Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Vulnerability roundup 83: libxml2-2.9.10: 1 advisory #79725

Closed
1 task done
ckauhaus opened this issue Feb 10, 2020 · 3 comments
Closed
1 task done

Vulnerability roundup 83: libxml2-2.9.10: 1 advisory #79725

ckauhaus opened this issue Feb 10, 2020 · 3 comments
Labels
1.severity: security Issues which raise a security issue, or PRs that fix one

Comments

@ckauhaus
Copy link
Contributor

ckauhaus commented Feb 10, 2020 •
edited by vcunat
Loading

search, files

Scanned versions: nixos-unstable: 8130f3c. May contain false positives.
@ckauhaus ckauhaus added the 1.severity: security Issues which raise a security issue, or PRs that fix one label Feb 10, 2020
@mmilata mmilata mentioned this issue Mar 12, 2020
Merged
10 tasks
@vcunat
Copy link
Member

vcunat commented Mar 15, 2020

PR #82418 is in staging.

@vcunat vcunat closed this as completed Mar 15, 2020
@mmilata
Copy link
Member

mmilata commented Mar 16, 2020

@vcunat do you think I should also port this to staging-19.09 and/or staging-20.03?

vcunat pushed a commit that referenced this issue Mar 16, 2020
@mmilata @vcunat
libxml2: add patch for CVE-2019-20388
9a808dd 
(cherry picked from commit 291c735)
/cc roundup #79725
vcunat pushed a commit that referenced this issue Mar 16, 2020
@mmilata @vcunat
libxml2: add patch for CVE-2019-20388
feb386f 
(cherry picked from commit 291c735)
/cc roundup #79725
@vcunat
Copy link
Member

vcunat commented Mar 16, 2020

Oh, I didn't realize as this ticket only mentioned unstable :-)

OK, I picked it directly. The patch is so simple that I feel sufficiently confident that it will work even one minor release earlier.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
1.severity: security Issues which raise a security issue, or PRs that fix one
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@mmilata @ckauhaus @vcunat