ZhuningOS/libxslt
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Initialize for libxslt

Browse source
This commit is contained in:
zyppe 2024-02-29 16:04:21 +08:00
commit 952614203a
16 changed files with 2415 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
.gitignore vendored Normal file
View file

@ -0,0 +1 @@
libxslt-1.1.34.tar.gz

1
.libxslt.metadata Normal file
View file

@ -0,0 +1 @@
4b350127d3bc4d6f73e99bb180ab655c62fbeffd9919f99d8b8eccec622e56ea libxslt-1.1.34.tar.gz

46
0009-Make-generate-id-deterministic.patch Normal file
View file

@ -0,0 +1,46 @@
Description: Make generate-id() return identifiers in a deterministic way
generate-id() used to return identifiers based on the memory address of
the node object. This unfortunately prevents documentation to be built
reproducily. Instead, we now increment a static counter and store its
value in the node _private on the first invocation of generate-id().
Author: Jérémy Bobbio <lunar@debian.org>
Index: libxslt-1.1.29/libxslt/functions.c
===================================================================
--- libxslt-1.1.29.orig/libxslt/functions.c
+++ libxslt-1.1.29/libxslt/functions.c
@@ -661,10 +661,10 @@ xsltFormatNumberFunction(xmlXPathParserC
*/
void
xsltGenerateIdFunction(xmlXPathParserContextPtr ctxt, int nargs){
- static char base_address;
+ static unsigned long next_id = 1;
xmlNodePtr cur = NULL;
xmlXPathObjectPtr obj = NULL;
- long val;
+ unsigned long val;
xmlChar str[30];
if (nargs == 0) {
@@ -702,12 +702,16 @@ xsltGenerateIdFunction(xmlXPathParserCon
if (obj)
xmlXPathFreeObject(obj);
- val = (long)((char *)cur - (char *)&base_address);
- if (val >= 0) {
- snprintf((char *)str, sizeof(str), "idp%ld", val);
- } else {
- snprintf((char *)str, sizeof(str), "idm%ld", -val);
+ if (cur->_private == NULL) {
+ cur->_private = xmlMalloc(sizeof (unsigned long));
+ if (cur->_private == NULL) {
+ xmlGenericError(xmlGenericErrorContext, "malloc failed !\n");
+ }
+ *((unsigned long *)cur->_private) = next_id++;
}
+ val = *((unsigned long *)cur->_private);
+
+ sprintf((char *)str, "id%lu", val);
valuePush(ctxt, xmlXPathNewString(str));
}

888
Recreate-xsltproc-man-page-with-old-Docbook-styleshe.patch Normal file
View file

@ -0,0 +1,888 @@
From f165525fe744e6fe3b377b480d6cc5f9c546d360 Mon Sep 17 00:00:00 2001
From: Nick Wellnhofer <wellnhofer@aevum.de>
Date: Sun, 20 Sep 2020 16:59:23 +0200
Subject: [PATCH] Recreate xsltproc man page with old Docbook stylesheet URL
Fixes #31.
Reviewed-by: Petr Vorel <pvorel@suse.cz>
---
doc/xsltproc.1 | 627 ++++++++++++-----------------------------------
doc/xsltproc.xml | 2 +-
2 files changed, 161 insertions(+), 468 deletions(-)
diff --git a/doc/xsltproc.1 b/doc/xsltproc.1
index 7393b6db..bbf4098f 100644
--- a/doc/xsltproc.1
+++ b/doc/xsltproc.1
@@ -1,7 +1,7 @@
'\" t
.\" Title: xsltproc
.\" Author: John Fleck <jfleck@inkstain.net>
-.\" Generator: DocBook XSL Stylesheets vsnapshot <http://docbook.sf.net/>
+.\" Generator: DocBook XSL Stylesheets v1.79.1 <http://docbook.sf.net/>
.\" Date: $Date$
.\" Manual: xsltproc Manual
.\" Source: libxslt
@@ -27,72 +27,13 @@
.\" -----------------------------------------------------------------
.\" * MAIN CONTENT STARTS HERE *
.\" -----------------------------------------------------------------
-
-
-
-
-
.SH "NAME"
xsltproc \- command line XSLT processor
-
.SH "SYNOPSIS"
-
- .HP \w'\fBxsltproc\fR\ 'u
-
- \fBxsltproc\fR
- [
- [
- | \fB\-V\fR
- | \fB\-\-version\fR
- ]
- [
- | \fB\-v\fR
- | \fB\-\-verbose\fR
- ]
- [
- {
- | \fB\-o\fR
- | \fB\-\-output\fR
- }
- {
- | \fIFILE\fR
- | \fIDIRECTORY\fR
- }
- ]
- | \fB\-\-timing\fR
- | \fB\-\-repeat\fR
- | \fB\-\-debug\fR
- | \fB\-\-novalid\fR
- | \fB\-\-noout\fR
- | \fB\-\-maxdepth\ \fR\fB\fIVALUE\fR\fR
- | \fB\-\-html\fR
- | \fB\-\-encoding\ \fR\fB\fIENCODING\fR\fR\fB\ \fR
- | \fB\-\-param\ \fR\fB\fIPARAMNAME\fR\fR\fB\ \fR\fB\fIPARAMVALUE\fR\fR\fB\ \fR
- | \fB\-\-stringparam\ \fR\fB\fIPARAMNAME\fR\fR\fB\ \fR\fB\fIPARAMVALUE\fR\fR\fB\ \fR
- | \fB\-\-nonet\fR
- | \fB\-\-path\ "\fR\fB\fIPATH(S)\fR\fR\fB"\fR
- | \fB\-\-load\-trace\fR
- | \fB\-\-catalogs\fR
- | \fB\-\-xinclude\fR
- | [\ |\ \fB\-\-profile\fR\ |\ \fB\-\-norman\fR\ ]
- | \fB\-\-dumpextensions\fR
- | \fB\-\-nowrite\fR
- | \fB\-\-nomkdir\fR
- | \fB\-\-writesubtree\ \fR\fB\fIPATH\fR\fR
- | \fB\-\-nodtdattr\fR
- ]
- [\fISTYLESHEET\fR]
- {
- | \fIXML\-FILE\fR...
- | \-
- }
-
-
-
+.HP \w'\fBxsltproc\fR\ 'u
+\fBxsltproc\fR [[\fB\-V\fR | \fB\-\-version\fR] [\fB\-v\fR | \fB\-\-verbose\fR] [{\fB\-o\fR | \fB\-\-output\fR} {\fIFILE\fR | \fIDIRECTORY\fR}] | \fB\-\-timing\fR | \fB\-\-repeat\fR | \fB\-\-debug\fR | \fB\-\-novalid\fR | \fB\-\-noout\fR | \fB\-\-maxdepth\ \fR\fB\fIVALUE\fR\fR | \fB\-\-maxvars\ \fR\fB\fIVALUE\fR\fR | \fB\-\-maxparserdepth\ \fR\fB\fIVALUE\fR\fR | \fB\-\-huge\fR | \fB\-\-seed\-rand\ \fR\fB\fIVALUE\fR\fR | \fB\-\-html\fR | \fB\-\-encoding\ \fR\fB\fIENCODING\fR\fR\fB\ \fR | \fB\-\-param\ \fR\fB\fIPARAMNAME\fR\fR\fB\ \fR\fB\fIPARAMVALUE\fR\fR\fB\ \fR | \fB\-\-stringparam\ \fR\fB\fIPARAMNAME\fR\fR\fB\ \fR\fB\fIPARAMVALUE\fR\fR\fB\ \fR | \fB\-\-nonet\fR | \fB\-\-path\ "\fR\fB\fIPATH(S)\fR\fR\fB"\fR | \fB\-\-load\-trace\fR | \fB\-\-catalogs\fR | \fB\-\-xinclude\fR | \fB\-\-xincludestyle\fR | [\fB\-\-profile\fR\ |\ \fB\-\-norman\fR] | \fB\-\-dumpextensions\fR | \fB\-\-nowrite\fR | \fB\-\-nomkdir\fR | \fB\-\-writesubtree\ \fR\fB\fIPATH\fR\fR | \fB\-\-nodtdattr\fR] [\fISTYLESHEET\fR] {\fIXML\-FILE\fR... | \-}
.SH "DESCRIPTION"
-
-
- .PP
+.PP
\fBxsltproc\fR
is a command line tool for applying
XSLT
@@ -100,46 +41,32 @@ stylesheets to
XML
documents\&. It is part of
\fBlibxslt\fR(3), the XSLT C library for GNOME\&. While it was developed as part of the GNOME project, it can operate independently of the GNOME desktop\&.
-
- .PP
+.PP
\fBxsltproc\fR
is invoked from the command line with the name of the stylesheet to be used followed by the name of the file or files to which the stylesheet is to be applied\&. It will use the standard input if a filename provided is
\fB\-\fR
\&.
-
- .PP
+.PP
If a stylesheet is included in an
XML
document with a Stylesheet Processing Instruction, no stylesheet need to be named at the command line\&.
\fBxsltproc\fR
will automatically detect the included stylesheet and use it\&.
-
- .PP
+.PP
By default, output is to
stdout\&. You can specify a file for output using the
\fB\-o\fR
or
\fB\-\-output\fR
option\&.
-
-
.SH "OPTIONS"
-
-
- .PP
+.PP
\fBxsltproc\fR
accepts the following options (in alphabetical order):
-
-
-
-
- .PP
+.PP
\fB\-\-catalogs\fR
.RS 4
-
-
-
- Use the
+Use the
SGML
catalog specified in
\fBSGML_CATALOG_FILES\fR
@@ -148,154 +75,101 @@ to resolve the location of external entities\&. By default,
looks for the catalog specified in
\fBXML_CATALOG_FILES\fR\&. If that is not specified, it uses
/etc/xml/catalog\&.
-
-
- .RE
-
- .PP
+.RE
+.PP
\fB\-\-debug\fR
.RS 4
-
-
-
- Output an
+Output an
XML
tree of the transformed document for debugging purposes\&.
-
-
- .RE
-
- .PP
+.RE
+.PP
\fB\-\-dumpextensions\fR
.RS 4
-
-
-
- Dumps the list of all registered extensions on
+Dumps the list of all registered extensions on
stdout\&.
-
-
- .RE
-
- .PP
+.RE
+.PP
\fB\-\-html\fR
.RS 4
-
-
-
- The input document is an
+The input document is an
HTML
file\&.
-
-
- .RE
-
- .PP
+.RE
+.PP
\fB\-\-load\-trace\fR
.RS 4
-
-
-
- Display all the documents loaded during the processing to
+Display all the documents loaded during the processing to
stderr\&.
-
-
- .RE
-
- .PP
+.RE
+.PP
\fB\-\-maxdepth \fR\fB\fIVALUE\fR\fR
.RS 4
-
-
-
- Adjust the maximum depth of the template stack before
+Adjust the maximum depth of the template stack before
\fBlibxslt\fR(3)
concludes it is in an infinite loop\&. The default is 3000\&.
-
-
- .RE
-
- .PP
+.RE
+.PP
+\fB\-\-maxvars \fR\fB\fIVALUE\fR\fR
+.RS 4
+Maximum number of variables\&. The default is 15000\&.
+.RE
+.PP
+\fB\-\-maxparserdepth \fR\fB\fIVALUE\fR\fR
+.RS 4
+Maximum element nesting level of parsed XML documents\&. The default is 256\&.
+.RE
+.PP
+\fB\-\-huge\fR
+.RS 4
+Relax hardcoded limits of the XML parser by setting the XML_PARSE_HUGE parser option\&.
+.RE
+.PP
+\fB\-\-seed\-rand \fR\fB\fIVALUE\fR\fR
+.RS 4
+Initialize pseudo random number generator with specific seed\&.
+.RE
+.PP
\fB\-\-nodtdattr\fR
.RS 4
-
-
-
- Do not apply default attributes from the document\*(Aqs
+Do not apply default attributes from the document\*(Aqs
DTD\&.
-
-
- .RE
-
- .PP
+.RE
+.PP
\fB\-\-nomkdir\fR
.RS 4
-
-
-
- Refuses to create directories\&.
-
-
- .RE
-
- .PP
+Refuses to create directories\&.
+.RE
+.PP
\fB\-\-nonet\fR
.RS 4
-
-
-
- Do not use the Internet to fetch
+Do not use the Internet to fetch
DTDs, entities or documents\&.
-
-
- .RE
-
- .PP
+.RE
+.PP
\fB\-\-noout\fR
.RS 4
-
-
-
- Do not output the result\&.
-
-
- .RE
-
- .PP
+Do not output the result\&.
+.RE
+.PP
\fB\-\-novalid\fR
.RS 4
-
-
-
- Skip loading the document\*(Aqs
+Skip loading the document\*(Aqs
DTD\&.
-
-
- .RE
-
- .PP
+.RE
+.PP
\fB\-\-nowrite\fR
.RS 4
-
-
-
- Refuses to write to any file or resource\&.
-
-
- .RE
-
- .PP
+Refuses to write to any file or resource\&.
+.RE
+.PP
\fB\-o\fR or \fB\-\-output\fR \fIFILE\fR | \fIDIRECTORY\fR
.RS 4
-
-
-
- Direct output to the given
+Direct output to the given
\fIFILE\fR\&. Using the option with a
\fIDIRECTORY\fR
directs the output files to the specified directory\&. This can be useful for multiple outputs (also known as "chunking") or manpage processing\&.
-
- .if n \{\
+.if n \{\
.sp
.\}
.RS 4
@@ -307,14 +181,12 @@ directs the output files to the specified directory\&. This can be useful for mu
\fBImportant\fR
.ps -1
.br
-
- The given directory
+The given directory
\fBmust\fR
already exist\&.
-
- .sp .5v
+.sp .5v
.RE
- .if n \{\
+.if n \{\
.sp
.\}
.RS 4
@@ -326,8 +198,7 @@ already exist\&.
\fBNote\fR
.ps -1
.br
-
- Make sure that
+Make sure that
\fIFILE\fR
and
\fIDIRECTORY\fR
@@ -338,82 +209,47 @@ as described in RFC 2396 and laters\&. This means, that e\&.g\&.
will maybe not work, but
\fB\-o directory/\fR
will\&.
-
- .sp .5v
+.sp .5v
.RE
-
- .RE
-
- .PP
+.RE
+.PP
\fB\-\-encoding \fR\fB\fIENCODING\fR\fR
.RS 4
-
-
-
- Allow to specify the encoding for the input\&.
-
-
- .RE
- .PP
+Allow to specify the encoding for the input\&.
+.RE
+.PP
\fB\-\-param \fR\fB\fIPARAMNAME\fR\fR\fB \fR\fB\fIPARAMVALUE\fR\fR
.RS 4
-
-
-
- Pass a parameter of name
+Pass a parameter of name
\fIPARAMNAME\fR
and value
\fIPARAMVALUE\fR
to the stylesheet\&. You may pass multiple name/value pairs up to a maximum of 32\&. If the value being passed is a string, you can use
\fB\-\-stringparam\fR
instead, to avoid additional quote characters that appear in string expressions\&. Note: the XPath expression must be UTF\-8 encoded\&.
-
-
- .RE
-
- .PP
+.RE
+.PP
\fB\-\-path "\fR\fB\fIPATH(S)\fR\fR\fB"\fR
.RS 4
-
-
-
- Use the (space\- or colon\-separated) list of filesystem paths specified by
+Use the (space\- or colon\-separated) list of filesystem paths specified by
\fIPATHS\fR
to load
DTDs, entities or documents\&. Enclose space\-separated lists by quotation marks\&.
-
-
- .RE
-
- .PP
+.RE
+.PP
\fB\-\-profile\fR or \fB\-\-norman\fR
.RS 4
-
-
-
- Output profiling information detailing the amount of time spent in each part of the stylesheet\&. This is useful in optimizing stylesheet performance\&.
-
-
- .RE
-
- .PP
+Output profiling information detailing the amount of time spent in each part of the stylesheet\&. This is useful in optimizing stylesheet performance\&.
+.RE
+.PP
\fB\-\-repeat\fR
.RS 4
-
-
-
- Run the transformation 20 times\&. Used for timing tests\&.
-
-
- .RE
-
- .PP
+Run the transformation 20 times\&. Used for timing tests\&.
+.RE
+.PP
\fB\-\-stringparam \fR\fB\fIPARAMNAME\fR\fR\fB \fR\fB\fIPARAMVALUE\fR\fR
.RS 4
-
-
-
- Pass a parameter of name
+Pass a parameter of name
\fIPARAMNAME\fR
and value
\fIPARAMVALUE\fR
@@ -422,268 +258,136 @@ where
is a string rather than a node identifier\&.
\fBNote:\fR
The string must be UTF\-8 encoded\&.
-
-
- .RE
-
- .PP
+.RE
+.PP
\fB\-\-timing\fR
.RS 4
-
-
-
- Display the time used for parsing the stylesheet, parsing the document and applying the stylesheet and saving the result\&. Displayed in milliseconds\&.
-
-
- .RE
-
- .PP
+Display the time used for parsing the stylesheet, parsing the document and applying the stylesheet and saving the result\&. Displayed in milliseconds\&.
+.RE
+.PP
\fB\-v\fR or \fB\-\-verbose\fR
.RS 4
-
-
-
- Output each step taken by
+Output each step taken by
\fBxsltproc\fR
in processing the stylesheet and the document\&.
-
-
- .RE
-
- .PP
+.RE
+.PP
\fB\-V\fR or \fB\-\-version\fR
.RS 4
-
-
-
- Show the version of
+Show the version of
\fBlibxml\fR(3)
and
\fBlibxslt\fR(3)
used\&.
-
-
- .RE
-
- .PP
+.RE
+.PP
\fB\-\-writesubtree \fR\fB\fIPATH\fR\fR
.RS 4
-
-
-
- Allow file write only within the
+Allow file write only within the
\fIPATH\fR
subtree\&.
-
-
- .RE
-
- .PP
+.RE
+.PP
\fB\-\-xinclude\fR
.RS 4
-
-
-
- Process the input document using the XInclude specification\&. More details on this can be found in the XInclude specification:
+Process the input document using the XInclude specification\&. More details on this can be found in the XInclude specification:
\m[blue]\fB\%http://www.w3.org/TR/xinclude/\fR\m[]
-
-
- .RE
-
-
-
+.RE
+.PP
+\fB\-\-xincludestyle\fR
+.RS 4
+Process the stylesheet with XInclude\&.
+.RE
.SH "ENVIRONMENT"
-
-
-
-
-
- .PP
+.PP
\fBSGML_CATALOG_FILES\fR
.RS 4
-
-
-
- SGML
+SGML
catalog behavior can be changed by redirecting queries to the user\*(Aqs own set of catalogs\&. This can be done by setting the
\fBSGML_CATALOG_FILES\fR
environment variable to a list of catalogs\&. An empty one should deactivate loading the default
/etc/sgml/catalog
catalog\&.
-
-
- .RE
-
- .PP
+.RE
+.PP
\fBXML_CATALOG_FILES\fR
.RS 4
-
-
-
- XML
+XML
catalog behavior can be changed by redirecting queries to the user\*(Aqs own set of catalogs\&. This can be done by setting the
\fBXML_CATALOG_FILES\fR
environment variable to a list of catalogs\&. An empty one should deactivate loading the default
/etc/xml/catalog
catalog\&.
-
-
- .RE
-
-
-
+.RE
.SH "DIAGNOSTICS"
-
-
- .PP
+.PP
\fBxsltproc\fR
return codes provide information that can be used when calling it from scripts\&.
-
-
-
-
- .PP
+.PP
\fB0\fR
.RS 4
-
-
-
- No error (normal operation)
-
-
- .RE
-
- .PP
+No error (normal operation)
+.RE
+.PP
\fB1\fR
.RS 4
-
-
-
- No argument
-
-
- .RE
-
- .PP
+No argument
+.RE
+.PP
\fB2\fR
.RS 4
-
-
-
- Too many parameters
-
-
- .RE
-
- .PP
+Too many parameters
+.RE
+.PP
\fB3\fR
.RS 4
-
-
-
- Unknown option
-
-
- .RE
-
- .PP
+Unknown option
+.RE
+.PP
\fB4\fR
.RS 4
-
-
-
- Failed to parse the stylesheet
-
-
- .RE
-
- .PP
+Failed to parse the stylesheet
+.RE
+.PP
\fB5\fR
.RS 4
-
-
-
- Error in the stylesheet
-
-
- .RE
-
- .PP
+Error in the stylesheet
+.RE
+.PP
\fB6\fR
.RS 4
-
-
-
- Error in one of the documents
-
-
- .RE
-
- .PP
+Error in one of the documents
+.RE
+.PP
\fB7\fR
.RS 4
-
-
-
- Unsupported xsl:output method
-
-
- .RE
-
- .PP
+Unsupported xsl:output method
+.RE
+.PP
\fB8\fR
.RS 4
-
-
-
- String parameter contains both quote and double\-quotes
-
-
- .RE
-
- .PP
+String parameter contains both quote and double\-quotes
+.RE
+.PP
\fB9\fR
.RS 4
-
-
-
- Internal processing error
-
-
- .RE
-
- .PP
+Internal processing error
+.RE
+.PP
\fB10\fR
.RS 4
-
-
-
- Processing was stopped by a terminating message
-
-
- .RE
-
- .PP
+Processing was stopped by a terminating message
+.RE
+.PP
\fB11\fR
.RS 4
-
-
-
- Could not write the result to the output file
-
-
- .RE
-
-
-
+Could not write the result to the output file
+.RE
.SH "SEE ALSO"
-
-
- .PP
+.PP
\fBlibxml\fR(3),
\fBlibxslt\fR(3)
-
- .PP
+.PP
More information can be found at
.sp
.RS 4
@@ -694,12 +398,10 @@ More information can be found at
.sp -1
.IP \(bu 2.3
.\}
-
- \fBlibxml\fR(3)
+\fBlibxml\fR(3)
web page
\m[blue]\fB\%http://www.xmlsoft.org/\fR\m[]
-
- .RE
+.RE
.sp
.RS 4
.ie n \{\
@@ -709,24 +411,15 @@ web page
.sp -1
.IP \(bu 2.3
.\}
-
- W3C
+W3C
XSLT
page
\m[blue]\fB\%http://www.w3.org/TR/xslt\fR\m[]
-
- .RE
+.RE
.sp
-
-
-
.SH "AUTHOR"
.PP
\fBJohn Fleck\fR <\&jfleck@inkstain\&.net\&>
-.br
-
-
-
.RS 4
Author.
.RE
diff --git a/doc/xsltproc.xml b/doc/xsltproc.xml
index 8b78693e..051cbc01 100644
--- a/doc/xsltproc.xml
+++ b/doc/xsltproc.xml
@@ -1,6 +1,6 @@
<?xml version="1.0"?>
<?xml-stylesheet type="text/xsl"
- href="http://cdn.docbook.org/release/xsl/current//manpages/docbook.xsl"?>
+ href="http://docbook.sourceforge.net/release/xsl/current/manpages/docbook.xsl"?>
<!DOCTYPE refentry PUBLIC "-//OASIS//DTD DocBook XML V4.1.2//EN"
"http://www.oasis-open.org/docbook/xml/4.1.2/docbookx.dtd" [
--
2.31.1

7
baselibs.conf Normal file
View file

@ -0,0 +1,7 @@
libxslt1
obsoletes "libxslt-<targettype>"
libxslt-devel
requires -libxslt-<targettype>
requires "libxslt1-<targettype> = <version>"
obsoletes "libxslt-devel-<targettype> < <version>"
provides "libxslt-devel-<targettype> = <version>"

11
libxslt-1.1.24-no-net-autobuild.patch Normal file
View file

@ -0,0 +1,11 @@
--- xsltproc/xsltproc.c
+++ xsltproc/xsltproc.c
@@ -544,7 +544,7 @@
sec = xsltNewSecurityPrefs();
xsltSetDefaultSecurityPrefs(sec);
- defaultEntityLoader = xmlGetExternalEntityLoader();
+ defaultEntityLoader = getenv("RPM_PACKAGE_NAME") ? xmlNoNetExternalEntityLoader : xmlGetExternalEntityLoader();
xmlSetExternalEntityLoader(xsltprocExternalEntityLoader);
for (i = 1; i < argc; i++) {

11
libxslt-1.1.34.tar.gz.asc Normal file
View file

@ -0,0 +1,11 @@
-----BEGIN PGP SIGNATURE-----
iQEzBAABCAAdFiEE20ZoG7ka3OoXD6LUFViLJllr6l0FAl257GgACgkQFViLJllr
6l2vVggAjJEHmASiS56SxhPOsGqbfBihM66gQFoIymQfMu2430N1GSTkLsfbkJO8
8yBX11NjzK/m9uxwshMW3rVCU7EpL3PUimN3reXdPiQj9hAOAWF1V3BZNevbQC2E
FCIraioukaidf8sjUG4/sGpK/gOcP/3hYoN0HUoBigCNJjDqhijxM3M3GJJtCASp
jL4CQbs2OmxW8ixOZbuWEESvFFHUgYRsdZjRVN+GRfSOvJjxypurmYwQ3RjO7JxL
2FY8qKQ+xpeID8NV8F5OUEvWBjk1QS133VTqBZNlONdnEtV/og6jNu5k0O/Kvhup
caR+8TMErOcLr9OgDklO6DoYyAsf9Q==
=g4i4
-----END PGP SIGNATURE-----

198
libxslt-CVE-2021-30560.patch Normal file
View file

@ -0,0 +1,198 @@
From 50f9c9cd3b7dfe9b3c8c795247752d1fdcadcac8 Mon Sep 17 00:00:00 2001
From: Nick Wellnhofer <wellnhofer@aevum.de>
Date: Sat, 12 Jun 2021 20:02:53 +0200
Subject: [PATCH] Fix use-after-free in xsltApplyTemplates
xsltApplyTemplates without a select expression could delete nodes in
the source document.
1. Text nodes with strippable whitespace
Whitespace from input documents is already stripped, so there's no
need to strip it again. Under certain circumstances, xsltApplyTemplates
could be fooled into deleting text nodes that are still referenced,
resulting in a use-after-free.
2. The DTD
The DTD was only unlinked, but there's no good reason to do this just
now. Maybe it was meant as a micro-optimization.
3. Unknown nodes
Useless and dangerous as well, especially with XInclude nodes.
See https://gitlab.gnome.org/GNOME/libxml2/-/issues/268
Simply stop trying to uselessly delete nodes when applying a template.
This part of the code is probably a leftover from a time where
xsltApplyStripSpaces wasn't implemented yet. Also note that
xsltApplyTemplates with a select expression never tried to delete
nodes.
Also stop xsltDefaultProcessOneNode from deleting nodes for the same
reasons.
This fixes CVE-2021-30560.
---
libxslt/transform.c | 119 +++-----------------------------------------
1 file changed, 7 insertions(+), 112 deletions(-)
diff --git a/libxslt/transform.c b/libxslt/transform.c
index 04522154..3aba354f 100644
--- a/libxslt/transform.c
+++ b/libxslt/transform.c
@@ -1895,7 +1895,7 @@ static void
xsltDefaultProcessOneNode(xsltTransformContextPtr ctxt, xmlNodePtr node,
xsltStackElemPtr params) {
xmlNodePtr copy;
- xmlNodePtr delete = NULL, cur;
+ xmlNodePtr cur;
int nbchild = 0, oldSize;
int childno = 0, oldPos;
xsltTemplatePtr template;
@@ -1968,54 +1968,13 @@ xsltDefaultProcessOneNode(xsltTransformContextPtr ctxt, xmlNodePtr node,
return;
}
/*
- * Handling of Elements: first pass, cleanup and counting
+ * Handling of Elements: first pass, counting
*/
cur = node->children;
while (cur != NULL) {
- switch (cur->type) {
- case XML_TEXT_NODE:
- case XML_CDATA_SECTION_NODE:
- case XML_DOCUMENT_NODE:
- case XML_HTML_DOCUMENT_NODE:
- case XML_ELEMENT_NODE:
- case XML_PI_NODE:
- case XML_COMMENT_NODE:
- nbchild++;
- break;
- case XML_DTD_NODE:
- /* Unlink the DTD, it's still reachable using doc->intSubset */
- if (cur->next != NULL)
- cur->next->prev = cur->prev;
- if (cur->prev != NULL)
- cur->prev->next = cur->next;
- break;
- default:
-#ifdef WITH_XSLT_DEBUG_PROCESS
- XSLT_TRACE(ctxt,XSLT_TRACE_PROCESS_NODE,xsltGenericDebug(xsltGenericDebugContext,
- "xsltDefaultProcessOneNode: skipping node type %d\n",
- cur->type));
-#endif
- delete = cur;
- }
+ if (IS_XSLT_REAL_NODE(cur))
+ nbchild++;
cur = cur->next;
- if (delete != NULL) {
-#ifdef WITH_XSLT_DEBUG_PROCESS
- XSLT_TRACE(ctxt,XSLT_TRACE_PROCESS_NODE,xsltGenericDebug(xsltGenericDebugContext,
- "xsltDefaultProcessOneNode: removing ignorable blank node\n"));
-#endif
- xmlUnlinkNode(delete);
- xmlFreeNode(delete);
- delete = NULL;
- }
- }
- if (delete != NULL) {
-#ifdef WITH_XSLT_DEBUG_PROCESS
- XSLT_TRACE(ctxt,XSLT_TRACE_PROCESS_NODE,xsltGenericDebug(xsltGenericDebugContext,
- "xsltDefaultProcessOneNode: removing ignorable blank node\n"));
-#endif
- xmlUnlinkNode(delete);
- xmlFreeNode(delete);
- delete = NULL;
}
/*
@@ -4864,7 +4823,7 @@ xsltApplyTemplates(xsltTransformContextPtr ctxt, xmlNodePtr node,
xsltStylePreCompPtr comp = (xsltStylePreCompPtr) castedComp;
#endif
int i;
- xmlNodePtr cur, delNode = NULL, oldContextNode;
+ xmlNodePtr cur, oldContextNode;
xmlNodeSetPtr list = NULL, oldList;
xsltStackElemPtr withParams = NULL;
int oldXPProximityPosition, oldXPContextSize;
@@ -4998,73 +4957,9 @@ xsltApplyTemplates(xsltTransformContextPtr ctxt, xmlNodePtr node,
else
cur = NULL;
while (cur != NULL) {
- switch (cur->type) {
- case XML_TEXT_NODE:
- if ((IS_BLANK_NODE(cur)) &&
- (cur->parent != NULL) &&
- (cur->parent->type == XML_ELEMENT_NODE) &&
- (ctxt->style->stripSpaces != NULL)) {
- const xmlChar *val;
-
- if (cur->parent->ns != NULL) {
- val = (const xmlChar *)
- xmlHashLookup2(ctxt->style->stripSpaces,
- cur->parent->name,
- cur->parent->ns->href);
- if (val == NULL) {
- val = (const xmlChar *)
- xmlHashLookup2(ctxt->style->stripSpaces,
- BAD_CAST "*",
- cur->parent->ns->href);
- }
- } else {
- val = (const xmlChar *)
- xmlHashLookup2(ctxt->style->stripSpaces,
- cur->parent->name, NULL);
- }
- if ((val != NULL) &&
- (xmlStrEqual(val, (xmlChar *) "strip"))) {
- delNode = cur;
- break;
- }
- }
- /* Intentional fall-through */
- case XML_ELEMENT_NODE:
- case XML_DOCUMENT_NODE:
- case XML_HTML_DOCUMENT_NODE:
- case XML_CDATA_SECTION_NODE:
- case XML_PI_NODE:
- case XML_COMMENT_NODE:
- xmlXPathNodeSetAddUnique(list, cur);
- break;
- case XML_DTD_NODE:
- /* Unlink the DTD, it's still reachable
- * using doc->intSubset */
- if (cur->next != NULL)
- cur->next->prev = cur->prev;
- if (cur->prev != NULL)
- cur->prev->next = cur->next;
- break;
- case XML_NAMESPACE_DECL:
- break;
- default:
-#ifdef WITH_XSLT_DEBUG_PROCESS
- XSLT_TRACE(ctxt,XSLT_TRACE_APPLY_TEMPLATES,xsltGenericDebug(xsltGenericDebugContext,
- "xsltApplyTemplates: skipping cur type %d\n",
- cur->type));
-#endif
- delNode = cur;
- }
+ if (IS_XSLT_REAL_NODE(cur))
+ xmlXPathNodeSetAddUnique(list, cur);
cur = cur->next;
- if (delNode != NULL) {
-#ifdef WITH_XSLT_DEBUG_PROCESS
- XSLT_TRACE(ctxt,XSLT_TRACE_APPLY_TEMPLATES,xsltGenericDebug(xsltGenericDebugContext,
- "xsltApplyTemplates: removing ignorable blank cur\n"));
-#endif
- xmlUnlinkNode(delNode);
- xmlFreeNode(delNode);
- delNode = NULL;
- }
}
}
--
GitLab

54
libxslt-Do-not-set-maxDepth-in-XPath-contexts.patch Normal file
View file

@ -0,0 +1,54 @@
From 77c26bad0433541f486b1e7ced44ca9979376908 Mon Sep 17 00:00:00 2001
From: Nick Wellnhofer <wellnhofer@aevum.de>
Date: Wed, 26 Aug 2020 00:34:38 +0200
Subject: [PATCH] Don't set maxDepth in XPath contexts
The maximum recursion depth is hardcoded in libxml2 now.
---
libxslt/functions.c | 2 +-
tests/fuzz/fuzz.c | 11 ++---------
2 files changed, 3 insertions(+), 10 deletions(-)
Index: libxslt-1.1.34/tests/fuzz/fuzz.c
===================================================================
--- libxslt-1.1.34.orig/tests/fuzz/fuzz.c
+++ libxslt-1.1.34/tests/fuzz/fuzz.c
@@ -168,7 +168,6 @@ xsltFuzzXPathInit(int *argc_p ATTRIBUTE_
xpctxt = tctxt->xpathCtxt;
/* Resource limits to avoid timeouts and call stack overflows */
- xpctxt->maxDepth = 500;
xpctxt->opLimit = 500000;
/* Test namespaces used in xpath.xml */
@@ -299,12 +298,6 @@ xsltFuzzXsltInit(int *argc_p ATTRIBUTE_U
return 0;
}
-static void
-xsltSetXPathResourceLimits(xmlXPathContextPtr ctxt) {
- ctxt->maxDepth = 200;
- ctxt->opLimit = 100000;
-}
-
xmlChar *
xsltFuzzXslt(const char *data, size_t size) {
xmlDocPtr xsltDoc;
@@ -334,7 +327,7 @@ xsltFuzzXslt(const char *data, size_t si
xmlFreeDoc(xsltDoc);
return NULL;
}
- xsltSetXPathResourceLimits(sheet->xpathCtxt);
+ sheet->xpathCtxt->opLimit = 100000;
sheet->xpathCtxt->opCount = 0;
if (xsltParseStylesheetUser(sheet, xsltDoc) != 0) {
xsltFreeStylesheet(sheet);
@@ -346,7 +339,7 @@ xsltFuzzXslt(const char *data, size_t si
xsltSetCtxtSecurityPrefs(sec, ctxt);
ctxt->maxTemplateDepth = 100;
ctxt->opLimit = 20000;
- xsltSetXPathResourceLimits(ctxt->xpathCtxt);
+ ctxt->xpathCtxt->opLimit = 100000;
ctxt->xpathCtxt->opCount = sheet->xpathCtxt->opCount;
result = xsltApplyStylesheetUser(sheet, doc, NULL, NULL, NULL, ctxt);

37
libxslt-Stop-using-maxParserDepth-XPath-limit.patch Normal file
View file

@ -0,0 +1,37 @@
From 9ae2f94df1721e002941b40665efb762aefcea1a Mon Sep 17 00:00:00 2001
From: Nick Wellnhofer <wellnhofer@aevum.de>
Date: Mon, 17 Aug 2020 03:42:11 +0200
Subject: [PATCH] Stop using maxParserDepth XPath limit
This will be removed again from libxml2.
---
tests/fuzz/fuzz.c | 6 ++----
1 file changed, 2 insertions(+), 4 deletions(-)
diff --git a/tests/fuzz/fuzz.c b/tests/fuzz/fuzz.c
index f502ca2c..75234ad6 100644
--- a/tests/fuzz/fuzz.c
+++ b/tests/fuzz/fuzz.c
@@ -183,8 +183,7 @@ xsltFuzzXPathInit(int *argc_p ATTRIBUTE_UNUSED, char ***argv_p,
xpctxt = tctxt->xpathCtxt;
/* Resource limits to avoid timeouts and call stack overflows */
- xpctxt->maxParserDepth = 15;
- xpctxt->maxDepth = 100;
+ xpctxt->maxDepth = 500;
xpctxt->opLimit = 500000;
/* Test namespaces used in xpath.xml */
@@ -317,8 +316,7 @@ xsltFuzzXsltInit(int *argc_p ATTRIBUTE_UNUSED, char ***argv_p,
static void
xsltSetXPathResourceLimits(xmlXPathContextPtr ctxt) {
- ctxt->maxParserDepth = 15;
- ctxt->maxDepth = 100;
+ ctxt->maxDepth = 200;
ctxt->opLimit = 100000;
}
--
GitLab

13
libxslt-config-fixes.patch Normal file
View file

@ -0,0 +1,13 @@
Index: xsltConf.sh.in
===================================================================
--- xsltConf.sh.in.orig
+++ xsltConf.sh.in
@@ -2,7 +2,7 @@
# Configuration file for using the xslt library
#
XSLT_LIBDIR="@XSLT_LIBDIR@"
-XSLT_LIBS="@XSLT_LIBS@"
+XSLT_LIBS="-lxslt"
XSLT_PRIVATE_LIBS="@XSLT_PRIVATE_LIBS@"
XSLT_INCLUDEDIR="@XSLT_INCLUDEDIR@"
MODULE_VERSION="xslt-@VERSION@"

47
libxslt-random-seed.patch Normal file
View file

@ -0,0 +1,47 @@
commit 047a0fd99e64c554c4edf44cc67ee765b09af017
Author: Marcus Meissner <meissner@suse.de>
Date: Tue Apr 4 16:27:39 2017 +0200
initialize the random seed
diff --git a/libexslt/math.c b/libexslt/math.c
index 6b24dbe0..b7a8d6e1 100644
--- a/libexslt/math.c
+++ b/libexslt/math.c
@@ -23,6 +23,14 @@
#ifdef HAVE_STDLIB_H
#include <stdlib.h>
#endif
+#ifdef HAVE_UNISTD_H
+#include <unistd.h>
+#endif
+#include <fcntl.h>
+#ifdef HAVE_TIME_H
+#include <time.h>
+#endif
+
#include "exslt.h"
@@ -474,6 +482,20 @@ static double
exsltMathRandom (void) {
double ret;
int num;
+ long seed;
+ static int randinit = 0;
+
+ if (!randinit) {
+ int fd = open("/dev/urandom",O_RDONLY);
+
+ seed = time(NULL); /* just in case /dev/urandom is not there */
+ if (fd != -1) {
+ read (fd, &seed, sizeof(seed));
+ close (fd);
+ }
+ srand(seed);
+ randinit = 1;
+ }
num = rand();
ret = (double)num / (double)RAND_MAX;

798
libxslt.changes Normal file
View file

@ -0,0 +1,798 @@
* Wed Feb 22 2023 pmonreal@suse.com
- Security Fix: [bsc#1208574, CVE-2021-30560]
* Use after free in Blink XSLT
* Add libxslt-CVE-2021-30560.patch
* Thu Jun 10 2021 pvorel@suse.cz
- Backport upstream xsltproc manpage fix
f165525f Recreate xsltproc man page with old Docbook stylesheet URL
Recreate-xsltproc-man-page-with-old-Docbook-styleshe.patch
* Mon Jun 7 2021 schwab@suse.de
- Don't disable testsuite under QEMU
* Wed Jun 2 2021 christophe@krop.fr
- Move the Copyright file to %%_defaultlicensedir
Configure.ac replaces the COPYING file with a symlink.
* Tue Jun 1 2021 pmonreal@suse.com
- Fix build with libxml2 2.9.12 that removes maxParserDepth XPath limit
- Add upstream patches:
* libxslt-Stop-using-maxParserDepth-XPath-limit.patch
* libxslt-Do-not-set-maxDepth-in-XPath-contexts.patch
* Wed Nov 20 2019 pmonrealgonzalez@suse.com
- Update to 1.1.34: Oct 30 2019
* Documentation:
- Fix EXSLT web pages, Regenerate web pages
- Fix Git link in news.html
- Minor documentation fixes after recent changes
- Regenerate symbols and API docs
- Regenerate EXSLT website
* Portability:
- Remove stubs when compiling without debugger or profiler
- configure.ac: Invoke PKG_CHECK_MODULES for building shared libraries
- configure.ac: Conditionally determine whether xml2-config should pass
shared libraries or static libraries
- xslt-config.in: Fix broken --prefix=DIR support
- libexslt.pc.in: Do not expose private library dependencies unless invoked
- libxslt.pc.in: Do not expose private library dependencies unless invoked
- Fix -Wformat-overflow warning (GCC 9)
- Stop including ansidecl.h
- Remove WIN32_EXTRA_* variables
- Build without winsock
* Bug Fixes:
- xsl:template without name and match attributes should not be allowed
- Make sure that Python tests exit with error code
- Improve handling of invalid UTF-8 in format-number
- Fix dangling pointer in xsltCopyText
- Fix memory leak in pattern compilation error path
- Fix uninitialized read with UTF-8 grouping chars
- Fix integer overflow in FORMAT_GYEAR
- Fix performance regression with xsl:number
- Backup XPath context node in xsltInitCtxtKey
- Fix unsigned integer overflow in date.c
- Fix insertion of xsl:fallback content
- Avoid quadratic behavior in xsltSaveResultTo
- Fix numbering in non-Latin scripts
- Fix uninitialized read of xsl:number token
- Fix integer overflow in _exsltDateDayInWeek
- Rework xsltAttrVT allocation
- Fix check of xsltTestCompMatch return value
- Fix security framework bypass
- Use xmlNewTextChild in EXSLT dyn:map
- Fix float casts in exsltDateDuration
- Always set context node before calling XPath iterators
- Fix attribute precedence with xsl:use-attribute-sets
- Backup context node in exsltFuncFunctionFunction
- Initialize ctxt->output before evaluating global vars
- Fix memory leak in EXSLT functions error path
* Improvements:
- Fix -Wimplicit-fallthrough warnings
- Adjust number of API index pages
- Make xsltCompileRelativePathPattern non-recursive
- Check that crypto:rc4_decrypt produces valid UTF-8
- Avoid recursion in keys.c:skipPredicate
- xslt-config.in: Simply handling of $all_flags
- xslt-config.in: Add a --dynamic option to --libs
- xslt-config.in: Simplify basic library handling
- xslt-config.in: Remove unused variable
- xslt-config: Simply handling of --cflags
- Improve fuzzers
- Always reuse XPath context
- Compile with -Wextra
- Make profiler support optional
- Hide unused code when compiling without debugger
- Reorganize fuzzing code
- Optional operation limit
- Improve seed corpus and dictionary
- Reuse XPath context when compiling stylesheets
- Reuse XPath context in dyn:map
- Reuse XPath context in saxon:expression
- Add libFuzzer targets
- Adjust error message in expected test output
- Change bug tracker URL
- Change git repo URL
- Regenerate NEWS
- Fix misleading indentation in security.c
* Cleanups:
- Remove empty TODO file
- Remove generated file libxsltclass.txt from version control
- Rebuild docs
- Rebase patch libxslt-config-fixes.patch
- Remove patches fixed upstream:
* libxslt-CVE-2019-11068.patch
* libxslt-CVE-2019-13117.patch
* libxslt-CVE-2019-13118.patch
* libxslt-CVE-2019-18197.patch
* Mon Oct 21 2019 pmonrealgonzalez@suse.com
- Security fix [bsc#1154609, CVE-2019-18197]
* Fix dangling pointer in xsltCopyText
* Add libxslt-CVE-2019-18197.patch
* Tue Oct 1 2019 tchvatal@suse.com
- Drop out lilbxslt-python package as it is just py2 based and
upstream yet didn't bother to port it to python3.
When there is python3 compatible code it should be enabled as
multibuild here
* Drop now unused libxslt-1.1.24-linkflags.patch and
libxslt-do_not_build_doc_nor_xsltproc.patch
* Tue Jul 2 2019 pmonrealgonzalez@suse.com
- Security fix: [bsc#1140101, CVE-2019-13118]
* Fix uninitialized read with UTF-8 grouping chars. Read of
uninitialized stack data due to too narrow xsl:number
instruction and an invalid character
* Added libxslt-CVE-2019-13118.patch
* Tue Jul 2 2019 pmonrealgonzalez@suse.com
- Security fix: [bsc#1140095, CVE-2019-13117]
* Fix uninitialized read of xsl:number token. An xsl number with
certain format strings could lead to a uninitialized read in
xsltNumberFormatInsertNumbers
* Added libxslt-CVE-2019-13117.patch
* Thu Apr 11 2019 pmonrealgonzalez@suse.com
- Security fix: [bsc#1132160, CVE-2019-11068]
* Bypass of a protection mechanism because callers of xsltCheckRead
and xsltCheckWrite permit access even upon receiving a -1 error
code. xsltCheckRead can return -1 for a crafted URL that is not
actually invalid and is subsequently loaded.
* Added libxslt-CVE-2019-11068.patch
* Mon Mar 4 2019 pmonrealgonzalez@suse.com
- Update to version 1.1.33
* Portability:
- Variables need 'extern' in static lib on Cygwin
- Really declare dllexport/dllimport for Cygwin
- Fix callback signatures in Python bindings
- Fix transform callback signatures
- Fix extension callback signatures
- Fix deallocator signatures
- Fix XPath callback signatures
- Fix hash callback signatures
* Bug Fixes:
- Don't cache direct evaluation of patterns with variables
- Move function result RVTs to context variable
- Fix EXSLT functions returning RVTs from outer scopes
- Fix handling of RVTs returned from nested EXSLT functions
- Fix typos
* Improvements:
- Run Travis ASan tests with "sudo: required"
* Cleanups:
- Remove doc/libxslt-decl.txt
- Docs for 1.1.32 release
- Cleaned with spec-cleaner
* Wed Nov 8 2017 vcizek@suse.com
- Update to version 1.1.32
* fixes xml-config detection regression (boo#1066525)
* Thu Oct 19 2017 pmonrealgonzalez@suse.com
- Update to version 1.1.30 [bsc#1063934]
* Documentation:
- Misc doc fixes
* Portability:
- Look for libxml2 via pkg-config first
* Bug Fixes:
- Also fix memory hazards in exsltFuncResultElem
- Fix NULL deref in xsltDefaultSortFunction
- Fix memory hazards in exsltFuncFunctionFunction
- Fix memory leaks in EXSLT error paths
- Fix memory leak in str:concat with empty node-set
- Fix memory leaks in error paths
- Switch to xmlUTF8Strsize in numbers.c
- Fix NULL pointer deref in xsltFormatNumberFunction
- Fix UTF-8 check in str:padding
- Fix xmlStrPrintf argument
- Check for overflow in _exsltDateParseGYear
- Fix double to int conversion
- Check for overflow in exsltDateParseDuration
- Change version of xsltMaxVars back to 1.0.24
- Disable xsltCopyTextString optimization for extensions
- Create DOCTYPE for HTML version 5
- Make xsl:decimal-format work with namespaces
- Remove norm:localTime extension function
- Check for integer overflow in xsltAddTextString
- Detect infinite recursion when evaluating function arguments
- Fix memory leak in xsltElementAvailableFunction
- Fix for pattern predicates calling functions
- Fix cmd.exe invocations in Makefile.mingw
- Don't try to install index.sgml
- Fix symbols.xml
- Fix heap overread in xsltFormatNumberConversion
- Fix <xsl:number level="any"/> for non-element nodes
- Fix unreachable code in xsltAddChild
- Change version number in xsl:version warning
- Avoid infinite recursion after failed param evaluation
- Stop if potential recursion is detected
- Consider built-in templates in apply-imports
- Fix precedence with multiple attribute sets
- Rework attribute set resolution
* Improvements:
- Silence tests a little
- Set LIBXML_SRC to absolute path
- Add missing #include
- Adjust expected error messages in tests
- Make xsltDebug more quiet
- New-line terminate error message that missed this convention
- Use xmlBuffers in EXSLT string functions
- Switch to xmlUTF8Strsize in EXSLT string functions
- Check for return value of xmlUTF8Strlen
- Avoid double/long round trip in FORMAT_ITEM
- Separate date and duration structs
- Check for overflow in _exsltDateDifference
- Clamp seconds field of durations
- Change _exsltDateAddDurCalc parameter types
- Fix date:difference with time zones
- Rework division/remainder arithmetic in date.c
- Remove exsltDateCastDateToNumber
- Change internal representation of years
- Optimize IS_LEAP
- Link libraries with libm
- Rename xsltCopyTreeInternal to xsltCopyTree
- Update linker version script
- Add local wildcard to version script
- Make some symbols static
- Remove redundant NULL check in xsltNumberComp
- Fix forwards compatibility for imported stylesheets
- Reduce warnings in forwards-compatible mode
- Precompute XSLT elements after preprocessing
- Fix whitespace in xsltParseStylesheetTop
- Consolidate recursion checks
- Treat XSLT_STATE_STOPPED same as errors
- Make sure that XSLT_STATE_STOPPED isn't overwritten
- Add comment regarding built-in templates and params
- Rewrite memory management of local RVTs
- Validate QNames of attribute sets
- Add xsl:attribute-set regression tests
- Ignore imported stylesheets in xsltApplyAttributeSet
- Dropped patches fixed upstream
* libxslt-CVE-2016-4738.patch
* libxslt-1.1.28-CVE-2017-5029.patch
* Mon Sep 11 2017 jengelh@inai.de
- Fix RPM groups. Drop ineffective --with-pic.
Trim conjecture from description.
* Fri Jul 28 2017 mpluskal@suse.com
- Add gpg signature
- Cleanup spec file with spec-cleaner
* Tue Apr 25 2017 pmonrealgonzalez@suse.com
- Fixed CVE-2017-5029 bcs#1035905
* Limit buffer size in xsltAddTextString to INT_MAX
- Added patch libxslt-1.1.28-CVE-2017-5029.patch
* Wed Apr 5 2017 pgajdos@suse.com
- security update: initialize random generator, CVE-2015-9019
[bsc#934119]
+ libxslt-random-seed.patch
* Mon Mar 13 2017 pmonrealgonzalez@suse.com
- Added patch libxslt-CVE-2016-4738.patch
* Fix heap overread in xsltFormatNumberConversion: An empty
decimal-separator could cause a heap overread. This can be
exploited to leak a couple of bytes after the buffer that holds
the pattern string.
* bsc#1005591 CVE-2016-4738
* Sat Jun 11 2016 tchvatal@suse.com
- Update to 1.1.29:
* new release after 4 years with few bugfies all around
- Refresh patch 0009-Make-generate-id-deterministic.patch to apply
- Remove cve patch that was integrated upstream:
libxslt-1.1.28-type_confusion_preprocess_attr.patch
- Unpack the manpage as the compression is set by buildbot not always gz
* Fri May 20 2016 kstreitova@suse.com
- add libxslt-1.1.28-type_confusion_preprocess_attr.patch to fix
type confusion in preprocessing attributes [bnc#952474],
[CVE-2015-7995]
* Thu Apr 9 2015 suse@microstep-mis.com
- fix package with "soname" should obsolete libxslt package on suse < 12.2 (SLE11)
* Sun Feb 1 2015 coolo@suse.com
- add 0009-Make-generate-id-deterministic.patch from debian's
reproducible builds project to avoid randomness in generated IDs
* Thu Dec 6 2012 pascal.bleser@opensuse.org
- update to 1.1.28:
* fix generate-id() to avoid generating the same ID
* fix crash with empty xsl:key/@match attribute
* fix crash when passing an uninitialized variable to document()
* fix regression: default namespace not correctly used
* remove xsltTransStorageAdd and xsltTransStorageRemove from symbols.xml
- changes from 1.1.27:
* link python module with python library (Frederic Crozat)
* report errors on variable use in key
* the XSLT namespace string is a constant one
* fix handling of names in xsl:attribute
* reserved namespaces in xsl:element and xsl:attribute
* null-terminate result string of cry:rc4_decrypt
* EXSLT date normalization fix
* exit after compilation of invalid func:result
* fix for EXSLT func:function
* rewrite EXSLT string:replace to be conformant
* avoid a heap use after free error
* fix a dictionary string usage
* output should not include extraneous newlines when indent is off
* document('') fails to return stylesheets parsed from memory
* xsltproc should return an error code if xinclude fails
* forwards-compatible processing of unknown top level elements
* fix system-property with unknown namespace
* fix default template processing on namespace nodes
* fix a bug in selecting XSLT elements
* fix a memory leak with xsl:number
* fix a problem with ESXLT date:add() with January
* fix generate-id() to not expose object addresses
* allow whitespace in xsl:variable with select
* fix direct pattern matching bug
* add the saxon:systemId extension
* add an append mode to document output
* fix portability to upcoming libxml2-2.9.0
* precompile patterns in xsl:number
- change soname macro back to "1" and enforce it in the files list
- revert -tools subpackage for openSUSE < 12.2 as that has only
become effective since 12.2 on the package that ships with the
distribution, to avoid having a completely different package
layout in this repository as compared to the stock distribution
packages (added a Provides: libxslt-tools though)
* Wed Apr 25 2012 chris@computersalat.de
- add macro "soname" %%{name}1
- fix "self obsoletion"
* Sat Mar 17 2012 jengelh@medozas.de
- Make sure to follow shlib policy; put tools in a separate package
like done in libxml2
* Wed Jan 4 2012 jengelh@medozas.de
- Remove redundant tags (License: field is inherited)
- Use exact EVR for Provides:
* Wed Jan 4 2012 cfarrell@suse.com
- Tutorial contains GPL-2.0+ code. Either split this off into a subpackage or
add GPL-2.0+ as an aggregation to the main licence tag
* Sat Dec 3 2011 agraf@suse.com
- don't run make check in QEMU builds - breaks due to massive threading
* Mon Nov 21 2011 jengelh@medozas.de
- Remove redundant/unwanted tags/section (cf. specfile guidelines)
* Sun Nov 20 2011 coolo@suse.com
- add libtool as buildrequire to avoid implicit dependency
* Thu Sep 8 2011 dmueller@suse.de
- fix provides/obsoletes
* Tue Aug 2 2011 idonmez@novell.com
- Add dependency on libgcrypt-devel and libgpg-error-devel for
the libxslt-devel package
* Mon Aug 1 2011 idonmez@novell.com
- Correctly obsolete libxslt package in the baselibs.conf too
* Fri Jul 29 2011 idonmez@novell.com
- Fix build on SLE
* Fri Jul 29 2011 crrodriguez@opensuse.org
- Fix broken requires,provides,Obsoletes causing "have choice.."
build system errors
- Remove all "la" files since they are no longer needed
- Fix -devel pacakge requires and messed up -config scripts
this may cause build fails of already broken dependant packages
that do not link all the needed libraries in an explicit manner
(This is not a bug here, it is expected to cause it)
* Wed Jul 27 2011 giecrilj@stegny.2a.pl
- package clean-up:
- include library version number in the name of the binary package
- add an alias for xsltproc (required by package xmlto)
* Wed Jul 21 2010 puzel@novell.com
- update to libxslt-1.1.26
- Improvements:
- Add xsltProcessOneNode to exported symbols for lxml
- Features:
- Add API versioning and various cleanups
- xsl:sort lang support using the locale
- Bug fixes
- Portability, documentation fixes
- drop libxslt-1.1.24-rc4-overflow.patch (included upstream)
- drop libxslt-1.1.24-am.patch (included upstream)
* Sat Apr 24 2010 coolo@novell.com
- buildrequire pkg-config to fix provides
* Mon Dec 14 2009 jengelh@medozas.de
- add baselibs.conf as a source
* Sun Jun 21 2009 coolo@novell.com
- fix build with automake 1.11
* Fri Feb 13 2009 coolo@suse.de
- fix file list
* Wed Feb 11 2009 coolo@suse.de
- readd "la" files to fix libxslt-python build
* Mon Jan 26 2009 crrodriguez@suse.de
- remove useless "la" file
- remove static libraries, if something breaks, move libraries to /%%{_lib}
instead of restoring them
* Wed Dec 10 2008 olh@suse.de
- use Obsoletes: -XXbit only for ppc64 to help solver during distupgrade
(bnc#437293)
* Thu Oct 30 2008 olh@suse.de
- obsolete old -XXbit packages (bnc#437293)
* Fri Jul 18 2008 prusnak@suse.cz
- updated to 1.1.24:
* documentation: man page fix
* bug fixes: pattern bug fix, key initialization problems,
exclusion of unknown namespaced element on top of stylesheets
python generator syntactic cleanup
- dropped obsoleted CVE-2008-1767.patch (included in update)
- fixed overflow in RC4 code (rc4-overflow.patch) [bnc#410256]
* Mon May 19 2008 prusnak@suse.cz
- fixed CVE-2008-1767 (CVE-2008-1767.patch) [bnc#391920]
* Fri Apr 11 2008 prusnak@suse.cz
- updated to 1.1.23
* Documentation
fix links for Cygwin DocBook setup (Philippe Bourcier)
- xsltParseStylesheetDoc doc fix (Jason Viers)
- fix manpage default maxdepth value
* Bug fixes:
- python segfault (Daniel Gryniewicz)
- week-in-year bug fix (Maurice van der Pot)
- fix python iterator problem (William Brack)
- avoid garbage collection problems on str:tokenize and str:split
and function results (William Brack and Peter Pawlowski)
- superfluous re-generation of keys (William Brack)
- remove superfluous code in xsltExtInitTest (Tony Graham)
- func:result segfault fix (William Brack)
- timezone offset problem (Peter Pawlowski),
* Portability fixes:
- old gcrypt support fix (Brent Cowgill)
- Python portability patch (Stephane Bidoul)
- VS 2008 fix (Rob Richard)
* Thu Apr 10 2008 ro@suse.de
- added baselibs.conf file to build xxbit packages
for multilib support
* Tue Jan 22 2008 prusnak@suse.cz
- build --without-python to allow compilation from src.rpm
* Tue Sep 18 2007 sbrabec@suse.cz
- Updated to version 1.1.22:
* Bug fixes: RVT cleanup problems, exclude-result-prefix bug,
stylesheet compilation error handling, out of memory allocation
errors, namespace problem on compound predicates, python
space/tab inconsistencies, hook xsl:message to per
transformation error callbacks, cached RVT problem, XPath
context maintainance on choose, memory leaks in the math
module, exclude-result-prefix induced namespace problem
* Portability fixes: improve build with VS2005, fixing build on
AIX, fix the security file checks on Windows.
* Improvement: add an --encoding option to xsltproc.
* Build: configure setup for TRIO_REPLACE_STDIO
* Documentation: updated after change from CVs to SVN
* Thu Jan 25 2007 prusnak@suse.cz
- update to 1.1.20
* result Value Tree handling fix
* function parameters fix
* empty text node handling
* plugin support and test fixes
* fragment support fixes
* python stylesheet compare and transform context access
* EXSLT string replace support
* xsltproc better low level error handling
- fixed crash on ENOMEM (null-retval.patch) [#215223]
- drop obsolete patches:
* libxslt-aliasing.patch (included in update)
* libxslt-transform.patch (included in update)
* Thu Dec 21 2006 ro@suse.de
- fix for crash with certain transformations (libxcb build crash)
* Tue Dec 12 2006 ke@suse.de
- 1.1.19; NEWS extract:
* Bug fixes: entities within attributes; in-scope namespace bug, result
value tree caching bug, a number of namespace related bugs, etc.
* Improvements: refactoring of namespace handling, value-of
impleemntation and template internal processing, new xsltproc flag to
apply Xinclude to stylesheets.
* Documentation.
* Fri Oct 27 2006 dmueller@suse.de
- update --nonet patch to work even when using rpmbuild directly
* Tue Oct 24 2006 dmueller@suse.de
- make --nonet default while building packages (#214338)
* Tue Oct 17 2006 ke@suse.de
- Move devel docs to the -devel subpackage; reported by Andreas Hanke [#
212441].
* Fri Jun 16 2006 ke@suse.de
- 1.1.17:
* Bug fixes: some regression tests, attribute/namespaces output,
problem in mixed xsl:value-of and xsl:text uses.
* Improvements: internal refactoring, use of the XPath object cache in
libxml2-2.6.25.
- Require libxml2-2.2.25.
* Tue May 23 2006 ke@suse.de
- Update to version 1.1.16:
* Bug fixes (pattern compilation, namespace prefixes, etc.).
* Speed up sorting.
* Documentation update.
- Adjust warn patch; drop libxslt-xpath-pattern.patch.
* Wed Jan 25 2006 mls@suse.de
- converted neededforbuild to BuildRequires
* Tue Oct 11 2005 ke@suse.de
- On account of pattern.c, add -fno-strict-aliasing again.
- Also require glibc-devel.
* Tue Oct 4 2005 ke@suse.de
- libxslt-xpath-pattern.patch:
libxslt/pattern.c: fixed problem in internal XPath compilation
of patterns including variables, fixes GNOME bug #316861
(William Brack). Reported by Andreas Jaeger/Uwe Gansert.
* Fri Sep 30 2005 aj@suse.de
- Fix compiler warnings.
- Add missing requires.
* Fri Sep 16 2005 ke@suse.de
- Update to version 1.1.15; NEWS from http://xmlsoft.org/XSLT/ :
* Bug fixes and improvements.
* Documentation enhancement.
* Wed Jul 6 2005 meissner@suse.de
- fixed strict aliasing problem.
* Mon Apr 4 2005 ke@suse.de
- Update to version 1.1.14; some NEWS (extract since .13) from
http://xmlsoft.org/XSLT/ :
* Extensions: module support; dictionnary based speedups trying to get
rid of xmlStrEqual as much as possible.
* Bugfixes:
exslt day-of-week-in-month, xsl:call-template should not change the
current template rule, evaluation of global variables, RVT's in
XPath predicates, namespace URI on template names, pattern
expression fixes, out of memory detection misses, parserOptions
propagation, exclude-result-prefixes fix, // patten fix, text node
on stylesheet document without a dictionary, more checking of XSLT
syntax, calling xsltInit() multiple times, bug in pattern matching
with ancestors, bug in pattern matching with cascading select,
xinclude and document() problem.
- CFLAGS: Add -fno-strict-aliasing.
* Fri Dec 10 2004 ke@suse.de
- Do not list manpages twice; reported by Chris Lahey [Novell #472] and
[# 49118].
* Tue Nov 2 2004 ke@suse.de
- Update to version 1.1.12; some NEWS from http://xmlsoft.org/XSLT/ :
* Bug fixes: attribute document pointer fix, exslt date negative
periods, generated tree structure fixes, namespace lookup fix, use
reentrant gmtime_r, exslt:funtion namespace fix, potential NULL
pointer reference, force string interning on generated documents.
* Improve documentation.
* Fri Oct 8 2004 ke@suse.de
- Update to version 1.1.11; some NEWS from http://xmlsoft.org/XSLT/
(since 1.1.9):
* Bug fixes: xsl:include problems, UTF8 number pattern, date-time
validation, namespace fix, various Exslt date fixes, error callback
fixes, leak with namespaced global variable, attempt to fix a weird
problem (Gnome Bugzilla #153137), key initialization problem.
* Improvements: exslt:date-sum tests.
* Documentation: Second tutorial by Panagiotis Lourida.
- Enable crypto support [#44119].
* Mon Aug 23 2004 ke@suse.de
- Update to version 1.1.9; some NEWS from http://xmlsoft.org/XSLT/
* Various bug fixes (RVT key handling, Python bindings, key and XPath,
64bit issue, etc.).
* Thu Aug 19 2004 schwab@suse.de
- Fix a broken cast.
* Wed Jul 14 2004 ke@suse.de
- Update to version 1.1.8; some NEWS from http://xmlsoft.org/XSLT/ :
* Bug fixes.
* Fri May 21 2004 ke@suse.de
- Update to version 1.1.7; some NEWS from http://xmlsoft.org/XSLT/ :
* Bugfixes: UTF-8 string tokenize, fix subtle memory corruption,
linefeed after comment at document level, disable-output-escaping
problem, pattern compilation in deep imported stylesheets,
namespace extension prefix bug, namespace lookup for attribute,
namespaced DOCTYPE name.
* Tue Apr 20 2004 ke@suse.de
- Update to version 1.1.6; some NEWS from
http://xmlsoft.org/XSLT/ (since 1.1.2):
* Performance improvements (e.g., dictionnary reuses for XSLT).
* Various bugfixes (keys, thread troubles, tokenize fix for UTF-8,
xpath, etc.).
* Documentation cleanup.
- Drop obsolete patch (libxslt-m4.diff).
* Mon Mar 15 2004 ke@suse.de
- libxslt-m4.diff: Quote first argument of AC_DEFUN; reported by Dirk
Mueller [# 35887].
* Mon Jan 12 2004 adrian@suse.de
- build as user
* Wed Jan 7 2004 ke@suse.de
- Update to version 1.1.2; NEWS from http://xmlsoft.org/XSLT/:
* Documentation fixes; EXSLT documentation.
* Bug fixes: exslt:date returning NULL strings, namespaces output,
key and namespace definition problem, passing options down to
the document() parser, xsl:number fixes.
* Fri Dec 12 2003 ke@suse.de
- Update to version 1.1.1; NEWS from http://xmlsoft.org/XSLT/:
* bug fixes: number formatting, exslt:tokenize, key selector parsing
with |, xsl:element with computed namespaces, xslt:import/include
recursion detection, exslt:function used in keys, bug when
CDATA_SECTION are found in the tree, entities handling when using
XInclude.
* Wed Nov 5 2003 ke@suse.de
- Update to version 1.1.0; NEWS from http://xmlsoft.org/XSLT/:
* Make use of the new libxml2 API.
* Remove DocBook SGML broken support.
* Remove the deprecated breakpoint library
* Fixes: xsl:key to work with PIs, extension memory error fix, header
path, some tortuous template problems when using predicates, a bug
in default processing of attributes, detect invalid names on
templates, exslt:document (and similar) base handling problem,
* xsltproc option display fix,
* Python: never use stdout for error.
* Tue Oct 7 2003 ke@suse.de
- Update to version 1.0.33; NEWS from http://xmlsoft.org/XSLT/:
* mode not cascaded in template fallbacks.
* catch redefinition of parameter/variables.
* multiple keys with same namespace name.
* cdata-section-elements handling of namespaced names.
* apply-templates crash.
* bug with imported templates.
* imported attribute-sets merging bug (DocBook).
* Thu Sep 18 2003 sf@suse.de
- Do not free the hash keys during xmlHashScanFull,
it will corrupt the hash table. The keys will be
freed by xmlHashFree right afterwards anyway. #30506
* Fri Aug 15 2003 ke@suse.de
- Update to version 1.0.32; NEWS from http://xmlsoft.org/XSLT/:
* Bugfixes: xsltSaveResultToFile() python binding, EXSLT fixes,
speed of large text output, xsl:copy with attributes, strip-space and
namespaces prefix, fix for --path xsltproc option, sort with multiple
keys, checking of { and } for attribute value templates.
* Python bindings for extension elements.
* Doc cleanup.
* Wed Jul 9 2003 ke@suse.de
- Update to version 1.0.31; NEWS from http://xmlsoft.org/XSLT/:
* Bugfixes: xsl:copy on namespace nodes, AVT for xsl:sort order, fix
for the debugger, output filename limitation, trio.h and triodef.h
added, EXSLT node-set, xsltChoose and whitespace, stylesheet
compilation, NaN and sort.
* Avoid generating &quot; (fix in libxml2-2.5.8)
* Tue Jun 17 2003 sbrabec@suse.cz
- Updated to version 1.0.30.
- Fixed linking of libxsltbreakpoint.
* Mon May 26 2003 ke@suse.de
- Remove unwanted files from $RPM_BUILD_ROOT.
* Wed Apr 2 2003 ke@suse.de
- Update to version 1.0.29; NEWS from http://xmlsoft.org/XSLT/:
Significant speedup for large (flat) documents which also requires
libxml2-2.5.6:
* Bug fixes: Result Value Tree handling, XML IDs, keys(), extra namespace
declarations with xsl:elements.
* Wed Mar 26 2003 ke@suse.de
- Update to version 1.0.28; NEWS from http://xmlsoft.org/XSLT/:
* Fix node() in patterns semantic.
* Fix a memory access problem in format-number()
* Fix stack overflow in recursive global variable or params
* Clean up Result Value Tree handling, and fix a couple of
old bugs in the process.
* Tue Feb 11 2003 ke@suse.de
- Update to version 1.0.26; NEWS from http://xmlsoft.org/XSLT/:
* Fixed 3 serious bugs in document() and stylesheet compilation which
could lead to a crash.
* Thu Feb 6 2003 ke@suse.de
- Update to version 1.0.24; NEWS from http://xmlsoft.org/XSLT/:
* Bug fixes: double-free for standalone stylesheets introduced in
1.0.24, C syntax pbm, etc.
* Some XPath and XInclude related problems were actually fixed in
libxml2-2.5.2.
* Documentation: emphasize that --docbook is not for XML docs.
* Wed Jan 15 2003 ke@suse.de
- Update to version 1.0.24; NEWS from http://xmlsoft.org/XSLT/:
A lot of bug fixes and a few improvements:
* Bug fixes: imported global varables, python bindings, EXSLT memory
leak, namespace generation on xsl:attribute, space handling with
imports, extension-element-prefixes, comments within xsl:text,
superfluous xmlns generation, XInclude related bug for numbering,
EXSLT strings, attribute-sets computation on imports, extension module
init and shutdown callbacks not called.
* Add xsltGetProfileInformation().
* Fix API generation scripts.
* API to provide the sorting routines.
* Add XML description of the EXSLT API.
* Add ESXLT URI (un)escaping.
* Fix some memory leaks.
* document() now supports fragment identifiers in URIs.
* Tue Nov 26 2002 ro@suse.de
- split libxslt-python to own specfile
(libxslt is turning more and more into a base package
and python requires a lot of other things to build)
- removed gtkdoc from neededforbuild (html is not rebuilt anyway)
* Mon Nov 18 2002 ke@suse.de
- Update to version 1.0.23; NEWS from http://xmlsoft.org/XSLT/:
* Improvement of the python bindings: extension functions and
activating EXSLT.
* various bug fixes: number formatting, portability for bounded string
functions, CData nodes, key(), @*[...] patterns.
* Documentation improvements.
* Add libxslt.m4.
- Require libxml2 2.4.27.
* Thu Oct 31 2002 ke@suse.de
- Update to version 1.0.22; NEWS from http://xmlsoft.org/XSLT/:
* Add a security module, and a related set of new options to xsltproc.
* Allow per transformation error handler.
* Fix a few bugs: node() semantic, URI escaping, media-type, attribute
lists.
* Wed Oct 9 2002 ke@suse.de
- Update to version 1.0.21; NEWS from http://xmlsoft.org/XSLT/:
* Bug fixes: match="node()", date:difference(), disable-output-escaping
* Mem leak fix.
* Python bindings: style.saveResultToString().
* Documentation improvements.
* try to handle document('') as best as possible depending in the
cases
* Fix the DocBook stylesheets handling problem
* Fix a few XSLT reported errors
- Drop namespace patch (already included).
* Tue Aug 20 2002 ke@suse.de
- Apply patch by Daniel Veillard to fix a namespace problem raised by
recent DocBook stylesheets
(cf. http://bugzilla.gnome.org/show_bug.cgi?id=87901).
Reported by Stephan Kulow [# 18099].
* Wed Jul 31 2002 ke@suse.de
- Run %%run_ldconfig.
* Mon Jul 8 2002 ke@suse.de
- Update to version 1.0.19; NEWS from http://xmlsoft.org/XSLT/, not
mentioned earlier:
* Bug fixes: attributes, extra namespace declarations (DocBook),
xsl:include crash, documentation, element-available.
* xsltproc can now list registered extensions.
* New API to save directly to a string xsltSaveResultToString().
* Specific error registration function for the python API.
* Wed May 29 2002 ro@suse.de
- tweak python installation some more for lib64
* Tue May 28 2002 ke@suse.de
- Update to 1.0.18:
- Add Pyhton bindings (libxslt-python).
- Bug fixes.
- New man page for libexslt.
* Tue Apr 30 2002 ke@suse.de
- Update to version 1.0.17; NEWS from http://xmlsoft.org/XSLT/ :
o EXSLT date improvement and regression tests.
o Attempt to fix a bug in xsltProcessUserParamInternal.
* Fri Apr 19 2002 ke@suse.de
- Update to version 1.0.16; NEWS from http://xmlsoft.org/XSLT/ :
o Bug fixes: strip-space, URL in HTML output, error when xsltproc
can't save.
o Improve Python bindings.
* Tue Apr 9 2002 ke@suse.de
- Update to version 1.0.15; NEWS since 1.0.9 from http://xmlsoft.org/XSLT/ :
* Change of Licence to the MIT Licence.
* Bugfixes: XPath, python Makefile, recursive attribute sets,
@foo[..] templates.
* Fix a bug raised when using doctypes with HTML output.
* More EXSLT functions.
* Provide fixes and regression tests for exslt date functions.
* Nasty bug fix related to exslt:node-set.
* Fix bug "namespace node have no parents".
* Obsoleted libxsltbreakpoint now deprecated and frozen to 1.0.8 API
* xsltproc return codes are now significant, update documentation.
* Debug of memory alocation with valgind.
* Patch to allow as much as 40 steps in patterns.
* Enhancements to interface with xsltdebugger.
* Added a stringparam option to avoid escaping hell at the shell level.
* serious profiling leading to significant improvement for DocBook
processing.
* Improvement in the XPath engine (libxml2-2.4.18).
* Add Python bindings.
* Documentation changes and updates.
* Wed Feb 20 2002 olh@suse.de
- fix prefix tag to build shared libs
* Tue Feb 12 2002 adrian@suse.de
- fix build for s390x
* Tue Dec 11 2001 ro@suse.de
- use less intrusive hack for libtool: export LIBRARY_PATH
* Thu Nov 29 2001 ro@suse.de
- install without buildroot first to work around libtool
not being able to cope with dependant libraries and buildroot
* Tue Nov 27 2001 ke@suse.de
- Update to version 1.0.8; NEWS from http://xmlsoft.org/XSLT/ :
- Previous header patch is superfluous.
- Bug fixes.
* Tue Nov 20 2001 ke@suse.de
- Add missing define; cf.
http://mail.gnome.org/archives/xslt/2001-November/msg00052.html .
- NEWS for 1.0.7 entries from http://xmlsoft.org/XSLT/ (not
mentioned earlier):
- Fix handling of indent="no" on HTML output.
* Sat Nov 10 2001 adrian@suse.de
- Update to version 1.0.7
- add fixes for automake 1.5
* Sat Nov 3 2001 ro@suse.de
- fix for automake 1.5
* Wed Oct 31 2001 ke@suse.de
- Update to version 1.0.6; NEWS from http://xmlsoft.org/XSLT/ :
- Bug fixes on number formatting and date/time functions.
- Fix DOCTYPE generation rules for HTML output.
* Thu Oct 11 2001 ke@suse.de
- Update to version 1.0.5; NEWS from http://xmlsoft.org/XSLT/ :
- Portability fixes.
- Fix a dozen bugs on XSLT and EXSLT.
- Add support for Saxon's evaluate and expressions extensions.
- Better handling of XPath evaluation errors.
* Mon Oct 1 2001 ke@suse.de
- Update to version 1.0.4; NEWS from http://xmlsoft.org/XSLT/ :
- Documentation updates.
- Bug fixes (DocBook FO generation should be fixed) and portability
improvements.
- Improve existing EXSLT support and add String, Time and Date core
functions support.
* Fri Aug 24 2001 ke@suse.de
- Update to version 1.0.3; from the announcement (cf. libxml2):
- Implement XML Catalog Specification from August 6:
http://www.oasis-open.org/committees/entity/spec-2001-08-06.html
http://xmlsoft.org/catalog.html
- New NaN and Infinity code.
- A number of small bugfixes.
* Fri Aug 17 2001 ke@suse.de
- Update to version 1.0.2.
- Call 'libtoolize' and friends.
* Wed Jul 11 2001 ke@suse.de
- New package: version 1.0.0.

102
libxslt.keyring Normal file
View file

@ -0,0 +1,102 @@
-----BEGIN PGP PUBLIC KEY BLOCK-----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=60Pb
-----END PGP PUBLIC KEY BLOCK-----

154
libxslt.spec Normal file
View file

@ -0,0 +1,154 @@
#
# spec file for package libxslt
#
# Copyright (c) 2022-2023 ZhuningOS
#
%define libname %{name}1
%define exname libexslt0
Name: libxslt
Version: 1.1.34
Release: 150400.3.3.1
Summary: XSL Transformation Library
License: GPL-2.0-or-later AND MIT
Group: Development/Libraries/C and C++
URL: http://xmlsoft.org/XSLT/
Source0: ftp://xmlsoft.org/libxslt/libxslt-%{version}.tar.gz
Source1: ftp://xmlsoft.org/libxslt/libxslt-%{version}.tar.gz.asc
Source2: %{name}.keyring
Source3: xslt-config.1
Source99: baselibs.conf
Patch0: %{name}-1.1.24-no-net-autobuild.patch
Patch1: libxslt-config-fixes.patch
Patch2: 0009-Make-generate-id-deterministic.patch
Patch3: libxslt-random-seed.patch
# PATCH-FIX-UPSTREAM gitlab.gnome.org/GNOME/libxslt/commit/9ae2f94df1721e002941b40665efb762aefcea1a
Patch4: libxslt-Stop-using-maxParserDepth-XPath-limit.patch
# PATCH-FIX-UPSTREAM gitlab.gnome.org/GNOME/libxslt/commit/77c26bad0433541f486b1e7ced44ca9979376908
Patch5: libxslt-Do-not-set-maxDepth-in-XPath-contexts.patch
Patch6: Recreate-xsltproc-man-page-with-old-Docbook-styleshe.patch
# PATCH-FIX-UPSTREAM bsc#1208574 CVE-2021-30560 Use after free in Blink XSLT
Patch7: libxslt-CVE-2021-30560.patch
BuildRequires: libgcrypt-devel
BuildRequires: libgpg-error-devel
BuildRequires: libtool
BuildRequires: libxml2-devel >= 2.9.12
BuildRequires: pkgconfig
Obsoletes: libxslt-python
%description
This C library allows you to transform XML files into other XML files
(or HTML, text, and more) using the standard XSLT stylesheet
transformation mechanism.
It is based on libxml (version 2) for XML parsing, tree manipulation,
and XPath support. It is written in plain C, making as few assumptions
as possible and sticks closely to ANSI C/POSIX for easy embedding.
It includes support for the EXSLT set of extension functions as well
as some common extensions present in other XSLT engines.
%package -n %{libname}
Summary: XSL Transformation Library
License: LGPL-2.1-or-later
Group: System/Libraries
%description -n %{libname}
This C library allows you to transform XML files into other XML files
(or HTML, text, and more) using the standard XSLT stylesheet
transformation mechanism.
It is based on libxml (version 2) for XML parsing, tree manipulation,
and XPath support. It is written in plain C, making as few assumptions
as possible and sticks closely to ANSI C/POSIX for easy embedding.
It includes support for the EXSLT set of extension functions as well
as some common extensions present in other XSLT engines.
%package devel
Summary: Development files for libxslt
License: LGPL-2.1-or-later
Group: Development/Libraries/C and C++
Requires: %{libname} = %{version}
Requires: %{name}-tools = %{version}
Requires: glibc-devel
Requires: libgcrypt-devel
Requires: libgpg-error-devel
%description devel
libxslt allows you to transform XML files into other XML files
(or HTML, text, and more) using the standard XSLT stylesheet
transformation mechanism.
This subpackage contains the header files for developing
applications that want to make use of the XSLT libraries.
%package tools
Summary: Extended Stylesheet Language (XSL) Transformation utilities
License: GPL-2.0-or-later AND MIT
Group: Development/Tools/Other
Provides: %{name} = %{version}
Provides: xsltproc = %{version}
%description tools
This package contains xsltproc, a command line interface to the XSLT engine.
xtend the
%prep
%setup -q
%patch0
%patch1
%patch2 -p1
%patch3 -p1
%patch4 -p1
%patch5 -p1
%patch6 -p1
%patch7 -p1
%build
autoreconf -fvi
%configure \
--disable-static \
--without-python \
--disable-silent-rules
make %{?_smp_mflags}
%check
make %{?_smp_mflags} check
%install
%make_install
# Unwanted doc stuff
rm -fr %{buildroot}%{_datadir}/doc
# the manual page is required
install -D -m0644 %{SOURCE3} %{buildroot}%{_mandir}/man1/xslt-config.1
#kill all "la" files
find %{buildroot} -type f -name "*.la" -delete -print
%post -n %{libname} -p /sbin/ldconfig
%postun -n %{libname} -p /sbin/ldconfig
%files -n %{libname}
%{_libdir}/libxslt.so.*
%{_libdir}/libexslt.so.*
%files tools
%license COPYING* Copyright
%doc AUTHORS NEWS README TODO FEATURES
%{_bindir}/xsltproc
%{_mandir}/man1/xsltproc.1%{?ext_man}
%files devel
%{_libdir}/libxslt.so
%{_libdir}/libexslt.so
%{_libdir}/*.sh
%{_libdir}/pkgconfig/libxslt.pc
%{_libdir}/pkgconfig/libexslt.pc
%{_includedir}/*
%{_datadir}/aclocal/*
%{_bindir}/xslt-config
%{_mandir}/man1/xslt-config.1%{?ext_man}
%{_mandir}/man3/*
%doc doc/*.html doc/html doc/tutorial doc/*.gif
%changelog

47
xslt-config.1 Normal file
View file

@ -0,0 +1,47 @@
.mso www.tmac
.TH XSLT-CONFIG 1 2011-06-24 GNOME "The XSLT C library for GNOME"
.SH NAME
xslt-config \- provides compilation or linking flags for programs using libxslt
.SH SYNOPSIS
.B xslt-config --cflags
.br
.B xslt-config --libs
.SH DESCRIPTION
.B xslt-config
is a small shell script which is installed as part of
.B libxslt
usual install process which provides compilation or linking flags for programs using it.
Use
.IP
.B xslt-config --cflags
.PP
to get the compilation flags and
.IP
.B xslt-config --libs
.PP
to get the linker flags. Usually this is done directly from the Makefile as:
.IP
.B CFLAGS=`xslt-config --cflags`
.br
.B LIBS=`xslt-config --libs`
.SH NOTES
If you use the
.SM EXSLT
extensions from the program then you should prepend
.B -lexslt
to the
.B LIBS
options
.SH SEE ALSO
.URL http://xmlsoft.org/XSLT/ "The XSLT C library for GNOME"