FEDORA-2016-84373c5f4f — security update for xerces-c

stable

xerces-c-3.1.4-1.fc22

FEDORA-2016-84373c5f4f created by kalev 8 years ago for Fedora 22

Update to xerces-c 3.1.4, fixing CVE-2016-2099 and CVE-2016-4463

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2016-84373c5f4f

This update has been submitted for testing by kalev.

8 years ago

This update has been pushed to testing.

8 years ago

filiperosset commented & provided feedback 8 years ago

karma

no regressions noted

kalev edited this update.

8 years ago

This update has been submitted for stable by bodhi.

8 years ago

pwalter commented & provided feedback 8 years ago

karma

Works

This update has been pushed to stable.

8 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Builds

xerces-c-3.1.4-1.fc22

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

8 years ago

in testing

8 years ago

in stable

8 years ago

modified

8 years ago

BZ#1310699 CVE-2016-2099 xerces-c: Use-after-free in heap on specially crafted XML input

BZ#1334686 CVE-2016-2099 xerces-c: Use-after-free in heap on specially crafted XML input [fedora-all]

BZ#1348845 CVE-2016-4463 xerces-c: Stack overflow when parsing deeply nested DTD

BZ#1351467 CVE-2016-4463 xerces-c: Stack overflow when parsing deeply nested DTD [fedora-all]

xerces-c-3.1.4-1.fc22

Automated Test Results

None