BSD Commit Log Search

   Pullup ticket #5911 - requested by taca
   textproc/libxml2, textproc/py-libxml2: security fix

   Revisions pulled up:
   - textproc/libxml2/Makefile                                     1.152
   - textproc/libxml2/Makefile.common                              1.12
   - textproc/libxml2/distinfo                                     1.129-1.130
   - textproc/libxml2/patches/patch-Makefile.in                    1.1
   - textproc/libxml2/patches/patch-aa                             deleted
   - textproc/libxml2/patches/patch-ab                             deleted
   - textproc/libxml2/patches/patch-ac                             deleted
   - textproc/libxml2/patches/patch-ad                             deleted
   - textproc/libxml2/patches/patch-ae                             deleted
   - textproc/libxml2/patches/patch-catalog.c                      1.1
   - textproc/libxml2/patches/patch-configure                      1.1
   - textproc/libxml2/patches/patch-doc_examples_Makefile.in       1.1
   - textproc/libxml2/patches/patch-parser.c                       deleted
   - textproc/libxml2/patches/patch-python_libxml.c                1.1
   - textproc/libxml2/patches/patch-result_errors_759573.xml.err   deleted
   - textproc/libxml2/patches/patch-xmlcatalog.c                   1.1
   - textproc/libxml2/patches/patch-xpath.c                        deleted
   - textproc/libxml2/patches/patch-xzlib.c                        deleted
   - textproc/py-libxml2/Makefile                                  1.63-1.64
   - textproc/py-libxml2/PLIST                                     1.4

   ---
      Module Name:      pkgsrc
      Committed By:     wiz
      Date:             Wed Jan  9 13:40:51 UTC 2019

      Modified Files:
        pkgsrc/textproc/libxml2: distinfo
        pkgsrc/textproc/py-libxml2: Makefile
      Added Files:
        pkgsrc/textproc/libxml2/patches: patch-python_libxml.c

      Log Message:
      py-libxml2: work around a problem in error handling.

      In some cases, invalid UTF-8 strings were returned which caused
      python interpreter crashes. See

      https://github.com/itstool/itstool/issues/22

      Use a variant of the patch that was used in Fedora.

      Bump PKGREVISION.

   ---
      Module Name:      pkgsrc
      Committed By:     adam
      Date:             Wed Jan  9 19:09:03 UTC 2019

      Modified Files:
        pkgsrc/textproc/libxml2: Makefile Makefile.common distinfo
        pkgsrc/textproc/py-libxml2: Makefile PLIST
      Added Files:
        pkgsrc/textproc/libxml2/patches: patch-Makefile.in patch-catalog.c
            patch-configure patch-doc_examples_Makefile.in patch-xmlcatalog.c
      Removed Files:
        pkgsrc/textproc/libxml2/patches: patch-aa patch-ab patch-ac patch-ad
            patch-ae patch-parser.c patch-result_errors_759573.xml.err
            patch-xpath.c patch-xzlib.c

      Log Message:
      libxml2: updated to 2.9.9

      v2.9.9:
      Security:
      CVE-2018-9251 CVE-2018-14567 Fix infinite loop in LZMA decompression
      CVE-2018-14404 Fix nullptr deref with XPath logic ops

      Documentation:
      reader: Fix documentation comment

      Portability:
      Fix MSVC build with lzma
      Variables need 'extern' in static lib on Cygwin
      Really declare dllexport/dllimport for Cygwin
      Merge branch 'patch-2' into 'master'
      Change dir to $THEDIR after ACLOCAL_PATH check autoreconf creates aclocal.m4 in $srcdir
      Improve error message if pkg.m4 couldn't be found
      NaN and Inf fixes for pre-C99 compilers

      Bug Fixes:
      Revert "Support xmlTextReaderNextSibling w/o preparsed doc"
      Fix building relative URIs
      Problem with data in interleave in RelaxNG validation
      Fix memory leak in xmlSwitchInputEncodingInt error path
      Set doc on element obtained from freeElems
      Fix HTML serialization with UTF-8 encoding
      Use actual doc in xmlTextReaderRead*Xml
      Unlink node before freeing it in xmlSAX2StartElement
      Check return value of nodePush in xmlSAX2StartElement
      Free input buffer in xmlHaltParser
      Reset HTML parser input pointers on encoding failure
      Don't run icu_parse_test if EUC-JP is unsupported
      Fix xmlSchemaValidCtxtPtr reuse memory leak
      Fix xmlTextReaderNext with preparsed document
      Remove stray character from comment
      Remove a misleading line from xmlCharEncOutput
      HTML noscript should not close p
      Don't change context node in xmlXPathRoot
      Stop using XPATH_OP_RESET
      Revert "Change calls to xmlCharEncInput to set flush false"

      Improvements:
      Fix "Problem with data in interleave in RelaxNG validation"
      cleanup: remove some unreachable code
      add --relative to testURI
      Remove redefined starts and defines inside include elements
      Allow choice within choice in nameClass in RELAX NG
      Look inside divs for starts and defines inside include
      Add compile and libxml2-config.cmake to .gitignore
      Stop using doc->charset outside parser code
      Add newlines to 'xmllint --xpath' output
      Don't include SAX.h from globals.h
      Support xmlTextReaderNextSibling w/o preparsed doc
      Don't instruct user to run make when autogen.sh failed
      Run Travis ASan tests with "sudo: required"
      Improve restoring of context size and position
      Simplify and harden nodeset filtering
      Avoid unnecessary backups of the context node
      Fix inconsistency in xmlXPathIsInf

UnifiedSplitRaw