Hello community, here is the log from the commit of package libxslt.5124 for openSUSE:13.2:Update checked in at 2016-05-30 10:27:23 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:13.2:Update/libxslt.5124 (Old) and /work/SRC/openSUSE:13.2:Update/.libxslt.5124.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libxslt.5124" Changes: -------- New Changes file: --- /dev/null 2016-04-07 01:36:33.300037506 +0200 +++ /work/SRC/openSUSE:13.2:Update/.libxslt.5124.new/libxslt-python.changes 2016-05-30 10:27:25.000000000 +0200 @@ -0,0 +1,271 @@ +------------------------------------------------------------------- +Fri May 20 14:01:22 UTC 2016 - kstreit...@suse.com + +- add libxslt-1.1.28-type_confusion_preprocess_attr.patch to fix + type confusion in preprocessing attributes [bnc#952474], + [CVE-2015-7995] + +------------------------------------------------------------------- +Wed Jan 16 08:57:51 UTC 2013 - dl8...@darc.de + +- in spec file moved the "BuildRequires:" and "Requires:" tags + behind "Version:" tag to have them read the variable correctly. + +------------------------------------------------------------------- +Thu Dec 6 08:17:12 UTC 2012 - pascal.ble...@opensuse.org + +- update to 1.1.28: see changelog for libxslt1 1.1.28 for details +- enforce having the same version of libxslt1 + +------------------------------------------------------------------- +Thu Feb 16 21:23:22 UTC 2012 - co...@suse.com + +- add libtool as buildrequire to fix compilation + +------------------------------------------------------------------- +Mon Nov 21 15:49:42 UTC 2011 - jeng...@medozas.de + +- Remove redundant/unwanted tags/section (cf. specfile guidelines) + +------------------------------------------------------------------- +Tue Aug 2 15:09:50 UTC 2011 - idon...@novell.com + +- Add dependency on libgcrypt-devel and libgpg-error-devel for + the libxslt-devel package. + +------------------------------------------------------------------- +Mon Aug 1 09:59:25 UTC 2011 - idon...@novell.com + +- Correctly obsolete libxslt package in the baselibs.conf too + +------------------------------------------------------------------- +Fri Jul 29 09:37:15 UTC 2011 - idon...@novell.com + +- Fix build by not using %exclude + +------------------------------------------------------------------- +Fri Jul 29 03:46:57 UTC 2011 - crrodrig...@opensuse.org + +- Rework build of this package in a sane way. + +------------------------------------------------------------------- +Wed Jul 21 13:19:36 UTC 2010 - pu...@novell.com + +- updated to 1.1.26 + - no python related fixes in this libxslt release + +------------------------------------------------------------------- +Fri Apr 11 14:39:52 CEST 2008 - prus...@suse.cz + +- updated to 1.1.23 + * Documentation + fix links for Cygwin DocBook setup (Philippe Bourcier) + - xsltParseStylesheetDoc doc fix (Jason Viers) + - fix manpage default maxdepth value + * Bug fixes: + - python segfault (Daniel Gryniewicz) + - week-in-year bug fix (Maurice van der Pot) + - fix python iterator problem (William Brack) + - avoid garbage collection problems on str:tokenize and str:split + and function results (William Brack and Peter Pawlowski) + - superfluous re-generation of keys (William Brack) + - remove superfluous code in xsltExtInitTest (Tony Graham) + - func:result segfault fix (William Brack) + - timezone offset problem (Peter Pawlowski), + * Portability fixes: + - old gcrypt support fix (Brent Cowgill) + - Python portability patch (Stephane Bidoul) + - VS 2008 fix (Rob Richard) + +------------------------------------------------------------------- +Tue Jan 22 12:19:20 CET 2008 - prus...@suse.cz + +- build without strict aliasing (as main package does) + +------------------------------------------------------------------- +Tue Sep 18 16:21:03 CEST 2007 - sbra...@suse.cz + +- Updated to version 1.1.22: + * Bug fixes: RVT cleanup problems, exclude-result-prefix bug, + stylesheet compilation error handling, out of memory allocation + errors, namespace problem on compound predicates, python + space/tab inconsistencies, hook xsl:message to per + transformation error callbacks, cached RVT problem, XPath + context maintainance on choose, memory leaks in the math + module, exclude-result-prefix induced namespace problem + * Portability fixes: improve build with VS2005, fixing build on + AIX, fix the security file checks on Windows. + * Improvement: add an --encoding option to xsltproc. + * Build: configure setup for TRIO_REPLACE_STDIO + * Documentation: updated after change from CVs to SVN + +------------------------------------------------------------------- +Mon Aug 20 15:57:47 CEST 2007 - sbra...@suse.cz + +- Commented out NoSource to provide comfortable rebuild. + +------------------------------------------------------------------- +Thu Jan 25 15:53:43 CET 2007 - prus...@suse.cz + +- update to 1.1.20 + * sync to libxslt-1.1.20 +- drop obsolete patches: + * libxslt-transform.patch (included in update) + +------------------------------------------------------------------- +Thu Jan 11 13:59:06 CET 2007 - k...@suse.de + +- Adjust python-linkflags.patch for 1.1.19 and do not apply obsolete + warn patch. + +------------------------------------------------------------------- +Tue Dec 12 11:14:18 CET 2006 - k...@suse.de + +- 1.1.19. + +------------------------------------------------------------------- +Tue Nov 28 12:30:14 CET 2006 - k...@suse.de + +- Do not install static Python module; reported by Andreas Hanke + [#223696]. + +------------------------------------------------------------------- +Fri Jun 16 15:54:03 CEST 2006 - k...@suse.de + +- 1.1.17. + +------------------------------------------------------------------- +Wed Jan 25 21:37:50 CET 2006 - m...@suse.de + +- converted neededforbuild to BuildRequires + +------------------------------------------------------------------- +Fri Sep 30 16:30:21 CEST 2005 - a...@suse.de + +- Fix compiler warnings. + +------------------------------------------------------------------- +Fri Sep 16 17:54:17 CEST 2005 - k...@suse.de + +- Update to version 1.1.15. + +------------------------------------------------------------------- +Wed Jul 6 16:36:19 CEST 2005 - meiss...@suse.de + +- removed -fno-strict-aliasing, not needed here. + +------------------------------------------------------------------- +Mon Apr 4 11:06:01 CEST 2005 - k...@suse.de + +- Update to version 1.1.14. + +------------------------------------------------------------------- +Wed Nov 24 15:16:44 CET 2004 - mci...@suse.cz + +- use rpm macros to build correcly with current python + +------------------------------------------------------------------- +Tue Nov 2 11:35:10 CET 2004 - k...@suse.de + +- Update to version 1.1.12. + +------------------------------------------------------------------- +Tue Oct 12 12:08:57 CEST 2004 - k...@suse.de + +- Add libgcrypt* and libgpg-error* to neededforbuild. + +------------------------------------------------------------------- +Fri Oct 8 06:19:39 CEST 2004 - k...@suse.de + +- Update to version 1.1.11. + +------------------------------------------------------------------- +Mon Aug 23 08:20:42 CEST 2004 - k...@suse.de + +- Update to version 1.1.9. + +------------------------------------------------------------------- +Thu Aug 19 18:48:12 CEST 2004 - sch...@suse.de + +- Fix a broken cast. + +------------------------------------------------------------------- +Wed Jul 14 16:19:09 CEST 2004 - k...@suse.de + +- Update to version 1.1.8. + +------------------------------------------------------------------- ++++ 74 more lines (skipped) ++++ between /dev/null ++++ and /work/SRC/openSUSE:13.2:Update/.libxslt.5124.new/libxslt-python.changes New Changes file: --- /dev/null 2016-04-07 01:36:33.300037506 +0200 +++ /work/SRC/openSUSE:13.2:Update/.libxslt.5124.new/libxslt.changes 2016-05-30 10:27:25.000000000 +0200 @@ -0,0 +1,812 @@ +------------------------------------------------------------------- +Fri May 20 14:01:55 UTC 2016 - kstreit...@suse.com + +- add libxslt-1.1.28-type_confusion_preprocess_attr.patch to fix + type confusion in preprocessing attributes [bnc#952474], + [CVE-2015-7995] + +------------------------------------------------------------------- +Thu Dec 6 07:59:17 UTC 2012 - pascal.ble...@opensuse.org + +- update to 1.1.28: + * fix generate-id() to avoid generating the same ID + * fix crash with empty xsl:key/@match attribute + * fix crash when passing an uninitialized variable to document() + * fix regression: default namespace not correctly used + * remove xsltTransStorageAdd and xsltTransStorageRemove from symbols.xml +- changes from 1.1.27: + * link python module with python library (Frederic Crozat) + * report errors on variable use in key + * the XSLT namespace string is a constant one + * fix handling of names in xsl:attribute + * reserved namespaces in xsl:element and xsl:attribute + * null-terminate result string of cry:rc4_decrypt + * EXSLT date normalization fix + * exit after compilation of invalid func:result + * fix for EXSLT func:function + * rewrite EXSLT string:replace to be conformant + * avoid a heap use after free error + * fix a dictionary string usage + * output should not include extraneous newlines when indent is off + * document('') fails to return stylesheets parsed from memory + * xsltproc should return an error code if xinclude fails + * forwards-compatible processing of unknown top level elements + * fix system-property with unknown namespace + * fix default template processing on namespace nodes + * fix a bug in selecting XSLT elements + * fix a memory leak with xsl:number + * fix a problem with ESXLT date:add() with January + * fix generate-id() to not expose object addresses + * allow whitespace in xsl:variable with select + * fix direct pattern matching bug + * add the saxon:systemId extension + * add an append mode to document output + * fix portability to upcoming libxml2-2.9.0 + * precompile patterns in xsl:number + +- change soname macro back to "1" and enforce it in the files list +- revert -tools subpackage for openSUSE < 12.2 as that has only + become effective since 12.2 on the package that ships with the + distribution, to avoid having a completely different package + layout in this repository as compared to the stock distribution + packages (added a Provides: libxslt-tools though) + +------------------------------------------------------------------- +Wed Apr 25 12:23:57 UTC 2012 - ch...@computersalat.de + +- add macro "soname" %{name}1 +- fix "self obsoletion" + +------------------------------------------------------------------- +Sat Mar 17 17:38:20 UTC 2012 - jeng...@medozas.de + +- Make sure to follow shlib policy; put tools in a separate package + like done in libxml2 + +------------------------------------------------------------------- +Wed Jan 4 18:44:16 UTC 2012 - jeng...@medozas.de + +- Remove redundant tags (License: field is inherited) +- Use exact EVR for Provides: + +------------------------------------------------------------------- +Wed Jan 4 10:17:35 UTC 2012 - cfarr...@suse.com + +- Tutorial contains GPL-2.0+ code. Either split this off into a subpackage or + add GPL-2.0+ as an aggregation to the main licence tag + +------------------------------------------------------------------- +Sat Dec 3 17:29:03 UTC 2011 - ag...@suse.com + +- don't run make check in QEMU builds - breaks due to massive threading + +------------------------------------------------------------------- +Mon Nov 21 15:49:37 UTC 2011 - jeng...@medozas.de + +- Remove redundant/unwanted tags/section (cf. specfile guidelines) + +------------------------------------------------------------------- +Sun Nov 20 06:25:40 UTC 2011 - co...@suse.com + +- add libtool as buildrequire to avoid implicit dependency + +------------------------------------------------------------------- +Thu Sep 8 18:33:54 CEST 2011 - dmuel...@suse.de + +- fix provides/obsoletes + +------------------------------------------------------------------- +Tue Aug 2 15:09:50 UTC 2011 - idon...@novell.com + +- Add dependency on libgcrypt-devel and libgpg-error-devel for + the libxslt-devel package + +------------------------------------------------------------------- +Mon Aug 1 09:59:25 UTC 2011 - idon...@novell.com + +- Correctly obsolete libxslt package in the baselibs.conf too + +------------------------------------------------------------------- +Fri Jul 29 09:37:02 UTC 2011 - idon...@novell.com + +- Fix build on SLE + +------------------------------------------------------------------- +Fri Jul 29 01:53:38 UTC 2011 - crrodrig...@opensuse.org + +- Fix broken requires,provides,Obsoletes causing "have choice.." + build system errors +- Remove all "la" files since they are no longer needed +- Fix -devel pacakge requires and messed up -config scripts + this may cause build fails of already broken dependant packages + that do not link all the needed libraries in an explicit manner + (This is not a bug here, it is expected to cause it) + +------------------------------------------------------------------- +Wed Jul 27 09:14:25 UTC 2011 - giecr...@stegny.2a.pl + +- package clean-up: + - include library version number in the name of the binary package + - add an alias for xsltproc (required by package xmlto) + +------------------------------------------------------------------- +Wed Jul 21 13:11:00 UTC 2010 - pu...@novell.com + +- update to libxslt-1.1.26 + - Improvements: + - Add xsltProcessOneNode to exported symbols for lxml + - Features: + - Add API versioning and various cleanups + - xsl:sort lang support using the locale + - Bug fixes + - Portability, documentation fixes +- drop libxslt-1.1.24-rc4-overflow.patch (included upstream) +- drop libxslt-1.1.24-am.patch (included upstream) + +------------------------------------------------------------------- +Sat Apr 24 11:38:22 UTC 2010 - co...@novell.com + +- buildrequire pkg-config to fix provides + +------------------------------------------------------------------- +Mon Dec 14 16:19:17 CET 2009 - jeng...@medozas.de + +- add baselibs.conf as a source + +------------------------------------------------------------------- +Sun Jun 21 10:20:38 CEST 2009 - co...@novell.com + +- fix build with automake 1.11 + +------------------------------------------------------------------- +Fri Feb 13 13:10:20 CET 2009 - co...@suse.de + +- fix file list + +------------------------------------------------------------------- +Wed Feb 11 14:45:16 CET 2009 - co...@suse.de + +- readd "la" files to fix libxslt-python build + +------------------------------------------------------------------- +Mon Jan 26 18:18:17 CET 2009 - crrodrig...@suse.de + +- remove useless "la" file +- remove static libraries, if something breaks, move libraries to /%{_lib} + instead of restoring them + +------------------------------------------------------------------- +Wed Dec 10 12:34:56 CET 2008 - o...@suse.de + +- use Obsoletes: -XXbit only for ppc64 to help solver during distupgrade + (bnc#437293) + +------------------------------------------------------------------- +Thu Oct 30 12:34:56 CET 2008 - o...@suse.de + +- obsolete old -XXbit packages (bnc#437293) + +------------------------------------------------------------------- +Fri Jul 18 16:09:54 CEST 2008 - prus...@suse.cz + +- updated to 1.1.24: + * documentation: man page fix + * bug fixes: pattern bug fix, key initialization problems, + exclusion of unknown namespaced element on top of stylesheets + python generator syntactic cleanup +- dropped obsoleted CVE-2008-1767.patch (included in update) ++++ 615 more lines (skipped) ++++ between /dev/null ++++ and /work/SRC/openSUSE:13.2:Update/.libxslt.5124.new/libxslt.changes New: ---- baselibs.conf libxslt-1.1.24-linkflags.patch libxslt-1.1.24-no-net-autobuild.patch libxslt-1.1.28-type_confusion_preprocess_attr.patch libxslt-1.1.28.tar.gz libxslt-config-fixes.patch libxslt-do_not_build_doc_nor_xsltproc.patch libxslt-python.changes libxslt-python.spec libxslt.changes libxslt.spec xslt-config.1.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libxslt-python.spec ++++++ # # spec file for package libxslt-python # # Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed # upon. The license for this file, and modifications and additions to the # file, is the same license as for the pristine package itself (unless the # license for the pristine package is not an Open Source License, in which # case the license is the MIT License). An "Open Source License" is a # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. # Please submit bugfixes or comments via http://bugs.opensuse.org/ # Name: libxslt-python Summary: Python Bindings for libxslt License: MIT Group: Development/Libraries/Python Version: 1.1.28 Release: 0 Source: ftp://xmlsoft.org/libxslt/libxslt-%{version}.tar.gz # Uncomment to save space: #NoSource: 0 Patch0: libxslt-1.1.24-linkflags.patch # pbleser: don't build the doc subdir as it's broken and we don't install # it anyway; neither build the xsltproc subdir (not packaged here, faster) Patch1: libxslt-do_not_build_doc_nor_xsltproc.patch # PATCH-FIX-UPSTREAM bnc#952474 CVE-2015-7995 kstreit...@suse.com -- fix for type confusion in preprocessing attributes Patch2: libxslt-1.1.28-type_confusion_preprocess_attr.patch BuildRoot: %{_tmppath}/%{name}-%{version}-build %{py_requires} Url: http://xmlsoft.org/XSLT/ #BuildArch: noarch BuildRequires: libgcrypt-devel BuildRequires: libgpg-error-devel BuildRequires: libtool BuildRequires: libxml2-devel BuildRequires: libxml2-python BuildRequires: python-devel BuildRequires: python-xml %if 0%{?suse_version} >= 1220 BuildRequires: libxslt-tools Requires: libxslt1 = %{version} %else BuildRequires: libxslt1 Requires: libxslt1 = %{version} %endif %description The libxslt-python package contains a module that permits applications written in the Python programming language to use the interface supplied by the libxslt library to apply XSLT transformations. This library allows parsing stylesheets. It uses the libxml2-python to load and save XML and HTML files. Direct access to XPath and the XSLT transformation context are possible. Thus it is possible to extend the XSLT language with XPath functions written in Python. %prep %setup -q -n libxslt-%{version} %patch0 %patch1 %patch2 -p1 %build autoreconf --force --install %configure --with-python=%__python --with-pic --disable-static --disable-silent-rules make %{?_smp_mflags} PYTHON_SITE_PACKAGES=%{py_sitedir} pythondir=%{py_sitedir} %install make install PYTHON_SITE_PACKAGES=%{py_sitedir} pythondir=%{py_sitedir} DESTDIR=$RPM_BUILD_ROOT # Unwanted doc stuff rm -fr $RPM_BUILD_ROOT%{_datadir}/doc # #223696 find %{buildroot} -type f -name "*.la" -print -delete # Stuff we won't package rm -rf %{buildroot}/%{_bindir}/* %{buildroot}/%{_libdir}/lib** %{buildroot}/%{_includedir}/* rm -rf %{buildroot}/%{_mandir}/* %{buildroot}/%{_libdir}/pkgconfig/* rm -rf %{buildroot}/%{_libdir}/xsltConf.sh %{buildroot}/%{_datadir}/aclocal/libxslt.m4 %files %defattr(-, root, root) %{py_sitedir}/* %doc python/libxslt-python-api.xml %doc python/tests/*.py %doc python/tests/*.xml %doc python/tests/*.xsl %changelog ++++++ libxslt.spec ++++++ # # spec file for package libxslt # # Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed # upon. The license for this file, and modifications and additions to the # file, is the same license as for the pristine package itself (unless the # license for the pristine package is not an Open Source License, in which # case the license is the MIT License). An "Open Source License" is a # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. # Please submit bugfixes or comments via http://bugs.opensuse.org/ # Name: libxslt %define soname 1 %define exslt_soname 0 Version: 1.1.28 Release: 0 Summary: XSL Transformation Library License: MIT and GPL-2.0+ Group: System/Libraries # Url: http://xmlsoft.org/XSLT/ Source: ftp://xmlsoft.org/libxslt/libxslt-%{version}.tar.gz Source2: baselibs.conf Source3: xslt-config.1.gz Patch0: %{name}-1.1.24-no-net-autobuild.patch Patch1: libxslt-config-fixes.patch # PATCH-FIX-UPSTREAM bnc#952474 CVE-2015-7995 kstreit...@suse.com -- fix for type confusion in preprocessing attributes Patch2: libxslt-1.1.28-type_confusion_preprocess_attr.patch BuildRoot: %{_tmppath}/%{name}-%{version}-build BuildRequires: libgcrypt-devel BuildRequires: libgpg-error-devel BuildRequires: libtool BuildRequires: libxml2-devel BuildRequires: pkg-config # bug437293 %ifarch ppc64 Obsoletes: libxslt-64bit %endif %description This C library allows you to transform XML files into other XML files (or HTML, text, and more) using the standard XSLT stylesheet transformation mechanism. It is based on libxml (version 2) for XML parsing, tree manipulation, and XPath support. It is written in plain C, making as few assumptions as possible and sticks closely to ANSI C/POSIX for easy embedding. Although not primarily designed with performance in mind, libxslt seems to be a relatively fast processor. It also includes full support for the EXSLT set of extension functions as well as some common extensions present in other XSLT engines. %package -n %{name}%{soname} Summary: XSL Transformation Library License: LGPL-2.1+ Group: System/Libraries %if 0%{?suse_version} < 1220 Provides: %{name}-tools = %{version} %endif %description -n %{name}%{soname} This C library allows you to transform XML files into other XML files (or HTML, text, and more) using the standard XSLT stylesheet transformation mechanism. It is based on libxml (version 2) for XML parsing, tree manipulation, and XPath support. It is written in plain C, making as few assumptions as possible and sticks closely to ANSI C/POSIX for easy embedding. Although not primarily designed with performance in mind, libxslt seems to be a relatively fast processor. It also includes full support for the EXSLT set of extension functions as well as some common extensions present in other XSLT engines. The package comes with xsltproc, a command line interface to the XSLT engine. %package devel Summary: Include Files and Libraries mandatory for Development License: LGPL-2.1+ Group: Development/Libraries/C and C++ # bug437293 %ifarch ppc64 Obsoletes: %{name}-devel-64bit %endif %if 0%{?suse_version} >= 1220 Requires: %{name}-tools = %version %endif Requires: %{name}%{soname} = %{version} Requires: glibc-devel Requires: libgcrypt-devel Requires: libgpg-error-devel #libxml is automatically required with pkgconfig %description devel This package contains all necessary include files and libraries needed to develop applications that require these. %if 0%{?suse_version} >= 1220 %package tools Summary: Extended Stylesheet Language (XSL) Transformation utilities License: MIT and GPL-2.0+ Group: Development/Tools Provides: xsltproc = %version-%release # O/P added during 12.2 dev: Obsoletes: %{name} < %version-%release Provides: %{name} = %version-%release %description tools This package contains xsltproc, a command line interface to the XSLT engine. %endif %prep %setup -q %patch0 %patch1 %patch2 -p1 %build autoreconf --force --install --verbose %configure --disable-static --with-pic --without-python --disable-silent-rules make %{?_smp_mflags} %check %if ! 0%{?qemu_user_space_build} make check %endif %install %makeinstall # Unwanted doc stuff rm -fr %{buildroot}%{_datadir}/doc # the manual page is required install -ma=r '-t%{buildroot}%{_mandir}/man1' '%{SOURCE3}' #kill all "la" files find %{buildroot} -type f -name "*.la" -print -delete %post -n %{name}%{soname} -p /sbin/ldconfig %postun -n %{name}%{soname} -p /sbin/ldconfig %files -n %{name}%{soname} %defattr(-, root, root) %{_libdir}/libxslt.so.%{soname} %{_libdir}/libxslt.so.%{soname}.* %{_libdir}/libexslt.so.%{exslt_soname} %{_libdir}/libexslt.so.%{exslt_soname}.* %if 0%{?suse_version} >= 1220 %files tools %defattr(-,root,root) %endif %doc AUTHORS NEWS README COPYING* Copyright TODO FEATURES %{_bindir}/xsltproc %doc %{_mandir}/man1/xsltproc.* %files devel %defattr(-, root, root) %{_libdir}/libxslt.so %{_libdir}/libexslt.so %{_libdir}/*.sh %{_libdir}/pkgconfig/libxslt.pc %{_libdir}/pkgconfig/libexslt.pc %{_includedir}/* %{_datadir}/aclocal/* %{_bindir}/xslt-config %doc %{_mandir}/man1/xslt-config.* %doc %{_mandir}/man3/* # not available doc/*.png %doc doc/*.html doc/html doc/tutorial doc/*.gif %changelog ++++++ baselibs.conf ++++++ libxslt1 obsoletes "libxslt-<targettype>" libxslt-devel requires -libxslt-<targettype> requires "libxslt1-<targettype> = <version>" obsoletes "libxslt-devel-<targettype> < <version>" provides "libxslt-devel-<targettype> = <version>" ++++++ libxslt-1.1.24-linkflags.patch ++++++ Index: python/Makefile.am =================================================================== --- python/Makefile.am.orig 2009-05-12 08:29:34.000000000 +0200 +++ python/Makefile.am 2010-07-21 15:22:21.000000000 +0200 @@ -24,7 +24,7 @@ EXTRA_DIST = \ libxslt-python-api.xml \ $(DOCS) -libxsltmod_la_LDFLAGS = $(WIN32_EXTRA_LDFLAGS) -module -avoid-version +libxsltmod_la_LDFLAGS = $(WIN32_EXTRA_LDFLAGS) $(mylibs) -module -avoid-version if WITH_PYTHON mylibs = \ ++++++ libxslt-1.1.24-no-net-autobuild.patch ++++++ --- xsltproc/xsltproc.c +++ xsltproc/xsltproc.c @@ -544,7 +544,7 @@ sec = xsltNewSecurityPrefs(); xsltSetDefaultSecurityPrefs(sec); - defaultEntityLoader = xmlGetExternalEntityLoader(); + defaultEntityLoader = getenv("RPM_PACKAGE_NAME") ? xmlNoNetExternalEntityLoader : xmlGetExternalEntityLoader(); xmlSetExternalEntityLoader(xsltprocExternalEntityLoader); for (i = 1; i < argc; i++) { ++++++ libxslt-1.1.28-type_confusion_preprocess_attr.patch ++++++ >From 7ca19df892ca22d9314e95d59ce2abdeff46b617 Mon Sep 17 00:00:00 2001 From: Daniel Veillard <veill...@redhat.com> Date: Thu, 29 Oct 2015 19:33:23 +0800 Subject: Fix for type confusion in preprocessing attributes CVE-2015-7995 http://www.openwall.com/lists/oss-security/2015/10/27/10 We need to check that the parent node is an element before dereferencing its namespace --- libxslt/preproc.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/libxslt/preproc.c b/libxslt/preproc.c index 0eb80a0..7f69325 100644 --- a/libxslt/preproc.c +++ b/libxslt/preproc.c @@ -2249,7 +2249,8 @@ xsltStylePreCompute(xsltStylesheetPtr style, xmlNodePtr inst) { } else if (IS_XSLT_NAME(inst, "attribute")) { xmlNodePtr parent = inst->parent; - if ((parent == NULL) || (parent->ns == NULL) || + if ((parent == NULL) || + (parent->type != XML_ELEMENT_NODE) || (parent->ns == NULL) || ((parent->ns != inst->ns) && (!xmlStrEqual(parent->ns->href, inst->ns->href))) || (!xmlStrEqual(parent->name, BAD_CAST "attribute-set"))) { -- cgit v0.12 ++++++ libxslt-config-fixes.patch ++++++ --- xsltConf.sh.in.orig 2012-12-06 08:43:13.843408831 +0100 +++ xsltConf.sh.in 2012-12-06 08:43:22.617391851 +0100 @@ -2,6 +2,6 @@ # Configuration file for using the xslt library # XSLT_LIBDIR="@XSLT_LIBDIR@" -XSLT_LIBS="@XSLT_LIBS@" +XSLT_LIBS="-lxslt" XSLT_INCLUDEDIR="@XSLT_INCLUDEDIR@" MODULE_VERSION="xslt-@VERSION@" --- xslt-config.in.orig 2012-12-06 08:42:48.797457330 +0100 +++ xslt-config.in 2012-12-06 08:43:10.402415492 +0100 @@ -89,7 +89,7 @@ shift done -the_libs="@XSLT_LIBDIR@ @XSLT_LIBS@ @EXTRA_LIBS@" +the_libs="-lxslt" if test "$includedir" != "/usr/include"; then the_flags="$the_flags -I$includedir `@XML_CONFIG@ --cflags`" else ++++++ libxslt-do_not_build_doc_nor_xsltproc.patch ++++++ --- Makefile.am.orig 2012-09-04 16:26:23.000000000 +0200 +++ Makefile.am 2012-12-06 09:15:11.548926594 +0100 @@ -1,12 +1,10 @@ SUBDIRS = \ libxslt \ libexslt \ - xsltproc \ - doc \ $(PYTHON_SUBDIR) \ tests -DIST_SUBDIRS = libxslt libexslt xsltproc python doc tests +DIST_SUBDIRS = libxslt libexslt python tests confexecdir=$(libdir) confexec_DATA = xsltConf.sh