<feed xmlns='http://www.w3.org/2005/Atom'>
<title>linux/poky.git/meta/recipes-core/libxml/libxml2, branch master</title>
<subtitle>Mirror of git.yoctoproject.org/poky</subtitle>
<id>https://git.enea.com/cgit/linux/poky.git/atom?h=master</id>
<link rel='self' href='https://git.enea.com/cgit/linux/poky.git/atom?h=master'/>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/'/>
<updated>2025-11-07T13:31:53+00:00</updated>
<entry>
<title>The poky repository master branch is no longer being updated.</title>
<updated>2025-11-07T13:31:53+00:00</updated>
<author>
<name>Richard Purdie</name>
<email>richard.purdie@linuxfoundation.org</email>
</author>
<published>2025-11-07T13:31:53+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=8c22ff0d8b70d9b12f0487ef696a7e915b9e3173'/>
<id>urn:sha1:8c22ff0d8b70d9b12f0487ef696a7e915b9e3173</id>
<content type='text'>
You can either:

a) switch to individual clones of bitbake, openembedded-core, meta-yocto and yocto-docs

b) use the new bitbake-setup

You can find information about either approach in our documentation:
https://docs.yoctoproject.org/

Note that "poky" the distro setting is still available in meta-yocto as
before and we continue to use and maintain that.

Long live Poky!

Some further information on the background of this change can be found
in: https://lists.openembedded.org/g/openembedded-architecture/message/2179

Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>libxml2: upgrade 2.14.3 -&gt; 2.14.5</title>
<updated>2025-07-28T13:51:50+00:00</updated>
<author>
<name>Hongxu Jia</name>
<email>hongxu.jia@windriver.com</email>
</author>
<published>2025-07-23T02:16:02+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=efbd99e462aaef554b8f119918311c54eaa10688'/>
<id>urn:sha1:efbd99e462aaef554b8f119918311c54eaa10688</id>
<content type='text'>
Release notes:

    https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.14.5

(From OE-Core rev: b82cb6d55033ffff79b5a767bd50b06989c0acfc)

Signed-off-by: Hongxu Jia &lt;hongxu.jia@windriver.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>libxml2: fix CVE-2025-6021</title>
<updated>2025-06-16T16:57:30+00:00</updated>
<author>
<name>hongxu</name>
<email>hongxu.jia@eng.windriver.com</email>
</author>
<published>2025-06-16T05:00:53+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=134890aca02ec80ea54c91e42c50848eb4293145'/>
<id>urn:sha1:134890aca02ec80ea54c91e42c50848eb4293145</id>
<content type='text'>
According to [1]

A flaw was found in libxml2's xmlBuildQName function, where integer overflows
in buffer size calculations can lead to a stack-based buffer overflow. This
issue can result in memory corruption or a denial of service when processing
crafted input.

Refer debian [2], backport a fix [3] from upstream

[1] https://nvd.nist.gov/vuln/detail/CVE-2025-6021
[2] https://security-tracker.debian.org/tracker/CVE-2025-6021
[3] https://gitlab.gnome.org/GNOME/libxml2/-/commit/acbbeef9f5dcdcc901c5f3fa14d583ef8cfd22f0

(From OE-Core rev: e3a6bf785656243b5adc0775f7480a1eb0e4ae4c)

Signed-off-by: Hongxu Jia &lt;hongxu.jia@windriver.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>libxml2: revert commit breaking patchs in cmake file</title>
<updated>2025-05-27T08:01:17+00:00</updated>
<author>
<name>Peter Marko</name>
<email>peter.marko@siemens.com</email>
</author>
<published>2025-05-26T19:33:58+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=2b2d5930ea841ca71750617cad1e13860e04c0ad'/>
<id>urn:sha1:2b2d5930ea841ca71750617cad1e13860e04c0ad</id>
<content type='text'>
Make a revert of commit which breaks cross-compilation of depending
components.
This commit changes path calculation from relative to cmake file to
absolute from includedir, which points then the host /usr/include.
Submitted upstream ticket [1] to clarify how this should be fixed in
libxml2 upstream.

[1] https://gitlab.gnome.org/GNOME/libxml2/-/issues/898#note_2452864

(From OE-Core rev: bc93853c8d2e1da10c000a477093e293fa637761)

Signed-off-by: Peter Marko &lt;peter.marko@siemens.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>libxml2: upgrade 2.13.6 -&gt; 2.14.3</title>
<updated>2025-05-27T08:01:17+00:00</updated>
<author>
<name>Peter Marko</name>
<email>peter.marko@siemens.com</email>
</author>
<published>2025-05-22T12:13:16+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=383df93c6fd5647242e945510e802523f7dbfabf'/>
<id>urn:sha1:383df93c6fd5647242e945510e802523f7dbfabf</id>
<content type='text'>
Handle CVE-2025-32414 and CVE-2025-32415.

* rebased install-tests.patch
* removed testsuite testThreads (merged into runtest.c)
  * https://gitlab.gnome.org/GNOME/libxml2/-/commit/481fd6bbee029e15a6a4015e5160a332d7c18cba
* removed IPv6 option (as part of with ftp support removal)
  * https://gitlab.gnome.org/GNOME/libxml2/-/commit/dba1ed85a320c36807ee09f44d09fd30852b9370
* added testsuites testlimits testparser (already present before but not executed)

License-Update: Mention contributors in Copyright
https://gitlab.gnome.org/GNOME/libxml2/-/commit/4bd66d4549b2e8925a752e0daac3a189d2fec8f7

(From OE-Core rev: 6585649fdd2ab9e83dfd60eb77ff7821a1363d50)

Signed-off-by: Peter Marko &lt;peter.marko@siemens.com&gt;
Signed-off-by: Mathieu Dubois-Briand &lt;mathieu.dubois-briand@bootlin.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>libxml2: upgrade 2.13.4 -&gt; 2.13.5</title>
<updated>2024-11-19T12:54:32+00:00</updated>
<author>
<name>Guðni Már Gilbert</name>
<email>gudni.m.g@gmail.com</email>
</author>
<published>2024-11-18T15:04:13+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=cc959a78aa8516c3ab7aac1819ecc47bf2373ab0'/>
<id>urn:sha1:cc959a78aa8516c3ab7aac1819ecc47bf2373ab0</id>
<content type='text'>
https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.13.5

Regressions
* xmlIO: Fix reading from non-regular files like pipes
* xmlreader: Fix return value of xmlTextReaderReadString
* parser: Fix loading of parameter entities in external DTDs
* parser: Fix downstream code that swaps DTDs
* parser: Fix detection of duplicate attributes
* string: Fix va_copy fallback

Bug fixes
* xpath: Fix parsing of non-ASCII names

(From OE-Core rev: c6dc275850d5a98803eee7d4712bb66b19051c82)

Signed-off-by: Guðni Már Gilbert &lt;gudni.m.g@gmail.com&gt;
Signed-off-by: Mathieu Dubois-Briand &lt;mathieu.dubois-briand@bootlin.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>libxml2: upgrade 2.11.5 -&gt; 2.12.5</title>
<updated>2024-03-07T17:25:02+00:00</updated>
<author>
<name>Alexander Kanavin</name>
<email>alex.kanavin@gmail.com</email>
</author>
<published>2024-03-06T15:42:14+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=fae05fe28451a43aeead5dd7217ec7e9829bc8d8'/>
<id>urn:sha1:fae05fe28451a43aeead5dd7217ec7e9829bc8d8</id>
<content type='text'>
License-Update: hash.c is rewritten and no longer carries a special copyright notice, but dict.c still does
(Copyright file updated to reflect that)

(From OE-Core rev: a14769d40bee751ac1dcd536789e8e346046e141)

Signed-off-by: Alexander Kanavin &lt;alex@linutronix.de&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>libxml2: update 2.10.4 -&gt; 2.11.4</title>
<updated>2023-06-27T15:23:40+00:00</updated>
<author>
<name>Alexander Kanavin</name>
<email>alex.kanavin@gmail.com</email>
</author>
<published>2023-06-25T21:22:22+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=4bd6fb3488909357ba04cb52a41d3d61086efed3'/>
<id>urn:sha1:4bd6fb3488909357ba04cb52a41d3d61086efed3</id>
<content type='text'>
Drop backports.

Drop libxml-64bit.patch
(no longer necessary).

(From OE-Core rev: 24860598ba8557ea3a145f249938ea411f1ef1d8)

Signed-off-by: Alexander Kanavin &lt;alex@linutronix.de&gt;
Signed-off-by: Alexandre Belloni &lt;alexandre.belloni@bootlin.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>libxml2: add more testing</title>
<updated>2022-12-09T13:18:41+00:00</updated>
<author>
<name>Ross Burton</name>
<email>ross.burton@arm.com</email>
</author>
<published>2022-12-08T12:10:39+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=4ea8874a957aab419adea4291ed3e75c04f3ddec'/>
<id>urn:sha1:4ea8874a957aab419adea4291ed3e75c04f3ddec</id>
<content type='text'>
Backport more test cases fixes from upstream, and add runsuite to the
ptests.

(From OE-Core rev: a6de5fa28fc90e0184d3d86822d06de5d93bbc44)

Signed-off-by: Ross Burton &lt;ross.burton@arm.com&gt;
Signed-off-by: Alexandre Belloni &lt;alexandre.belloni@bootlin.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>libxml2: upgrade 2.9.14 -&gt; 2.10.3</title>
<updated>2022-12-08T10:50:30+00:00</updated>
<author>
<name>Ross Burton</name>
<email>ross.burton@arm.com</email>
</author>
<published>2022-12-07T16:57:55+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=f4ffba353eb7877060c25d264fa10cd60f797f0b'/>
<id>urn:sha1:f4ffba353eb7877060c25d264fa10cd60f797f0b</id>
<content type='text'>
Change ptest away from using the upstream Makefiles to manually running
the tests: they're not actually integrated with automake anyway so this
didn't gain us anything apart from patches we can't send upstream. Drops
the following patches:
- 0001-Make-ptest-run-the-python-tests-if-python-is-enabled.patch
- 0001-Port-gentest.py-to-Python-3.patch
- fix-execution-of-ptests.patch
- remove-fuzz-from-ptests.patch
- runtest.patch

Add a simple patch to install the test binaries via the Makefile:
- install-tests.patch

The Python module is built differently and a number of patches no longer
apply and appear to be redundant, remove:
- python-sitepackages-dir.patch

libxml-m4-use-pkgconfig.patch has been sent upstream now, mark as
backport.

Remove obsolete --without-docbook option.

Remove obsolete xml2Conf.sh packaging.

(From OE-Core rev: ec5f380a14246e31b2a1a12dda9fe2178b1e5f83)

Signed-off-by: Ross Burton &lt;ross.burton@arm.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
</feed>
