Alerts This Week
Warning Icon 1 631
Alerts This Week
Warning Icon 1 631

Fedora 22 FEDORA-2016-a9ee80b01d Moderate: Libxml2 Buffer Overflow

fedora
Calendar Grey February 17, 2016
Dist Fedora Esm H88
This patch resolves several bugs in mingw-libxml2, improving both reliability and safety for users on Fedora 22.
Update to 2.9.3 which fixes various CVE's

Summary

MinGW Windows libxml2 XML processing library.

Update Information:

Update to 2.9.3 which fixes various CVE's

Change Log

References


[ 1 ] Bug #1262853 - mingw-libxml2: libxml2: Out-of-bounds memory access when parsing unclosed HTMl comment [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1262853 [ 2 ] Bug #1274225 - CVE-2015-7941 mingw-libxml2: libxml2: Out-of-bounds memory access [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1274225 [ 3 ] Bug #1276299 - CVE-2015-7942 mingw-libxml2: libxml2: heap-based buffer overflow in xmlParseConditionalSections() [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1276299 [ 4 ] Bug #1277149 - CVE-2015-8035 mingw-libxml2: libxml2: DoS when parsing specially crafted XML document if XZ support is enabled [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1277149 [ 5 ] Bug #1281952 - mingw-libxml2: libxml2: Buffer overread with HTML parser in push mode in xmlSAX2TextNode [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1281952

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update mingw-libxml2' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
important
Lowest
Low
Medium
High
Critical

Name: mingw-libxml2
Product: Fedora 22
Version: 2.9.3
Release: 1.fc22
URL:
Summary: MinGW Windows libxml2 XML processing library

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here