Script 'mail_helper' called by obssrc
Hello community,

here is the log from the commit of package libxml2 for openSUSE:Factory checked 
in at 2023-11-20 21:18:33
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/libxml2 (Old)
 and      /work/SRC/openSUSE:Factory/.libxml2.new.2521 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "libxml2"

Mon Nov 20 21:18:33 2023 rev:122 rq:1126869 version:2.11.6

Changes:
--------
--- /work/SRC/openSUSE:Factory/libxml2/libxml2.changes  2023-11-15 
21:06:34.815809266 +0100
+++ /work/SRC/openSUSE:Factory/.libxml2.new.2521/libxml2.changes        
2023-11-20 21:18:41.508904754 +0100
@@ -1,0 +2,10 @@
+Thu Nov 16 12:44:37 UTC 2023 - Bjørn Lie <bjorn....@gmail.com>
+
+- Update to version 2.11.6:
+  * Regressions:
+    - threads: Fix --with-thread-alloc
+    - xinclude: Fix ‘last’ pointer in xmlXIncludeCopyNode
+  * Bug fixes: parser: Fix potential use-after-free in
+    xmlParseCharDataInternal
+
+-------------------------------------------------------------------

Old:
----
  libxml2-2.11.5.tar.xz

New:
----
  libxml2-2.11.6.tar.xz

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ libxml2.spec ++++++
--- /var/tmp/diff_new_pack.PYOTxX/_old  2023-11-20 21:18:42.316934575 +0100
+++ /var/tmp/diff_new_pack.PYOTxX/_new  2023-11-20 21:18:42.320934722 +0100
@@ -25,7 +25,7 @@
 %endif
 
 Name:           libxml2%{?dash}%{flavor}
-Version:        2.11.5
+Version:        2.11.6
 Release:        0
 License:        MIT
 Summary:        A Library to Manipulate XML Files

++++++ libxml2-2.11.5.tar.xz -> libxml2-2.11.6.tar.xz ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/libxml2-2.11.5/NEWS new/libxml2-2.11.6/NEWS
--- old/libxml2-2.11.5/NEWS     2023-08-09 14:37:24.000000000 +0200
+++ new/libxml2-2.11.6/NEWS     2023-11-16 12:58:36.000000000 +0100
@@ -1,5 +1,17 @@
 NEWS file for libxml2
 
+v2.11.6: Nov 16 2023
+
+### Regressions
+
+- threads: Fix --with-thread-alloc
+- xinclude: Fix 'last' pointer in xmlXIncludeCopyNode
+
+### Bug fixes
+
+- parser: Fix potential use-after-free in xmlParseCharDataInternal
+
+
 v2.11.5: Aug 9 2023
 
 ### Regressions
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/libxml2-2.11.5/configure new/libxml2-2.11.6/configure
--- old/libxml2-2.11.5/configure        2023-08-09 14:39:33.000000000 +0200
+++ new/libxml2-2.11.6/configure        2023-11-16 12:59:20.000000000 +0100
@@ -1,6 +1,6 @@
 #! /bin/sh
 # Guess values for system-dependent variables and create Makefiles.
-# Generated by GNU Autoconf 2.71 for libxml2 2.11.5.
+# Generated by GNU Autoconf 2.71 for libxml2 2.11.6.
 #
 #
 # Copyright (C) 1992-1996, 1998-2017, 2020-2021 Free Software Foundation,
@@ -618,8 +618,8 @@
 # Identity of this package.
 PACKAGE_NAME='libxml2'
 PACKAGE_TARNAME='libxml2'
-PACKAGE_VERSION='2.11.5'
-PACKAGE_STRING='libxml2 2.11.5'
+PACKAGE_VERSION='2.11.6'
+PACKAGE_STRING='libxml2 2.11.6'
 PACKAGE_BUGREPORT=''
 PACKAGE_URL=''
 
@@ -1541,7 +1541,7 @@
   # Omit some internal or obsolete options to make the list less imposing.
   # This message is too long to be a string in the A/UX 3.1 sh.
   cat <<_ACEOF
-\`configure' configures libxml2 2.11.5 to adapt to many kinds of systems.
+\`configure' configures libxml2 2.11.6 to adapt to many kinds of systems.
 
 Usage: $0 [OPTION]... [VAR=VALUE]...
 
@@ -1612,7 +1612,7 @@
 
 if test -n "$ac_init_help"; then
   case $ac_init_help in
-     short | recursive ) echo "Configuration of libxml2 2.11.5:";;
+     short | recursive ) echo "Configuration of libxml2 2.11.6:";;
    esac
   cat <<\_ACEOF
 
@@ -1785,7 +1785,7 @@
 test -n "$ac_init_help" && exit $ac_status
 if $ac_init_version; then
   cat <<\_ACEOF
-libxml2 configure 2.11.5
+libxml2 configure 2.11.6
 generated by GNU Autoconf 2.71
 
 Copyright (C) 2021 Free Software Foundation, Inc.
@@ -2060,7 +2060,7 @@
 This file contains any messages produced by compilers while
 running configure, to aid debugging if configure makes a mistake.
 
-It was created by libxml2 $as_me 2.11.5, which was
+It was created by libxml2 $as_me 2.11.6, which was
 generated by GNU Autoconf 2.71.  Invocation command line was
 
   $ $0$ac_configure_args_raw
@@ -2898,7 +2898,7 @@
 
 LIBXML_MAJOR_VERSION=2
 LIBXML_MINOR_VERSION=11
-LIBXML_MICRO_VERSION=5
+LIBXML_MICRO_VERSION=6
 LIBXML_MICRO_VERSION_SUFFIX=
 
LIBXML_VERSION=$LIBXML_MAJOR_VERSION.$LIBXML_MINOR_VERSION.$LIBXML_MICRO_VERSION$LIBXML_MICRO_VERSION_SUFFIX
 LIBXML_VERSION_INFO=`expr $LIBXML_MAJOR_VERSION + 
$LIBXML_MINOR_VERSION`:$LIBXML_MICRO_VERSION:$LIBXML_MINOR_VERSION
@@ -3437,7 +3437,7 @@
 
 # Define the identity of the package.
  PACKAGE='libxml2'
- VERSION='2.11.5'
+ VERSION='2.11.6'
 
 
 printf "%s\n" "#define PACKAGE \"$PACKAGE\"" >>confdefs.h
@@ -17034,7 +17034,7 @@
 # report actual input values of CONFIG_FILES etc. instead of their
 # values after options handling.
 ac_log="
-This file was extended by libxml2 $as_me 2.11.5, which was
+This file was extended by libxml2 $as_me 2.11.6, which was
 generated by GNU Autoconf 2.71.  Invocation command line was
 
   CONFIG_FILES    = $CONFIG_FILES
@@ -17102,7 +17102,7 @@
 cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
 ac_cs_config='$ac_cs_config_escaped'
 ac_cs_version="\\
-libxml2 config.status 2.11.5
+libxml2 config.status 2.11.6
 configured by $0, generated by GNU Autoconf 2.71,
   with options \\"\$ac_cs_config\\"
 
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/libxml2-2.11.5/configure.ac 
new/libxml2-2.11.6/configure.ac
--- old/libxml2-2.11.5/configure.ac     2023-08-09 14:32:43.000000000 +0200
+++ new/libxml2-2.11.6/configure.ac     2023-11-16 12:58:50.000000000 +0100
@@ -3,7 +3,7 @@
 
 m4_define([MAJOR_VERSION], 2)
 m4_define([MINOR_VERSION], 11)
-m4_define([MICRO_VERSION], 5)
+m4_define([MICRO_VERSION], 6)
 
 AC_INIT([libxml2],[MAJOR_VERSION.MINOR_VERSION.MICRO_VERSION])
 AC_CONFIG_SRCDIR([entities.c])
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/libxml2-2.11.5/parser.c new/libxml2-2.11.6/parser.c
--- old/libxml2-2.11.5/parser.c 2023-08-09 14:27:37.000000000 +0200
+++ new/libxml2-2.11.6/parser.c 2023-11-16 12:56:47.000000000 +0100
@@ -4494,6 +4494,8 @@
                 line = ctxt->input->line;
                 col = ctxt->input->col;
             }
+            if (ctxt->instate == XML_PARSER_EOF)
+                return;
         }
         ctxt->input->cur = in;
         if (*in == 0xD) {
@@ -14322,7 +14324,9 @@
     __xmlGlobalInitMutexLock();
     if (xmlParserInitialized == 0) {
 #endif
-#if defined(_WIN32) && (!defined(LIBXML_STATIC) || 
defined(LIBXML_STATIC_FOR_DLL))
+#if defined(_WIN32) && \
+    !defined(LIBXML_THREAD_ALLOC_ENABLED) && \
+    (!defined(LIBXML_STATIC) || defined(LIBXML_STATIC_FOR_DLL))
         if (xmlFree == free)
             atexit(xmlCleanupParser);
 #endif
@@ -14392,7 +14396,9 @@
     xmlParserInitialized = 0;
 }
 
-#if defined(HAVE_ATTRIBUTE_DESTRUCTOR) && !defined(LIBXML_STATIC) && \
+#if defined(HAVE_ATTRIBUTE_DESTRUCTOR) && \
+    !defined(LIBXML_THREAD_ALLOC_ENABLED) && \
+    !defined(LIBXML_STATIC) && \
     !defined(_WIN32)
 static void
 ATTRIBUTE_DESTRUCTOR
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/libxml2-2.11.5/runtest.c new/libxml2-2.11.6/runtest.c
--- old/libxml2-2.11.5/runtest.c        2023-08-09 14:27:38.000000000 +0200
+++ new/libxml2-2.11.6/runtest.c        2023-11-16 12:56:47.000000000 +0100
@@ -4384,6 +4384,10 @@
     const char *filename = params->filename;
     int okay = 1;
 
+#ifdef LIBXML_THREAD_ALLOC_ENABLED
+    xmlMemSetup(xmlMemFree, xmlMemMalloc, xmlMemRealloc, xmlMemoryStrdup);
+#endif
+
     if (!strcmp(filename, "test/threads/invalid.xml")) {
         xmlDoValidityCheckingDefaultValue = 0;
         xmlGenericErrorContext = stdout;
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/libxml2-2.11.5/xinclude.c 
new/libxml2-2.11.6/xinclude.c
--- old/libxml2-2.11.5/xinclude.c       2023-08-09 14:27:38.000000000 +0200
+++ new/libxml2-2.11.6/xinclude.c       2023-11-16 12:56:47.000000000 +0100
@@ -733,10 +733,11 @@
             return(result);
 
         while (cur->next == NULL) {
+            if (insertParent != NULL)
+                insertParent->last = insertLast;
             cur = cur->parent;
             if (cur == elem)
                 return(result);
-            insertParent->last = insertLast;
             insertLast = insertParent;
             insertParent = insertParent->parent;
         }

Reply via email to