When can we have a secure libxml2?

Jeremy Messenger mezz7 at cox.net
Mon Oct 20 16:22:41 UTC 2008


On Mon, 20 Oct 2008 11:19:26 -0000, Gunther Mayer  
<gunther.mayer at googlemail.com> wrote:

> Hi there,
>
> I'm sure I'm not the first person to ask but we're using libxml2 and the  
> version in ports (2.6.x) currently suffers from a rather serious  
> security vulnerability:
>
> http://www.freebsd.org/ports/portaudit/d71da236-9a94-11dd-8f42-001c2514716c.html
>
> Yet there's no libxml2-2.7.x in ports as required by the above notice.  
> So there's no solution other than compiling an up-to-date one by hand  
> and that opens up a whole different can of worms regarding dependencies.
>
> When will this be addressed?

Done.

> Regards,
>
> Gunther


-- 
mezz7 at cox.net  -  mezz at FreeBSD.org
FreeBSD GNOME Team
http://www.FreeBSD.org/gnome/  -  gnome at FreeBSD.org


More information about the freebsd-gnome mailing list