Re: libxml2 author overwhelmed with security requests

Pavel Stehule writes: > Own implementation of SQL/XML generating functions like XMLFOREST or > XMLELEMENT should not be too > difficult. Significantly more difficult problem is parsing of XML (more > with namespaces), although some basic > support for XMLTABLE should not be too hard too. I don't

Re: libxml2 author overwhelmed with security requests

čt 19. 6. 2025 v 22:09 odesílatel Bruce Momjian napsal: > On Thu, Jun 19, 2025 at 09:24:32PM +0200, Jim Jones wrote: > > On 19.06.25 03:41, Bruce Momjian wrote: > > > This blog post explains the serious problems the single libxml2 author > > > is having in maintaining the library: > > > > > > > h

Re: libxml2 author overwhelmed with security requests

On Thu, Jun 19, 2025 at 09:24:32PM +0200, Jim Jones wrote: > On 19.06.25 03:41, Bruce Momjian wrote: > > This blog post explains the serious problems the single libxml2 author > > is having in maintaining the library: > > > > > > https://socket.dev/blog/libxml2-maintainer-ends-embargoed-vulne

Re: libxml2 author overwhelmed with security requests

On 19.06.25 03:41, Bruce Momjian wrote: > This blog post explains the serious problems the single libxml2 author > is having in maintaining the library: > > > https://socket.dev/blog/libxml2-maintainer-ends-embargoed-vulnerability-reports > > There are few learnings from this: > > * libx

Re: libxml2 author overwhelmed with security requests

čt 19. 6. 2025 v 11:00 odesílatel Álvaro Herrera napsal: > On 2025-Jun-18, Bruce Momjian wrote: > > > This blog post explains the serious problems the single libxml2 author > > is having in maintaining the library: > > > > > https://socket.dev/blog/libxml2-maintainer-ends-embargoed-vulnerability-

Re: libxml2 author overwhelmed with security requests

On 2025-Jun-18, Bruce Momjian wrote: > This blog post explains the serious problems the single libxml2 author > is having in maintaining the library: > > > https://socket.dev/blog/libxml2-maintainer-ends-embargoed-vulnerability-reports > > There are few learnings from this: > > * libxml

libxml2 author overwhelmed with security requests

This blog post explains the serious problems the single libxml2 author is having in maintaining the library: https://socket.dev/blog/libxml2-maintainer-ends-embargoed-vulnerability-reports There are few learnings from this: * libxml2 is even less production-ready than we thought * man