Re: textproc/libxml CVE Patches

2017-07-14 Thread Daniel Jakots
On Wed, 12 Jul 2017 16:19:27 +0200, Alexander Bluhm wrote: > On Mon, Jul 10, 2017 at 11:18:10AM +0200, Matthias Pitzl wrote: > > In libxml2 were some more CVEs. > > This is the same diff applied to our ports tree. > > ok? yes

Re: textproc/libxml CVE Patches

2017-07-12 Thread Alexander Bluhm
On Mon, Jul 10, 2017 at 11:18:10AM +0200, Matthias Pitzl wrote: > In libxml2 were some more CVEs. This is the same diff applied to our ports tree. ok? bluhm Index: textproc/libxml/Makefile === RCS file: /data/mirror/openbsd/cvs/por

textproc/libxml CVE Patches

2017-07-10 Thread Matthias Pitzl
Hi, In libxml2 were some more CVEs. The patches attached fix these: CVE-2017-9663: >From 92b9e8c8b3787068565a1820ba575d042f9eec66 Mon Sep 17 00:00:00 2001 From: Nick Wellnhofer Date: Tue, 6 Jun 2017 12:56:28 +0200 Subject: Fix type confusion in xmlValidateOneNamespace Comment out code that cast