Skip to contentSkip to conversation

xerces: security bump to version 3.1.3

PATCH New Gustavo Zacarias 2 participants 2 messages Feb 29, 2016

lore
Share & tools
lore

Gustavo Zacarias

author
#0 lore raw

PATCH 1/1 xerces: security bump to version 3.1.3

Fixes:
CVE-2016-0729 - Apache Xerces-C XML Parser Crashes on Malformed Input

Signed-off-by Gustavo Zacarias <[email protected]>
---
 package/xerces/xerces.hash | 4 ++--
 package/xerces/xerces.mk   | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)
package/xerces/xerces.hash +2 -2
index 6f4c267..639e668 100644
@@ -1,2 +1,2 @@
-# From http://www.apache.org/dist/xerces/c/3/sources/xerces-c-3.1.2.tar.xz.sha256
-sha256 a847529ab6125f36039f54fa61f3d5043791accf7da2f43917cd2b49deb768f1 xerces-c-3.1.2.tar.xz
+# From http://www.apache.org/dist/xerces/c/3/sources/xerces-c-3.1.3.tar.xz.sha256
+sha256 d35ae442db333f73c7ef41b2ce2e33bc8aba8dbacf582af765eda26415d25c94 xerces-c-3.1.3.tar.xz
package/xerces/xerces.mk +1 -1
index d04c406..e7f57b3 100644
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-XERCES_VERSION = 3.1.2
+XERCES_VERSION = 3.1.3
 XERCES_SOURCE = xerces-c-$(XERCES_VERSION).tar.xz
 XERCES_SITE = http://archive.apache.org/dist/xerces/c/3/sources
 XERCES_LICENSE = Apache-2.0
Signature · 1 line
2.4.10
Applied
#1 lore raw

PATCH 1/1 xerces: security bump to version 3.1.3

Dear Gustavo Zacarias,

Quoted 8 lines · Gustavo Zacarias

Fixes:
CVE-2016-0729 - Apache Xerces-C XML Parser Crashes on Malformed Input

Signed-off-by Gustavo Zacarias <[email protected]>
---
 package/xerces/xerces.hash | 4 ++--
 package/xerces/xerces.mk   | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

Applied to master, thanks.

Thomas

Signature · 3 lines
Thomas Petazzoni, CTO, Free Electrons
Embedded Linux, Kernel and Android engineering
http://free-electrons.com