expat (2.0.1-7.2ubuntu1.7) precise-security; urgency=medium
* SECURITY UPDATE: heap-based buffer over-read
- debian/patches/CVE-2019-15903.dpatch: Deny internal
entities closing the doctype in lib/xmlparse.c.
- CVE-2019-15903
expat (2.0.1-7.2ubuntu1.6) precise-security; urgency=medium
* SECURITY UPDATE: Denial of service
- debian/patches/CVE-2018-20843.dpatch: adds a break in
setElementTypePrefix avoiding consume a high amount of RAM
and CPU in lib/xmlparser.c
- CVE-2018-20843
expat (2.0.1-7.2ubuntu1.5) precise-security; urgency=medium
* SECURITY UPDATE: external entity infinite loop
- debian/patches/CVE-2017-9233.dpatch: add check to lib/xmlparse.c.
- CVE-2017-9233
Date: 2019-09-12 13:59:13.835185+00:00
Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa)
Signed-By: Ubuntu Archive Robot <ubuntu-archive-ro...@lists.canonical.com>
https://launchpad.net/ubuntu/+source/expat/2.0.1-7.2ubuntu1.7
Sorry, changesfile not available.
--
Precise-changes mailing list
Precise-changes@lists.ubuntu.com
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/precise-changes
