Revisions of libxml2

buildservice-autocommit accepted request 1168784 from David Anes's avatar David Anes (david.anes) (revision 215)
baserev update by copy to link target
David Anes's avatar David Anes (david.anes) accepted request 1168664 from Christoph G's avatar Christoph G (mathletic) (revision 214)
- Update to version 2.12.6
  * Regressions
    - parser: Fix detection of duplicate attributes in XML namespace
    - xmlreader: Fix xmlTextReaderConstEncoding
    - html: Fix htmlCreatePushParserCtxt with encoding
    - xmllint: Return error code if XPath returns empty nodeset
- Update to version 2.12.5
  * Security
    - [CVE-2024-25062] xmlreader: Don't expand XIncludes when backtracking
  * Regressions
    - parser: Fix crash in xmlParseInNodeContext with HTML documents
- Update to version 2.12.4
  * Regressions
   - parser: Fix regression parsing standalone declarations
   - autotools: Readd --with-xptr-locs configuration option
   - parser: Fix build --without-output
   - parser: Don't grow or shrink pull parser memory buffers
   - io: Fix memory lifetime issue with input buffers
- Update to version 2.12.3
  * Regressions
    - parser: Fix namespaces redefined from default attributes
  * Build fixes
    - include: Rename XML_EMPTY helper macro
    - include: Move declaration of xmlInitGlobals
    - include: Add missing includes
    - include: Move globals from xmlsave.h to parser.h
    - include: Readd circular dependency between tree.h and parser.h
- Drop libxml2-CVE-2024-25062.patch as it is part of upstream
David Anes's avatar David Anes (david.anes) committed (revision 213)
rebase
David Anes's avatar David Anes (david.anes) accepted request 1145592 from David Anes's avatar David Anes (david.anes) (revision 212)
- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch
David Anes's avatar David Anes (david.anes) accepted request 1132279 from Bjørn Lie's avatar Bjørn Lie (iznogood) (revision 211)
- Update to version 2.12.2:
  * Regressions:
    - parser:
      . Fix invalid free in xmlParseBalancedChunkMemoryRecover
      . Make CRLF increment line number
    - globals: Disable TLS in static Windows builds
    - html: Reenable buggy detection of XML declarations
    - tree: Fix regression when copying DTDs
  * Build fixes
    - build: Disable compiler TLS by default
    - cmake: Update config.h.cmake.in
    - tests: Fix tests --with-valid --without-xinclude
David Anes's avatar David Anes (david.anes) accepted request 1128650 from Bjørn Lie's avatar Bjørn Lie (iznogood) (revision 210)
New stable release.
Also remove whitespaces from .changes
buildservice-autocommit accepted request 1126869 from David Anes's avatar David Anes (david.anes) (revision 209)
baserev update by copy to link target
David Anes's avatar David Anes (david.anes) accepted request 1126959 from David Anes's avatar David Anes (david.anes) (revision 207)
- Bring back a patch that was mistakenly removed in the last update.
  * Readded libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch
David Anes's avatar David Anes (david.anes) accepted request 1126893 from David Anes's avatar David Anes (david.anes) (revision 206)
- Removed patches (already in upstream):
  * libxml2-CVE-2023-39615.patch
  * libxml2-CVE-2023-45322.patch
  * libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch
  * python312.patch
- Update to 2.12.0: 
  * Major changes:
    - Most of the known issues leading to quadratic behavior in the 
      XML parser were fixed. Internal hash tables were rewritten to 
      reduce memory consumption.
    - Starting with this release, it should be enough to add the 
      --with-legacy configuration option to provide maximum ABI 
      compatibility. 
    - libxml2 will now store global variables in thread-local 
      storage if supported by the compiler. This avoids allocating 
      the data lazily which can result in a fatal error condition. 
    - A new API function xmlCheckThreadLocalStorage was added so the
      allocation can be checked earlier if compiler TLS is not 
      supported. 
    - To prepare for future improvements, some API functions now 
      expect or return a const xmlError struct.
    - Several cyclic dependencies in public header files were fixed. 
    - Refactoring of the encoding code has been mostly completed. 
      Calling xmlSwitchEncoding from client code is now fully 
      supported, for example to override the encoding for the push 
      parser.
    - When parsing data from memory, libxml2 will now stream data 
      chunk by chunk instead of copying the whole buffer (possibly 
      twice with encodings), reducing peak memory consumption 
      considerably.
David Anes's avatar David Anes (david.anes) accepted request 1126868 from Bjørn Lie's avatar Bjørn Lie (iznogood) (revision 205)
- Update to version 2.11.6:
  * Regressions:
    - threads: Fix --with-thread-alloc
    - xinclude: Fix ‘last’ pointer in xmlXIncludeCopyNode
  * Bug fixes: parser: Fix potential use-after-free in
    xmlParseCharDataInternal
buildservice-autocommit accepted request 1125707 from David Anes's avatar David Anes (david.anes) (revision 204)
baserev update by copy to link target
David Anes's avatar David Anes (david.anes) accepted request 1125681 from David Anes's avatar David Anes (david.anes) (revision 203)
- Security fix: CVE-2023-45322 (bsc#1216129)
  * use-after-free in xmlUnlinkNode() in tree.c
  * Added file libxml2-CVE-2023-45322.patch
buildservice-autocommit accepted request 1121463 from David Anes's avatar David Anes (david.anes) (revision 202)
baserev update by copy to link target
David Anes's avatar David Anes (david.anes) accepted request 1119767 from Daniel Garcia's avatar Daniel Garcia (dgarcia) (revision 201)
- Add python312.patch to make it compatible with python 3.12
  https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/226
- Use pyproject_wheel and pyproject_install macros instead of
  python_build, python_install
- Security fix: CVE-2023-39615 (bsc#1214768)
  * crafted xml can cause global buffer overflow
  * Added file libxml2-CVE-2023-39615.patch   
David Anes's avatar David Anes (david.anes) accepted request 1103190 from Bjørn Lie's avatar Bjørn Lie (iznogood) (revision 200)
- Update to version 2.11.5:
  + Regressions:
    - parser: Make xmlSwitchEncoding always skip the BOM
    - autotools: Improve iconv check
  + Bug fixes:
    - valid: Fix c1->parent pointer in xmlCopyDocElementContent
    - encoding: Always call ucnv_convertEx with flush set to false
  + Portability: autotools: fix Python module file ext for
    cygwin/msys2
  + Tests: runtest: Fix compilation without LIBXML_HTML_ENABLED
Dirk Mueller's avatar Dirk Mueller (dirkmueller) accepted request 1087943 from Bjørn Lie's avatar Bjørn Lie (iznogood) (revision 199)
- Update to version 2.11.4:
  + Fixes a serious regression: parser: Fix regression when push
    parsing UTF-8 sequences.
David Anes's avatar David Anes (david.anes) accepted request 1086546 from Bjørn Lie's avatar Bjørn Lie (iznogood) (revision 198)
- Update to version 2.11.3:
  + xinclude: Fix false positives in inclusion loop detection.
  + autotools: Fix ICU detection.
  + parser: Fix "huge input lookup" error with push parser.
  + xpath: Fix build without LIBXML_XPATH_ENABLED.
  + hash: Fix possible startup crash with old libxslt versions.
  + autoconf: fix iconv library paths.
David Anes's avatar David Anes (david.anes) accepted request 1085154 from Bjørn Lie's avatar Bjørn Lie (iznogood) (revision 197)
- Update to version 2.11.2:
  + Fix regressions:
    - threads: Fix startup crash with weak symbol hack
    - win32: Don’t depend on removed .def file
    - schemas: Fix memory leak in xmlSchemaValidateStream
David Anes's avatar David Anes (david.anes) accepted request 1084549 from David Anes's avatar David Anes (david.anes) (revision 196)
  * See the full changelog at https://discourse.gnome.org/t/libxml2-2-11-0-released/15123
Displaying revisions 1 - 20 of 215
openSUSE Build Service is sponsored by