FEDORA-2016-7615febbd6 — security update for mingw-xerces-c

stable

mingw-xerces-c-3.1.4-1.fc22

FEDORA-2016-7615febbd6 created by kalev 8 years ago for Fedora 22

MinGW cross compiled xerces-c 3.1.4, fixing CVE-2016-0729, CVE-2016-2099 and CVE-2016-4463

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2016-7615febbd6

This update has been submitted for testing by kalev.

8 years ago

This update has been pushed to testing.

8 years ago

This update has been submitted for stable by bodhi.

8 years ago

pwalter commented & provided feedback 8 years ago

karma

Works

This update has been pushed to stable.

8 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Builds

mingw-xerces-c-3.1.4-1.fc22

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

8 years ago

in testing

8 years ago

in stable

8 years ago

BZ#1310699 CVE-2016-2099 xerces-c: Use-after-free in heap on specially crafted XML input

BZ#1312231 CVE-2016-0729 xerces-c: parser crashes on malformed input

BZ#1312233 CVE-2016-0729 mingw-xerces-c: xerces-c: parser crashes on malformed input [fedora-all]

BZ#1334687 CVE-2016-2099 mingw-xerces-c: xerces-c: Use-after-free in heap on specially crafted XML input [fedora-all]

BZ#1348845 CVE-2016-4463 xerces-c: Stack overflow when parsing deeply nested DTD

BZ#1351468 CVE-2016-4463 mingw-xerces-c: xerces-c: Stack overflow when parsing deeply nested DTD [fedora-all]

mingw-xerces-c-3.1.4-1.fc22

Automated Test Results

None