Ubuntu
libxml2 package

libxml2 2.7.8.dfsg-5.1ubuntu4.15 source package in Ubuntu

Changelog

libxml2 (2.7.8.dfsg-5.1ubuntu4.15) precise-security; urgency=medium

  * SECURITY UPDATE: heap-based buffer overread in xmlNextChar
    - return after error in parser.c.
    - a7a94612aa3b16779e2c74e1fa353b5d9786c602
    - CVE-2016-1762
  * SECURITY UPDATE: heap-based buffer overread in htmlCurrentChar
    - clear up NULL deref, handle 0-length entities and fix tests in
      parserInternals.c.
    - ff76eb28c75451bc56e3b93f44dac155ca29e7f5
    - fdfeecc1b73b0318466f0d61f0b8881ed9d92dd2
    - 0bcd05c5cd83dec3406c8f68b769b1d610c72f76
    - CVE-2016-1833
  * SECURITY UPDATE: heap-buffer-overflow in xmlStrncat
    - check for negative lengths in xmlstring.c.
    - 8fbbf5513d609c1770b391b99e33314cd0742704
    - CVE-2016-1834
  * SECURITY UPDATE: heap use-after-free in xmlSAX2AttributeNs
    - add check to parser.c, add tests to result/errors/759020.xml.err,
      result/errors/759020.xml.str, test/errors/759020.xml.
    - 38eae571111db3b43ffdeb05487c9f60551906fb
    - CVE-2016-1835
  * SECURITY UPDATE: heap use-after-free in htmlParsePubidLiteral and
    htmlParseSystemiteral
    - prevent stable pointer usage in HTMLparser.c.
    - 11ed4a7a90d5ce156a18980a4ad4e53e77384852
    - CVE-2016-1837
  * SECURITY UPDATE: heap-based buffer overread in
    xmlParserPrintFileContextInternal
    - add bounds check to parser.c,
      add tests to result/errors/758588.xml.err,
      result/errors/758588.xml.str, test/errors/758588.xml.
    - db07dd613e461df93dde7902c6505629bf0734e9
    - CVE-2016-1838
  * SECURITY UPDATE: heap-based buffer overread in xmlDictAddString
    - add bounds check to HTMLparser.c.
    - a820dbeac29d330bae4be05d9ecd939ad6b4aa33
    - CVE-2015-8806
    - CVE-2016-1839
    - CVE-2016-2073
  * SECURITY UPDATE: heap-buffer-overflow in xmlFAParsePosCharGroup
    - properly handle error in xmlregexp.c.
    - cbb271655cadeb8dbb258a64701d9a3a0c4835b4
    - CVE-2016-1840
  * SECURITY UPDATE: avoid building recursive entities
    - properly handle recursion in parser.c, tree.c.
    - bdd66182ef53fe1f7209ab6535fda56366bd7ac9
    - CVE-2016-3627
  * SECURITY UPDATE: recursion depth counter issue
    - properly could recursion depth in parser.c.
    - 8f30bdff69edac9075f4663ce3b56b0c52d48ce6
    - CVE-2016-3705
  * SECURITY UPDATE: heap-based buffer-underreads due to xmlParseName
    - improve error handling in parser.c.
    - 00906759053986b8079985644172085f74331f83
    - CVE-2016-4447
  * SECURITY UPDATE: inappropriate fetch of entities content
    - fix another external entity fetch in parser.c.
    - b1d34de46a11323fccffa9fadeb33be670d602f5
    - CVE-2016-4449
  * SECURITY UPDATE: out of bound access when serializing malformed strings
    - improve string handling in xmlsave.c.
    - c97750d11bb8b6f3303e7131fe526a61ac65bcfd
    - CVE-2016-4483

 -- Marc Deslauriers <email address hidden>  Fri, 03 Jun 2016 09:11:38 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Precise
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
libs
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
libxml2_2.7.8.dfsg.orig.tar.gz 3.3 MiB 9f5262963fda356708903b42ff862a816c714582d0cf41477a8b3839945f0e43
libxml2_2.7.8.dfsg-5.1ubuntu4.15.diff.gz 143.7 KiB acbab1be41ab0059f9b1181dd3f03a9002a2df8160d82d68c7bf699dfbc33848
libxml2_2.7.8.dfsg-5.1ubuntu4.15.dsc 2.5 KiB acd583d838224613c4c76855f08cbde34c28b73a17d8bb7ff7d45eaefdebeb0b

View changes file

Binary packages built by this source

libxml2: GNOME XML library

 XML is a metalanguage to let you design your own markup language.
 A regular markup language defines a way to describe information in
 a certain class of documents (eg HTML). XML lets you define your
 own customized markup languages for many classes of document. It
 can do this because it's written in SGML, the international standard
 metalanguage for markup languages.
 .
 This package provides a library providing an extensive API to handle
 such XML data files.

libxml2-dbg: Debugging symbols for the GNOME XML library

 XML is a metalanguage to let you design your own markup language.
 A regular markup language defines a way to describe information in
 a certain class of documents (eg HTML). XML lets you define your
 own customized markup languages for many classes of document. It
 can do this because it's written in SGML, the international standard
 metalanguage for markup languages.
 .
 This package provides the debugging symbols for the library and for
 the utilities provided by the libxml2-utils package.
 Debugging symbols for the Python modules are not available.

libxml2-dbgsym: debug symbols for package libxml2

 XML is a metalanguage to let you design your own markup language.
 A regular markup language defines a way to describe information in
 a certain class of documents (eg HTML). XML lets you define your
 own customized markup languages for many classes of document. It
 can do this because it's written in SGML, the international standard
 metalanguage for markup languages.
 .
 This package provides a library providing an extensive API to handle
 such XML data files.

libxml2-dev: Development files for the GNOME XML library

 XML is a metalanguage to let you design your own markup language.
 A regular markup language defines a way to describe information in
 a certain class of documents (eg HTML). XML lets you define your
 own customized markup languages for many classes of document. It
 can do this because it's written in SGML, the international standard
 metalanguage for markup languages.
 .
 Install this package if you wish to develop your own programs using
 the GNOME XML library.

libxml2-doc: Documentation for the GNOME XML library

 XML is a metalanguage to let you design your own markup language.
 A regular markup language defines a way to describe information in
 a certain class of documents (eg HTML). XML lets you define your
 own customized markup languages for many classes of document. It
 can do this because it's written in SGML, the international standard
 metalanguage for markup languages.
 .
 This package contains general information about the GNOME XML library
 and more specific API references.

libxml2-udeb: GNOME XML library - minimal runtime

 XML is a metalanguage to let you design your own markup language.
 A regular markup language defines a way to describe information in
 a certain class of documents (eg HTML). XML lets you define your
 own customized markup languages for many classes of document. It
 can do this because it's written in SGML, the international standard
 metalanguage for markup languages.
 .
 This is a minimal package for use in debian-installer that yields a
 library providing an extensive API to handle such XML data files.

libxml2-udeb-dbgsym: debug symbols for package libxml2-udeb

 XML is a metalanguage to let you design your own markup language.
 A regular markup language defines a way to describe information in
 a certain class of documents (eg HTML). XML lets you define your
 own customized markup languages for many classes of document. It
 can do this because it's written in SGML, the international standard
 metalanguage for markup languages.
 .
 This is a minimal package for use in debian-installer that yields a
 library providing an extensive API to handle such XML data files.

libxml2-utils: XML utilities

 XML is a metalanguage to let you design your own markup language.
 A regular markup language defines a way to describe information in
 a certain class of documents (eg HTML). XML lets you define your
 own customized markup languages for many classes of document. It
 can do this because it's written in SGML, the international standard
 metalanguage for markup languages.
 .
 This package provides xmllint, a tool for validating and reformatting
 XML documents, and xmlcatalog, a tool to parse and manipulate XML or
 SGML catalog files.

libxml2-utils-dbgsym: debug symbols for package libxml2-utils

 XML is a metalanguage to let you design your own markup language.
 A regular markup language defines a way to describe information in
 a certain class of documents (eg HTML). XML lets you define your
 own customized markup languages for many classes of document. It
 can do this because it's written in SGML, the international standard
 metalanguage for markup languages.
 .
 This package provides xmllint, a tool for validating and reformatting
 XML documents, and xmlcatalog, a tool to parse and manipulate XML or
 SGML catalog files.

python-libxml2: Python bindings for the GNOME XML library

 XML is a metalanguage to let you design your own markup language.
 A regular markup language defines a way to describe information in
 a certain class of documents (eg HTML). XML lets you define your
 own customized markup languages for many classes of document. It
 can do this because it's written in SGML, the international standard
 metalanguage for markup languages.
 .
 This package contains the files needed to use the GNOME XML library
 in Python programs.

python-libxml2-dbg: Python bindings for the GNOME XML library (debug extension)

 XML is a metalanguage to let you design your own markup language.
 A regular markup language defines a way to describe information in
 a certain class of documents (eg HTML). XML lets you define your
 own customized markup languages for many classes of document. It
 can do this because it's written in SGML, the international standard
 metalanguage for markup languages.
 .
 This package contains the files needed to use the GNOME XML library
 in Python programs for use with the Python debug interpreter.

python-libxml2-dbgsym: debug symbols for package python-libxml2

 XML is a metalanguage to let you design your own markup language.
 A regular markup language defines a way to describe information in
 a certain class of documents (eg HTML). XML lets you define your
 own customized markup languages for many classes of document. It
 can do this because it's written in SGML, the international standard
 metalanguage for markup languages.
 .
 This package contains the files needed to use the GNOME XML library
 in Python programs.