Staging tree of Nora Schiffer https://git.openwrt.org/openwrt/staging/neocturne/atom?h=main 2024-04-27T21:37:57Z 2024-04-27T21:37:57Z Fabrice Fontaine 2024-04-26T09:24:41Z urn:sha1:ff59f3f4bdb56c779579aaa11b815f4c83abbac5 cpe:/a:libexpat_project:libexpat is the correct CPE ID for expat: https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:libexpat:libexpat Fixes: c61a2395140d92cdd37d3d6ee43a765427e8e318 (add PKG_CPE_ID ids to package and tools) Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Link: https://github.com/openwrt/openwrt/pull/15291 Signed-off-by: Robert Marko <robimarko@gmail.com> 2024-04-06T09:24:18Z Robert Marko 2024-04-03T17:12:57Z urn:sha1:bab3ae2ee7656600a185f4cef11cef94389023af In the light of recent XZ events, and fundamental XZ issues lets work on moving away from using XZ. So, use gz compressed tarballs as sources whenever possible. dwarves only offers bz2 compressed tarballs, so use those as size difference is minor compared to XZ. Signed-off-by: Robert Marko <robimarko@gmail.com> dwarves 2024-03-26T09:37:37Z Josef Schlehofer 2024-03-26T09:37:37Z urn:sha1:80b2288ea3234958e78761cc4720c03d4072d830 Release notes: https://github.com/libexpat/libexpat/blob/R_2_6_2/expat/Changes Fixes: CVE-2024-28757 Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com> 2024-02-15T11:02:20Z Koen Vandeputte 2024-02-15T10:52:29Z urn:sha1:f3cbdaec29253eafdd4bea75c1af73fc6230853e Disable compilation of separate tests as it causes a build error when combined with ccache Fixes: 4a3f430d72 ("tools/expat: update to 2.6.0") Signed-off-by: Koen Vandeputte <koen.vandeputte@citymesh.com> 2024-02-12T08:57:08Z Nick Hainke 2024-02-12T00:02:06Z urn:sha1:4a3f430d726e0713f4936844f26ccaf5077ef881 Changelog: https://github.com/libexpat/libexpat/blob/R_2_6_0/expat/Changes Signed-off-by: Nick Hainke <vincent@systemli.org> 2022-10-31T20:27:48Z Nick Hainke 2022-10-26T08:43:19Z urn:sha1:23a456aef1ac5c66f7bc5dc45ba2bc5980dbc513 Fixes CVE-2022-43680. Changes: https://github.com/libexpat/libexpat/blob/R_2_5_0/expat/Changes Signed-off-by: Nick Hainke <vincent@systemli.org> 2022-10-02T14:16:07Z Nick Hainke 2022-10-02T09:22:23Z urn:sha1:107f82292b3eff2415c2a2aaf802b739528eb94d The tar.xz download is a bit smaller. Use this download to save traffic. Suggested-by: hardfalcon Signed-off-by: Nick Hainke <vincent@systemli.org> 2022-10-02T14:16:07Z Nick Hainke 2022-09-30T06:27:44Z urn:sha1:1b3a524e1d6be1d7e3cc863a72bb68210784117d Fixes CVE-2022-40674. Release Notes: https://github.com/libexpat/libexpat/blob/R_2_4_9/expat/Changes Signed-off-by: Nick Hainke <vincent@systemli.org> 2022-09-29T17:33:17Z Rosen Penev 2022-09-25T00:11:52Z urn:sha1:89df3589e6237e5ad9b5cdd9f87c82987b200e37 Allows to set expat as a dependency to cmake and save on compilation time. Signed-off-by: Rosen Penev <rosenp@gmail.com> 2022-09-07T03:22:39Z Nick Hainke 2022-08-29T05:48:53Z urn:sha1:46dc7e63c43105c6ce2bc95bb52d6fa8a3e5f9be Release Notes: https://github.com/libexpat/libexpat/blob/R_2_4_8/expat/Changes Signed-off-by: Nick Hainke <vincent@systemli.org>