libxml2: Add version 2.13.4, fixes a few CVE issues

[gsantner]

Summary

Changes to recipe: libxml2

Motivation

Stay up to date with somewhat recent releases of upstream, fix CVE issues. Update to latest patch version.

See also: https://gitlab.gnome.org/GNOME/libxml2/-/releases

Details

Version bump

---

• Read the contributing guidelines
• Checked that this PR is not a duplicate: list of PRs by recipe
• Tested locally with at least one configuration using a recent version of Conan

[ErniGH]

Hey @gsantner , thanks a lot for your contribution, but wouldn’t it be better to use the latest version 2.13.4 if the goal is to stay up to date?

[gsantner]

@ErniGH
libxml2 does patch releases for multiple versions, this one is the latest one from the 2.12 series.

My PR initially contained the 2.13 one, but Conan fails to build with that. Having a no-new-features version available is fine too, even with knowing that 2.13 could break some other recipes in turn.

If somebody with more sophisticated Conan recipe knowledge wants to take a look fine too, but I myself suggest only the version bumps when noticing.

[uilianries]

@gsantner Thank you for your PR. Checking the previous build log on Windows:

https://c3i.jfrog.io/c3i/misc-v2/logs/pr/25322/1-windows-msvc/libxml2/2.13.4//6211ea34ed7b04dcc66f5ff3bdfd60394f228be5-build.txt

It failed because mem-debug is no longer available.

Could you please revert your latest commit and getting back 2.13 instead. Then, update the recipe with the follow change:

def config_options(self):
    ...
    if Version(self.version) >= "2.13.0":
        self.options.rm_safe("mem-debug")

Regards!

[gsantner]

@uilianries
Thanks for your reply! I added your suggestion, squashed and force pushed the branch. So only updated 2.13 one is in the commit list now.

Let's see what the CI says 😄

[gsantner]

It failed again. pdb files not created but tried to copy?

[uilianries]

It failed again. pdb files not created but tried to copy?

@gsantner It seems like it's missing some symbols. I'll take a look by Monday. Thank you again!

[gsantner]

Thanks for help!

[AbrilRBS]

@uilianries @gsantner the issue was a missing bcrypt dependency in the new version, see https://gitlab.gnome.org/GNOME/libxml2/-/blob/2.13/win32/Makefile.msvc?ref_type=heads#L84

[AbrilRBS]

Checked https://gitlab.gnome.org/GNOME/libxml2/-/compare/2.12...2.13?from_project_id=1665&page=2&straight=false, seems like we're not missing anything else, thanks!

[conan-center-bot]

Conan v1 pipeline ✔️

All green in build 6 (44033ee511c1f3c9256305a90268116f4cd41661):

• libxml2/2.12.7:
  Built 20 packages out of 22 (All logs)

• libxml2/2.13.4:
  Built 20 packages out of 22 (All logs)

• libxml2/2.12.5:
  Built 20 packages out of 22 (All logs)

• libxml2/2.11.7:
  Built 20 packages out of 22 (All logs)

• libxml2/2.11.8:
  Built 20 packages out of 22 (All logs)

• libxml2/2.9.14:
  Built 20 packages out of 22 (All logs)

• libxml2/2.12.6:
  Built 20 packages out of 22 (All logs)

• libxml2/2.11.4:
  Built 20 packages out of 22 (All logs)

• libxml2/2.12.4:
  Built 20 packages out of 22 (All logs)

• libxml2/2.11.6:
  Built 20 packages out of 22 (All logs)

• libxml2/2.12.3:
  Built 20 packages out of 22 (All logs)

• libxml2/2.9.12:
  Built 20 packages out of 22 (All logs)

• libxml2/2.10.4:
  Built 20 packages out of 22 (All logs)

• libxml2/2.9.10:
  Built 20 packages out of 22 (All logs)

• libxml2/2.10.3:
  Built 20 packages out of 22 (All logs)

---

Conan v2 pipeline ✔️

Note: Conan v2 builds are now mandatory. Please read our discussion about it.

All green in build 6 (44033ee511c1f3c9256305a90268116f4cd41661):

• libxml2/2.12.6:
  All packages built successfully! (All logs)

• libxml2/2.12.4:
  All packages built successfully! (All logs)

• libxml2/2.11.6:
  All packages built successfully! (All logs)

• libxml2/2.13.4:
  All packages built successfully! (All logs)

• libxml2/2.12.7:
  All packages built successfully! (All logs)

• libxml2/2.9.14:
  All packages built successfully! (All logs)

• libxml2/2.11.7:
  All packages built successfully! (All logs)

• libxml2/2.10.4:
  All packages built successfully! (All logs)

• libxml2/2.9.12:
  All packages built successfully! (All logs)

• libxml2/2.9.10:
  All packages built successfully! (All logs)

• libxml2/2.12.5:
  All packages built successfully! (All logs)

• libxml2/2.12.3:
  All packages built successfully! (All logs)

• libxml2/2.11.8:
  All packages built successfully! (All logs)

• libxml2/2.10.3:
  All packages built successfully! (All logs)

• libxml2/2.11.4:
  All packages built successfully! (All logs)

[uilianries]

@AbrilRBS Thank you so much!!

[uilianries]

LGTM. Nice addition pointing the origin of bcrypt as dependency.