Package Release Info

xerces-c-3.3.0-160000.2.2

Update Info: Base Release
Available in Package Hub : 16.0

platforms

AArch64
ppc64le
s390x
x86-64

subpackages

libxerces-c-devel
xerces-c
xerces-c-doc

Change Logs

* Fri Nov 01 2024 pgajdos@suse.com
- version update to 3.3.0
  * no upstream changelog found, from git log:
  * Add functions/properties for disallowing DOCTYPE (DTD) in SAX parsers
  * XERCESC-2188 - Use-after-free on external DTD scan (CVE-2018-1311)
  * Omit unnecessary getenv() call if DTD is disabled programmatically
  * Fix NetAccessorTest to exit with non-zero status in case of error
- modified sources
  % baselibs.conf
* Wed Sep 11 2024 martin.schreiner@suse.com
- Enable gnuiconv transcoder, permanent fix for bsc#1223088.
* Wed Dec 27 2023 dmueller@suse.com
- update to 3.2.5 (bsc#1159552, CVE-2018-1311):
  * [XERCESC-2163] - XercesMessages_en_US.cat is installed to
    wrong directory
  * [XERCESC-2188] - Use-after-free on external DTD scan
* Wed Oct 26 2022 dmueller@suse.com
- update to 3.2.4:
  * [XERCESC-2195] - Invalid attribute in .gitattributes file
  * [XERCESC-2196] - cross-compiling issue
  * [XERCESC-2214] - Wrong delete[] in MemBufInputSource dtor
  * [XERCESC-2217] - ICUTranscoder::transcodeFrom buffer overflow
  * [XERCESC-2218] - CurlURLInputStream constructor memory leak
  * [XERCESC-2219] - XMLReader constructor: memory leak when refreshRawBuffer() throws
  * [XERCESC-2221] - InMemMsgLoader::loadMsg(): fix memory leak when transcoding fails
  * [XERCESC-2222] - DFAContentModel::checkUniqueParticleAttribution(): fix memory leak
  * [XERCESC-2223] - SAX2XMLReaderImpl::error(): potential memory leak
  * [XERCESC-2225] - Link to installed CMake targets of CURL
  * [XERCESC-2227] - Memleak fixes in ContentSpecNode and ComplexTypeInfo classes
  * [XERCESC-2228] - DFAContentModel: fix memory leaks when OutOfMemoryException occurs
  * [XERCESC-2229] - IGXMLScanner::scanDocTypeDecl(): fix memory leak on exception
  * [XERCESC-2230] - DFAContentModel::buildSyntaxTree(): fix memory leaks when OutOfMemoryException occurs
  * [XERCESC-2235] - DFAContentModel::buildDFA(): correctly zero-initialize fFollowList
  * [XERCESC-2236] - Dependencies aren't loaded when using provided CMake config package
  * [XERCESC-2241] - Integer overflows in DFAContentModel class
  * [XERCESC-2242] - Non-default curl location breaks autoconf link detection
* Sat Aug 15 2020 dmueller@suse.com
- update to 3.2.3:
  * Custom HTTP headers missing with CURL NetAccessor
  * Type Confusion from DTDGrammar to SchemaGrammar
  * Patch to build with older GCC
  * fix build without pthread
  * XMLUTF8Transcoder: One multibyte UTF8 character is swallowed from the srcData when the resulting surrogate pair does not fit in toFill at the end
  * Postpone freeing the memory being used by CURL
  * Memory leak in ValueVectorOf
  * There is an error in the parameters of the ThreadTtest8 script in Apache xerces-c++ XML's tests/script
  * Incorrect symbolic links created for Linux static library and MacOS static and shared libraries
  * invalid windows version check for `onXPOrLater`
  * Handle surrogate pairs when reading a QName instead of ASSERTing
  * Janitor.hpp fails to compile on Solaris with Solaris Studio 12.2 and 12.4
  * undef symbols on HPUX for ArrayJanitor
  * DOM tests crash on AIX
  * XMLChar with NEED_TO_GEN_TABLE has 2 buffer out of bounds reads
  * Including Xerces_autoconf_config.hpp on Windows fails due to undefined ssize_t
* Wed Feb 12 2020 tchvatal@suse.com
- Fixup rpmlint warning about installed Makefiles
* Tue Oct 02 2018 tchvatal@suse.com
- Fix the libname dependency in devel pkg, typo after libname
  change
* Thu Sep 27 2018 tchvatal@suse.com
- Version update to 3.2.2:
  * Fixes CVE-2017-12627 bsc#1083630
- Remove the switch to disable SSE2 on i586, we support pentium4 as
  lowest and that has sse2
* Tue Jul 05 2016 tchvatal@suse.com
- Version update to 3.1.4:
  * Fixes bnc#985860 CVE-2016-4463
  * xerces-c-CVE-2016-2099.patch removed as it was included upstream
* Mon Jun 27 2016 tchvatal@suse.com
- Use pkgconfig requires
- Disable "pretty" make to make it bit faster
- Fix the selfobsoleting provides/requires to silence rpmlint
- Use valid group for the docs