From mboxrd@z Thu Jan 1 00:00:00 1970 From: Leo Famulari Subject: [PATCH 0/1] More libxml2 security fixes Date: Thu, 26 May 2016 22:57:07 -0400 Message-ID: Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:54941) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1b67xs-0005AG-2Q for guix-devel@gnu.org; Thu, 26 May 2016 22:57:34 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1b67xl-0001Q1-0C for guix-devel@gnu.org; Thu, 26 May 2016 22:57:31 -0400 Received: from out3-smtp.messagingengine.com ([66.111.4.27]:38704) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1b67xi-0001Ny-NL for guix-devel@gnu.org; Thu, 26 May 2016 22:57:24 -0400 Received: from localhost.localdomain (c-73-188-17-148.hsd1.pa.comcast.net [73.188.17.148]) by mail.messagingengine.com (Postfix) with ESMTPA id 03D08CCDAA for ; Thu, 26 May 2016 22:57:12 -0400 (EDT) List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: guix-devel@gnu.org libxml2 2.9.4 is released, with a lot of fixed bugs, both with and without CVE IDs: https://git.gnome.org/browse/libxml2/log/ This patch updates the existing graft by removing patches for two of these fixed bugs, and updating to 2.9.4, fixing 10 additional CVE bugs. The question is: will it work to graft 2.9.4 in place of 2.9.3? Can anyone recommend a package that uses libxml2 in an obvious way (e.g. for parsing an XML configuration file)? Leo Famulari (1): gnu: libxml2: Update replacement to 2.9.4 [security fixes]. gnu/local.mk | 2 - gnu/packages/patches/libxml2-CVE-2016-3627.patch | 61 --------------------- gnu/packages/patches/libxml2-CVE-2016-3705.patch | 68 ------------------------ gnu/packages/xml.scm | 14 +++-- 4 files changed, 10 insertions(+), 135 deletions(-) delete mode 100644 gnu/packages/patches/libxml2-CVE-2016-3627.patch delete mode 100644 gnu/packages/patches/libxml2-CVE-2016-3705.patch -- 2.8.3