Hello community, here is the log from the commit of package mxml for openSUSE:Factory checked in at 2016-11-21 14:22:37 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/mxml (Old) and /work/SRC/openSUSE:Factory/.mxml.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "mxml" Changes: -------- --- /work/SRC/openSUSE:Factory/mxml/mxml.changes 2015-03-11 09:57:17.000000000 +0100 +++ /work/SRC/openSUSE:Factory/.mxml.new/mxml.changes 2016-11-21 14:22:38.000000000 +0100 @@ -1,0 +2,16 @@ +Fri Nov 11 14:50:28 UTC 2016 - mrueck...@suse.de + +- update to version 2.10 + - The version number in mxml.h was wrong (Bug #532) + - The mxml.spec file was out of date (Bug #521) + - Mini-XML no longer allows malformed element names (Bug #509) + - mxmlLoad* and mxmlSAXLoad* did not properly create text nodes + when MXML_TEXT_CALLBACK was specified (Bug #531) + - mxmlDelete used a recursive algorithm which could require large + amounts of stack space depending on the file (Bug #549, + CVE-2016-4570) (bnc #979205) + - mxmlWrite* used a recursive algorithm which could require large + amounts of stack space depending on the file (Bug #549, + CVE-2016-4571) (bnc #979206) + +------------------------------------------------------------------- Old: ---- mxml-2.9.tar.gz New: ---- mxml-2.10.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ mxml.spec ++++++ --- /var/tmp/diff_new_pack.rru1xz/_old 2016-11-21 14:22:39.000000000 +0100 +++ /var/tmp/diff_new_pack.rru1xz/_new 2016-11-21 14:22:39.000000000 +0100 @@ -1,7 +1,7 @@ # # spec file for package mxml # -# Copyright (c) 2015 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -18,7 +18,7 @@ Name: mxml Url: http://www.msweet.org/projects.php?Z3 -Version: 2.9 +Version: 2.10 Release: 0 Summary: Small XML Parsing Library License: LGPL-2.1+ ++++++ mxml-2.9.tar.gz -> mxml-2.10.tar.gz ++++++ ++++ 2550 lines of diff (skipped)
