Bug 100807 - bump expat to 2.2.0
Summary: bump expat to 2.2.0
Status: RESOLVED FIXED
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: LibreOffice (show other bugs)
Version:
(earliest affected)
5.2.0.0.alpha0+
Hardware: All All
: medium normal
Assignee: David Tardon
URL:
Whiteboard: target:5.3.0 target:5.2.0
Keywords: security
Depends on: 99078
Blocks:
  Show dependency treegraph
 
Reported: 2016-07-08 08:26 UTC by JoNi
Modified: 2016-10-25 18:40 UTC (History)
2 users (show)

See Also:
Crash report or crash signature:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description JoNi 2016-07-08 08:26:56 UTC
+++ This bug was initially created as a clone of Bug #99078 +++

expat got an update which addresses several CVE 
this makes patches obsolete:
CVE-2015-1283-refix.patch.1
CVE-2016-0718-v2-2-1.patch.1
Comment 1 David Tardon 2016-07-08 11:23:37 UTC
Thanks for the heads up.
Comment 2 Commit Notification 2016-07-08 14:42:13 UTC
David Tardon committed a patch related to this issue.
It has been pushed to "master":

http://cgit.freedesktop.org/libreoffice/core/commit/?id=4c28c8051ac99bd2a39ad06af35d87c2ddf2677e

tdf#100807 upload expat 2.2.0

It will be available in 5.3.0.

The patch should be included in the daily builds available at
http://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More
information about daily builds can be found at:
http://wiki.documentfoundation.org/Testing_Daily_Builds

Affected users are encouraged to test the fix and report feedback.
Comment 3 Commit Notification 2016-07-11 15:30:46 UTC
David Tardon committed a patch related to this issue.
It has been pushed to "libreoffice-5-2":

http://cgit.freedesktop.org/libreoffice/core/commit/?id=8b36857709532880f51c8a24d415c84e093cc2ae&h=libreoffice-5-2

tdf#100807 upload expat 2.2.0

It will be available in 5.2.1.

The patch should be included in the daily builds available at
http://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More
information about daily builds can be found at:
http://wiki.documentfoundation.org/Testing_Daily_Builds

Affected users are encouraged to test the fix and report feedback.
Comment 4 Commit Notification 2016-07-13 20:20:05 UTC
David Tardon committed a patch related to this issue.
It has been pushed to "libreoffice-5-2-0":

http://cgit.freedesktop.org/libreoffice/core/commit/?id=8f8b9c2ad52b0f265e274eaf7fa4df337aa8388d&h=libreoffice-5-2-0

tdf#100807 upload expat 2.2.0

It will be available in 5.2.0.

The patch should be included in the daily builds available at
http://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More
information about daily builds can be found at:
http://wiki.documentfoundation.org/Testing_Daily_Builds

Affected users are encouraged to test the fix and report feedback.