FEDORA-2018-cc4b7af297 — security update for xerces-c27

obsolete

FEDORA-2018-cc4b7af297 created by xavierb 5 years ago for Fedora 28

Fixes for CVE-2016-4463 and CVE-2017-12627.

This update has been submitted for testing by xavierb.

This update has been pushed to testing.

This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Builds

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

5 years ago

in testing

5 years ago

BZ#1351469 CVE-2016-4463 xerces-c27: xerces-c: Stack overflow when parsing deeply nested DTD [fedora-all]

BZ#1551526 CVE-2017-12627 xerces-c27: xerces-c: Null pointer dereference while processing the path to DTD allows denial of service [fedora-all]

xerces-c27-2.7.0-28.fc28

ignored