Re: [BLFS Trac] #23742: AppStream-1.1.6

BLFS Trac ([email protected] via blfs-book Mailing List) <[email protected]>
Newsgroups gmane.linux.lfs.beyond.book
Message-ID <[email protected]>
#23742: AppStream-1.1.6
-------------------------+-------------------------
 Reporter:  Bruce Dubbs  |       Owner:  Joe Locash
     Type:  enhancement  |      Status:  closed
 Priority:  normal       |   Milestone:  13.1
Component:  BOOK         |     Version:  git
 Severity:  normal       |  Resolution:  fixed
 Keywords:               |
-------------------------+-------------------------
Changes (by Joe Locash):

 * resolution:   => fixed
 * status:  assigned => closed

Comment:

 {{{
 Version 1.1.6
 ~~~~~~~~~~~~~
 Released: 2026-08-12

 Features:
  * validator: Ensure description markup has no invalid attributes set
  * validator: Validate bundle/pkgname values for allowed characters

 Bugfixes:
  * xml: Sanitize description markup when reading and writing it
  * yaml/json: Ensure description markup is sanitized when loading/saving
 it
  * meson: Work around wrong library linkage when linking Qt tests
  * Allow sealing of component-IDs to safely use them in hash tables and
 indices
  * Ensure we never emit or read an invalid data origin
  * Prevent crash when comparing bad version strings that have an epoch
 after rev
  * Fix potential out-of-bounds read in OARS mapping table
  * apt: yaml: Harden against potential corrupted YAML / YAML-headers
  * compose: Guess a filename even from invalid URLs instead of crashing
  * compose: Confine directory unit data reads to the unit's root directory
  * compose: Refactor directory unit to use openat2, if possible
  * news-convert: Don't crash in case we receive bad freeform YAML news
 input
  * ascli: Guard against bad bundle values when calling "install"
 }}}
 Fixed at [sha:0a00f88b66].
-- 
Ticket URL: <https://wiki.linuxfromscratch.org/blfs/ticket/23742#comment:2>
BLFS Trac <https://wiki.linuxfromscratch.org/blfs/>
Beyond Linux From Scratch

-- 
http://lists.linuxfromscratch.org/sympa/info/blfs-book
Unsubscribe: See the above information page
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.