Permalink
Comparing changes
Choose two branches to see what’s changed or to start a new pull request.
If you need to, you can also or
learn more about diff comparisons.
Open a pull request
Create a new pull request by comparing changes across two branches. If you need to, you can also .
Learn more about diff comparisons here.
...
- 3 commits
- 6 files changed
- 1 contributor
Commits on Jul 20, 2025
-
Apply upstream patches to address multiple vulnerabilities
- CVE-2025-6021 - 17d950ae "tree: Fix integer overflow in xmlBuildQName" - CVE-2025-6170 - 5e9ec5c1 "Fix potential buffer overflows of interactive shell" - CVE-2025-49794 - 81cef8c5 "schematron: Fix xmlSchematronReportOutput" - CVE-2025-49795 - 62048278 "schematron: Fix null pointer dereference leading to DoS" - CVE-2025-49796 - 81cef8c5 "schematron: Fix xmlSchematronReportOutput"
Commits on Jul 21, 2025
-
Apply upstream patches to address multiple vulnerabilities (#3526)
**What problem is this PR intended to solve?** Address multiple vulnerabilities that are patched in libxml 2.14.4 and 2.14.5 but do not appear in an official 2.13.x release. - CVE-2025-6021 - 17d950ae "tree: Fix integer overflow in xmlBuildQName" - CVE-2025-6170 - 5e9ec5c1 "Fix potential buffer overflows of interactive shell" - CVE-2025-49794 - 81cef8c5 "schematron: Fix xmlSchematronReportOutput" - CVE-2025-49795 - 62048278 "schematron: Fix null pointer dereference leading to DoS" - CVE-2025-49796 - 81cef8c5 "schematron: Fix xmlSchematronReportOutput" See related GHSA-353f-x4gh-cqq8 which will be published when these patches appear in a release.
-
Loading
This comparison is taking too long to generate.
Unfortunately it looks like we can’t render this comparison for you right now. It might be too big, or there might be something weird with your repository.
You can try running this command locally to see the comparison on your machine:
git diff v1.18.8...v1.18.9