Release candidate for V3.2.5 patch

2023-12-13 Thread Cantor, Scott
I've signed and uploaded a test build of 3.2.5: https://dist.apache.org/repos/dist/dev/xerces/c/3/sources/ Only real work done is Boris' changes to fix the open CVE and add the SAX option to disable DTDs. Windows has not yet been tested. The site material should be updated, including an update

(xerces-c) branch xerces-3.2 updated: Update version and site material.

2023-12-13 Thread scantor
This is an automated email from the ASF dual-hosted git repository. scantor pushed a commit to branch xerces-3.2 in repository https://gitbox.apache.org/repos/asf/xerces-c.git The following commit(s) were added to refs/heads/xerces-3.2 by this push: new 53c164114 Update version and site

Re: [PR] [XERCESC-2188] Fix potential double-free in usage of ReaderMgr::pushReader() [xerces-c]

2023-12-13 Thread via GitHub
boris-kolpackov closed pull request #47: [XERCESC-2188] Fix potential double-free in usage of ReaderMgr::pushReader() URL: https://github.com/apache/xerces-c/pull/47 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the

Re: [PR] [XERCESC-2188] Fix potential double-free in usage of ReaderMgr::pushReader() [xerces-c]

2023-12-13 Thread via GitHub
boris-kolpackov commented on PR #47: URL: https://github.com/apache/xerces-c/pull/47#issuecomment-1853495327 PR #54 has been merged: `master`: https://github.com/apache/xerces-c/commit/b38ab79e934b9c27de191ee7af6926c7af42069d `xerces-3.2`:

Re: [PR] XERCESC-2188 - Use-after-free on external DTD scan [xerces-c]

2023-12-13 Thread via GitHub
boris-kolpackov closed pull request #54: XERCESC-2188 - Use-after-free on external DTD scan URL: https://github.com/apache/xerces-c/pull/54 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the

Re: [PR] XERCESC-2188 - Use-after-free on external DTD scan [xerces-c]

2023-12-13 Thread via GitHub
boris-kolpackov commented on PR #54: URL: https://github.com/apache/xerces-c/pull/54#issuecomment-1853490361 This PR has been merged (with whitespace issues addressed): `master`: https://github.com/apache/xerces-c/commit/b38ab79e934b9c27de191ee7af6926c7af42069d `xerces-3.2`:

(xerces-c) 06/06: Add functions/properties for disallowing DOCTYPE (DTD) in SAX parsers

2023-12-13 Thread borisk
This is an automated email from the ASF dual-hosted git repository. borisk pushed a commit to branch xerces-3.2 in repository https://gitbox.apache.org/repos/asf/xerces-c.git commit 5dbead100bc73ed5ac721586f9afc7db576c3936 Author: Boris Kolpackov AuthorDate: Wed Dec 13 10:38:33 2023 +0200

(xerces-c) 04/06: Omit unnecessary getenv() call if DTD is disabled programmatically

2023-12-13 Thread borisk
This is an automated email from the ASF dual-hosted git repository. borisk pushed a commit to branch xerces-3.2 in repository https://gitbox.apache.org/repos/asf/xerces-c.git commit 20bce7b075ee222a01546aff4dceb45d1f80d3a7 Author: Boris Kolpackov AuthorDate: Wed Dec 13 09:49:53 2023 +0200

(xerces-c) 01/06: Reorder inline function definitions to help with MinGW GCC symbol exporting

2023-12-13 Thread borisk
This is an automated email from the ASF dual-hosted git repository. borisk pushed a commit to branch xerces-3.2 in repository https://gitbox.apache.org/repos/asf/xerces-c.git commit 0fea598e44d2d31b01b89b1cb387598ed3e18a22 Author: Boris Kolpackov AuthorDate: Wed Dec 13 08:33:13 2023 +0200

(xerces-c) 05/06: XERCESC-2188 - Use-after-free on external DTD scan (CVE-2018-1311)

2023-12-13 Thread borisk
This is an automated email from the ASF dual-hosted git repository. borisk pushed a commit to branch xerces-3.2 in repository https://gitbox.apache.org/repos/asf/xerces-c.git commit e0024267504188e42ace4dd9031d936786914835 Author: Karen Arutyunov AuthorDate: Wed Dec 13 09:59:07 2023 +0200

(xerces-c) 03/06: Fix NetAccessorTest to exit with non-zero status in case of error

2023-12-13 Thread borisk
This is an automated email from the ASF dual-hosted git repository. borisk pushed a commit to branch xerces-3.2 in repository https://gitbox.apache.org/repos/asf/xerces-c.git commit 12eecd6b97840b3b49147f6c4245295d83c1198d Author: Boris Kolpackov AuthorDate: Wed Dec 13 08:46:59 2023 +0200

(xerces-c) 02/06: Fix comments to make all source code valid UTF-8

2023-12-13 Thread borisk
This is an automated email from the ASF dual-hosted git repository. borisk pushed a commit to branch xerces-3.2 in repository https://gitbox.apache.org/repos/asf/xerces-c.git commit a032d8c22fedda41c917acaf626dfe356898429c Author: Boris Kolpackov AuthorDate: Wed Dec 13 08:37:35 2023 +0200

(xerces-c) branch xerces-3.2 updated (cfd2a1c8f -> 5dbead100)

2023-12-13 Thread borisk
This is an automated email from the ASF dual-hosted git repository. borisk pushed a change to branch xerces-3.2 in repository https://gitbox.apache.org/repos/asf/xerces-c.git from cfd2a1c8f XERCESC-2163 - XercesMessages_en_US.cat is installed to wrong directory new 0fea598e4 Reorder

(xerces-c) 02/06: Fix comments to make all source code valid UTF-8

2023-12-13 Thread borisk
This is an automated email from the ASF dual-hosted git repository. borisk pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/xerces-c.git commit 3c4b17ee89bc810ad5517c97ff550dc96bac8f2d Author: Boris Kolpackov AuthorDate: Wed Dec 13 08:37:35 2023 +0200 Fix

(xerces-c) branch master updated (08f809cd2 -> 5fe4f4b5a)

2023-12-13 Thread borisk
This is an automated email from the ASF dual-hosted git repository. borisk pushed a change to branch master in repository https://gitbox.apache.org/repos/asf/xerces-c.git from 08f809cd2 XERCESC-2163 - XercesMessages_en_US.cat is installed to wrong directory new 56656c9b4 Reorder

(xerces-c) 01/06: Reorder inline function definitions to help with MinGW GCC symbol exporting

2023-12-13 Thread borisk
This is an automated email from the ASF dual-hosted git repository. borisk pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/xerces-c.git commit 56656c9b458dd4d8ae92db975fddee0224a83b15 Author: Boris Kolpackov AuthorDate: Wed Dec 13 08:33:13 2023 +0200

(xerces-c) 05/06: XERCESC-2188 - Use-after-free on external DTD scan (CVE-2018-1311)

2023-12-13 Thread borisk
This is an automated email from the ASF dual-hosted git repository. borisk pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/xerces-c.git commit b38ab79e934b9c27de191ee7af6926c7af42069d Author: Karen Arutyunov AuthorDate: Wed Dec 13 09:59:07 2023 +0200

(xerces-c) 03/06: Fix NetAccessorTest to exit with non-zero status in case of error

2023-12-13 Thread borisk
This is an automated email from the ASF dual-hosted git repository. borisk pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/xerces-c.git commit 0f5dcca041b16f628f23f17a5e1a9f115148baa0 Author: Boris Kolpackov AuthorDate: Wed Dec 13 08:46:59 2023 +0200 Fix

(xerces-c) 06/06: Add functions/properties for disallowing DOCTYPE (DTD) in SAX parsers

2023-12-13 Thread borisk
This is an automated email from the ASF dual-hosted git repository. borisk pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/xerces-c.git commit 5fe4f4b5a861fa8acf4bb66d3a2ad3e4396d68ec Author: Boris Kolpackov AuthorDate: Wed Dec 13 10:38:33 2023 +0200 Add

(xerces-c) 04/06: Omit unnecessary getenv() call if DTD is disabled programmatically

2023-12-13 Thread borisk
This is an automated email from the ASF dual-hosted git repository. borisk pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/xerces-c.git commit 5b31900eeb625e1b513182c22bc7fd762ad2f315 Author: Boris Kolpackov AuthorDate: Wed Dec 13 09:49:53 2023 +0200 Omit