xerces: security bump to version 3.1.3
authorGustavo Zacarias <gustavo@zacarias.com.ar>
Mon, 29 Feb 2016 15:27:10 +0000 (12:27 -0300)
committerThomas Petazzoni <thomas.petazzoni@free-electrons.com>
Mon, 29 Feb 2016 20:43:49 +0000 (21:43 +0100)
Fixes:
CVE-2016-0729 - Apache Xerces-C XML Parser Crashes on Malformed Input

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
package/xerces/xerces.hash
package/xerces/xerces.mk

index 6f4c26724c8014b6479f8ab0ca4845d37f71f632..639e6685345ca0aa65ad4f2f4ee7b109f5e2b500 100644 (file)
@@ -1,2 +1,2 @@
-# From http://www.apache.org/dist/xerces/c/3/sources/xerces-c-3.1.2.tar.xz.sha256
-sha256 a847529ab6125f36039f54fa61f3d5043791accf7da2f43917cd2b49deb768f1 xerces-c-3.1.2.tar.xz
+# From http://www.apache.org/dist/xerces/c/3/sources/xerces-c-3.1.3.tar.xz.sha256
+sha256 d35ae442db333f73c7ef41b2ce2e33bc8aba8dbacf582af765eda26415d25c94 xerces-c-3.1.3.tar.xz
index e57949a1ad35ecff9771227b50831e6986661850..b69f47c072481a62c3f8b98ac698275df98e0046 100644 (file)
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-XERCES_VERSION = 3.1.2
+XERCES_VERSION = 3.1.3
 XERCES_SOURCE = xerces-c-$(XERCES_VERSION).tar.xz
 XERCES_SITE = http://archive.apache.org/dist/xerces/c/3/sources
 XERCES_LICENSE = Apache-2.0