Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package libxml2 for openSUSE:Factory checked in at 2023-11-20 21:18:33 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libxml2 (Old) and /work/SRC/openSUSE:Factory/.libxml2.new.2521 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libxml2" Mon Nov 20 21:18:33 2023 rev:122 rq:1126869 version:2.11.6 Changes: -------- --- /work/SRC/openSUSE:Factory/libxml2/libxml2.changes 2023-11-15 21:06:34.815809266 +0100 +++ /work/SRC/openSUSE:Factory/.libxml2.new.2521/libxml2.changes 2023-11-20 21:18:41.508904754 +0100 @@ -1,0 +2,10 @@ +Thu Nov 16 12:44:37 UTC 2023 - Bjørn Lie <bjorn....@gmail.com> + +- Update to version 2.11.6: + * Regressions: + - threads: Fix --with-thread-alloc + - xinclude: Fix âlastâ pointer in xmlXIncludeCopyNode + * Bug fixes: parser: Fix potential use-after-free in + xmlParseCharDataInternal + +------------------------------------------------------------------- Old: ---- libxml2-2.11.5.tar.xz New: ---- libxml2-2.11.6.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libxml2.spec ++++++ --- /var/tmp/diff_new_pack.PYOTxX/_old 2023-11-20 21:18:42.316934575 +0100 +++ /var/tmp/diff_new_pack.PYOTxX/_new 2023-11-20 21:18:42.320934722 +0100 @@ -25,7 +25,7 @@ %endif Name: libxml2%{?dash}%{flavor} -Version: 2.11.5 +Version: 2.11.6 Release: 0 License: MIT Summary: A Library to Manipulate XML Files ++++++ libxml2-2.11.5.tar.xz -> libxml2-2.11.6.tar.xz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libxml2-2.11.5/NEWS new/libxml2-2.11.6/NEWS --- old/libxml2-2.11.5/NEWS 2023-08-09 14:37:24.000000000 +0200 +++ new/libxml2-2.11.6/NEWS 2023-11-16 12:58:36.000000000 +0100 @@ -1,5 +1,17 @@ NEWS file for libxml2 +v2.11.6: Nov 16 2023 + +### Regressions + +- threads: Fix --with-thread-alloc +- xinclude: Fix 'last' pointer in xmlXIncludeCopyNode + +### Bug fixes + +- parser: Fix potential use-after-free in xmlParseCharDataInternal + + v2.11.5: Aug 9 2023 ### Regressions diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libxml2-2.11.5/configure new/libxml2-2.11.6/configure --- old/libxml2-2.11.5/configure 2023-08-09 14:39:33.000000000 +0200 +++ new/libxml2-2.11.6/configure 2023-11-16 12:59:20.000000000 +0100 @@ -1,6 +1,6 @@ #! /bin/sh # Guess values for system-dependent variables and create Makefiles. -# Generated by GNU Autoconf 2.71 for libxml2 2.11.5. +# Generated by GNU Autoconf 2.71 for libxml2 2.11.6. # # # Copyright (C) 1992-1996, 1998-2017, 2020-2021 Free Software Foundation, @@ -618,8 +618,8 @@ # Identity of this package. PACKAGE_NAME='libxml2' PACKAGE_TARNAME='libxml2' -PACKAGE_VERSION='2.11.5' -PACKAGE_STRING='libxml2 2.11.5' +PACKAGE_VERSION='2.11.6' +PACKAGE_STRING='libxml2 2.11.6' PACKAGE_BUGREPORT='' PACKAGE_URL='' @@ -1541,7 +1541,7 @@ # Omit some internal or obsolete options to make the list less imposing. # This message is too long to be a string in the A/UX 3.1 sh. cat <<_ACEOF -\`configure' configures libxml2 2.11.5 to adapt to many kinds of systems. +\`configure' configures libxml2 2.11.6 to adapt to many kinds of systems. Usage: $0 [OPTION]... [VAR=VALUE]... @@ -1612,7 +1612,7 @@ if test -n "$ac_init_help"; then case $ac_init_help in - short | recursive ) echo "Configuration of libxml2 2.11.5:";; + short | recursive ) echo "Configuration of libxml2 2.11.6:";; esac cat <<\_ACEOF @@ -1785,7 +1785,7 @@ test -n "$ac_init_help" && exit $ac_status if $ac_init_version; then cat <<\_ACEOF -libxml2 configure 2.11.5 +libxml2 configure 2.11.6 generated by GNU Autoconf 2.71 Copyright (C) 2021 Free Software Foundation, Inc. @@ -2060,7 +2060,7 @@ This file contains any messages produced by compilers while running configure, to aid debugging if configure makes a mistake. -It was created by libxml2 $as_me 2.11.5, which was +It was created by libxml2 $as_me 2.11.6, which was generated by GNU Autoconf 2.71. Invocation command line was $ $0$ac_configure_args_raw @@ -2898,7 +2898,7 @@ LIBXML_MAJOR_VERSION=2 LIBXML_MINOR_VERSION=11 -LIBXML_MICRO_VERSION=5 +LIBXML_MICRO_VERSION=6 LIBXML_MICRO_VERSION_SUFFIX= LIBXML_VERSION=$LIBXML_MAJOR_VERSION.$LIBXML_MINOR_VERSION.$LIBXML_MICRO_VERSION$LIBXML_MICRO_VERSION_SUFFIX LIBXML_VERSION_INFO=`expr $LIBXML_MAJOR_VERSION + $LIBXML_MINOR_VERSION`:$LIBXML_MICRO_VERSION:$LIBXML_MINOR_VERSION @@ -3437,7 +3437,7 @@ # Define the identity of the package. PACKAGE='libxml2' - VERSION='2.11.5' + VERSION='2.11.6' printf "%s\n" "#define PACKAGE \"$PACKAGE\"" >>confdefs.h @@ -17034,7 +17034,7 @@ # report actual input values of CONFIG_FILES etc. instead of their # values after options handling. ac_log=" -This file was extended by libxml2 $as_me 2.11.5, which was +This file was extended by libxml2 $as_me 2.11.6, which was generated by GNU Autoconf 2.71. Invocation command line was CONFIG_FILES = $CONFIG_FILES @@ -17102,7 +17102,7 @@ cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1 ac_cs_config='$ac_cs_config_escaped' ac_cs_version="\\ -libxml2 config.status 2.11.5 +libxml2 config.status 2.11.6 configured by $0, generated by GNU Autoconf 2.71, with options \\"\$ac_cs_config\\" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libxml2-2.11.5/configure.ac new/libxml2-2.11.6/configure.ac --- old/libxml2-2.11.5/configure.ac 2023-08-09 14:32:43.000000000 +0200 +++ new/libxml2-2.11.6/configure.ac 2023-11-16 12:58:50.000000000 +0100 @@ -3,7 +3,7 @@ m4_define([MAJOR_VERSION], 2) m4_define([MINOR_VERSION], 11) -m4_define([MICRO_VERSION], 5) +m4_define([MICRO_VERSION], 6) AC_INIT([libxml2],[MAJOR_VERSION.MINOR_VERSION.MICRO_VERSION]) AC_CONFIG_SRCDIR([entities.c]) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libxml2-2.11.5/parser.c new/libxml2-2.11.6/parser.c --- old/libxml2-2.11.5/parser.c 2023-08-09 14:27:37.000000000 +0200 +++ new/libxml2-2.11.6/parser.c 2023-11-16 12:56:47.000000000 +0100 @@ -4494,6 +4494,8 @@ line = ctxt->input->line; col = ctxt->input->col; } + if (ctxt->instate == XML_PARSER_EOF) + return; } ctxt->input->cur = in; if (*in == 0xD) { @@ -14322,7 +14324,9 @@ __xmlGlobalInitMutexLock(); if (xmlParserInitialized == 0) { #endif -#if defined(_WIN32) && (!defined(LIBXML_STATIC) || defined(LIBXML_STATIC_FOR_DLL)) +#if defined(_WIN32) && \ + !defined(LIBXML_THREAD_ALLOC_ENABLED) && \ + (!defined(LIBXML_STATIC) || defined(LIBXML_STATIC_FOR_DLL)) if (xmlFree == free) atexit(xmlCleanupParser); #endif @@ -14392,7 +14396,9 @@ xmlParserInitialized = 0; } -#if defined(HAVE_ATTRIBUTE_DESTRUCTOR) && !defined(LIBXML_STATIC) && \ +#if defined(HAVE_ATTRIBUTE_DESTRUCTOR) && \ + !defined(LIBXML_THREAD_ALLOC_ENABLED) && \ + !defined(LIBXML_STATIC) && \ !defined(_WIN32) static void ATTRIBUTE_DESTRUCTOR diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libxml2-2.11.5/runtest.c new/libxml2-2.11.6/runtest.c --- old/libxml2-2.11.5/runtest.c 2023-08-09 14:27:38.000000000 +0200 +++ new/libxml2-2.11.6/runtest.c 2023-11-16 12:56:47.000000000 +0100 @@ -4384,6 +4384,10 @@ const char *filename = params->filename; int okay = 1; +#ifdef LIBXML_THREAD_ALLOC_ENABLED + xmlMemSetup(xmlMemFree, xmlMemMalloc, xmlMemRealloc, xmlMemoryStrdup); +#endif + if (!strcmp(filename, "test/threads/invalid.xml")) { xmlDoValidityCheckingDefaultValue = 0; xmlGenericErrorContext = stdout; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libxml2-2.11.5/xinclude.c new/libxml2-2.11.6/xinclude.c --- old/libxml2-2.11.5/xinclude.c 2023-08-09 14:27:38.000000000 +0200 +++ new/libxml2-2.11.6/xinclude.c 2023-11-16 12:56:47.000000000 +0100 @@ -733,10 +733,11 @@ return(result); while (cur->next == NULL) { + if (insertParent != NULL) + insertParent->last = insertLast; cur = cur->parent; if (cur == elem) return(result); - insertParent->last = insertLast; insertLast = insertParent; insertParent = insertParent->parent; }