notbugAs an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
All times are UTC
Ukraine
All known SQL injection issues patched. There is no evidence it was exploited. That doesn’t mean it wasn’t. Please change your password.
non port: textproc/libxml2/files/patch-parser.c
SVNWeb

Number of commits found: 12

Fri, 20 Nov 2015
[ 20:45 kwm search for other commits by this committer ] Original commit   Revision:402102
New release to fix a number of CVE's.

CVE-2015-1819 is also listed in the release notes of 2.9.3 but that issue
was fixed in a previous commit and documented in another vuxml entry.

MFH:		2015Q4
Security:	e5423caf-8fb8-11e5-918c-bcaec565249c
Wed, 29 Oct 2014
[ 17:11 kwm search for other commits by this committer ] Original commit   Revision:371693
Fix regression introduced in CVE-201403660 fix.

Submitted by:	gjb@
Obtained from:	libxml2 upstream
Mon, 20 Oct 2014
[ 14:19 kwm search for other commits by this committer ] Original commit   Revision:371269
patch-parser.c:
 Replace allready applied patch with new patch from upstream to unbreak the
 xmlcatalog command.
patch-uri.c:
Revert uri.c commit that causes the document chain to fail.

Reported by:	antoine@
Tested by:	bapt@
MFH:		2014Q4
Tue, 13 May 2014
[ 20:32 kwm search for other commits by this committer ] Original commit   Revision:353989 (Only the first 10 of 15 ports in this commit are shown above. View all ports for this commit)
Update to libxml2 2.9.1 [1]

This version fixes CVE-2013-2877.
Add upstream patch for CVE-2014-0191.

CVE's Reported by:	Akinori MUSHA <knu@iDaemons.org>
Obtained from:	GNOME dev repo [1], libxml2 upstream [2]
MFH:		2014Q2
Fri, 29 Mar 2013
[ 14:08 kwm search for other commits by this committer ] Original commit   Revision:315540 (Only the first 10 of 16 ports in this commit are shown above. View all ports for this commit)
Update to 2.8.0. [1]
Add patch to fix CVE-2013-0338 and CVE-2013-0339. [2]
Convert to OptionsNG, rename patches to standard form. [1]

Notified by:	swills@ [2]
Obtained from:	gnome team repo [1]
Security:	843a4641-9816-11e2-9c51-080027019be0
Mon, 27 Feb 2012
[ 23:12 kwm search for other commits by this committer ] Original commit 
Fix libxml2 heap buffer overflow vulnability.

PR:             ports/164270
Submitted by:   kj <b4039413@nwldx.com>
Security:       57f1a624-6197-11e1-b98c-bcaec565249c
Sat, 26 Sep 2009
[ 12:56 marcus search for other commits by this committer ] Original commit 
Update to 2.7.5.

Feature safe:   yes
Wed, 16 Sep 2009
[ 15:20 kwm search for other commits by this committer ] Original commit 
Add a upstream patch that fixes runtime problem with inkscape.

Noticed by:     Ashish SHUKLA <wahjava.ml@gmail.com>
Submitted by:   Romain Tarti`ere <romain@blogreen.org> [1]
Obtained from:  Gnome Git [1]
Feature safe:   yes
Sat, 12 Sep 2009
[ 18:07 marcus search for other commits by this committer ] Original commit 
Update to 2.7.4.
Mon, 24 Aug 2009
[ 00:50 marcus search for other commits by this committer ] Original commit 
Fix security bugs CVE-2009-2416 and CVE-2009-2414.

PR:             137980
Submitted by:   Tsurutani Naoki <turutani@scphys.kyoto-u.ac.jp>
Obtained from: 
http://www.mail-archive.com/debian-bugs-dist@lists.debian.org/msg678527.html
Security:       http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2416
                http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2414
Sun, 19 Jan 2003
[ 19:26 marcus search for other commits by this committer ] Original commit 
Update to 2.5.1.
Mon, 25 Nov 2002
[ 14:40 marcus search for other commits by this committer ] Original commit 
Fix a bug introduced in 2.4.27 that caused KDE's doc building procedure
to virtually hang.  This patch has been fed back to the libxml people, and
should be integrated in the next release.

Reported by:    bento and the KDE people

Number of commits found: 12