Link [ pkgsrc | NetBSD | pkgsrc git mirror | PR fulltext-search | netbsd commit viewer ]


   
        usage: [branch:branch] [user:user] [path[@revision]] keyword [... [-excludekeyword [...]]] (e.g. branch:MAIN pkgtools/pkg)




switch to index mode

recent branches: MAIN (1h)  pkgsrc-2024Q1 (20d)  pkgsrc-2023Q4 (67d)  pkgsrc-2023Q2 (100d)  pkgsrc-2023Q3 (179d) 

2024-06-07 08:33:31 UTC Now

2014-11-03 08:05:03 UTC MAIN commitmail json YAML

Apply following Security updates, resolve one CVE, but remove one CVE fix.
Bump PKGREVISION to 3.

==============================================================================
  openSUSE Security Update: libxml2, python-libxml2: Reverted patch for CVE-2014-0191
______________________________________________________________________________

Announcement ID:    openSUSE-SU-2014:0753-1
Rating:            moderate
References:        #876652
Cross-References:  CVE-2014-0191
Affected Products:
                    openSUSE 13.1
                    openSUSE 12.3
______________________________________________________________________________

  An update that fixes one vulnerability is now available.

Description:

  Removed fix for CVE-2014-0191. This fix breaks existing applications and
  there's currently no way to prevent that.

==============================================================================
  openSUSE Security Update: update to fix CVE-2014-3660
______________________________________________________________________________

Announcement ID:    openSUSE-SU-2014:1330-1
Rating:            moderate
References:        #901546
Cross-References:  CVE-2014-3660
Affected Products:
                    openSUSE 13.1
                    openSUSE 12.3
______________________________________________________________________________

  An update that fixes one vulnerability is now available.

Description:

  This update fixes a denial of service vulnerability when expanding
  recursive entity (CVE-2014-3660) bnc#901546

(obache)