~ubuntu-branches/ubuntu/lucid/libxml2/lucid-security

• Changes
• Files

~ubuntu-branches/ubuntu/lucid/libxml2/lucid-security » Changes from revision 50

From Revision 50 to 31

expand all

collapse all

Rev		Summary	Authors	Tags	Date	Diff	Files
50		* SECURITY UPDATE: denial of service via entity expansion * SECURITY UPDATE: denial of service via entity expansion   - parser.c, SAX2.c, include/libxml/entities.h: refactor entity checking     and add additional tests.   - https://git.gnome.org/browse/libxml2/commit/?id=a3f1e3e5712257fd279917a9158278534e8f4b72   - https://git.gnome.org/browse/libxml2/commit/?id=cff2546f13503ac028e4c1f63c7b6d85f2f2d777   - https://git.gnome.org/browse/libxml2/commit/?id=be2a7edaf289c5da74a4f9ed3a0b6c733e775230   - CVE-2014-3660	Marc Deslauriers	2.7.6.dfsg-1ubuntu1.15	9 years ago
49		* SECURITY REGRESSION: more xmllint regressions (LP: #132186... * SECURITY REGRESSION: more xmllint regressions (LP: #1321869)   - use upstream commit which includes additional regression fixes to     parser.c.   - https://git.gnome.org/browse/libxml2/commit/?id=dd8367da17c2948981a51e52c8a6beb445edf825	Marc Deslauriers	2.7.6.dfsg-1ubuntu1.13	10 years ago
48		* SECURITY REGRESSION: xmllint no longer loads entities with... * SECURITY REGRESSION: xmllint no longer loads entities with --postvalid   (LP: #1321869)   - Thanks to Alexey Neyman for proposed patch   - https://mail.gnome.org/archives/xml/2014-May/msg00003.html	Marc Deslauriers	2.7.6.dfsg-1ubuntu1.12	10 years ago
47		* SECURITY UPDATE: resource exhaustion via external paramete... * SECURITY UPDATE: resource exhaustion via external parameter entities   - parser.c: do not fetch external parameter entities.   - https://git.gnome.org/browse/libxml2/commit/?id=9cd1c3cfbd32655d60572c0a413e017260c854df   - CVE-2014-0191	Marc Deslauriers	2.7.6.dfsg-1ubuntu1.11	10 years ago
46		* SECURITY REGRESSION: regression with lxml (LP: #1201849) * SECURITY REGRESSION: regression with lxml (LP: #1201849)   - parser.c: revised to fix regression, and a couple of wrong return     values.   - CVE-2013-2877	Marc Deslauriers	2.7.6.dfsg-1ubuntu1.10	11 years ago
45		* SECURITY UPDATE: external entity expansion attack (LP: #11... * SECURITY UPDATE: external entity expansion attack (LP: #1194410)   - do not fetch external parsed entities in parser.c, added test to     test/errors/extparsedent.xml, result/errors/extparsedent.xml.   - https://git.gnome.org/browse/libxml2/commit/?id=4629ee02ac649c27f9c0cf98ba017c6b5526070f   - CVE-2013-0339 * SECURITY UPDATE: denial of service via incomplete document   - try to stop parsing as quickly as possible in parser.c,     include/libxml/xmlerror.h.   - https://git.gnome.org/browse/libxml2/commit/?id=48b4cdde3483e054af8ea02e0cd7ee467b0e9a50   - https://git.gnome.org/browse/libxml2/commit/?id=e50ba8164eee06461c73cd8abb9b46aa0be81869   - CVE-2013-2877	Marc Deslauriers	2.7.6.dfsg-1ubuntu1.9	11 years ago
44		* SECURITY UPDATE: denial of service via entity expansion * SECURITY UPDATE: denial of service via entity expansion   - include/libxml/parser.h, parser.c, parserInternals.c: limit number of     entity expansions, thanks to Daniel Veillard.   - http://git.gnome.org/browse/libxml2/commit/?id=23f05e0c33987d6605387b300c4be5da2120a7ab   - CVE-2013-0338	Marc Deslauriers	2.7.6.dfsg-1ubuntu1.8	11 years ago
43		* SECURITY UPDATE: buffer underflow in xmlParseAttValueCompl... * SECURITY UPDATE: buffer underflow in xmlParseAttValueComplex()   - debian/patches/CVE-2012-5134.patch: add array bounds checking in     parser.c, thanks to Daniel Veillard   - http://git.gnome.org/browse/libxml2/commit/?id=6a36fbe3b3e001a8a840b5c1fdd81cefc9947f0d   - CVE-2012-5134	Seth Arnold	2.7.6.dfsg-1ubuntu1.7	11 years ago
42		* SECURITY UPDATE: denial of service and possible code execu... * SECURITY UPDATE: denial of service and possible code execution via   incorrect buffer sizes.   - http://git.gnome.org/browse/libxml2/commit/?id=459eeb9dc752d5185f57ff6b135027f11981a626   - http://git.gnome.org/browse/libxml2/commit/?id=4f9fdc709c4861c390cd84e2ed1fd878b3442e28   - http://git.gnome.org/browse/libxml2/commit/?id=baaf03f80f817bb34c421421e6cb4d68c353ac9a   - CVE-2012-2807	Marc Deslauriers	2.7.6.dfsg-1ubuntu1.6	11 years ago
41		* SECURITY UPDATE: Fix an off by one pointer access in xpoin... * SECURITY UPDATE: Fix an off by one pointer access in xpointer.c   - d8e1faeaa99c7a7c07af01c1c72de352eb590a3e   - CVE-2011-3102	Jamie Strandboge	2.7.6.dfsg-1ubuntu1.5	12 years ago
40		* SECURITY UPDATE: add randomization to dictionaries with ha... * SECURITY UPDATE: add randomization to dictionaries with hash tables   help prevent denial of service via hash algorithm collision   - configure.in: lookup for rand, srand and time   - dict.c: add randomization to dictionaries hash tables   - hash.c: add randomization to normal hash tables   - 8973d58b7498fa5100a876815476b81fd1a2412a   - CVE-2012-0841	Jamie Strandboge	2.7.6.dfsg-1ubuntu1.4	12 years ago
39		* SECURITY UPDATE: fix off-by-one leading to denial of servi... * SECURITY UPDATE: fix off-by-one leading to denial of service   - encoding.c: adjust calculation of space available   - 69f04562f75212bfcabecd190ea8b06ace28ece2   - CVE-2011-0216 * SECURITY UPDATE: fix double free in XPath evaluation   - xpath.h, xpath.c: add a mechanism of frame for XPath evaluation when     entering a function or a scoped evaluation   - f5048b3e71fc30ad096970b8df6e7af073bae4cb   - CVE-2011-2821 * SECURITY UPDATE: fix double free in XPath evaluation   - xpath.c: fix missing error status in XPath evaluation   - 1d4526f6f4ec8d18c40e2a09b387652a6c1aa2cd   - CVE-2011-2834 * SECURITY UPDATE: fix out of bounds read   - parser.c: make sure the parser returns when getting a Stop order   - 77404b8b69bc122d12231807abf1a837d121b551   - CVE-2011-3905 * SECURITY UPDATE: fix heap overflow   - parser.c: fix an allocation error when copying entities   - 5bd3c061823a8499b27422aee04ea20aae24f03e   - CVE-2011-3919	Jamie Strandboge	2.7.6.dfsg-1ubuntu1.3	12 years ago
38		* SECURITY UPDATE: denial of service and possible code execu... * SECURITY UPDATE: denial of service and possible code execution via   specially crafted xml file   - xpath.c: update count only if allocation succeeds.   - http://git.gnome.org/browse/libxml2/commit/?id=d7958b21e7f8c447a26bb2436f08402b2c308be4   - CVE-2011-1944	Marc Deslauriers	2.7.6.dfsg-1ubuntu1.2	13 years ago
37		* SECURITY UPDATE: fix invalid memory read by fixing the sem... * SECURITY UPDATE: fix invalid memory read by fixing the semantic of XPath   axis for namespace/attribute context nodes   - http://git.gnome.org/browse/libxml2/patch/?id=91d19754d46acd4a639a8b9e31f50f31c78f8c9c   - http://git.gnome.org/browse/libxml2/patch/?id=ea90b894146030c214a7df6d8375310174f134b9   - CVE-2010-4008	Jamie Strandboge	2.7.6.dfsg-1ubuntu1.1	13 years ago
36		* Merge from debian testing, remaining changes: * Merge from debian testing, remaining changes:   - Create -udeb and python -dbg packages   - Link using -Bsymbolic-functions   - Add missing zlib1g-dev to -dev   - Fix site-/dist-packages   - Build-depend on libreadline6-dev instead of libreadline5-dev.	Scott Kitterman	2.7.6.dfsg-1ubuntu1	14 years ago
35		* Merge with Debian (LP: #433253); remaining changes: * Merge with Debian (LP: #433253); remaining changes:   - Create -udeb and python -dbg packages   - Link using -Bsymbolic-functions   - Add missing zlib1g-dev to -dev   - Fix site-/dist-packages   - error.c: Grab fix from SVN to avoid pidgin/jabber crash   - Build-depend on libreadline-dev instead of libreadline5-dev.	Matthias Klose	2.7.5.dfsg-1ubuntu1	14 years ago
34		Build-depend on libreadline-dev instead of libreadline5-dev. Build-depend on libreadline-dev instead of libreadline5-dev.	Matthias Klose	2.7.3.dfsg-1ubuntu2	15 years ago
33		* Merge from debian unstable (LP: #386390), remaining change... * Merge from debian unstable (LP: #386390), remaining changes:   - Create -udeb and python -dbg packages   - Link using -Bsymbolic-functions   - Add missing zlib1g-dev to -dev   - Fix site-/dist-packages   - error.c: Grab fix from SVN to avoid pidgin/jabber crash	Michael Terry	2.7.3.dfsg-1ubuntu1	15 years ago
32		error.c: use svn change to fix error handling issues leading... error.c: use svn change to fix error handling issues leading to pidgin crash when connecting jabber (lp: #357949)	Sebastien Bacher	2.6.32.dfsg-5ubuntu4	15 years ago
31		Define sitedir directly in debian/rules. Define sitedir directly in debian/rules.	Matthias Klose	2.6.32.dfsg-5ubuntu3	15 years ago

• Older »

Loggerhead is a web-based interface for Breezy
Version: 2.0.1