Skip to content

libxml2: Update to v2.15.3 - #10203

Open
androidnisse wants to merge 212 commits into
getsolus:mainfrom
androidnisse:libxml2
Open

libxml2: Update to v2.15.3#10203
androidnisse wants to merge 212 commits into
getsolus:mainfrom
androidnisse:libxml2

Conversation

@androidnisse

@androidnisse androidnisse commented Aug 16, 2026

Copy link
Copy Markdown
Contributor

Summary

  • schemas: Fix relative schemaLocation resolution in XSI assembly in streaming mode
  • xmlreader: propagate reader resource loaders to validator parsers
  • python: Make python bindings python2 compatible
  • xmlregexp: Fix escape-sequence character range matching
  • xmlreader: Free input in xmlReaderForFd (memory-leak)
  • xmlstring: Free cur on every error for xmlStrncat (memory-leak)
  • catalog: Free xmlCatalogResolveCache on cleanup (memory leak)
  • Fix nanohttp.c build when --without-output
  • test: fix mismatched signed/unsigned comparison

Security

  • parser: Pass userData to SAX text callbacks in xmlParseReference (type-confusion)
  • entities: copy children in xmlCopyEntity
  • c14n: Fix Type confusion in xmlC14NProcessAttrsAxis
  • python: Do not decref string after adding to the list (double-free / use-after-free)
  • c14n: Reuse tmp_str, xmlStrcat reallocates *cur (double-free)

Test Plan

  • Ran tests.

Checklist

  • Package was built and tested against unstable
  • This change could gainfully be listed in the weekly sync notes once merged
  • I agree to license this contribution and all my previous contributions under the licensing terms in LICENSE.md and have the power and authority to grant those licenses.

@github-project-automation github-project-automation Bot moved this to Triage in Solus Aug 16, 2026
@androidnisse
androidnisse force-pushed the libxml2 branch 3 times, most recently from b0ed1fa to c33ffab Compare August 21, 2026 14:44
@androidnisse
androidnisse force-pushed the libxml2 branch 15 times, most recently from 1503907 to 289b02c Compare August 31, 2026 08:04
@androidnisse
androidnisse force-pushed the libxml2 branch 2 times, most recently from 27be3a4 to 5d112a6 Compare August 31, 2026 12:41
@EbonJaeger EbonJaeger added Topic: Sync Notes This PR/Issue can be highlighted in sync notes Security Security issue labels Aug 31, 2026
**Summary**
- schemas: Fix relative schemaLocation resolution in XSI assembly in streaming mode
- xmlreader: propagate reader resource loaders to validator parsers
- python: Make python bindings python2 compatible
- xmlregexp: Fix escape-sequence character range matching
- xmlreader: Free input in xmlReaderForFd (memory-leak)
- xmlstring: Free cur on every error for xmlStrncat (memory-leak)
- catalog: Free xmlCatalogResolveCache on cleanup (memory leak)
- Fix nanohttp.c build when --without-output
- test: fix mismatched signed/unsigned comparison

**Security**
- parser: Pass userData to SAX text callbacks in xmlParseReference (type-confusion)
- entities: copy children in xmlCopyEntity
- c14n: Fix Type confusion in xmlC14NProcessAttrsAxis
- python: Do not decref string after adding to the list (double-free / use-after-free)
- c14n: Reuse tmp_str, xmlStrcat reallocates *cur (double-free)
**Summary**
- Rebuild for libxml2
**Summary**
- Rebuild for libxml2
@joebonrichie

Copy link
Copy Markdown
Contributor

Land this after sync

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Security Security issue Topic: Sync Notes This PR/Issue can be highlighted in sync notes

Projects

Status: Triage

Development

Successfully merging this pull request may close these issues.

3 participants