[arch-commits] Commit in expat/trunk (CVE-2009-3560.patch PKGBUILD)
Allan McRae
allan at archlinux.org
Tue Jan 12 23:27:10 UTC 2010
Date: Tuesday, January 12, 2010 @ 18:27:10
Author: allan
Revision: 62836
upgpkg: expat 2.0.1-5
updated fix for CVE-2009-3560
Modified:
expat/trunk/CVE-2009-3560.patch
expat/trunk/PKGBUILD
---------------------+
CVE-2009-3560.patch | 24 +++++++++++++-----------
PKGBUILD | 4 ++--
2 files changed, 15 insertions(+), 13 deletions(-)
Modified: CVE-2009-3560.patch
===================================================================
--- CVE-2009-3560.patch 2010-01-12 23:05:41 UTC (rev 62835)
+++ CVE-2009-3560.patch 2010-01-12 23:27:10 UTC (rev 62836)
@@ -1,11 +1,13 @@
-diff -Naur expat-2.0.1-old/lib/xmlparse.c expat-2.0.1/lib/xmlparse.c
---- expat-2.0.1-old/lib/xmlparse.c 2007-05-08 12:25:35.000000000 +1000
-+++ expat-2.0.1/lib/xmlparse.c 2009-12-13 17:26:52.000000000 +1000
-@@ -3725,7 +3725,6 @@
- return XML_ERROR_NO_ELEMENTS;
- default:
- tok = -tok;
-- next = end;
- break;
- }
- }
+diff -urNad trunk~/lib/xmlparse.c trunk/lib/xmlparse.c
+--- trunk~/lib/xmlparse.c 2007-05-08 04:25:35.000000000 +0200
++++ trunk/lib/xmlparse.c 2009-12-29 21:57:22.141732904 +0100
+@@ -3703,6 +3703,9 @@
+ return XML_ERROR_UNCLOSED_TOKEN;
+ case XML_TOK_PARTIAL_CHAR:
+ return XML_ERROR_PARTIAL_CHAR;
++ case -XML_TOK_PROLOG_S:
++ tok = -tok;
++ break;
+ case XML_TOK_NONE:
+ #ifdef XML_DTD
+ /* for internal PE NOT referenced between declarations */
Modified: PKGBUILD
===================================================================
--- PKGBUILD 2010-01-12 23:05:41 UTC (rev 62835)
+++ PKGBUILD 2010-01-12 23:27:10 UTC (rev 62836)
@@ -4,7 +4,7 @@
pkgname=expat
pkgver=2.0.1
-pkgrel=4
+pkgrel=5
pkgdesc="An XML Parser library written in C"
arch=('i686' 'x86_64')
url="http://expat.sourceforge.net/"
@@ -15,7 +15,7 @@
CVE-2009-3560.patch
CVE-2009-3720.patch)
md5sums=('ee8b492592568805593f81f8cdf2a04c'
- '50aa6f7693fda07f4720a0495d12e695'
+ '50603cac0f03aabc7087415251f592be'
'f3eeb796f28945899216b815e5901996')
build() {
More information about the arch-commits
mailing list