./textproc/libxml2, XML parser library from the GNOME project

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]


Branch: pkgsrc-2022Q1, Version: 2.9.14, Package name: libxml2-2.9.14, Maintainer: pkgsrc-users

XML parser library from the GNOME project



Package options: inet6

Master sites: (Expand)

Filesize: 3056.609 KB

Version history: (Expand)


CVS history: (Expand)


   2022-05-20 14:56:56 by Benny Siegert | Files touched by this commit (2) | Package updated
Log message:
Pullup ticket #6633 - requested by gutteridge
textproc/libxml2: security fix

Revisions pulled up:
- textproc/libxml2/Makefile                                     1.164
- textproc/libxml2/Makefile.common                              1.16
- textproc/libxml2/distinfo                                     1.141
- textproc/py-libxml2/Makefile                                  1.81

---
   Module Name:    pkgsrc
   Committed By:   gutteridge
   Date:           Fri May  6 00:55:55 UTC 2022

   Modified Files:
           pkgsrc/textproc/libxml2: Makefile Makefile.common distinfo
           pkgsrc/textproc/py-libxml2: Makefile

   Log message:
   libxml2: update to 2.9.14, includes security fixes

   v2.9.14: May 02 2022:
      - Security:
     [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
     Fix potential double-free in xmlXPtrStringRangeFunction
     Fix memory leak in xmlFindCharEncodingHandler
     Normalize XPath strings in-place
     Prevent integer-overflow in htmlSkipBlankChars() and xmlSkipBlankChars()
       (David Kilzer)
     Fix leak of xmlElementContent (David Kilzer)

      - Bug fixes:
     Fix parsing of subtracted regex character classes
     Fix recursion check in xinclude.c
     Reset last error in xmlCleanupGlobals
     Fix certain combinations of regex range quantifiers
     Fix range quantifier on subregex

      - Improvements:
     Fix recovery from invalid HTML start tags

      - Build system, portability:
     Define LFS macros before including system headers
     Initialize XPath floating-point globals
     configure: check for icu DEFS (James Hilliard)
     configure.ac: produce tar.xz only (GNOME policy) (David Seifert)
     CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
     Fix build with older Python versions
     Fix --without-valid build