FEDORA-2016-9284772686 — security update for xerces-c

stable

xerces-c-3.1.4-1.fc24

FEDORA-2016-9284772686 created by kalev 8 years ago for Fedora 24

Update to xerces-c 3.1.4, fixing CVE-2016-2099 and CVE-2016-4463

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2016-9284772686

This update has been submitted for testing by kalev.

8 years ago

This update has been pushed to testing.

8 years ago

cserpentis commented & provided feedback 8 years ago

karma

works for me

pnemade commented & provided feedback 8 years ago

karma

looks good

This update has been submitted for stable by bodhi.

8 years ago

kmyid commented & provided feedback 8 years ago

karma

looks good

This update has been pushed to stable.

8 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Builds

xerces-c-3.1.4-1.fc24

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

8 years ago

in testing

8 years ago

in stable

8 years ago

BZ#1310699 CVE-2016-2099 xerces-c: Use-after-free in heap on specially crafted XML input

BZ#1334686 CVE-2016-2099 xerces-c: Use-after-free in heap on specially crafted XML input [fedora-all]

BZ#1348845 CVE-2016-4463 xerces-c: Stack overflow when parsing deeply nested DTD

BZ#1351467 CVE-2016-4463 xerces-c: Stack overflow when parsing deeply nested DTD [fedora-all]

xerces-c-3.1.4-1.fc24

Automated Test Results

None