Ubuntu has issued an advisory on December 5: https://ubuntu.com/security/notices/USN-5760-1 We already fixed the issue in python-lxml in Bug 30772, so I don't think pushing an update for libxml2 is necessary at this time, but I have committed the patch in Mageia 8 SVN. It can go out with any subsequent libxml2 update in the future.
Thanks for your pre-emptive work. So can we close this?
CC: (none) => lewyssmith
No, as the update isn't pushed. I'll just leave this bug open until there's a need to push an update for another libxml2 issue.
Assign to ? I do not like leaving things hanging about with Bugsquad, but if you so wish, so be it.
I guess I'll take it for now and assign it to pkg-bugs when something else needs to be done.
Assignee: bugsquad => luigiwalser
Kind!
Depends on: (none) => 31810
Fixed in: https://advisories.mageia.org/MGASA-2023-0157.html
Status: NEW => RESOLVEDResolution: (none) => FIXED