From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail02.haj.ipfire.org (localhost [IPv6:::1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4cQXXR75Y0z36Wb for ; Mon, 15 Sep 2025 17:46:47 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail01.haj.ipfire.org", Issuer "R13" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4cQXXM0QLDz331t for ; Mon, 15 Sep 2025 17:46:43 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4cQXXK50Fgz3tv; Mon, 15 Sep 2025 17:46:41 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1757958401; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=0PU/JRa2NpZr4A1tVI0Oe5nxuTBXu0t5E+2zkOggebA=; b=lrCWBiSG6H2M0NXT915K0E9j5t2uW2/Hgc1xhenwr1+SFFIPDGRoglj6DGCnDO8Zl0pmZ9 YXXN8QGe5TfejV5hfaJlSdW+zVO+2xBbWoUoOPFt0X74fqTD4/QIEC1ls8/g751UqakP24 53SQaLNwvgHE10F3GQz3cJ83qM/awpgnvthRxOOitjGhkrt7LvA97YNQ5neUASSd/E5Fv8 68OeUGOYK4ZA1pJCmAekYA3O3n9XHQ3Q/zOUHU4xh3rfSaUmqscHhrjGOpj9vEq6vO0rnp HndCmreQIKKT7YrpZfL9dCvvRoJSlAwBZHHi6rJ4TtGoEBP0tZUV0CeEpv9JZQ== DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1757958401; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=0PU/JRa2NpZr4A1tVI0Oe5nxuTBXu0t5E+2zkOggebA=; b=jyGFO8aE0XKNR3mTEIDLPTVrdHUqIXN4WX7QGNOv7EYU1XBJA/3em5f65mKgyaKkfNIZAJ VFw59n9HMoetydDw== From: Adolf Belka To: development@lists.ipfire.org Cc: Adolf Belka Subject: [PATCH] libxml2: Update to version 2.14.6 Date: Mon, 15 Sep 2025 19:46:28 +0200 Message-ID: <20250915174630.2688676-13-adolf.belka@ipfire.org> In-Reply-To: <20250915174630.2688676-1-adolf.belka@ipfire.org> References: <20250915174630.2688676-1-adolf.belka@ipfire.org> Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit - Update from version 2.14.4 to 2.14.6 - Update of rootfile - 5 CVE fixes in version 2.14.5 - Changelog 2.14.6 Regressions valid: Don't add ids when validating entity content Fix initGenericErrorDefaultFunc(NULL) (Samuel Thibault) valid: Undeprecate xmlAdd*Decl globals: Include HTMLparser.h, fixing Windows build io: Fix reading from pipes like stdin on Windows Security regexp: Avoid integer overflow and OOB array access tree: Guard against atype corruption Improvements parser: Fix xmlSaturatedAddSizeT argument type 2.14.5 Regressions valid: Don't add ids when validating entity content io: Fix reading from pipes like stdin on Windows parser: Fix handling of invalid char refs in recovery mode Security regexp: Avoid integer overflow and OOB array access tree: Guard against atype corruption [CVE-2025-49794] [CVE-2025-49796] schematron: Fix xmlSchematronReportOutput [CVE-2025-49795] schematron: Fix null pointer dereference leading to DoS (Michael Mann) [CVE-2025-6170] Fix potential buffer overflows of interactive shell (Michael Mann) [CVE-2025-6021] tree: Fix integer overflow in xmlBuildQName Bug fixes save: Fix serialization of attribute defaults containing < Improvements parser: Fix xmlSaturatedAddSizeT argument type Build systems and portability meson: Add libxml2 part of include dir to pc file (Heiko Becker) cmake: Fix installation directories in libxml2-config.cmake io: Fix linkage of __xml*BufferCreateFilename functions Signed-off-by: Adolf Belka --- config/rootfiles/common/libxml2 | 2 +- lfs/libxml2 | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/config/rootfiles/common/libxml2 b/config/rootfiles/common/libxml2 index 009e1fb06..995a268bd 100644 --- a/config/rootfiles/common/libxml2 +++ b/config/rootfiles/common/libxml2 @@ -54,7 +54,7 @@ #usr/lib/libxml2.la #usr/lib/libxml2.so usr/lib/libxml2.so.16 -usr/lib/libxml2.so.16.0.4 +usr/lib/libxml2.so.16.0.6 #usr/lib/pkgconfig/libxml-2.0.pc #usr/share/doc/libxml2 #usr/share/doc/libxml2/xmlcatalog.html diff --git a/lfs/libxml2 b/lfs/libxml2 index 7e3be5f8d..0509b9b98 100644 --- a/lfs/libxml2 +++ b/lfs/libxml2 @@ -24,7 +24,7 @@ include Config -VER = 2.14.4 +VER = 2.14.6 THISAPP = libxml2-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -42,7 +42,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 6ee7e4f35e6f15124fe1ceb55758236229f87e05344c55e82c419f8e8dba763adbd25746c038d13189dfadc3bb023fd8891251e78e9c9046d42961829d93b885 +$(DL_FILE)_BLAKE2 = ad5d7cb64f8081559a671e9d79b3ebcd7313dada39d7f0c2854994153a9dff2ef85bc81336437f5881abe637bae51b62e9104b3a099113f4ee2252b604325291 install : $(TARGET) -- 2.51.0