2 Apr
2021
2 Apr
'21
12:13 p.m.
Hi Liam,
sof-gcc8.1 branch of crosstool-ng fails to build a cross compiler (i think for all platforms) because expat version 2.2.5 ( CT_EXPAT_VERSION="2.2.5" ) is vulnerable.
https://sourceforge.net/projects/expat/files/expat/2.2.5/expat-2.2.5-RENAMED...
What's your take on this? Should we change the config files to upgrade expat to 2.3.0 or should we directly use newer versions of gcc.
What gcc toolchain versions is Intel using? We at NXP want to align with that.
thanks, Daniel.