When can we have a secure libxml2?

Gunther Mayer gunther.mayer at googlemail.com
Mon Oct 20 11:52:36 UTC 2008


Hi there,

I'm sure I'm not the first person to ask but we're using libxml2 and the 
version in ports (2.6.x) currently suffers from a rather serious 
security vulnerability:

http://www.freebsd.org/ports/portaudit/d71da236-9a94-11dd-8f42-001c2514716c.html

Yet there's no libxml2-2.7.x in ports as required by the above notice. 
So there's no solution other than compiling an up-to-date one by hand 
and that opens up a whole different can of worms regarding dependencies.

When will this be addressed?

Regards,

Gunther


More information about the freebsd-gnome mailing list