#54348 – libxml2: -> 2.12.10

Bug 54348 - libxml2: -> 2.12.10

Summary: libxml2: -> 2.12.10

Status:	CLOSED FIXED

Alias:	None

Product:	Sisyphus
Classification:	Development
Component:	libxml2 (show other bugs)
Version:	unstable
Hardware:	all Linux

Importance:	P5 blocker
Assignee:	Maxim Slipenko
QA Contact:	qa-sisyphus

URL:
Keywords:

Depends on:
Blocks:	46625
	Show dependency tree

Reported:	2025-05-17 12:25 MSK by Yuri N. Sedunov
Modified:	2025-05-19 15:41 MSK (History)
CC List:	1 user (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description

Yuri N. Sedunov 2025-05-17 12:25:41 MSK

v2.12.10: Feb 18 2025

### Security

- [CVE-2025-24928] Fix stack-buffer-overflow in xmlSnprintfElements
- [CVE-2024-56171] Fix use-after-free after xmlSchemaItemListAdd
- pattern: Fix compilation of explicit child axis

### Regressions

- parser: Fix detection of duplicate attributes

### Bug fixes

- xpath: Fix parsing of non-ASCII names

### Portability

- python: Declare init func with PyMODINIT_FUNC
- tests: Fix sanitizer version check on old Apple clang

### Build

- autotools: Set AC_CONFIG_AUX_DIR
- cmake: Always build Python module as shared library
- cmake: Fix compatibility in package version file

Comment 1

Alexey Shabalin 2025-05-19 15:41:55 MSK

Исправлено в 2.12.10-alt1