[xml/sgml-pkgs] Bug#840553: Bug#840554: Fixes from 2.9.4+dfsg1-2.1 / 2.8.0+dfsg1-7+wheezy7

Salvatore Bonaccorso carnil at debian.org
Sat Dec 17 18:55:12 UTC 2016


Hi Thorsten,

On Wed, Nov 16, 2016 at 03:12:39PM +0100, Thorsten Glaser wrote:
> On Wed, 16 Nov 2016, Salvatore Bonaccorso wrote:
> 
> > FWIW, from security-team side I was planning to work on those after
> > 2.9.4+dfsg1-2.1 was now exposed enought in unstable first (unless
> 
> OK, thank you.
> 
> > I have it though not yet finalized.
> 
> No worries.

The upstream solution for CVE-2016-9318 seems still to get finalized,
and I do not want to rush things on this regard. So I went ahead and
finalized the debdiff for #840553, #840554 only.

If you want to give it a try, testpackages can be found at:

https://people.debian.org/~carnil/tmp/libxml2/

I'm still doing tests, to see I do not introduce any regression with
that upload.

Regards,
Salvatore



More information about the debian-xml-sgml-pkgs mailing list