guix-devel
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[PATCH 0/1] More libxml2 security fixes


From: Leo Famulari
Subject: [PATCH 0/1] More libxml2 security fixes
Date: Thu, 26 May 2016 22:57:07 -0400

libxml2 2.9.4 is released, with a lot of fixed bugs, both with and
without CVE IDs:

https://git.gnome.org/browse/libxml2/log/

This patch updates the existing graft by removing patches for two of
these fixed bugs, and updating to 2.9.4, fixing 10 additional CVE bugs.

The question is: will it work to graft 2.9.4 in place of 2.9.3?

Can anyone recommend a package that uses libxml2 in an obvious way (e.g.
for parsing an XML configuration file)?

Leo Famulari (1):
  gnu: libxml2: Update replacement to 2.9.4 [security fixes].

 gnu/local.mk                                     |  2 -
 gnu/packages/patches/libxml2-CVE-2016-3627.patch | 61 ---------------------
 gnu/packages/patches/libxml2-CVE-2016-3705.patch | 68 ------------------------
 gnu/packages/xml.scm                             | 14 +++--
 4 files changed, 10 insertions(+), 135 deletions(-)
 delete mode 100644 gnu/packages/patches/libxml2-CVE-2016-3627.patch
 delete mode 100644 gnu/packages/patches/libxml2-CVE-2016-3705.patch

-- 
2.8.3




reply via email to

[Prev in Thread] Current Thread [Next in Thread]