mirror of
https://gitlab.gnome.org/GNOME/libxml2.git
synced 2025-03-13 20:58:16 +03:00
192 lines
11 KiB
XML
192 lines
11 KiB
XML
<?xml version="1.0"?>
|
||
<!DOCTYPE xsa PUBLIC "-//LM Garshol//DTD XML Software Autoupdate 1.0//EN//XML" "http://www.garshol.priv.no/download/xsa/xsa.dtd">
|
||
<xsa>
|
||
<vendor>
|
||
<name>Daniel Veillard</name>
|
||
<email>daniel@veillard.com</email>
|
||
<url>http://veillard.com/</url>
|
||
</vendor>
|
||
<product id="libxml2">
|
||
<name>libxml2</name>
|
||
<version>2.9.2</version>
|
||
<last-release> Oct 16 2014</last-release>
|
||
<info-url>http://xmlsoft.org/</info-url>
|
||
<changes> - Security:
|
||
Fix for CVE-2014-3660 billion laugh variant (Daniel Veillard),
|
||
CVE-2014-0191 Do not fetch external parameter entities (Daniel Veillard)
|
||
|
||
- Bug Fixes:
|
||
fix memory leak xml header encoding field with XML_PARSE_IGNORE_ENC (Bart De Schuymer),
|
||
xmlmemory: handle realloc properly (Yegor Yefremov),
|
||
Python generator bug raised by the const change (Daniel Veillard),
|
||
Windows Critical sections not released correctly (Daniel Veillard),
|
||
Parser error on repeated recursive entity expansion containing &lt; (Daniel Veillard),
|
||
xpointer : fixing Null Pointers (Gaurav Gupta),
|
||
Remove Unnecessary Null check in xpointer.c (Gaurav Gupta),
|
||
parser bug on misformed namespace attributes (Dennis Filder),
|
||
Pointer dereferenced before null check (Daniel Veillard),
|
||
Leak of struct addrinfo in xmlNanoFTPConnect() (Gaurav Gupta),
|
||
Possible overflow in HTMLParser.c (Daniel Veillard),
|
||
python/tests/sync.py assumes Python dictionaries are ordered (John Beck),
|
||
Fix Enum check and missing break (Gaurav Gupta),
|
||
xmlIO: Handle error returns from dup() (Philip Withnall),
|
||
Fix a problem properly saving URIs (Daniel Veillard),
|
||
wrong error column in structured error when parsing attribute values (Juergen Keil),
|
||
wrong error column in structured error when skipping whitespace in xml decl (Juergen Keil),
|
||
no error column in structured error handler for xml schema validation errors (Juergen Keil),
|
||
Couple of Missing Null checks (Gaurav Gupta),
|
||
Add couple of missing Null checks (Daniel Veillard),
|
||
xmlschemastypes: Fix potential array overflow (Philip Withnall),
|
||
runtest: Fix a memory leak on parse failure (Philip Withnall),
|
||
xmlIO: Fix an FD leak on gzdopen() failure (Philip Withnall),
|
||
xmlcatalog: Fix a memory leak on quit (Philip Withnall),
|
||
HTMLparser: Correctly initialise a stack allocated structure (Philip Withnall),
|
||
Check for tmon in _xmlSchemaDateAdd() is incorrect (David Kilzer),
|
||
Avoid Possible Null Pointer in trio.c (Gaurav Gupta),
|
||
Fix processing in SAX2 in case of an allocation failure (Daniel Veillard),
|
||
XML Shell command "cd" does not handle "/" at end of path (Daniel Veillard),
|
||
Fix various Missing Null checks (Gaurav Gupta),
|
||
Fix a potential NULL dereference (Daniel Veillard),
|
||
Add a couple of misisng check in xmlRelaxNGCleanupTree (Gaurav Gupta),
|
||
Add a missing argument check (Gaurav Gupta),
|
||
Adding a check in case of allocation error (Gaurav Gupta),
|
||
xmlSaveUri() incorrectly recomposes URIs with rootless paths (Dennis Filder),
|
||
Adding some missing NULL checks (Gaurav),
|
||
Fixes for xmlInitParserCtxt (Daniel Veillard),
|
||
Fix regressions introduced by CVE-2014-0191 patch (Daniel Veillard),
|
||
erroneously ignores a validation error if no error callback set (Daniel Veillard),
|
||
xmllint was not parsing the --c14n11 flag (Sérgio Batista),
|
||
Avoid Possible null pointer dereference in memory debug mode (Gaurav),
|
||
Avoid Double Null Check (Gaurav),
|
||
Restore context size and position after XPATH_OP_ARG (Nick Wellnhofer),
|
||
Fix xmlParseInNodeContext() if node is not element (Daniel Veillard),
|
||
Avoid a possible NULL pointer dereference (Gaurav),
|
||
Fix xmlTextWriterWriteElement when a null content is given (Daniel Veillard),
|
||
Fix an typo 'onrest' in htmlScriptAttributes (Daniel Veillard),
|
||
fixing a ptotential uninitialized access (Daniel Veillard),
|
||
Fix an fd leak in an error case (Daniel Veillard),
|
||
Missing initialization for the catalog module (Daniel Veillard),
|
||
Handling of XPath function arguments in error case (Nick Wellnhofer),
|
||
Fix a couple of missing NULL checks (Gaurav),
|
||
Avoid a possibility of dangling encoding handler (Gaurav),
|
||
Fix HTML push parser to accept HTML_PARSE_NODEFDTD (Arnold Hendriks),
|
||
Fix a bug loading some compressed files (Mike Alexander),
|
||
Fix XPath node comparison bug (Gaurav),
|
||
Type mismatch in xmlschemas.c (Gaurav),
|
||
Type mismatch in xmlschemastypes.c (Gaurav),
|
||
Avoid a deadcode in catalog.c (Daniel Veillard),
|
||
run close socket on Solaris, same as we do on other platforms (Denis Pauk),
|
||
Fix pointer dereferenced before null check (Gaurav),
|
||
Fix a potential NULL dereference in tree code (Daniel Veillard),
|
||
Fix potential NULL pointer dereferences in regexp code (Gaurav),
|
||
xmllint --pretty crashed without following numeric argument (Tim Galeckas),
|
||
Fix XPath expressions of the form '@ns:*' (Nick Wellnhofer),
|
||
Fix XPath '//' optimization with predicates (Nick Wellnhofer),
|
||
Clear up a potential NULL dereference (Daniel Veillard),
|
||
Fix a possible NULL dereference (Gaurav),
|
||
Avoid crash if allocation fails (Daniel Veillard),
|
||
Remove occasional leading space in XPath number formatting (Daniel Veillard),
|
||
Fix handling of mmap errors (Daniel Veillard),
|
||
Catch malloc error and exit accordingly (Daniel Veillard),
|
||
missing else in xlink.c (Ami Fischman),
|
||
Fix a parsing bug on non-ascii element and CR/LF usage (Daniel Veillard),
|
||
Fix a regression in xmlGetDocCompressMode() (Daniel Veillard),
|
||
properly quote the namespace uris written out during c14n (Aleksey Sanin),
|
||
Remove premature XInclude check on URI being relative (Alexey Neyman),
|
||
Fix missing break on last() function for attributes (dcb),
|
||
Do not URI escape in server side includes (Romain Bondue),
|
||
Fix an error in xmlCleanupParser (Alexander Pastukhov)
|
||
|
||
- Documentation:
|
||
typo in error messages "colon are forbidden from..." (Daniel Veillard),
|
||
Fix a link to James SAX documentation old page (Daniel Veillard),
|
||
Fix typos in relaxng.c (Jan Pokorný),
|
||
Fix a doc typo (Daniel Veillard),
|
||
Fix typos in {tree,xpath}.c (errror) (Jan Pokorný),
|
||
Add limitations about encoding conversion (Daniel Veillard),
|
||
Fix typos in xmlschemas{,types}.c (Jan Pokorný),
|
||
Fix incorrect spelling entites->entities (Jan Pokorný),
|
||
Forgot to document 2.9.1 release, regenerate docs (Daniel Veillard)
|
||
|
||
- Portability:
|
||
AC_CONFIG_FILES and executable bit (Roumen Petrov),
|
||
remove HAVE_CONFIG_H dependency in testlimits.c (Roumen Petrov),
|
||
fix some tabs mixing incompatible with python3 (Roumen Petrov),
|
||
Visual Studio 14 CTP defines snprintf() (Francis Dupont),
|
||
OS400: do not try to copy unexisting doc files (Patrick Monnerat),
|
||
OS400: use either configure.ac or configure.in. (Patrick Monnerat),
|
||
os400: make-src.sh: create physical file with target CCSID (Patrick Monnerat),
|
||
OS400: Add some more C macros equivalent procedures. (Patrick Monnerat),
|
||
OS400: use C macros to implement equivalent RPG support procedures. (Patrick Monnerat),
|
||
OS400: implement XPath macros as procedures for ILE/RPG support. (Patrick Monnerat),
|
||
OS400: include in distribution tarball. (Patrick Monnerat),
|
||
OS400: Add README: compilation directives and OS/400 specific stuff. (Patrick Monnerat),
|
||
OS400: Add compilation scripts. (Patrick Monnerat),
|
||
OS400: ILE RPG language header files. (Patrick Monnerat),
|
||
OS400: implement some macros as functions for ILE/RPG language support (that as no macros). (Patrick Monnerat),
|
||
OS400: UTF8<-->EBCDIC wrappers for system and external library calls (Patrick Monnerat),
|
||
OS400: Easy character transcoding support (Patrick Monnerat),
|
||
OS400: iconv functions compatibility wrappers and table builder. (Patrick Monnerat),
|
||
OS400: create architecture directory. Implement dlfcn emulation. (Patrick Monnerat),
|
||
Fix building when configuring without xpath and xptr (Daniel Veillard),
|
||
configure: Add --with-python-install-dir (Jonas Eriksson),
|
||
Fix compilation with minimum and xinclude. (Nicolas Le Cam),
|
||
Compile out use of xmlValidateNCName() when not available. (Nicolas Le Cam),
|
||
Fix compilation with minimum and schematron. (Nicolas Le Cam),
|
||
Legacy needs xmlSAX2StartElement() and xmlSAX2EndElement(). (Nicolas Le Cam),
|
||
Don't use xmlValidateName() when not available. (Nicolas Le Cam),
|
||
Fix a portability issue on Windows (Longstreth Jon),
|
||
Various portability patches for OpenVMS (Jacob (Jouk) Jansen),
|
||
Use specific macros for portability to OS/400 (Patrick Monnerat),
|
||
Add macros needed for OS/400 portability (Patrick Monnerat),
|
||
Portability patch for fopen on OS/400 (Patrick Monnerat),
|
||
Portability fixes for OS/400 (Patrick Monnerat),
|
||
Improve va_list portability (Patrick Monnerat),
|
||
Portability fix (Patrick Monnerat),
|
||
Portability fix (Patrick Monnerat),
|
||
Generic portability fix (Patrick Monnerat),
|
||
Shortening lines in headers (Patrick Monnerat),
|
||
build: Use pkg-config to find liblzma in preference to AC_CHECK_LIB (Philip Withnall),
|
||
build: Add @LZMA_LIBS@ to libxml’s pkg-config files (Philip Withnall),
|
||
fix some tabs mixing incompatible with python3 (Daniel Veillard),
|
||
add additional defines checks for support "./configure --with-minimum" (Denis Pauk),
|
||
Another round of fixes for older versions of Python (Arfrever Frehtes Taifersar Arahesis),
|
||
python: fix drv_libxml2.py for python3 compatibility (Alexandre Rostovtsev),
|
||
python: Fix compiler warnings when building python3 bindings (Armin K),
|
||
Fix for compilation with python 2.6.8 (Petr Sumbera)
|
||
|
||
- Improvements:
|
||
win32/libxml2.def.src after rebuild in doc (Roumen Petrov),
|
||
elfgcchack.h: more legacy needs xmlSAX2StartElement() and xmlSAX2EndElement() (Roumen Petrov),
|
||
elfgcchack.h: add xmlXPathNodeEval and xmlXPathSetContextNode (Roumen Petrov),
|
||
Provide cmake module (Samuel Martin),
|
||
Fix a couple of issues raised by make dist (Daniel Veillard),
|
||
Fix and add const qualifiers (Kurt Roeckx),
|
||
Preparing for upcoming release of 2.9.2 (Daniel Veillard),
|
||
Fix zlib and lzma libraries check via command line (Dmitriy),
|
||
wrong error column in structured error when parsing end tag (Juergen Keil),
|
||
doc/news.html: small update to avoid line join while generating NEWS. (Patrick Monnerat),
|
||
Add methods for python3 iterator (Ron Angeles),
|
||
Support element node traversal in document fragments. (Kyle VanderBeek),
|
||
xmlNodeSetName: Allow setting the name to a substring of the currently set name (Tristan Van Berkom),
|
||
Added macros for argument casts (Eric Zurcher),
|
||
adding init calls to xml and html Read parsing entry points (Daniel Veillard),
|
||
Get rid of 'REPLACEMENT CHARACTER' Unicode chars in xmlschemas.c (Jan Pokorný),
|
||
Implement choice for name classes on attributes (Shaun McCance),
|
||
Two small namespace tweaks (Daniel Veillard),
|
||
xmllint --memory should fail on empty files (Daniel Veillard),
|
||
Cast encoding name to char pointer to match arg type (Nikolay Sivov)
|
||
|
||
- Cleanups:
|
||
Removal of old configure.in (Daniel Veillard),
|
||
Unreachable code in tree.c (Gaurav Gupta),
|
||
Remove a couple of dead conditions (Gaurav Gupta),
|
||
Avoid some dead code and cleanup in relaxng.c (Gaurav),
|
||
Drop not needed checks (Denis Pauk),
|
||
Fix a wrong test (Daniel Veillard)
|
||
|
||
|
||
</changes>
|
||
</product>
|
||
</xsa>
|