Subject: Re: [bug#28294] [PATCH] gnu: libxml2: Fix CVE-2017-{0663, 7375, 7376, 9047, 9048, 9049, 9050}.

From: Marius Bakke <[email-masked]>
Date: Wed, 30 Aug 2017 20:57:37 +0200

Alex Vong <[email-masked]> writes:

> Severity: important
> Tags: patch security
>
> Hi,
>
> This patch fixes CVEs of libxml2. The changes to 'runtest.c' in
> 'libxml2-CVE-2017-9049+CVE-2017-9050.patch are removed since they
> introduce test failure. The changes only enable new tests so it should
> be fine to remove them.

Thanks for this!  I think we have to graft this fix since changing
'libxml2' would rebuild 2/3 of the tree.  Can you try that?

PS: Do you have a Savannah account?  I'm sure Ludo or someone can add
you given the steady rate of quality commits.