~ubuntu-branches/ubuntu/quantal/libxml2/quantal-security : changes

~ubuntu-branches/ubuntu/quantal/libxml2/quantal-security » Changes from revision 64

From Revision 64 to 45

Rev	Summary	Authors	Tags	Date
64	* SECURITY UPDATE: resource exhaustion via external paramete... * SECURITY UPDATE: resource exhaustion via external parameter entities - debian/patches/CVE-2014-0191.patch: do not fetch external parameter entities in parser.c. - CVE-2014-0191	Marc Deslauriers	2.8.0+dfsg1-5ubuntu2.5	9 years ago
63	* SECURITY REGRESSION: regression with lxml (LP: #1201849) * SECURITY REGRESSION: regression with lxml (LP: #1201849) - debian/patches/CVE-2013-2877.patch: revised to fix regression, and a couple of wrong return values. - CVE-2013-2877	Marc Deslauriers	2.8.0+dfsg1-5ubuntu2.4	10 years ago
62	* SECURITY UPDATE: external entity expansion attack (LP: #11... * SECURITY UPDATE: external entity expansion attack (LP: #1194410) - debian/patches/CVE-2013-0339.patch: do not fetch external parsed entities in parser.c, added test to test/errors/extparsedent.xml, result/errors/extparsedent.xml. - CVE-2013-0339 * SECURITY UPDATE: denial of service via incomplete document - debian/patches/CVE-2013-2877.patch: try to stop parsing as quickly as possible in parser.c, include/libxml/xmlerror.h. - CVE-2013-2877	Marc Deslauriers	2.8.0+dfsg1-5ubuntu2.3	10 years ago
61	* SECURITY UPDATE: denial of service via entity expansion * SECURITY UPDATE: denial of service via entity expansion - debian/patches/CVE-2013-0338.patch: limit number of entity expansions in include/libxml/parser.h, parser.c, parserInternals.c. - CVE-2013-0338	Marc Deslauriers	2.8.0+dfsg1-5ubuntu2.2	11 years ago
60	* SECURITY UPDATE: buffer underflow in xmlParseAttValueCompl... * SECURITY UPDATE: buffer underflow in xmlParseAttValueComplex() - debian/patches/CVE-2012-5134.patch: add array bounds checking in parser.c, thanks to Daniel Veillard - CVE-2012-5134	Seth Arnold	2.8.0+dfsg1-5ubuntu2.1	11 years ago
59	debian/tests/control: added pkg-config as depends for the te... debian/tests/control: added pkg-config as depends for the test. Change forwarded to Debian as bug 690047.	Daniel Holbach	2.8.0+dfsg1-5ubuntu2	11 years ago
58	* debian/tests/build, debian/tests/control: add test to chec... * debian/tests/build, debian/tests/control: add test to check that code can be easily built against libxml2, test some core functionality too. * debian/control: enable autopkgtest.	Daniel Holbach	2.8.0+dfsg1-5ubuntu1	11 years ago
57	[ Daniel Veillard ] [ Daniel Veillard ] * Fix parser local buffers size problems * Fix entities local buffers size problems CVE-2012-2807, Closes: #679280.	Aron Xu	2.8.0+dfsg1-5	11 years ago
56	* Merge with Debian (LP: #987502), remaining changes: * Merge with Debian (LP: #987502), remaining changes: - Don't drop *.la file. Some libraries still depend on it.	Iain Lane	2.8.0+dfsg1-4ubuntu1	11 years ago
55	* SECURITY UPDATE: Fix an off by one pointer access in xpoin... * SECURITY UPDATE: Fix an off by one pointer access in xpointer.c - d8e1faeaa99c7a7c07af01c1c72de352eb590a3e - CVE-2011-3102	Jamie Strandboge	2.7.8.dfsg-5.1ubuntu5	11 years ago
54	* SECURITY UPDATE: add randomization to dictionaries with ha... * SECURITY UPDATE: add randomization to dictionaries with hash tables help prevent denial of service via hash algorithm collision - configure.in: lookup for rand, srand and time - dict.c: add randomization to dictionaries hash tables - hash.c: add randomization to normal hash tables - 8973d58b7498fa5100a876815476b81fd1a2412a - CVE-2012-0841	Jamie Strandboge	2.7.8.dfsg-5.1ubuntu4	12 years ago
53	* various fixes for __xmlRaiseError (LP: #686363). This can ... * various fixes for __xmlRaiseError (LP: #686363). This can be dropped in 2.7.8.dfsg-6 - 111d705c282e03e7202723c6c7e4499f8582bd4f - 1b9128bae737fa559f5e2c191d6679a856efbad9 - 241d4a1069e6bedd0ee2295d7b43858109c1c6d1 - c2a0fdc4e6d106690d7fd8fa1677e133c94e155d	Jamie Strandboge	2.7.8.dfsg-5.1ubuntu3	12 years ago
52	* SECURITY UPDATE: denial of service via buffer overflow * SECURITY UPDATE: denial of service via buffer overflow - parser.c: fix an allocation error when copying entities - 5bd3c061823a8499b27422aee04ea20aae24f03e - CVE-2011-3919	Jamie Strandboge	2.7.8.dfsg-5.1ubuntu2	12 years ago
51	releasing version 2.7.8.dfsg-5.1ubuntu1 releasing version 2.7.8.dfsg-5.1ubuntu1	Steve Langasek	2.7.8.dfsg-5.1ubuntu1	12 years ago
50	Merge version 2.7.8.dfsg-5.1 from Debian Merge version 2.7.8.dfsg-5.1 from Debian	Steve Langasek		12 years ago
49	releasing version 2.7.8.dfsg-5ubuntu1 releasing version 2.7.8.dfsg-5ubuntu1	Steve Langasek	2.7.8.dfsg-5ubuntu1	12 years ago
48	run update-maintainer run update-maintainer	Steve Langasek		12 years ago
47	Move the udeb contents back into /usr/lib. Move the udeb contents back into /usr/lib.	Steve Langasek		12 years ago
46	call dh with $@ as the first argument call dh with $@ as the first argument	Steve Langasek		12 years ago
45	Use debhelper compat 9 instead of hardcoding --libdir. Use debhelper compat 9 instead of hardcoding --libdir.	Steve Langasek		12 years ago

Older »