CVS commit: pkgsrc/emulators/suse131_libxml2

["OBATA Akio" <obache%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   obache
Date:           Mon Nov  3 08:05:03 UTC 2014

Modified Files:
        pkgsrc/emulators/suse131_libxml2: Makefile distinfo

Log Message:
Apply following Security updates, resolve one CVE, but remove one CVE fix.
Bump PKGREVISION to 3.

==============================================================================
   openSUSE Security Update: libxml2, python-libxml2: Reverted patch for CVE-2014-0191
______________________________________________________________________________

Announcement ID:    openSUSE-SU-2014:0753-1
Rating:             moderate
References:         #876652
Cross-References:   CVE-2014-0191
Affected Products:
                    openSUSE 13.1
                    openSUSE 12.3
______________________________________________________________________________

   An update that fixes one vulnerability is now available.

Description:

   Removed fix for CVE-2014-0191. This fix breaks existing applications and
   there's currently no way to prevent that.

==============================================================================
   openSUSE Security Update: update to fix CVE-2014-3660
______________________________________________________________________________

Announcement ID:    openSUSE-SU-2014:1330-1
Rating:             moderate
References:         #901546
Cross-References:   CVE-2014-3660
Affected Products:
                    openSUSE 13.1
                    openSUSE 12.3
______________________________________________________________________________

   An update that fixes one vulnerability is now available.

Description:

   This update fixes a denial of service vulnerability when expanding
   recursive entity (CVE-2014-3660) bnc#901546


To generate a diff of this commit:
cvs rdiff -u -r1.5 -r1.6 pkgsrc/emulators/suse131_libxml2/Makefile
cvs rdiff -u -r1.3 -r1.4 pkgsrc/emulators/suse131_libxml2/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.