Package: libxml2 Version: 2.9.10+dfsg-6.7+deb11u4 Severity: minor X-Debbugs-Cc: [email protected] Control: affects -1 xmlstarlet
$ cat test.xml <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE foo [ <!ELEMENT foo (bar+)> <!ELEMENT bar (#PCDATA)> ]> <foo> <bar>baz</bar> </foo> $ xmlstarlet fo test.xml <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE foo [ <!ELEMENT foo (bar)+> <!ELEMENT bar (#PCDATA)> ]> <foo> <bar>baz</bar> </foo> $ xmllint test.xml <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE foo [ <!ELEMENT foo (bar)+> <!ELEMENT bar (#PCDATA)> ]> <foo> <bar>baz</bar> </foo> libxml2 here changes the (bar+) to (bar)+ which is syntactically identical but not semantically (it’s still a sequence of bar+ and might be extended, in the future, to (bar+, baz*) or something). -- System Information: Debian Release: 11.8 APT prefers oldstable-updates APT policy: (500, 'oldstable-updates'), (500, 'oldstable-security'), (500, 'oldstable-proposed-updates'), (500, 'oldstable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 5.10.0-24-amd64 (SMP w/2 CPU threads) Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE Locale: LANG=C, LC_CTYPE=C (charmap=UTF-8) (ignored: LC_ALL set to C.UTF-8), LANGUAGE not set Shell: /bin/sh linked to /bin/lksh Init: sysvinit (via /sbin/init) Versions of packages libxml2 depends on: ii libc6 2.31-13+deb11u7 ii libicu67 67.1-7 ii liblzma5 5.2.5-2.1~deb11u1 ii zlib1g 1:1.2.11.dfsg-2+deb11u2 libxml2 recommends no packages. libxml2 suggests no packages. -- no debconf information

