[Bug 222893] textproc/libxml2: update to 2.9.6

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=222893

            Bug ID: 222893
           Summary: textproc/libxml2: update to 2.9.6
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: gnome at FreeBSD.org
          Reporter: walter at lifeforms.nl
             Flags: maintainer-feedback?(gnome at FreeBSD.org)
          Assignee: gnome at FreeBSD.org

Our textproc/libxml2 in ports is at 2.9.4.

On Sep 4, 2.9.5 was released with some security fixes, from
http://xmlsoft.org/news.html:

Security:
Detect infinite recursion in parameter entities (Nick Wellnhofer),
Fix handling of parameter-entity references (Nick Wellnhofer),
Disallow namespace nodes in XPointer ranges (Nick Wellnhofer),
Fix XPointer paths beginning with range-to (Nick Wellnhofer)

On Oct 6, 2.9.6 was released with some more fixes.

Since libxml2 may parse untrusted input, a port update would be very welcome.

-- 
You are receiving this mail because:
You are the assignee for the bug.