Good day,

In the upcoming libxml2 release planned for the 20th, are the below issues
anticipated to be in 2.9.4 final? I don't believe these are in the current
2.9.4 RCs.

These two hit an Apple IOS release and then were on the oss-security
mailing list.

https://bugzilla.gnome.org/show_bug.cgi?id=765207
https://bugzilla.gnome.org/show_bug.cgi?id=762100

The findings are restricted now but I know it wasn't always that way.


   -

   *libxml2*

   CVE-2016-1833 : Mateusz Jurczyk

   CVE-2016-1834 : Apple

   CVE-2016-1835 : Wei Lei and Liu Yang of Nanyang Technological University

   CVE-2016-1836 : Wei Lei and Liu Yang of Nanyang Technological University

   CVE-2016-1837 : Wei Lei and Liu Yang of Nanyang Technological University

   CVE-2016-1838 : Mateusz Jurczyk

   CVE-2016-1839 : Mateusz Jurczyk

   CVE-2016-1840 : Kostya Serebryany


   -

   *libxslt*

   CVE-2016-1841 : Sebastian Apelt

As far I'm aware, other than the Apple release notes, there isn't public
information on these issues.

Thanks,
Chris
-- 
Chris Green <gree...@gmail.com>
_______________________________________________
xml mailing list, project page  http://xmlsoft.org/
xml@gnome.org
https://mail.gnome.org/mailman/listinfo/xml

Reply via email to