From b22492de06db3c4e4095d25d02e0e7a77d28aa3fd8784f36dfd974ad68df4d72 Mon Sep 17 00:00:00 2001 From: Petr Gajdos Date: Tue, 22 Apr 2025 08:35:55 +0000 Subject: [PATCH] Accepting request 1270607 from home:iznogood:branches:devel:libraries:c_c++ - Update to version 2.13.8: + Security: - [CVE-2025-32415] schemas: Fix heap buffer overflow in xmlSchemaIDCFillNodeTables. - [CVE-2025-32414] python: Read at most len/4 characters. OBS-URL: https://build.opensuse.org/request/show/1270607 OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libxml2?expand=0&rev=241 --- libxml2-2.13.7.tar.xz | 3 --- libxml2-2.13.8.tar.xz | 3 +++ libxml2.changes | 9 +++++++++ libxml2.spec | 2 +- 4 files changed, 13 insertions(+), 4 deletions(-) delete mode 100644 libxml2-2.13.7.tar.xz create mode 100644 libxml2-2.13.8.tar.xz diff --git a/libxml2-2.13.7.tar.xz b/libxml2-2.13.7.tar.xz deleted file mode 100644 index 792ce98..0000000 --- a/libxml2-2.13.7.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:14796d24402108e99d8de4e974d539bed62e23af8c4233317274ce073ceff93b -size 2424236 diff --git a/libxml2-2.13.8.tar.xz b/libxml2-2.13.8.tar.xz new file mode 100644 index 0000000..1f05235 --- /dev/null +++ b/libxml2-2.13.8.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:277294cb33119ab71b2bc81f2f445e9bc9435b893ad15bb2cd2b0e859a0ee84a +size 2423128 diff --git a/libxml2.changes b/libxml2.changes index 47ee897..6f16120 100644 --- a/libxml2.changes +++ b/libxml2.changes @@ -1,3 +1,12 @@ +------------------------------------------------------------------- +Thu Apr 17 17:14:42 UTC 2025 - Bjørn Lie + +- Update to version 2.13.8: + + Security: + - [CVE-2025-32415] schemas: Fix heap buffer overflow in + xmlSchemaIDCFillNodeTables. + - [CVE-2025-32414] python: Read at most len/4 characters. + ------------------------------------------------------------------- Fri Mar 28 18:28:52 UTC 2025 - Bjørn Lie diff --git a/libxml2.spec b/libxml2.spec index 69bee94..5927a05 100644 --- a/libxml2.spec +++ b/libxml2.spec @@ -26,7 +26,7 @@ %{?sle15allpythons} Name: libxml2%{?dash}%{flavor} -Version: 2.13.7 +Version: 2.13.8 Release: 0 License: MIT Summary: A Library to Manipulate XML Files