tech-pkg archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: HEADS UP: pkgsrc-2025Q2 branch calendar



During the freeze, I would like to update libxml2 to 2.14.4. It fixes one security issue with integer overflow. I've pasted full release note below.

Any objections?

Adam



v2.14.4: Jun 16 2025

### Regressions

- parser: Fix parsing of PublicIds and VersionNums
- parser: Fix custom SAX parsers without cdataBlock handler
- error: Fix initGenericErrorDefaultFunc compatibility macro again
- io: Make xmlOutputBufferCreate* not free encoder on error
- reader: Fix null deref on malloc failure
- Revert "meson: Install libxml2.py"

### Security

- tree: Fix integer overflow in xmlBuildQName

### Improvements

- parser: Use parser context as default in resource loader
- parser: Only validate EnumerationTypes when requested
- parser: Undeprecate some parser context members

### Build systems

- cmake: Avoid overlinking with non-CMake libxml2-config.cmake
- cmake: Make iconv a private dependency



Home | Main Index | Thread Index | Old Index