Re: [Buildroot] [PATCH 1/1] package/libxml2: security bump version to 2.15.4
From: Fiona Klute via buildroot <hidden>
Date: 2026-09-05 10:42:06
Am 05.09.26 um 08:21 schrieb Bernd Kuhls:
https://download.gnome.org/sources/libxml2/2.15/libxml2-2.15.4.news Fixes the following security issues: - xmlregexp: Prevent out-of-bounds read in NXT macro - fix: add missing overflow checks in dict.c, uri.c, and valid.c - xmlregexp: Calc string length after null checking - xpointer: Check overflow in xmlXPtrEvalXPtrPart - xmlIO: Check for int overflow before calling writecallback - fix(xinclude): propagate parseFlags in xmlXIncludeProcess and xmlXIncludeProcessTree Signed-off-by: Bernd Kuhls <redacted>
Applied to master, thank you!
quoted hunk ↗ jump to hunk
--- Gitlab pipelines passed: https://gitlab.com/bkuhls/buildroot/-/commits/f81b17dfe4e6a1093d390aaa6e7f910687ced420 package/libxml2/libxml2.hash | 4 ++-- package/libxml2/libxml2.mk | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-)diff --git a/package/libxml2/libxml2.hash b/package/libxml2/libxml2.hash index 849d70cbb5..d21fa53c08 100644 --- a/package/libxml2/libxml2.hash +++ b/package/libxml2/libxml2.hash@@ -1,4 +1,4 @@ -# From https://download.gnome.org/sources/libxml2/2.15/libxml2-2.15.3.sha256sum -sha256 78262a6e7ac170d6528ebfe2efccdf220191a5af6a6cd61ea4a9a9a5042c7a07 libxml2-2.15.3.tar.xz +# From https://download.gnome.org/sources/libxml2/2.15/libxml2-2.15.4.sha256sum +sha256 98087fd181d9070724f3fbc65c7377db03038eb92bd882374daff44940138821 libxml2-2.15.4.tar.xz # License files, locally calculated sha256 5d4873884a890122a4b9b20ad56ac6f7da1d796a5bfcf04a427970ac96217626 Copyrightdiff --git a/package/libxml2/libxml2.mk b/package/libxml2/libxml2.mk index c1b5c4033c..3ca57f1d37 100644 --- a/package/libxml2/libxml2.mk +++ b/package/libxml2/libxml2.mk@@ -5,7 +5,7 @@ ################################################################################ LIBXML2_VERSION_MAJOR = 2.15 -LIBXML2_VERSION = $(LIBXML2_VERSION_MAJOR).3 +LIBXML2_VERSION = $(LIBXML2_VERSION_MAJOR).4 LIBXML2_SOURCE = libxml2-$(LIBXML2_VERSION).tar.xz LIBXML2_SITE = \ https://download.gnome.org/sources/libxml2/$(LIBXML2_VERSION_MAJOR)
_______________________________________________ buildroot mailing list buildroot@buildroot.org https://lists.buildroot.org/mailman/listinfo/buildroot