<feed xmlns='http://www.w3.org/2005/Atom'>
<title>linux/poky.git/meta/recipes-core/libxml, branch styhead</title>
<subtitle>Mirror of git.yoctoproject.org/poky</subtitle>
<id>https://git.enea.com/cgit/linux/poky.git/atom?h=styhead</id>
<link rel='self' href='https://git.enea.com/cgit/linux/poky.git/atom?h=styhead'/>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/'/>
<updated>2025-03-13T14:21:44+00:00</updated>
<entry>
<title>libxml2: upgrade 2.13.3 -&gt; 2.13.6</title>
<updated>2025-03-13T14:21:44+00:00</updated>
<author>
<name>Peter Marko</name>
<email>peter.marko@siemens.com</email>
</author>
<published>2025-02-28T17:29:49+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=5b4f320c4465dc1cb221ebad7b55d3786f699824'/>
<id>urn:sha1:5b4f320c4465dc1cb221ebad7b55d3786f699824</id>
<content type='text'>
Handle CVE-2025-24928, CVE-2024-56171 and CVE-2025-27113.

(From OE-Core rev: 13929d3126572d3024afd58a914592e8e6ea8457)

Signed-off-by: Peter Marko &lt;peter.marko@siemens.com&gt;
Signed-off-by: Steve Sakoman &lt;steve@sakoman.com&gt;
</content>
</entry>
<entry>
<title>libxml2: 2.12.8 -&gt; 2.13.3</title>
<updated>2024-08-23T21:43:27+00:00</updated>
<author>
<name>hongxu</name>
<email>hongxu.jia@eng.windriver.com</email>
</author>
<published>2024-08-23T01:48:00+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=1d813b15a67e8de0b848ba9971a0dbb6a1e49091'/>
<id>urn:sha1:1d813b15a67e8de0b848ba9971a0dbb6a1e49091</id>
<content type='text'>
* Remove Trio and updated Copyright to remove Trio [1]
* Remove --with-fexceptions configuration option [2]

[1] https://gitlab.gnome.org/GNOME/libxml2/-/commit/7d6969d95509a94347d6f96167ac5420abafa291
[2] https://gitlab.gnome.org/GNOME/libxml2/-/commit/e349709ae7e07a2183304ccc9352b6ac86f62a18

(From OE-Core rev: 786a24228ee0793f43258133c7e5df6acb3e9de2)

Signed-off-by: Hongxu Jia &lt;hongxu.jia@windriver.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>libxml2: Upgrade 2.12.7 -&gt; 2.12.8</title>
<updated>2024-06-24T11:43:40+00:00</updated>
<author>
<name>Siddharth Doshi</name>
<email>sdoshi@mvista.com</email>
</author>
<published>2024-06-17T15:34:37+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=704507c4e679499d2f8a75578d013b776a8fa408'/>
<id>urn:sha1:704507c4e679499d2f8a75578d013b776a8fa408</id>
<content type='text'>
Changes between 2.12.7 -&gt; 2.12.8
================================
Regression Fixed: parser: Fix performance regression when parsing namespaces

(From OE-Core rev: 15eb0b6531a97f85c1b098fb51de9126f2221248)

Signed-off-by: Siddharth Doshi &lt;sdoshi@mvista.com&gt;
Signed-off-by: Alexandre Belloni &lt;alexandre.belloni@bootlin.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>libxml2: upgrade 2.12.6 -&gt; 2.12.7</title>
<updated>2024-05-28T08:38:23+00:00</updated>
<author>
<name>Wang Mingyu</name>
<email>wangmy@fujitsu.com</email>
</author>
<published>2024-05-22T09:14:29+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=26c28238cc4ca2c5d003464e50ee4395ceea6bd9'/>
<id>urn:sha1:26c28238cc4ca2c5d003464e50ee4395ceea6bd9</id>
<content type='text'>
Changelog:
=========
- Fix buffer overread with 'xmllint --htmlout'
- xmllint: Fix --pedantic option
- save: Handle invalid parent pointers in xhtmlNodeDumpOutput

(From OE-Core rev: 64e16e2ca71a4dcf285f3dc36789077aa3beaf50)

Signed-off-by: Wang Mingyu &lt;wangmy@fujitsu.com&gt;
Signed-off-by: Alexandre Belloni &lt;alexandre.belloni@bootlin.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>libxml2: upgrade 2.12.5 -&gt; 2.12.6</title>
<updated>2024-04-16T07:07:02+00:00</updated>
<author>
<name>Wang Mingyu</name>
<email>wangmy@fujitsu.com</email>
</author>
<published>2024-03-26T00:34:33+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=9e668051872ed370feedd32331380f51f0ecde2e'/>
<id>urn:sha1:9e668051872ed370feedd32331380f51f0ecde2e</id>
<content type='text'>
Changelog:
===========
- parser: Fix detection of duplicate attributes in XML namespace
- xmlreader: Fix xmlTextReaderConstEncoding
- html: Fix htmlCreatePushParserCtxt with encoding
- xmllint: Return error code if XPath returns empty nodeset

(From OE-Core rev: 0bc673b0de08e02ff01ec9ad3daf0bb41662da40)

Signed-off-by: Wang Mingyu &lt;wangmy@fujitsu.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>libxml2: upgrade 2.11.5 -&gt; 2.12.5</title>
<updated>2024-03-07T17:25:02+00:00</updated>
<author>
<name>Alexander Kanavin</name>
<email>alex.kanavin@gmail.com</email>
</author>
<published>2024-03-06T15:42:14+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=fae05fe28451a43aeead5dd7217ec7e9829bc8d8'/>
<id>urn:sha1:fae05fe28451a43aeead5dd7217ec7e9829bc8d8</id>
<content type='text'>
License-Update: hash.c is rewritten and no longer carries a special copyright notice, but dict.c still does
(Copyright file updated to reflect that)

(From OE-Core rev: a14769d40bee751ac1dcd536789e8e346046e141)

Signed-off-by: Alexander Kanavin &lt;alex@linutronix.de&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>classes/recipes: Switch to use inherit_defer</title>
<updated>2024-01-18T10:15:58+00:00</updated>
<author>
<name>Richard Purdie</name>
<email>richard.purdie@linuxfoundation.org</email>
</author>
<published>2023-12-31T13:27:50+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=c917323a39da6fc3e8d92b2fe907d0357149c9bb'/>
<id>urn:sha1:c917323a39da6fc3e8d92b2fe907d0357149c9bb</id>
<content type='text'>
Now that bitbake supports the use of inherit_defer, switch all conditional
(variable based) inherits to use this instead. This leads to more a more
deterministic user experience since there is no longer an immediate expansion
and later changes to the variables in question (e.g. a bbappend) are
accounted for.

This patch tries to ensure the behaviour before/after remains as unchanged
as it reasonably can, e.g. by always inherting populate_sdk_base. native
and nativesdk continue to need to be inherited last, hence being used
with inherit_defer in a handful of very specific cases.

(From OE-Core rev: 451363438d38bd4552d5bcec4a92332f5819a5d4)

Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>gnomebase.bbclass: Use meson as default buildsystem</title>
<updated>2023-11-13T11:38:03+00:00</updated>
<author>
<name>Markus Volk</name>
<email>f_l_k@t-online.de</email>
</author>
<published>2023-11-10T11:18:51+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=d217ca41bf5503dc7b79cf1707ea4815c94142a7'/>
<id>urn:sha1:d217ca41bf5503dc7b79cf1707ea4815c94142a7</id>
<content type='text'>
The vast majority of gnome recipes uses meson. Set it as default
and override the few recipes that still use autotools.

This way we can remove a lot of lines in meta-oe and more important
it would not be needed to explicitly set GNOMEBASEBUILDCLASS = "meson" for newly
created gnome recipe anymore.

(From OE-Core rev: 8b061ea36f8b94b482c5867fe2ba7213288a5aa3)

Signed-off-by: Markus Volk &lt;f_l_k@t-online.de&gt;
Signed-off-by: Alexandre Belloni &lt;alexandre.belloni@bootlin.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>libxml2: ignore disputed CVE-2023-45322</title>
<updated>2023-10-26T14:29:34+00:00</updated>
<author>
<name>Ross Burton</name>
<email>ross.burton@arm.com</email>
</author>
<published>2023-10-23T17:38:19+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=01a5135980bcfb67fe721f144c8dd222fa2399b2'/>
<id>urn:sha1:01a5135980bcfb67fe721f144c8dd222fa2399b2</id>
<content type='text'>
This CVE is a use-after-free which theoretically can be an exploit
vector, but this UAF only occurs when malloc() fails.  As it's
unlikely that the user can orchestrate malloc() failures at just the
place to break on _this_ malloc and not others it is disputed that this
is actually a security issue.

The underlying bug has been fixed, and will be incorporated into the
next release.

(From OE-Core rev: b93dd888b861aa6df97cd78b70fa9f757cfcdf61)

Signed-off-by: Ross Burton &lt;ross.burton@arm.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>libxml2: upgrade 2.11.4 -&gt; 2.11.5</title>
<updated>2023-09-02T17:23:05+00:00</updated>
<author>
<name>Wang Mingyu</name>
<email>wangmy@fujitsu.com</email>
</author>
<published>2023-08-31T02:35:34+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=c80bd5be88b2934d29d37f21a6100cb18faa9127'/>
<id>urn:sha1:c80bd5be88b2934d29d37f21a6100cb18faa9127</id>
<content type='text'>
Changelog:
==========
### Regressions
---------------
- parser: Make xmlSwitchEncoding always skip the BOM
- autotools: Improve iconv check

### Bug fixes
--------------
- valid: Fix c1-&gt;parent pointer in xmlCopyDocElementContent
- encoding: Always call ucnv_convertEx with flush set to false

### Portability
---------------
- autotools: fix Python module file ext for cygwin/msys2

### Tests
----------
- runtest: Fix compilation without LIBXML_HTML_ENABLED

(From OE-Core rev: 9e1bcaac1da6907d6664c5628e7c6196cfa5fcc7)

Signed-off-by: Wang Mingyu &lt;wangmy@fujitsu.com&gt;
Signed-off-by: Alexandre Belloni &lt;alexandre.belloni@bootlin.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
</feed>
