Date: Mon, 03 May 2021 21:55:47 +0000 From: bugzilla-noreply@freebsd.org To: desktop@FreeBSD.org Subject: [Bug 249386] textproc/libxml2: Multiple vulnerabilities Message-ID: <bug-249386-39348-YB1gCxXLGw@https.bugs.freebsd.org/bugzilla/> In-Reply-To: <bug-249386-39348@https.bugs.freebsd.org/bugzilla/> References: <bug-249386-39348@https.bugs.freebsd.org/bugzilla/>
next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D249386 Adriaan de Groot <adridg@freebsd.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |adridg@freebsd.org Resolution|--- |FIXED Status|Open |Closed --- Comment #11 from Adriaan de Groot <adridg@freebsd.org> --- There's a patch in GNOME GitLab, 0b3c64d9f2f3e9ce1a98d8f19ee7a763c87e27d5, = for the issue mandree@ mentions. It doesn't apply at *all* though, since there'= s an intervening "make these functions non-recursive" that isn't in the release.= So you'd be backporting some large-ish set of commits in order to introduce the problem that that patch then fixes. This seems more like a "wait for next release" thing than anything else. (Putting back to closed, FIXED since that's the status wrt the original rep= ort. I *do* wish that GNOME would put out a new release of the library since it's been about 18 months; however, it looks kind of stagnated with lots of open issues and stale MRs) --=20 You are receiving this mail because: You are the assignee for the bug.=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-249386-39348-YB1gCxXLGw>