Security fixes for CVE-2016-4472, CVE-2016-5300, CVE-2016-0718 and CVE-2012-6702.
Please login to add feedback.
| submitted | 3 years ago |
| in testing | 3 years ago |
| in stable | 3 years ago |
| 0 | 0 | #1197087 XML_Parse breaks rand() function |
| 0 | 0 | #1319732 CVE-2012-6702 expat: Using XML_Parse before rand() results into non-random output [fedora-all] |
| 0 | 0 | #1337116 CVE-2016-0718 expat: Out-of-bounds heap read on crafted input causing crash [fedora-all] |
| 0 | 0 | #1343086 CVE-2016-5300 expat: Little entropy used for hash initialization [fedora-all] |
| 0 | 0 | #1344252 CVE-2016-4472 expat: Undefined behavior and pointer overflows [fedora-all] |
jorton
This update has been submitted for testing by jorton.
This update has been pushed to testing.
no regressions noted
Programs dependant on expat still work
This update has reached 14 days in testing and can be pushed to stable now if the maintainer wishes
This update has been submitted for stable by jorton.
This update has been pushed to stable.