[oe] [meta-oe][PATCH 3/3] xerces-c: Package update, QA fix and CVE-2016-0729

Armin Kuster akuster808 at gmail.com
Fri Feb 26 00:55:09 UTC 2016


includes;
CVE-2016-0729: Apache Xerces-C XML Parser Crashes on Malformed Input

Also  fixes;

ERROR: xerces-c-3.1.3-r0 do_populate_sysroot: QA Issue: xerces-c.pc failed sanity test (tmpdir) in path /home/akuster/oss/maint/mylayers/poky/build/tmp/work/armv5e-poky-linux-gnueabi/xerces-c/3.1.3-r0/sysroot-destdir/usr/lib/pkgconfig [pkgconfig]

Signed-off-by: Armin Kuster <akuster808 at gmail.com>
---
 .../xerces-c/{xerces-c_3.1.2.bb => xerces-c_3.1.3.bb}        | 12 +++++++-----
 1 file changed, 7 insertions(+), 5 deletions(-)
 rename meta-oe/recipes-devtools/xerces-c/{xerces-c_3.1.2.bb => xerces-c_3.1.3.bb} (84%)

diff --git a/meta-oe/recipes-devtools/xerces-c/xerces-c_3.1.2.bb b/meta-oe/recipes-devtools/xerces-c/xerces-c_3.1.3.bb
similarity index 84%
rename from meta-oe/recipes-devtools/xerces-c/xerces-c_3.1.2.bb
rename to meta-oe/recipes-devtools/xerces-c/xerces-c_3.1.3.bb
index 6e870dd..2355c9d 100644
--- a/meta-oe/recipes-devtools/xerces-c/xerces-c_3.1.2.bb
+++ b/meta-oe/recipes-devtools/xerces-c/xerces-c_3.1.3.bb
@@ -10,14 +10,19 @@ LICENSE = "Apache-2.0"
 LIC_FILES_CHKSUM = "file://LICENSE;md5=3b83ef96387f14655fc854ddc3c6bd57"
 
 SRC_URI = "http://apache.lauf-forum.at/xerces/c/3/sources/${BP}.tar.bz2"
-SRC_URI[md5sum] = "d987b8bb576aea456e92454781fe3615"
-SRC_URI[sha256sum] = "95d8655c4c50668ad60d555b59da9f31937b2c53638aa8d5768cb169f192d5e1"
+SRC_URI[md5sum] = "5e333b55cb43e6b025ddf0e5d0f0fb0d"
+SRC_URI[sha256sum] = "fc5e5e0247b108b8d64d75aeb124cabdee9b7fcd725a89fe2242b4637b25c1fa"
 
 inherit autotools
 
 PACKAGECONFIG ??= "curl icu"
 PACKAGECONFIG[curl] = "--with-curl=${STAGING_DIR},--with-curl=no,curl"
 PACKAGECONFIG[icu] = "--with-icu=${STAGING_DIR},--with-icu=no,icu"
+
+do_install_prepend () {
+        sed -i -e 's:-L${STAGING_DIR}/lib:-L\$\{libdir\}:g' ${B}/xerces-c.pc
+}
+
 PACKAGES = "libxerces-c \
             libxerces-c-dbg \
             libxerces-c-dev \
@@ -39,6 +44,3 @@ FILES_xerces-c-samples-dbg = "${bindir}/.debug/"
 FILES_libxerces-c-staticdev = "${libdir}/lib*.a"
 
 BBCLASSEXTEND = "native"
-
-# http://errors.yoctoproject.org/Errors/Details/35144/
-PNBLACKLIST[xerces-c] ?= "BROKEN: QA Issue: xerces-c.pc failed sanity test (tmpdir)"
-- 
2.3.5




More information about the Openembedded-devel mailing list