Bug 100807

Summary:	bump expat to 2.2.0
Product:	LibreOffice	Reporter:	JoNi <j.nitschke+tdfbz>
Component:	LibreOffice	Assignee:	David Tardon <dtardon>
Status:	RESOLVED FIXED
Severity:	normal	CC:	dtardon, h3734236
Priority:	medium	Keywords:	security
Version:	5.2.0.0.alpha0+
Hardware:	All
OS:	All
Whiteboard:	target:5.3.0 target:5.2.0
Crash report or crash signature:		Regression By:
Bug Depends on:	99078
Bug Blocks:

Description JoNi 2016-07-08 08:26:56 UTC

+++ This bug was initially created as a clone of Bug #99078 +++

expat got an update which addresses several CVE 
this makes patches obsolete:
CVE-2015-1283-refix.patch.1
CVE-2016-0718-v2-2-1.patch.1

Comment 1 David Tardon 2016-07-08 11:23:37 UTC

Thanks for the heads up.

Comment 2 Commit Notification 2016-07-08 14:42:13 UTC

David Tardon committed a patch related to this issue.
It has been pushed to "master":

http://cgit.freedesktop.org/libreoffice/core/commit/?id=4c28c8051ac99bd2a39ad06af35d87c2ddf2677e

tdf#100807 upload expat 2.2.0

It will be available in 5.3.0.

The patch should be included in the daily builds available at
http://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More
information about daily builds can be found at:
http://wiki.documentfoundation.org/Testing_Daily_Builds

Affected users are encouraged to test the fix and report feedback.

Comment 3 Commit Notification 2016-07-11 15:30:46 UTC

David Tardon committed a patch related to this issue.
It has been pushed to "libreoffice-5-2":

http://cgit.freedesktop.org/libreoffice/core/commit/?id=8b36857709532880f51c8a24d415c84e093cc2ae&h=libreoffice-5-2

tdf#100807 upload expat 2.2.0

It will be available in 5.2.1.

The patch should be included in the daily builds available at
http://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More
information about daily builds can be found at:
http://wiki.documentfoundation.org/Testing_Daily_Builds

Affected users are encouraged to test the fix and report feedback.

Comment 4 Commit Notification 2016-07-13 20:20:05 UTC

David Tardon committed a patch related to this issue.
It has been pushed to "libreoffice-5-2-0":

http://cgit.freedesktop.org/libreoffice/core/commit/?id=8f8b9c2ad52b0f265e274eaf7fa4df337aa8388d&h=libreoffice-5-2-0

tdf#100807 upload expat 2.2.0

It will be available in 5.2.0.

The patch should be included in the daily builds available at
http://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More
information about daily builds can be found at:
http://wiki.documentfoundation.org/Testing_Daily_Builds

Affected users are encouraged to test the fix and report feedback.