Information for build expat-2.2.5-16.oc8

ID31588
Package Nameexpat
Version2.2.5
Release16.oc8
Epoch
Sourcegit+https://gitee.com/src-opencloudos-rpms/expat.git#41adb975e1dbca11dd6dda97ee1c016914cae88d
SummaryAn XML parser library
DescriptionThis is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers with the parser prior to starting the parse. These handlers are called when the parser discovers the associated structures in the document being parsed. A start tag is an example of the kind of structures for which you may register handlers.
Built byoc-bot
State complete
Volume DEFAULT
StartedFri, 15 Nov 2024 15:19:04 CST
CompletedFri, 15 Nov 2024 15:20:52 CST
Taskbuild (dist-oc8, /src-opencloudos-rpms/expat.git:41adb975e1dbca11dd6dda97ee1c016914cae88d)
Extra{'source': {'original_url': 'git+https://gitee.com/src-opencloudos-rpms/expat.git#41adb975e1dbca11dd6dda97ee1c016914cae88d'}}
Tags
dist-oc8
dist-oc8-compose
RPMs
src
expat-2.2.5-16.oc8.src.rpm (info) (download)
aarch64
expat-2.2.5-16.oc8.aarch64.rpm (info) (download)
expat-devel-2.2.5-16.oc8.aarch64.rpm (info) (download)
expat-static-2.2.5-16.oc8.aarch64.rpm (info) (download)
expat-debuginfo-2.2.5-16.oc8.aarch64.rpm (info) (download)
expat-debugsource-2.2.5-16.oc8.aarch64.rpm (info) (download)
x86_64
expat-2.2.5-16.oc8.x86_64.rpm (info) (download)
expat-devel-2.2.5-16.oc8.x86_64.rpm (info) (download)
expat-static-2.2.5-16.oc8.x86_64.rpm (info) (download)
expat-debuginfo-2.2.5-16.oc8.x86_64.rpm (info) (download)
expat-debugsource-2.2.5-16.oc8.x86_64.rpm (info) (download)
Logs
x86_64
root.log
build.log
installed_pkgs.log
state.log
hw_info.log
mock_output.log
aarch64
state.log
installed_pkgs.log
build.log
root.log
hw_info.log
mock_output.log
Changelog * Fri Nov 08 2024 Tomas Korbar <tkorbar@redhat.com> - 2.2.5-16 - Fix CVE-2024-50602 - Resolves: RHEL-65062 * Wed Sep 11 2024 Tomas Korbar <tkorbar@redhat.com> - 2.2.5-15 - Rebuild for test reconfiguration * Wed Sep 11 2024 Tomas Korbar <tkorbar@redhat.com> - 2.2.5-14 - Fix multiple CVEs - Fix CVE-2024-45492 integer overflow - Fix CVE-2024-45491 Integer Overflow or Wraparound - Fix CVE-2024-45490 Negative Length Parsing Vulnerability - Resolves: RHEL-57505 - Resolves: RHEL-57493 - Resolves: RHEL-56751 * Tue Mar 26 2024 Tomas Korbar <tkorbar@redhat.com> - 2.2.5-13 - Fix wrongly exposed variables - Resolves: RHEL-29321 * Thu Mar 21 2024 Tomas Korbar <tkorbar@redhat.com> - 2.2.5-12 - CVE-2023-52425 expat: parsing large tokens can trigger a denial of service - Resolves: RHEL-29321 * Mon Nov 14 2022 Tomas Korbar <tkorbar@redhat.com> - 2.2.5-11 - CVE-2022-43680 expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate - Resolves: CVE-2022-43680 * Fri Sep 30 2022 Tomas Korbar <tkorbar@redhat.com> - 2.2.5-10 - Ensure raw tagnames are safe exiting internalEntityParser - Resolves: CVE-2022-40674 * Fri May 06 2022 Tomas Korbar <tkorbar@redhat.com> - 2.2.5-9 - Fix multiple CVEs - Resolves: CVE-2022-25314 - Resolves: CVE-2022-25313 * Mon Mar 14 2022 Tomas Korbar <tkorbar@redhat.com> - 2.2.5-8 - Improve patch for CVE-2022-25236 - Related: CVE-2022-25236 * Fri Mar 04 2022 Tomas Korbar <tkorbar@redhat.com> - 2.2.5-7 - Fix patch for CVE-2022-25235 - Resolves: CVE-2022-25235 * Thu Mar 03 2022 Tomas Korbar <tkorbar@redhat.com> - 2.2.5-6 - Fix multiple CVEs - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution - CVE-2022-25315 expat: integer overflow in storeRawNames() - Resolves: CVE-2022-25236 - Resolves: CVE-2022-25235 - Resolves: CVE-2022-25315 * Mon Feb 14 2022 Tomas Korbar <tkorbar@redhat.com> - 2.2.5-5 - Fix multiple CVEs - CVE-2022-23852 expat: integer overflow in function XML_GetBuffer - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat - CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c - CVE-2022-22825 Integer overflow in lookup in xmlparse.c - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c - CVE-2022-22823 Integer overflow in build_model in xmlparse.c - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c - Resolves: CVE-2022-23852 - Resolves: CVE-2021-45960 - Resolves: CVE-2021-46143 - Resolves: CVE-2022-22827 - Resolves: CVE-2022-22826 - Resolves: CVE-2022-22825 - Resolves: CVE-2022-22824 - Resolves: CVE-2022-22823 - Resolves: CVE-2022-22822 * Fri Apr 24 2020 Joe Orton <jorton@redhat.com> - 2.2.5-4 - add security fixes for CVE-2018-20843, CVE-2019-15903 * Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 2.2.5-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild * Sat Feb 03 2018 Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 2.2.5-2 - Switch to %ldconfig_scriptlets * Thu Nov 02 2017 Joe Orton <jorton@redhat.com> - 2.2.5-1 - update to 2.2.5 (#1508667) * Mon Aug 21 2017 Joe Orton <jorton@redhat.com> - 2.2.4-1 - update to 2.2.4 (#1483359) * Fri Aug 04 2017 Joe Orton <jorton@redhat.com> - 2.2.3-1 - fix tests with unsigned char (upstream PR 109) - update to 2.2.3 (#1473266) * Wed Aug 02 2017 Fedora Release Engineering <releng@fedoraproject.org> - 2.2.2-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild * Wed Jul 26 2017 Fedora Release Engineering <releng@fedoraproject.org> - 2.2.2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild * Fri Jul 14 2017 Joe Orton <jorton@redhat.com> - 2.2.2-2 - update to 2.2.2 (#1470891) * Fri Jul 07 2017 Joe Orton <jorton@redhat.com> - 2.2.1-2 - trim unnecessary doc, examples content * Mon Jun 19 2017 Joe Orton <jorton@redhat.com> - 2.2.1-1 - update to 2.2.1 (#1462474) * Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 2.2.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild * Tue Jun 21 2016 Joe Orton <jorton@redhat.com> - 2.2.0-1 - update to 2.2.0 (#1247348) * Thu Jun 16 2016 Joe Orton <jorton@redhat.com> - 2.1.1-2 - add security fixes for CVE-2016-0718, CVE-2012-6702, CVE-2016-5300, CVE-2016-4472 * Mon Apr 18 2016 David Tardon <dtardon@redhat.com> - 2.1.1-1 - new upstream release * Wed Feb 03 2016 Fedora Release Engineering <releng@fedoraproject.org> - 2.1.0-13 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild * Wed Jun 17 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.0-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild * Sat Feb 21 2015 Till Maas <opensource@till.name> - 2.1.0-11 - Rebuilt for Fedora 23 Change https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code * Sat Aug 16 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.0-10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Sat Jul 12 2014 Tom Callaway <spot@fedoraproject.org> - 2.1.0-9 - fix license handling * Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.0-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Sat Aug 03 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.0-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Mon Jun 17 2013 Joe Orton <jorton@redhat.com> - 2.1.0-6 - fix "xmlwf -h" output (#948534) * Wed Feb 13 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.0-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild * Thu Jul 19 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.0-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Fri Apr 13 2012 Joe Orton <jorton@redhat.com> - 2.1.0-3 - add -static subpackage (#722647) * Fri Mar 30 2012 Joe Orton <jorton@redhat.com> - 2.1.0-1 - ship .pc file, move library back to libdir (#808399) * Mon Mar 26 2012 Joe Orton <jorton@redhat.com> - 2.1.0-1 - update to 2.1.0 (#806602) * Fri Jan 13 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.1-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild * Tue Feb 08 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.1-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild * Mon Feb 08 2010 Joe Orton <jorton@redhat.com> - 2.0.1-10 - revised fix for CVE-2009-3560 regression (#544996) * Sun Jan 31 2010 Joe Orton <jorton@redhat.com> - 2.0.1-9 - drop static libraries (#556046) - add fix for regression in CVE-2009-3560 patch (#544996) * Tue Dec 01 2009 Joe Orton <jorton@redhat.com> - 2.0.1-8 - add security fix for CVE-2009-3560 (#533174) - add security fix for CVE-2009-3720 (#531697) - run the test suite * Fri Jul 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.1-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild * Tue Feb 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.1-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild * Tue Feb 19 2008 Fedora Release Engineering <rel-eng@fedoraproject.org> - 2.0.1-5 - Autorebuild for GCC 4.3 * Wed Jan 23 2008 Joe Orton <jorton@redhat.com> 2.0.1-4 - chmod 644 even more documentation (#429806) * Tue Jan 08 2008 Joe Orton <jorton@redhat.com> 2.0.1-3 - chmod 644 the documentation (#427950) * Wed Aug 22 2007 Joe Orton <jorton@redhat.com> 2.0.1-2 - rebuild * Wed Aug 08 2007 Joe Orton <jorton@redhat.com> 2.0.1-1 - update to 2.0.1 - fix the License tag - drop the .la file * Sun Feb 04 2007 Joe Orton <jorton@redhat.com> 1.95.8-10 - remove trailing dot in Summary (#225742) - use preferred BuildRoot per packaging guidelines (#225742) * Tue Jan 30 2007 Joe Orton <jorton@redhat.com> 1.95.8-9 - regenerate configure/libtool correctly (#199361) - strip DSP files from examples (#186889) - fix expat.h compilation with g++ -pedantic (#190244) * Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 1.95.8-8.2.1 - rebuild * Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 1.95.8-8.2 - bump again for double-long bug on ppc(64) * Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - 1.95.8-8.1 - rebuilt for new gcc4.1 snapshot and glibc changes * Tue Jan 31 2006 Joe Orton <jorton@redhat.com> 1.95.8-8 - restore .la file for apr-util * Mon Jan 30 2006 Joe Orton <jorton@redhat.com> 1.95.8-7 - move library to /lib (#178743) - omit .la file (#170031) * Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com> - rebuilt * Tue Mar 08 2005 Joe Orton <jorton@redhat.com> 1.95.8-6 - rebuild * Thu Nov 25 2004 Ivana Varekova <varekova@redhat.com> 1.95.8 - update to 1.95.8 * Wed Jun 16 2004 Jeff Johnson <jbj@jbj.org> 1.95.7-4 - add -fPIC (#125586). * Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com> - rebuilt * Fri Jun 11 2004 Jeff Johnson <jbj@jbj.org> 1.95.7-2 - fix: malloc failure from dbus test suite (#124747). * Tue Mar 02 2004 Elliot Lee <sopwith@redhat.com> - rebuilt * Sun Feb 22 2004 Joe Orton <jorton@redhat.com> 1.95.7-1 - update to 1.95.7, include COPYING file in main package * Fri Feb 13 2004 Elliot Lee <sopwith@redhat.com> - rebuilt * Wed Sep 17 2003 Matt Wilson <msw@redhat.com> 1.95.5-6 - rebuild again for #91211 * Tue Sep 16 2003 Matt Wilson <msw@redhat.com> 1.95.5-5 - rebuild to fix gzip'ed file md5sums (#91211) * Tue Jun 17 2003 Jeff Johnson <jbj@redhat.com> 1.95.5-4 - rebuilt because of crt breakage on ppc64. * Wed Jun 04 2003 Elliot Lee <sopwith@redhat.com> - rebuilt * Wed Jan 22 2003 Tim Powers <timp@redhat.com> - rebuilt * Mon Nov 11 2002 Jeff Johnson <jbj@redhat.com> 1.95.5-1 - update to 1.95.5. * Mon Aug 19 2002 Trond Eivind Glomsrød <teg@redhat.com> 1,95.4-1 - 1.95.4. 1.95.3 was withdrawn by the expat developers. * Fri Jun 21 2002 Tim Powers <timp@redhat.com> - automated rebuild * Thu Jun 06 2002 Trond Eivind Glomsrød <teg@redhat.com> 1,95.3-1 - 1.95.3 * Thu May 23 2002 Tim Powers <timp@redhat.com> - automated rebuild * Fri Mar 22 2002 Trond Eivind Glomsrød <teg@redhat.com> - Change a prereq in -devel on main package to a req - License from MIT/X11 to BSD * Mon Mar 11 2002 Trond Eivind Glomsrød <teg@redhat.com> - 1.95.2 * Sun Jun 24 2001 Elliot Lee <sopwith@redhat.com> - Bump release + rebuild. * Tue Oct 24 2000 Jeff Johnson <jbj@redhat.com> - update to 1.95.1 * Sun Oct 08 2000 Jeff Johnson <jbj@redhat.com> - Create.