[xml/sgml-pkgs] Bug#496125: Bug#496125: Bug#496125: libxml2: security fix does double free / segfaults (breaks Gnome apps)

Christian Jaeger christian at jaeger.mine.nu
Sun Aug 24 09:40:22 UTC 2008


Mike Hommey wrote:
> A BinNMU of librsvg against libxml2-dev 2.6.32.dfsg-2+lenny1 should
> solve the issue (and won't break compatibility with older libxml2, since
> older libxml2 will be happy with a too big buffer)
>   

I can confirm that installing a librsvg from lenny rebuilt against the 
new libxml2-dev works.

# installing rebuilt librsvg2-2, librsvg2-bin, librsvg2-common, librsvg2-dev
(Reading database ... 236708 files and directories currently installed.)
Preparing to replace librsvg2-2 2.22.2-2 (using librsvg2-2_2.22.2-2.cj_amd64.deb) ...
Unpacking replacement librsvg2-2 ...
Preparing to replace librsvg2-bin 2.22.2-2 (using librsvg2-bin_2.22.2-2.cj_amd64.deb) ...
Unpacking replacement librsvg2-bin ...
Preparing to replace librsvg2-common 2.22.2-2 (using librsvg2-common_2.22.2-2.cj_amd64.deb) ...
Unpacking replacement librsvg2-common ...
Preparing to replace librsvg2-dev 2.22.2-2 (using librsvg2-dev_2.22.2-2.cj_amd64.deb) ...
Unpacking replacement librsvg2-dev ...
Setting up librsvg2-2 (2.22.2-2.cj) ...
Setting up librsvg2-bin (2.22.2-2.cj) ...
Setting up librsvg2-common (2.22.2-2.cj) ...
Setting up librsvg2-dev (2.22.2-2.cj) ...

eog, galeon and gnome-appearance-properties don't segfault anymore (interestingly, 
now I also couldn't get galeon to segfault on quit anymore on quit so far!).

Christian.







More information about the debian-xml-sgml-pkgs mailing list