LibXML2 2.9.0 Released

Hello,

LibXML2 2.9.0 is now available in all 3 custombuild versions.
http://xmlsoft.org/news.html

A new options.conf setting exists to access the new xml2 version (instead of 2.7.6), should you wish to install it: For 1.1 and 1.2, the default is (for now) set to "no", since there have been issues in the past with xml2, xslt, and zlib.

To install this new version, type: If libxml2 won't compile, then simply set the new_xml2 option back to "no".

Please allow up to 24 hours for the sync of all files mirrors with these changes.

John

What confuses me a little, is that RedHat released two libxml2 security patches on 2012-09-18 as seen here (it's also availabale in CentOS): https://rhn.redhat.com/errata/RHSA-2012-1288.html However when I look at the LibXML2 2.9.0 changelog released 2012-09-11: http://xmlsoft.org/news.html I do not find any mention of security fixes - that is strange! However, because of the two patches from RedHat, I am sure there is security fixes. So I would advice to upgrade to LibXML2 2.9.0

I will attempt to upgrade to 2.9.0 later today, if I find any problems, I will report them here. If anybody else also upgrade, please report any problems. Thanks.

After doing some investigation, I found that custombuild has libxslt 1.1.26, but libxslt 1.1.26 and earlier has important security fixes, as released by RedHat 2012-09-13: https://rhn.redhat.com/errata/RHSA-2012-1265.html

I have asked DirectAdmin in a email to add libxslt 1.1.27 to custombuild when options.conf has new_xml2=yes - and will wait upgrading libxml2 until I have received a answer.

Here is changelog for libxslt 1.1.27 http://xmlsoft.org/XSLT/news.html please see this line from changelog: "Fix portability to upcoming libxml2-2.9.0 (Daniel Veillard),"

Edit: I was mistaken. libxslt-1.1.27 is already in custombuild. It's been there all the time. My mistake.

You may have an older versions.txt... which was added on Sept 19th.

John

I am sorry. I was mistaken. I do have the new libxslt-1.1.27 in custombuild. Again, sorry for my mistake.

I have now upgraded to libxml2 2.9.0 in one server, did not get any problems at all. However I have a question:

In a phpinfo page in my servers, I have never had anything listed about libxslt, however after doing ./build libxml2 and build libxslt, I have this in a phpinfo page:


Question is, why have default DirectAdmin installs never installed libxslt before? I have three servers, none has libxslt.

So it seems that if you install DirectAdmin in a new server, you will actuall need to do ./build libxslt to get it?

I compile new libxml2 2.9.0 and libxslt 1.1.27 without any problems.
But won't recompile PHP 5.2.17 (./buil php n):

/usr/local/directadmin/custombuild/php-5.2.17/ext/dom/node.c: In function 'dom_canonicalization':
/usr/local/directadmin/custombuild/php-5.2.17/ext/dom/node.c:1953: error: dereferencing pointer to incomplete type
/usr/local/directadmin/custombuild/php-5.2.17/ext/dom/node.c:1955: error: dereferencing pointer to incomplete type
*** Error code 1

/usr/local/directadmin/custombuild/php-5.2.17/ext/dom/documenttype.c:218: error: dereferencing pointer to incomplete type
/usr/local/directadmin/custombuild/php-5.2.17/ext/dom/documenttype.c:218: error: dereferencing pointer to incomplete type
*** Error code 1
2 errors

OS FreeBSD 8.1


Regards

I don't know, but I think you need to upgrade PHP to 5.3.x or 5.4.x. I am running PHP 5.4.7, and I have none problems after upgrade of libxml2, and PHP recompile without any problems. My guess is that you need to upgrade to minimum PHP 5.3.x to solve the problem.

Your php and OS are out of date and insecure. You have some major updating to do.