File libxml2.spec of Package libxml2.6602

#
# spec file for package libxml2
#
# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.

# Please submit bugfixes or comments via http://bugs.opensuse.org/
#


%define lname libxml2-2
Name:           libxml2
Version:        2.9.4
Release:        0
Summary:        A Library to Manipulate XML Files
License:        MIT
Group:          System/Libraries
Url:            http://xmlsoft.org
Source:         ftp://xmlsoft.org/libxml2/%{name}-%{version}.tar.gz
Source1:        ftp://xmlsoft.org/libxml2/%{name}-%{version}.tar.gz.asc
Source2:        baselibs.conf
Source3:        %{name}.keyring
Patch0:         fix-perl.diff
# PATCH-FIX-UPSTREAM bnc#983288 kstreitova@suse.com -- fix attribute decoding during XML schema validation
Patch1:         libxml2-2.9.4-fix_attribute_decoding.patch
# PATCH-FIX-UPSTREAM bnc#1014873 sflees@suse.de -- Fix NULL dereference in xpointer.c when in recovery mode
Patch2:         libxml2-NULL-deref-xpointer.patch
# PATCH-FIX-SUSE bnc#1014873 sflees@suse.de
Patch4:         libxml2-inf-rec-xmlParseConditionalSections.patch
# PATCH-FIX-UPSTREAM bnc#1010675 sflees@suse.de
Patch5:         libxml2-CVE-2016-9318.patch
# PATCH-FIX-UPSTREAM bnc#1005544 psimons@suse.com -- use after free via namespace node in XPointer ranges
Patch6:         libxml2-2.9.4-CVE-2016-4658.patch
# PATCH-FIX-UPSTREAM bnc#1017497 sflees@suse.de
Patch7:         libxml2-CVE-2016-9597.patch
# PATCH-FIX-UPSTREAM bnc#1039063 bnc#1039064 pmonrealgonzalez@suse.com -- Fixes CVE-2017-9047 and CVE-2017-9048
Patch8:         libxml2-CVE-2017-9047.patch
# PATCH-FIX-UPSTREAM bnc#1039066 bnc#1039661 pmonrealgonzalez@suse.com -- Fixes CVE-2017-9049 and CVE-2017-9050
Patch9:         libxml2-CVE-2017-9049.patch
# PATCH-FIX-UPSTREAM bnc#1024989 pmonrealgonzalez@suse.com -- CVE-2017-5969 NULL pointer derefence parsing xml file
Patch10:        libxml2-CVE-2017-5969.patch
# PATCH-FIX-UPSTREAM bnc#1044337 pmonrealgonzalez@suse.com -- CVE-2017-0663 Heap buffer overflow in xmlAddID
Patch11:        libxml2-CVE-2017-0663.patch
# PATCH-FIX-UPSTREAM bnc#1044894 pmonrealgonzalez@suse.com -- CVE-2017-7375 Missing validation for external entities in xmlParsePEReference
Patch12:        libxml2-CVE-2017-7375.patch
# PATCH-FIX-UPSTREAM bnc#1044887 pmonrealgonzalez@suse.com -- CVE-2017-7376 Incorrect limit used for port values
Patch13:        libxml2-CVE-2017-7376.patch
# PATCH-FIX-SUSE bsc#1038444 pmonrealgonzalez@suse.com -- CVE-2017-8872 Out-of-bounds read in htmlParseTryOrFinish
Patch14:        libxml2-2.9.4-CVE-2017-8872.patch
# PATCH-FIX-UPSTREAM bsc#1077993 pmonrealgonzalez@suse.com -- CVE-2017-15412 Use-after-free in xmlXPathCompOpEvalPositionalPredicate
Patch15:        libxml2-2.9.4-CVE-2017-15412.patch
# PATCH-FIX-UPSTREAM bsc#1078806 pmonrealgonzalez@suse.com -- CVE-2017-5130 Remote buffer overflow
Patch16:        libxml2-2.9.4-CVE-2017-5130.patch
# PATCH-FIX-UPSTREAM bsc#1078813 pmonrealgonzalez@suse.com -- CVE-2016-5131 Use-after-free
Patch17:        libxml2-2.9.4-CVE-2016-5131.patch
Patch18:        libxml2-xmlXPathCmpNodes.patch

BuildRequires:  autoconf
BuildRequires:  automake
BuildRequires:  fdupes
BuildRequires:  libtool
BuildRequires:  pkg-config
BuildRequires:  readline-devel
BuildRequires:  xz-devel
BuildRequires:  zlib-devel
BuildRoot:      %{_tmppath}/%{name}-%{version}-build

%description
The XML C library was initially developed for the GNOME project. It is
now used by many programs to load and save extensible data structures
or manipulate any kind of XML files.

This library implements a number of existing standards related to
markup languages, including the XML standard, name spaces in XML, XML
Base, RFC 2396, XPath, XPointer, HTML4, XInclude, SGML catalogs, and
XML catalogs. In most cases, libxml tries to implement the
specification in a rather strict way. To some extent, it provides
support for the following specifications, but does not claim to
implement them: DOM, FTP client, HTTP client, and SAX.

The library also supports RelaxNG. Support for W3C XML Schemas is in
progress.

%package -n %{lname}
Summary:        A Library to Manipulate XML Files
Group:          System/Libraries

%description -n %{lname}
The XML C library was initially developed for the GNOME project. It is
now used by many programs to load and save extensible data structures
or manipulate any kind of XML files.

This library implements a number of existing standards related to
markup languages, including the XML standard, name spaces in XML, XML
Base, RFC 2396, XPath, XPointer, HTML4, XInclude, SGML catalogs, and
XML catalogs. In most cases, libxml tries to implement the
specification in a rather strict way. To some extent, it provides
support for the following specifications, but does not claim to
implement them: DOM, FTP client, HTTP client, and SAX.

The library also supports RelaxNG. Support for W3C XML Schemas is in
progress.

%package tools
Summary:        Tools using libxml
Group:          System/Libraries
Provides:       %{name} = %{version}-%{release}
Obsoletes:      %{name} < %{version}-%{release}

%description tools
This package contains xmllint, a very useful tool proving libxml's power.

%package devel
Summary:        Include Files and Libraries mandatory for Development
Group:          Development/Libraries/C and C++
Requires:       %{lname} = %{version}
Requires:       %{name}-tools = %{version}
Requires:       glibc-devel
Requires:       readline-devel
Requires:       xz-devel
Requires:       zlib-devel
# bug437293
%ifarch ppc64
Obsoletes:      libxml2-devel-64bit
%endif

%description devel
This package contains all necessary include files and libraries needed
to develop applications that require these.

%package doc
Summary:        A Library to Manipulate XML Files
Group:          System/Libraries
Requires:       %{lname} = %{version}
BuildArch:      noarch

%description doc
The XML C library was initially developed for the GNOME project. It is
now used by many programs to load and save extensible data structures
or manipulate any kind of XML files.

This library implements a number of existing standards related to
markup languages, including the XML standard, name spaces in XML, XML
Base, RFC 2396, XPath, XPointer, HTML4, XInclude, SGML catalogs, and
XML catalogs. In most cases, libxml tries to implement the
specification in a rather strict way. To some extent, it provides
support for the following specifications, but does not claim to
implement them: DOM, FTP client, HTTP client, and SAX.

The library also supports RelaxNG. Support for W3C XML Schemas is in
progress.

%prep
%setup -q
%patch0
%patch1 -p1
%patch2 -p1
%patch4 -p1
%patch5 -p1
%patch6 -p1
%patch7 -p1
%patch8 -p1
%patch9 -p1
%patch10 -p1
%patch11 -p1
%patch12 -p1
%patch13 -p1
%patch14 -p1
%patch15 -p1
%patch16 -p1
%patch17 -p1
%patch18 -p1

%build
autoreconf -fvi
%configure --disable-static \
    --docdir=%{_docdir}/%{name} \
    --with-html-dir=%{_docdir}/%{name}/html \
    --with-fexceptions \
    --with-history \
    --without-python \
    --enable-ipv6 \
    --with-sax1 \
    --with-regexps \
    --with-threads \
    --with-reader \
    --with-http

make %{?_smp_mflags} BASE_DIR="%{_docdir}" DOC_MODULE="%{name}"

%install
make install DESTDIR=%{buildroot} BASE_DIR="%{_docdir}" DOC_MODULE="%{name}"
mkdir -p "%{buildroot}/%{_docdir}/%{name}"
cp -a AUTHORS NEWS README COPYING* Copyright TODO* %{buildroot}%{_docdir}/%{name}/
ln -s libxml2/libxml %{buildroot}%{_includedir}/libxml
%fdupes %{buildroot}%{_datadir}

%check
# qemu-arm can't keep up atm, disabling check for arm
%ifnarch %arm
make %{?_smp_mflags} check
%endif

%post -n %{lname} -p /sbin/ldconfig

%postun -n %{lname} -p /sbin/ldconfig

%files -n %{lname}
%defattr(-, root, root)
%{_libdir}/lib*.so.*
%doc %dir %{_docdir}/%{name}
%doc %{_docdir}/%{name}/[ANRCT]*

%files tools
%defattr(-, root, root)
%{_bindir}/xmllint
%{_bindir}/xmlcatalog
%{_mandir}/man1/xmllint.1*
%{_mandir}/man1/xmlcatalog.1*

%files devel
%defattr(-, root, root)
%{_bindir}/xml2-config
%dir %{_datadir}/aclocal
%{_datadir}/aclocal/libxml.m4
%{_includedir}/libxml
%{_includedir}/libxml2
%{_libdir}/lib*.so
# libxml2.la is needed for the python-libxml2 build. Deleting it breaks build of python-libxml2.
%{_libdir}/libxml2.la
%{_libdir}/*.sh
%{_libdir}/pkgconfig/*.pc
%{_libdir}/cmake
%{_mandir}/man1/xml2-config.1*
%{_mandir}/man3/libxml.3*

%files doc
%defattr(-, root, root)
%{_datadir}/gtk-doc/html/*
%doc %{_docdir}/%{name}/examples
%doc %{_docdir}/%{name}/html
# owning these directories prevents gtk-doc <-> libxml2 build loop:
%dir %{_datadir}/gtk-doc
%dir %{_datadir}/gtk-doc/html

%changelog