openSUSE Build Service

buildservice-autocommit accepted request 999935 from

Pedro Monreal Gonzalez (pmonrealgonzalez) over 1 year ago (revision 177)

baserev update by copy to link target

Pedro Monreal Gonzalez (pmonrealgonzalez) accepted request 999277 from

Bjørn Lie (iznogood) over 1 year ago (revision 176)

- Update to version 2.10.1:
  * Regressions: Fix xmlCtxtReadDoc with encoding
  * Bug fixes: Fix HTML parser with threads and --without-legacy
  * Build system:
    + Fix build with Python 3.10
    + cmake: Disable version script on macOS
    + Remove Makefile rule to build testapi.c
  * Documentation:
    + Switch back to HTML output for API documentation
    + Port doc/examples/index.py to Python 3
    + Fix order of exports in libxml2-api.xml
    + Remove libxml2-refs.xml

David Anes (david.anes) accepted request 997729 from

David Anes (david.anes) almost 2 years ago (revision 175)

- Update to 2.10.0:
  * Security
    + [CVE-2022-2309] Reset nsNr in xmlCtxtReset
    + Reserve byte for NUL terminator and report errors consistently in xmlBuf and
      xmlBuffer
    + Fix missing NUL terminators in xmlBuf and xmlBuffer functions
    + Fix integer overflow in xmlBufferDump()
    + xmlBufAvail() should return length without including a byte for NUL
      terminator
    + Fix ownership of xmlNodePtr & xmlAttrPtr fields in xmlSetTreeDoc()
    + Use xmlNewDocText in xmlXIncludeCopyRange
    + Fix use-after-free bugs when calling xmlTextReaderClose() before
      xmlFreeTextReader() on post-validating parser
    + Use UPDATE_COMPAT() consistently in buf.c
    + fix: xmlXPathParserContext could be double-delete in  OOM case.
  * Removals and deprecations
    + Disable XPointer location support by default
    + Remove outdated xml2Conf.sh
    + Deprecate module init and cleanup functions
    + Remove obsolete XML Software Autoupdate (XSA) file
    + Remove DOCBparser
    + Remove obsolete Python test framework
    + Remove broken VxWorks support
    + Remove broken Mac OS 9 support
    + Remove broken bakefile support
    + Remove broken Visual Studio 2010 support
    + Remove broken Windows CE support
    + Deprecate IDREF-related functions in valid.h
    + Deprecate legacy functions
    + Disable legacy support by default

buildservice-autocommit accepted request 985342 from

David Anes (david.anes) almost 2 years ago (revision 174)

baserev update by copy to link target

David Anes (david.anes) accepted request 984890 from

Matej Cepl (mcepl) almost 2 years ago (revision 173)

Record fixed security bugs for synchronization with SLE package.

buildservice-autocommit accepted request 974482 from

David Anes (david.anes) about 2 years ago (revision 172)

baserev update by copy to link target

David Anes (david.anes) accepted request 974481 from

David Anes (david.anes) about 2 years ago (revision 171)

- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and 
      xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS 
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build

buildservice-autocommit accepted request 963709 from

Dirk Mueller (dirkmueller) about 2 years ago (revision 170)

baserev update by copy to link target

Dirk Mueller (dirkmueller) accepted request 963492 from

Dominique Leuenberger (dimstar) about 2 years ago (revision 169)

Resubmit, rebased after branch was broken by update; fix self-cycle causing issues on bootstrap; puthon yupo fixed

Dirk Mueller (dirkmueller) accepted request 960606 from

Luciano Santos (luc14n0) about 2 years ago (revision 168)

Update to version 2.9.13.

Pedro Monreal Gonzalez (pmonrealgonzalez) accepted request 927304 from

Matej Cepl (mcepl) over 2 years ago (revision 167)

- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.

buildservice-autocommit accepted request 896773 from

Dirk Mueller (dirkmueller) almost 3 years ago (revision 166)

baserev update by copy to link target

Dirk Mueller (dirkmueller) accepted request 896721 from

Pedro Monreal Gonzalez (pmonrealgonzalez) almost 3 years ago (revision 165)

- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
      gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch

Pedro Monreal Gonzalez (pmonrealgonzalez) accepted request 896506 from

Ferdinand Thiessen (susnux) almost 3 years ago (revision 164)

Update to version 2.9.12

Dirk Mueller (dirkmueller) accepted request 894327 from

Pedro Monreal Gonzalez (pmonrealgonzalez) about 3 years ago (revision 163)

- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch

buildservice-autocommit accepted request 892150 from

Dirk Mueller (dirkmueller) about 3 years ago (revision 162)

baserev update by copy to link target

Dirk Mueller (dirkmueller) accepted request 892031 from

Pedro Monreal Gonzalez (pmonrealgonzalez) about 3 years ago (revision 161)

- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch

buildservice-autocommit accepted request 889189 from

Dirk Mueller (dirkmueller) about 3 years ago (revision 160)

baserev update by copy to link target

Dirk Mueller (dirkmueller) accepted request 889099 from

Pedro Monreal Gonzalez (pmonrealgonzalez) about 3 years ago (revision 159)

- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch

- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch

- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch

buildservice-autocommit accepted request 874905 from

Pedro Monreal Gonzalez (pmonrealgonzalez) about 3 years ago (revision 158)

baserev update by copy to link target

Places

Revisions of libxml2

Places