|
Number of commits found: 2
| Commit History - (may be incomplete: for full details, see links to repositories near top of page) |
| Commit | Credits | Log message |
|---|
2.11.9_1
22 Jun 2025 17:00:00
      |
Charlie Li (vishwin)  |
textproc/libxml2: backport upstream commits fixing CVEs
[CVE-2024-56171] Fix use-after-free after xmlSchemaItemListAdd
[CVE-2025-24928] Fix stack-buffer-overflow in xmlSnprintfElements
[CVE-2025-32414] python: Read at most len/4 characters.
PR: 287391
(cherry picked from commit fb3e1d5f3dd216ef419a40570c1a97f1ee28a47f) |
2.11.9
23 May 2025 22:23:25
|
Don Lewis (truckman) |
textproc/py-pylibxml2: rm patch that scans garbage
Remove a local patch that scans stack garbage for a pattern and then uses
the pointer after the array has been filled with actual data. This can
cause random segfaults.
The patch is under textproc/libxml2, but the patched file is only used by
textproc/py-pylibxml2.
The UTF-8 issue this was intended to fix was fixed upstream in a more
comprehensive way in 2.11.0 with this commit:
https://gitlab.gnome.org/GNOME/libxml2/-/commit/76c6da420923f2721a2e16adfcef8707a2454a1b
PR: 286439 279034
Approved by: desktop (makc)
Tested by: vvd
MFH: 2025Q2
(cherry picked from commit d5b2d60fc76964a3e5b8f50d2992bd751f688f04) |
Number of commits found: 2
|
As an Amazon Associate I earn from qualifying purchases.
