[Bug 249386] textproc/libxml2: Multiple vulnerabilities

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=249386

Adriaan de Groot <adridg at freebsd.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |adridg at freebsd.org
         Resolution|---                         |FIXED
             Status|Open                        |Closed

--- Comment #11 from Adriaan de Groot <adridg at freebsd.org> ---
There's a patch in GNOME GitLab, 0b3c64d9f2f3e9ce1a98d8f19ee7a763c87e27d5, for
the issue mandree@ mentions. It doesn't apply at *all* though, since there's an
intervening "make these functions non-recursive" that isn't in the release. So
you'd be backporting some large-ish set of commits in order to introduce the
problem that that patch then fixes. This seems more like a "wait for next
release" thing than anything else.

(Putting back to closed, FIXED since that's the status wrt the original report.
I *do* wish that GNOME would put out a new release of the library since it's
been about 18 months; however, it looks kind of stagnated with lots of open
issues and stale MRs)

-- 
You are receiving this mail because:
You are the assignee for the bug.