Ensure raw tagnames are safe exiting internalEntityParser
Resolves: CVE-2022-40674

Fix multiple CVEs
Resolves: CVE-2022-25314
Resolves: CVE-2022-25313

Improve patch for CVE-2022-25236
Related: CVE-2022-25236

Fix patch for CVE-2022-25235
Resolves: CVE-2022-25235

Fix multiple CVEs
CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
CVE-2022-25315 expat: integer overflow in storeRawNames()
Resolves: CVE-2022-25236
Resolves: CVE-2022-25235
Resolves: CVE-2022-25315

Fix multiple CVEs
CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
CVE-2022-22825 Integer overflow in lookup in xmlparse.c
CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
CVE-2022-22823 Integer overflow in build_model in xmlparse.c
CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
Resolves: CVE-2022-23852
Resolves: CVE-2021-45960
Resolves: CVE-2021-46143
Resolves: CVE-2022-22827
Resolves: CVE-2022-22826
Resolves: CVE-2022-22825
Resolves: CVE-2022-22824
Resolves: CVE-2022-22823
Resolves: CVE-2022-22822

add security fixes for CVE-2018-20843, CVE-2019-15903

Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

Switch to %ldconfig_scriptlets

update to 2.2.5 (#1508667)

update to 2.2.4 (#1483359)

fix tests with unsigned char (upstream PR 109)
update to 2.2.3 (#1473266)

Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

update to 2.2.2 (#1470891)

trim unnecessary doc, examples content