingly, I missed this one last time. Signed-off-by: Rosen Penev

libxml2: Fix CVE-2018-9251 and CVE-2018-14567

2018-08-18T01:46:27Z

Also added the CPE ID. Taken from Fedora. Signed-off-by: Rosen Penev