Pisilinux/core
5
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

create core package

Browse Source
This commit is contained in:
aydemir
2015-02-24 11:18:35 +02:00
parent 0e4b743b82
commit 70b25d0f95
1098 changed files with 169545 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
system/base/libxml2/actions.py
+44
View File
@@ -0,0 +1,44 @@
#!/usr/bin/python
# -*- coding: utf-8 -*-
#
# Licensed under the GNU General Public License, version 3.
# See the file http://www.gnu.org/licenses/gpl.txt
from pisi.actionsapi import get
from pisi.actionsapi import autotools
from pisi.actionsapi import pisitools
def setup():
# fix sandbox violations when attempt to read "/missing.xml"
pisitools.dosed("testapi.c", "\/missing.xml", "missing.xml")
options = "--with-zlib \
--with-readline \
--enable-ipv6 \
--disable-static \
--with-threads \
--with-history \
"
if get.buildTYPE() == "emul32":
options += " --bindir=/emul32/bin \
--without-python"
else: options += " --with-python"
autotools.configure(options)
pisitools.dosed("libtool"," -shared ", " -Wl,--as-needed -shared ")
def build():
autotools.make()
def check():
autotools.make("check")
def install():
autotools.rawInstall("DESTDIR=%s" % get.installDIR())
if get.buildTYPE() == "emul32":
pisitools.removeDir("/usr/share/gtk-doc")
return
pisitools.dodoc("AUTHORS", "ChangeLog", "NEWS", "README", "TODO")
system/base/libxml2/files/CVE-2014-0191.patch
+95
View File
@@ -0,0 +1,95 @@
From 9cd1c3cfbd32655d60572c0a413e017260c854df Mon Sep 17 00:00:00 2001
From: Daniel Veillard <veillard@redhat.com>
Date: Tue, 22 Apr 2014 15:30:56 +0800
Subject: Do not fetch external parameter entities
Unless explicitely asked for when validating or replacing entities
with their value. Problem pointed out by Daniel Berrange <berrange@redhat.com>
diff --git a/parser.c b/parser.c
index 9347ac9..c0dea05 100644
--- a/parser.c
+++ b/parser.c
@@ -2598,6 +2598,20 @@ xmlParserHandlePEReference(xmlParserCtxtPtr ctxt) {
xmlCharEncoding enc;
/*
+ * Note: external parsed entities will not be loaded, it is
+ * not required for a non-validating parser, unless the
+ * option of validating, or substituting entities were
+ * given. Doing so is far more secure as the parser will
+ * only process data coming from the document entity by
+ * default.
+ */
+ if ((entity->etype == XML_EXTERNAL_PARAMETER_ENTITY) &&
+ ((ctxt->options & XML_PARSE_NOENT) == 0) &&
+ ((ctxt->options & XML_PARSE_DTDVALID) == 0) &&
+ (ctxt->validate == 0))
+ return;
+
+ /*
* handle the extra spaces added before and after
* c.f. http://www.w3.org/TR/REC-xml#as-PE
* this is done independently.
--
cgit v0.10.1
From dd8367da17c2948981a51e52c8a6beb445edf825 Mon Sep 17 00:00:00 2001
From: Daniel Veillard <veillard@redhat.com>
Date: Wed, 11 Jun 2014 16:54:32 +0800
Subject: Fix regressions introduced by CVE-2014-0191 patch
A number of issues have been raised after the fix, and this patch
tries to correct all of them, though most were related to
postvalidation.
https://bugzilla.gnome.org/show_bug.cgi?id=730290
and other reports on list, off-list and on Red Hat bugzilla
diff --git a/parser.c b/parser.c
index c0dea05..ba70f9e 100644
--- a/parser.c
+++ b/parser.c
@@ -2598,8 +2598,8 @@ xmlParserHandlePEReference(xmlParserCtxtPtr ctxt) {
xmlCharEncoding enc;
/*
- * Note: external parsed entities will not be loaded, it is
- * not required for a non-validating parser, unless the
+ * Note: external parameter entities will not be loaded, it
+ * is not required for a non-validating parser, unless the
* option of validating, or substituting entities were
* given. Doing so is far more secure as the parser will
* only process data coming from the document entity by
@@ -2608,6 +2608,9 @@ xmlParserHandlePEReference(xmlParserCtxtPtr ctxt) {
if ((entity->etype == XML_EXTERNAL_PARAMETER_ENTITY) &&
((ctxt->options & XML_PARSE_NOENT) == 0) &&
((ctxt->options & XML_PARSE_DTDVALID) == 0) &&
+ ((ctxt->options & XML_PARSE_DTDLOAD) == 0) &&
+ ((ctxt->options & XML_PARSE_DTDATTR) == 0) &&
+ (ctxt->replaceEntities == 0) &&
(ctxt->validate == 0))
return;
@@ -12616,6 +12619,9 @@ xmlIOParseDTD(xmlSAXHandlerPtr sax, xmlParserInputBufferPtr input,
return(NULL);
}
+ /* We are loading a DTD */
+ ctxt->options |= XML_PARSE_DTDLOAD;
+
/*
* Set-up the SAX context
*/
@@ -12743,6 +12749,9 @@ xmlSAXParseDTD(xmlSAXHandlerPtr sax, const xmlChar *ExternalID,
return(NULL);
}
+ /* We are loading a DTD */
+ ctxt->options |= XML_PARSE_DTDLOAD;
+
/*
* Set-up the SAX context
*/
--
cgit v0.10.1
system/base/libxml2/pspec.xml
+140
View File
@@ -0,0 +1,140 @@
<?xml version="1.0" ?>
<!DOCTYPE PISI SYSTEM "http://www.pisilinux.org/projeler/pisi/pisi-spec.dtd">
<PISI>
<Source>
<Name>libxml2</Name>
<Homepage>http://www.xmlsoft.org/</Homepage>
<Packager>
<Name>PisiLinux Community</Name>
<Email>admins@pisilinux.org</Email>
</Packager>
<License>MIT</License>
<IsA>library</IsA>
<Summary>Version 2 of the library to manipulate XML files</Summary>
<Description>Libxml2 is the XML C parser and toolkit developed for the Gnome project (but usable outside of the Gnome platform).</Description>
<Archive sha1sum="eb3e2146c6d68aea5c2a4422ed76fe196f933c21" type="targz">ftp://xmlsoft.org/libxml2/libxml2-2.9.1.tar.gz</Archive>
<BuildDependencies>
<Dependency>python</Dependency>
<Dependency>xz-devel</Dependency>
<Dependency>zlib-devel</Dependency>
<Dependency>readline-devel</Dependency>
</BuildDependencies>
<Patches>
<Patch level="1">CVE-2014-0191.patch</Patch>
</Patches>
</Source>
<Package>
<Name>libxml2-docs</Name>
<PartOf>system.doc</PartOf>
<RuntimeDependencies>
<Dependency>libxml2</Dependency>
</RuntimeDependencies>
<Files>
<Path fileType="doc">/usr/share/doc</Path>
</Files>
</Package>
<Package>
<Name>libxml2</Name>
<RuntimeDependencies>
<Dependency>xz</Dependency>
<Dependency>zlib</Dependency>
<Dependency>python</Dependency>
<Dependency>readline</Dependency>
</RuntimeDependencies>
<Files>
<Path fileType="executable">/usr/bin</Path>
<Path fileType="library">/usr/lib</Path>
<Path fileType="man">/usr/share/man</Path>
</Files>
</Package>
<Package>
<Name>libxml2-devel</Name>
<PartOf>system.devel</PartOf>
<Summary>Development files for libxml2</Summary>
<RuntimeDependencies>
<Dependency release="current">libxml2</Dependency>
</RuntimeDependencies>
<Files>
<Path fileType="data">/usr/lib/pkgconfig</Path>
<Path fileType="data">/usr/lib32/pkgconfig</Path>
<Path fileType="header">/usr/include</Path>
<Path fileType="data">/usr/share/aclocal</Path>
<Path fileType="man">/usr/share/man/man3</Path>
</Files>
</Package>
<Package>
<Name>libxml2-32bit</Name>
<PartOf>emul32</PartOf>
<Summary>32-bit shared libraries for libxml2</Summary>
<BuildType>emul32</BuildType>
<BuildDependencies>
<Dependency>xz-32bit</Dependency>
<Dependency>zlib-32bit</Dependency>
<Dependency>readline-32bit</Dependency>
</BuildDependencies>
<RuntimeDependencies>
<Dependency release="current">libxml2</Dependency>
<Dependency>xz-32bit</Dependency>
<Dependency>zlib-32bit</Dependency>
</RuntimeDependencies>
<Files>
<Path fileType="library">/usr/lib32</Path>
</Files>
</Package>
<History>
<Update release="7">
<Date>2014-07-06</Date>
<Version>2.9.1</Version>
<Comment>Security update(CVE-2014-0191).</Comment>
<Name>Vedta Demir</Name>
<Email>vedat@pisilinux.org</Email>
</Update>
<Update release="6">
<Date>2014-05-24</Date>
<Version>2.9.1</Version>
<Comment>Version bump.</Comment>
<Name>Yusuf Aydemir</Name>
<Email>yusuf.aydemir@pisilinux.org</Email>
</Update>
<Update release="5">
<Date>2014-05-11</Date>
<Version>2.9.0</Version>
<Comment>Release bump.</Comment>
<Name>Marcin Bojara</Name>
<Email>marcin@pisilinux.org</Email>
</Update>
<Update release="4">
<Date>2013-11-11</Date>
<Version>2.9.0</Version>
<Comment>Fix dep,release bump, binary file goes to main package.</Comment>
<Name>Serdar Soytetir</Name>
<Email>kaptan@pisilinux.org</Email>
</Update>
<Update release="3">
<Date>2013-08-31</Date>
<Version>2.9.1</Version>
<Comment>Version bump.</Comment>
<Name>Marcin Bojara</Name>
<Email>marcin@pisilinux.org</Email>
</Update>
<Update release="2">
<Date>2013-07-26</Date>
<Version>2.9.0</Version>
<Comment>Fix dep,release bump.</Comment>
<Name>Serdar Soytetir</Name>
<Email>kaptan@pisilinux.org</Email>
</Update>
<Update release="1">
<Date>2012-10-22</Date>
<Version>2.9.0</Version>
<Comment>First release</Comment>
<Name>PisiLinux Community</Name>
<Email>admins@pisilinux.org</Email>
</Update>
</History>
</PISI>
system/base/libxml2/translations.xml
+19
View File
@@ -0,0 +1,19 @@
<?xml version="1.0" ?>
<PISI>
<Source>
<Name>libxml2</Name>
<Summary xml:lang="tr">XML türü dosyaları işlemeye aracılık eden kütüphanenin 2. sürümü</Summary>
<Description xml:lang="tr">Libxml2, Gnome projesi için geliştirilmiş C dilinde XML ayrıştırıcısıdır. Gnome platformu olmadan da kullanılabilir.</Description>
<Description xml:lang="fr">Libxml2 est l'analyseur et la boîte à outils XML écrit en C pour le projet Gnome (mais utilisable en dehors de la plateforme Gnome).</Description>
</Source>
<Package>
<Name>libxml2-devel</Name>
<Summary xml:lang="tr">libxml2 için geliştirme dosyaları</Summary>
</Package>
<Package>
<Name>libxml2-32bit</Name>
<Summary xml:lang="tr">libxml2 için 32-bit paylaşımlı kitaplıklar</Summary>
</Package>
</PISI>