* [Buildroot] [PATCH] xerces: security bump to version 3.1.3
@ 2016-02-29 15:27 Gustavo Zacarias
2016-02-29 20:44 ` Thomas Petazzoni
0 siblings, 1 reply; 2+ messages in thread
From: Gustavo Zacarias @ 2016-02-29 15:27 UTC (permalink / raw)
To: buildroot
Fixes:
CVE-2016-0729 - Apache Xerces-C XML Parser Crashes on Malformed Input
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
---
package/xerces/xerces.hash | 4 ++--
package/xerces/xerces.mk | 2 +-
2 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/package/xerces/xerces.hash b/package/xerces/xerces.hash
index 6f4c267..639e668 100644
--- a/package/xerces/xerces.hash
+++ b/package/xerces/xerces.hash
@@ -1,2 +1,2 @@
-# From http://www.apache.org/dist/xerces/c/3/sources/xerces-c-3.1.2.tar.xz.sha256
-sha256 a847529ab6125f36039f54fa61f3d5043791accf7da2f43917cd2b49deb768f1 xerces-c-3.1.2.tar.xz
+# From http://www.apache.org/dist/xerces/c/3/sources/xerces-c-3.1.3.tar.xz.sha256
+sha256 d35ae442db333f73c7ef41b2ce2e33bc8aba8dbacf582af765eda26415d25c94 xerces-c-3.1.3.tar.xz
diff --git a/package/xerces/xerces.mk b/package/xerces/xerces.mk
index d04c406..e7f57b3 100644
--- a/package/xerces/xerces.mk
+++ b/package/xerces/xerces.mk
@@ -4,7 +4,7 @@
#
################################################################################
-XERCES_VERSION = 3.1.2
+XERCES_VERSION = 3.1.3
XERCES_SOURCE = xerces-c-$(XERCES_VERSION).tar.xz
XERCES_SITE = http://archive.apache.org/dist/xerces/c/3/sources
XERCES_LICENSE = Apache-2.0
--
2.4.10
^ permalink raw reply related [flat|nested] 2+ messages in thread
* [Buildroot] [PATCH] xerces: security bump to version 3.1.3
2016-02-29 15:27 [Buildroot] [PATCH] xerces: security bump to version 3.1.3 Gustavo Zacarias
@ 2016-02-29 20:44 ` Thomas Petazzoni
0 siblings, 0 replies; 2+ messages in thread
From: Thomas Petazzoni @ 2016-02-29 20:44 UTC (permalink / raw)
To: buildroot
Dear Gustavo Zacarias,
On Mon, 29 Feb 2016 12:27:10 -0300, Gustavo Zacarias wrote:
> Fixes:
> CVE-2016-0729 - Apache Xerces-C XML Parser Crashes on Malformed Input
>
> Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
> ---
> package/xerces/xerces.hash | 4 ++--
> package/xerces/xerces.mk | 2 +-
> 2 files changed, 3 insertions(+), 3 deletions(-)
Applied to master, thanks.
Thomas
--
Thomas Petazzoni, CTO, Free Electrons
Embedded Linux, Kernel and Android engineering
http://free-electrons.com
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2016-02-29 20:44 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2016-02-29 15:27 [Buildroot] [PATCH] xerces: security bump to version 3.1.3 Gustavo Zacarias
2016-02-29 20:44 ` Thomas Petazzoni
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox