openeuler-ci-bot 3c53f29772

!230 fix CVE-2022-2309 ...

From: @zhuofeng6 
Reviewed-by: @hubin95 
Signed-off-by: @hubin95

2024-03-26 07:10:46 +00:00

Add-regexp-regression-tests.patch

Fix integer overflow in xmlFAParseQuantExact

2020-08-12 16:20:36 +08:00

backport-Add-test-case-for-recursive-external-parsed-entities.patch

fix problems detected by oss-fuzz test

2021-03-02 19:48:37 +08:00

backport-Always-initialize-SAX1-element-handlers.patch

parser: Fix old SAX1 parser with custom callbacks

2023-09-26 14:17:53 +08:00

backport-Avoid-call-stack-overflow-with-XML-reader-and-recurs.patch

fix problems detected by oss-fuzz test

2021-03-02 19:48:37 +08:00

backport-CVE-2016-3709.patch

Fix CVE-2016-3709

2022-08-08 11:14:03 +08:00

backport-CVE-2021-3537.patch

fix CVE-2021-3537

2021-05-27 16:40:43 +08:00

backport-CVE-2022-2309.patch

fix CVE-2022-2309

2024-03-26 14:29:45 +08:00

backport-CVE-2022-23308-Use-after-free-of-ID-and-IDREF-attrib.patch

fix CVE-2022-23308

2022-03-09 11:54:11 +08:00

backport-CVE-2022-29824-Fix-integer-overflows-in-xmlBuf-and-xmlBuffer.patch

fix CVE-2022-29824

2022-05-09 09:51:59 +08:00

backport-CVE-2022-40303-Fix-integer-overflows-with-XML_PARSE_.patch

fix CVE-2022-40303 CVE-2022-40304

2022-11-08 17:14:14 +08:00

backport-CVE-2022-40304-Fix-dict-corruption-caused-by-entity-.patch

fix CVE-2022-40303 CVE-2022-40304

2022-11-08 17:14:14 +08:00

backport-CVE-2023-28484-Fix-null-deref-in-xmlSchemaFixupCompl.patch

fix CVE-2023-28484 CVE-2023-29469

2023-04-23 11:51:06 +08:00

backport-CVE-2023-29469-Hashing-of-empty-dict-strings-isn-t-d.patch

fix CVE-2023-28484 CVE-2023-29469

2023-04-23 11:51:06 +08:00

backport-CVE-2023-45322.patch

fix CVE-2023-45322

2023-10-30 10:18:50 +08:00

backport-CVE-2024-25062.patch

fix CVE-2024-25062

2024-02-19 15:04:44 +08:00

backport-Fix-HTML-push-parser-lookahead.patch

fix problems detected by oss-fuzz test

2021-03-02 19:48:37 +08:00

backport-Fix-infinite-loop-in-HTML-parser-introduced-with-rec.patch

fix problems detected by oss-fuzz test

2021-03-02 19:48:37 +08:00

backport-fix-infinite-loop-in-xmlStringLenDecodeEntities.patch

Sync some patches from community

2020-03-17 21:03:10 +08:00

backport-Fix-integer-overflow-in-xmlSchemaGetParticleTotalRan.patch

fix problems detected by oss-fuzz test

2021-03-02 19:48:37 +08:00

backport-Fix-memory-leak-in-xmlSchemaValidateStream.patch

upgrade software to v2.9.10

2020-05-11 15:09:02 +08:00

backport-Fix-old-SAX1-parser-with-custom-callbacks.patch

parser: Fix old SAX1 parser with custom callbacks

2023-09-26 14:17:53 +08:00

backport-Fix-quadratic-runtime-in-HTML-parser.patch

fix problems detected by oss-fuzz test

2021-03-02 19:48:37 +08:00

backport-Fix-quadratic-runtime-in-HTML-push-parser-with-null-.patch

fix problems detected by oss-fuzz test

2021-03-02 19:48:37 +08:00

backport-Fix-quadratic-runtime-when-push-parsing-HTML-entity-.patch

fix problems detected by oss-fuzz test

2021-03-02 19:48:37 +08:00

backport-Fix-regression-introduced-with-477c7f6a.patch

fix problems detected by oss-fuzz test

2021-03-02 19:48:37 +08:00

backport-Fix-timeout-when-handling-recursive-entities.patch

fix problems detected by oss-fuzz test

2021-03-02 19:48:37 +08:00

backport-malloc-fail-Fix-memory-leak-in-xmlStaticCopyNodeList.patch

fix CVE-2023-45322

2023-10-30 10:18:50 +08:00

backport-parser-Fix-potential-memory-leak-in-xmlParseAttValue.patch

backport upstream patches

2022-11-21 10:42:39 +08:00

backport-pre-CVE-2022-40303-Remove-useless-comparisons.patch

fix CVE-2022-40303 CVE-2022-40304

2022-11-08 17:14:14 +08:00

backport-Reset-HTML-parser-input-before-reporting-encoding-er.patch

fix problems detected by oss-fuzz test

2021-03-02 19:48:37 +08:00

backport-Revert-Fix-memory-leak-in-xmlParseBalancedChunkMemor.patch

fix valgrind errors in xmlParseBalancedChunkMemoryRecover

2022-02-26 16:51:43 +08:00

backport-schemas-Fix-null-pointer-deref-in-xmlSchemaCheckCOSS.patch

backport upstream patches

2022-11-21 10:42:39 +08:00

backport-Updated-python-tests-tstLastError.py.patch

upgrade software to v2.9.10

2020-05-11 15:09:02 +08:00

backport-xmlParseBalancedChunkMemory-must-not-be-called-with-.patch

fix valgrind errors in xmlParseBalancedChunkMemoryRecover

2022-02-26 16:51:43 +08:00

Check-for-overflow-when-allocating-two-dimensional-a.patch

Sync some patches from community

2020-06-24 11:26:04 +08:00

Copy-some-XMLReader-option-flags-to-parser-context.patch

Sync some patches from community

2020-06-24 11:26:04 +08:00

CVE-2021-3517.patch

fix CVE-2021-3517 and CVE-2021-3518

2021-05-28 11:40:32 +08:00

CVE-2021-3518.patch

fix CVE-2021-3517 and CVE-2021-3518

2021-05-28 11:40:32 +08:00

CVE-2021-3541.patch

fix CVE-2021-3541

2021-06-02 11:06:48 +08:00

Don-t-add-formatting-newlines-to-XInclude-nodes.patch

backport upstream patches

2021-12-02 14:41:13 +08:00

Don-t-load-external-entity-from-xmlSAX2GetEntity.patch

Sync some patches from community

2020-06-24 11:26:04 +08:00

Don-t-process-siblings-of-root-in-xmlXIncludeProcess.patch

Fixed some issues found in fuzzing testcases

2020-11-12 11:52:00 +08:00

Don-t-recurse-into-xi-include-children-in-xmlXInclud.patch

Fixed some issues found in fuzzing testcases

2020-11-12 11:52:00 +08:00

encoding-fix-memleak-in-xmlRegisterCharEncodingHandl.patch

fix issues about SEGV, memleak, overflow, etc.

2021-11-11 20:19:02 +08:00

Fix-another-memory-leak-in-xmlSchemaValAtomicType.patch

Fixed some issues found in fuzzing testcases

2020-11-12 11:52:00 +08:00

Fix-cleanup-of-attributes-in-XML-reader.patch

fix problems detected by oss-fuzz test

2020-11-12 19:04:00 +08:00

Fix-copying-of-entities-in-xmlParseReference.patch

Sync some patches from community

2020-06-24 11:26:04 +08:00

Fix-corner-case-with-empty-xi-fallback.patch

backport upstream patches

2021-12-02 14:41:13 +08:00

Fix-dangling-pointer-with-xmllint-dropdtd.patch

add patches from upstream

2021-05-29 17:41:53 +08:00

Fix-double-free-in-XML-reader-with-XIncludes.patch

Fixed some issues found in fuzzing testcases

2020-11-12 11:52:00 +08:00

Fix-duplicate-xmlStrEqual-calls-in-htmlParseEndTag.patch

add patches from upstream

2021-05-29 17:41:53 +08:00

Fix-error-reporting-with-xi-fallback.patch

backport upstream patches

2021-12-02 14:41:13 +08:00

Fix-exponential-behavior-with-recursive-entities.patch

add patches from upstream

2021-05-29 17:41:53 +08:00

Fix-exponential-runtime-and-memory-in-xi-fallback-pr.patch

Fixed some issues found in fuzzing testcases

2020-11-12 11:52:00 +08:00

Fix-exponential-runtime-in-xmlFARecurseDeterminism.patch

Limit regexp nesting depth and Fix exponential runtime in xmlFARecurseDeterminism

2020-08-12 19:30:00 +08:00

Fix-freeing-of-nested-documents.patch

Sync some patches from community

2020-06-24 11:26:04 +08:00

Fix-handling-of-unexpected-EOF-in-xmlParseContent.patch

add patches from upstream

2021-05-29 17:41:53 +08:00

Fix-integer-overflow-in-_xmlSchemaParseGYear.patch

Fixed some issues found in fuzzing testcases

2020-11-12 11:52:00 +08:00

Fix-integer-overflow-in-htmlParseCharRef.patch

Fixed some issues found in fuzzing testcases

2020-11-12 11:52:00 +08:00

Fix-integer-overflow-in-xmlBufferResize.patch

Sync some patches from community

2020-06-24 11:26:04 +08:00

Fix-integer-overflow-in-xmlFAParseQuantExact.patch

Fix integer overflow in xmlFAParseQuantExact

2020-08-12 16:20:36 +08:00

Fix-integer-overflow-when-comparing-schema-dates.patch

Fixed some issues found in fuzzing testcases

2020-11-12 11:52:00 +08:00

Fix-integer-overflow-when-parsing-min-max-Occurs.patch

Fixed some issues found in fuzzing testcases

2020-11-12 11:52:00 +08:00

Fix-line-numbers-in-error-messages-for-mismatched-ta.patch

add patches from upstream

2021-05-29 17:41:53 +08:00

Fix-memleaks-in-xmlXIncludeProcessFlags.patch

fix memleaks in xmlXIncludeProcessFlags

2021-11-09 16:59:12 +08:00

Fix-memory-leak-in-error-path-of-XPath-expr-parser.patch

Sync some patches from community

2020-06-24 11:26:04 +08:00

Fix-memory-leak-in-runtest.c.patch

Fixed some issues found in fuzzing testcases

2020-11-12 11:52:00 +08:00

Fix-memory-leak-in-xmlParseElementMixedContentDecl.patch

fix issues about SEGV, memleak, overflow, etc.

2021-11-11 20:19:02 +08:00

Fix-memory-leak-in-xmlXIncludeAddNode-error-paths.patch

Fixed some issues found in fuzzing testcases

2020-11-12 11:52:00 +08:00

Fix-memory-leak-in-xmlXIncludeIncludeNode-error-path.patch

Fixed some issues found in fuzzing testcases

2020-11-12 11:52:00 +08:00

Fix-memory-leak-in-xmlXIncludeLoadDoc-error-path.patch

Fixed some issues found in fuzzing testcases

2020-11-12 11:52:00 +08:00

Fix-memory-leak-when-shared-libxml-dll-is-unloaded.patch

Fixed some issues found in fuzzing testcases

2020-11-12 11:52:00 +08:00

Fix-memory-leaks-for-xmlACatalogAdd.patch

Fix memory leaks for xmlACatalogAdd

2022-06-16 20:06:35 +08:00

Fix-memory-leaks-in-xmlACatalogAdd-when-xmlHashAddEntry-failed.patch

Fix memory leaks in xmlACatalogAdd when xmlHashAddEntry failed

2022-06-24 10:07:40 +08:00

Fix-memory-leaks-in-XPointer-string-range-function.patch

fix fuzz issues

2021-10-23 17:13:09 +08:00

Fix-memory-leaks-of-encoding-handlers-in-xmlsave-c.patch

Sync some patches from community

2020-06-24 11:26:04 +08:00

Fix-more-memory-leaks-in-error-paths-of-XPath-parser.patch

Sync some patches from community

2020-06-24 11:26:04 +08:00

Fix-more-quadratic-runtime-issues-in-HTML-push-parse.patch

Fix more quadratic runtime issues in HTML push parse

2020-08-28 19:55:54 +08:00

Fix-NodeDumpOutput-functions.patch

backport upstream patches

2021-12-02 14:41:13 +08:00

Fix-null-deref-in-legacy-SAX1-parser.patch

add patches from upstream

2021-05-29 17:41:53 +08:00

Fix-Null-deref-in-xmlSchemaGetComponentTargetNs.patch

fix null deref in xmlSchemaGetComponentTargetNs

2021-10-30 16:06:41 +08:00

Fix-null-deref-in-xmlStringGetNodeList.patch

fix issues about SEGV, memleak, overflow, etc.

2021-11-11 20:19:02 +08:00

Fix-null-deref-in-XPointer-expression-error-path.patch

fix problems detected by oss-fuzz test

2020-11-12 19:04:00 +08:00

Fix-null-pointer-deref-in-xmlXPtrRangeInsideFunction.patch

fix fuzz issues

2021-10-23 17:13:09 +08:00

Fix-overflow-check-in-xmlNodeDump.patch

Sync some patches from community

2020-06-24 11:26:04 +08:00

Fix-overflow-handling-in-xmlBufBackToBuffer.patch

Sync some patches from community

2020-06-24 11:26:04 +08:00

Fix-quadratic-behavior-when-looking-up-xml-attribute.patch

add patches from upstream

2021-05-29 17:41:53 +08:00

Fix-quadratic-runtime-in-xi-fallback-processing.patch

backport upstream patches

2021-12-02 14:41:13 +08:00

Fix-quadratic-runtime-when-parsing-HTML-script-conte.patch

Fixed some issues found in fuzzing testcases

2020-11-12 11:52:00 +08:00

Fix-regression-in-xmlNodeDumpOutputInternal.patch

backport upstream patches

2021-12-02 14:41:13 +08:00

Fix-regression-introduced-with-commit-74dcc10b.patch

backport upstream patches

2021-12-02 14:41:13 +08:00

Fix-regression-introduced-with-commit-d88df4b.patch

backport upstream patches

2021-12-02 14:41:13 +08:00

Fix-SEGV-in-xmlSAXParseFileWithData.patch

fix issues about SEGV, memleak, overflow, etc.

2021-11-11 20:19:02 +08:00

Fix-slow-parsing-of-HTML-with-encoding-errors.patch

fix issues about SEGV, memleak, overflow, etc.

2021-11-11 20:19:02 +08:00

Fix-undefined-behavior-in-UTF16LEToUTF8.patch

fix issues about SEGV, memleak, overflow, etc.

2021-11-11 20:19:02 +08:00

Fix-undefined-behavior-in-xmlXPathTryStreamCompile.patch

Fixed some issues found in fuzzing testcases

2020-11-12 11:52:00 +08:00

Fix-unsigned-integer-overflow-in-htmlParseTryOrFinis.patch

fix issues about SEGV, memleak, overflow, etc.

2021-11-11 20:19:02 +08:00

Fix-use-after-free-when-XIncluding-text-from-Reader.patch

fix problems detected by oss-fuzz test

2020-11-12 19:04:00 +08:00

Fix-use-after-free-with-validating-reader.patch

Fix use after free with validating reader

2020-07-30 17:32:07 +08:00

Fix-use-after-free-with-xmllint-html-push.patch

add patches from upstream

2021-05-29 17:41:53 +08:00

Fix-UTF-8-decoder-in-HTML-parser.patch

Fixed some issues found in fuzzing testcases

2020-11-12 11:52:00 +08:00

Fix-XInclude-regression-introduced-with-recent-commi.patch

Fixed some issues found in fuzzing testcases

2020-11-12 11:52:00 +08:00

Fix-xmlGetNodePath-with-invalid-node-types.patch

add patches from upstream

2021-05-29 17:41:53 +08:00

Fix-XPath-recursion-limit.patch

fix fuzz issues

2021-10-23 17:13:09 +08:00

Fuzz-XInclude-engine.patch

Fixed some issues found in fuzzing testcases

2020-11-12 11:52:00 +08:00

Handle-dumps-of-corrupted-documents-more-gracefully.patch

backport upstream patches

2021-12-02 14:41:13 +08:00

Hardcode-maximum-XPath-recursion-depth.patch

fix fuzz issues

2021-10-23 17:13:09 +08:00

libxml2-2.9.10.tar.gz

upgrade software to v2.9.10

2020-05-11 15:09:02 +08:00

libxml2-multilib.patch

Package init

2019-12-25 17:13:34 +08:00

libxml2.spec

fix CVE-2022-2309

2024-03-26 14:29:45 +08:00

Limit-regexp-nesting-depth.patch

Limit regexp nesting depth and Fix exponential runtime in xmlFARecurseDeterminism

2020-08-12 19:30:00 +08:00

Limit-size-of-free-lists-in-XML-reader-when-fuzzing.patch

Fixed some issues found in fuzzing testcases

2020-11-12 11:52:00 +08:00

Make-htmlNodeDumpFormatOutput-non-recursive.patch

backport upstream patches

2021-12-02 14:41:13 +08:00

Make-xmlNodeDumpOutputInternal-non-recursive.patch

backport upstream patches

2021-12-02 14:41:13 +08:00

Merge-code-paths-loading-external-entities.patch

Sync some patches from community

2020-06-24 11:26:04 +08:00

More-NodeDumpOutput-fixes.patch

backport upstream patches

2021-12-02 14:41:13 +08:00

Never-expand-parameter-entities-in-text-declaration.patch

Fix use after free with validating reader

2020-07-30 17:32:07 +08:00

Null-pointer-handling-in-catalog-c.patch

Sync some patches from community

2020-06-24 11:26:04 +08:00

Remove-dead-code-in-xinclude.c.patch

backport upstream patches

2021-12-02 14:41:13 +08:00

Remove-unused-encoding-parameter-of-HTML-output-func.patch

backport upstream patches

2021-12-02 14:41:13 +08:00

Report-error-for-invalid-regexp-quantifiers.patch

Fix integer overflow in xmlFAParseQuantExact

2020-08-12 16:20:36 +08:00

Reset-HTML-parser-input-before-reporting-error.patch

Fix more quadratic runtime issues in HTML push parse

2020-08-28 19:55:54 +08:00

Revert-Fix-quadratic-runtime-in-xi-fallback-processi.patch

backport upstream patches

2021-12-02 14:41:13 +08:00

Stop-checking-attributes-for-UTF-8-validity.patch

add patches from upstream

2021-05-29 17:41:53 +08:00

Stop-using-maxParserDepth-in-xpath.c.patch

fix fuzz issues

2021-10-23 17:13:09 +08:00

update-for-xsd-language-type-check.patch

add patches from upstream

2021-05-29 17:41:53 +08:00

Use-random-seed-in-xmlDictComputeFastKey.patch

Sync some patches from community

2020-06-24 11:26:04 +08:00

Work-around-lxml-API-abuse.patch

backport upstream patches

2021-12-02 14:41:13 +08:00

xmlAddChild-and-xmlAddNextSibling-may-not-attach-the.patch

use upstream patch refix heap-use-after-free in xmlAddNextSibling and xmlAddChild

2022-02-12 11:16:28 +08:00

Description

No description provided

10 MiB

Languages

Diff 100%