CVE-2021-45960
CVE-2021-46143
CVE-2022-22822
CVE-2022-22823
CVE-2022-22824
CVE-2022-22825
CVE-2022-22826
CVE-2022-22827

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

mesa in the video feed requires expat/host. Provide host build to
allow mesa to build.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

tools/expat is actually what's used by the various packages that
supposedly depend on expat/host.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Ninja was merged to base and therefore we can now use normal cmake.mk

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

faster to compile.

A small selection of packages was tested going from:

Executed in  696.30 secs   fish           external
   usr time   82.98 mins  395.00 micros   82.98 mins
   sys time    9.02 mins    0.00 micros    9.02 mins

to:

Executed in  592.20 secs   fish           external
   usr time   84.84 mins  361.00 micros   84.84 mins
   sys time    8.85 mins   57.00 micros    8.85 mins

Tested by running make -j 12 and wiping staging/build_dir/target_x

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Even though doc2man is explicitly disabled, it is only for the target.
Split out the options to a separate variable.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Allows faster compilation and a simpler Makefile.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Fixes CVE-2019-15903

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

Fixes:
CVE-2018-20843

Changes:
add PKG_CPE_ID
switch to xz
remove maintainer

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Additionally to the fix issued for #6923, we need to disable the docbook
usage also for the host build. This prevents the following error:

checking for docbook2man... docbook2man
configure: error: Your local docbook2man was found to work with SGML rather
  than XML. Please install docbook2X and use variable DOCBOOK_TO_MAN to point
  configure to command docbook2x-man of docbook2X.
  Or use DOCBOOK_TO_MAN="xmlto man --skip-validation" if you have xmlto around.
  You can also configure using --without-docbook if you can do without a man
  page for xmlwf.

Signed-off-by: Michael Heimpold <michael.heimpold@i2se.com>

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

Update (lib)expat to 2.2.6

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>

Update (lib)expat to 2.2.5

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>

Update (lib)expat to 2.2.4

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>

Update (lib)expat to 2.2.3
Remove poor entropy hack, 2.2.3 uses /dev/urandom in worst case

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>

Add the same workaround as for the expat package in toolchain.
I'm not really sure what made it work for me earlier but this seems to fix it.

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>

Signed-off-by: Ted Hess <thess@kitschensync.net>

Update (lib)expat to 2.2.2

Fixes following CVEs: CVE-2017-9233 and CVE-2016-9063 (2.2.2)
Update homepage URL

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>

Update libexpat to upstream release 2.2.0

Signed-off-by: Paul Wassi <p.wassi@gmx.at>

The .so symlinks (without any suffix) are only used by compiler/linker and
not needed on the target system.
See https://github.com/openwrt/packages/pull/274 for a short discussion.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

- fix licensing file list
- install pkgconfig file
- drop explicite call to Build/Compile
- use PKG_INSTALL

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Signed-off-by: Steven Barth <steven@midlink.org>