libxml2 2.12.7+dfsg+really2.9.14-0.4 source package in Ubuntu

Changelog

libxml2 (2.12.7+dfsg+really2.9.14-0.4) unstable; urgency=medium

  * Non-maintainer upload.

  * Don't build with ICU. Closes: #1092484.

    libxml's README.md states:

    [ICU](https://icu.unicode.org/), a Unicode library. Mainly
    useful as an alternative to iconv on Windows. Unnecessary
    on most other systems.

    ICU 76.1 requires to be built with -std=c++17 or -std=gnu++17 or
    higher.  However including the ICU headers in the libxml2 headers,
    breaks builds with older C++ standards, most likely leading to
    some unrelated build failures for packages that don't rely on ICU,
    but are using libxml2.

  * Import security updates from Ubuntu:
    - SECURITY UPDATE: use-after-free in xmlXIncludeAddNode
      + debian/patches/CVE-2022-49043.patch: fix UaF in xinclude.c.
      + CVE-2022-49043. Closes: #1094238.
    - SECURITY UPDATE: buffer overread in xmllint
      + debian/patches/CVE-2024-34459.patch: fix buffer issue when using
        htmlout option in xmllint.c.
      + CVE-2024-34459. Closes: #1071162.
    - SECURITY UPDATE: use-after-free
      + debian/patches/CVE-2024-56171.patch: Fix use-after-free after
        xmlSchemaItemListAdd.
      + CVE-2024-56171. Closes: #1098320.
    - SECURITY UPDATE: stack-based buffer overflow
      + debian/patches/CVE-2025-24928-pre1.patch: Check for NULL node->name
        in xmlSnprintfElements.
      + debian/patches/CVE-2025-24928.patch: Fix stack-buffer-overflow in
        xmlSnprintfElements.
      + CVE-2025-24928. Closes: #1098321.
    - SECURITY UPDATE: NULL pointer dereference
      + debian/patches/CVE-2025-27113.patch: Fix compilation of explicit
        child axis.
      + CVE-2025-27113. Closes: #1098322.

 -- Matthias Klose <email address hidden>  Thu, 27 Mar 2025 11:54:17 +0100

Upload details

Uploaded by:
Debian XML/SGML Group
Uploaded to:
Sid
Original maintainer:
Debian XML/SGML Group
Architectures:
any all
Section:
libs
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Plucky release main libs

Downloads

File Size SHA-256 Checksum
libxml2_2.12.7+dfsg+really2.9.14-0.4.dsc 3.0 KiB ed52ed86b0dbc448c79490829aa8f6b73abf37794e3be27d746a8aa1c90a94e0
libxml2_2.12.7+dfsg+really2.9.14.orig.tar.xz 2.2 MiB 4fe913dec8b1ab89d13b489b419a8203176ea39e931eaa0d25b17eafb9c279e9
libxml2_2.12.7+dfsg+really2.9.14-0.4.debian.tar.xz 37.4 KiB 02dd4c440b5b8bd9376030b5e224a0da707d60e649eec28787b35ebdeebb4f0d

No changes file available.

Binary packages built by this source

libxml2: GNOME XML library

 XML is a metalanguage to let you design your own markup language.
 A regular markup language defines a way to describe information in
 a certain class of documents (eg HTML). XML lets you define your
 own customized markup languages for many classes of document. It
 can do this because it's written in SGML, the international standard
 metalanguage for markup languages.
 .
 This package provides a library providing an extensive API to handle
 such XML data files.

libxml2-dbgsym: debug symbols for libxml2
libxml2-dev: GNOME XML library - development files

 XML is a metalanguage to let you design your own markup language.
 A regular markup language defines a way to describe information in
 a certain class of documents (eg HTML). XML lets you define your
 own customized markup languages for many classes of document. It
 can do this because it's written in SGML, the international standard
 metalanguage for markup languages.
 .
 Install this package if you wish to develop your own programs using
 the GNOME XML library.

libxml2-doc: GNOME XML library - documentation

 XML is a metalanguage to let you design your own markup language.
 A regular markup language defines a way to describe information in
 a certain class of documents (eg HTML). XML lets you define your
 own customized markup languages for many classes of document. It
 can do this because it's written in SGML, the international standard
 metalanguage for markup languages.
 .
 This package contains general information about the GNOME XML library
 and more specific API references.

libxml2-utils: GNOME XML library - utilities

 XML is a metalanguage to let you design your own markup language.
 A regular markup language defines a way to describe information in
 a certain class of documents (eg HTML). XML lets you define your
 own customized markup languages for many classes of document. It
 can do this because it's written in SGML, the international standard
 metalanguage for markup languages.
 .
 This package provides xmllint, a tool for validating and reformatting
 XML documents, and xmlcatalog, a tool to parse and manipulate XML or
 SGML catalog files.

libxml2-utils-dbgsym: debug symbols for libxml2-utils
python3-libxml2: GNOME XML library - Python3 bindings

 XML is a metalanguage to let you design your own markup language.
 A regular markup language defines a way to describe information in
 a certain class of documents (eg HTML). XML lets you define your
 own customized markup languages for many classes of document. It
 can do this because it's written in SGML, the international standard
 metalanguage for markup languages.
 .
 This package contains the files needed to use the GNOME XML library
 in Python3 programs.

python3-libxml2-dbgsym: debug symbols for python3-libxml2