Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2015-11-22 | Update libxml2 to 2.9.3. | wiz | 1 | -38/+0 | |
v2.9.3: Nov 20 2015 Security: CVE-2015-8242 Buffer overead with HTML parser in push mode (Hugh Davenport), CVE-2015-7500 Fix memory access error due to incorrect entities boundaries (Daniel Veillard), CVE-2015-7499-2 Detect incoherency on GROW (Daniel Veillard), CVE-2015-7499-1 Add xmlHaltParser() to stop the parser (Daniel Veillard), CVE-2015-5312 Another entity expansion issue (David Drysdale), CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey (David Drysdale), CVE-2015-7498 Avoid processing entities after encoding conversion failures (Daniel Veillard), CVE-2015-8035 Fix XZ compression support loop (Daniel Veillard), CVE-2015-7942-2 Fix an error in previous Conditional section patch (Daniel Veillard), CVE-2015-7942 Another variation of overflow in Conditional sections (Daniel Veillard), CVE-2015-1819 Enforce the reader to run in constant memory (Daniel Veillard) CVE-2015-7941_2 Cleanup conditional section error handling (Daniel Veillard), CVE-2015-7941_1 Stop parsing on entities boundaries errors (Daniel Veillard), Documentation: Correct spelling of "calling" (Alex Henrie), Fix a small error in xmllint --format description (Fabien Degomme), Avoid XSS on the search of xmlsoft.org (Daniel Veillard) Portability: threads: use forward declarations only for glibc (Michael Heimpold), Update Win32 configure.js to search for configure.ac (Daniel Veillard) Bug Fixes: Bug on creating new stream from entity (Daniel Veillard), Fix some loop issues embedding NEXT (Daniel Veillard), Do not print error context when there is none (Daniel Veillard), Avoid extra processing of MarkupDecl when EOF (Hugh Davenport), Fix parsing short unclosed comment uninitialized access (Daniel Veillard), Add missing Null check in xmlParseExternalEntityPrivate (Gaurav Gupta), Fix a bug in CData error handling in the push parser (Daniel Veillard), Fix a bug on name parsing at the end of current input buffer (Daniel Veillard), Fix the spurious ID already defined error (Daniel Veillard), Fix previous change to node sort order (Nick Wellnhofer), Fix a self assignment issue raised by clang (Scott Graham), Fail parsing early on if encoding conversion failed (Daniel Veillard), Do not process encoding values if the declaration if broken (Daniel Veillard), Silence clang's -Wunknown-attribute (Michael Catanzaro), xmlMemUsed is not thread-safe (Martin von Gagern), Fix support for except in nameclasses (Daniel Veillard), Fix order of root nodes (Nick Wellnhofer), Allow attributes on descendant-or-self axis (Nick Wellnhofer), Fix the fix to Windows locking (Steve Nairn), Fix timsort invariant loop re: Envisage article (Christopher Swenson), Don't add IDs in xmlSetTreeDoc (Nick Wellnhofer), Account for ID attributes in xmlSetTreeDoc (Nick Wellnhofer), Remove various unused value assignments (Philip Withnall), Fix missing entities after CVE-2014-3660 fix (Daniel Veillard), Revert "Missing initialization for the catalog module" (Daniel Veillard) Improvements: Reuse xmlHaltParser() where it makes sense (Daniel Veillard), xmlStopParser reset errNo (Daniel Veillard), Reenable xz support by default (Daniel Veillard), Recover unescaped less-than character in HTML recovery parsing (Daniel Veillard), Allow HTML serializer to output HTML5 DOCTYPE (Shaun McCance), Regression test for bug #695699 (Nick Wellnhofer), Add a couple of XPath tests (Nick Wellnhofer), Add Python 3 rpm subpackage (Tomas Radej), libxml2-config.cmake.in: update include directories (Samuel Martin), Adding example from bugs 738805 to regression tests (Daniel Veillard) | |||||
2015-04-24 | patch for CVE-2015-1819 Enforce the reader to run in constant memory | spz | 1 | -2/+2 | |
from https://git.gnome.org/browse/libxml2/commit/?id=213f1fe0d76d30eaed6e5853057defc43e6df2c9 +general patch refresh | |||||
2013-05-26 | Changes 2.9.1: | adam | 1 | -10/+1 | |
Features: Support for Python3, Add xmlXPathSetContextNode and xmlXPathNodeEval Documentation: Add documentation for xmllint --xpath Fix the URL of the SAX documentation from James Fix spelling of "length" Portability: Fix python bindings with versions older than 2.7 rebuild docs:Makefile.am elfgcchack.h after rebuild in doc elfgcchack for buf module Fix a uneeded and wrong extra link parameter Few cleanup patches for Windows Fix rpmbuild --nocheck Fix for win32/configure.js and WITH_THREAD_ALLOC Fix Broken multi-arch support in xml2-config Fix a portability issue for GCC < 3.4.0 Windows build fixes Fix a thread portability problem Downgrade autoconf requirement to 2.63 Bug Fixes: Fix a linking error for python bindings Fix a couple of return without value Improve the hashing functions Improve handling of xmlStopParser() Remove risk of lockup in dictionary initialization Activate detection of encoding in external subset Fix an output buffer flushing conversion bug Fix an old bug in xmlSchemaValidateOneElement Fix configure cannot remove messages fix schema validation in combination with xsi:nil xmlCtxtReadFile doesn't work with literal IPv6 URLs Fix a few problems with setEntityLoader Detect excessive entities expansion upon replacement Fix the flushing out of raw buffers on encoding conversions Fix some buffer conversion issues When calling xmlNodeDump make sure we grow the buffer quickly Fix an error in the progressive DTD parsing code xmllint should not load DTD by default when using the reader Try IBM-037 when looking for EBCDIC handlers Fix potential out of bound access Fix large parse of file from memory Fix a bug in the nsclean option of the parser Fix a regression in 2.9.0 breaking validation while streaming Remove potential calls to exit() Improvements: Regenerated API, and testapi, rebuild documentation Fix tree iterators broken by 2to3 script update all tests for Python3 and Python2 A few more fixes for python 3 affecting libxml2.py Fix compilation on Python3 Converting apibuild.py to python3 First pass at starting porting to python3 updated configure.in for python3 Add support for xpathRegisterVariable in Python Added a regression tests from bug 694228 data Cache presence of '<' in entities content Avoid extra processing on entities Python binding for xmlRegisterInputCallback Python bindings: DOM casts everything to xmlNode Define LIBXML_THREAD_ALLOC_ENABLED via xmlversion.h Adding streaming validation to runtest checks Add a --pushsmall option to xmllint Cleanups: Switched comment in file to UTF-8 encoding Extend gitignore Silent the new python test on input Cleanup of a duplicate test Cleanup on duplicate test expressions Fix compiler warning after 153cf15905cf4ec080612ada6703757d10caba1e Spec cleanups and a fix for multiarch support Silence a clang warning Cleanup the Copyright to be pure MIT Licence wording rand_seed should be static in dict.c Fix typos in parser comments | |||||
2012-09-15 | Changes 2.9.0: | adam | 1 | -3/+13 | |
Features: * A few new API entry points, * More resilient push parser mode, * A lot of portability improvement, * Faster XPath evaluation | |||||
2012-04-27 | FreeBSD 6 and earlier misses the pthread_equal() stub as well. | mishka | 1 | -5/+5 | |
While here, improve comments a little bit. | |||||
2012-04-03 | Change behavior of libpthread handling | obache | 1 | -0/+37 | |
* Disable linkage with pthread for FreeBSD/DragonFly/NetBSD, they have pthread_* () stubs in libc (it result in same as the previous behavior). * but NetBSD<4.99.36 does not have pthread_equal() stub in libc, so define weak reference to it. * Treat OpenBSD and MirBSD same as Linux to avoid linkage with libpthread. * Others will be linked with pthread, fixes PR 46254. tested NetBSD-5.1.2, and confirmed fixed on NetBSD-4.0.1 and OpenBSD-5.0. Bump PKGREVISION. |