136 Commits

Author SHA256 Message Date
9cc2a237ea Accepting request 1330867 from devel:libraries:c_c++
CVE-2025-10911 will be fixed on libxml2 side instead [bsc#1250553]

OBS-URL: https://build.opensuse.org/request/show/1330867
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libxslt?expand=0&rev=76
2026-02-06 18:02:30 +00:00
7b04f26338 CVE-2025-10911 will be fixed on libxml2 side instead [bsc#1250553]
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libxslt?expand=0&rev=120
2026-02-04 07:44:39 +00:00
61c047d60a Accepting request 1311449 from devel:libraries:c_c++
- security update
- added patches
  CVE-2025-11731 [bsc#1251979], type confusion in exsltFuncResultCompfunction leading to denial of service
  * libxslt-CVE-2025-11731.patch

OBS-URL: https://build.opensuse.org/request/show/1311449
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libxslt?expand=0&rev=75
2025-10-16 15:38:05 +00:00
caa6b4ba63 checkin
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libxslt?expand=0&rev=118
2025-10-15 08:10:20 +00:00
e0f2209ea6 Accepting request 1309625 from devel:libraries:c_c++
- security update
- added patches
  CVE-2025-10911 [bsc#1250553], use-after-free with key data stored cross-RVT
  * libxslt-CVE-2025-10911.patch

OBS-URL: https://build.opensuse.org/request/show/1309625
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libxslt?expand=0&rev=74
2025-10-08 16:13:31 +00:00
68f7390aee checkin
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libxslt?expand=0&rev=116
2025-10-07 12:44:04 +00:00
c6dac4ae00 Accepting request 1294383 from devel:libraries:c_c++
- security update
- added patches
  CVE-2025-7424 [bsc#1246360], Type confusion in xmlNode.psvi between stylesheet and source nodes
  + libxslt-CVE-2025-7424.patch

OBS-URL: https://build.opensuse.org/request/show/1294383
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libxslt?expand=0&rev=73
2025-07-20 13:28:16 +00:00
f7aeb56bda checkin
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libxslt?expand=0&rev=114
2025-07-18 13:02:56 +00:00
6ddd972646 checkin
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libxslt?expand=0&rev=113
2025-07-17 09:45:33 +00:00
2d5fe13e38 Accepting request 1253117 from devel:libraries:c_c++
OBS-URL: https://build.opensuse.org/request/show/1253117
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libxslt?expand=0&rev=72
2025-03-15 15:15:04 +00:00
529bf6f37f Accepting request 1253116 from home:pmonrealgonzalez:branches:devel:libraries:c_c++
- Update to 1.1.43:
  * Major changes:
    - The non-standard EXSLT crypto extensions and support for dynamically
      loaded plugins are now disabled by default. These features can be
      enabled by passing --with-crypto or --with-plugins to configure.
      In a future release, these features will be removed.
    - Debug output and the debugger are disabled by default and can be
      enabled by passing --with-debug or --with-debugger.
  * Security:
    - [bsc#1239625, CVE-2025-24855] Fix use-after-free of XPath context node
    - [bsc#1239637, CVE-2024-55549] Fix UAF related to excluded namespaces
  * Bug fixes:
    - variables: Fix non-deterministic generated IDs
  * libxml2 related cleanup:
    - python: Don't use removed libxml2 macro
    - tests: Skip test_bad.xsl with libxml2 before 2.13
    - python: Don't include nanoftp.h and nanohttp.h
    - tests: Avoid namespace warning on Windows
    - numbers: Stop using libxml2 XPath axis API
    - numbers: Use private copy of xmlCopyCharMultiByte
    - documents: Use xmlCtxtParseDocument if available
    - tests: Make runtest compile with older libxml2 versions
    - utils: Account for libxml2 change
    - tests: Make bug-219.xsl compatible with older libxml2
    - extensions: always include stdlib.h (Hugo Beauzée-Luyssen)
    - extensions: Don't use libxml2's "modules" feature
  * Code cleanup:
    - numbers: Make static variables const
    - variables: Remove debug code
  * Portability:

OBS-URL: https://build.opensuse.org/request/show/1253116
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libxslt?expand=0&rev=111
2025-03-14 15:21:07 +00:00
70f0b6d8f4 Accepting request 1238664 from devel:libraries:c_c++
OBS-URL: https://build.opensuse.org/request/show/1238664
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libxslt?expand=0&rev=71
2025-01-20 16:14:09 +00:00
c9cd8445cc Accepting request 1238663 from home:pmonrealgonzalez:branches:devel:libraries:c_c++
- Remove the test_bad regression test that fails with old libxml2
  as suggested by upstream devs:
  * https://gitlab.gnome.org/GNOME/libxslt/-/issues/126

OBS-URL: https://build.opensuse.org/request/show/1238663
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libxslt?expand=0&rev=109
2025-01-18 10:43:32 +00:00
26f986f0a1 Accepting request 1238652 from home:pmonrealgonzalez:branches:devel:libraries:c_c++
- Allow building with older libxml2 versions:
  * tests: Make runtest compile with older libxml2 versions
  * https://gitlab.gnome.org/GNOME/libxslt/issues/125
  * Add libxslt-test-compile-with-older-libxml2-versions.patch

OBS-URL: https://build.opensuse.org/request/show/1238652
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libxslt?expand=0&rev=108
2025-01-18 10:05:05 +00:00
f71dc99ada Accepting request 1238552 from home:pmonrealgonzalez:branches:devel:libraries:c_c++
- Update to 1.1.42:
  * Regressions:
    - extensions: Readd call to xmlCheckFilename with older libxml2
  * Improvments:
    - utils: Don't use deprecated xmlCharEncodingHandler member
    - transform: Handle filesystem paths after libxml2 changes
    - locale: Work around issue with FreeBSD's strxfrm_l
  * Build systems:
    - cmake: Add LIBXSLT_WITH_PROGRAMS option (Don Olmstead)
    - cmake: Fix HAVE_GCRYPT check
- Update to 1.1.41:
  * Removals:
    - autotools: Stop installing libxslt.m4
    - autotools: Remove RPM build
  * Improvements:
    - libxslt: Set _FILE_OFFSET_BITS to 64
    - xsltproc: Remove unneeded includes
    - include: Don't define ATTRIBUTE_UNUSED in public header
    - xsltproc: Make "-" read from stdin
  * Build systems:
    - cmake: Adjust paths for UNIX or UNIX-like target systems (Daniel E)
  * Tests:
    - cmake: Link testplugin with libxml2
    - tests: Link testplugin with libxml2
    - tests: Fix expected error after libxml2 change
    - runtest: Switch to xmlFormatError
    - fuzz: Avoid accessing internal struct members
- Update to 1.1.40:
  * Removals:
    - xsltproc: remove maxparserdepth option (Mike Dalessio)

OBS-URL: https://build.opensuse.org/request/show/1238552
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libxslt?expand=0&rev=107
2025-01-17 17:19:05 +00:00
aaa46c8f17 Accepting request 1218739 from devel:libraries:c_c++
OBS-URL: https://build.opensuse.org/request/show/1218739
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libxslt?expand=0&rev=70
2024-10-29 13:31:49 +00:00
6b2e16aca4 Accepting request 1202234 from home:bmwiedemann:reproducible:test
Add libxslt-reproducible.patch to make xml output deterministic (boo#1062303)

OBS-URL: https://build.opensuse.org/request/show/1202234
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libxslt?expand=0&rev=105
2024-10-28 08:57:29 +00:00
74d8a5f178 Accepting request 1177468 from devel:libraries:c_c++
OBS-URL: https://build.opensuse.org/request/show/1177468
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libxslt?expand=0&rev=69
2024-05-30 13:32:27 +00:00
eedda304e3 Accepting request 1176766 from home:krop:gcc14
Add upstream build fix for gcc14 failure

OBS-URL: https://build.opensuse.org/request/show/1176766
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libxslt?expand=0&rev=103
2024-05-29 08:15:10 +00:00
cbd9a2433d Accepting request 1172082 from devel:libraries:c_c++
OBS-URL: https://build.opensuse.org/request/show/1172082
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libxslt?expand=0&rev=68
2024-05-07 16:02:08 +00:00
05a2cc768f Accepting request 1172005 from home:dziobian
- Fix ftbfs with GCC14 (bsc#1220571)
  * correct libxslt-random-seed.patch to include time.h unconditionally
  * add gcc14-runtest-no-const.patch

OBS-URL: https://build.opensuse.org/request/show/1172005
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libxslt?expand=0&rev=101
2024-05-06 07:04:35 +00:00
0f77385929 Accepting request 1129067 from devel:libraries:c_c++
OBS-URL: https://build.opensuse.org/request/show/1129067
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libxslt?expand=0&rev=67
2023-11-28 21:18:06 +00:00
e3c5b3e87d Accepting request 1128651 from home:iznogood:branches:devel:libraries:c_c++
New release

OBS-URL: https://build.opensuse.org/request/show/1128651
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libxslt?expand=0&rev=99
2023-11-27 09:07:42 +00:00
10e4e8438b Accepting request 1085828 from devel:libraries:c_c++
OBS-URL: https://build.opensuse.org/request/show/1085828
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libxslt?expand=0&rev=66
2023-05-10 14:17:19 +00:00
9d248f5e8e Accepting request 1085767 from home:david.anes:branches:devel:libraries:c_c++
- Removed patch 0009-Make-generate-id-deterministic.patch as it's
  already fixed upstream.
- Update to version 1.1.38:
  * Major changes:
    - About 40 memory errors in code paths handling malloc failures
      have been fixed.
    - While these issues shouldn't impact security, this improves
      robustness under memory pressure.
    - The result of generate-id() is now deterministic across 
      multiple transformations fixing many issues with reproducible
      builds.
    - Most of the test suite has been ported to C.
  
  * Bug fixes:
    - Fix memory errors in code handling malloc failures
    - imports: Fix import/include cycle check
    - xsltlocale: Fix xsltNewLocale on macOS
    - Make xsl:sort thread-safe
    - Make generate-id() deterministic
  
  * Improvements
    - Stop using xmlStringCurrentChar
    - attributes.h needs to include xsltInternals.h (David Kilzer)
    - transform: Avoid null deref on documents without root node
    - numbers: Fix floating point overflows
    - date: Fix integer overflow in exsltDateFormatDuration
    - numbers: Fix harmless integer sign change
    - date: Add more overflow checks to formatting code (David Kilzer)
    - date: Fix rounding to make Windows tests pass
    - date: Rewrite duration and seconds formatting

OBS-URL: https://build.opensuse.org/request/show/1085767
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libxslt?expand=0&rev=97
2023-05-09 20:56:38 +00:00
f828470b54 Accepting request 1001274 from devel:libraries:c_c++
OBS-URL: https://build.opensuse.org/request/show/1001274
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libxslt?expand=0&rev=65
2022-10-19 11:17:21 +00:00
80e204f984 Accepting request 1000412 from home:iznogood:branches:devel:libraries:c_c++
- Update to version 1.1.37:
  * Improvements:
    + Don't use deprecated libxml2 macros
    + Don't mess with xmlDefaultSAXHandler
  * Build system:
    + Require automake-1.16.3 or later
    + Remove generated files from distribution
    + Add missing compile definition for static builds to Autotools

OBS-URL: https://build.opensuse.org/request/show/1000412
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libxslt?expand=0&rev=95
2022-09-05 13:29:55 +00:00
a34e679cdd Accepting request 997692 from home:david.anes:daps_test
- Update to 1.1.36:
  * Removals and deprecations
    + Remove SVN keyword anchors
    + Remove CVS and SVN-related code
    + Remove README.cvs-commits
    + Remove ChangeLog
    + Remove xsltwin32config.h
  * Improvements
    + Simplify xsltexports.h and exsltexports.h
    + Don't overlink executables with gcrypt
    + Fix quadratic behavior with variables and parameters
    + Remove case labels with XPointer location types
    + Add configure~ to .gitignore
    + Stop calling deprecated libxml2 functions
  * Portability
    + Use portable python shebangs (David Seifert)
    + Remove useless __CYGWIN__ checks
    + Remove cruft from win32config.h
    + crypto.c: Silence a compiler warning on Windows (Chun-wei Fan)
  * Build system
    + Add missing compile definition for static builds to CMake
    + Avoid obsolescent `test -a` constructs (David Seifert)
    + Only link libxml2 statically in purely static build
    + Set AC_CONFIG_MACRO_DIR
    + Allow AM_MAINTAINER_MODE to be disabled
    + Streamline and fix documentation installation
    + Don't try to recreate COPYING symlink
    + Remove special configuration for certain maintainers
    + configure.ac: produce tar.xz only (GNOME policy) (David Seifert)
    + Detect libm using libtool's macros (David Seifert)

OBS-URL: https://build.opensuse.org/request/show/997692
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libxslt?expand=0&rev=94
2022-08-18 08:45:47 +00:00
c0c5168fe0 Accepting request 965151 from home:luc14n0:branches:devel:libraries:c_c++
Update to version 1.1.35.

OBS-URL: https://build.opensuse.org/request/show/965151
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libxslt?expand=0&rev=93
2022-03-29 05:40:54 +00:00
b222ee12ac Accepting request 930625 from devel:libraries:c_c++
OBS-URL: https://build.opensuse.org/request/show/930625
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libxslt?expand=0&rev=64
2021-11-12 14:59:03 +00:00
a98f65a5bd Accepting request 930624 from home:pmonrealgonzalez:branches:devel:libraries:c_c++
- Add missing library .so files [bsc#1191771]

OBS-URL: https://build.opensuse.org/request/show/930624
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libxslt?expand=0&rev=92
2021-11-10 10:14:31 +00:00
27196bf134 Accepting request 930622 from home:pmonrealgonzalez:branches:devel:libraries:c_c++
- Add missing library .so files [bsc#1191768]

OBS-URL: https://build.opensuse.org/request/show/930622
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libxslt?expand=0&rev=91
2021-11-10 10:05:30 +00:00
38c22ba3ad Accepting request 929777 from home:AndreasStieger:branches:devel:libraries:c_c++
- shared lib packaging policy boo#1191771

OBS-URL: https://build.opensuse.org/request/show/929777
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libxslt?expand=0&rev=90
2021-11-10 09:35:16 +00:00
c78e8fee23 Accepting request 899034 from devel:libraries:c_c++
OBS-URL: https://build.opensuse.org/request/show/899034
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libxslt?expand=0&rev=63
2021-06-14 21:10:28 +00:00
dd6030e120 Accepting request 898998 from home:pevik:branches:devel:libraries:c_c++
- Backport upstream xsltproc manpage fix
  f165525f Recreate xsltproc man page with old Docbook stylesheet URL
  Recreate-xsltproc-man-page-with-old-Docbook-styleshe.patch

OBS-URL: https://build.opensuse.org/request/show/898998
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libxslt?expand=0&rev=88
2021-06-10 11:52:41 +00:00
2674a1c5f3 Accepting request 896848 from home:cgiboudeaux:branches:devel:libraries:c_c++
- Move the Copyright file to %_defaultlicensedir
  Configure.ac replaces the COPYING file with a symlink.

OBS-URL: https://build.opensuse.org/request/show/896848
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libxslt?expand=0&rev=87
2021-06-08 10:01:24 +00:00
a575a91a01 Accepting request 898150 from home:Andreas_Schwab:Factory
- Don't disable testsuite under QEMU

OBS-URL: https://build.opensuse.org/request/show/898150
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libxslt?expand=0&rev=86
2021-06-08 09:59:03 +00:00
119c3f8ab9 Accepting request 896775 from devel:libraries:c_c++
OBS-URL: https://build.opensuse.org/request/show/896775
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libxslt?expand=0&rev=62
2021-06-04 20:42:30 +00:00
4b9cc13413 Accepting request 896723 from home:pmonrealgonzalez:branches:devel:libraries:c_c++
- Fix build with libxml2 2.9.12 that removes maxParserDepth XPath limit
- Add upstream patches:
  * libxslt-Stop-using-maxParserDepth-XPath-limit.patch
  * libxslt-Do-not-set-maxDepth-in-XPath-contexts.patch

OBS-URL: https://build.opensuse.org/request/show/896723
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libxslt?expand=0&rev=84
2021-06-01 20:37:05 +00:00
35455a2a3c Accepting request 750091 from devel:libraries:c_c++
OBS-URL: https://build.opensuse.org/request/show/750091
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libxslt?expand=0&rev=61
2019-12-07 14:22:10 +00:00
Tomáš Chvátal
204b1a65de Accepting request 750071 from home:pmonrealgonzalez:branches:devel:libraries:c_c++
- Update to 1.1.34: Oct 30 2019
  * Documentation:
    - Fix EXSLT web pages, Regenerate web pages
    - Fix Git link in news.html
    - Minor documentation fixes after recent changes
    - Regenerate symbols and API docs
    - Regenerate EXSLT website
  * Portability:
    - Remove stubs when compiling without debugger or profiler
    - configure.ac: Invoke PKG_CHECK_MODULES for building shared libraries
    - configure.ac: Conditionally determine whether xml2-config should pass
      shared libraries or static libraries
    - xslt-config.in: Fix broken --prefix=DIR support
    - libexslt.pc.in: Do not expose private library dependencies unless invoked
    - libxslt.pc.in: Do not expose private library dependencies unless invoked
    - Fix -Wformat-overflow warning (GCC 9)
    - Stop including ansidecl.h
    - Remove WIN32_EXTRA_* variables
    - Build without winsock
  * Bug Fixes:
    - xsl:template without name and match attributes should not be allowed
    - Make sure that Python tests exit with error code
    - Improve handling of invalid UTF-8 in format-number
    - Fix dangling pointer in xsltCopyText
    - Fix memory leak in pattern compilation error path
    - Fix uninitialized read with UTF-8 grouping chars
    - Fix integer overflow in FORMAT_GYEAR
    - Fix performance regression with xsl:number
    - Backup XPath context node in xsltInitCtxtKey
    - Fix unsigned integer overflow in date.c

OBS-URL: https://build.opensuse.org/request/show/750071
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libxslt?expand=0&rev=82
2019-11-21 12:12:55 +00:00
ba9dfbbb2a Accepting request 741568 from devel:libraries:c_c++
OBS-URL: https://build.opensuse.org/request/show/741568
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libxslt?expand=0&rev=60
2019-10-22 13:43:52 +00:00
Tomáš Chvátal
f35aedfa3d Accepting request 741566 from home:pmonrealgonzalez:branches:devel:libraries:c_c++
- Security fix [bsc#1154609, CVE-2019-18197]
  * Fix dangling pointer in xsltCopyText
  * Add libxslt-CVE-2019-18197.patch

OBS-URL: https://build.opensuse.org/request/show/741566
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libxslt?expand=0&rev=80
2019-10-21 14:19:40 +00:00
66523df8e4 Accepting request 734238 from devel:libraries:c_c++
- Drop out lilbxslt-python package as it is just py2 based and
  upstream yet didn't bother to port it to python3.
  When there is python3 compatible code it should be enabled as
  multibuild here
  * Drop now unused libxslt-1.1.24-linkflags.patch and
    libxslt-do_not_build_doc_nor_xsltproc.patch

OBS-URL: https://build.opensuse.org/request/show/734238
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libxslt?expand=0&rev=59
2019-10-05 14:17:42 +00:00
Tomáš Chvátal
4d23dabc8a * Drop now unused libxslt-1.1.24-linkflags.patch and
libxslt-do_not_build_doc_nor_xsltproc.patch

OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libxslt?expand=0&rev=78
2019-10-01 08:27:01 +00:00
Tomáš Chvátal
f21a490430 * Drop now unused libxslt-1.1.24-linkflags.patch
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libxslt?expand=0&rev=77
2019-10-01 08:26:34 +00:00
Tomáš Chvátal
29b49a8434 - Drop out lilbxslt-python package as it is just py2 based and
upstream yet didn't bother to port it to python3.
  When there is python3 compatible code it should be enabled as
  multibuild here

OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libxslt?expand=0&rev=76
2019-10-01 08:25:56 +00:00
Tomáš Chvátal
93391454b0 Accepting request 734222 from home:dimstar:Factory
OBS-URL: https://build.opensuse.org/request/show/734222
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libxslt?expand=0&rev=75
2019-10-01 08:14:07 +00:00
5965f6dfde Accepting request 713210 from devel:libraries:c_c++
OBS-URL: https://build.opensuse.org/request/show/713210
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libxslt?expand=0&rev=58
2019-07-08 13:02:27 +00:00
Tomáš Chvátal
ffe45b7249 Accepting request 713209 from home:pmonrealgonzalez:branches:devel:libraries:c_c++
- Security fix: [bsc#1140101, CVE-2019-13118]
  * Fix uninitialized read with UTF-8 grouping chars. Read of
    uninitialized stack data due to too narrow xsl:number
    instruction and an invalid character
  * Added libxslt-CVE-2019-13118.patch

- Security fix: [bsc#1140095, CVE-2019-13117]
  * Fix uninitialized read of xsl:number token. An xsl number with
    certain format strings could lead to a uninitialized read in
    xsltNumberFormatInsertNumbers
  * Added libxslt-CVE-2019-13117.patch

- Security fix: [bsc#1140101, CVE-2019-13118]
  * Fix uninitialized read with UTF-8 grouping chars. Read of
    uninitialized stack data due to too narrow xsl:number
    instruction and an invalid character
  * Added libxslt-CVE-2019-13118.patch

- Security fix: [bsc#1140095, CVE-2019-13117]
  * Fix uninitialized read of xsl:number token. An xsl number with
    certain format strings could lead to a uninitialized read in
    xsltNumberFormatInsertNumbers
  * Added libxslt-CVE-2019-13117.patch

OBS-URL: https://build.opensuse.org/request/show/713209
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libxslt?expand=0&rev=73
2019-07-03 10:52:49 +00:00