tech-pkg archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
Re: HEADS UP: pkgsrc-2025Q2 branch calendar
During the freeze, I would like to update libxml2 to 2.14.4. It fixes one security issue with integer overflow. I've pasted full release note below.
Any objections?
Adam
v2.14.4: Jun 16 2025
### Regressions
- parser: Fix parsing of PublicIds and VersionNums
- parser: Fix custom SAX parsers without cdataBlock handler
- error: Fix initGenericErrorDefaultFunc compatibility macro again
- io: Make xmlOutputBufferCreate* not free encoder on error
- reader: Fix null deref on malloc failure
- Revert "meson: Install libxml2.py"
### Security
- tree: Fix integer overflow in xmlBuildQName
### Improvements
- parser: Use parser context as default in resource loader
- parser: Only validate EnumerationTypes when requested
- parser: Undeprecate some parser context members
### Build systems
- cmake: Avoid overlinking with non-CMake libxml2-config.cmake
- cmake: Make iconv a private dependency
Home |
Main Index |
Thread Index |
Old Index