The maintainer of libxml2 has abandoned special treatment for vulnerability fixes
Nick Wellnhofer, who maintains the libxml2 library, announced that vulnerabilities will now be treated as regular bugs. Reports of vulnerabilities will not be prioritized and will be addressed as spare time permits. Information about the nature of the vulnerability will be made publicly available immediately, without waiting for a patch to be created or for fixes to be distributed in packages and operating systems. […]
