commit xerces-c for openSUSE:Factory
Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package xerces-c for openSUSE:Factory checked in at 2023-12-28 22:55:01 Comparing /work/SRC/openSUSE:Factory/xerces-c (Old) and /work/SRC/openSUSE:Factory/.xerces-c.new.28375 (New) Package is "xerces-c" Thu Dec 28 22:55:01 2023 rev:26 rq:1135297 version:3.2.5 Changes: --- /work/SRC/openSUSE:Factory/xerces-c/xerces-c.changes2022-10-28 19:29:00.638474960 +0200 +++ /work/SRC/openSUSE:Factory/.xerces-c.new.28375/xerces-c.changes 2023-12-28 22:55:10.408650079 +0100 @@ -1,0 +2,8 @@ +Wed Dec 27 11:53:10 UTC 2023 - Dirk Müller + +- update to 3.2.5 (bsc#1159552, CVE-2018-1311): + * [XERCESC-2163] - XercesMessages_en_US.cat is installed to +wrong directory + * [XERCESC-2188] - Use-after-free on external DTD scan + +--- Old: xerces-c-3.2.4.tar.gz xerces-c-3.2.4.tar.gz.asc New: xerces-c-3.2.5.tar.gz xerces-c-3.2.5.tar.gz.asc Other differences: -- ++ xerces-c.spec ++ --- /var/tmp/diff_new_pack.Scqobo/_old 2023-12-28 22:55:11.232680161 +0100 +++ /var/tmp/diff_new_pack.Scqobo/_new 2023-12-28 22:55:11.236680307 +0100 @@ -1,7 +1,7 @@ # # spec file for package xerces-c # -# Copyright (c) 2022 SUSE LLC +# Copyright (c) 2023 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -18,7 +18,7 @@ %define libname libxerces-c-3_2 Name: xerces-c -Version:3.2.4 +Version:3.2.5 Release:0 Summary:A Validating XML Parser License:Apache-2.0 ++ xerces-c-3.2.4.tar.gz -> xerces-c-3.2.5.tar.gz ++ /work/SRC/openSUSE:Factory/xerces-c/xerces-c-3.2.4.tar.gz /work/SRC/openSUSE:Factory/.xerces-c.new.28375/xerces-c-3.2.5.tar.gz differ: char 5, line 1
commit xerces-c for openSUSE:Factory
Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package xerces-c for openSUSE:Factory
checked in at 2022-10-28 19:28:56
Comparing /work/SRC/openSUSE:Factory/xerces-c (Old)
and /work/SRC/openSUSE:Factory/.xerces-c.new.2275 (New)
Package is "xerces-c"
Fri Oct 28 19:28:56 2022 rev:25 rq:1031419 version:3.2.4
Changes:
--- /work/SRC/openSUSE:Factory/xerces-c/xerces-c.changes2020-08-19
18:44:36.307457577 +0200
+++ /work/SRC/openSUSE:Factory/.xerces-c.new.2275/xerces-c.changes
2022-10-28 19:29:00.638474960 +0200
@@ -1,0 +2,23 @@
+Wed Oct 26 22:33:32 UTC 2022 - Dirk M??ller
+
+- update to 3.2.4:
+ * [XERCESC-2195] - Invalid attribute in .gitattributes file
+ * [XERCESC-2196] - cross-compiling issue
+ * [XERCESC-2214] - Wrong delete[] in MemBufInputSource dtor
+ * [XERCESC-2217] - ICUTranscoder::transcodeFrom buffer overflow
+ * [XERCESC-2218] - CurlURLInputStream constructor memory leak
+ * [XERCESC-2219] - XMLReader constructor: memory leak when
refreshRawBuffer() throws
+ * [XERCESC-2221] - InMemMsgLoader::loadMsg(): fix memory leak when
transcoding fails
+ * [XERCESC-] - DFAContentModel::checkUniqueParticleAttribution(): fix
memory leak
+ * [XERCESC-2223] - SAX2XMLReaderImpl::error(): potential memory leak
+ * [XERCESC-2225] - Link to installed CMake targets of CURL
+ * [XERCESC-2227] - Memleak fixes in ContentSpecNode and ComplexTypeInfo
classes
+ * [XERCESC-2228] - DFAContentModel: fix memory leaks when
OutOfMemoryException occurs
+ * [XERCESC-2229] - IGXMLScanner::scanDocTypeDecl(): fix memory leak on
exception
+ * [XERCESC-2230] - DFAContentModel::buildSyntaxTree(): fix memory leaks when
OutOfMemoryException occurs
+ * [XERCESC-2235] - DFAContentModel::buildDFA(): correctly zero-initialize
fFollowList
+ * [XERCESC-2236] - Dependencies aren't loaded when using provided CMake
config package
+ * [XERCESC-2241] - Integer overflows in DFAContentModel class
+ * [XERCESC-2242] - Non-default curl location breaks autoconf link detection
+
+---
Old:
xerces-c-3.2.3.tar.gz
xerces-c-3.2.3.tar.gz.asc
New:
xerces-c-3.2.4.tar.gz
xerces-c-3.2.4.tar.gz.asc
Other differences:
--
++ xerces-c.spec ++
--- /var/tmp/diff_new_pack.g8VCGF/_old 2022-10-28 19:29:02.134482462 +0200
+++ /var/tmp/diff_new_pack.g8VCGF/_new 2022-10-28 19:29:02.138482482 +0200
@@ -1,7 +1,7 @@
#
# spec file for package xerces-c
#
-# Copyright (c) 2020 SUSE LLC
+# Copyright (c) 2022 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -18,13 +18,13 @@
%define libname libxerces-c-3_2
Name: xerces-c
-Version:3.2.3
+Version:3.2.4
Release:0
Summary:A Validating XML Parser
License:Apache-2.0
URL:https://xerces.apache.org/xerces-c/
-Source0:
http://www.apache.org/dist/xerces/c/3/sources/%{name}-%{version}.tar.gz
-Source1:
http://www.apache.org/dist/xerces/c/3/sources/%{name}-%{version}.tar.gz.asc
+Source0:
https://www.apache.org/dist/xerces/c/3/sources/%{name}-%{version}.tar.gz
+Source1:
https://www.apache.org/dist/xerces/c/3/sources/%{name}-%{version}.tar.gz.asc
Source2:%{name}.keyring
Source3:baselibs.conf
BuildRequires: fdupes
++ xerces-c-3.2.3.tar.gz -> xerces-c-3.2.4.tar.gz ++
/work/SRC/openSUSE:Factory/xerces-c/xerces-c-3.2.3.tar.gz
/work/SRC/openSUSE:Factory/.xerces-c.new.2275/xerces-c-3.2.4.tar.gz differ:
char 5, line 1
