Ubuntu
libxmltok package

libxmltok 1.2-4.1ubuntu1 source package in Ubuntu

Changelog

libxmltok (1.2-4.1ubuntu1) noble; urgency=medium

  * Merge with Debian; remaining changes:
    + SECURITY UPDATE: Incomplete validation of encoding
      - debian/patches/CVE-2022-25235-1.patch: remove the unused macro
        UTF8_GET_NAMING from xmltok/xmltok.c.
      - debian/patches/CVE-2022-25235-2.patch: add verification calls to
        IS_INVALID_CHAR() in CHECK_NAME_CASE, CHECK_NMSTRT_CASE and
        prologTok methods.
      - debian/patches/CVE-2022-25235-3.patch: add comments to BT_LEAD
        cases in xmltok/xmltok_impl.c.
      - CVE-2022-25235
    + SECURITY UPDATE: Namespace-separator insertions
      - debian/patches/CVE-2022-25236-1.patch: add a validation for
        nameSpaceSeparator in addBinding() in xmlparse/xmlparse.c.
      - debian/patches/CVE-2022-25236-2.patch: add a new method
        is_rfc3986_uri_char() to the previous validation in addBinding()
        in xmlparse/xmlparse.c.
      - CVE-2022-25236

libxmltok (1.2-4.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Rename libraries for 64-bit time_t transition.  Closes: #1062735

 -- Matthias Klose <email address hidden>  Thu, 07 Mar 2024 12:03:35 +0100

Upload details

Uploaded by:
Matthias Klose
Uploaded to:
Noble
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
libs
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
libxmltok_1.2.orig.tar.gz 63.2 KiB bbaf314ec559cda6329c24cfcf9c39173c74283c8d7b09b36e9f59d82fba9336
libxmltok_1.2-4.1ubuntu1.debian.tar.xz 8.9 KiB 2f8bfaca9ac10799acdb52a52c7099ec9e06a71e67c974c5a7c6431cfcb13fb0
libxmltok_1.2-4.1ubuntu1.dsc 1.9 KiB 01bae728e932f0c4d48514b2d6e8857809931421768a618b9d77f6ffc8ed38a4

Available diffs

View changes file

Binary packages built by this source

libxmltok1-dev: XML Parser Toolkit, developer libraries

 Libraries for XML parsing in C. It aims to be fully conforming. It
 is currently not a validating XML processor.
 .
 The library libxmltok contains a low-level library for tokenizing
 XML. The library libxmlparse contains an XML parser library which is
 built on top of the xmltok library.
 .
 This package contains the development headers.

libxmltok1t64: XML Parser Toolkit, runtime libraries

 Libraries for XML parsing in C. It aims to be fully conforming. It
 is currently not a validating XML processor.
 .
 The library libxmltok contains a low-level library for tokenizing
 XML. The library libxmlparse contains an XML parser library which is
 built on top of the xmltok library.

libxmltok1t64-dbgsym: debug symbols for libxmltok1t64