Update expat to latest release (2.2.6) #1206
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
added 2 commits
August 16, 2018 13:11
"The binary appears to contain symbols for the library Expat XML Parser version 2.1.0 which contains known vulnerabilities." CVE-2017-11742 References http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11742 CVE-2017-9233 References https://libexpat.github.io/doc/cve-2017-9233/ http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9233 CVE-2016-9063 References http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9063 CVE-2016-0718 References http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0718 https://access.redhat.com/security/cve/cve-2016-0718 CVE-2016-5300 References http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5300 CVE-2012-0876 References http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0876 CVE-2016-0718 References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0718 https://sourceforge.net/p/expat/bugs/537/ CVE-2016-4472 References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4472 CVE-2016-5300 References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5300 https://sourceforge.net/p/expat/bugs/499/ CVE-2012-6702 References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6702 https://sourceforge.net/p/expat/bugs/519/ CVE-2015-1283 References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1283 https://sourceforge.net/p/expat/bugs/528/
|
Hi! Why is this being merged into moai:partner/pi-develop instead of development? |
|
The entire set of expat changes should also be merged into develop, however my org tracks just this branch, so I feel more comfortable merging into it, and leaving reconciliation back to develop to Patrick. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Expat 2.1.0 has known vulnerabilities.
Minor project change to use DXML_DEV_URANDOM as entropy source