Opened 16 years ago

Closed 16 years ago

Last modified 13 years ago

#3117 closed task (fixed)

expat 2.0.1 and CVE-2009-3560 and CVE-2009-3720

Reported by: Ivan Wagner Owned by: ken@…
Priority: normal Milestone:
Component: BOOK Version: SVN
Severity: medium Keywords:
Cc:

Description

2 buffer over-reads in expat: ​http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3560
​http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3720

Fedora patches are here: ​http://cvs.fedoraproject.org/viewvc/rpms/expat/F-13/.

Change History (4)

comment:1 by Randy McMurchy, 16 years ago

Milestone: future → 6.7

Updated milestone to 6.7

comment:2 by ken@…, 16 years ago

Owner: changed from blfs-book@… to ken@…
Status: new → assigned

Just found this while checking the versions shipped in ghostscript9, somehow I missed it earlier.

comment:3 by ken@…, 16 years ago

Resolution: → fixed
Status: assigned → closed

Fixed in r8710, thanks for the report.

comment:4 by bdubbs@…, 13 years ago

Milestone: 6.7

Milestone 6.7 deleted

Note: See TracTickets for help on using tickets.