[xml/sgml-pkgs] Bug#829718: libxml2: CVE-2016-4448

[Salvatore Bonaccorso]

Source: libxml2
Version: 2.8.0+dfsg1-7
Severity: important
Tags: security upstream patch fixed-upstream

Hi,

the following vulnerability was published for libxml2.

CVE-2016-4448[0]:
| Format string vulnerability in libxml2 before 2.9.4 allows attackers
| to have unspecified impact via format string specifiers in unknown
| vectors.

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2016-4448

Note it is marked no-dsa in the security-tracker, since probably too
intrusive to backport to older versions. It is part of the 2.9.4
upstream release.

Regards,
Salvatore