EPrints Technical Mailing List Archive
See the EPrints wiki for instructions on how to join this mailing list and related information.
Message: #10209
< Previous (by date) | Next (by date) > | < Previous (in thread) | Next (in thread) > | Messages - Most Recent First | Threads - Most Recent First
[EP-tech] R: Libxml2 and FreeBSD
- To: David R Newman <drn@ecs.soton.ac.uk>, "eprints-tech@ecs.soton.ac.uk" <eprints-tech@ecs.soton.ac.uk>
- Subject: [EP-tech] R: Libxml2 and FreeBSD
- From: "Paolo Tealdi" <paolo.tealdi@polito.it>
- Date: Tue, 26 Aug 2025 14:47:38 +0000
CAUTION: This e-mail originated outside the University of Southampton.
Hi David.
Thank you for your quick answer.
I'm obviously aware of what means applying this patch. I DO NOT want that this patch would be applied. I provided this patch esclusively to explain quickly how to, apparently, resolve the problem (with that patch the command 'epadmin test [archive]' doesn't
coredump).
If you haven't tested the latest libxml2 version, it is possible that the problem i referred is present also in a linux environment (and not only for FreeBSD env ).
Unfortunately FreeBSD is very fast to update packages in its pkg environment (sometimes toomuch 🙂 ), above all when they are marked vulnerable: 2.12.5 is marked vulnerable
https://www.vuxml.org/freebsd/abbc8912-5efa-11f0-ae84-99047d0a6bcc.html.
Some more informations:
I will do all the tests on 3.4.6, using both libxml2 versions and will submit an issue.
Best regards,
Paolo Tealdi
Ing. Paolo Tealdi ISIAD - Politecnico Torino Telefono/Phone : +39-011-0906714 , FAX : +39-011-0906625 Indirizzo/Address : C.so Duca degli Abruzzi, 24 - 10129 Torino - ITALY Skype : tealdi.paolo Please consider your environmental responsibility before printing this e-mail
Da: David R Newman <drn@ecs.soton.ac.uk>
Inviato: martedì 26 agosto 2025 15:45 A: eprints-tech@ecs.soton.ac.uk <eprints-tech@ecs.soton.ac.uk>; Paolo Tealdi <paolo.tealdi@polito.it> Oggetto: Re: [EP-tech] Libxml2 and FreeBSD Hi Paolo,
Version 2.14.5 is the most recent version of LibXML2 (only released 15th July 2025), the latest version of have tested on is for RHEL 10, which is running LibXML 2.12.5 (patch version 7).
I am not overly happy as making a change to such a core file, as I am unsure what the side-effects may be. I have quickly checked over the code base and I can only see once instance where the XML::LibXML::parse_file function which you propose changing in your diff has a second parameter for the basepath.
This instance is in a command script (tools/phrases_map) rather than any code loaded by Apache. I don't believe this script is needed, as it looks to be a legacy script for updating certain phrases between versions of EPrints. I don't every remember using this script, so I reckon it is more than 10 years old, so I would probably just remove it, if I made a change to the parse_file function. However, I am uncertain if any Bazaar plugins, ingredients, etc. may call this will a basepath. I feel a better fix may be to only provide this second argument to XML::LibXML's parse_fh if it has a non-empty value. E.g.
eval { $doc = $basepath ? $PARSER->parse_fh( $fh, $basepath ) : $PARSER->parse_fh( $fh ) };
Then if something does require the basepath then this does not suddenly break. However, as I suspect is the case this basepath argument is barely ever used, then it will probably never affect your repository in the way you have described.
I think the best thing you can do is submit this as an issue on https://github.com/eprints/eprints3.4 as that is a better forum to discuss this in more detail.
Thanks and regards
David Newman
On 26/08/2025 14:13, Paolo Tealdi wrote:
|
- Follow-Ups:
- Re: [EP-tech] R: Libxml2 and FreeBSD
- From: David R Newman <drn@ecs.soton.ac.uk>
- Re: [EP-tech] R: Libxml2 and FreeBSD
- References:
- [EP-tech] Libxml2 and FreeBSD
- From: "Paolo Tealdi" <paolo.tealdi@polito.it>
- Re: [EP-tech] Libxml2 and FreeBSD
- From: David R Newman <drn@ecs.soton.ac.uk>
- [EP-tech] Libxml2 and FreeBSD
- Prev by Date: Re: [EP-tech] Libxml2 and FreeBSD
- Next by Date: Re: [EP-tech] R: Libxml2 and FreeBSD
- Previous by thread: Re: [EP-tech] Libxml2 and FreeBSD
- Next by thread: Re: [EP-tech] R: Libxml2 and FreeBSD
- Index(es):