mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-08-08 08:30:47 -09:00
Code Issues Packages Projects Releases Wiki Activity

package/libxml2: security bump version to 2.15.2

Browse Source 
Release notes:
https://download.gnome.org/sources/libxml2/2.15/libxml2-2.15.2.news

- CVE-2026-1757 fix: Memory leak in xmllint Shell - shell.c
- CVE-2026-0990 fix: Prevent infinite recursion in
  xmlCatalogListXMLResolve
- CVE-2026-0992 fix: Exponential behavior when handling
- parser: Fix infinite loop in xmlCtxtParseContent
- CVE-2025-10911 libxslt related: Ignore next/prev of documents when
  traversing XPath
- CVE-2026-0989 fix: Add RelaxNG include limit

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
This commit is contained in:
Bernd Kuhls
2026-03-14 13:23:26 +01:00
committed by Julien Olivain
parent c1bc1a7a61
commit 4d4dc5f542
3 changed files with 6 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
package/libxml2/0001-Revert-cmake-Fix-installation-directories-in-libxml2.patch
View File

@@ -8,6 +8,7 @@ This reverts commit 75dde50b20215a2a3a445b62f36a67c8ed337cab.
Upstream: https://gitlab.gnome.org/GNOME/libxml2/-/issues/898#note_2452864
[Bernd: rebased for 2.15.2]
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
---
configure.ac | 11 -----------
@@ -19,7 +20,7 @@ diff --git a/configure.ac b/configure.ac
index 4eb629bb..150e06eb 100644
--- a/configure.ac
+++ b/configure.ac
@@ -1006,17 +1006,6 @@ AC_SUBST(XML_PRIVATE_LIBS)
@@ -1008,17 +1008,6 @@ AC_SUBST(XML_PRIVATE_LIBS)
AC_SUBST(XML_PRIVATE_CFLAGS)
AC_SUBST(XML_INCLUDEDIR)
@@ -70,7 +71,7 @@ diff --git a/meson.build b/meson.build
index 31c73b62..8728852c 100644
--- a/meson.build
+++ b/meson.build
@@ -577,9 +577,6 @@ config_cmake = configuration_data()
@@ -590,9 +590,6 @@ config_cmake = configuration_data()
config_cmake.set('LIBXML_MAJOR_VERSION', v_maj)
config_cmake.set('LIBXML_MINOR_VERSION', v_min)
config_cmake.set('LIBXML_MICRO_VERSION', v_mic)

4
package/libxml2/libxml2.hash
View File

@@ -1,4 +1,4 @@
# From https://download.gnome.org/sources/libxml2/2.15/libxml2-2.15.1.sha256sum
sha256 c008bac08fd5c7b4a87f7b8a71f283fa581d80d80ff8d2efd3b26224c39bc54c libxml2-2.15.1.tar.xz
# From https://download.gnome.org/sources/libxml2/2.15/libxml2-2.15.2.sha256sum
sha256 c8b9bc81f8b590c33af8cc6c336dbff2f53409973588a351c95f1c621b13d09d libxml2-2.15.2.tar.xz
# License files, locally calculated
sha256 5d4873884a890122a4b9b20ad56ac6f7da1d796a5bfcf04a427970ac96217626 Copyright

2
package/libxml2/libxml2.mk
View File

@@ -5,7 +5,7 @@
################################################################################
LIBXML2_VERSION_MAJOR = 2.15
LIBXML2_VERSION = $(LIBXML2_VERSION_MAJOR).1
LIBXML2_VERSION = $(LIBXML2_VERSION_MAJOR).2
LIBXML2_SOURCE = libxml2-$(LIBXML2_VERSION).tar.xz
LIBXML2_SITE = \
https://download.gnome.org/sources/libxml2/$(LIBXML2_VERSION_MAJOR)