Accepting request 440848 from devel:libraries:c_c++

Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/440848
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/mxml?expand=0&rev=25

mxml-2.10.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:267ff58b64ddc767170d71dab0c729c06f45e1df9a9b6f75180b564f09767891
+size 265398

mxml-2.9.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:cded54653c584b24c4a78a7fa1b3b4377d49ac4f451ddf170ebbc8161d85ff92
-size 264379

mxml.changes

@@ -1,3 +1,19 @@
+-------------------------------------------------------------------
+Fri Nov 11 14:50:28 UTC 2016 - mrueckert@suse.de
+
+- update to version 2.10
+  - The version number in mxml.h was wrong (Bug #532)
+  - The mxml.spec file was out of date (Bug #521)
+  - Mini-XML no longer allows malformed element names (Bug #509)
+  - mxmlLoad* and mxmlSAXLoad* did not properly create text nodes
+    when MXML_TEXT_CALLBACK was specified (Bug #531)
+  - mxmlDelete used a recursive algorithm which could require large
+    amounts of stack space depending on the file (Bug #549,
+    CVE-2016-4570) (bnc #979205)
+  - mxmlWrite* used a recursive algorithm which could require large
+    amounts of stack space depending on the file (Bug #549,
+    CVE-2016-4571) (bnc #979206)
+
 -------------------------------------------------------------------
 Thu Mar  5 15:01:03 UTC 2015 - p.drouand@gmail.com
 

mxml.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package mxml
 #
-# Copyright (c) 2015 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -18,7 +18,7 @@
 
 Name:           mxml
 Url:            http://www.msweet.org/projects.php?Z3
-Version:        2.9
+Version:        2.10
 Release:        0
 Summary:        Small XML Parsing Library
 License:        LGPL-2.1+