diff --git a/Xerces-J-src.2.12.1.tar.gz b/Xerces-J-src.2.12.1.tar.gz deleted file mode 100644 index 8a66ca6..0000000 --- a/Xerces-J-src.2.12.1.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:dadc818032dc2acf0dfea39a093827efaece371067b998025476f067069e2411 -size 1812031 diff --git a/Xerces-J-src.2.12.2.tar.gz b/Xerces-J-src.2.12.2.tar.gz new file mode 100644 index 0000000..6e6a662 --- /dev/null +++ b/Xerces-J-src.2.12.2.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:6dd1ebd4c88e935c182375346cd7365514bd8dd2ad2f30f0d0b05257bab34ee8 +size 1812583 diff --git a/xerces-j2.changes b/xerces-j2.changes index 5eb3a7e..4478fc3 100644 --- a/xerces-j2.changes +++ b/xerces-j2.changes @@ -1,3 +1,36 @@ +------------------------------------------------------------------- +Fri Feb 11 13:00:17 UTC 2022 - David Anes + +- Update to 2.12.2 [bsc#1195108, CVE-2022-23437]: + * This release is a bug fix release. It fixes few bugs which were + present in Xerces-J 2.12.1 and also includes a few other minor + enhancements. + + Implemented a fix, that solves rarely occurring XML parsing + performance issue. + + Improved compliance, of XPath 2.0 processor's regex + implementation (that's used within XML Schema 1.1 + implementation). + + XML Schema validation error message improvements, when XML + attributes are validated. + + Improved the JAXP SourceValidator sample, related to XML + Schema 1.1 assertion evaluations on list types. + + Solved an XML Schema implementation issue, where + combination of restrictions 'length' and 'minLength' was + leading to error. + + Made minor, improvements to few XML Schema 1.1 validation + error messages. + + Fixed a rarely occurring issue during XML Schema 1.1 + xs:assert evaluation, where adjacent text values within + XML instance document, were resulting in more than one + adjacent XPath 2.0 text nodes. + + Upgraded the minimum, Java requirement to use XercesJ to + Java version 1.7. + + Upgraded XalanJ serializer dependency to version 2.7.2 + from 2.7.1, which is required by XercesJ. + + Re-built, "XML Commons External" and "XML Commons + Resolver" codebases (which are dependencies for XercesJ) + using Java 1.7. + ------------------------------------------------------------------- Tue Dec 28 17:26:24 UTC 2021 - David Anes diff --git a/xerces-j2.spec b/xerces-j2.spec index 60a3014..61d3c43 100644 --- a/xerces-j2.spec +++ b/xerces-j2.spec @@ -1,7 +1,7 @@ # # spec file for package xerces-j2 # -# Copyright (c) 2021 SUSE LLC +# Copyright (c) 2022 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -16,10 +16,10 @@ # -%global cvs_version 2_12_1 +%global cvs_version 2_12_2 %define __requires_exclude system.bundle Name: xerces-j2 -Version: 2.12.1 +Version: 2.12.2 Release: 0 Summary: Java XML parser License: Apache-2.0 AND W3C diff --git a/xercesImpl-2.12.1.pom b/xercesImpl-2.12.2.pom similarity index 50% rename from xercesImpl-2.12.1.pom rename to xercesImpl-2.12.2.pom index 97d21d7..de15514 100644 --- a/xercesImpl-2.12.1.pom +++ b/xercesImpl-2.12.2.pom @@ -3,17 +3,17 @@ 4.0.0 xerces xercesImpl - 2.12.1 + 2.12.2 - Xerces2 is the next generation of high performance, fully compliant XML parsers in the Apache Xerces family. This new version of Xerces introduces the Xerces Native Interface (XNI), a complete framework for building parser components and configurations that is extremely modular and easy to program. + Xerces2 provides high performance, fully compliant XML parsers in the Apache Xerces family. This new version of Xerces continues to build upon the Xerces Native Interface (XNI), a complete framework for building parser components and configurations that is extremely modular and easy to program. - The Apache Xerces2 parser is the reference implementation of XNI but other parser components, configurations, and parsers can be written using the Xerces Native Interface. For complete design and implementation documents, refer to the XNI Manual. + The Apache Xerces2 parser is the reference implementation of XNI but other parser components, configurations, and parsers can be written using the Xerces Native Interface. For complete design and implementation documents, refer to the XNI Manual. - Xerces2 is a fully conforming XML Schema 1.0 processor. A partial experimental implementation of the XML Schema 1.1 Structures and Datatypes Working Drafts (December 2009) and an experimental implementation of the XML Schema Definition Language (XSD): Component Designators (SCD) Candidate Recommendation (January 2010) are provided for evaluation. For more information, refer to the XML Schema page. + Xerces2 provides fully conforming XML Schema 1.0 and 1.1 processors. An experimental implementation of the "XML Schema Definition Language (XSD): Component Designators (SCD) Candidate Recommendation (January 2010)" is also provided for evaluation. For more information, refer to the XML Schema page. - Xerces2 also provides a complete implementation of the Document Object Model Level 3 Core and Load/Save W3C Recommendations and provides a complete implementation of the XML Inclusions (XInclude) W3C Recommendation. It also provides support for OASIS XML Catalogs v1.1. + Xerces2 also provides a complete implementation of the Document Object Model Level 3 Core and Load/Save W3C Recommendations and provides a complete implementation of the XML Inclusions (XInclude) W3C Recommendation. It also provides support for OASIS XML Catalogs v1.1. - Xerces2 is able to parse documents written according to the XML 1.1 Recommendation, except that it does not yet provide an option to enable normalization checking as described in section 2.13 of this specification. It also handles namespaces according to the XML Namespaces 1.1 Recommendation, and will correctly serialize XML 1.1 documents if the DOM level 3 load/save APIs are in use. + Xerces2 is able to parse documents written according to the XML 1.1 Recommendation, except that it does not yet provide an option to enable normalization checking as described in section 2.13 of this specification. It also handles namespaces according to the XML Namespaces 1.1 Recommendation, and will correctly serialize XML 1.1 documents if the DOM level 3 load/save APIs are in use. https://xerces.apache.org/xerces2-j/ @@ -25,7 +25,7 @@ https://svn.apache.org/repos/asf/xerces/java/ - https://svn.apache.org/repos/asf/xerces/java/tags/Xerces-J_2_12_1/ + https://svn.apache.org/repos/asf/xerces/java/tags/Xerces-J_2_12_2/