Index index by Group index by Distribution index by Vendor index by creation date index by Name Mirrors Help Search

libxslt-1.1.28-10.3.1 Source RPM

From OpenSuSE leap updates for 42.2 / oss / src

Name: libxslt Distribution: openSUSE Leap 42.2
Version: 1.1.28 Vendor: openSUSE
Release: 10.3.1 Build date: Tue May 16 16:07:34 2017
Group: System/Libraries Build host: cloud127
Size: 3473116 Source RPM:
Summary: XSL Transformation Library
This C library allows you to transform XML files into other XML files
(or HTML, text, and more) using the standard XSLT stylesheet
transformation mechanism.

It is based on libxml (version 2) for XML parsing, tree manipulation,
and XPath support. It is written in plain C, making as few assumptions
as possible and sticks closely to ANSI C/POSIX for easy embedding.
Although not primarily designed with performance in mind, libxslt seems
to be a relatively fast processor. It also includes full support for
the EXSLT set of extension functions as well as some common extensions
present in other XSLT engines.




MIT and GPL-2.0+


* Fri May 05 2017
  - Fixed CVE-2015-7995 bsc#952474
    * Type confusion vulnerability may cause a DoS
  - Added patch libxslt-CVE-2015-7995.patch
* Tue Apr 25 2017
  - Fixed CVE-2017-5029 bcs#1035905
    * Limit buffer size in xsltAddTextString to INT_MAX
  - Added patch libxslt-1.1.28-CVE-2017-5029.patch
* Wed Apr 05 2017
  - security update: initialize random generator, CVE-2015-9019
    + libxslt-random-seed.patch
* Tue Mar 21 2017
  - Added patch libxslt-CVE-2016-4738.patch
    * Fix heap overread in xsltFormatNumberConversion: An empty
      decimal-separator could cause a heap overread. This can be
      exploited to leak a couple of bytes after the buffer that holds
      the pattern string.
    * bsc#1005591 CVE-2016-4738
* Thu Dec 06 2012
  - update to 1.1.28:
    * fix generate-id() to avoid generating the same ID
    * fix crash with empty xsl:key/@match attribute
    * fix crash when passing an uninitialized variable to document()
    * fix regression: default namespace not correctly used
    * remove xsltTransStorageAdd and xsltTransStorageRemove from symbols.xml
  - changes from 1.1.27:
    * link python module with python library (Frederic Crozat)
    * report errors on variable use in key
    * the XSLT namespace string is a constant one
    * fix handling of names in xsl:attribute
    * reserved namespaces in xsl:element and xsl:attribute
    * null-terminate result string of cry:rc4_decrypt
    * EXSLT date normalization fix
    * exit after compilation of invalid func:result
    * fix for EXSLT func:function
    * rewrite EXSLT string:replace to be conformant
    * avoid a heap use after free error
    * fix a dictionary string usage
    * output should not include extraneous newlines when indent is off
    * document('') fails to return stylesheets parsed from memory
    * xsltproc should return an error code if xinclude fails
    * forwards-compatible processing of unknown top level elements
    * fix system-property with unknown namespace
    * fix default template processing on namespace nodes
    * fix a bug in selecting XSLT elements
    * fix a memory leak with xsl:number
    * fix a problem with ESXLT date:add() with January
    * fix generate-id() to not expose object addresses
    * allow whitespace in xsl:variable with select
    * fix direct pattern matching bug
    * add the saxon:systemId extension
    * add an append mode to document output
    * fix portability to upcoming libxml2-2.9.0
    * precompile patterns in xsl:number
  - change soname macro back to "1" and enforce it in the files list
  - revert -tools subpackage for openSUSE < 12.2 as that has only
    become effective since 12.2 on the package that ships with the
    distribution, to avoid having a completely different package
    layout in this repository as compared to the stock distribution
    packages (added a Provides: libxslt-tools though)
* Wed Apr 25 2012
  - add macro "soname" %{name}1
  - fix "self obsoletion"
* Sat Mar 17 2012
  - Make sure to follow shlib policy; put tools in a separate package
    like done in libxml2
* Wed Jan 04 2012
  - Remove redundant tags (License: field is inherited)
  - Use exact EVR for Provides:
* Wed Jan 04 2012
  - Tutorial contains GPL-2.0+ code. Either split this off into a subpackage or
    add GPL-2.0+ as an aggregation to the main licence tag
* Sat Dec 03 2011
  - don't run make check in QEMU builds - breaks due to massive threading
* Mon Nov 21 2011
  - Remove redundant/unwanted tags/section (cf. specfile guidelines)
* Sun Nov 20 2011
  - add libtool as buildrequire to avoid implicit dependency
* Thu Sep 08 2011
  - fix provides/obsoletes
* Tue Aug 02 2011
  - Add dependency on libgcrypt-devel and libgpg-error-devel for
    the libxslt-devel package
* Mon Aug 01 2011
  - Correctly obsolete libxslt package in the baselibs.conf too
* Fri Jul 29 2011
  - Fix build on SLE
* Fri Jul 29 2011
  - Fix broken requires,provides,Obsoletes causing "have choice.."
    build system errors
  - Remove all "la" files since they are no longer needed
  - Fix -devel pacakge requires and messed up -config scripts
    this may cause build fails of already broken dependant packages
    that do not link all the needed libraries in an explicit manner
    (This is not a bug here, it is expected to cause it)
* Wed Jul 27 2011
  - package clean-up:
    - include library version number in the name of the binary package
    - add an alias for xsltproc (required by package xmlto)
* Wed Jul 21 2010
  - update to libxslt-1.1.26
    - Improvements:
    - Add xsltProcessOneNode to exported symbols for lxml
    - Features:
    - Add API versioning and various cleanups
    - xsl:sort lang support using the locale
    - Bug fixes
    - Portability, documentation fixes
  - drop libxslt-1.1.24-rc4-overflow.patch (included upstream)
  - drop libxslt-1.1.24-am.patch (included upstream)
* Sat Apr 24 2010
  - buildrequire pkg-config to fix provides
* Mon Dec 14 2009
  - add baselibs.conf as a source
* Sun Jun 21 2009
  - fix build with automake 1.11
* Fri Feb 13 2009
  - fix file list
* Wed Feb 11 2009
  - readd "la" files to fix libxslt-python build
* Mon Jan 26 2009
  - remove useless "la" file
  - remove static libraries, if something breaks, move libraries to /%{_lib}
    instead of restoring them
* Wed Dec 10 2008
  - use Obsoletes: -XXbit only for ppc64 to help solver during distupgrade
* Thu Oct 30 2008
  - obsolete old -XXbit packages (bnc#437293)
* Fri Jul 18 2008
  - updated to 1.1.24:
    * documentation: man page fix
    * bug fixes: pattern bug fix, key initialization problems,
      exclusion of unknown namespaced element on top of stylesheets
      python generator syntactic cleanup
  - dropped obsoleted CVE-2008-1767.patch (included in update)
  - fixed overflow in RC4 code (rc4-overflow.patch) [bnc#410256]
* Mon May 19 2008
  - fixed CVE-2008-1767 (CVE-2008-1767.patch) [bnc#391920]
* Fri Apr 11 2008
  - updated to 1.1.23
    * Documentation
      fix links for Cygwin DocBook setup (Philippe Bourcier)
    - xsltParseStylesheetDoc doc fix (Jason Viers)
    - fix manpage default maxdepth value
    * Bug fixes:
    - python segfault (Daniel Gryniewicz)
    - week-in-year bug fix (Maurice van der Pot)
    - fix python iterator problem (William Brack)
    - avoid garbage collection problems on str:tokenize and str:split
      and function results (William Brack and Peter Pawlowski)
    - superfluous re-generation of keys (William Brack)
    - remove superfluous code in xsltExtInitTest (Tony Graham)
    - func:result segfault fix (William Brack)
    - timezone offset problem (Peter Pawlowski),
    * Portability fixes:
    - old gcrypt support fix (Brent Cowgill)
    - Python portability patch (Stephane Bidoul)
    - VS 2008 fix (Rob Richard)
* Thu Apr 10 2008
  - added baselibs.conf file to build xxbit packages
    for multilib support
* Tue Jan 22 2008
  - build --without-python to allow compilation from src.rpm
* Tue Sep 18 2007
  - Updated to version 1.1.22:
    * Bug fixes: RVT cleanup problems, exclude-result-prefix bug,
      stylesheet compilation error handling, out of memory allocation
      errors, namespace problem on compound predicates, python
      space/tab inconsistencies, hook xsl:message to per
      transformation error callbacks, cached RVT problem, XPath
      context maintainance on choose, memory leaks in the math
      module, exclude-result-prefix induced namespace problem
    * Portability fixes: improve build with VS2005, fixing build on
      AIX, fix the security file checks on Windows.
    * Improvement: add an --encoding option to xsltproc.
    * Build: configure setup for TRIO_REPLACE_STDIO
    * Documentation: updated after change from CVs to SVN
* Thu Jan 25 2007
  - update to 1.1.20
    * result Value Tree handling fix
    * function parameters fix
    * empty text node handling
    * plugin support and test fixes
    * fragment support fixes
    * python stylesheet compare and transform context access
    * EXSLT string replace support
    * xsltproc better low level error handling
  - fixed crash on ENOMEM (null-retval.patch) [#215223]
  - drop obsolete patches:
    * libxslt-aliasing.patch (included in update)
    * libxslt-transform.patch (included in update)
* Thu Dec 21 2006
  - fix for crash with certain transformations (libxcb build crash)
* Tue Dec 12 2006
  - 1.1.19; NEWS extract:
    * Bug fixes: entities within attributes; in-scope namespace bug, result
    value tree caching bug, a number of namespace related bugs, etc.
    * Improvements: refactoring of namespace handling, value-of
    impleemntation and template internal processing, new xsltproc flag to
    apply Xinclude to stylesheets.
    * Documentation.
* Fri Oct 27 2006
  - update --nonet patch to work even when using rpmbuild directly
* Tue Oct 24 2006
  - make --nonet default while building packages (#214338)
* Tue Oct 17 2006
  - Move devel docs to the -devel subpackage; reported by Andreas Hanke [#
* Fri Jun 16 2006
  - 1.1.17:
    * Bug fixes: some regression tests, attribute/namespaces output,
      problem in mixed xsl:value-of and xsl:text uses.
    * Improvements: internal refactoring, use of the XPath object cache in
  - Require libxml2-2.2.25.
* Tue May 23 2006
  - Update to version 1.1.16:
    * Bug fixes (pattern compilation, namespace prefixes, etc.).
    * Speed up sorting.
    * Documentation update.
  - Adjust warn patch; drop libxslt-xpath-pattern.patch.
* Wed Jan 25 2006
  - converted neededforbuild to BuildRequires
* Tue Oct 11 2005
  - On account of pattern.c, add -fno-strict-aliasing again.
  - Also require glibc-devel.
* Tue Oct 04 2005
  - libxslt-xpath-pattern.patch:
    libxslt/pattern.c: fixed problem in internal XPath compilation
    of patterns including variables, fixes GNOME bug #316861
    (William Brack).  Reported by Andreas Jaeger/Uwe Gansert.
* Fri Sep 30 2005
  - Fix compiler warnings.
  - Add missing requires.
* Fri Sep 16 2005
  - Update to version 1.1.15; NEWS from :
    * Bug fixes and improvements.
    * Documentation enhancement.
* Wed Jul 06 2005
  - fixed strict aliasing problem.
* Mon Apr 04 2005
  - Update to version 1.1.14; some NEWS (extract since .13) from :
    * Extensions: module support; dictionnary based speedups trying to get
      rid of xmlStrEqual as much as possible.
    * Bugfixes:
      exslt day-of-week-in-month, xsl:call-template should not change the
      current template rule, evaluation of global variables, RVT's in
      XPath predicates, namespace URI on template names, pattern
      expression fixes, out of memory detection misses, parserOptions
      propagation, exclude-result-prefixes fix, // patten fix,  text node
      on stylesheet document without a dictionary, more checking of XSLT
      syntax, calling xsltInit() multiple times, bug in pattern matching
      with ancestors, bug in pattern matching with cascading select,
      xinclude and document() problem.
  - CFLAGS: Add -fno-strict-aliasing.
* Fri Dec 10 2004
  - Do not list manpages twice; reported by Chris Lahey [Novell #472] and
    [# 49118].
* Tue Nov 02 2004
  - Update to version 1.1.12; some NEWS from :
    * Bug fixes: attribute document pointer fix, exslt date negative
      periods, generated tree structure fixes, namespace lookup fix, use
      reentrant gmtime_r, exslt:funtion namespace fix, potential NULL
      pointer reference, force string interning on generated documents.
    * Improve documentation.
* Fri Oct 08 2004
  - Update to version 1.1.11; some NEWS from
    (since 1.1.9):
    * Bug fixes: xsl:include problems, UTF8 number pattern, date-time
      validation, namespace fix, various Exslt date fixes, error callback
      fixes, leak with namespaced global variable, attempt to fix a weird
      problem (Gnome Bugzilla #153137), key initialization problem.
    * Improvements: exslt:date-sum tests.
    * Documentation: Second tutorial by Panagiotis Lourida.
  - Enable crypto support [#44119].
* Mon Aug 23 2004
  - Update to version 1.1.9; some NEWS from
    * Various bug fixes (RVT key handling, Python bindings, key and XPath,
      64bit issue, etc.).
* Thu Aug 19 2004
  - Fix a broken cast.
* Wed Jul 14 2004
  - Update to version 1.1.8; some NEWS from :
    * Bug fixes.
* Fri May 21 2004
  - Update to version 1.1.7; some NEWS from :
    * Bugfixes: UTF-8 string tokenize, fix subtle memory corruption,
      linefeed after comment at document level, disable-output-escaping
      problem, pattern compilation in deep imported stylesheets,
      namespace extension prefix bug, namespace lookup for attribute,
      namespaced DOCTYPE name.
* Tue Apr 20 2004
  - Update to version 1.1.6; some NEWS from (since 1.1.2):
    * Performance improvements (e.g., dictionnary reuses for XSLT).
    * Various bugfixes (keys, thread troubles, tokenize fix for UTF-8,
    xpath, etc.).
    * Documentation cleanup.
  - Drop obsolete patch (libxslt-m4.diff).
* Mon Mar 15 2004
  - libxslt-m4.diff: Quote first argument of AC_DEFUN; reported by Dirk
    Mueller [# 35887].
* Mon Jan 12 2004
  - build as user
* Wed Jan 07 2004
  - Update to version 1.1.2; NEWS from
    * Documentation fixes; EXSLT documentation.
    * Bug fixes: exslt:date returning NULL strings, namespaces output,
      key and namespace definition problem, passing options down to
      the document() parser, xsl:number fixes.
* Fri Dec 12 2003
  - Update to version 1.1.1; NEWS from
    * bug fixes: number formatting, exslt:tokenize, key selector parsing
      with |, xsl:element with computed namespaces, xslt:import/include
      recursion detection, exslt:function used in keys, bug when
      CDATA_SECTION are found in the tree, entities handling when using
* Wed Nov 05 2003
  - Update to version 1.1.0; NEWS from
    * Make use of the new libxml2 API.
    * Remove DocBook SGML broken support.
    * Remove the deprecated breakpoint library
    * Fixes: xsl:key to work with PIs, extension memory error fix, header
      path, some tortuous template problems when using predicates, a bug
      in default processing of attributes, detect invalid names on
      templates, exslt:document (and similar) base handling problem,
    * xsltproc option display fix,
    * Python: never use stdout for error.
* Tue Oct 07 2003
  - Update to version 1.0.33; NEWS from
    * mode not cascaded in template fallbacks.
    * catch redefinition of parameter/variables.
    * multiple keys with same namespace name.
    * cdata-section-elements handling of namespaced names.
    * apply-templates crash.
    * bug with imported templates.
    * imported attribute-sets merging bug (DocBook).
* Thu Sep 18 2003
  - Do not free the hash keys during xmlHashScanFull,
    it will corrupt the hash table. The keys will be
    freed by xmlHashFree right afterwards anyway. #30506
* Fri Aug 15 2003
  - Update to version 1.0.32; NEWS from
    * Bugfixes: xsltSaveResultToFile() python binding, EXSLT fixes,
      speed of large text output, xsl:copy with attributes, strip-space and
      namespaces prefix, fix for --path xsltproc option, sort with multiple
      keys, checking of { and } for attribute value templates.
    * Python bindings for extension elements.
    * Doc cleanup.
* Wed Jul 09 2003
  - Update to version 1.0.31; NEWS from
    * Bugfixes: xsl:copy on namespace nodes, AVT for xsl:sort order, fix
      for the debugger, output filename limitation, trio.h and triodef.h
      added, EXSLT node-set, xsltChoose and whitespace, stylesheet
      compilation, NaN and sort.
    * Avoid generating &quot; (fix in libxml2-2.5.8)
* Tue Jun 17 2003
  - Updated to version 1.0.30.
  - Fixed linking of libxsltbreakpoint.
* Mon May 26 2003
  - Remove unwanted files from $RPM_BUILD_ROOT.
* Wed Apr 02 2003
  - Update to version 1.0.29; NEWS from
    Significant speedup for large (flat) documents which also requires
    * Bug fixes: Result Value Tree handling, XML IDs, keys(), extra namespace
      declarations with xsl:elements.
* Wed Mar 26 2003
  - Update to version 1.0.28; NEWS from
    * Fix node() in patterns semantic.
    * Fix a memory access problem in format-number()
    * Fix stack overflow in recursive global variable or params
    * Clean up Result Value Tree handling, and fix a couple of
    old bugs in the process.
* Tue Feb 11 2003
  - Update to version 1.0.26; NEWS from
    * Fixed 3 serious bugs in document() and stylesheet compilation which
      could lead to a crash.
* Thu Feb 06 2003
  - Update to version 1.0.24; NEWS from
    * Bug fixes: double-free for standalone stylesheets introduced in
      1.0.24, C syntax pbm, etc.
    * Some XPath and XInclude related problems were actually fixed in
    * Documentation: emphasize that --docbook is not for XML docs.
* Wed Jan 15 2003
  - Update to version 1.0.24; NEWS from
    A lot of bug fixes and a few improvements:
    * Bug fixes: imported global varables, python bindings, EXSLT memory
      leak, namespace generation on xsl:attribute, space handling with
      imports, extension-element-prefixes, comments within xsl:text,
      superfluous xmlns generation, XInclude related bug for numbering,
      EXSLT strings, attribute-sets computation on imports, extension module
      init and shutdown callbacks not called.
    * Add xsltGetProfileInformation().
    * Fix API generation scripts.
    * API to provide the sorting routines.
    * Add XML description of the EXSLT API.
    * Add ESXLT URI (un)escaping.
    * Fix some memory leaks.
    * document() now supports fragment identifiers in URIs.
* Tue Nov 26 2002
  - split libxslt-python to own specfile
    (libxslt is turning more and more into a base package
    and python requires a lot of other things to build)
  - removed gtkdoc from neededforbuild (html is not rebuilt anyway)
* Mon Nov 18 2002
  - Update to version 1.0.23; NEWS from
    * Improvement of the python bindings: extension functions and
      activating EXSLT.
    * various bug fixes: number formatting, portability for bounded string
      functions, CData nodes, key(), @*[...] patterns.
    * Documentation improvements.
    * Add libxslt.m4.
  - Require libxml2 2.4.27.
* Thu Oct 31 2002
  - Update to version 1.0.22; NEWS from
    * Add a security module, and a related set of new options to xsltproc.
    * Allow per transformation error handler.
    * Fix a few bugs: node() semantic, URI escaping, media-type, attribute
* Wed Oct 09 2002
  - Update to version 1.0.21; NEWS from
    * Bug  fixes:  match="node()",  date:difference(), disable-output-escaping
    * Mem leak fix.
    * Python bindings: style.saveResultToString().
    * Documentation improvements.
    * try  to  handle  document('') as best as possible depending in the
    * Fix the DocBook stylesheets handling problem
    * Fix a few XSLT reported errors
  - Drop namespace patch (already included).
* Tue Aug 20 2002
  - Apply patch by Daniel Veillard to fix a namespace problem raised by
    recent DocBook stylesheets
    Reported by Stephan Kulow [# 18099].
* Wed Jul 31 2002
  - Run %run_ldconfig.
* Mon Jul 08 2002
  - Update to version 1.0.19; NEWS from, not
    mentioned earlier:
    * Bug fixes: attributes, extra namespace declarations (DocBook),
      xsl:include crash, documentation, element-available.
    * xsltproc can now list registered extensions.
    * New API to save directly to a string xsltSaveResultToString().
    * Specific error registration function for the python API.
* Wed May 29 2002
  - tweak python installation some more for lib64
* Tue May 28 2002
  - Update to 1.0.18:
    - Add Pyhton bindings (libxslt-python).
    - Bug fixes.
    - New man page for libexslt.
* Tue Apr 30 2002
  - Update to version 1.0.17; NEWS from :
    o EXSLT date improvement and regression tests.
    o Attempt to fix a bug in xsltProcessUserParamInternal.
* Fri Apr 19 2002
  - Update to version 1.0.16; NEWS from :
    o Bug fixes: strip-space, URL in HTML output, error when xsltproc
      can't save.
    o Improve Python bindings.
* Tue Apr 09 2002
  - Update to version 1.0.15; NEWS since 1.0.9 from :
    * Change of Licence to the MIT Licence.
    * Bugfixes: XPath, python Makefile, recursive attribute sets,
      @foo[..] templates.
    * Fix a bug raised when using doctypes with HTML output.
    * More EXSLT functions.
    * Provide fixes and regression tests for exslt date functions.
    * Nasty bug fix related to exslt:node-set.
    * Fix bug "namespace node have no parents".
    * Obsoleted libxsltbreakpoint now deprecated and frozen to 1.0.8 API
    * xsltproc return codes are now significant, update documentation.
    * Debug of memory alocation with valgind.
    * Patch to allow as much as 40 steps in patterns.
    * Enhancements to interface with xsltdebugger.
    * Added a stringparam option to avoid escaping hell at the shell level.
    * serious profiling leading to significant improvement for DocBook
    * Improvement in the XPath engine (libxml2-2.4.18).
    * Add Python bindings.
    * Documentation changes and updates.
* Wed Feb 20 2002
  - fix prefix tag to build shared libs
* Tue Feb 12 2002
  - fix build for s390x
* Tue Dec 11 2001
  - use less intrusive hack for libtool: export LIBRARY_PATH
* Thu Nov 29 2001
  - install without buildroot first to work around libtool
    not being able to cope with dependant libraries and buildroot
* Tue Nov 27 2001
  - Update to version 1.0.8; NEWS from :
    - Previous header patch is superfluous.
    - Bug fixes.
* Tue Nov 20 2001
  - Add missing define; cf. .
  - NEWS for 1.0.7 entries from (not
    mentioned earlier):
    - Fix handling of indent="no" on HTML output.
* Sat Nov 10 2001
  - Update to version 1.0.7
  - add fixes for automake 1.5
* Sat Nov 03 2001
  - fix for automake 1.5
* Wed Oct 31 2001
  - Update to version 1.0.6; NEWS from :
    - Bug fixes on number formatting and date/time functions.
    - Fix DOCTYPE generation rules for HTML output.
* Thu Oct 11 2001
  - Update to version 1.0.5; NEWS from :
    - Portability fixes.
    - Fix a dozen bugs on XSLT and EXSLT.
    - Add support for Saxon's evaluate and expressions extensions.
    - Better handling of XPath evaluation errors.
* Mon Oct 01 2001
  - Update to version 1.0.4; NEWS from :
    - Documentation updates.
    - Bug fixes (DocBook FO generation should be fixed) and portability
    - Improve existing EXSLT support and add String, Time and Date core
      functions support.
* Fri Aug 24 2001
  - Update to version 1.0.3; from the announcement (cf. libxml2):
    - Implement XML Catalog Specification from August 6:
    - New NaN and Infinity code.
    - A number of small bugfixes.
* Fri Aug 17 2001
  - Update to version 1.0.2.
  - Call 'libtoolize' and friends.
* Wed Jul 11 2001
  - New package: version 1.0.0.



Generated by rpm2html 1.8.1

Fabrice Bellet, Sat Feb 10 05:04:25 2018