libxml2-tools-2.9.7-150000.3.51.1 < > , S cO
p9|_ 7`dUe#&斐"DEr5:cA1ktm"W˖;}kQExnpliM@N VR6n`_Yqiw@p,4
J~V}~mt'j;btዷƚE+AͰ
_[úPuMd?[ 4jomO/ > A 5( ? 5 d $ 7 ! , < D
L \ `
d t \ 2 ( a 8 h $ 9 $ : $ B / F / G / H / I 0 X 0 Y 0 Z 0X [ 0\ \ 0p ] 0 ^ 0 b 0 c 1x d 1 e 1 f 1 l 1 u 2 v 2 w 40 x 4@ y 4P z 4 4 4 4 5 C libxml2-tools 2.9.7 150000.3.51.1 Tools using libxml This package contains xmllint, a very useful tool proving libxml's power. cO
ibs-arm-5 6eSUSE Linux Enterprise 15 SUSE LLC MIT https://www.suse.com/ Productivity/Text/Utilities http://xmlsoft.org linux aarch64 x P
| !큤 cOcOcOcO4e273c262561f159b9ef382b690e020ba555dd7d92f70e8108210c47b4fb1096 24aa86943797194fb086afb25a883a7740da7b15aa8999bc61b1a2fce6f6a6c1 579779594d0843f978bd610ce144d0e3874d17136967fb403bd734356405fefb 5974236f0740926fe974baf81e83f67bbe2df201ef3871a7a5a44c961d8df6d5 root root root root root root root root libxml2-2.9.7-150000.3.51.1.src.rpm libxml2 libxml2-tools libxml2-tools(aarch-64) @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
ld-linux-aarch64.so.1()(64bit) ld-linux-aarch64.so.1(GLIBC_2.17)(64bit) libc.so.6()(64bit) libc.so.6(GLIBC_2.17)(64bit) libreadline.so.7()(64bit) libxml2.so.2()(64bit) libxml2.so.2(LIBXML2_2.4.30)(64bit) libxml2.so.2(LIBXML2_2.5.0)(64bit) libxml2.so.2(LIBXML2_2.5.2)(64bit) libxml2.so.2(LIBXML2_2.5.6)(64bit) libxml2.so.2(LIBXML2_2.5.7)(64bit) libxml2.so.2(LIBXML2_2.5.8)(64bit) libxml2.so.2(LIBXML2_2.6.0)(64bit) libxml2.so.2(LIBXML2_2.6.18)(64bit) libxml2.so.2(LIBXML2_2.6.20)(64bit) libxml2.so.2(LIBXML2_2.6.21)(64bit) libxml2.so.2(LIBXML2_2.6.3)(64bit) libxml2.so.2(LIBXML2_2.6.8)(64bit) libxml2.so.2(LIBXML2_2.9.0)(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.1 cMCc @bq@b
`` @`N@`N@`N@_G@_V ^V@^Y ^(9@^
@]fl] @[@[@Z@YéYéY)@YBvYA%@Y"XWXWH6W>@W(VTQ@TWn@TWn@TSyTAdavid.anes@suse.com pmonreal@suse.com david.anes@suse.com david.anes@suse.com pmonreal@suse.com pmonreal@suse.com pmonreal@suse.com pmonreal@suse.com pmonreal@suse.com pmonreal@suse.com pmonreal@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com aavindraa@gmail.com jengelh@inai.de tchvatal@suse.com tchvatal@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com pmonrealgonzalez@suse.com kstreitova@suse.com psimons@suse.com kstreitova@suse.com sflees@suse.de rpm@fthiessen.de vcizek@suse.com vcizek@suse.com vcizek@suse.com vcizek@suse.com - Security fixes:
* [CVE-2022-40303, bsc#1204366] Fix integer overflows with
XML_PARSE_HUGE
+ Added patch libxml2-CVE-2022-40303.patch
* [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
entity reference cycles
+ Added patch libxml2-CVE-2022-40304.patch - Security fix: [bsc#1201978, CVE-2016-3709]
* Cross-site scripting vulnerability after commit 960f0e2
* Add libxml2-CVE-2016-3709.patch - Security fix: [bsc#1199132, CVE-2022-29824]
* Integer overflow leading to out-of-bounds write in buf.c
(xmlBuf*) and tree.c (xmlBuffer*)
* Add libxml2-CVE-2022-29824.patch - Security fix: [bsc#1196490, CVE-2022-23308]
* Use-after-free of ID and IDREF attributes.
* Add libxml2-CVE-2022-23308.patch - Security fix: [bsc#1186015, CVE-2021-3541]
* Exponential entity expansion attack bypasses all existing
protection mechanisms.
* Add libxml2-CVE-2021-3541.patch - Security fix: [bsc#1185698, bsc#1185879, CVE-2021-3537]
* NULL pointer dereference in valid.c:xmlValidBuildAContentModel
* Add libxml2-CVE-2021-3537.patch - Security fix: [bsc#1185408, CVE-2021-3518]
* Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
* Add libxml2-CVE-2021-3518.patch - Security fix: [bsc#1185410, CVE-2021-3517]
* Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
* Add libxml2-CVE-2021-3517.patch - Security fix: [bsc#1185409, CVE-2021-3516]
* Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
* Add libxml2-CVE-2021-3516.patch - Avoid quadratic checking of identity-constraints: [bsc#1178823]
* key/unique/keyref schema attributes currently use qudratic loops
to check their various constraints (that keys are unique and that
keyrefs refer to existing keys).
* This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch - Security fix: [bsc#1176179, CVE-2020-24977]
* xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch - Fix invalid xmlns references since the fix for CVE-2019-19956 [bsc#1172021]
- Remove libxml2-CVE-2019-19956.patch - Security fix: [bsc#1161521, CVE-2019-20388]
* Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch - Security fix: [bsc#1161517, CVE-2020-7595]
* xmlStringLenDecodeEntities in parser.c has an infinite loop in
a certain end-of-file situation
- Add libxml2-CVE-2020-7595.patch - Security fix: [bsc#1159928, CVE-2019-19956]
* Memory leak related to newDoc->oldNs in xmlParseBalancedChunkMemoryRecover:parser.c
- Add libxml2-CVE-2019-19956.patch - Synchronize changelog files for libxml2 and python-libxml2-python [bsc#1123919] - Added a new configurable variable XPATH_DEFAULT_MAX_NODESET_LENGTH
to avoid nodeset limit when processing large XML files [bsc#1135123]
* Added libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch - Security fix:
[bsc#1088279, CVE-2018-9251][bsc#1105166, CVE-2018-14567]
* Infinite loop in LZMA decompression
* Fixes CVE-2018-9251 introduced by CVE-2017-18258
* Added libxml2-CVE-2018-14567.patch - Security fix [bsc#1102046, CVE-2018-14404]
* NULL pointer dereference in xpath.c:xmlXPathCompOpEval() can
allow attackers to cause a denial of service
* Added libxml2-CVE-2018-14404.patch - Version update to 2.9.7 release:
* Bug Fixes:
+ xmlcatalog: restore ability to query system catalog easily
+ Fix comparison of nodesets to strings
* Improvements:
+ Add Makefile rules to rebuild HTML man pages
+ Remove generated file python/setup.py from version control
+ Fix mixed decls and code in timsort.h
+ Rework handling of return values in thread tests
+ Fix unused variable warnings in testrecurse
+ Fix -Wimplicit-fallthrough warnings
+ Upgrade timsort.h to latest revision
+ Fix a couple of warnings in dict.c and threads.c
+ Fix unused variable warnings in nanohttp.c
+ Don't include winsock2.h in xmllint.c
+ Use __linux__ macro in generated code
* Portability:
+ Add declaration for DllMain
+ Fix preprocessor conditional in threads.h
+ Fix macro redefinition warning
+ many Windows specific improvements
* Documentation:
+ xmlcatalog: refresh man page wrt. quering system catalog easily
- Includes bug fixes from 2.9.6:
* Fix XPath stack frame logic
* Report undefined XPath variable error message
* Fix regression with librsvg
* Handle more invalid entity values in recovery mode
* Fix structured validation errors
* Fix memory leak in LZMA decompressor
* Set memory limit for LZMA decompression
* Handle illegal entity values in recovery mode
* Fix debug dump of streaming XPath expressions
* Fix memory leak in nanoftp
* Fix memory leaks in SAX1 parser
- Drop libxml2-bug787941.patch
* upstreamed in 3157cf4e53c03bc3da604472c015c63141907db8 - Update package summaries and RPM groups. Trim descriptions for
size on secondary subpackages. Replace install call by a
commonly-used macro. - Add patch to fix TW integration:
* libxml2-bug787941.patch - Version update to 2.9.5 release:
* Merged all the previous cve fixes that were patched in
* Few small tweaks
- Remove merged patches:
* libxml2-CVE-2016-4658.patch
* libxml2-CVE-2017-0663.patch
* libxml2-CVE-2017-5969.patch
* libxml2-CVE-2017-9047.patch
* libxml2-CVE-2017-9048.patch
* libxml2-CVE-2017-9049.patch
* libxml2-2.9.4-fix_attribute_decoding.patch - Security fix:
* libxml2-CVE-2017-0663.patch [bsc#1044337, CVE-2017-0663]
* Fix Heap buffer overflow in xmlAddID - Security fix:
* libxml2-CVE-2017-5969.patch [bsc#1024989, CVE-2017-5969]
* Fix NULL pointer deref in xmlDumpElementContent - Security fixes:
* libxml2-CVE-2017-9049.patch [bsc#1039066]
* heap-based buffer overflow (xmlDictComputeFastKey func)
* libxml2-CVE-2017-9048.patch [bsc#1039063]
* stack overflow vulnerability (xmlSnprintfElementContent func)
* libxml2-CVE-2017-9047.patch [bsc#1039064]
* stack overflow vulnerability (xmlSnprintfElementContent func) - Added libxml2-CVE-2016-4658.patch: Disallow namespace nodes in
XPointer ranges. Namespace nodes must be copied to avoid
use-after-free errors. But they don't necessarily have a physical
representation in a document, so simply disallow them in XPointer
ranges [bsc#1005544] [CVE-2016-4658] - add libxml2-2.9.4-fix_attribute_decoding.patch to fix attribute
decoding during XML schema validation [bnc#983288] - Update libxml2 to version libxml2-2.9.4. The new version is
resistant against CVE-2016-3627, CVE-2016-1833, CVE-2016-1835,
CVE-2016-1837, CVE-2016-1836, CVE-2016-1839, CVE-2016-1838,
CVE-2016-1840, CVE-2016-4483, CVE-2016-1834, CVE-2016-3705, and
CVE-2016-1762.
- Remove obsolete patches libxml2-2.9.1-CVE-2016-3627.patch,
0001-Add-missing-increments-of-recursion-depth-counter-to.patch,
and libxml2-2.9.3-bogus_UTF-8_encoding_error.patch. - add libxml2-2.9.3-bogus_UTF-8_encoding_error.patch to fix XML
push parser that fails with bogus UTF-8 encoding error when
multi-byte character in large CDATA section is split across
buffer [bnc#962796] - Add libxml2-2.9.1-CVE-2016-3627.patch to fix stack exhaustion
while parsing certain XML files in recovery mode (CVE-2016-3627,
bnc#972335).
- Add 0001-Add-missing-increments-of-recursion-depth-counter-to.patch
to improve protection against Billion Laughs Attack (bnc#975947). - Update to new upstream release 2.9.3 (bsc#954429):
* Fixes for CVE-2015-8035, CVE-2015-7942, CVE-2015-7941,
CVE-2015-1819, CVE-2015-7497, CVE-2015-7498, CVE-2015-5312,
CVE-2015-7499, CVE-2015-7500 and CVE-2015-8242
* And other bugfixes
- Removed upstream fixed patches:
* libxml2-dont_initialize_catalog.patch
* 0001-Fix-missing-entities-after-CVE-2014-3660-fix.patch
* 0002-Adding-example-from-bugs-738805-to-regression-tests.patch - fix a missing entities after CVE-2014-3660 fix
(https://bugzilla.gnome.org/show_bug.cgi?id=738805)
* added patches:
0001-Fix-missing-entities-after-CVE-2014-3660-fix.patch
0002-Adding-example-from-bugs-738805-to-regression-tests.patch - fix a regression in libxml2 2.9.2
* https://bugzilla.redhat.com/show_bug.cgi?id=1153753
- add libxml2-dont_initialize_catalog.patch - update to 2.9.2
* drop libxml2-CVE-2014-3660.patch (upstream)
* add keyring to verify tarball
Security:
Fix for CVE-2014-3660 billion laugh variant
CVE-2014-0191 Do not fetch external parameter entities
Improvements:
win32/libxml2.def.src after rebuild in doc
elfgcchack.h: more legacy needs xmlSAX2StartElement() and xmlSAX2EndElement()
elfgcchack.h: add xmlXPathNodeEval and xmlXPathSetContextNode
Provide cmake module
Fix a couple of issues raised by make dist
Fix and add const qualifiers
Preparing for upcoming release of 2.9.2
Fix zlib and lzma libraries check via command line
wrong error column in structured error when parsing end tag
doc/news.html: small update to avoid line join while generating NEWS.
Add methods for python3 iterator
Support element node traversal in document fragments
xmlNodeSetName: Allow setting the name to a substring of the currently set name
Added macros for argument casts
adding init calls to xml and html Read parsing entry points
Get rid of 'REPLACEMENT CHARACTER' Unicode chars in xmlschemas.c
Implement choice for name classes on attributes
Two small namespace tweaks
xmllint --memory should fail on empty files
Cast encoding name to char pointer to match arg type - fix for CVE-2014-3660 (bnc#901546)
* denial of service via recursive entity expansion
(related to billion laughs)
* added libxml2-CVE-2014-3660.patch libxml2 ibs-arm-5 1666167821 2.9.7-150000.3.51.1 2.9.7-150000.3.51.1 2.9.7-150000.3.51.1 2.9.7-150000.3.51.1 xmlcatalog xmllint xmlcatalog.1.gz xmllint.1.gz /usr/bin/ /usr/share/man/man1/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:25882/SUSE_SLE-15_Update/99fc00ffab7d65536070d07045275b78-libxml2.SUSE_SLE-15_Update drpm xz 5 aarch64-suse-linux ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=a68321fc353862add18d54fcf018e791072378e1, for GNU/Linux 3.7.0, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=d4edf143fcd4f145bcbcc7b993182486fb726345, for GNU/Linux 3.7.0, stripped troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix) R R R R R R R R R R R R R
R R
R R R R R R R R R R R ܶ
lr_/ utf-8 c6b0950047b48281333c72b8f3bef9dcd640881282409b41d296702d9dd652df ? 7zXZ
! t/,] "k%ndNG{ pmlҏ42
O-Yk4hsC aMJ5GEMm,JT6խo"=' j4sɗdTB[{3hc=^%:
r8f0_%ST+=_a:]{t1u*(oCx=紦X0ܫ$[鵡rH?Q5vZGREKtYp'6g"kC $9 >G% D"L3V>4~(_[/a^d
_wv?B@ʰ"c+Kk5#?E&E rU/_(C)ZR y@kb
G$tSIYku fU #3 ,F\
+;g&,7F8j[3\Fw9
i0d)[a-q ?kw]bP;,=u4\nls%@hFJWӖI] ϕ$T"dw[ױc)6!u03]Mٴ0^VKHi 'k
D;u
=ZU8+Sb#*PH(Ք Fdyyo.$C5rBZk AAI%@i) 5|FnW8Q:ݕX:#n/ 5(ܽ$S I2(
Sޙp ys4#bHÂq]_&; 1ͻ&*Ԉ` YԂ. _`? )ᝅ;hMi%q Oc#V| %_$`
TO0 >OTtM]( _`j#9>5PZ U$1j_a%aiLc =+'c0/%Ra7b*t
TpJ8Sdֻ1iڅ+ـq9eŋ_5wPBeaEНR=8=܆M{1s|y]T p}v{iL발ZThb `x,B!!W&(ԼOcfɪR]t:T+ anWӉ Y[c14 Q4 VW0H!<@Z9$ވG㡪9: q\X<6c1ua> II*
E<@'ca殙̑ B (fX
nx=-\@[ `
:[+ I GbueEum[W.;cbULr pE,߂w 7њ֣G$:^ݫ!jVz 8j*k̚"v9 5 8*,TuE$˸`s#wL`bOVXZeN;D]⣖ SUdT
?O(y"1
N8P{Zkj^w!ge b N#9^ y(sFPU:L:ۑRnGQII U!/iq
("HsuYP(%l'^+W-bNmI d6_[S8C{a{g l!C0¾ Ӕ l=VQLapV(^, ⛹dmsB .x;' E&< wn"D3EJ, 5Kp","Bوt& y$A3 ,~
̑h7Ynd!,*Zg0w 6c'O!s>T~A]1ިlM-sܬ} w|>Q(Nq|XSi
t~{hMDYժ>ǃavNG퇻 h5?O/Ǟ17uYHxmcѱEG"'MZgI(sn% ܠmG!%Z;f<ԷD$<
ew f>x <^ s*䆱U-ga,Q0_' ,1bJ_>m?y쓺%,іA5ޫ+(16]6f1oS4Q J%#/Y W 6z+7)5"#0^!]־fz*_ vtǼ IÎ]~WygԹyH}v~8unvyUm u,8f"LnFyV k="Fε"./ ^X QMX+{]/SK KQpuVNsA!^sA_O0$ʸ#|j!-.yQ ,fU $96 Gm^R2A'7g/Fg>G
-J Iyh"Kɐ㛅 aH1
[m? ${u`B4/ p Y%(~y]аI(P+x+ʹ ZYPl2.Z_{0 J*{S5T˗Hu 6YTiy}% W
8i@F{ GѽLCBz|@qg[:0),P*
bކ}ֆ7D/}dId(ZLvt!i
Ed:ņ HS#h8TWɘeP66q Ƞ{ c.zCd{cu@ߒS|[|! b F@.Hp կLsSZ ה6/89~sty% VýإcUmLd9&:el{[NҒ]y=#(us^(A'6 1=hIDgp~ k:(?!X=Zfc\ ճ0
aXؕӔ.9c6!]`-jPwd{xH6ȉ@<7UqBuA 3ՀR *T:Yf'o jߔO;+ȨMh7ia;c "%6-sC'Vf =El)ǧ_B)΅.:,$Zc;bx5h|gZ!<'،"A.;3qx֠'%EVӳ!:L۴v~s-.͋^ CQI ml'xgjqb# k U_!i2:}.Q0Ƃ.qO۲ZGdM# w%j~b+
PU$fetٶPt i8W'n 3FydVܒ{&7~Ob^qrXz`2n?M̒7cvwyٌSZ"F %lخwm-~VOʽgL-B l>qw
yU)O {. ]yJ}SA7_%
K 3=p2 ~":j" jdM[N{'T3 n^exHq9MOCS{{-#!jƬ{i"˅Lrlɨ7>lg0 fIC6U&0Kt ~6`L ~4b%LNС8<ġ]C*8_ jY@:9l{^ MlUCu=Óu>%AS7do&]f!vf\øCBn~i4 <=K<ʄsQ#"^&l~Gm_1bS,C*q2 ťv }iv++{gy8RWe IEY9lf6sZReʬzpJBWIRwvЯ|8Ѐru,5;GK,b2XQ2MQ:A&]( *Ҩ+2F#ydK Z Gp Z?2
9 y"n$PoYߥP+I
c^uūI'7]7*,rf Mv]#i)1I^W `W>Ʌ i|L{
7P@ݖwGtۢL7`$&, =uq%(4-H+&/5Z댦cyJDm|ZpTfnB7OKᏉ;rh6!S*/fxazbF|:חE]xK3жg pXso;ҭ0!z#/z4' ƵOK^p\_kę]Τz4LL<`<&"w_0*U[Aǁ $ͮ#<,X-^2Ar_j;{fҺY۲ō~p"
٬ɨЮf&~ql'յJ0ƍgKNƋyrJ>2xd fHy9
Uټ5OKU2 PҊ&7ʃ l仺/%H=+>l
AZs_ul-! _~.%=fYtSJU7q,u*y#+,4Vǩ76d=qǰ{BgFJVPOG#O:dwX}'B}F6v:E`+c!A\(
e
yi$J8|ZL
[ 8G380bSSJB[~ ^Wǚ>lN @LaǵN AP@˰hnqrԑx˭5MʟW# ;)ŕrg-2ޮln$p1-HIv G]FV1Y a՞@C"uy1d7K.R;fYy
|TǿGnIy[Nk#kZgF̈́3ml^6 ܇7ҵ& ,Vy"!T8J ά3B !בF!'9r1 m.j G7qL_Mwmӏig ?*bJnQ -Y[:q vG2vz ?bЙDɖpZU7PQy8pWCA?|~ W{yq~|D:~,3?t|"ˊ&Cv6yi=#ZEXE _VTAd
lNlߍ}WQ!-* 5"qc[9M{.J
0$ I6R40FD0-9K a6Q>>Igde 4X g
YZ