Wheezy update of libxml2?

2017-05-13 Thread Chris Lamb
Dear maintainer(s), The Debian LTS team would like to fix the security issues which are currently open in the Wheezy version of libxml2: https://security-tracker.debian.org/tracker/source-package/libxml2 Would you like to take care of this yourself? If yes, please follow the workflow we have

Re: Wheezy update of libxml2?

2017-01-08 Thread Ola Lundqvist
Hi LTS team I have started to look into CVE-2016-9318. The solution to this problem is to introduce a new option that make it possible to disallow any external entity references. As this is a library it means that all applications have to be updated to utilize this. Also in many situations this

Re: Wheezy update of libxml2?

2017-01-06 Thread Aron Xu
On Sun, Jan 1, 2017 at 4:59 AM, Ola Lundqvist wrote: > Hello dear maintainer(s), > > the Debian LTS team would like to fix the security issues which are > currently open in the Wheezy version of libxml2: > https://security-tracker.debian.org/tracker/CVE-2016-9318 >

Wheezy update of libxml2?

2016-12-31 Thread Ola Lundqvist
Hello dear maintainer(s), the Debian LTS team would like to fix the security issues which are currently open in the Wheezy version of libxml2: https://security-tracker.debian.org/tracker/CVE-2016-9318 https://security-tracker.debian.org/tracker/CVE-2016-9597