Scientific Linux: SLSA-2015:1193-1 Moderate: Xerces-C Remote Code Execution

Date: Mon, 29 Jun 2015 22:41:57 +0000
Reply-To: scientific-linux-users@
Sender: Security Errata for Scientific Linux
 
From: Connie Sieh 
Subject: Security ERRATA Moderate: xerces-c on SL7.x x86_64
MIME-Version: 1.0
Message-ID: <20150629224157.4690.85350@slpackages.fnal.gov>

Synopsis: Moderate: xerces-c security update
Advisory ID: SLSA-2015:1193-1
Issue Date: 2015-06-29
CVE Numbers: CVE-2015-0252
--

A flaw was found in the way the Xerces-C XML parser processed certain XML
documents. A remote attacker could provide specially crafted XML input
that, when parsed by an application using Xerces-C, would cause that
application to crash. (CVE-2015-0252)
--

SL7
 x86_64
 xerces-c-3.1.1-7.el7_1.i686.rpm
 xerces-c-3.1.1-7.el7_1.x86_64.rpm
 xerces-c-debuginfo-3.1.1-7.el7_1.i686.rpm
 xerces-c-debuginfo-3.1.1-7.el7_1.x86_64.rpm
 xerces-c-devel-3.1.1-7.el7_1.i686.rpm
 xerces-c-devel-3.1.1-7.el7_1.x86_64.rpm
 noarch
 xerces-c-doc-3.1.1-7.el7_1.noarch.rpm

- Scientific Linux Development Team