Change log for libxml package in Ubuntu

libxml (1:1.8.17-14.1ubuntu0.1) hardy-security; urgency=low

  * SECURITY UPDATE: Fix parsing issues (LP: #604768)
  - modified parser.c: Fix multiple use-after-free flaws when parsing notation and
    enumeration attribute types, and fix stack overflow when parsing root XML
    document element DTD definition. Patch provided by Debian in Etch.
  - CVE-2009-2416
  - CVE-2009-2414
 -- Brian Thomason <email address hidden>   Mon, 12 Jul 2010 15:26:51 -0400

Available diffs

• diff from 1:1.8.17-14.1 (in Ubuntu) to 1:1.8.17-14.1ubuntu0.1 (1.4 KiB)

libxml (1:1.8.17-14.1) unstable; urgency=high

  * Non-maintainer upload by security team.
  * This update addresses the following security issue:
    - CVE-2007-6284: The xmlCurrentChar function allows context-dependent
      attackers to cause a denial of service (infinite loop) via XML
      containing invalid UTF-8 sequences (Closes: #460666).

 -- Stephan Hermann <email address hidden>   Fri,  18 Jan 2008 07:28:52 +0000

libxml (1:1.8.17-14build1) feisty; urgency=low

  * Rebuild for changes in the amd64 toolchain.

 -- Matthias Klose <email address hidden>   Mon,  5 Mar 2007 01:22:02 +0000

libxml (1:1.8.17-14) unstable; urgency=low

  * debian/control: Bumped Standards-Version to 3.7.2.1. No changes needed.
  * debian/watch: Updated to the new upstream FTP location.
  * debian/libxml-dev.doc-base: Removed the SGML Format that is not recognized
    by doc-base.

 -- Ubuntu Archive Auto-Sync <email address hidden>   Tue,  07 Nov 2006 02:47:02 +0000

libxml (1:1.8.17-13) unstable; urgency=low

  * Rebuild with a source package. Somehow it became a native package.
  * debian/libxml-dev.preinst: Fixed bashism.
  * debian/copyright: Updated FSF's address.
  * debian/changelog: Fixed an old broken entry.

 -- Ubuntu Archive Auto-Sync <email address hidden>   Thu,  15 Jun 2006 14:53:07 +0100

libxml (1:1.8.17-12) unstable; urgency=high


  * The "open your eyes before uploading" release.
  * debian/control: removed libreadline and libncurses from build
    dependencies. They are actually not needed at all.

 -- Mike Hommey <email address hidden>  Wed, 11 Jan 2006 19:38:22 +0100

libxml (1:1.8.17-10) unstable; urgency=low


  * debian/libxml-dev.install, debian/libxml1.install: Moved .pc file into
    libxml-dev package. Closes: #281580.
  * debian/control:
    + Put build-depends on one line.
    + libxml-dev conflicts with older versions of libxml1 (since the moved
      file conflicts)
  * debian/rules: Remove loop link /usr/include/gnome-xml/libxml and change it
    into a directory containing links to the header files. Closes: #130184.
  * libxml-dev.preinst: Remove old /usr/include/gnome-xml/libxml on upgrade.
  * entities.h: Removed redeclaration of xmlCopyEntitiesTable. Closes: #279328.

 -- Mike Hommey <email address hidden>  Wed, 24 Nov 2004 16:13:15 +0900

libxml (1:1.8.17-8ubuntu0.1) warty-security; urgency=low


  * SECURITY UPDATE: Fix multiple buffer overflows.
  * nanoftp.c: Applied Debian patch from 1:1.8.17-9.
  * References:
    CAN-2004-0989
    http://www.securityfocus.com/archive/1/379383/2004-10-24/2004-10-30/0

 -- Martin Pitt <email address hidden>  Mon, 28 Feb 2005 14:53:25 +0100

libxml (1:1.8.17-8) unstable; urgency=low


  * debian/control: changed deps on libz-dev to zlib1g-dev | libz-dev.
    Closes: #251636.
  * debian/watch: updated the file to version 2 and to actually point to an
    existing URL.

 -- Mike Hommey <email address hidden>  Mon, 31 May 2004 15:24:54 +0900