Re: [xml] Release of libxml2-2.9.9

2019-01-30 Thread Alexander Dahl
Hei hei, Am Donnerstag, 3. Januar 2019, 20:30:29 CET schrieb Daniel Veillard via xml: > Security: > - CVE-2018-9251 CVE-2018-14567 Fix infinite loop in LZMA decompression (Nick > Wellnhofer) - CVE-2018-14404 Fix nullptr deref with XPath logic ops (Nick > Wellnhofer) What about CVE-2017-8872? Deb

Re: [xml] Release of libxml2-2.9.9

2019-01-30 Thread Nick Wellnhofer
On 30/01/2019 10:36, Alexander Dahl wrote: What about CVE-2017-8872? Debian (and SuSE) have a patch: https://sources.debian.org/patches/libxml2/2.9.8+dfsg-1/0003-CVE-2017-8872.patch/ https://security-tracker.debian.org/tracker/CVE-2017-8872 According to https://bugzilla.gnome.org/show_bug.cgi