Hello community, here is the log from the commit of package libxml2 for openSUSE:Factory checked in at Tue Jan 4 14:41:31 CET 2011. -------- --- libxml2/libxml2.changes 2010-12-03 13:27:14.000000000 +0100 +++ /mounts/work_src_done/STABLE/libxml2/libxml2.changes 2011-01-03 10:44:12.000000000 +0100 @@ -1,0 +2,5 @@ +Mon Jan 3 09:21:20 UTC 2011 - puzel@novell.com + +- add libxml2-CVE-2010-4494.patch (bnc#661471) + +------------------------------------------------------------------- calling whatdependson for head-i586 New: ---- libxml2-CVE-2010-4494.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libxml2-python.spec ++++++ --- /var/tmp/diff_new_pack.y5c4am/_old 2011-01-04 14:38:32.000000000 +0100 +++ /var/tmp/diff_new_pack.y5c4am/_new 2011-01-04 14:38:32.000000000 +0100 @@ -1,7 +1,7 @@ # # spec file for package libxml2-python (Version 2.7.8) # -# Copyright (c) 2010 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2011 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -19,7 +19,7 @@ Name: libxml2-python Version: 2.7.8 -Release: 2 +Release: 3 License: MIT License (or similar) Summary: Python Bindings for libxml2 Url: http://xmlsoft.org ++++++ libxml2.spec ++++++ --- /var/tmp/diff_new_pack.y5c4am/_old 2011-01-04 14:38:32.000000000 +0100 +++ /var/tmp/diff_new_pack.y5c4am/_new 2011-01-04 14:38:32.000000000 +0100 @@ -1,7 +1,7 @@ # # spec file for package libxml2 (Version 2.7.8) # -# Copyright (c) 2010 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2011 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -19,7 +19,7 @@ Name: libxml2 Version: 2.7.8 -Release: 2 +Release: 3 License: MIT License (or similar) Summary: A Library to Manipulate XML Files Url: http://xmlsoft.org @@ -27,6 +27,7 @@ Source: %{name}-%{version}.tar.bz2 Source2: baselibs.conf Patch1: noxref.patch +Patch2: libxml2-CVE-2010-4494.patch BuildRequires: pkg-config BuildRequires: readline-devel BuildRequires: zlib-devel @@ -97,6 +98,7 @@ %prep %setup -q %patch1 -p1 +%patch2 -p1 %build %configure --disable-static \ ++++++ libxml2-CVE-2010-4494.patch ++++++ Index: libxml2-2.7.8/xpath.c =================================================================== --- libxml2-2.7.8.orig/xpath.c +++ libxml2-2.7.8/xpath.c @@ -11763,11 +11763,16 @@ xmlXPathCompOpEvalPositionalPredicate(xm if ((ctxt->error != XPATH_EXPRESSION_OK) || (res == -1)) { xmlXPathObjectPtr tmp; - /* pop the result */ + /* pop the result if any */ tmp = valuePop(ctxt); + if (tmp != contextObj) { + /* + * Free up the result + * then pop off contextObj, which will be freed later + */ xmlXPathReleaseObject(xpctxt, tmp); - /* then pop off contextObj, which will be freed later */ valuePop(ctxt); + } goto evaluation_error; } ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun... -- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org