diff options
| author | Josef Schlehofer <pepe.schlehofer@gmail.com> | 2020-01-06 18:50:39 +0100 |
|---|---|---|
| committer | Hauke Mehrtens <hauke@hauke-m.de> | 2020-01-26 22:12:50 +0100 |
| commit | 0591348b3d7a699f6fc95a6b59d83476abcd8797 (patch) | |
| tree | aefa67c3dd21c96015df00e8dae330067e1b1734 | |
| parent | f51d1c3b7c7604489884dd9df2776e94dab7d413 (diff) | |
| download | upstream-0591348b3d7a699f6fc95a6b59d83476abcd8797.tar.gz upstream-0591348b3d7a699f6fc95a6b59d83476abcd8797.tar.bz2 upstream-0591348b3d7a699f6fc95a6b59d83476abcd8797.zip | |
tools/expat: Update to version 2.2.9
Fixes two CVEs:
- CVE-2019-15903 (Fix heap overflow triggered by XML_GetCurrentLineNumber)
- CVE-2018-20843 (Fix extraction of namespace prefixes from XML names)
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit b4af2c689fc8736777940b7bbf009bb1672296ec)
| -rw-r--r-- | tools/expat/Makefile | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/tools/expat/Makefile b/tools/expat/Makefile index 54527a7d0a..de7f2a0deb 100644 --- a/tools/expat/Makefile +++ b/tools/expat/Makefile @@ -9,10 +9,10 @@ include $(TOPDIR)/rules.mk PKG_NAME:=expat PKG_CPE_ID:=cpe:/a:libexpat:expat -PKG_VERSION:=2.2.5 +PKG_VERSION:=2.2.9 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.bz2 -PKG_HASH:=d9dc32efba7e74f788fcc4f212a43216fc37cf5f23f4c2339664d473353aedf6 +PKG_HASH:=f1063084dc4302a427dabcca499c8312b3a32a29b7d2506653ecc8f950a9a237 PKG_SOURCE_URL:=@SF/expat HOST_BUILD_PARALLEL:=1 |