Re: [PATCH] libxml2: 2.9.4 -> 2.9.5
From: Andrej Valek <hidden>
Date: 2017-09-05 17:28:51
From: Andrej Valek <hidden>
Date: 2017-09-05 17:28:51
Hi Ross, There are not any CVEs fixes which has not been already merged. There are only general changes. Of course, we can "clean" a lot of patches by accepting this. Regards, Andrej On 09/05/2017 11:19 AM, Burton, Ross wrote:
On 5 September 2017 at 07:35, Andrej Valek <andrej.valek@siemens.com
<mailto:andrej.valek@siemens.com>> wrote:
Signed-off-by: Andrej Valek <andrej.valek@siemens.com
<mailto:andrej.valek@siemens.com>>
We're past freeze to the upgrade will have to wait until 2.4 releases. Does this
fix any outstanding CVEs that we should be cherry-picking?
Ross