Re: libxml2 author overwhelmed with security requests

En 21/07/25 1:16 a. m., Sandeep Thakkar escribió: On Fri, Jun 20, 2025 at 2:42 AM Tom Lane wrote: Pavel Stehule writes: > Own implementation of SQL/XML generating functions like XMLFOREST or > XMLELEMENT should not be too > difficult. Significantly more difficult problem is

Re: libxml2 author overwhelmed with security requests

Bruce Momjian writes: > Where do we think our use of libxml2 is heading? Do you suspect > security scanners will start negative reporting the use of libxml2? There's at least one distro that's already stopped building with --with-libxml out of security concerns. (I forget who exactly, but it's

Re: libxml2 author overwhelmed with security requests

On Mon, Jul 21, 2025 at 12:46:03PM +0530, Sandeep Thakkar wrote: > > On Fri, Jun 20, 2025 at 2:42 AM Tom Lane wrote: > > Pavel Stehule writes: > > Own implementation of SQL/XML generating functions like XMLFOREST or > > XMLELEMENT should not be too > > difficult. Significantly m

Re: libxml2 author overwhelmed with security requests

On Fri, Jun 20, 2025 at 2:42 AM Tom Lane wrote: > Pavel Stehule writes: > > Own implementation of SQL/XML generating functions like XMLFOREST or > > XMLELEMENT should not be too > > difficult. Significantly more difficult problem is parsing of XML (more > > with namespaces), although some basic

Re: libxml2 author overwhelmed with security requests

Pavel Stehule writes: > Own implementation of SQL/XML generating functions like XMLFOREST or > XMLELEMENT should not be too > difficult. Significantly more difficult problem is parsing of XML (more > with namespaces), although some basic > support for XMLTABLE should not be too hard too. I don't

Re: libxml2 author overwhelmed with security requests

čt 19. 6. 2025 v 22:09 odesílatel Bruce Momjian napsal: > On Thu, Jun 19, 2025 at 09:24:32PM +0200, Jim Jones wrote: > > On 19.06.25 03:41, Bruce Momjian wrote: > > > This blog post explains the serious problems the single libxml2 author > > > is having in maintaining the library: > > > > > > > h

Re: libxml2 author overwhelmed with security requests

On Thu, Jun 19, 2025 at 09:24:32PM +0200, Jim Jones wrote: > On 19.06.25 03:41, Bruce Momjian wrote: > > This blog post explains the serious problems the single libxml2 author > > is having in maintaining the library: > > > > > > https://socket.dev/blog/libxml2-maintainer-ends-embargoed-vulne

Re: libxml2 author overwhelmed with security requests

On 19.06.25 03:41, Bruce Momjian wrote: > This blog post explains the serious problems the single libxml2 author > is having in maintaining the library: > > > https://socket.dev/blog/libxml2-maintainer-ends-embargoed-vulnerability-reports > > There are few learnings from this: > > * libx

Re: libxml2 author overwhelmed with security requests

čt 19. 6. 2025 v 11:00 odesílatel Álvaro Herrera napsal: > On 2025-Jun-18, Bruce Momjian wrote: > > > This blog post explains the serious problems the single libxml2 author > > is having in maintaining the library: > > > > > https://socket.dev/blog/libxml2-maintainer-ends-embargoed-vulnerability-

Re: libxml2 author overwhelmed with security requests

On 2025-Jun-18, Bruce Momjian wrote: > This blog post explains the serious problems the single libxml2 author > is having in maintaining the library: > > > https://socket.dev/blog/libxml2-maintainer-ends-embargoed-vulnerability-reports > > There are few learnings from this: > > * libxml

libxml2 author overwhelmed with security requests

This blog post explains the serious problems the single libxml2 author is having in maintaining the library: https://socket.dev/blog/libxml2-maintainer-ends-embargoed-vulnerability-reports There are few learnings from this: * libxml2 is even less production-ready than we thought * man