libxml2-tools-2.9.7-lp150.2.14.1<>,G]ߪ/=„Dw$6b9z2; (xl(JmߣΎ@:XXcI?KKKb{C%I۸&`hQr[2_Dٳț{he@x.В֤C"7U"Ly9?S~\$`)CMp0M^O(|eF2[O~ֻWǩ^1m6ϫĦJ!W˷{LTNf.h>sS\!#5[~i7OY>A)x?)hd # 6   $ , < @ DTh|<!(Q8X9:B$/F$7G$LH$\I$lX$pY$|Z$[$\$]$^%b%/c%d&ie&nf&ql&su&v&w(|x(y(z))))")dClibxml2-tools2.9.7lp150.2.14.1Tools using libxmlThis package contains xmllint, a very useful tool proving libxml's power.]ߪcloud136fopenSUSE Leap 15.0openSUSEMIThttp://bugs.opensuse.orgProductivity/Text/Utilitieshttp://xmlsoft.orglinuxx86_64I |!큤]ߪq]ߪq]ߪp]ߪpdcb4ef7eef4617757895b16e292b926a77ef2d81be012e94a0ad57e34cbff111ee778b690862256442853c83fafe2dcbaea8a7e6d49a96e4eaff68379371f69b579779594d0843f978bd610ce144d0e3874d17136967fb403bd734356405fefb5974236f0740926fe974baf81e83f67bbe2df201ef3871a7a5a44c961d8df6d5rootrootrootrootrootrootrootrootlibxml2-2.9.7-lp150.2.14.1.src.rpmlibxml2libxml2-toolslibxml2-tools(x86-64)@@@@@@@@@@@@@@@@@@@@    libc.so.6()(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libreadline.so.7()(64bit)libxml2.so.2()(64bit)libxml2.so.2(LIBXML2_2.4.30)(64bit)libxml2.so.2(LIBXML2_2.5.0)(64bit)libxml2.so.2(LIBXML2_2.5.2)(64bit)libxml2.so.2(LIBXML2_2.5.6)(64bit)libxml2.so.2(LIBXML2_2.5.7)(64bit)libxml2.so.2(LIBXML2_2.5.8)(64bit)libxml2.so.2(LIBXML2_2.6.0)(64bit)libxml2.so.2(LIBXML2_2.6.18)(64bit)libxml2.so.2(LIBXML2_2.6.20)(64bit)libxml2.so.2(LIBXML2_2.6.21)(64bit)libxml2.so.2(LIBXML2_2.6.3)(64bit)libxml2.so.2(LIBXML2_2.6.8)(64bit)libxml2.so.2(LIBXML2_2.9.0)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.1]fl]@[@[@Z@YéYéY)@YBvYA%@Y"XWXWH6W>@W(VTQ@TWn@TWn@TSyTAPedro Monreal Gonzalez Pedro Monreal Gonzalez pmonrealgonzalez@suse.compmonrealgonzalez@suse.comaavindraa@gmail.comjengelh@inai.detchvatal@suse.comtchvatal@suse.compmonrealgonzalez@suse.compmonrealgonzalez@suse.compmonrealgonzalez@suse.compmonrealgonzalez@suse.comkstreitova@suse.compsimons@suse.comkstreitova@suse.comsflees@suse.derpm@fthiessen.devcizek@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.com- Synchronize changelog files for libxml2 and python-libxml2-python [bsc#1123919]- Added a new configurable variable XPATH_DEFAULT_MAX_NODESET_LENGTH to avoid nodeset limit when processing large XML files [bsc#1135123] * Added libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch- Security fix: [bsc#1088279, CVE-2018-9251][bsc#1105166, CVE-2018-14567] * Infinite loop in LZMA decompression * Fixes CVE-2018-9251 introduced by CVE-2017-18258 * Added libxml2-CVE-2018-14567.patch- Security fix [bsc#1102046, CVE-2018-14404] * NULL pointer dereference in xpath.c:xmlXPathCompOpEval() can allow attackers to cause a denial of service * Added libxml2-CVE-2018-14404.patch- Version update to 2.9.7 release: * Bug Fixes: + xmlcatalog: restore ability to query system catalog easily + Fix comparison of nodesets to strings * Improvements: + Add Makefile rules to rebuild HTML man pages + Remove generated file python/setup.py from version control + Fix mixed decls and code in timsort.h + Rework handling of return values in thread tests + Fix unused variable warnings in testrecurse + Fix -Wimplicit-fallthrough warnings + Upgrade timsort.h to latest revision + Fix a couple of warnings in dict.c and threads.c + Fix unused variable warnings in nanohttp.c + Don't include winsock2.h in xmllint.c + Use __linux__ macro in generated code * Portability: + Add declaration for DllMain + Fix preprocessor conditional in threads.h + Fix macro redefinition warning + many Windows specific improvements * Documentation: + xmlcatalog: refresh man page wrt. quering system catalog easily - Includes bug fixes from 2.9.6: * Fix XPath stack frame logic * Report undefined XPath variable error message * Fix regression with librsvg * Handle more invalid entity values in recovery mode * Fix structured validation errors * Fix memory leak in LZMA decompressor * Set memory limit for LZMA decompression * Handle illegal entity values in recovery mode * Fix debug dump of streaming XPath expressions * Fix memory leak in nanoftp * Fix memory leaks in SAX1 parser - Drop libxml2-bug787941.patch * upstreamed in 3157cf4e53c03bc3da604472c015c63141907db8- Update package summaries and RPM groups. Trim descriptions for size on secondary subpackages. Replace install call by a commonly-used macro.- Add patch to fix TW integration: * libxml2-bug787941.patch- Version update to 2.9.5 release: * Merged all the previous cve fixes that were patched in * Few small tweaks - Remove merged patches: * libxml2-CVE-2016-4658.patch * libxml2-CVE-2017-0663.patch * libxml2-CVE-2017-5969.patch * libxml2-CVE-2017-9047.patch * libxml2-CVE-2017-9048.patch * libxml2-CVE-2017-9049.patch * libxml2-2.9.4-fix_attribute_decoding.patch- Security fix: * libxml2-CVE-2017-0663.patch [bsc#1044337, CVE-2017-0663] * Fix Heap buffer overflow in xmlAddID- Security fix: * libxml2-CVE-2017-5969.patch [bsc#1024989, CVE-2017-5969] * Fix NULL pointer deref in xmlDumpElementContent- Security fixes: * libxml2-CVE-2017-9049.patch [bsc#1039066] * heap-based buffer overflow (xmlDictComputeFastKey func) * libxml2-CVE-2017-9048.patch [bsc#1039063] * stack overflow vulnerability (xmlSnprintfElementContent func) * libxml2-CVE-2017-9047.patch [bsc#1039064] * stack overflow vulnerability (xmlSnprintfElementContent func)- Added libxml2-CVE-2016-4658.patch: Disallow namespace nodes in XPointer ranges. Namespace nodes must be copied to avoid use-after-free errors. But they don't necessarily have a physical representation in a document, so simply disallow them in XPointer ranges [bsc#1005544] [CVE-2016-4658]- add libxml2-2.9.4-fix_attribute_decoding.patch to fix attribute decoding during XML schema validation [bnc#983288]- Update libxml2 to version libxml2-2.9.4. The new version is resistant against CVE-2016-3627, CVE-2016-1833, CVE-2016-1835, CVE-2016-1837, CVE-2016-1836, CVE-2016-1839, CVE-2016-1838, CVE-2016-1840, CVE-2016-4483, CVE-2016-1834, CVE-2016-3705, and CVE-2016-1762. - Remove obsolete patches libxml2-2.9.1-CVE-2016-3627.patch, 0001-Add-missing-increments-of-recursion-depth-counter-to.patch, and libxml2-2.9.3-bogus_UTF-8_encoding_error.patch.- add libxml2-2.9.3-bogus_UTF-8_encoding_error.patch to fix XML push parser that fails with bogus UTF-8 encoding error when multi-byte character in large CDATA section is split across buffer [bnc#962796]- Add libxml2-2.9.1-CVE-2016-3627.patch to fix stack exhaustion while parsing certain XML files in recovery mode (CVE-2016-3627, bnc#972335). - Add 0001-Add-missing-increments-of-recursion-depth-counter-to.patch to improve protection against Billion Laughs Attack (bnc#975947).- Update to new upstream release 2.9.3 (bsc#954429): * Fixes for CVE-2015-8035, CVE-2015-7942, CVE-2015-7941, CVE-2015-1819, CVE-2015-7497, CVE-2015-7498, CVE-2015-5312, CVE-2015-7499, CVE-2015-7500 and CVE-2015-8242 * And other bugfixes - Removed upstream fixed patches: * libxml2-dont_initialize_catalog.patch * 0001-Fix-missing-entities-after-CVE-2014-3660-fix.patch * 0002-Adding-example-from-bugs-738805-to-regression-tests.patch- fix a missing entities after CVE-2014-3660 fix (https://bugzilla.gnome.org/show_bug.cgi?id=738805) * added patches: 0001-Fix-missing-entities-after-CVE-2014-3660-fix.patch 0002-Adding-example-from-bugs-738805-to-regression-tests.patch- fix a regression in libxml2 2.9.2 * https://bugzilla.redhat.com/show_bug.cgi?id=1153753 - add libxml2-dont_initialize_catalog.patch- update to 2.9.2 * drop libxml2-CVE-2014-3660.patch (upstream) * add keyring to verify tarball Security: Fix for CVE-2014-3660 billion laugh variant CVE-2014-0191 Do not fetch external parameter entities Improvements: win32/libxml2.def.src after rebuild in doc elfgcchack.h: more legacy needs xmlSAX2StartElement() and xmlSAX2EndElement() elfgcchack.h: add xmlXPathNodeEval and xmlXPathSetContextNode Provide cmake module Fix a couple of issues raised by make dist Fix and add const qualifiers Preparing for upcoming release of 2.9.2 Fix zlib and lzma libraries check via command line wrong error column in structured error when parsing end tag doc/news.html: small update to avoid line join while generating NEWS. Add methods for python3 iterator Support element node traversal in document fragments xmlNodeSetName: Allow setting the name to a substring of the currently set name Added macros for argument casts adding init calls to xml and html Read parsing entry points Get rid of 'REPLACEMENT CHARACTER' Unicode chars in xmlschemas.c Implement choice for name classes on attributes Two small namespace tweaks xmllint --memory should fail on empty files Cast encoding name to char pointer to match arg type- fix for CVE-2014-3660 (bnc#901546) * denial of service via recursive entity expansion (related to billion laughs) * added libxml2-CVE-2014-3660.patchlibxml2cloud136 15749393062.9.7-lp150.2.14.12.9.7-lp150.2.14.12.9.7-lp150.2.14.12.9.7-lp150.2.14.1xmlcatalogxmllintxmlcatalog.1.gzxmllint.1.gz/usr/bin//usr/share/man/man1/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:11603/openSUSE_Leap_15.0_Update/cb0320d91ea82dc7e4b054dcb187e3cd-libxml2.openSUSE_Leap_15.0_Updatedrpmxz5x86_64-suse-linuxELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, BuildID[sha1]=40342c112cd24be02ed7bd967b0ca7fe6d70432e, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, BuildID[sha1]=df8c159a4f7a4e329594eb16cadd79bdc4591245, for GNU/Linux 3.2.0, strippedtroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)RRRRRRRRRRRRR RRRR RRRR R R RRRRsƑROya鼗}utf-8339c2fcaada1d1f7ce4e2fb080ef158803324939f4244a3f7e10b289ee852f21?7zXZ !t/1]"k%ʽdNG{pmlҏ42 O&OT_,zpkc]ţQO:/qM-ۭuR>%}ug4TW/= |:N;^J d"Y@ 0(bBUwߺ9j&f yޖ+ϵFe >^;O]%WGԏylouk"Ǟx/}ǰg#m-o;QP?w9mKz 8g*U\pƊl5+!oo^ ): ~`,x6"ג\fv7 3OI*(lК_2CnP ={)T(]BUmnu-r`}U.7aLpLȆ^* tW߃슈J 7C>*,6ʪ6y*iwh@oD-Q{[q&%*ޗJl>v]u5Dye 55AX[ס'i{/Ig0!<hbaNh?UҤ"4Y[]:;tO[Kg[+63#TpIIUPag%dK0JWv!3\n3q%"B[ܔ}]9623mփF$jZK(~>`6;21y=o7Sjכ5:%b A5yrZMY c^J4#>:i&`aA}f8@c26Ue% unݯyv3cUg #Wm \I !,re5X^_vNRV31 &ip)$RynS?62.4\nD:`]ై>91 L2<5I!nGq%MrKDΞnێEwu1`qY;mMnh5D(1z?~-v9Ӄ])j' Z0sw3 GT^6-E<[zҍiQʛc(UAMh#0K~iGɫהePM懹ؐuOi+)4ytx1XO]PsX^X٠ӯ].WTtЉEvdTM[` :hḌUWt!VZ9Ȳ |YfU\Xn B1㙥^R .̨p=y(~ z(GD%ޅ*M:Aa1T{EZܑNq?hs('ٹs"YU`ҕ …~K J+i!z-;tHOQz ͥv'+bc&wZ#Ap)#u b?ÿ|xJU@Ur)i1m }Nbyt`esA:a5Y0 ^PҵξKs&'p긦&nQeG.(c658K!$TSPIZQmzm+Bz.z=z&$ڛ re  zk3'HB%mn|D**(Px}8eZ?B7kh-Z]ܻE?h[Al\bPq5]w83IG[/]H696p=tYܲհA\լbD*E2RinP\e\jhR#FW.irlZ } y_U;kZ6:X_"K_ht$iP|pa$'2dѹ˧}9SW2R%6ISm"8—04uALj)6B3q y=8?b^y)KQ惽q=ሗ \/KxYRf ce E-qt)| )=nmi1eӹSɠQ~4C U}Ų8fÂ6%=w`p,x*`/&m8n (%ȁ0Xb4"H>ڽ= b;ЁM+p==3! kgʩ/۬es#jh!]5_hKu|DIw\N$JUY'_ю]N qSqW~GEؤk zc>+-Ps{H3hҢ < r{;0&A'h+i\X:^ "fGv~7?%&(Ȱ1"ñֈHy:ɡ IVޚ<*EiG.=Hc)Va"J"Hm%zj a:18#%vc2"wT{Q&L2/N\>BnzMfG5sVZ4/mw>Iذ)-{ kwkʭX|$y+/7H(;iхZDTt~.L [5&ѸL7B.梶5P"h0A lj2"t,0{P9OS3AXh7;\^S;_c}ȹL]Q3?DpXx"<^9J g{xsbZϨ^Qz~0Ҩڬ^ۈ$.T!)=QG_W 2;16gI@5_V^a jtѱ|g!}(|p yR>8_SNC#i^q,Jd?X[w3Q, )rI6mW}L9ى.I{Yw;zYm!铸>F ~\,1>n>IIJ@K(hۦ_yϿ&ۘkO[MIiT GTg.)9@+t_@n.H4xzDr +:ۑvM8 Omfe6y0[kBae6vL _}y^17U$~slJ2Ҋ`a"o'3S2uZ@@#ev` \Rgv\m%K)̈́]yA`8>`O)ݠ IYokKKX|J!7cm_tܔ.ZČ@.j[FZ6~zSh${Nwߏs X)-pE[<ir>)xռέEj8sruu3NӚѢt@Lڄ9L8iXAi= {g<:"T?԰2 z6% W`:X\4,>P]` _8T֭!- ҈T2Ln @mK?X_z7;B/s{wz!>1Tͳƛ눡|0ȬU"_(lϝ&z+ z#ڄ:oP8K}r%̖aiwۨu{sȏZNȀ]ũZCW73ٮXa5͛5MoA(È& $M9W̉)ou]OrgɮxԮA&Jqg+= c9Ļ[FzA< fWigNXiy@bOm`IHKc(CN:`G֍ 7'-W2+0.