Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 20 Jun 2016 18:50:11 +0000
From:      bugzilla-noreply@freebsd.org
To:        gnome@FreeBSD.org
Subject:   [Bug 210298] textproc/libxslt: Update to 1.1.29
Message-ID:  <bug-210298-6497-e9ypAgTcUK@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-210298-6497@https.bugs.freebsd.org/bugzilla/>

index | next in thread | previous in thread | raw e-mail

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=210298

--- Comment #9 from Mark Felder <feld@FreeBSD.org> ---
Debian appears to have patched their libxslt against these vulns that are
supposedly due to Chrome's usage of the library:

https://www.debian.org/security/2016/dsa-3605

It would be wise to do the same then. We don't ship Chromium with an embedded
libxslt as far as I can tell, so Chrome users are still vulnerable without this
library being patched.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.

home | help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-210298-6497-e9ypAgTcUK>