FEDORA-2016-d2d6890690 — security update for xerces-c

xerces-c-3.1.4-1.fc23

FEDORA-2016-d2d6890690 created by kalev 3 years ago for Fedora 23

stable

Update to xerces-c 3.1.4, fixing CVE-2016-2099 and CVE-2016-4463

How to install

sudo dnf upgrade --advisory=FEDORA-2016-d2d6890690

This update has been submitted for testing by kalev.

3 years ago

This update has been pushed to testing.

3 years ago

filiperosset commented & provided feedback 3 years ago

karma

no regressions noted

kalev edited this update.

3 years ago

This update has been submitted for stable by bodhi.

3 years ago

pwalter commented & provided feedback 3 years ago

karma

Works

This update has been pushed to stable.

3 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

Builds

xerces-c-3.1.4-1.fc23

Settings

Unstable by Karma

-3

Stable by Karma

Dates

submitted

3 years ago

in testing

3 years ago

in stable

3 years ago

modified

3 years ago

BZ#1310699 CVE-2016-2099 xerces-c: Use-after-free in heap on specially crafted XML input

BZ#1334686 CVE-2016-2099 xerces-c: Use-after-free in heap on specially crafted XML input [fedora-all]

BZ#1348845 CVE-2016-4463 xerces-c: Stack overflow when parsing deeply nested DTD

BZ#1351467 CVE-2016-4463 xerces-c: Stack overflow when parsing deeply nested DTD [fedora-all]

xerces-c-3.1.4-1.fc23

How to install

Automated Test Results