FEDORA-2018-fc2ba807a6 — security update for xerces-c27

obsolete

FEDORA-2018-fc2ba807a6 created by xavierb 5 years ago for Fedora 27

Fixes for CVE-2016-4463 and CVE-2017-12627.

This update has been submitted for testing by xavierb.

This update has been pushed to testing.

This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes

karma

LGTM

BZ#1351469 CVE-2016-4463 xerces-c27: xerces-c: Stack overflow when parsing deeply nested DTD [fedora-all]

BZ#1551526 CVE-2017-12627 xerces-c27: xerces-c: Null pointer dereference while processing the path to DTD allows denial of service [fedora-all]

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Builds

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

5 years ago

in testing

5 years ago

BZ#1351469 CVE-2016-4463 xerces-c27: xerces-c: Stack overflow when parsing deeply nested DTD [fedora-all]

BZ#1551526 CVE-2017-12627 xerces-c27: xerces-c: Null pointer dereference while processing the path to DTD allows denial of service [fedora-all]

xerces-c27-2.7.0-28.fc27

ignored