March 2013 - openSUSE Commits - openSUSE Mailing Lists

commit dhcp for openSUSE:Factory
by root＠hilbert.suse.de 27 Mar '13

27 Mar '13

Hello community, here is the log from the commit of package dhcp for openSUSE:Factory checked in at 2013-03-27 19:22:55 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/dhcp (Old) and /work/SRC/openSUSE:Factory/.dhcp.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "dhcp", Maintainer is "mt(a)suse.com" Changes: -------- --- /work/SRC/openSUSE:Factory/dhcp/dhcp.changes 2013-03-12 22:37:11.000000000 +0100 +++ /work/SRC/openSUSE:Factory/.dhcp.new/dhcp.changes 2013-03-27 19:23:48.000000000 +0100 @@ -1,0 +2,8 @@ +Wed Mar 27 13:20:43 UTC 2013 - mt(a)suse.com + +- Update to ISC dhcp-4.2.5-P1 release, which contains updated + bind-9.8.4-P2 sources with removed regex.h check in configure + (bnc#811934, CVE-2013-2266). +- Changed spec make the bind export library build output visible. + +------------------------------------------------------------------- Old: ---- dhcp-4.2.5.tar.gz dhcp-4.2.5.tar.gz.asc New: ---- dhcp-4.2.5-P1.tar.gz dhcp-4.2.5-P1.tar.gz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ dhcp.spec ++++++ --- /var/tmp/diff_new_pack.cifyKG/_old 2013-03-27 19:23:51.000000000 +0100 +++ /var/tmp/diff_new_pack.cifyKG/_new 2013-03-27 19:23:51.000000000 +0100 @@ -16,7 +16,7 @@ # -%define isc_version 4.2.5 +%define isc_version 4.2.5-P1 %define susefw2dir %{_sysconfdir}/sysconfig/SuSEfirewall2.d/services %define omc_prefix /usr/share/omc %define omc_svcdir %{omc_prefix}/svcinfo.d @@ -36,7 +36,7 @@ %endif BuildRequires: dos2unix BuildRequires: libtool -Version: 4.2.5 +Version: 4.2.5.P1 Release: 0.<RELEASE0> Summary: Common Files Used by ISC DHCP Software License: BSD-3-Clause @@ -93,7 +93,7 @@ Patch49: dhcp-4.2.4-interface-discovery-using-getifaddrs.patch Patch50: dhcp-4.2.4-P2-do-not-die-on-sigpipe.patch ## -Patch51: config-guess-sub-update.patch +Patch60: config-guess-sub-update.patch PreReq: /bin/touch /sbin/chkconfig sysconfig BuildRoot: %{_tmppath}/%{name}-%{version}-build %if 0%{?suse_version} > 1220 @@ -230,15 +230,15 @@ ## find . -type f -name \*.cat\* -exec rm -f {} \; dos2unix contrib/ms2isc/* - -%build # Remove GPL licensed files to make sure, # they're not used to build (bnc#714004). pushd bind gunzip -c bind.tar.gz | tar xf - rm -rf bind-*/contrib/dbus -patch -p0 -d bind-* < %{P:51} +%patch60 -p0 -d bind-* popd + +%build %if %suse_version >= 1210 CFLAGS="$RPM_OPT_FLAGS -D_GNU_SOURCE -W -Wall -Wno-unused" %else @@ -288,6 +288,12 @@ --with-srv6-pid-file=%{_localstatedir}/run/dhcpd6.pid \ --with-srv6-lease-file=%{_localstatedir}/lib/dhcp6/db/dhcpd6.leases # +: building bind sources +make -C bind all +cat bind/configure.log +cat bind/build.log +cat bind/install.log +: building dhcp sources make %{?_smp_mflags} %check ++++++ dhcp.keyring ++++++ --- /var/tmp/diff_new_pack.cifyKG/_old 2013-03-27 19:23:51.000000000 +0100 +++ /var/tmp/diff_new_pack.cifyKG/_new 2013-03-27 19:23:51.000000000 +0100 @@ -1,55 +1,33 @@ -pub 2048R/C96B350A 2011-10-27 [expires: 2013-02-01] -uid Internet Systems Consortium, Inc. (Signing key, 2012) (http://www.isc.org/) <codesign(a)isc.org> -uid [jpeg image of size 37431] -sub 2048R/B5053426 2011-10-27 [expires: 2013-02-01] - +pub 2048R/189CDBC5 2013-01-31 Internet Systems Consortium, Inc. (Signing key, 2013) <codesign(a)isc.org> +sub 2048R/7F3D1D53 2013-01-31 [expires: 2015-01-31] -----BEGIN PGP PUBLIC KEY BLOCK----- -Version: GnuPG v1.4.11 (FreeBSD) +Version: GnuPG v1.4.12 (NetBSD) -mQENBE6p43cBCAC3lc3L57ZhVqEnx2/t9aH/rUiTHrPFczrCb8OdAFvXllngcc/n -HAQ9Q0i8UdhFKAycUPr1VOP+tu3aZycmuv793cXt469aPDABAznC+tOrDcAsp6kc -fKQqHtJq8t/+KnAT6TmKNweKu5lcucbOtz6/ol7P89KXWrnswBMal7IEAQTjqL5N -ioghlizoalsLa3bqpzUt4KenIQpbVKfVjZmqWVgIW/s6x49t1rvieCdL/egsaf4I -BtZCnDLE7ZcD8+EKb70L9EncOgAtGnDpHXun7V3YrKFKxcArkJn3eE3WXsby/Xte -0Offe0EzF+IRSyQSQjeKoVBIVoTVaTa4EBc7ABEBAAG0XkludGVybmV0IFN5c3Rl -bXMgQ29uc29ydGl1bSwgSW5jLiAoU2lnbmluZyBrZXksIDIwMTIpIChodHRwOi8v -d3d3LmlzYy5vcmcvKSA8Y29kZXNpZ25AaXNjLm9yZz6IRgQQEQIABgUCTqnjvwAK -CRCXo3PuQlZhZm6GAJ454IFuxSg6ZtOqZlTAoUcf0ZhI1QCeNnkvQg+hRcYcNc+P -Owx2JburPo+IRgQQEQIABgUCTqnkKAAKCRAt2q/Svp4PpsHuAKCB6MYfdIrHDif1 -1OlNpuUfGRnNnACeMBXwnCPVNMntqGMWQ15wQkbNiU+IRgQQEQIABgUCTqnuvwAK -CRD0lNm/z5iQ+DCTAJ9e9vuJY9GmJmUW2SL+5Yd3j57QFACdFQoURBekLxABHQix -D4H0SLhPA8aIRgQQEQgABgUCTqoZywAKCRDTST7w0perjn6LAJkBE0gKG7nPKfGj -JXt2oHQnnI1aNQCgqCr8wBkrUfA3GIItVtJ/Bl+j4m2JARwEEAECAAYFAk6p6/IA -CgkQ2BG1Pwt7rgCR6Af/X/RlAP/OtBaYbAsWoHpnINyWlKnMGwXPUswH1iB9VQsw -bRHCvxrJWY0Tt0b1M8Ew4Xvxe218sL4EGZ5hO22jz+42cNuvb5RLDHX3XI4aha2A -STDru9T3TkBKEBSiO7jPJ4N48GWsHjSHGcs7jWmQiRLx1nloL91bzDANyqOzdaGr -r1/ksEMkvkASHLHInEupSGtuH26QrmfrAquGiuVZQs1v3FGY8GTPsdO/1raS68Fw -ys0+tZ/yXOrgPLAvP/7Fd9vHOZJOk5gZXvlZvVLDVL3Gjkr7Smg8dBGMypv81JWl -ytHya63U+j/6ShGJhx7nTlsDo/K7EG8wCPsOGGbUPIkBHAQQAQIABgUCTqn7RAAK -CRCycOeBLcb/gpFzB/9hEgFz1brU7O/2iCP9VKe+YYra02sS/7tTzn+2T88q94Yo -qcuizeZaLGfuqrIJF0sk3PadsElkUG8nedDk15yJyQnW+vvMNXFFvWujG2y2aDnv -aT+nDOZjjM8riDTWRvCBoSPs9cgT602f1NUgebLoH70j91gUiNpFtG+MfOZqqEuh -Iv3ETdumxUnPjch804l4wqeBWdd61EdeoXf4jnf9chPP2sszE/Mub2bmO5cMu60K -+64cawKCrdV3a1H0pca2fMb9y7IJXTsqNBowd0RoNh6BpZtKjtPyjkjgh+M+WhyY -L9eXVNv6W5p+6WRjGrDElCwV9jxPeBIR0RsXlFXyiQFVBBMBAgA/AhsDBQkCYmaA -BgsJCAcDAgYVCAIJCgsEFgIDAQIeAQIXgAUCTqnlUxYYaHRwOi8vcGdwa2V5cy5p -c2Mub3JnAAoJEKv5WqfJazUKPDsH/AhJKxfi6qoNTsIXqCBhrBx13aRhroSCAf5i -2BTwbe9mh/wrb+b3omOqsBo6uZOC8eLUdXPrWmTs3uI48hMWto9w/l+T1Op4twp2 -FiXCkQ4kvCtyHGsyJMvLIs3xL1DF6Qru9gEk866ayxqCQ63bCISGBdZmjYJyYZ5x -LyLOWdfTOUp3nHfnSjaMQv4Pw55HO4Qhnt7x59mbtt/cU8JoSvK5W/B59CtIIjwt -//zVM2R+M3VjNBbt+MAOmyBjc42xYVf227f6JePZGPdNU6W5Os/CEG/UDNyPwGGM -CfL351+AfawM7qrW6+9XoUMVBzqZE9d32LN6TmZ8zzfCDA+OOam5AQ0ETqnjdwEI -AMmdYoPDq00fYjTIhIi9i9tc7yE60RGuOOkKnjMiSlbdILBNfx0LI5m/t5XCLsT6 -3R8QeYQ3FItQc0psALThDNih9isPMY/HIDR4XOw6+Ot4ILrb/0bY3UgxtPbvtBRg -YvWvyq5gH7GYtl6EXZZvdISEQHLvBAs7VML2t16eSwhbwrUVgdwET5csZmIw7nUf -U3g24Rp83e/PJ9ZvkKzcU4Y+0PzLkuPwBItxfEqu7o7LehdiIiNrWqBVsSU+E0KX -CDGbmUeR6MHBDWVrU0A/vGTS8LH1qoTWVhe5R1xHzBeYBwcgkE7mupgAMdAGbS/m -xIvb16JPZma7n0ewtsS2MVsAEQEAAYkBJQQYAQIADwUCTqnjdwIbDAUJAmJmgAAK -CRCr+VqnyWs1CsuLCACi4PxCRmQLGBI3sKJZvlbo3r4Az1cBi5gJjgU/nlu+49eF -4dYNqPgxgpLXeykN1zh/lVgDv7+puRQhhC/MwcarQZY1BNcXypbiTSUNhZQoErTm -9E6ySRVFaQbHT1b0xdyFr+pDG5I/Xgl3AyyKavbQm80NV1Shcja2rVbGm6t3yDyg -5dffYrFlz+7rXZJuuRK8Z2uBwpP0WqL65w/vJIi3qj3HnYi2THtpiNAXEvC4F4J0 -xrBuCyNz1c+uEGSjKd83E/l7JFGubNtndrMYFGSLInnJuMuI16NBsuCWjttKgW/Y -q5rSCk7+oUKM+6RyezAUvJTCo2X+aOApDweL1bVw -=WEoZ +mQENBFEKeFYBCADaN83gsb0VDjlGZkYra0PPlHz/eczKBU+/6I/VBq/FcsFEc27/ +O8IE05rIID10rXLjZ0k8y4ydvhI40eVZfxwaFvQEX/StVtU1ie3F7TS02ZuJ1yal +YRtU29hhnZ5icDdiJ98gcZSH2WKhIWLRpmc60Lja/sTsO0lkLPJe9x2MDuzkQu9M +Z7hlMgqZxZ1I/mQ/KsjT3oUt8euwyntg8/w/cpY8H0EVjyBnZWV2yejsLnbCo947 +hbjvUMSluGs7AZP0d+yqpGNsgRQ9iHy0NiL3ELdBqD22cqGRGTkX76KcLoXvqLVY +450bBtXsI2uUXy5iL/eUkUP2JgWQybjju/M3ABEBAAG0SEludGVybmV0IFN5c3Rl +bXMgQ29uc29ydGl1bSwgSW5jLiAoU2lnbmluZyBrZXksIDIwMTMpIDxjb2Rlc2ln +bkBpc2Mub3JnPokBPgQTAQIAKAUCUQp4VgIbAwUJA8JnAAYLCQgHAwIGFQgCCQoL +BBYCAwECHgECF4AACgkQRax4Vxic28XzIQf6AwLblJ98KI6l8gWqKVHMErYgl9+Q +RiIxrqJtyn4OjeZHX9diVjv2HlsRjnTpNl5MiSB9tXvq+GX696w6dtpoqYjZEQoP +ZCwE2USR6XO71eYO3rxLBnc0ymRvQm4zB2YKqworQDym0+wE8xiGBO8LyyVDfS5G +aGWXl0YJkfNYXzhEp6toIiLwRE0uP0TarHcHCo2CboVBgODvDZqwSBfT+i6dT+Gy +6nVEh3j7XnqgjCQ25cGev9sHR3hobT/fxG0F2YZ7sMwpWj9q0Y/dOlY7SV/ZGSs+ +ubKQ55BWsTjJRrNqyDX8QLb8oVic5q/yQkV+RTs1sP5s6JSs0KqQdyR3ZbkBDQRR +CnhWAQgApxtu688JKcr6NXWOneWXn1Pti2jRhdVKNlNkGgLJ76vQTVdMmmTDwEty +YQM6C9qjIXj8cEwz+LGRUXoCXOX9Yokf5oOjNpQutn4KVS+IRvWMYaK0qsTaa/c0 +FaIiFWvswyGucXAX/q9H5IoK8uYKXv5ww7+x3l1etg9/QdDQ/CANyMQbjBn38Wfn +Fy/zoUl+mMZLfqs+3NwT5C+m/4M99SoyC7XQLaZt3PBO4rVjUnMkCgiXsNdDIZnv +0XgUKyzSgrdPZcqKEG3yj8v5aTOC2k60Ffw1/ytA3hyfxLmdxxsyGyNQ4ZY8ZxmB +Z6AyUWVK95bL4oQqUCqfzSscHpWokQARAQABiQElBBgBAgAPBQJRCnhWAhsMBQkD +wmcAAAoJEEWseFcYnNvF4JAH/0MlU+Iwu5k6II3KufE2agMsRD2hk1VkpZcC08qi +LfHxX/4HrCZd7jcViLpFeK+I5JaDM2G21Co9jBMoPh+EUDnalG3eglXgeNEbUfAZ +pM7c9UejTNVmrw6crcgeUhKS2l0oBu9gRRlcSJEYY8XngfKJHBscCrsafp3RMVkO +m4Ti4CcxOot3uQ10U8GojjtWp7bgqIaFBF8aV8vugXJLl9IHqgVEtvo9miM+0Tfi +evOzuZMrgVY4zI2ZiLcrVM1KuIeZ2nIKbNWkJpDH2ZwUfsIx/KTxjpqld+NStzGQ +B9v1wazIBDHQU4hq5ddOlk0lrLDAmMJzHbavlduWmFRkuv4= +=bGLP -----END PGP PUBLIC KEY BLOCK----- -- To unsubscribe, e-mail: opensuse-commit+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-commit+help(a)opensuse.org

1 0

commit culmus-fonts for openSUSE:Factory
by root＠hilbert.suse.de 27 Mar '13

27 Mar '13

Hello community, here is the log from the commit of package culmus-fonts for openSUSE:Factory checked in at 2013-03-27 19:22:44 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/culmus-fonts (Old) and /work/SRC/openSUSE:Factory/.culmus-fonts.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "culmus-fonts", Maintainer is "" Changes: -------- --- /work/SRC/openSUSE:Factory/culmus-fonts/culmus-fonts.changes 2012-08-07 21:49:14.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.culmus-fonts.new/culmus-fonts.changes 2013-03-27 19:23:45.000000000 +0100 @@ -1,0 +2,8 @@ +Tue Mar 26 15:03:35 UTC 2013 - pgajdos(a)suse.com + +- updated to 0.130: +* Added new TrueType font "Shofar" by Yoram Gnat. Complete family with + diacritics and cantillation marks. The font is inspired by Koren type, with + redesigned letter forms and the height-to-width ratio. + +------------------------------------------------------------------- Old: ---- culmus-0.121.tar.bz2 New: ---- culmus-0.130.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ culmus-fonts.spec ++++++ --- /var/tmp/diff_new_pack.0BG7FW/_old 2013-03-27 19:23:47.000000000 +0100 +++ /var/tmp/diff_new_pack.0BG7FW/_new 2013-03-27 19:23:47.000000000 +0100 @@ -1,7 +1,7 @@ # # spec file for package culmus-fonts # -# Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -20,7 +20,7 @@ %define upstream_name culmus Name: culmus-fonts -Version: 0.121 +Version: 0.130 Release: 0 Summary: Free Hebrew Fonts License: GPL-2.0+ ++++++ culmus-0.121.tar.bz2 -> culmus-0.130.tar.bz2 ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/culmus-0.121/CHANGES new/culmus-0.130/CHANGES --- old/culmus-0.121/CHANGES 2011-12-19 20:52:59.000000000 +0100 +++ new/culmus-0.130/CHANGES 2012-11-02 23:56:21.000000000 +0100 @@ -1,6 +1,14 @@ Culmus Hebrew fonts ============== +04-Nov-2012: version 0.130 +------------------------- +Added new TrueType font "Shofar" by Yoram Gnat. Complete family with +diacritics and cantillation marks. The font is inspired by Koren type, with +redesigned letter forms and the height-to-width ratio. + +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + 19-Dec-2011: version 0.121 ------------------------- Frank Ruehl CLM now supports diacritics. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/culmus-0.121/LICENSE new/culmus-0.130/LICENSE --- old/culmus-0.121/LICENSE 2011-12-19 20:44:23.000000000 +0100 +++ new/culmus-0.130/LICENSE 2012-11-03 00:08:18.000000000 +0100 @@ -2,6 +2,22 @@ version 2 (see file GNU-GPL). --------------------------------------------------------------------- +Shofar font family is Copyright 2011-2012 by Yoram Gnat (yoram.gnat(a)gmail.com) +Latin glyphs and punctuation Copyright (URW)++,Copyright 1999 by (URW)++ Design +& Development; +Hebrew Cantillation marks GSUB and GPOS OpenType positioning rules copyright +(c) 2010 by Yoram Gnat (yoram.gnat(a)gmail.com) +Inspired by the Hebrew OpenType Layout logic copyright (c) 2003 & 2007, +Ralph Hancock & John Hudson published under the MIT License. +As a special exception, if you create a document which uses this font, and +embed this font or unaltered portions of this font into the document, this +font does not by itself cause the resulting document to be covered by the +GNU General Public License. This exception does not however invalidate any +other reasons why the document might be covered by the GNU General Public +License. If you modify this font, you may extend this exception to your +version of the font, but you are not obligated to do so. If you do not wish +to do so, delete this exception statement from your version. + Keter YG font family is Copyright 2009 by Yoram Gnat (yoram.gnat(a)gmail.com) Hebrew OpenType Layout logic copyright (c) 2003 & 2007, Ralph Hancock & John Hudson. This layout logic for Biblical Hebrew is open source software Files old/culmus-0.121/ShofarDemi-Bold.ttf and new/culmus-0.130/ShofarDemi-Bold.ttf differ Files old/culmus-0.121/ShofarDemi-BoldOblique.ttf and new/culmus-0.130/ShofarDemi-BoldOblique.ttf differ Files old/culmus-0.121/ShofarRegular.ttf and new/culmus-0.130/ShofarRegular.ttf differ Files old/culmus-0.121/ShofarRegularOblique.ttf and new/culmus-0.130/ShofarRegularOblique.ttf differ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/culmus-0.121/culmus.conf new/culmus-0.130/culmus.conf --- old/culmus-0.121/culmus.conf 2011-12-17 22:19:21.000000000 +0100 +++ new/culmus-0.130/culmus.conf 2012-11-02 23:59:16.000000000 +0100 @@ -4,6 +4,15 @@  + <match target="pattern" > + <test name="family" > + <string>Guttman Keren</string> + </test> + <edit mode="append" binding="same" name="family" > + <string>Shofar</string> + </edit> + </match> +  <match target="pattern" > <test name="family" > diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/culmus-0.121/culmus.spec new/culmus-0.130/culmus.spec --- old/culmus-0.121/culmus.spec 2011-12-15 22:49:13.000000000 +0100 +++ new/culmus-0.130/culmus.spec 2012-11-04 00:03:35.000000000 +0100 @@ -1,6 +1,6 @@ Summary: Free Hebrew scalable fonts Name: culmus-fonts -Version: 0.121 +Version: 0.130 Release: 1 Vendor: Culmus Project @@ -38,13 +38,13 @@ # Prereq: chkfontpath %description -Frank Ruehl CLM now supports diacritics. +Added new TrueType font "Shofar" by Yoram Gnat. -14 Hebrew font families. Contain ASCII glyphs from various sources. +15 Hebrew font families. Contain ASCII glyphs from various sources. Those families provide a basic set of a serif (Frank Ruehl), sans serif (Nachlieli) and monospaced (Miriam Mono) fonts. Also included Miriam, Drugulin, Aharoni, David, Hadasim etc. Cantillation marks support is available -in Keter YG. +in Keter YG and Shofar. Install the culmus-fonts package if you need a set of Hebrew fonts. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/culmus-0.121/fonts.scale new/culmus-0.130/fonts.scale --- old/culmus-0.121/fonts.scale 2011-12-15 22:43:41.000000000 +0100 +++ new/culmus-0.130/fonts.scale 1970-01-01 01:00:00.000000000 +0100 @@ -1,63 +0,0 @@ -62 -AharoniCLM-Bold.pfa -culmus-aharoni clm-bold-r-normal--0-0-0-0-p-0-adobe-fontspecific -AharoniCLM-Bold.pfa -culmus-aharoni clm-bold-r-normal--0-0-0-0-p-0-iso10646-1 -AharoniCLM-BoldOblique.pfa -culmus-aharoni clm-bold-o-normal--0-0-0-0-p-0-adobe-fontspecific -AharoniCLM-BoldOblique.pfa -culmus-aharoni clm-bold-o-normal--0-0-0-0-p-0-iso10646-1 -AharoniCLM-Book.pfa -culmus-aharoni clm-medium-r-normal--0-0-0-0-p-0-adobe-fontspecific -AharoniCLM-Book.pfa -culmus-aharoni clm-medium-r-normal--0-0-0-0-p-0-iso10646-1 -AharoniCLM-BookOblique.pfa -culmus-aharoni clm-medium-o-normal--0-0-0-0-p-0-adobe-fontspecific -AharoniCLM-BookOblique.pfa -culmus-aharoni clm-medium-o-normal--0-0-0-0-p-0-iso10646-1 -CaladingsCLM.pfa -culmus-caladings clm-medium-r-normal--0-0-0-0-p-0-adobe-fontspecific -CaladingsCLM.pfa -culmus-caladings clm-medium-r-normal--0-0-0-0-p-0-iso10646-1 -DavidCLM-Bold.ttf -misc-david clm-bold-r-normal--0-0-0-0-p-0-iso10646-1 -DavidCLM-BoldItalic.ttf -misc-david clm-bold-i-normal--0-0-0-0-p-0-iso10646-1 -DavidCLM-Medium.ttf -misc-david clm-medium-r-normal--0-0-0-0-p-0-iso10646-1 -DavidCLM-MediumItalic.ttf -misc-david clm-medium-i-normal--0-0-0-0-p-0-iso10646-1 -DrugulinCLM-Bold.pfa -culmus-drugulin clm-bold-r-normal--0-0-0-0-p-0-adobe-fontspecific -DrugulinCLM-Bold.pfa -culmus-drugulin clm-bold-r-normal--0-0-0-0-p-0-iso10646-1 -DrugulinCLM-BoldItalic.pfa -culmus-drugulin clm-bold-i-normal--0-0-0-0-p-0-adobe-fontspecific -DrugulinCLM-BoldItalic.pfa -culmus-drugulin clm-bold-i-normal--0-0-0-0-p-0-iso10646-1 -ElliniaCLM-Bold.pfa -culmus-ellinia clm-bold-r-normal--0-0-0-0-p-0-adobe-fontspecific -ElliniaCLM-Bold.pfa -culmus-ellinia clm-bold-r-normal--0-0-0-0-p-0-iso10646-1 -ElliniaCLM-BoldItalic.pfa -culmus-ellinia clm-bold-i-normal--0-0-0-0-p-0-adobe-fontspecific -ElliniaCLM-BoldItalic.pfa -culmus-ellinia clm-bold-i-normal--0-0-0-0-p-0-iso10646-1 -ElliniaCLM-Light.pfa -culmus-ellinia clm-light-r-normal--0-0-0-0-p-0-adobe-fontspecific -ElliniaCLM-Light.pfa -culmus-ellinia clm-light-r-normal--0-0-0-0-p-0-iso10646-1 -ElliniaCLM-LightItalic.pfa -culmus-ellinia clm-light-i-normal--0-0-0-0-p-0-adobe-fontspecific -ElliniaCLM-LightItalic.pfa -culmus-ellinia clm-light-i-normal--0-0-0-0-p-0-iso10646-1 -FrankRuehlCLM-Bold.ttf -culmus-frank ruehl clm-bold-r-normal--0-0-0-0-p-0-iso10646-1 -FrankRuehlCLM-BoldOblique.ttf -culmus-frank ruehl clm-bold-o-normal--0-0-0-0-p-0-iso10646-1 -FrankRuehlCLM-Medium.ttf -culmus-frank ruehl clm-medium-r-normal--0-0-0-0-p-0-iso10646-1 -FrankRuehlCLM-MediumOblique.ttf -culmus-frank ruehl clm-medium-o-normal--0-0-0-0-p-0-iso10646-1 -HadasimCLM-Bold.ttf -misc-hadasim clm-bold-r-expanded--0-0-0-0-p-0-iso10646-1 -HadasimCLM-BoldOblique.ttf -misc-hadasim clm-bold-o-expanded--0-0-0-0-p-0-iso10646-1 -HadasimCLM-Regular.ttf -misc-hadasim clm-medium-r-normal--0-0-0-0-p-0-iso10646-1 -HadasimCLM-RegularOblique.ttf -misc-hadasim clm-medium-o-normal--0-0-0-0-p-0-iso10646-1 -KeterYG-Bold.ttf -misc-keter yg-bold-r-normal--0-0-0-0-p-0-iso10646-1 -KeterYG-BoldOblique.ttf -misc-keter yg-bold-o-normal--0-0-0-0-p-0-iso10646-1 -KeterYG-Medium.ttf -misc-keter yg-medium-r-normal--0-0-0-0-p-0-iso10646-1 -KeterYG-MediumOblique.ttf -misc-keter yg-medium-o-normal--0-0-0-0-p-0-iso10646-1 -MiriamCLM-Bold.ttf -misc-miriam clm-bold-r-normal--0-0-0-0-p-0-iso10646-1 -MiriamCLM-Book.ttf -misc-miriam clm-medium-r-semicondensed--0-0-0-0-p-0-iso10646-1 -MiriamMonoCLM-Bold.ttf -misc-miriam mono clm-bold-r-normal--0-0-0-0-p-0-iso10646-1 -MiriamMonoCLM-BoldOblique.ttf -misc-miriam mono clm-bold-o-normal--0-0-0-0-p-0-iso10646-1 -MiriamMonoCLM-Book.ttf -misc-miriam mono clm-medium-r-normal--0-0-0-0-p-0-iso10646-1 -MiriamMonoCLM-BookOblique.ttf -misc-miriam mono clm-medium-o-normal--0-0-0-0-p-0-iso10646-1 -NachlieliCLM-Bold.pfa -culmus-nachlieli clm-bold-r-normal--0-0-0-0-p-0-adobe-fontspecific -NachlieliCLM-Bold.pfa -culmus-nachlieli clm-bold-r-normal--0-0-0-0-p-0-iso10646-1 -NachlieliCLM-BoldOblique.pfa -culmus-nachlieli clm-bold-o-normal--0-0-0-0-p-0-adobe-fontspecific -NachlieliCLM-BoldOblique.pfa -culmus-nachlieli clm-bold-o-normal--0-0-0-0-p-0-iso10646-1 -NachlieliCLM-Light.pfa -culmus-nachlieli clm-light-r-normal--0-0-0-0-p-0-adobe-fontspecific -NachlieliCLM-Light.pfa -culmus-nachlieli clm-light-r-normal--0-0-0-0-p-0-iso10646-1 -NachlieliCLM-LightOblique.pfa -culmus-nachlieli clm-light-o-normal--0-0-0-0-p-0-adobe-fontspecific -NachlieliCLM-LightOblique.pfa -culmus-nachlieli clm-light-o-normal--0-0-0-0-p-0-iso10646-1 -SimpleCLM-Bold.ttf -misc-simple clm-bold-r-expanded--0-0-0-0-p-0-iso10646-1 -SimpleCLM-BoldOblique.ttf -misc-simple clm-bold-o-expanded--0-0-0-0-p-0-iso10646-1 -SimpleCLM-Medium.ttf -misc-simple clm-medium-r-normal--0-0-0-0-p-0-iso10646-1 -SimpleCLM-MediumOblique.ttf -misc-simple clm-medium-o-normal--0-0-0-0-p-0-iso10646-1 -StamAshkenazCLM.ttf -misc-stam ashkenaz clm-medium-r-normal--0-0-0-0-p-0-iso10646-1 -StamSefaradCLM.ttf -misc-stam sefarad clm-medium-r-normal--0-0-0-0-p-0-iso10646-1 -YehudaCLM-Bold.pfa -culmus-yehuda clm-bold-r-normal--0-0-0-0-p-0-adobe-fontspecific -YehudaCLM-Bold.pfa -culmus-yehuda clm-bold-r-normal--0-0-0-0-p-0-iso10646-1 -YehudaCLM-Light.pfa -culmus-yehuda clm-light-r-normal--0-0-0-0-p-0-adobe-fontspecific -YehudaCLM-Light.pfa -culmus-yehuda clm-light-r-normal--0-0-0-0-p-0-iso10646-1 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/culmus-0.121/fonts.scale-ttf new/culmus-0.130/fonts.scale-ttf --- old/culmus-0.121/fonts.scale-ttf 2011-12-15 22:46:24.000000000 +0100 +++ new/culmus-0.130/fonts.scale-ttf 2012-11-03 00:04:43.000000000 +0100 @@ -1,4 +1,4 @@ -28 +32 DavidCLM-Medium.ttf -culmus-David-medium-r-normal--0-0-0-0-p-0-iso10646-1 DavidCLM-MediumItalic.ttf -culmus-David-medium-i-normal--0-0-0-0-p-0-iso10646-1 DavidCLM-Bold.ttf -culmus-David-bold-r-normal--0-0-0-0-p-0-iso10646-1 @@ -27,3 +27,7 @@ KeterYG-BoldOblique.ttf -culmus-Keter YG-bold-o-normal--0-0-0-0-p-0-iso10646-1 KeterYG-Medium.ttf -culmus-Keter YG-medium-r-normal--0-0-0-0-p-0-iso10646-1 KeterYG-MediumOblique.ttf -culmus-Keter YG-medium-o-normal--0-0-0-0-p-0-iso10646-1 +ShofarRegular.ttf -culmus-Shofar-medium-r-normal--0-0-0-0-p-0-iso10646-1 +ShofarRegularOblique.ttf -culmus-Shofar-medium-o-normal--0-0-0-0-p-0-iso10646-1 +ShofarDemi-Bold.ttf -culmus-Shofar-bold-r-normal--0-0-0-0-p-0-iso10646-1 +ShofarDemi-BoldOblique.ttf -culmus-Shofar-bold-o-normal--0-0-0-0-p-0-iso10646-1 -- To unsubscribe, e-mail: opensuse-commit+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-commit+help(a)opensuse.org

1 0

commit chromium for openSUSE:Factory
by root＠hilbert.suse.de 27 Mar '13

27 Mar '13

Hello community, here is the log from the commit of package chromium for openSUSE:Factory checked in at 2013-03-27 19:22:31 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/chromium (Old) and /work/SRC/openSUSE:Factory/.chromium.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "chromium", Maintainer is "orphaned(a)suse.de" Changes: -------- --- /work/SRC/openSUSE:Factory/chromium/chromium.changes 2013-03-04 17:25:37.000000000 +0100 +++ /work/SRC/openSUSE:Factory/.chromium.new/chromium.changes 2013-03-27 19:23:03.000000000 +0100 @@ -1,0 +2,18 @@ +Tue Mar 19 16:51:59 UTC 2013 - tittiatcoke(a)gmail.com + +- Update to 27.0.1447 + * Bug and stability fixes + * Drop patch chromium-norpath.patch. Rpath is only used when + building chromium with shared libraries. +- Deactive building against system libraries. This is now causing + issues for building on 12.3 and Factory. + +------------------------------------------------------------------- +Sat Mar 9 14:03:28 UTC 2013 - tittiatcoke(a)gmail.com + +- Update to 27.0.1435 + * Bug and stability fixes + * Drop patch chromium-siginfo.patch due to upstream + inclusion + +------------------------------------------------------------------- Old: ---- chromium-norpath.patch chromium-siginfo.patch chromium.27.0.1425.0.svn185065.tar.bz2 New: ---- chromium.27.0.1447.0.svn189031.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ chromium.spec ++++++ --- /var/tmp/diff_new_pack.7LfCZn/_old 2013-03-27 19:23:43.000000000 +0100 +++ /var/tmp/diff_new_pack.7LfCZn/_new 2013-03-27 19:23:43.000000000 +0100 @@ -16,12 +16,13 @@ # -%define svn_revision 185065 +%define svn_revision 189031 %define chromium_no_dlopen 1 -%define chromium_system_libs 0%{?suse_version} > 1220 +#define chromium_system_libs 0%{?suse_version} > 1220 +%define chromium_system_libs 0 Name: chromium -Version: 27.0.1425.0 +Version: 27.0.1447.0 Release: 0 Summary: Google's opens source browser project License: BSD-3-Clause and LGPL-2.1+ @@ -58,16 +59,12 @@ Patch14: chromium-master-prefs-path.patch # PATCH-FIX-OPENSUSE Fix some includes specifically for the GCC version used Patch20: chromium-gcc-fixes.patch -# PATCH-FIX-OPENSUSE remove the rpath in the libraries -Patch62: chromium-norpath.patch # PATCH-FIX-UPSTREAM Add more charset aliases Patch64: chromium-more-codec-aliases.patch # PATCH-FIX-OPENSUSE Compile the sandbox with -fPIE settings Patch66: chromium-sandbox-pie.patch # PATCH-FIX-OPENSUSE Compile with the standard gold linker Patch67: chromium_use_gold.patch -# PATCH-FIX-OPENSUSE Fix build with glibc 2.16 -Patch69: chromium-siginfo.patch BuildRequires: Mesa-devel BuildRequires: alsa-devel @@ -141,6 +138,7 @@ BuildRequires: pkgconfig(xrender) BuildRequires: pkgconfig(xscrnsaver) BuildRequires: pkgconfig(xt) +BuildRequires: pkgconfig(xtst) %if 0%{?suse_version} < 1210 BuildRequires: libudev-devel %endif @@ -240,14 +238,12 @@ %setup -q -n %{name} %patch1 -p1 -%patch62 -p1 %patch64 %patch13 -p1 %patch14 -p1 %patch20 -p1 %patch66 -p1 %patch67 -p1 -%patch69 -p1 echo "svn%{svn_revision}" > src/build/LASTCHANGE.in ++++++ chromium.27.0.1425.0.svn185065.tar.bz2 -> chromium.27.0.1447.0.svn189031.tar.bz2 ++++++ /work/SRC/openSUSE:Factory/chromium/chromium.27.0.1425.0.svn185065.tar.bz2 /work/SRC/openSUSE:Factory/.chromium.new/chromium.27.0.1447.0.svn189031.tar.bz2 differ: char 11, line 1 -- To unsubscribe, e-mail: opensuse-commit+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-commit+help(a)opensuse.org

1 0

commit patchinfo.1454 for openSUSE:12.3:Update
by root＠hilbert.suse.de 27 Mar '13

27 Mar '13

Hello community, here is the log from the commit of package patchinfo.1454 for openSUSE:12.3:Update checked in at 2013-03-27 16:18:22 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:12.3:Update/patchinfo.1454 (Old) and /work/SRC/openSUSE:12.3:Update/.patchinfo.1454.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "patchinfo.1454", Maintainer is "" Changes: -------- New Changes file: NO CHANGES FILE!!! New: ---- _patchinfo ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ _patchinfo ++++++ <patchinfo> <issue id="805233" tracker="bnc">VUL-0: CVE-2013-0338 2013-0339: libxml2: internal/external entity expansion problems</issue> <issue id="CVE-2013-0338" tracker="cve" /> <category>security</category> <rating>moderate</rating> <packager>vitezslav_cizek</packager> <description> libxml2 was updated to limit internal entity expansion denial of service problems (IXE) (CVE-2013-0338) (bnc#805233) </description> <summary>libxml2: fixed two entity expansion problems</summary> </patchinfo> -- To unsubscribe, e-mail: opensuse-commit+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-commit+help(a)opensuse.org

1 0

commit patchinfo.1454 for openSUSE:12.1:Update
by root＠hilbert.suse.de 27 Mar '13

27 Mar '13

Hello community, here is the log from the commit of package patchinfo.1454 for openSUSE:12.1:Update checked in at 2013-03-27 16:18:19 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:12.1:Update/patchinfo.1454 (Old) and /work/SRC/openSUSE:12.1:Update/.patchinfo.1454.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "patchinfo.1454", Maintainer is "" Changes: -------- New Changes file: NO CHANGES FILE!!! New: ---- _patchinfo ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ _patchinfo ++++++ <patchinfo> <issue id="805233" tracker="bnc">VUL-0: CVE-2013-0338 2013-0339: libxml2: internal/external entity expansion problems</issue> <issue id="CVE-2013-0338" tracker="cve" /> <category>security</category> <rating>moderate</rating> <packager>vitezslav_cizek</packager> <description> libxml2 was updated to limit internal entity expansion denial of service problems (IXE) (CVE-2013-0338) (bnc#805233) </description> <summary>libxml2: fixed two entity expansion problems</summary> </patchinfo> -- To unsubscribe, e-mail: opensuse-commit+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-commit+help(a)opensuse.org

1 0

commit python-libxml2 for openSUSE:12.2:Update
by root＠hilbert.suse.de 27 Mar '13

27 Mar '13

Hello community, here is the log from the commit of package python-libxml2 for openSUSE:12.2:Update checked in at 2013-03-27 16:18:13 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:12.2:Update/python-libxml2 (Old) and /work/SRC/openSUSE:12.2:Update/.python-libxml2.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "python-libxml2", Maintainer is "" Changes: -------- New Changes file: NO CHANGES FILE!!! ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ _link ++++++ --- /var/tmp/diff_new_pack.tYkUQ3/_old 2013-03-27 16:18:15.000000000 +0100 +++ /var/tmp/diff_new_pack.tYkUQ3/_new 2013-03-27 16:18:15.000000000 +0100 @@ -1 +1 @@ -<link package='python-libxml2.1158' cicount='copy' /> +<link package='python-libxml2.1454' cicount='copy' /> -- To unsubscribe, e-mail: opensuse-commit+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-commit+help(a)opensuse.org

1 0

commit libxml2.1454 for openSUSE:12.3:Update
by root＠hilbert.suse.de 27 Mar '13

27 Mar '13

Hello community, here is the log from the commit of package libxml2.1454 for openSUSE:12.3:Update checked in at 2013-03-27 16:18:08 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:12.3:Update/libxml2.1454 (Old) and /work/SRC/openSUSE:12.3:Update/.libxml2.1454.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "libxml2.1454", Maintainer is "" Changes: -------- New Changes file: --- /dev/null 2013-02-26 18:15:11.936010755 +0100 +++ /work/SRC/openSUSE:12.3:Update/.libxml2.1454.new/libxml2.changes 2013-03-27 16:18:11.000000000 +0100 @@ -0,0 +1,1621 @@ +------------------------------------------------------------------- +Thu Mar 7 13:28:59 UTC 2013 - vcizek(a)suse.com + +- fix for CVE-2013-0338 (bnc#805233) + libxml2-CVE-2013-0338-Detect-excessive-entities-expansion-upon-replacement.patch + +------------------------------------------------------------------- +Sat Dec 15 15:55:26 UTC 2012 - p.drouand(a)gmail.com + +- update to 2.9.0 version: + * please see the Changelog +- Updated patchs to get working with new version: + * libxml2-2.9.0-CVE-2012-5134.patch ( libxml2-CVE-2012-5134.patch ) + * fix-perl.diff + +------------------------------------------------------------------- +Fri Dec 7 10:49:11 UTC 2012 - vcizek(a)suse.com + +- Add libxml2-CVE-2012-5134.patch to fix CVE-2012-5134 (bnc#793334) + +------------------------------------------------------------------- +Sun Sep 23 19:40:30 UTC 2012 - dimstar(a)opensuse.org + +- Add a comment next to libxml2.la to make sure that anybody + removing it knows why it's there and reconsiders. + +------------------------------------------------------------------- +Sun Sep 23 19:28:04 UTC 2012 - coolo(a)suse.com + +- readd .la file, python-libxml2 needs it + +------------------------------------------------------------------- +Fri Sep 21 18:04:16 UTC 2012 - jengelh(a)inai.de + +- Remove .la files; make sure installation succeeds for + Fedora_17 target + +------------------------------------------------------------------- +Tue Jun 12 18:10:07 UTC 2012 - chris(a)computersalat.de + +- update to 2.8.0 + * please se ChangeLog for more info +- remove obsolete bigendian64 patch +- rebase fix-perl patch + +------------------------------------------------------------------- +Sun Mar 11 21:00:19 UTC 2012 - jengelh(a)medozas.de + +- libxml2-2 should not require libxml2-tools. There is no trouble + expected, since attempting to install libxml2 will already pull + in libxml2-tools due to Provides tags. + +------------------------------------------------------------------- +Mon Mar 5 10:18:12 UTC 2012 - coolo(a)suse.com + +- revert the two commits that broke perl-XML-LibXML's test case, + I hope the two upstreams will figure it out + +------------------------------------------------------------------- +Fri Mar 2 16:47:56 UTC 2012 - coolo(a)suse.com + +- update to git to fix some issues + * Fix a logic error in Schemas Component ConstraintsHEADmaster + * Fix a wrong enum type use in Schemas Types + +------------------------------------------------------------------- +Thu Mar 1 18:36:33 CET 2012 - meissner(a)suse.de + +- fixed a 64bit big endian bug in the file reader. + +------------------------------------------------------------------- +Sat Feb 25 13:50:54 UTC 2012 - coolo(a)suse.com + +- the fallout of requiring libxml2-tools as explicit buildrequire + is just too large, so avoid it for now and create a cycle between + libxml2-2 and libxml2-tools + +------------------------------------------------------------------- +Sat Feb 25 08:09:00 UTC 2012 - coolo(a)suse.com + +- add provide for the old name to fix packages with explicit + library dependency + +------------------------------------------------------------------- +Thu Feb 23 10:42:16 UTC 2012 - coolo(a)suse.com + +- update to today's GIT snapshot: + include XZ support +- split libxml2-2 according to shared library policy + +------------------------------------------------------------------- +Mon Dec 26 17:08:52 UTC 2011 - jengelh(a)medozas.de + +- Remove redundant tags/sections + +------------------------------------------------------------------- +Wed Dec 21 10:24:19 UTC 2011 - coolo(a)suse.com + +- add autoconf as buildrequire to avoid implicit dependency + +------------------------------------------------------------------- +Tue Dec 20 11:05:01 UTC 2011 - coolo(a)suse.com + +- own aclocal directory, there is no other reason to buildrequire + automake + +------------------------------------------------------------------- +Fri Jul 8 08:52:06 UTC 2011 - saschpe(a)suse.de + +- update to libxml-2.7.8+git20110708 + - several important bugfixes +- drop upstreamed patches: + * libxml2-CVE-2010-4494.patch + * libxml2-CVE-2011-1944.patch + * noxref.patch + * symbol-versioning.patch + +------------------------------------------------------------------- +Wed Jun 29 09:05:59 UTC 2011 - puzel(a)novell.com + +- add libxml2-CVE-2011-1944.patch (bnc#697372) + +------------------------------------------------------------------- +Sun Jun 5 21:36:07 UTC 2011 - cshorler(a)googlemail.com + +- add symbol-versioning.patch to restore 11.3 versioned symbols + +------------------------------------------------------------------- +Mon Jan 3 09:21:20 UTC 2011 - puzel(a)novell.com + +- add libxml2-CVE-2010-4494.patch (bnc#661471) + +------------------------------------------------------------------- +Fri Dec 3 12:09:40 UTC 2010 - puzel(a)novell.com + +- update to libxml-2.7.8 + - number of bufixes, documentation and portability fixes + - update language ID parser to RFC 5646 + - sort python generated stubs + - add an HTML parser option to avoid a default doctype + - see http://xmlsoft.org/news.html for exact details +- drop libxml2-xpath-ns-attr-axis.patch (in upstream) +- clean up specfile + +------------------------------------------------------------------- +Mon Nov 1 10:00:04 UTC 2010 - puzel(a)novell.com + +- add libxml2-xpath-ns-attr-axis.patch (bnc#648277) + +------------------------------------------------------------------- +Sat Oct 30 22:45:22 UTC 2010 - cristian.rodriguez(a)opensuse.org + +- Use --disable-static + +------------------------------------------------------------------- +Mon Sep 20 11:36:31 UTC 2010 - puzel(a)novell.com + +- drop libxml2-largefile64.patch (revert last change) + - the issue is fixed in zlib + +------------------------------------------------------------------- +Fri Sep 17 16:28:46 UTC 2010 - puzel(a)novell.com + +- add libxml2-largefile64.patch (fixes build) + - debian bug#439843 + +------------------------------------------------------------------- +Wed Jul 14 20:05:00 UTC 2010 - jw(a)novell.com + +- added noxref.patch, + this implements a new --noxref option, which turns + validation errors about missing xrefs into warnings. + Upstreamed as https://bugzilla.gnome.org/show_bug.cgi?id=624386 + +------------------------------------------------------------------- +Sat Apr 24 09:50:01 UTC 2010 - coolo(a)novell.com + +- buildrequire pkg-config to fix provides + +------------------------------------------------------------------- +Tue Mar 23 23:46:00 CET 2010 - mrdocs(a)opensuse.org + +- update to 2.7.7 +- add extra options to ./configure for scribus features and avoid a crash +- updates from 2.7.3 > 2.7.7 include a number of portability, correctness + memory leaks and build fixes including some CVE +- see http://xmlsoft.org/news.html for exact details + +------------------------------------------------------------------- +Mon Feb 22 22:11:00 CET 2010 - mrdocs(a)opensuse.org + +- add sax parser option compiled in + +------------------------------------------------------------------- +Mon Dec 14 16:14:49 CET 2009 - jengelh(a)medozas.de + +- add baselibs.conf as a source ++++ 1424 more lines (skipped) ++++ between /dev/null ++++ and /work/SRC/openSUSE:12.3:Update/.libxml2.1454.new/libxml2.changes New Changes file: --- /dev/null 2013-02-26 18:15:11.936010755 +0100 +++ /work/SRC/openSUSE:12.3:Update/.libxml2.1454.new/python-libxml2.changes 2013-03-27 16:18:11.000000000 +0100 @@ -0,0 +1,1489 @@ +------------------------------------------------------------------- +Sat Dec 15 15:55:26 UTC 2012 - p.drouand(a)gmail.com + +- update to 2.9.0 version: + * please see the Changelog +- Updated patchs to get working with new version: + * libxml2-2.9.0-CVE-2012-5134.patch ( libxml2-CVE-2012-5134.patch ) + * fix-perl.diff + +------------------------------------------------------------------- +Tue Jun 12 18:10:07 UTC 2012 - chris(a)computersalat.de + +- update to 2.8.0 + * please see ChangeLog for more info + +------------------------------------------------------------------- +Sat Feb 25 08:47:58 UTC 2012 - coolo(a)suse.com + +- fix version + +------------------------------------------------------------------- +Thu Feb 23 11:00:21 UTC 2012 - coolo(a)suse.com + +- renamed to python-libxml2 to follow python naming expectations +- do not require python but let rpm figure it out + +------------------------------------------------------------------- +Mon Dec 26 17:08:59 UTC 2011 - jengelh(a)medozas.de + +- Remove redundant tags/sections + +------------------------------------------------------------------- +Fri Jul 8 08:52:06 UTC 2011 - saschpe(a)suse.de + +- update to libxml-2.7.8+git20110708 + - several important bugfixes + +------------------------------------------------------------------- +Mon Dec 6 09:05:53 UTC 2010 - coolo(a)novell.com + +- buildrequire python-xml to fix build + +------------------------------------------------------------------- +Fri Dec 3 12:24:42 UTC 2010 - puzel(a)novell.com + +- update to libxml-2.7.8 + - number of bufixes, documentation and portability fixes + - update language ID parser to RFC 5646 + - sort python generated stubs + - add an HTML parser option to avoid a default doctype + - see http://xmlsoft.org/news.html for exact details +- clean up specfile + +------------------------------------------------------------------- +Wed Apr 7 16:34:29 UTC 2010 - coolo(a)novell.com + +- fix build + +------------------------------------------------------------------- +Tue Mar 23 23:46:00 CET 2010 - mrdocs(a)opensuse.org + +- update to 2.7.7 +- add extra options to ./configure for scribus features and avoid a crash +- updates from 2.7.3 > 2.7.7 include a number of portability, correctness + memory leaks and build fixes including some CVE +- see http://xmlsoft.org/news.html for exact details + +------------------------------------------------------------------- +Tue Dec 15 12:19:16 CET 2009 - jengelh(a)medozas.de + +- enable parallel building + +------------------------------------------------------------------- +Thu Mar 19 10:16:50 CET 2009 - prusnak(a)suse.cz + +- updated to 2.7.2 + * Portability fix: fix solaris compilation problem, + fix compilation if XPath is not configured in + * Bug fixes: nasty entity bug introduced in 2.7.0, restore old + behaviour when saving an HTML doc with an xml dump function, + HTML UTF-8 parsing bug, fix reader custom error handlers + (Riccardo Scussat) + * Improvement: xmlSave options for more flexibility to save + as XML/HTML/XHTML, handle leading BOM in HTML documents +- updated to 2.7.3 + * Build fix: fix build when HTML support is not included. + * Bug fixes: avoid memory overflow in gigantic text nodes, + indentation problem on the writed (Rob Richards), + xmlAddChildList pointer problem (Rob Richards and Kevin Milburn), + xmlAddChild problem with attribute (Rob Richards and Kris Breuker), + avoid a memory leak in an edge case (Daniel Zimmermann), + deallocate some pthread data (Alex Ott). + * Improvements: configure option to avoid rebuilding docs + (Adrian Bunk), limit text nodes to 10MB max by default, + add element traversal APIs, add a parser option to enable + pre 2.7 SAX behavior (Rob Richards), + add gcc malloc checking (Marcus Meissner), + add gcc printf like functions parameters checking (Marcus Meissner). +- dropped obsoleted patches: + * alloc_size.patch (mainline) + * CVE-2008-4225.patch (mainline) + * CVE-2008-4226.patch (mainline) + * CVE-2008-4409.patch (mainline) + * oldsax.patch (mainline) + * pritnf.patch (mainline) + * xmlsave.patch (mainline) + +------------------------------------------------------------------- +Mon Jan 12 17:21:59 CET 2009 - prusnak(a)suse.cz + +- added oldsax.patch to enable pre 2.7.0 sax behaviour [bnc#457056] + +------------------------------------------------------------------- +Wed Dec 10 12:34:56 CET 2008 - olh(a)suse.de + +- use Obsoletes: -XXbit only for ppc64 to help solver during distupgrade + (bnc#437293) + +------------------------------------------------------------------- +Tue Nov 25 16:00:27 CET 2008 - prusnak(a)suse.cz + +- fix broken xmlsave (xmlsave.patch) [bnc#437203] + +------------------------------------------------------------------- +Tue Nov 18 16:24:39 CET 2008 - prusnak(a)suse.cz + +- fixed CVE-2008-4225 [bnc#445677] + +------------------------------------------------------------------- +Thu Nov 6 12:02:25 CET 2008 - prusnak(a)suse.cz + +- fixed CVE-2008-4226 [bnc#441368] + +------------------------------------------------------------------- +Thu Oct 30 12:34:56 CET 2008 - olh(a)suse.de + +- obsolete old -XXbit packages (bnc#437293) + +------------------------------------------------------------------- +Mon Oct 6 14:50:38 CEST 2008 - prusnak(a)suse.cz + +- fixed CVE-2008-4409 [bnc#432486] + +------------------------------------------------------------------- +Tue Sep 9 17:01:12 CEST 2008 - meissner(a)suse.de + +- added GCC attribute alloc_size markup (alloc_size.patch) + +------------------------------------------------------------------- +Wed Sep 3 16:58:23 CEST 2008 - prusnak(a)suse.cz + +- updated to 2.7.1 + * Portability fix: Borland C fix (Moritz Both) + * Bug fixes: python serialization wrappers, XPath QName corner + case handking and leaks (Martin) + * Improvement: extend the xmlSave to handle HTML documents and trees + * Cleanup: python serialization wrappers + +------------------------------------------------------------------- +Wed Sep 3 16:57:46 CEST 2008 - prusnak(a)suse.cz + +- updated to 2.7.0 + * Documentation: switch ChangeLog to UTF-8, improve mutithreads and + xmlParserCleanup docs + * Portability fixes: Older Win32 platforms (Rob Richards), MSVC + porting fix (Rob Richards), Mac OS X regression tests (Sven Herzberg), + non GNUCC builds (Rob Richards), compilation on Haiku (Andreas Färber) + * Bug fixes: various realloc problems (Ashwin), potential double-free + (Ashwin), regexp crash, icrash with invalid whitespace facets (Rob + Richards), pattern fix when streaming (William Brack), various XML + parsing and validation fixes based on the W3C regression tests, reader + tree skipping function fix (Ashwin), Schemas regexps escaping fix + (Volker Grabsch), handling of entity push errors (Ashwin), fix a slowdown + when encoder cant serialize characters on output + * Code cleanup: compilation fix without the reader, without the output + (Robert Schwebel), python whitespace (Martin), many space/tabs cleanups, + serious cleanup of the entity handling code + * Improvement: switch parser to XML-1.0 5th edition, add parsing flags + for old versions, switch URI parsing to RFC 3986, + add xmlSchemaValidCtxtGetParserCtxt (Holger Kaelberer), + new hashing functions for dictionnaries (based on Stefan Behnel work), + improve handling of misplaced html/head/body in HTML parser, better + regression test tools and code coverage display, better algorithms + to detect various versions of the billion laughts attacks, make + arbitrary parser limits avoidable as a parser option +- dropped obsoleted patches: + * billion-laughs.patch (included in update) + +------------------------------------------------------------------- +Wed Aug 13 12:05:08 CEST 2008 - prusnak(a)suse.cz + +- fixed billion laughs vulnerability (billion-laughs.patch) [bnc#415371] + +------------------------------------------------------------------- +Fri Apr 11 14:34:30 CEST 2008 - prusnak(a)suse.cz + +- updated to 2.6.32 ++++ 1292 more lines (skipped) ++++ between /dev/null ++++ and /work/SRC/openSUSE:12.3:Update/.libxml2.1454.new/python-libxml2.changes New: ---- baselibs.conf fix-perl.diff libxml2-2.9.0-CVE-2012-5134.patch libxml2-2.9.0.tar.gz libxml2-CVE-2013-0338-Detect-excessive-entities-expansion-upon-replacement.patch libxml2.changes libxml2.spec python-libxml2.changes python-libxml2.spec ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libxml2.spec ++++++ # # spec file for package libxml2 # # Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed # upon. The license for this file, and modifications and additions to the # file, is the same license as for the pristine package itself (unless the # license for the pristine package is not an Open Source License, in which # case the license is the MIT License). An "Open Source License" is a # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. # Please submit bugfixes or comments via http://bugs.opensuse.org/ # %define lname libxml2-2 Name: libxml2 Version: 2.9.0 Release: 0 Summary: A Library to Manipulate XML Files License: MIT Group: System/Libraries Url: http://xmlsoft.org # Source ftp://xmlsoft.org/libxml2/libxml2-git-snapshot.tar.gz changes every day Source: ftp://xmlsoft.org/libxml2/%{name}-%{version}.tar.gz Source2: baselibs.conf Patch0: fix-perl.diff # PATCH-FIX-UPSTREAM CVE-2012-5134 (bnc#793334) Patch1: libxml2-2.9.0-CVE-2012-5134.patch Patch4: libxml2-CVE-2013-0338-Detect-excessive-entities-expansion-upon-replacement.patch BuildRoot: %{_tmppath}/%{name}-%{version}-build BuildRequires: pkg-config BuildRequires: readline-devel BuildRequires: xz-devel BuildRequires: zlib-devel %description The XML C library was initially developed for the GNOME project. It is now used by many programs to load and save extensible data structures or manipulate any kind of XML files. This library implements a number of existing standards related to markup languages, including the XML standard, name spaces in XML, XML Base, RFC 2396, XPath, XPointer, HTML4, XInclude, SGML catalogs, and XML catalogs. In most cases, libxml tries to implement the specification in a rather strict way. To some extent, it provides support for the following specifications, but does not claim to implement them: DOM, FTP client, HTTP client, and SAX. The library also supports RelaxNG. Support for W3C XML Schemas is in progress. %package -n %lname Summary: A Library to Manipulate XML Files Group: System/Libraries %description -n %lname The XML C library was initially developed for the GNOME project. It is now used by many programs to load and save extensible data structures or manipulate any kind of XML files. This library implements a number of existing standards related to markup languages, including the XML standard, name spaces in XML, XML Base, RFC 2396, XPath, XPointer, HTML4, XInclude, SGML catalogs, and XML catalogs. In most cases, libxml tries to implement the specification in a rather strict way. To some extent, it provides support for the following specifications, but does not claim to implement them: DOM, FTP client, HTTP client, and SAX. The library also supports RelaxNG. Support for W3C XML Schemas is in progress. %package tools Summary: Tools using libxml Group: System/Libraries Provides: %{name} = %{version}-%{release} Obsoletes: %{name} < %{version}-%{release} %description tools This package contains xmllint, a very useful tool proving libxml's power. %package devel Summary: Include Files and Libraries mandatory for Development Group: Development/Libraries/C and C++ Requires: %{lname} = %{version} Requires: %{name}-tools = %{version} Requires: glibc-devel Requires: readline-devel Requires: xz-devel Requires: zlib-devel # bug437293 %ifarch ppc64 Obsoletes: libxml2-devel-64bit %endif %description devel This package contains all necessary include files and libraries needed to develop applications that require these. %package doc Summary: A Library to Manipulate XML Files Group: System/Libraries Requires: %{lname} = %{version} BuildArch: noarch %description doc The XML C library was initially developed for the GNOME project. It is now used by many programs to load and save extensible data structures or manipulate any kind of XML files. This library implements a number of existing standards related to markup languages, including the XML standard, name spaces in XML, XML Base, RFC 2396, XPath, XPointer, HTML4, XInclude, SGML catalogs, and XML catalogs. In most cases, libxml tries to implement the specification in a rather strict way. To some extent, it provides support for the following specifications, but does not claim to implement them: DOM, FTP client, HTTP client, and SAX. The library also supports RelaxNG. Support for W3C XML Schemas is in progress. %prep %setup -q %patch0 %patch1 -p1 %patch4 -p1 %build %configure --disable-static \ --docdir=%_docdir/%name \ --with-html-dir=%_docdir/%name/html \ --with-fexceptions \ --with-history \ --without-python \ --enable-ipv6 \ --with-sax1 \ --with-regexps \ --with-threads \ --with-reader \ --with-http make %{?_smp_mflags} BASE_DIR="%_docdir" DOC_MODULE="%name" %install make install DESTDIR="%buildroot" BASE_DIR="%_docdir" DOC_MODULE="%name" mkdir -p "%buildroot/%_docdir/%name" cp -a AUTHORS NEWS README COPYING* Copyright TODO* %{buildroot}%{_docdir}/%{name}/ ln -s libxml2/libxml %{buildroot}%{_includedir}/libxml %check # qemu-arm can't keep up atm, disabling check for arm %ifnarch %arm make check %endif %post -n %lname -p /sbin/ldconfig %postun -n %lname -p /sbin/ldconfig %files -n %lname %defattr(-, root, root) %{_libdir}/lib*.so.* %doc %dir %{_docdir}/%{name} %doc %{_docdir}/%{name}/[ANRCT]* %files tools %defattr(-, root, root) %{_bindir}/xmllint %{_bindir}/xmlcatalog %doc %{_mandir}/man1/xmllint.1* %doc %{_mandir}/man1/xmlcatalog.1* %files devel %defattr(-, root, root) %{_bindir}/xml2-config %dir %{_datadir}/aclocal %{_datadir}/aclocal/libxml.m4 %{_includedir}/libxml %{_includedir}/libxml2 %{_libdir}/lib*.so # libxml2.la is needed for the python-libxml2 build. Deleting it breaks build of python-libxml2. %{_libdir}/libxml2.la %{_libdir}/*.sh %{_libdir}/pkgconfig/*.pc %doc %{_mandir}/man1/xml2-config.1* %doc %{_mandir}/man3/libxml.3* %files doc %defattr(-, root, root) %{_datadir}/gtk-doc/html/* %doc %{_docdir}/%{name}/examples %doc %{_docdir}/%{name}/html # owning these directories prevents gtk-doc <-> libxml2 build loop: %dir %{_datadir}/gtk-doc %dir %{_datadir}/gtk-doc/html %changelog ++++++ python-libxml2.spec ++++++ # # spec file for package python-libxml2 # # Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed # upon. The license for this file, and modifications and additions to the # file, is the same license as for the pristine package itself (unless the # license for the pristine package is not an Open Source License, in which # case the license is the MIT License). An "Open Source License" is a # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. # Please submit bugfixes or comments via http://bugs.opensuse.org/ # Name: python-libxml2 Version: 2.9.0 Release: 0 Summary: Python Bindings for libxml2 License: MIT Group: Development/Libraries/Python Url: http://xmlsoft.org Source: ftp://xmlsoft.org/libxml2/libxml2-%{version}.tar.gz BuildRoot: %{_tmppath}/%{name}-%{version}-build BuildRequires: libxml2-devel BuildRequires: python-devel BuildRequires: python-xml Requires: libxml2-2 = %{version} # Uncomment to save space: #NoSource: 0 Obsoletes: libxml2-python < %{version} Provides: libxml2-python = %{version} %description The libxml2-python package contains a module that permits applications written in the Python programming language to use the interface supplied by the libxml2 library to manipulate XML files. This library allows manipulation of XML files. It includes support for reading, modifying, and writing XML and HTML files. There is DTD support that includes parsing and validation even with complex DTDs, either at parse time or later once the document has been modified. %prep %setup -q -n libxml2-%{version} %build # workaround for bnc#310196 %ifarch s390 s390x export RPM_OPT_FLAGS=${RPM_OPT_FLAGS/-O2/-O1} %endif export CFLAGS="%{optflags} -fno-strict-aliasing" %configure \ --with-fexceptions \ --with-history \ --enable-ipv6 \ --with-sax1 \ --with-regexps \ --with-threads \ --with-reader \ --with-http # use libxml2 as built by libxml2 source package mkdir .libs cp -v %{_libdir}/libxml2.la . make -C python %{?_smp_mflags} %install make -C python install \ DESTDIR=%{buildroot} \ pythondir=%{py_sitedir} \ PYTHON_SITE_PACKAGES=%{py_sitedir} chmod a-x python/tests/*.py # Unwanted doc stuff rm -fr %{buildroot}%{_datadir}/doc rm -f python/tests/Makefile* # #223696 rm -f %{buildroot}%{py_sitedir}/*.{la,a} %files %defattr(-, root, root) %doc python/TODO %doc python/libxml2class.txt %doc python/tests %{py_sitedir}/* %changelog ++++++ baselibs.conf ++++++ libxml2-2 libxml2-devel requires -libxml2-<targettype> requires "libxml2-2-<targettype> = <version>" ++++++ fix-perl.diff ++++++ commit 77b77b1301e052d90e6a0967534a698506afcd86 Author: Daniel Veillard <veillard(a)redhat.com> Date: Thu Jan 26 19:11:02 2012 +0800 Fix SAX2 builder in case of undefined element namespaces Work as in XML-1.0 before namespaces, and use prefix:localname as the new element name (and no namespace of course) Also fix 3 cases in the regression tests where the prefix: was erroneously dropped in such case Index: SAX2.c =================================================================== --- SAX2.c.orig 2012-09-11 08:01:01.000000000 +0200 +++ SAX2.c 2012-12-15 16:32:27.353560391 +0100 @@ -2188,7 +2188,6 @@ xmlNodePtr parent; xmlNsPtr last = NULL, ns; const xmlChar *uri, *pref; - xmlChar *lname = NULL; int i, j; if (ctx == NULL) return; @@ -2208,20 +2207,6 @@ } /* - * Take care of the rare case of an undefined namespace prefix - */ - if ((prefix != NULL) && (URI == NULL)) { - if (ctxt->dictNames) { - const xmlChar *fullname; - - fullname = xmlDictQLookup(ctxt->dict, prefix, localname); - if (fullname != NULL) - localname = fullname; - } else { - lname = xmlBuildQName(localname, prefix, NULL, 0); - } - } - /* * allocate the node */ if (ctxt->freeElems != NULL) { @@ -2234,10 +2219,7 @@ if (ctxt->dictNames) ret->name = localname; else { - if (lname == NULL) - ret->name = xmlStrdup(localname); - else - ret->name = lname; + ret->name = xmlStrdup(localname); if (ret->name == NULL) { xmlSAX2ErrMemory(ctxt, "xmlSAX2StartElementNs"); return; @@ -2249,11 +2231,8 @@ if (ctxt->dictNames) ret = xmlNewDocNodeEatName(ctxt->myDoc, NULL, (xmlChar *) localname, NULL); - else if (lname == NULL) - ret = xmlNewDocNode(ctxt->myDoc, NULL, localname, NULL); else - ret = xmlNewDocNodeEatName(ctxt->myDoc, NULL, - (xmlChar *) lname, NULL); + ret = xmlNewDocNode(ctxt->myDoc, NULL, localname, NULL); if (ret == NULL) { xmlSAX2ErrMemory(ctxt, "xmlSAX2StartElementNs"); return; @@ -2360,31 +2339,6 @@ */ if (nb_attributes > 0) { for (j = 0,i = 0;i < nb_attributes;i++,j+=5) { - /* - * Handle the rare case of an undefined atribute prefix - */ - if ((attributes[j+1] != NULL) && (attributes[j+2] == NULL)) { - if (ctxt->dictNames) { - const xmlChar *fullname; - - fullname = xmlDictQLookup(ctxt->dict, attributes[j+1], - attributes[j]); - if (fullname != NULL) { - xmlSAX2AttributeNs(ctxt, fullname, NULL, - attributes[j+3], attributes[j+4]); - continue; - } - } else { - lname = xmlBuildQName(attributes[j], attributes[j+1], - NULL, 0); - if (lname != NULL) { - xmlSAX2AttributeNs(ctxt, lname, NULL, - attributes[j+3], attributes[j+4]); - xmlFree(lname); - continue; - } - } - } xmlSAX2AttributeNs(ctxt, attributes[j], attributes[j+1], attributes[j+3], attributes[j+4]); } Index: result/namespaces/err_7.xml =================================================================== --- result/namespaces/err_7.xml.orig +++ result/namespaces/err_7.xml @@ -1,2 +1,2 @@ <?xml version="1.0"?> -<f:foo/> +<foo/> Index: result/xmlid/id_tst2.xml =================================================================== --- result/xmlid/id_tst2.xml.orig +++ result/xmlid/id_tst2.xml @@ -1,6 +1,6 @@ Object is a Node Set : Set contains 1 nodes: -1 ELEMENT n:foo +1 ELEMENT foo ATTRIBUTE id TEXT content=bar Index: result/xmlid/id_tst3.xml =================================================================== --- result/xmlid/id_tst3.xml.orig +++ result/xmlid/id_tst3.xml @@ -1,6 +1,6 @@ Object is a Node Set : Set contains 1 nodes: -1 ELEMENT f:o:o +1 ELEMENT o:o ATTRIBUTE id TEXT content=bar ++++++ libxml2-2.9.0-CVE-2012-5134.patch ++++++ --- libxml2-2.9.0.orig/parser.c 2012-09-11 06:24:08.000000000 +0200 +++ libxml2-2.9.0/parser.c 2012-12-15 16:12:27.441609871 +0100 @@ -4075,7 +4075,7 @@ goto error; if ((in_space) && (normalize)) { - while (buf[len - 1] == 0x20) len--; + while ((len > 0) && (buf[len - 1] == 0x20)) len--; } buf[len] = 0; if (RAW == '<') { ++++++ libxml2-CVE-2013-0338-Detect-excessive-entities-expansion-upon-replacement.patch ++++++ >From 23f05e0c33987d6605387b300c4be5da2120a7ab Mon Sep 17 00:00:00 2001 From: Daniel Veillard <veillard(a)redhat.com> Date: Tue, 19 Feb 2013 10:21:49 +0800 Subject: [PATCH] Detect excessive entities expansion upon replacement If entities expansion in the XML parser is asked for, it is possble to craft relatively small input document leading to excessive on-the-fly content generation. This patch accounts for those replacement and stop parsing after a given threshold. it can be bypassed as usual with the HUGE parser option. --- include/libxml/parser.h | 1 + parser.c | 44 ++++++++++++++++++++++++++++++++++++++------ parserInternals.c | 2 ++ 3 files changed, 41 insertions(+), 6 deletions(-) diff --git a/include/libxml/parser.h b/include/libxml/parser.h index e1346e4..3f5730d 100644 --- a/include/libxml/parser.h +++ b/include/libxml/parser.h @@ -310,6 +310,7 @@ struct _xmlParserCtxt { xmlParserNodeInfo *nodeInfoTab; /* array of nodeInfos */ int input_id; /* we need to label inputs */ + unsigned long sizeentcopy; /* volume of entity copy */ }; /** diff --git a/parser.c b/parser.c index 91f8c90..ddf3b5b 100644 --- a/parser.c +++ b/parser.c @@ -122,7 +122,7 @@ xmlCreateEntityParserCtxtInternal(const xmlChar *URL, const xmlChar *ID, */ static int xmlParserEntityCheck(xmlParserCtxtPtr ctxt, size_t size, - xmlEntityPtr ent) + xmlEntityPtr ent, size_t replacement) { size_t consumed = 0; @@ -130,7 +130,24 @@ xmlParserEntityCheck(xmlParserCtxtPtr ctxt, size_t size, return (0); if (ctxt->lastError.code == XML_ERR_ENTITY_LOOP) return (1); - if (size != 0) { + if (replacement != 0) { + if (replacement < XML_MAX_TEXT_LENGTH) + return(0); + + /* + * If the volume of entity copy reaches 10 times the + * amount of parsed data and over the large text threshold + * then that's very likely to be an abuse. + */ + if (ctxt->input != NULL) { + consumed = ctxt->input->consumed + + (ctxt->input->cur - ctxt->input->base); + } + consumed += ctxt->sizeentities; + + if (replacement < XML_PARSER_NON_LINEAR * consumed) + return(0); + } else if (size != 0) { /* * Do the check based on the replacement size of the entity */ @@ -176,7 +193,6 @@ xmlParserEntityCheck(xmlParserCtxtPtr ctxt, size_t size, */ return (0); } - xmlFatalErr(ctxt, XML_ERR_ENTITY_LOOP, NULL); return (1); } @@ -2743,7 +2759,7 @@ xmlStringLenDecodeEntities(xmlParserCtxtPtr ctxt, const xmlChar *str, int len, while (*current != 0) { /* non input consuming loop */ buffer[nbchars++] = *current++; if (nbchars + XML_PARSER_BUFFER_SIZE > buffer_size) { - if (xmlParserEntityCheck(ctxt, nbchars, ent)) + if (xmlParserEntityCheck(ctxt, nbchars, ent, 0)) goto int_error; growBuffer(buffer, XML_PARSER_BUFFER_SIZE); } @@ -2785,7 +2801,7 @@ xmlStringLenDecodeEntities(xmlParserCtxtPtr ctxt, const xmlChar *str, int len, while (*current != 0) { /* non input consuming loop */ buffer[nbchars++] = *current++; if (nbchars + XML_PARSER_BUFFER_SIZE > buffer_size) { - if (xmlParserEntityCheck(ctxt, nbchars, ent)) + if (xmlParserEntityCheck(ctxt, nbchars, ent, 0)) goto int_error; growBuffer(buffer, XML_PARSER_BUFFER_SIZE); } @@ -7203,7 +7219,7 @@ xmlParseReference(xmlParserCtxtPtr ctxt) { xmlFreeNodeList(list); return; } - if (xmlParserEntityCheck(ctxt, 0, ent)) { + if (xmlParserEntityCheck(ctxt, 0, ent, 0)) { xmlFreeNodeList(list); return; } @@ -7361,6 +7377,13 @@ xmlParseReference(xmlParserCtxtPtr ctxt) { xmlNodePtr nw = NULL, cur, firstChild = NULL; /* + * We are copying here, make sure there is no abuse + */ + ctxt->sizeentcopy += ent->length; + if (xmlParserEntityCheck(ctxt, 0, ent, ctxt->sizeentcopy)) + return; + + /* * when operating on a reader, the entities definitions * are always owning the entities subtree. if (ctxt->parseMode == XML_PARSE_READER) @@ -7400,6 +7423,14 @@ xmlParseReference(xmlParserCtxtPtr ctxt) { } else if ((list == NULL) || (ctxt->inputNr > 0)) { xmlNodePtr nw = NULL, cur, next, last, firstChild = NULL; + + /* + * We are copying here, make sure there is no abuse + */ + ctxt->sizeentcopy += ent->length; + if (xmlParserEntityCheck(ctxt, 0, ent, ctxt->sizeentcopy)) + return; + /* * Copy the entity child list and make it the new * entity child list. The goal is to make sure any @@ -14767,6 +14798,7 @@ xmlCtxtReset(xmlParserCtxtPtr ctxt) ctxt->catalogs = NULL; ctxt->nbentities = 0; ctxt->sizeentities = 0; + ctxt->sizeentcopy = 0; xmlInitNodeInfoSeq(&ctxt->node_seq); if (ctxt->attsDefault != NULL) { diff --git a/parserInternals.c b/parserInternals.c index 02032d5..f8a7041 100644 --- a/parserInternals.c +++ b/parserInternals.c @@ -1719,6 +1719,8 @@ xmlInitParserCtxt(xmlParserCtxtPtr ctxt) ctxt->charset = XML_CHAR_ENCODING_UTF8; ctxt->catalogs = NULL; ctxt->nbentities = 0; + ctxt->sizeentities = 0; + ctxt->sizeentcopy = 0; ctxt->input_id = 1; xmlInitNodeInfoSeq(&ctxt->node_seq); return(0); -- 1.7.10.4 -- To unsubscribe, e-mail: opensuse-commit+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-commit+help(a)opensuse.org

1 0

commit libxml2 for openSUSE:12.2:Update
by root＠hilbert.suse.de 27 Mar '13

27 Mar '13

Hello community, here is the log from the commit of package libxml2 for openSUSE:12.2:Update checked in at 2013-03-27 16:18:07 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:12.2:Update/libxml2 (Old) and /work/SRC/openSUSE:12.2:Update/.libxml2.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "libxml2", Maintainer is "VCizek(a)suse.com" Changes: -------- New Changes file: NO CHANGES FILE!!! ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ _link ++++++ --- /var/tmp/diff_new_pack.ezLQlW/_old 2013-03-27 16:18:08.000000000 +0100 +++ /var/tmp/diff_new_pack.ezLQlW/_new 2013-03-27 16:18:08.000000000 +0100 @@ -1 +1 @@ -<link package='libxml2.1158' cicount='copy' /> +<link package='libxml2.1454' cicount='copy' /> -- To unsubscribe, e-mail: opensuse-commit+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-commit+help(a)opensuse.org

1 0

commit libxml2 for openSUSE:12.1:Update
by root＠hilbert.suse.de 27 Mar '13

27 Mar '13

Hello community, here is the log from the commit of package libxml2 for openSUSE:12.1:Update checked in at 2013-03-27 16:18:04 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:12.1:Update/libxml2 (Old) and /work/SRC/openSUSE:12.1:Update/.libxml2.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "libxml2", Maintainer is "VCizek(a)suse.com" Changes: -------- New Changes file: NO CHANGES FILE!!! ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ _link ++++++ --- /var/tmp/diff_new_pack.EmtTc6/_old 2013-03-27 16:18:05.000000000 +0100 +++ /var/tmp/diff_new_pack.EmtTc6/_new 2013-03-27 16:18:05.000000000 +0100 @@ -1 +1 @@ -<link package='libxml2.1158' cicount='copy' /> +<link package='libxml2.1454' cicount='copy' /> -- To unsubscribe, e-mail: opensuse-commit+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-commit+help(a)opensuse.org

1 0

commit patchinfo.1478 for openSUSE:12.3:Update
by root＠hilbert.suse.de 27 Mar '13

27 Mar '13

Hello community, here is the log from the commit of package patchinfo.1478 for openSUSE:12.3:Update checked in at 2013-03-27 15:17:45 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:12.3:Update/patchinfo.1478 (Old) and /work/SRC/openSUSE:12.3:Update/.patchinfo.1478.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "patchinfo.1478", Maintainer is "" Changes: -------- New Changes file: NO CHANGES FILE!!! New: ---- _patchinfo ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ _patchinfo ++++++ <patchinfo> <packager>rmilasan</packager> <category>recommended</category> <rating>low</rating> <summary>systemd: re-add persistent network rules</summary> <description>This update fixes the following issue for systemd: - bnc#809843: udev: re-add persistent network rules (bnc#809843). - rebase all patches, ensure that they apply properly.</description> <issue tracker="bnc" id="809843">Random eth0/eth1 name space with two Ethernet driver modules</issue> </patchinfo> -- To unsubscribe, e-mail: opensuse-commit+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-commit+help(a)opensuse.org

1 0