Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Please bump vulnerable Expat to 2.2.1 #6

Closed
hartwork opened this issue Jun 20, 2017 · 3 comments
Closed

Please bump vulnerable Expat to 2.2.1 #6

hartwork opened this issue Jun 20, 2017 · 3 comments

Comments

@hartwork
Copy link

Please excuse my posting style.

Vulnerable copy found at:
https://github.com/w3c/libwww/tree/master/modules/expat/lib

Expat 2.2.1 change log:
https://github.com/libexpat/libexpat/blob/master/expat/Changes

Commits that you may want on top:

Best, Sebastian

sideshowbarker added a commit that referenced this issue Jun 21, 2017
sideshowbarker added a commit that referenced this issue Jun 21, 2017
This change updates expat to the latest sources from the master branch at
https://github.com/libexpat/libexpat

Fixes #6
@sideshowbarker
Copy link

@hartwork Thanks and please see #7 and if possible do a sanity-check review to make sure it includes the necessary changes

sideshowbarker added a commit that referenced this issue Jun 22, 2017
This adds expat as a submodule from the fork at https://github.com/w3c/libexpat,
which brings it up to date with the latest sources from the master branch
at https://github.com/libexpat/libexpat

Fixes #6
sideshowbarker added a commit that referenced this issue Jun 22, 2017
This adds expat as a submodule from the fork at https://github.com/w3c/libexpat,
which brings it up to date with the latest sources from the master branch
at https://github.com/libexpat/libexpat

Fixes #6
sideshowbarker added a commit that referenced this issue Jun 22, 2017
This adds expat as a submodule from the fork at https://github.com/w3c/libexpat,
which brings it up to date with the latest sources from the master branch
at https://github.com/libexpat/libexpat

Fixes #6
@sideshowbarker
Copy link

Per discussion with @jkbzh the plan now is to change the build to dynamically link against whatever already-installed expat is found on the system. See https://github.com/w3c/libwww/tree/removing_expat

@sideshowbarker
Copy link

Fixed by #9

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants