[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [vps-mail] vunlink



On Wed, Dec 01, 2004 at 05:11:10PM +0100, Godwin Stewart wrote:
> On Wed, 1 Dec 2004 08:41:47 -0700, Scott Wiersdorf <scott@xxxxxxxxxxxx>
> wrote:
> 
> > Bummer. What is GD doing with libxml2?
> 
> Doesn't freetype2 (used by GD) use it?

Oh yeah, I think it does. Double bummer.

> > If the current version is unsatisfactory, you can always pkg_add -f a
> > new one or build from ports and do a forced upgrade.
> 
> Actually I need to build from source and do a forced DOWNgrade since the
> newest version, 2.6.16 which is currently installed, breaks things.

Ah, I understand--that's the same thing we had to do for CPX, except
it was the 2.5.x series we were having problems with. 2.6.16 fixed
things again for CPX but apparently broke something else for GD. Heh.

Maybe you or Wilson could send us a little something (via
suggest@xxxxxxxxxxxx) that exploits the problem so we can check it
when we do future upgrades of these libs.  If I recall, there is also
a local exploit (buffer overflow, if I recall) for libxml2 which was
the real impetus for us moving ahead on it.

Scott
-- 
Scott Wiersdorf
<scott@xxxxxxxxxxxx>
======================================================================
This is <vps-mail@xxxxxxxxxxxx>       <http://www.perlcode.org/lists/>
Before posting a question, please search the archives (see above URL).


Main Index | Thread Index
Match: Format: Sort by:
Search: