From 798fa55f0d58f3bfcad9a26f3b579daba2a92bfe Mon Sep 17 00:00:00 2001 From: Adolf Belka Date: Mon, 15 Sep 2025 19:46:28 +0200 Subject: [PATCH] libxml2: Update to version 2.14.6 - Update from version 2.14.4 to 2.14.6 - Update of rootfile - 5 CVE fixes in version 2.14.5 - Changelog 2.14.6 Regressions valid: Don't add ids when validating entity content Fix initGenericErrorDefaultFunc(NULL) (Samuel Thibault) valid: Undeprecate xmlAdd*Decl globals: Include HTMLparser.h, fixing Windows build io: Fix reading from pipes like stdin on Windows Security regexp: Avoid integer overflow and OOB array access tree: Guard against atype corruption Improvements parser: Fix xmlSaturatedAddSizeT argument type 2.14.5 Regressions valid: Don't add ids when validating entity content io: Fix reading from pipes like stdin on Windows parser: Fix handling of invalid char refs in recovery mode Security regexp: Avoid integer overflow and OOB array access tree: Guard against atype corruption [CVE-2025-49794] [CVE-2025-49796] schematron: Fix xmlSchematronReportOutput [CVE-2025-49795] schematron: Fix null pointer dereference leading to DoS (Michael Mann) [CVE-2025-6170] Fix potential buffer overflows of interactive shell (Michael Mann) [CVE-2025-6021] tree: Fix integer overflow in xmlBuildQName Bug fixes save: Fix serialization of attribute defaults containing < Improvements parser: Fix xmlSaturatedAddSizeT argument type Build systems and portability meson: Add libxml2 part of include dir to pc file (Heiko Becker) cmake: Fix installation directories in libxml2-config.cmake io: Fix linkage of __xml*BufferCreateFilename functions Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer --- config/rootfiles/common/libxml2 | 2 +- lfs/libxml2 | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/config/rootfiles/common/libxml2 b/config/rootfiles/common/libxml2 index 009e1fb06..995a268bd 100644 --- a/config/rootfiles/common/libxml2 +++ b/config/rootfiles/common/libxml2 @@ -54,7 +54,7 @@ #usr/lib/libxml2.la #usr/lib/libxml2.so usr/lib/libxml2.so.16 -usr/lib/libxml2.so.16.0.4 +usr/lib/libxml2.so.16.0.6 #usr/lib/pkgconfig/libxml-2.0.pc #usr/share/doc/libxml2 #usr/share/doc/libxml2/xmlcatalog.html diff --git a/lfs/libxml2 b/lfs/libxml2 index 7e3be5f8d..0509b9b98 100644 --- a/lfs/libxml2 +++ b/lfs/libxml2 @@ -24,7 +24,7 @@ include Config -VER = 2.14.4 +VER = 2.14.6 THISAPP = libxml2-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -42,7 +42,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 6ee7e4f35e6f15124fe1ceb55758236229f87e05344c55e82c419f8e8dba763adbd25746c038d13189dfadc3bb023fd8891251e78e9c9046d42961829d93b885 +$(DL_FILE)_BLAKE2 = ad5d7cb64f8081559a671e9d79b3ebcd7313dada39d7f0c2854994153a9dff2ef85bc81336437f5881abe637bae51b62e9104b3a099113f4ee2252b604325291 install : $(TARGET) -- 2.47.3