openembedded-core.git/meta/recipes-core/libxml, branch krogoth

libxml2: upgrade to 2.9.4

2016-06-29T18:34:45+00:00

- Drop configure.ac-fix-cross-compiling-warning.patch,
  libxml2 2.9.4 has fixed it

(From OE-Core rev: 323c7cec65603476994dde196f4c2c151d0e0d31)

updated stable for these reasons:
this includes the following security fixes:
CVE-2016-1762
CVE-2016-3705
CVE-2016-1834
CVE-2016-4483
CVE-2016-1840
CVE-2016-1838
CVE-2016-1839
CVE-2016-1836
CVE-2016-4449
CVE-2016-1837
CVE-2016-1835
CVE-2016-1833
CVE-2016-3627

plus many bug fixes. see http://xmlsoft.org/news.html for details.

Signed-off-by: Hongxu Jia 
Signed-off-by: Richard Purdie 
Signed-off-by: Armin Kuster

libxml2: fix dependencies and QA Issues

2016-06-29T18:33:25+00:00

Fix the following QA warnings:

WARNING: libxml2-2.9.3-r0 do_package_qa: QA Issue: libxml2 rdepends on
libiconv, but it isn't a build dependency, missing libiconv in DEPENDS
or PACKAGECONFIG? [build-deps]

WARNING: libxml2-2.9.3-r0 do_package_qa: QA Issue: libxml2-python
rdepends on libiconv, but it isn't a build dependency, missing libiconv
in DEPENDS or PACKAGECONFIG? [build-deps]

(From OE-Core rev: 3d97a40cffb780cda4d4acf6d87371427912228b)

Signed-off-by: Maxin B. John 
Signed-off-by: Ross Burton 
Signed-off-by: Richard Purdie 
Signed-off-by: Armin Kuster

libxml2: fix AM_PATH_XML2

2016-04-09T06:50:25+00:00

The code: suppose $1 == 2.7:
verdep=ifelse([$1], [], [], [>= $1])
results in:
verdep=>= 2.7
This is wrong in shell:
bash: 2.7: command not found

Use quotation marks to fix the problem.

Signed-off-by: Robert Yang 
Signed-off-by: Richard Purdie

meta: more removals of redunant FILES_${PN}-dbg

2015-12-16T11:56:10+00:00

In some recipes overly-split -dbg packages were merged into PN-dbg.  Unless
there's a very good reason, recipes should have a single -dev and -dbg package.

Signed-off-by: Ross Burton

libxml2: upgrade to 2.9.3

2015-12-01T21:31:03+00:00

- Drop all the upstreamed patches
- Rework the ansidecl removal so it's contained in a single patch

Signed-off-by: Ross Burton

libxml2: merge pointless bb/inc split

2015-12-01T21:31:03+00:00

Signed-off-by: Ross Burton

libxml2: remove legacy LDFLAGS += "-ldl" workaround

2015-12-01T21:30:59+00:00

libxml2 is able to find libdl.so on its own.

Signed-off-by: Andre McCurdy 
Signed-off-by: Ross Burton

libxml2: fix CVE-2015-7942 and CVE-2015-8035

2015-11-25T07:56:57+00:00

CVE-2015-7942 libxml2: heap-based buffer overflow in xmlParseConditionalSections()
CVE-2015-8035 libxml2: DoS when parsing specially crafted XML document if XZ support is enabled

[YOCTO #8641]

Signed-off-by: Armin Kuster 
Signed-off-by: Ross Burton

libxml2: Security Advisory - libxml2 - CVE-2015-1819

2015-06-18T08:12:02+00:00

for CVE-2015-1819 Enforce the reader to run in constant memory

Signed-off-by: Yue Tao 
Signed-off-by: Wenzong Fan 
Signed-off-by: Ross Burton

libxml2: fix python path and add libxml2-python

2015-05-14T10:41:11+00:00

We have libxml2-python for native and nativesdk, but don't have it for
target, and can't find the reason from the git log, libxml2-python is
widely used, after looked into it's configure.in, we can add it
by PACKAGECONFIG.

The previous --with-python=${STAGING_BINDIR}/python is incorrect, it
acted as work becase it's conigure can check automatically, python is in
${STAGING_BINDIR_NATIVE}/${PYTHON_PN}-native/${PYTHON_PN}, as known as
${PYTHON}.

Add python to PACKAGECONFIG, since createrepo rdepends on
libxml2-python, otherwise the target createrepo can't work.

Signed-off-by: Robert Yang