xerces-c-3.1.4-lp152.5.3.1<>,Da0Ը/=„`Oz: G eAqd(:*R ~W@Aٻ ʗGcY[j/Ʉ4#h\]~ {Ygte%TkI׫2n(+~9"Ppy`5h iX.4ϚHq1*$ 6H:fh! w` GE- $4x#7]IDW,AZn#ܥ Ɵ6ލ'0E㢻}$GǥS]_~:C&8>>2?2d   5 $GMT   \       x   y( 8 9 : FGHIPXhYp\]^bc d!Ie!Nf!Ql!Su!dv!w.Px.y/z2D2T2X2^2Cxerces-c3.1.4lp152.5.3.1A Validating XML ParserXerces-C is a validating XML parser written in a portable subset of C++. Xerces-C makes it easy to give your application the ability to read and write XML data. A shared library is provided for parsing, generating, manipulating, and validating XML documents. Xerces-C is faithful to the XML 1.0 recommendation and associated standards ( DOM 1.0, DOM 2.0. SAX 1.0, SAX 2.0, Namespaces).a0lamb05 _openSUSE Leap 15.2openSUSEApache-2.0http://bugs.opensuse.orgProductivity/Publishing/XMLhttp://xerces.apache.org/xerces-c/linuxi5866VwFvvvwvFH,^0cA큤a0a0a0a0a0a0a0a0a0a0a0a0a0a0a0a0a0Wj?WjTomáš Chvátal tchvatal@suse.comtchvatal@suse.comjengelh@inai.dezawel1@gmail.compjanouch@suse.dempluskal@suse.commpluskal@suse.comzaitor@opensuse.org- Fix CVE-2018-1311 the XML parser contains a use-after-free triggered during the scanning of external DTDs potentially leading to DOS (bsc#1159552, CVE-2018-1311) * xerces-c-CVE-2018-1311.patch- Add patch to fix CVE-2017-12627 bsc#1083630 * xerces-c-CVE-2017-12627.patch- Version update to 3.1.4: * Fixes bnc#985860 CVE-2016-4463 * xerces-c-CVE-2016-2099.patch removed as it was included upstream- Use pkgconfig requires - Disable "pretty" make to make it bit faster - Fix the selfobsoleting provides/requires to silence rpmlint - Use valid group for the docs- Resolve rpmlint warnings of type "version-control-internal-file"- Update to 3.1.3 * bug fixes + memcpy used on overlapping memory regions causes sanity test failure + Typo in XMLUni::fgUnknownURIName constant + Buffer overruns in prolog parsing and error handling - Dropped xerces-c-CVE-2016-0729.patch, fixed upstream.- added xerces-c-CVE-2016-2099.patch Exception handling mistake causing use after free (bsc#979208, CVE-2016-2099) - xerces-c-CVE-2016-0729.patch Fix for mishandling certain kinds of malformed input documents, resulting in buffer overlows during processing and error reporting. The overflows can manifest as a segmentation fault or as memory corruption during a parse operation. (bsc#966822, CVE-2016-0729)- Update to 3.1.2 * bug fixes + Wrong temporary token type causes regex construction to fail + IGXMLScanner can fail to properly set its XSModel. + ICUTransService and IconvGNUransService CAN NOT deal with huge file. + xsi:type is not applied to root element + Problem in prefix parsing while creating Documnet, Element, Attributes on all platforms : Issue is in poolString creation + Whitespace in xsi:type + XMLUTF8Transcoder::transcodeTo fails with an exception when transcoding single characters that require 3 or more bytes as UTF8. + getWholeText leaks memory + Missing Libs.private in the xerces-c pkg-config file + XMLUni::fgXercesLoadSchema[] is not null-terminated in XMLUni.cpp + XMLURL.cpp: isHexDigit() and xlatHexDigit() accept whole alphabet + Xerces livelocks while reading external DTD if socket closes prematurely + Memory leak occurs if an exception is thrown in TranscodeToStr or TranscodeFromStr constructors + DOMDocumentImpl:: getPooledNString(const XMLCh *in, XMLSize_t n) returns incorrect string + OutOfMemoryException being thrown on creation of an LS Serializer + TranscodeToStr::transcode throws an exception when transcoding to UTF-8 + ContentSpecNode::getMaxTotalRange: Operator precedence flaw + Add support for GNU/Hurd by using POSIX.1-2001 and POSIX.1-2008 functions + enumeration value ‘Loop’ not handled in switch src/SEnumVal/SEnumVal.cpp: + bit operation error in DOMNodeImpl::reverseTreeOrderBitPattern + build xerces-c with icu on mingw gcc 4.7.2 + Xerces 3.1.1 Xerces.Lib fails to build with new Visual Studio 2012 Update 1 when v110_xp platform is chosen + Off-by-one error in TranscodeFromStr (with ICU) + Use icu, which is built with features + LocalFileFormatTarget leaks file handle + Curl Checking + Janitor::~Janitor() throws in unwind + String pooling in DOMDocumentImpl is unsafe, particularly on 64-bit platforms + Code analysis revealed multiple potential NULL derefence conditions (currently unconfirmed) + XMLString sizeToText/binToText produce mixed case + Crash while parsing malformed documents * improvements + MacOSUnicodeConverter.cpp: ISO C++ forbids comparison between pointer of type 'void *' and pointer-to-function + Allow compiling Xerces-C using C++11 (especially Clang) + VS2012 Project- Use url for source - Add gpg signature - Use fdupes to remove duplicities in documentation - Split documentation into separate package - Use curl as netaccessor, necessary for proxy support- Add baselib.conf in order to build -32Bit.lamb05 1630577620 3.1.4-lp152.5.3.13.1.4-lp152.5.3.1CreateDOMDocumentDOMCountDOMPrintEnumValMemParsePParsePSVIWriterRedirectSAX2CountSAX2PrintSAXCountSAXPrintSCMPrintSEnumValStdInParseXIncludexerces-cCREDITSKEYSLICENSENOTICEREADME/usr/bin//usr/share/doc/packages//usr/share/doc/packages/xerces-c/-fomit-frame-pointer -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:16900/openSUSE_Leap_15.2_Update/d1d48dde1cdf1b3cc76163035890cec4-xerces-c.openSUSE_Leap_15.2_Updatedrpmxz5i586-suse-linux ELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux.so.2, BuildID[sha1]=4d289e0dc7f909b953907cedf5b16956450d84da, for GNU/Linux 3.2.0, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux.so.2, BuildID[sha1]=b728b52aed8339af164155198d6e8f6d8164e48e, for GNU/Linux 3.2.0, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux.so.2, BuildID[sha1]=eb91cfc556915db2121830fd8afeabfc39351432, for GNU/Linux 3.2.0, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux.so.2, BuildID[sha1]=2b82138d4e86ae8cae8b5a9172c1fc3ce2320281, for GNU/Linux 3.2.0, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux.so.2, BuildID[sha1]=e6b785bd617976833c0c6c5fb1aa2c372c9dfe93, for GNU/Linux 3.2.0, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux.so.2, BuildID[sha1]=120fa470dc7a5edd950fa12068aa066b96227d23, for GNU/Linux 3.2.0, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux.so.2, BuildID[sha1]=98dc4efd57c79acadd45a01299f45aebcbca990e, for GNU/Linux 3.2.0, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux.so.2, BuildID[sha1]=f07857342b192f3e36b28ebbd6970ed3a9702007, for GNU/Linux 3.2.0, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux.so.2, BuildID[sha1]=2a2213b99a2321061b2f8c71e0ff43a025ef5143, for GNU/Linux 3.2.0, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux.so.2, BuildID[sha1]=70f7947975450b451a7359f356f03594da15c602, for GNU/Linux 3.2.0, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux.so.2, BuildID[sha1]=fc721339c810a20c9cdc1ea250615326b52bb089, for GNU/Linux 3.2.0, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux.so.2, BuildID[sha1]=480307df5d48e950cdd9d5c5aff2bc94bcb4c182, for GNU/Linux 3.2.0, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux.so.2, BuildID[sha1]=266e7ece95a6808836923622c8fb7e54ea1d1aaf, for GNU/Linux 3.2.0, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux.so.2, BuildID[sha1]=3bef42d4461cb432cba9e08df01518048807de0f, for GNU/Linux 3.2.0, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux.so.2, BuildID[sha1]=1643abc201760b753e36fbfcea3f12de96f244f7, for GNU/Linux 3.2.0, strippedELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux.so.2, BuildID[sha1]=1ae7e26e6509d6713844039318dad62a4adb074e, for GNU/Linux 3.2.0, strippeddirectoryISO-8859 textASCII text '3@M[hu    RR R R RRRRR RRRRRRRRR R R RR R RRRRR R R R RRRRR RRRRR R R RRRRR RRRRR R R R RRRRR RRRRR R R R RRRRR RRRRRRRRR R R RR R RRRRR R R R RRRRR RRRRRRRR R R RR R RRRRR R R R RRRRR RRRRRRRRR R R RR R RRRRR R R R RRRRR RRRRRRRR R R RR R RRRRR R R R RRRRR RRRRR R R R RRRRR RRRRR R R R RRRRR RRRa#? {utf-809c09a10a7a471000515146a2541b958fc2c525b92c40db53792c9cb4f5ea96b? 7zXZ !t/' ]"k%r]f<5f[QtN;?p1ⱬE:2ܑ -,*#qZ61r !Rha=4Zk=kONHiQ,)ݍqiȕ/6ʄ9ok8NK^[ds ;[iTP-mMQk5,Upg6]7'`溹DY w˗Isz'pճ0*f'!70]h.V; L1`Y }62㋭ɞ`y VyQl|tqJ BY~ J pBR<%|qR$1Wr3S/7K乺3!3"O3PPC79}F-iiR1y'Iq&S\S7]Q"d$٠s# }RcqOwk.]-Kk b&1Nela~oCůń[M,\2Tm<>e h# Zٓ A8άfe v*%PHʠ71 LTFnx$C2n$LN5K)(ql^B#biR9m#\d/{ $q'P#+%A6D֪Hrfn!0g ='ؠgh)ҁ84ߏ|s/^hh!c|ndkWozm=<Þ]ZߦmUW`SWVYB#xMzf)JnS z_8Fl5A` a,/JCa[*B[JC2ooM[ADSQ Ftma2J:/ <+FC0=F^S`U|iz(S ?~ða.*5^*ܵ9TtQS~h{;_ųZ깎ѦĩhK3+6Y=LlO;.C&k08a ?(Vrd[[uis(ya,ko Bϵ}xkU*%Ei3V@gq;/(Q_^lJ:R OUeϗOa sN^D%lW3XJ!־~.cBFY j:=+>,j+U5ߌ}rQ,&iJtW׽@>a!GBYO*̵ ͯDH3{C`Q'AlU.W_,ޓh`r>iy_A}܉>|LmA)ihQl#~oi{0^~ l gjqzqfKda2 xCζrתVu,}~0<Y Ҋe5.l̹/ߥl[ݍ&*ay_z|a9kiAמF@`\CvfK3%lHI Ά$P#sK2#'Q.dxpS9 wn<F֛>\y hܱaWUG ppƦ@s-V[Ϣ&xJ;,{' K  HQ`d|u䝴A?RqK,=6 ~%< aƉϗbE/Ba$8ըzщ=+9]eY;y'b~Jkq8 )_~->HrY="hѻaX#*e`>"L2NLIwN=9*J NE׿Ry|5Z \xGݻqR֫_|A"b)ln.{ l!"NW5+Caۂ-nAߠҐgcAa*GsY?aC~RBa_e!A%?*\! <!5`Hw/Q!˳^bnԃu.$cESxlU8ubЭDtmp674G{hvXjo[ ).)w;f??U|DԮska7tF/|ʮ"j& oK@of^XߺT ;c?vcuUdVCpĢ=|jKqy$;nɩ{ʨB3Չv-QGtCvP\,zWw<轌ZTtS\fkޒVn/3:h·tM^yFh+Q9b$䱿M0YΧSj@ ^ܯHGu> xo=$}yF+Z;tn^wSEȉ4&P^n;_6HVDO7eaTKWqRSK&8@ 'r?ίA89qPW=XVg#$&GL-ec%nHJf l1<ݴe&Gse(xUr,0A4K `$!z&-vVӲYdBPt}OV}dnuR!$F=~9N3Z_hB698*؛GyIK. 6.AS4鉼$ǕGl۰_8&֯PlKZ:溝K}ޜ[Tf@-XU\ 0U&VFhf(z$R8-h[(1HX pv SbWDE_3ᗉVs|kY74O]pU3l8#g~K7FSil}&2iRuu74!p/m0{?sx(/ؗ&`\/պHHO鵸?Zl=$@76d*g5>p-vP:+trpG> aQxN"%Iz, Ue9? ģL@"v&=;H)QrI"JbVDL؛S>%$ Mj{@f!wMosXC$Y%Nfg,[#139~yHg daQ)b8-$Gm}7nԊqf)e%>կ`L/]Z'wFyy4'ǘY 7da0@_"`noaAc5*ciPR/΢=X*ˊm\n| RVsnQ:*T:/e:G'^l|JZ A|sp|XW4BP%9!gF] $4At<]3$V8!8BK-o]5+H]g܂ ^cB+.$ֳ!,)XZ6TqɔLwYDOYc@* YZ