Index index by Group index by Distribution index by Vendor index by creation date index by Name Mirrors Help Search

libxml2-python-2.7.6-21.el6_8.1 RPM for x86_64

From CentOS 6.9 for x86_64 / Packages

Name: libxml2-python Distribution: Unknown
Version: 2.7.6 Vendor: CentOS
Release: 21.el6_8.1 Build date: Thu Jun 23 10:53:26 2016
Group: Development/Libraries Build host: worker1.bsys.centos.org
Size: 1976700 Source RPM: libxml2-2.7.6-21.el6_8.1.src.rpm
Packager: CentOS BuildSystem <http://bugs.centos.org>
Url: http://xmlsoft.org/
Summary: Python bindings for the libxml2 library
The libxml2-python package contains a module that permits applications
written in the Python programming language to use the interface
supplied by the libxml2 library to manipulate XML files.

This library allows to manipulate XML files. It includes support
to read, modify and write XML and HTML files. There is DTDs support
this includes parsing and validation even with complex DTDs, either
at parse time or later once the document has been modified.

Provides

Requires

License

MIT

Changelog

* Tue Jun 07 2016 Daniel Veillard <veillard@redhat.com> - 2.7.6-21.el6.8.1
  - Heap-based buffer overread in xmlNextChar (CVE-2016-1762)
  - Bug 763071: Heap-buffer-overflow in xmlStrncat <https://bugzilla.gnome.org/show_bug.cgi?id=763071> (CVE-2016-1834)
  - Bug 757711: Heap-buffer-overflow in xmlFAParsePosCharGroup <https://bugzilla.gnome.org/show_bug.cgi?id=757711> (CVE-2016-1840)
  - Bug 758588: Heap-based buffer overread in xmlParserPrintFileContextInternal <https://bugzilla.gnome.org/show_bug.cgi?id=758588> (CVE-2016-1838)
  - Bug 758605: Heap-based buffer overread in xmlDictAddString <https://bugzilla.gnome.org/show_bug.cgi?id=758605> (CVE-2016-1839)
  - Bug 759398: Heap use-after-free in xmlDictComputeFastKey <https://bugzilla.gnome.org/show_bug.cgi?id=759398> (CVE-2016-1836)
  - Fix inappropriate fetch of entities content (CVE-2016-4449)
  - Heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral (CVE-2016-1837)
  - Heap use-after-free in xmlSAX2AttributeNs (CVE-2016-1835)
  - Heap-based buffer-underreads due to xmlParseName (CVE-2016-4447)
  - Heap-based buffer overread in htmlCurrentChar (CVE-2016-1833)
  - Add missing increments of recursion depth counter to XML parser. (CVE-2016-3705)
  - Avoid building recursive entities (CVE-2016-3627)
  - Fix some format string warnings with possible format string vulnerability (CVE-2016-4448)
  - More format string warnings with possible format string vulnerability (CVE-2016-4448)
* Sun Jan 24 2016 Daniel Veillard <veillard@redhat.com> - libxml2-2.7.6-21.el6.8
  - Fix large parse of file from memory (rhbz#862969)
* Mon Nov 30 2015 Daniel Veillard <veillard@redhat.com> - 2.7.6-20.1
  - Fix a series of CVEs (rhbz#1286495)
  - CVE-2015-7941 Cleanup conditional section error handling
  - CVE-2015-8317 Fail parsing early on if encoding conversion failed
  - CVE-2015-7942 Another variation of overflow in Conditional sections
  - CVE-2015-7942 Fix an error in previous Conditional section patch
  - Fix parsing short unclosed comment uninitialized access
  - CVE-2015-7498 Avoid processing entities after encoding conversion failures
  - CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
  - CVE-2015-5312 Another entity expansion issue
  - CVE-2015-7499 Add xmlHaltParser() to stop the parser
  - CVE-2015-7499 Detect incoherency on GROW
  - CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
  - CVE-2015-8242 Buffer overead with HTML parser in push mode
  - Libxml violates the zlib interface and crashes
* Wed May 06 2015 Daniel Veillard <veillard@redhat.com> - libxml2-2.7.6-20.el6
  - CVE-2015-1819 Enforce the reader to run in constant memory(rhbz#1214163)
* Mon Mar 23 2015 Daniel Veillard <veillard@redhat.com> - libxml2-2.7.6-19.el6
  - Stop parsing on entities boundaries errors
  - Fix missing entities after CVE-2014-3660 fix (rhbz#1149086)
* Mon Mar 16 2015 Daniel Veillard <veillard@redhat.com> - libxml2-2.7.6-18.el6
  - CVE-2014-3660 denial of service via recursive entity expansion (rhbz#1149086)
  - Fix html serialization error and htmlSetMetaEncoding (rhbz#1004513)
* Wed Jun 11 2014 Daniel Veillard <veillard@redhat.com> - libxml2-2.7.6-17.el6
  - Fix a set of regressions introduced in CVE-2014-0191 (rhbz#1105011)
* Tue May 06 2014 Daniel Veillard <veillard@redhat.com> - libxml2-2.7.6-16.el6
  - Improve handling of xmlStopParser(CVE-2013-2877)
* Tue May 06 2014 Daniel Veillard <veillard@redhat.com> - libxml2-2.7.6-15.el6
  - Do not fetch external parameter entities (CVE-2014-0191)
* Wed Jun 05 2013 Daniel Veillard <veillard@redhat.com> - libxml2-2.7.6-14.el6
  - Fix a regression in 2.9.0 breaking validation while streaming (rhbz#863166)
* Tue Feb 19 2013 Daniel Veillard <veillard@redhat.com> - 2.7.6-13.el6
  - detect and stop excessive entities expansion upon replacement (rhbz#912575)
* Thu Nov 29 2012 Daniel Veillard <veillard@redhat.com> - 2.7.6-12.el6
  - fix out of range heap access (CVE-2012-5134)
* Wed Sep 05 2012 Daniel Veillard <veillard@redhat.com> - 2.7.6-11.el6
  - Change the XPath code to percolate allocation error (CVE-2011-1944)
* Wed Aug 22 2012 Daniel Veillard <veillard@redhat.com> - 2.7.6-10.el6
  - Fix an off by one pointer access (CVE-2011-3102)
* Tue Aug 21 2012 Daniel Veillard <veillard@redhat.com> - 2.7.6-9.el6
  - Fix a failure to report xmlreader parsing failures
  - Fix parser local buffers size problems (rhbz#843742)
  - Fix entities local buffers size problems (rhbz#843742)
  - Fix an error in previous commit (rhbz#843742)
  - Do not fetch external parsed entities
  - Impose a reasonable limit on attribute size (rhbz#843742)
  - Impose a reasonable limit on comment size (rhbz#843742)
  - Impose a reasonable limit on PI size (rhbz#843742)
  - Cleanups and new limit APIs for dictionaries (rhbz#843742)
  - Introduce some default parser limits (rhbz#843742)
  - Implement some default limits in the XPath module
  - Fixup limits parser (rhbz#843742)
  - Enforce XML_PARSER_EOF state handling through the parser
  - Avoid quadratic behaviour in some push parsing cases (rhbz#843742)
  - More avoid quadratic behaviour (rhbz#843742)
  - Strengthen behaviour of the push parser in problematic situations (rhbz#843742)
  - More fixups on the push parser behaviour (rhbz#843742)
  - Fix a segfault on XSD validation on pattern error
  - Fix an unimplemented part in RNG value validation
* Wed Feb 15 2012 Daniel Veillard <veillard@redhat.com> - 2.7.6-8.el6
  - remove chunk in patch related to configure.in as it breaks rebuild
  - Resolves: rhbz#788846
* Mon Feb 13 2012 Daniel Veillard <veillard@redhat.com> - 2.7.6-7.el6
  - fix previous build to force compilation of randomization code
  - Resolves: rhbz#788846
* Fri Feb 10 2012 Daniel Veillard <veillard@redhat.com> - 2.7.6-6.el6
  - adds randomization to hash and dict structures CVE-2012-0841
  - Resolves: rhbz#788846
* Fri Jan 06 2012 Daniel Veillard <veillard@redhat.com> - 2.7.6-5.el6
  - Make sure the parser returns when getting a Stop order CVE-2011-3905
  - Fix an allocation error when copying entities CVE-2011-3919
  - Resolves: rhbz#771910
* Tue Oct 11 2011 Daniel Veillard <veillard@redhat.com> - 2.7.6-4
  - Fixes another XPath problem CVE-2011-2834
  - Resolves: rhbz#732335
* Mon Aug 22 2011 Daniel Veillard <veillard@redhat.com> - 2.7.6-3
  - Fixes various other issues in 2.7.6 XPath evaluation
  - Resolves: rhbz#732335
* Tue Jun 28 2011 Daniel Veillard <veillard@redhat.com> - 2.7.6-2
  - Fix a potential crasher in XPath or XSLT, CVE-2011-1944
  - Resolves: rhbz#710397
* Tue Oct 06 2009 Daniel Veillard <veillard@redhat.com> - 2.7.6-1
  - Upstream release of 2.7.6
  - restore thread support off by default in 2.7.5
* Thu Sep 24 2009 Daniel Veillard <veillard@redhat.com> - 2.7.5-1
  - Upstream release of 2.7.5
  - fix a couple of Relax-NG validation problems
  - couple more fixes
* Tue Sep 15 2009 Daniel Veillard <veillard@redhat.com> - 2.7.4-2
  - fix a problem with little data at startup affecting inkscape #523002
* Thu Sep 10 2009 Daniel Veillard <veillard@redhat.com> - 2.7.4-1
  - upstream release 2.7.4
  - symbol versioning of libxml2 shared libs
  - very large number of bug fixes
* Mon Aug 10 2009 Daniel Veillard <veillard@redhat.com> - 2.7.3-4
  - two patches for parsing problems CVE-2009-2414 and CVE-2009-2416
* Sat Jul 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.7.3-3
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
* Wed Feb 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.7.3-2
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
* Sun Jan 18 2009 Daniel Veillard <veillard@redhat.com> - 2.7.3-1
  - new release 2.7.3
  - limit default max size of text nodes
  - special parser mode for PHP
  - bug fixes and more compiler checks
* Wed Dec 03 2008 Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com> - 2.7.2-7
  - Pull back into Python 2.6
* Wed Dec 03 2008 Caolán McNamara <caolanm@redhat.com> - 2.7.2-6
  - AutoProvides requires BuildRequires pkgconfig
* Wed Dec 03 2008 Caolán McNamara <caolanm@redhat.com> - 2.7.2-5
  - rebuild to get provides(libxml-2.0) into HEAD rawhide
* Mon Dec 01 2008 Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com> - 2.7.2-4
  - Rebuild for pkgconfig logic
* Fri Nov 28 2008 Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com> - 2.7.2-3
  - Rebuild for Python 2.6
* Wed Nov 12 2008 Daniel Veillard <veillard@redhat.com> - 2.7.2-2.fc11
  - two patches for size overflows problems CVE-2008-4225 and CVE-2008-4226
* Fri Oct 03 2008 Daniel Veillard <veillard@redhat.com> 2.7.2-1.fc10
  - new release 2.7.2
  - Fixes the known problems in 2.7.1
  - increase the set of options when saving documents
* Thu Oct 02 2008 Daniel Veillard <veillard@redhat.com> 2.7.1-2.fc10
  - fix a nasty bug in 2.7.x, http://bugzilla.gnome.org/show_bug.cgi?id=554660
* Mon Sep 01 2008 Daniel Veillard <veillard@redhat.com> 2.7.1-1.fc10
  - fix python serialization which was broken in 2.7.0
  - Resolve: rhbz#460774
* Sat Aug 30 2008 Daniel Veillard <veillard@redhat.com> 2.7.0-1.fc10
  - upstream release of 2.7.0
  - switch to XML 1.0 5th edition
  - switch to RFC 3986 for URI parsing
  - better entity handling
  - option to remove hardcoded limitations in the parser
  - more testing
  - a new API to allocate entity nodes
  - and lot of fixes and clanups
* Mon Aug 25 2008 Daniel Veillard <veillard@redhat.com> 2.6.32-4.fc10
  - fix for entities recursion problem
  - Resolve: rhbz#459714
* Fri May 30 2008 Daniel Veillard <veillard@redhat.com> 2.6.32-3.fc10
  - cleanup based on Fedora packaging guidelines, should fix #226079
  - separate a -static package
* Thu May 15 2008 Daniel Veillard <veillard@redhat.com> 2.6.32-2.fc10
  - try to fix multiarch problems like #440206
* Tue Apr 08 2008 Daniel Veillard <veillard@redhat.com> 2.6.32-1.fc9
  - upstream release 2.6.32 see http://xmlsoft.org/news.html
  - many bug fixed upstream
* Wed Feb 20 2008 Fedora Release Engineering <rel-eng@fedoraproject.org> - 2.6.31-2
  - Autorebuild for GCC 4.3
* Fri Jan 11 2008 Daniel Veillard <veillard@redhat.com> 2.6.31-1.fc9
  - upstream release 2.6.31 see http://xmlsoft.org/news.html
  - many bug fixed upstream
* Thu Aug 23 2007 Daniel Veillard <veillard@redhat.com> 2.6.30-1
  - upstream release 2.6.30 see http://xmlsoft.org/news.html
  - many bug fixed upstream
* Tue Jun 12 2007 Daniel Veillard <veillard@redhat.com> 2.6.29-1
  - upstream release 2.6.29 see http://xmlsoft.org/news.html
  - many bug fixed upstream
* Wed May 16 2007 Matthias Clasen <mclasen@redhat.com> 2.6.28-2
  - Bump revision to fix N-V-R problem
* Tue Apr 17 2007 Daniel Veillard <veillard@redhat.com> 2.6.28-1
  - upstream release 2.6.28 see http://xmlsoft.org/news.html
  - many bug fixed upstream
* Thu Dec 07 2006 Jeremy Katz <katzj@redhat.com> - 2.6.27-2
  - rebuild against python 2.5
* Wed Oct 25 2006 Daniel Veillard <veillard@redhat.com> 2.6.27-1
  - upstream release 2.6.27 see http://xmlsoft.org/news.html
  - very large amount of bug fixes reported upstream
* Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 2.6.26-2.1.1
  - rebuild
* Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 2.6.26-2.1
  - rebuild
* Wed Jun 07 2006 Daniel Veillard <veillard@redhat.com> 2.6.26-2
  - fix bug #192873
* Tue Jun 06 2006 Daniel Veillard <veillard@redhat.com> 2.6.26-1
  - upstream release 2.6.26 see http://xmlsoft.org/news.html
* Tue Jun 06 2006 Daniel Veillard <veillard@redhat.com>
  - upstream release 2.6.25 broken, do not ship !

Files

/usr/lib64/python2.6/site-packages/drv_libxml2.py
/usr/lib64/python2.6/site-packages/drv_libxml2.pyc
/usr/lib64/python2.6/site-packages/drv_libxml2.pyo
/usr/lib64/python2.6/site-packages/libxml2.py
/usr/lib64/python2.6/site-packages/libxml2.pyc
/usr/lib64/python2.6/site-packages/libxml2.pyo
/usr/lib64/python2.6/site-packages/libxml2mod.a
/usr/lib64/python2.6/site-packages/libxml2mod.la
/usr/lib64/python2.6/site-packages/libxml2mod.so
/usr/share/doc/libxml2-python-2.7.6
/usr/share/doc/libxml2-python-2.7.6/TODO
/usr/share/doc/libxml2-python-2.7.6/apibuild.py
/usr/share/doc/libxml2-python-2.7.6/attribs.py
/usr/share/doc/libxml2-python-2.7.6/build.py
/usr/share/doc/libxml2-python-2.7.6/compareNodes.py
/usr/share/doc/libxml2-python-2.7.6/ctxterror.py
/usr/share/doc/libxml2-python-2.7.6/cutnpaste.py
/usr/share/doc/libxml2-python-2.7.6/dtdvalid.py
/usr/share/doc/libxml2-python-2.7.6/error.py
/usr/share/doc/libxml2-python-2.7.6/inbuf.py
/usr/share/doc/libxml2-python-2.7.6/index.py
/usr/share/doc/libxml2-python-2.7.6/indexes.py
/usr/share/doc/libxml2-python-2.7.6/libxml2class.txt
/usr/share/doc/libxml2-python-2.7.6/nsdel.py
/usr/share/doc/libxml2-python-2.7.6/outbuf.py
/usr/share/doc/libxml2-python-2.7.6/push.py
/usr/share/doc/libxml2-python-2.7.6/pushSAX.py
/usr/share/doc/libxml2-python-2.7.6/pushSAXhtml.py
/usr/share/doc/libxml2-python-2.7.6/python.html
/usr/share/doc/libxml2-python-2.7.6/reader.py
/usr/share/doc/libxml2-python-2.7.6/reader2.py
/usr/share/doc/libxml2-python-2.7.6/reader3.py
/usr/share/doc/libxml2-python-2.7.6/reader4.py
/usr/share/doc/libxml2-python-2.7.6/reader5.py
/usr/share/doc/libxml2-python-2.7.6/reader6.py
/usr/share/doc/libxml2-python-2.7.6/reader7.py
/usr/share/doc/libxml2-python-2.7.6/reader8.py
/usr/share/doc/libxml2-python-2.7.6/readererr.py
/usr/share/doc/libxml2-python-2.7.6/readernext.py
/usr/share/doc/libxml2-python-2.7.6/regexp.py
/usr/share/doc/libxml2-python-2.7.6/relaxng.py
/usr/share/doc/libxml2-python-2.7.6/resolver.py
/usr/share/doc/libxml2-python-2.7.6/schema.py
/usr/share/doc/libxml2-python-2.7.6/serialize.py
/usr/share/doc/libxml2-python-2.7.6/sync.py
/usr/share/doc/libxml2-python-2.7.6/thread2.py
/usr/share/doc/libxml2-python-2.7.6/tst.py
/usr/share/doc/libxml2-python-2.7.6/tstLastError.py
/usr/share/doc/libxml2-python-2.7.6/tstURI.py
/usr/share/doc/libxml2-python-2.7.6/tstmem.py
/usr/share/doc/libxml2-python-2.7.6/tstxpath.py
/usr/share/doc/libxml2-python-2.7.6/validDTD.py
/usr/share/doc/libxml2-python-2.7.6/validRNG.py
/usr/share/doc/libxml2-python-2.7.6/validSchemas.py
/usr/share/doc/libxml2-python-2.7.6/validate.py
/usr/share/doc/libxml2-python-2.7.6/walker.py
/usr/share/doc/libxml2-python-2.7.6/xpath.py
/usr/share/doc/libxml2-python-2.7.6/xpathext.py
/usr/share/doc/libxml2-python-2.7.6/xpathleak.py
/usr/share/doc/libxml2-python-2.7.6/xpathns.py
/usr/share/doc/libxml2-python-2.7.6/xpathret.py


Generated by rpm2html 1.8.1

Fabrice Bellet, Tue Oct 10 22:40:37 2017