FEDORA-2016-d2d6890690 — security update for xerces-c

stable

xerces-c-3.1.4-1.fc23

FEDORA-2016-d2d6890690 created by kalev 8 years ago for Fedora 23

Update to xerces-c 3.1.4, fixing CVE-2016-2099 and CVE-2016-4463

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2016-d2d6890690

This update has been submitted for testing by kalev.

8 years ago

This update has been pushed to testing.

8 years ago

filiperosset commented & provided feedback 8 years ago

karma

no regressions noted

kalev edited this update.

8 years ago

This update has been submitted for stable by bodhi.

8 years ago

pwalter commented & provided feedback 8 years ago

karma

Works

This update has been pushed to stable.

8 years ago

Please log in to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

8 years ago

in testing

8 years ago

in stable

8 years ago

modified

8 years ago

Builds

xerces-c-3.1.4-1.fc23

BZ#1310699 CVE-2016-2099 xerces-c: Use-after-free in heap on specially crafted XML input

BZ#1334686 CVE-2016-2099 xerces-c: Use-after-free in heap on specially crafted XML input [fedora-all]

BZ#1348845 CVE-2016-4463 xerces-c: Stack overflow when parsing deeply nested DTD

BZ#1351467 CVE-2016-4463 xerces-c: Stack overflow when parsing deeply nested DTD [fedora-all]

xerces-c-3.1.4-1.fc23

Automated Test Results

None