-
Tue Sep 18 2012 Tianyue Lan <tianyue.lan@oracle.com> - 2.6.26-2.1.15.0.1.el5_8.5
- Add libxml2-enterprise.patch
- Replaced docs/redhat.gif in tarball with updated image
-
Wed Sep 05 2012 Daniel Veillard <veillard@redhat.com> - 2.6.26-2.1.15.el5_8.5
- Implement some default limits in the XPath module (CVE-2011-1944)
- Change the XPath code to percolate allocation errors (CVE-2011-1944)
-
Wed Aug 22 2012 Daniel Veillard <veillard@redhat.com> - 2.6.26-2.1.15.el5_8.4
- Fix an off by one pointer access (CVE-2011-3102)
-
Tue Aug 21 2012 Daniel Veillard <veillard@redhat.com> - 2.6.26-2.1.15.el5_8.3
- Fix parser local buffers size problems (rhbz#843739)
- Fix entities local buffers size problems (rhbz#843739)
- Fix an error in previous commit (rhbz#843739)
-
Mon Feb 13 2012 Daniel Veillard <veillard@redhat.com> - 2.6.26-2.1.15.el5_8.2
- fix previous build to force compilation of randomization code
- Resolves: rhbz#788843
-
Fri Feb 10 2012 Daniel Veillard <veillard@redhat.com> - 2.6.26-2.1.15.el5_8.1
- adds randomization to hash and dict structures CVE-2012-0841
- Resolves: rhbz#788843
-
Fri Jan 06 2012 Daniel Veillard <veillard@redhat.com> - 2.6.26-2.1.15.el5
- Fix the semantic of XPath axis for namespace/attribute nodes CVE-2010-4008
- Fix an off by one error in encoding CVE-2011-0216
- Fix some potential problems on reallocation failures CVE-2011-1944
- Fix missing error status in XPath evaluation CVE-2011-2834
- Make sure the parser returns when getting a Stop order CVE-2011-3905
- Fix an allocation error when copying entities CVE-2011-3919.patch
- Resolves: rhbz#771907
-
Fri Oct 21 2011 Daniel Veillard <veillard@redhat.com> - 2.6.26-2.1.14
- fix schemas validation of empty integer values (rhbz#743737)
-
Tue Jun 28 2011 Daniel Veillard <veillard@redhat.com> - 2.6.26-2.1.13
- Fix a potential crasher in XPath or XSLT, CVE-2011-1944
- Resolves: rhbz#710395
-
Thu Apr 21 2011 Daniel Veillard <veillard@redhat.com> - 2.6.26-2.1.12
- fix various problems with XSD validation
- Resolves: rhbz#644312
-
Mon Oct 04 2010 Daniel Veillard <veillard@redhat.com> - 2.6.26-2.1.11
- missing an initialization in an XPath internal structure
- Resolves: rhbz#613860
-
Tue Aug 04 2009 Daniel Veillard <veillard@redhat.com> - 2.6.26-2.1.10
- Fix a couple of crash CVE-2009-2414 and CVE-2009-2416
- Resolves: rhbz#515237
-
Wed Nov 12 2008 Daniel Veillard <veillard@redhat.com> - 2.6.26-2.1.9
- two patches for size overflows problems CVE-2008-4225 and CVE-2008-4226
- Resolves: rhbz#470475
-
Fri Sep 05 2008 Daniel Veillard <veillard@redhat.com> - 2.6.26-2.1.8
- Patch to fix an entity name copy buffer overflow CVE-2008-3529
- Resolves: rhbz#461024
-
Thu Aug 28 2008 Daniel Veillard <veillard@redhat.com> - 2.6.26-2.1.7
- Patch to fix recursive entities handling CVE-2008-3281 in a better way
- Resolves: rhbz#458096
-
Sat Aug 23 2008 Daniel Veillard <veillard@redhat.com> - 2.6.26-2.1.6
- Patch to fix recursive entities handling CVE-2008-3281
- Resolves: rhbz#458096
-
Mon Dec 17 2007 Daniel Veillard <veillard@redhat.com> - 2.6.26-2.1.3
- Patch to fix UTF-8 decoding problem CVE-2007-6284
- Resolves: rhbz#425934
-
Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 2.6.26-2.1.2
- fixing an i386/x86_64 parallel install problem of -devel
- Resolves: rhbz#222735
-
Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 2.6.26-2.1.1
- rebuild
-
Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 2.6.26-2.1
- rebuild
-
Wed Jun 07 2006 Daniel Veillard <veillard@redhat.com> 2.6.26-2
- fix bug #192873
-
Tue Jun 06 2006 Daniel Veillard <veillard@redhat.com> 2.6.26-1
- upstream release 2.6.26 see http://xmlsoft.org/news.html
-
Tue Jun 06 2006 Daniel Veillard <veillard@redhat.com>
- upstream release 2.6.25 broken, do not ship !