Publishing details

Published on 2018-12-06
Copied from ubuntu trusty in Private PPA for Ubuntu Security Team by Mike Salvatore

Changelog

xerces-c (3.1.1-5.1+deb8u4build0.14.04.1) trusty-security; urgency=medium

  * fake sync from Debian

xerces-c (3.1.1-5.1+deb8u4) jessie; urgency=medium

  * Fix CVE-2017-12627: Alberto Garcia, Francisco Oca and Suleman Ali of
    Offensive Research discovered that the Xerces-C XML parser mishandles
    certain kinds of external DTD references, resulting in dereference of a
    NULL pointer while processing the path to the DTD. The bug allows for a
    denial of service attack in applications that allow DTD processing and do
    not prevent external DTD usage, and could conceivably result in remote code
    execution.

 -- Mike Salvatore <email address hidden>  Thu, 06 Dec 2018 11:09:03 -0500

Available diffs

diff from 3.1.1-5.1+deb8u3build0.14.04.1 to 3.1.1-5.1+deb8u4build0.14.04.1 (1.2 KiB)

Builds

Built packages

libxerces-c-dev validating XML parser library for C++ (development files)

libxerces-c-doc validating XML parser library for C++ (documentation)

libxerces-c-samples validating XML parser library for C++ (compiled samples)

libxerces-c-samples-dbgsym debug symbols for package libxerces-c-samples

libxerces-c3.1 validating XML parser library for C++

libxerces-c3.1-dbgsym debug symbols for package libxerces-c3.1

Package files

libxerces-c-dev_3.1.1-5.1+deb8u4build0.14.04.1_amd64.deb (1.5 MiB)
libxerces-c-dev_3.1.1-5.1+deb8u4build0.14.04.1_arm64.deb (1.5 MiB)
libxerces-c-dev_3.1.1-5.1+deb8u4build0.14.04.1_armhf.deb (1.4 MiB)
libxerces-c-dev_3.1.1-5.1+deb8u4build0.14.04.1_i386.deb (1.6 MiB)
libxerces-c-dev_3.1.1-5.1+deb8u4build0.14.04.1_powerpc.deb (1.5 MiB)
libxerces-c-dev_3.1.1-5.1+deb8u4build0.14.04.1_ppc64el.deb (1.7 MiB)
libxerces-c-doc_3.1.1-5.1+deb8u4build0.14.04.1_all.deb (1.2 MiB)
libxerces-c-samples-dbgsym_3.1.1-5.1+deb8u4build0.14.04.1_amd64.ddeb (711.3 KiB)
libxerces-c-samples-dbgsym_3.1.1-5.1+deb8u4build0.14.04.1_arm64.ddeb (723.9 KiB)
libxerces-c-samples-dbgsym_3.1.1-5.1+deb8u4build0.14.04.1_armhf.ddeb (687.0 KiB)
libxerces-c-samples-dbgsym_3.1.1-5.1+deb8u4build0.14.04.1_i386.ddeb (693.1 KiB)
libxerces-c-samples-dbgsym_3.1.1-5.1+deb8u4build0.14.04.1_powerpc.ddeb (689.2 KiB)
libxerces-c-samples-dbgsym_3.1.1-5.1+deb8u4build0.14.04.1_ppc64el.ddeb (740.3 KiB)
libxerces-c-samples_3.1.1-5.1+deb8u4build0.14.04.1_amd64.deb (126.3 KiB)
libxerces-c-samples_3.1.1-5.1+deb8u4build0.14.04.1_arm64.deb (119.4 KiB)
libxerces-c-samples_3.1.1-5.1+deb8u4build0.14.04.1_armhf.deb (93.5 KiB)
libxerces-c-samples_3.1.1-5.1+deb8u4build0.14.04.1_i386.deb (119.9 KiB)
libxerces-c-samples_3.1.1-5.1+deb8u4build0.14.04.1_powerpc.deb (117.5 KiB)
libxerces-c-samples_3.1.1-5.1+deb8u4build0.14.04.1_ppc64el.deb (128.3 KiB)
libxerces-c3.1-dbgsym_3.1.1-5.1+deb8u4build0.14.04.1_amd64.ddeb (4.1 MiB)
libxerces-c3.1-dbgsym_3.1.1-5.1+deb8u4build0.14.04.1_arm64.ddeb (4.1 MiB)
libxerces-c3.1-dbgsym_3.1.1-5.1+deb8u4build0.14.04.1_armhf.ddeb (4.0 MiB)
libxerces-c3.1-dbgsym_3.1.1-5.1+deb8u4build0.14.04.1_i386.ddeb (3.9 MiB)
libxerces-c3.1-dbgsym_3.1.1-5.1+deb8u4build0.14.04.1_powerpc.ddeb (3.9 MiB)
libxerces-c3.1-dbgsym_3.1.1-5.1+deb8u4build0.14.04.1_ppc64el.ddeb (4.2 MiB)
libxerces-c3.1_3.1.1-5.1+deb8u4build0.14.04.1_amd64.deb (794.4 KiB)
libxerces-c3.1_3.1.1-5.1+deb8u4build0.14.04.1_arm64.deb (724.3 KiB)
libxerces-c3.1_3.1.1-5.1+deb8u4build0.14.04.1_armhf.deb (687.5 KiB)
libxerces-c3.1_3.1.1-5.1+deb8u4build0.14.04.1_i386.deb (790.4 KiB)
libxerces-c3.1_3.1.1-5.1+deb8u4build0.14.04.1_powerpc.deb (749.4 KiB)
libxerces-c3.1_3.1.1-5.1+deb8u4build0.14.04.1_ppc64el.deb (798.2 KiB)
xerces-c_3.1.1-5.1+deb8u4build0.14.04.1.debian.tar.gz (11.6 KiB)
xerces-c_3.1.1-5.1+deb8u4build0.14.04.1.dsc (2.0 KiB)
xerces-c_3.1.1.orig.tar.gz (4.8 MiB)