----- Mail original -----
> De: "David Dillard" <[email protected]>
> À: [email protected]
> Envoyé: Jeudi 7 Février 2013 17:17:51
> Objet: [xml] Fix for CVE-2012-5134
> 
> Hi,
> 
> I was wondering if and when the project plans on making a release to
> address CVE-2012-5134 (see
> http://www.cvedetails.com/cve/CVE-2012-5134/).  Red Hat has made a
> patch to address this issue (see
> https://rhn.redhat.com/errata/RHSA-2012-1512.html), but I'd prefer
> an official patch from the project if possible.
> 
> 
> 
> Thanks,
> 
> David
> 
Just look in debian repository. http://packages.debian.org/fr/squeeze/libxml2

You would find the changelog.
Inside the changelog, there is the bug report for CVE-2012-5134 and the url to 
the git tree changeset.
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=694521

Gilles
_______________________________________________
xml mailing list, project page  http://xmlsoft.org/
[email protected]
https://mail.gnome.org/mailman/listinfo/xml

Reply via email to