maintainer-feedback requested: [Bug 222893] textproc/libxml2: update to 2.9.6

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Tue Oct 10 06:51:49 UTC 2017


Walter Hop <walter at lifeforms.nl> has reassigned Bugzilla Automation
<bugzilla at FreeBSD.org>'s request for maintainer-feedback to gnome at FreeBSD.org:
Bug 222893: textproc/libxml2: update to 2.9.6
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=222893



--- Description ---
Our textproc/libxml2 in ports is at 2.9.4.

On Sep 4, 2.9.5 was released with some security fixes, from
http://xmlsoft.org/news.html:

Security:
Detect infinite recursion in parameter entities (Nick Wellnhofer),
Fix handling of parameter-entity references (Nick Wellnhofer),
Disallow namespace nodes in XPointer ranges (Nick Wellnhofer),
Fix XPointer paths beginning with range-to (Nick Wellnhofer)

On Oct 6, 2.9.6 was released with some more fixes.

Since libxml2 may parse untrusted input, a port update would be very welcome.


More information about the freebsd-gnome mailing list