[arch-commits] Commit in expat/trunk (CVE-2009-3560.patch PKGBUILD)

Allan McRae allan at archlinux.org
Tue Jan 12 18:27:10 EST 2010


    Date: Tuesday, January 12, 2010 @ 18:27:10
  Author: allan
Revision: 62836

upgpkg: expat 2.0.1-5
    updated fix for CVE-2009-3560

Modified:
  expat/trunk/CVE-2009-3560.patch
  expat/trunk/PKGBUILD

---------------------+
 CVE-2009-3560.patch |   24 +++++++++++++-----------
 PKGBUILD            |    4 ++--
 2 files changed, 15 insertions(+), 13 deletions(-)

Modified: CVE-2009-3560.patch
===================================================================
--- CVE-2009-3560.patch	2010-01-12 23:05:41 UTC (rev 62835)
+++ CVE-2009-3560.patch	2010-01-12 23:27:10 UTC (rev 62836)
@@ -1,11 +1,13 @@
-diff -Naur expat-2.0.1-old/lib/xmlparse.c expat-2.0.1/lib/xmlparse.c
---- expat-2.0.1-old/lib/xmlparse.c	2007-05-08 12:25:35.000000000 +1000
-+++ expat-2.0.1/lib/xmlparse.c	2009-12-13 17:26:52.000000000 +1000
-@@ -3725,7 +3725,6 @@
-         return XML_ERROR_NO_ELEMENTS;
-       default:
-         tok = -tok;
--        next = end;
-         break;
-       }
-     }
+diff -urNad trunk~/lib/xmlparse.c trunk/lib/xmlparse.c
+--- trunk~/lib/xmlparse.c	2007-05-08 04:25:35.000000000 +0200
++++ trunk/lib/xmlparse.c	2009-12-29 21:57:22.141732904 +0100
+@@ -3703,6 +3703,9 @@
+         return XML_ERROR_UNCLOSED_TOKEN;
+       case XML_TOK_PARTIAL_CHAR:
+         return XML_ERROR_PARTIAL_CHAR;
++      case -XML_TOK_PROLOG_S:
++        tok = -tok;
++        break;
+       case XML_TOK_NONE:
+ #ifdef XML_DTD
+         /* for internal PE NOT referenced between declarations */

Modified: PKGBUILD
===================================================================
--- PKGBUILD	2010-01-12 23:05:41 UTC (rev 62835)
+++ PKGBUILD	2010-01-12 23:27:10 UTC (rev 62836)
@@ -4,7 +4,7 @@
 
 pkgname=expat
 pkgver=2.0.1
-pkgrel=4
+pkgrel=5
 pkgdesc="An XML Parser library written in C"
 arch=('i686' 'x86_64')
 url="http://expat.sourceforge.net/"
@@ -15,7 +15,7 @@
         CVE-2009-3560.patch
         CVE-2009-3720.patch)
 md5sums=('ee8b492592568805593f81f8cdf2a04c'
-         '50aa6f7693fda07f4720a0495d12e695'
+         '50603cac0f03aabc7087415251f592be'
          'f3eeb796f28945899216b815e5901996')
 
 build() {



More information about the arch-commits mailing list