SHA256
1
0
forked from pool/expat
expat/expat-2.4.7.tar.xz.asc
David Anes 41cd7fd67d Accepting request 959577 from home:david.anes:branches:devel:libraries:c_c++
- udpate to 2.4.7 (bsc#1196784, CVE-2022-25236):
  * Bug fixes:
    - Relax fix to CVE-2022-25236 (introduced with release 2.4.5)
      with regard to all valid URI characters (RFC 3986),
      i.e. the following set (excluding whitespace):
      ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz
      0123456789 % -._~ :/?#[]@ !$&'()*+,;=
  * Other changes:
    - CMake|Windows: Store Expat version in the DLL
    - Document consequences of namespace separator choices not just
      in doc/reference.html but also in header <expat.h>
    - Document Expat's lack of validation of namespace URIs against
      RFC 3986, and that the XML 1.0r4 specification doesn't
      require Expat to validate namespace URIs, and that Expat
      may do more in that regard in future releases.
      If you find need for strict RFC 3986 URI validation on
      application level today, https://uriparser.github.io/ may
      be of interest.
    - Fix documentation of XML_EndDoctypeDeclHandler in <expat.h>
    - Document that a call to XML_FreeContentModel can be done at
      a later time from outside the element declaration handler
    - Make hardcoded namespace URIs easier to find in code
    - Update documentation on use of XML_POOR_ENTOPY on Solaris
    - tests: Resolve use of macros NAN and INFINITY for GNU G++
      4.8.2 on Solaris.
    - Version info bumped from 9:6:8 to 9:7:8;
      see https://verbump.de/ for what these numbers do

OBS-URL: https://build.opensuse.org/request/show/959577
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/expat?expand=0&rev=96
2022-03-05 08:23:01 +00:00

17 lines
833 B
Plaintext

-----BEGIN PGP SIGNATURE-----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=jzHN
-----END PGP SIGNATURE-----