6336151307- version update to 3.3.0 * no upstream changelog found, from git log: * Add functions/properties for disallowing DOCTYPE (DTD) in SAX parsers * XERCESC-2188 - Use-after-free on external DTD scan (CVE-2018-1311) * Omit unnecessary getenv() call if DTD is disabled programmatically * Fix NetAccessorTest to exit with non-zero status in case of error - modified sources % baselibs.conf
devel
Martin Schreiner
2024-11-01 20:59:26 +0000
0d18d3d130Accepting request 1200182 from devel:libraries:c_c++
Ana Guerrero
2024-09-13 12:26:06 +0000
c46d04784f- Enable gnuiconv transcoder, permanent fix for bsc#1223088.
Martin Schreiner
2024-09-11 19:18:10 +0000
e2c5aacb94Accepting request 1135297 from devel:libraries:c_c++
Ana Guerrero
2023-12-28 21:55:01 +0000
a47117468d- update to 3.2.5 (bsc#1159552, CVE-2018-1311):Dirk Mueller2023-12-27 11:55:01 +0000
e76dad130f- update to 3.2.5: * [XERCESC-2163] - XercesMessages_en_US.cat is installed to wrong directory * [XERCESC-2188] - Use-after-free on external DTD scan * [XERCESC-2242] - Non-default curl location breaks autoconf link detection * Custom HTTP headers missing with CURL NetAccessor + ICUTransService and IconvGNUransService CAN NOT deal with + Problem in prefix parsing while creating Documnet, Element, + Whitespace in xsi:type + XMLUTF8Transcoder::transcodeTo fails with an exception when transcoding single characters that require 3 or more bytes as + XMLUni::fgXercesLoadSchema[] is not null-terminated in + XMLURL.cpp: isHexDigit() and xlatHexDigit() accept whole + Xerces livelocks while reading external DTD if socket closes + Memory leak occurs if an exception is thrown in + DOMDocumentImpl:: getPooledNString(const XMLCh *in, + OutOfMemoryException being thrown on creation of an LS + TranscodeToStr::transcode throws an exception when + ContentSpecNode::getMaxTotalRange: Operator precedence + Add support for GNU/Hurd by using POSIX.1-2001 and + enumeration value ‘Loop’ not handled in switch + Xerces 3.1.1 Xerces.Lib fails to build with new Visual + Code analysis revealed multiple potential NULL derefence + MacOSUnicodeConverter.cpp: ISO C++ forbids comparison - Add baselib.conf in order to build -32Bit. * Check that we have non-NULL host before trying to connect (XERCESC-1920). * Recover from the mismatching start/end even count which may happen when we continue parsing an invalid document (XERCESC-1919). * If the transcoder doesn't process any input, throw an exception (XERCESC-1916). * Delay the recursive expansion of includes until the document fragment has been placed in the final location (XERCESC-1918). * The code formatting a content model was skipping the cardinality indicators (*, +, ?) (XERCESC-1914).Dirk Mueller2023-12-27 11:53:59 +0000
9b5d6d0575Accepting request 1031419 from devel:libraries:c_c++
Dominique Leuenberger
2022-10-28 17:28:56 +0000
46c849bcb1- update to 3.2.4: * [XERCESC-2195] - Invalid attribute in .gitattributes file * [XERCESC-2196] - cross-compiling issue * [XERCESC-2214] - Wrong delete[] in MemBufInputSource dtor * [XERCESC-2217] - ICUTranscoder::transcodeFrom buffer overflow * [XERCESC-2218] - CurlURLInputStream constructor memory leak * [XERCESC-2219] - XMLReader constructor: memory leak when refreshRawBuffer() throws * [XERCESC-2221] - InMemMsgLoader::loadMsg(): fix memory leak when transcoding fails * [XERCESC-2222] - DFAContentModel::checkUniqueParticleAttribution(): fix memory leak * [XERCESC-2223] - SAX2XMLReaderImpl::error(): potential memory leak * [XERCESC-2225] - Link to installed CMake targets of CURL * [XERCESC-2227] - Memleak fixes in ContentSpecNode and ComplexTypeInfo classes * [XERCESC-2228] - DFAContentModel: fix memory leaks when OutOfMemoryException occurs * [XERCESC-2229] - IGXMLScanner::scanDocTypeDecl(): fix memory leak on exception * [XERCESC-2230] - DFAContentModel::buildSyntaxTree(): fix memory leaks when OutOfMemoryException occurs * [XERCESC-2235] - DFAContentModel::buildDFA(): correctly zero-initialize fFollowList * [XERCESC-2236] - Dependencies aren't loaded when using provided CMake config package * [XERCESC-2241] - Integer overflows in DFAContentModel class * [XERCESC-2242] - Non-default curl location breaks autoconf link detectionDirk Mueller2022-10-26 22:34:03 +0000
337f4bd266Accepting request 826884 from devel:libraries:c_c++
Dominique Leuenberger
2020-08-19 16:44:13 +0000
29b00143ec- update to 3.2.3: * Custom HTTP headers missing with CURL NetAccessor * Type Confusion from DTDGrammar to SchemaGrammar * Patch to build with older GCC * fix build without pthread * XMLUTF8Transcoder: One multibyte UTF8 character is swallowed from the srcData when the resulting surrogate pair does not fit in toFill at the end * Postpone freeing the memory being used by CURL * Memory leak in ValueVectorOf * There is an error in the parameters of the ThreadTtest8 script in Apache xerces-c++ XML's tests/script * Incorrect symbolic links created for Linux static library and MacOS static and shared libraries * invalid windows version check for onXPOrLater * Handle surrogate pairs when reading a QName instead of ASSERTing * Janitor.hpp fails to compile on Solaris with Solaris Studio 12.2 and 12.4 * undef symbols on HPUX for ArrayJanitor * DOM tests crash on AIX * XMLChar with NEED_TO_GEN_TABLE has 2 buffer out of bounds reads * Including Xerces_autoconf_config.hpp on Windows fails due to undefined ssize_tDirk Mueller2020-08-15 19:56:37 +0000
142d88238fAccepting request 773618 from devel:libraries:c_c++
Dominique Leuenberger
2020-02-15 21:24:45 +0000
a06ac30199Accepting request 773617 from home:scarabeus_iv:branches:devel:libraries:c_c++
Tomáš Chvátal
2020-02-12 08:44:58 +0000
e80278acd0Accepting request 639559 from devel:libraries:c_c++
Dominique Leuenberger
2018-10-11 09:37:58 +0000
56697ba94b- Fix the libname dependency in devel pkg, typo after libname change
Tomáš Chvátal
2018-10-02 10:01:49 +0000
62365853c1- Version update to 3.2.2: * Fixes CVE-2017-12627 bsc#1083630 - Remove the switch to disable SSE2 on i586, we support pentium4 as lowest and that has sse2
Tomáš Chvátal
2018-09-27 06:52:33 +0000
c1307c4b01Accepting request 406725 from devel:libraries:c_c++
Dominique Leuenberger
2016-07-07 13:09:14 +0000
cca002779c- Version update to 3.1.4: * Fixes bnc#985860 CVE-2016-4463 * xerces-c-CVE-2016-2099.patch removed as it was included upstream
Tomáš Chvátal
2016-07-05 12:05:14 +0000
3a2a509001Accepting request 404987 from home:scarabeus_iv:branches:devel:libraries:c_c++
Ismail Dönmez
2016-06-27 12:41:54 +0000
3b25d2102fAccepting request 404058 from home:jengelh:branches:devel:libraries:c_c++Dirk Mueller2016-06-23 14:50:02 +0000
0e4f002d64Accepting request 403800 from home:zawel1:branches:devel:libraries:c_c++
Ismail Dönmez
2016-06-21 12:28:32 +0000
4ede327720Accepting request 402773 from home:pjanouch:branches:devel:libraries:c_c++
Ismail Dönmez
2016-06-18 16:00:10 +0000
c5998d6650Accepting request 334657 from devel:libraries:c_c++
Dominique Leuenberger
2015-10-14 14:38:39 +0000
f25b240f8eAccepting request 334630 from home:pluskalm:branches:devel:libraries:c_c++
Ismail Dönmez
2015-09-28 18:21:16 +0000
55f3b37034Accepting request 287041 from devel:libraries:c_c++
Dominique Leuenberger
2015-02-22 16:21:22 +0000
393b69bd12Accepting request 286754 from home:pluskalm:branches:devel:libraries:c_c++
Ismail Dönmez
2015-02-20 17:39:14 +0000
7ffaacd023Accepting request 210759 from devel:libraries:c_c++
Stephan Kulow
2013-12-13 12:11:49 +0000
c20c21830cAccepting request 210742 from home:Zaitor
Sascha Peilicke
2013-12-13 09:23:27 +0000
6790d9026cAccepting request 204068 from devel:libraries:c_c++
Tomáš Chvátal
2013-10-21 10:35:30 +0000
dd320f5e7fAccepting request 204065 from home:sumski:branches:devel:libraries:c_c++
Ismail Dönmez
2013-10-20 22:09:17 +0000
2c2c96de27Accepting request 113453 from devel:libraries:c_c++
Stephan Kulow
2012-04-17 05:50:41 +0000
0ecc411be3Accepting request 113448 from home:behrisch
Ismail Dönmez
2012-04-13 20:25:20 +0000
3ce2f4711cAccepting request 104019 from devel:libraries:c_c++
Stephan Kulow
2012-02-14 18:09:43 +0000