Adolf Belka ed30cc9f13
expat: Update to version 2.4.4 ...
- Update from 2.4.2 to 2.4.4
- Update of rootfile
- Changelog
Release 2.4.4 Sun January 30 2022
Security fixes:
#550 CVE-2022-23852 -- Fix signed integer overflow
(undefined behavior) in function XML_GetBuffer
(that is also called by function XML_Parse internally)
for when XML_CONTEXT_BYTES is defined to >0 (which is both
common and default).
Impact is denial of service or more.
#551 CVE-2022-23990 -- Fix unsigned integer overflow in function
doProlog triggered by large content in element type
declarations when there is an element declaration handler
present (from a prior call to XML_SetElementDeclHandler).
Impact is denial of service or more.
Bug fixes:
#544 #545 xmlwf: Fix a memory leak on output file opening error
Other changes:
#546 Autotools: Fix broken CMake support under Cygwin
#554 Windows: Add missing files to the installer to fix
compilation with CMake from installed sources
#552 #554 Version info bumped from 9:3:8 to 9:4:8;
see https://verbump.de/ for what these numbers do
Release 2.4.3 Sun January 16 2022
Security fixes:
#531 #534 CVE-2021-45960 -- Fix issues with left shifts by >=29 places
resulting in
a) realloc acting as free
b) realloc allocating too few bytes
c) undefined behavior
depending on architecture and precise value
for XML documents with >=2^27+1 prefixed attributes
on a single XML tag a la
"<r xmlns:a='[..]' a:a123='[..]' [..] />"
where XML_ParserCreateNS is used to create the parser
(which needs argument "-n" when running xmlwf).
Impact is denial of service, or more.
#532 #538 CVE-2021-46143 (ZDI-CAN-16157) -- Fix integer overflow
on variable m_groupSize in function doProlog leading
to realloc acting as free.
Impact is denial of service or more.
#539 CVE-2022-22822 to CVE-2022-22827 -- Prevent integer overflows
near memory allocation at multiple places. Mitre assigned
a dedicated CVE for each involved internal C function:
- CVE-2022-22822 for function addBinding
- CVE-2022-22823 for function build_model
- CVE-2022-22824 for function defineAttribute
- CVE-2022-22825 for function lookup
- CVE-2022-22826 for function nextScaffoldPart
- CVE-2022-22827 for function storeAtts
Impact is denial of service or more.
Other changes:
#535 CMake: Make call to file(GENERATE [..]) work for CMake <3.19
#541 Autotools|CMake: MinGW: Make run.sh(.in) work for Cygwin
and MSYS2 by not going through Wine on these platforms
#527 #528 Address compiler warnings
#533 #543 Version info bumped from 9:2:8 to 9:3:8;
see https://verbump.de/ for what these numbers do
Infrastructure:
#536 CI: Check for realistic minimum CMake version
#529 #539 CI: Cover compilation with -m32
#529 CI: Store coverage reports as artifacts for download
#528 CI: Upgrade Clang from 11 to 13
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org >
Reviewed-by: Peter Müller <peter.mueller@ipfire.org >
2022-02-06 17:15:34 +00:00
2022-02-05 12:14:11 +00:00
2022-02-05 12:14:11 +00:00
2022-02-05 12:14:11 +00:00
2021-03-18 11:19:43 +00:00
2018-04-14 18:42:00 +02:00
2021-12-28 23:01:48 +01:00
2020-03-21 16:14:08 +00:00
2018-04-11 20:03:53 +01:00
2021-04-02 16:19:28 +00:00
2021-04-02 16:18:49 +00:00
2015-12-13 22:28:15 +00:00
2021-03-18 11:20:32 +00:00
2021-02-12 11:54:42 +00:00
2020-05-01 19:08:38 +00:00
2021-04-10 13:37:50 +00:00
2017-06-07 09:55:27 +01:00
2020-05-09 12:03:23 +00:00
2021-04-02 16:18:20 +00:00
2022-01-25 16:39:02 +00:00
2021-11-24 09:09:47 +00:00
2017-09-22 18:56:04 +01:00
2013-08-28 11:18:37 +02:00
2021-03-29 12:53:09 +00:00
2021-09-10 16:57:06 +00:00
2020-03-21 15:44:08 +00:00
2021-04-20 09:05:03 +00:00
2018-07-14 13:43:49 +01:00
2015-08-21 21:08:02 +01:00
2021-05-06 09:54:21 +00:00
2021-10-13 16:36:59 +00:00
2019-05-27 14:39:32 +01:00
2021-04-02 16:17:50 +00:00
2021-12-19 13:23:44 +01:00
2021-06-03 09:16:30 +00:00
2021-04-02 16:16:53 +00:00
2021-04-20 09:04:34 +00:00
2021-11-19 07:03:31 +01:00
2019-12-02 17:10:15 +00:00
2021-04-02 16:15:28 +00:00
2022-02-06 17:13:54 +00:00
2018-02-11 22:19:45 +00:00
2020-02-17 08:50:46 +00:00
2021-04-20 09:06:45 +00:00
2018-06-25 10:54:36 +01:00
2020-04-12 08:16:28 +02:00
2017-04-17 12:36:49 +01:00
2021-04-20 09:07:51 +00:00
2021-04-02 16:14:17 +00:00
2021-04-02 16:13:04 +00:00
2021-05-17 20:48:54 +00:00
2021-10-22 09:59:20 +00:00
2014-09-04 11:35:03 +02:00
2015-01-02 00:49:34 +01:00
2021-09-05 17:48:28 +00:00
2021-03-29 12:54:50 +00:00
2020-02-18 06:01:44 +00:00
2021-05-20 09:47:41 +00:00
2021-10-22 10:14:51 +00:00
2022-02-06 17:15:34 +00:00
2021-10-22 16:04:09 +00:00
2021-02-03 22:23:13 +00:00
2020-11-05 23:29:18 +00:00
2021-12-09 21:04:50 +01:00
2021-05-18 13:52:11 +00:00
2015-05-03 21:51:04 +02:00
2017-06-07 09:55:16 +01:00
2020-09-24 17:36:37 +00:00
2013-04-12 12:43:27 +02:00
2022-01-14 13:40:48 +00:00
2021-12-09 21:08:10 +01:00
2021-06-17 20:02:19 +00:00
2021-11-19 07:16:02 +01:00
2021-10-22 16:02:22 +00:00
2021-04-02 16:12:33 +00:00
2021-04-02 16:12:02 +00:00
2022-01-04 18:15:33 +01:00
2022-01-14 13:46:00 +00:00
2021-04-07 13:12:27 +00:00
2022-02-06 10:52:21 +00:00
2021-04-07 13:13:18 +00:00
2016-08-23 13:04:47 -04:00
2021-06-04 10:46:43 +00:00
2013-07-03 21:38:17 +02:00
2012-08-20 11:39:23 +02:00
2019-03-13 15:04:40 +01:00
2020-04-30 14:52:53 +00:00
2021-12-09 21:08:06 +01:00
2018-02-11 20:56:12 +00:00
2021-04-02 16:09:45 +00:00
2021-04-02 16:09:20 +00:00
2021-04-02 16:08:09 +00:00
2018-07-12 10:03:34 +01:00
2018-02-16 20:01:55 +00:00
2019-02-14 11:43:31 +01:00
2018-07-20 12:03:09 +00:00
2021-05-20 09:39:12 +00:00
2021-04-02 16:07:46 +00:00
2021-04-02 16:07:10 +00:00
2022-02-06 10:53:02 +00:00
2021-01-29 11:14:22 +00:00
2021-01-25 21:23:49 +00:00
2021-05-25 09:49:21 +00:00
2021-11-24 09:05:10 +00:00
2022-02-01 13:50:32 +00:00
2013-10-15 16:46:15 +02:00
2018-10-26 11:23:55 +00:00
2020-08-16 10:29:42 +00:00
2018-10-22 19:51:19 +01:00
2022-01-14 13:35:13 +00:00
2021-11-19 07:07:18 +01:00
2021-02-09 11:38:48 +00:00
2012-08-24 16:22:24 +02:00
2018-10-21 22:17:54 +01:00
2021-12-03 22:34:06 +01:00
2014-12-07 15:23:57 +01:00
2022-02-06 10:49:07 +00:00
2021-04-26 17:08:53 +00:00
2018-11-19 18:58:48 +00:00
2021-12-03 22:38:14 +01:00
2021-04-26 17:10:13 +00:00
2021-11-19 07:16:19 +01:00
2021-12-03 22:32:59 +01:00
2022-02-06 10:49:58 +00:00
2019-12-29 19:09:27 +00:00
2021-09-05 08:55:40 +00:00
2021-04-30 14:18:02 +00:00
2021-04-27 07:58:56 +00:00
2021-12-14 10:45:43 +01:00
2016-09-24 13:07:13 +01:00
2021-04-07 13:14:11 +00:00
2015-12-11 18:47:20 +00:00
2018-07-01 12:35:53 +01:00
2015-06-23 14:01:44 +02:00
2015-06-23 13:56:46 +02:00
2020-09-24 17:36:38 +00:00
2015-06-23 13:37:57 +02:00
2013-08-27 20:20:47 +02:00
2021-06-04 10:48:35 +00:00
2021-04-02 16:00:11 +00:00
2021-06-12 09:32:19 +00:00
2020-04-26 07:29:59 +00:00
2014-08-20 21:45:12 +02:00
2021-09-10 16:57:06 +00:00
2021-07-09 06:01:27 +00:00
2021-12-03 22:30:24 +01:00
2015-02-01 17:39:33 +01:00
2021-12-03 18:27:07 +01:00
2022-01-14 20:45:24 +00:00
2015-06-18 13:23:55 +02:00
2021-11-24 09:30:22 +00:00
2022-01-29 09:40:36 +00:00
2021-02-22 11:28:11 +00:00
2022-01-14 13:44:08 +00:00
2022-01-14 13:43:33 +00:00
2022-01-25 16:35:05 +00:00
2018-02-11 20:56:12 +00:00
2022-01-05 20:11:37 +01:00
2020-09-24 17:36:38 +00:00
2017-04-28 13:04:19 +01:00
2021-10-22 10:43:11 +00:00
2022-02-06 10:50:43 +00:00
2020-01-16 18:22:51 +00:00
2021-02-09 11:51:38 +00:00
2021-02-05 11:24:35 +00:00
2021-02-09 12:00:04 +00:00
2021-12-03 22:51:39 +01:00
2021-04-02 16:06:18 +00:00
2020-01-04 18:23:52 +00:00
2021-12-03 22:26:23 +01:00
2021-04-02 16:06:50 +00:00
2021-01-27 21:06:57 +00:00
2013-10-24 15:20:48 +02:00
2020-08-16 10:29:43 +00:00
2018-07-02 19:10:36 +01:00
2012-08-07 20:21:06 +02:00
2021-12-03 22:24:16 +01:00
2021-04-02 16:03:20 +00:00
2022-01-15 11:28:04 +00:00
2021-04-02 16:05:28 +00:00
2021-04-02 16:04:41 +00:00
2021-04-02 16:04:01 +00:00
2021-02-08 13:51:04 +00:00
2021-06-10 12:22:59 +00:00
2021-07-05 07:42:40 +02:00
2020-12-27 10:29:55 +00:00
2018-06-30 19:51:38 +01:00
2018-10-22 14:58:29 +01:00
2016-01-10 21:18:20 +00:00
2018-08-03 13:48:46 +02:00
2020-09-24 17:36:37 +00:00
2020-05-09 12:03:02 +00:00
2021-05-17 14:07:33 +00:00
2022-02-05 11:59:24 +00:00
2021-11-19 07:11:50 +01:00
2021-09-10 16:57:06 +00:00
2018-04-02 15:46:40 +01:00
2021-12-03 18:25:39 +01:00
2021-12-09 21:08:00 +01:00
2021-03-22 10:42:07 +00:00
2014-07-23 22:57:47 +02:00
2022-01-25 16:38:09 +00:00
2021-08-16 06:52:19 +00:00
2022-01-14 13:38:23 +00:00
2021-04-02 15:38:46 +00:00
2021-04-02 15:59:17 +00:00
2021-04-02 15:58:45 +00:00
2021-05-05 11:26:56 +00:00
2021-04-02 15:58:00 +00:00
2021-04-02 15:57:37 +00:00
2021-04-02 15:57:04 +00:00
2021-04-02 15:55:51 +00:00
2021-04-02 15:55:15 +00:00
2021-04-02 15:53:43 +00:00
2021-10-22 16:02:56 +00:00
2021-04-02 15:52:31 +00:00
2021-04-02 15:52:08 +00:00
2021-04-02 15:51:30 +00:00
2021-04-02 15:50:51 +00:00
2021-04-02 15:50:03 +00:00
2021-04-02 15:49:25 +00:00
2021-04-02 15:48:54 +00:00
2021-04-02 15:46:08 +00:00
2014-08-23 16:00:08 +02:00
2021-04-20 09:09:59 +00:00
2022-02-05 12:02:53 +00:00
2021-04-10 13:39:32 +00:00
2020-08-17 17:55:35 +00:00
2021-10-22 10:54:07 +00:00
2020-12-27 10:55:03 +00:00
2022-01-14 19:15:45 +00:00
2021-05-14 13:22:09 +00:00
2021-05-14 11:42:06 +00:00
2020-01-11 14:35:11 +01:00
2021-12-03 22:47:55 +01:00
2019-05-27 14:40:03 +01:00
2021-04-10 13:37:23 +00:00
2017-05-19 17:44:13 +01:00
2019-12-29 19:14:30 +00:00
2014-01-29 17:22:48 +01:00
2020-08-16 10:29:42 +00:00
2021-04-02 15:45:29 +00:00
2022-02-02 19:43:25 +00:00
2022-02-02 19:43:26 +00:00
2022-02-02 19:43:25 +00:00
2022-02-02 19:43:24 +00:00
2022-02-02 19:43:24 +00:00
2022-02-02 19:43:26 +00:00
2022-02-02 19:43:26 +00:00
2022-02-02 19:43:26 +00:00
2022-02-02 19:43:26 +00:00
2022-02-02 19:43:25 +00:00
2022-02-02 19:43:27 +00:00
2022-02-02 19:43:25 +00:00
2022-02-02 19:43:25 +00:00
2022-02-02 19:43:24 +00:00
2022-02-02 19:43:26 +00:00
2022-02-02 19:43:24 +00:00
2022-02-02 19:43:24 +00:00
2022-02-02 19:43:27 +00:00
2022-02-02 19:43:26 +00:00
2022-02-02 19:43:25 +00:00
2022-02-02 19:43:25 +00:00
2022-02-02 19:43:27 +00:00
2022-02-02 19:43:27 +00:00
2022-02-02 19:43:27 +00:00
2022-02-02 19:43:27 +00:00
2022-02-02 19:43:27 +00:00
2022-02-02 19:43:25 +00:00
2022-02-02 19:43:25 +00:00
2022-02-02 19:43:24 +00:00
2022-02-02 19:43:27 +00:00
2022-02-02 19:43:26 +00:00
2022-02-02 19:43:25 +00:00
2022-02-02 19:43:26 +00:00
2022-02-02 19:43:26 +00:00
2022-02-02 19:43:26 +00:00
2022-02-02 19:43:27 +00:00
2022-02-02 19:43:27 +00:00
2022-02-02 19:43:27 +00:00
2022-02-02 19:43:27 +00:00
2022-02-02 19:43:25 +00:00
2022-02-02 19:43:25 +00:00
2022-02-02 19:43:25 +00:00
2022-02-02 19:43:27 +00:00
2022-02-02 19:43:27 +00:00
2022-02-02 19:43:27 +00:00
2022-02-02 19:43:27 +00:00
2022-02-02 19:43:25 +00:00
2022-02-02 19:43:26 +00:00
2022-02-02 19:43:26 +00:00
2022-02-02 19:43:26 +00:00
2022-02-02 19:43:26 +00:00
2022-02-02 19:43:26 +00:00
2022-02-02 19:43:26 +00:00
2022-02-02 19:43:26 +00:00
2022-02-02 19:43:26 +00:00
2022-02-02 19:43:26 +00:00
2022-02-02 19:43:26 +00:00
2022-02-02 19:43:25 +00:00
2022-02-02 19:43:25 +00:00
2022-02-02 19:43:26 +00:00
2022-02-02 19:43:25 +00:00
2022-02-02 19:43:25 +00:00
2022-02-02 19:43:26 +00:00
2022-02-02 19:43:25 +00:00
2022-02-02 19:43:25 +00:00
2022-02-02 19:43:25 +00:00
2022-02-02 19:43:27 +00:00
2022-02-02 19:43:25 +00:00
2022-02-02 19:43:27 +00:00
2022-02-02 19:43:25 +00:00
2022-02-02 19:43:25 +00:00
2022-02-02 19:43:26 +00:00
2022-02-02 19:43:26 +00:00
2022-02-02 19:43:26 +00:00
2022-02-02 19:43:25 +00:00
2022-02-02 19:43:27 +00:00
2022-02-02 19:43:24 +00:00
2022-02-02 19:43:25 +00:00
2022-02-02 19:43:25 +00:00
2022-02-02 19:43:27 +00:00
2022-02-02 19:43:24 +00:00
2022-02-02 19:43:25 +00:00
2021-02-01 10:45:45 +00:00
2016-04-27 12:56:23 +01:00
2012-08-12 16:39:18 -04:00
2018-07-12 10:03:34 +01:00
2022-01-18 21:23:42 +00:00
2021-11-24 09:37:51 +00:00
2020-03-29 06:34:18 +00:00
2021-09-10 16:57:06 +00:00
2021-03-10 13:59:29 +00:00
2022-01-14 20:25:49 +00:00
2021-10-13 12:13:04 +00:00
2021-01-06 15:21:42 +00:00
2020-04-01 14:40:39 +00:00
2022-02-06 10:53:35 +00:00
2022-01-14 19:15:45 +00:00
2021-03-22 10:40:15 +00:00
2021-09-05 08:42:10 +00:00
2017-01-29 19:30:13 +00:00
2021-09-02 09:28:30 +00:00
2021-03-11 14:57:21 +00:00
2014-11-22 23:43:46 +01:00
2022-01-15 11:28:04 +00:00
2021-09-02 09:18:54 +00:00
2021-08-16 06:27:12 +00:00
2020-11-05 23:30:38 +00:00
2017-10-04 12:47:28 +01:00
2022-01-16 15:17:50 +00:00
2021-12-13 12:53:04 +01:00
2021-12-03 22:51:00 +01:00
2017-04-06 10:06:08 +01:00
2021-12-03 22:52:27 +01:00
2014-01-10 20:30:13 +01:00
2020-11-06 10:13:19 +00:00
2022-01-14 14:41:58 +00:00
2020-08-29 18:08:57 +00:00
2020-04-30 14:56:49 +00:00
2022-01-14 14:39:46 +00:00
2013-12-26 14:03:31 +01:00
2016-07-16 10:53:53 +01:00
2021-11-24 09:42:11 +00:00
2021-04-26 17:04:00 +00:00
2021-09-10 07:27:23 +00:00
2021-04-26 10:07:56 +00:00
2021-05-31 12:38:04 +00:00
2018-03-26 07:29:51 +02:00
2021-11-05 17:18:10 +01:00
2020-03-23 18:38:17 +00:00
2020-10-15 15:33:44 +00:00
2017-01-24 14:29:28 +00:00
2022-02-05 12:01:49 +00:00
ed30cc9f13