| fix CVE-2026-17705 Apply the fix from upstream commit 538b2e38 to xmlBuildRelativeURI. The upstream commit fixed xmlBuildRelativeURISafe, which does not exist in libxml2 2.11.9; xmlBuildRelativeURI contains the same vulnerable int arithmetic. Fix signed integer overflow in uri.c. Co-Authored-By: AtomCode (deepseek-v4-flash) <noreply@atomgit.com> | 1 个月前 |
| backport upstream patches | 6 个月前 |
| 回退 'Pull Request !224 : upgrade to upstream v2.12.5' (cherry picked from commit cb08a52eeb9a45816bcfd044d1807bca8c03f176) | 2 年前 |
| fix CVE-2024-56171, CVE-2025-24928, CVE-2025-27113 | 1 年前 |
| fix CVE-2024-56171, CVE-2025-24928, CVE-2025-27113 | 1 年前 |
| fix CVE-2024-56171, CVE-2025-24928, CVE-2025-27113 | 1 年前 |
| fix CVE-2025-32414, CVE-2025-32415 | 1 年前 |
| fix CVE-2025-32414, CVE-2025-32415 | 1 年前 |
| fix CVE-2025-49794, CVE-2025-49795, CVE-2025-49796 | 1 年前 |
| fix CVE-2025-49794, CVE-2025-49795, CVE-2025-49796 | 1 年前 |
| fix CVE-2025-6021 | 1 年前 |
| fix CVE-2025-6170 Signed-off-by: zhuo <1107893276@qq.com> (cherry picked from commit da2fb9514182bf2aa43ebcd5789b7630b963305d) | 1 年前 |
| fix CVE-2025-8732 | 8 个月前 |
| fix CVE-2026-0992,CVE-2026-0989 Signed-off-by: zhuofeng6 <1107893276@qq.com> (cherry picked from commit f207d3fd57d0a57c1ec9c06201c1fb45cbd6a4e9) | 8 个月前 |
| fix CVE-2026-0990 | 8 个月前 |
| fix CVE-2026-0992,CVE-2026-0989 Signed-off-by: zhuofeng6 <1107893276@qq.com> (cherry picked from commit f207d3fd57d0a57c1ec9c06201c1fb45cbd6a4e9) | 8 个月前 |
| fix CVE-2026-11979 | 3 个月前 |
| fix CVE-2026-1757 | 7 个月前 |
| fix CVE-2026-86142, CVE-2026-86143, CVE-2026-86144, CVE-2026-76781 | 20 天前 |
| fix: CVE-2026-86137, CVE-2026-86141 Backport upstream patches for libxml2 2.11.9: - CVE-2026-86137: Prevent out-of-bounds read in NXT macro (76fe08d9) - CVE-2026-86141: Fix null dereference regression from 86137 (e89a8aae) Both patches are combined in a single file and must be applied together: 86137 adds ret->len before the NULL check on ret->string, 86141 moves it after. Co-Authored-By: AtomCode (mimo-v2.5) <noreply@atomgit.com> | 1 个月前 |
| fix: CVE-2026-86138, CVE-2026-86140 Backport upstream patches for libxml2 2.11.9: - CVE-2026-86138: add overflow checks to xmlDictAddQString in dict.c - CVE-2026-86140: add bounds checks to xmlSnprintfElements in valid.c Co-Authored-By: AtomCode (mimo-v2.5) <noreply@atomgit.com> | 1 个月前 |
| fix: CVE-2026-86138, CVE-2026-86140 Backport upstream patches for libxml2 2.11.9: - CVE-2026-86138: add overflow checks to xmlDictAddQString in dict.c - CVE-2026-86140: add bounds checks to xmlSnprintfElements in valid.c Co-Authored-By: AtomCode (mimo-v2.5) <noreply@atomgit.com> | 1 个月前 |
| fix CVE-2026-86142, CVE-2026-86143, CVE-2026-86144, CVE-2026-76781 | 20 天前 |
| fix CVE-2026-86142, CVE-2026-86143, CVE-2026-86144, CVE-2026-76781 | 20 天前 |
| fix CVE-2026-86142, CVE-2026-86143, CVE-2026-86144, CVE-2026-76781 | 20 天前 |
| backport upstream patches | 6 个月前 |
| backport patch from upstream | 1 年前 |
| 回退 'Pull Request !224 : upgrade to upstream v2.12.5' (cherry picked from commit cb08a52eeb9a45816bcfd044d1807bca8c03f176) | 2 年前 |
| backport upstream patch | 2 个月前 |
| backport upstream patches | 6 个月前 |
| backport upstream patches (cherry picked from commit c20350257da9184f468fd625d608150bd04d0081) | 8 个月前 |
| 回退 'Pull Request !224 : upgrade to upstream v2.12.5' (cherry picked from commit cb08a52eeb9a45816bcfd044d1807bca8c03f176) | 2 年前 |
| 2.11.9 | 2 年前 |
| upgrade to upstream v2.9.12 Signed-off-by: Zhipeng Xie <xiezhipeng1@huawei.com> | 4 年前 |
| fix CVE-2026-86142, CVE-2026-86143, CVE-2026-86144, CVE-2026-76781 | 20 天前 |
| add yaml file | 6 年前 |