[ubuntu-cloud-archive/mitaka-proposed] libxml2 (Accepted)

Corey Bryant corey.bryant at canonical.com
Fri Aug 17 13:10:53 UTC 2018


 libxml2 (2.9.3+dfsg1-1ubuntu0.6~cloud0) trusty-mitaka; urgency=medium
 .
   * New update for the Ubuntu Cloud Archive.
 .
 libxml2 (2.9.3+dfsg1-1ubuntu0.6) xenial-security; urgency=medium
 .
   * SECURITY UPDATE: XXE attacks
     - debian/patches/CVE-2016-9318.patch: fix in parser.c.
     - CVE-2016-9318
   * SECURITY UPDATE: Denial of service
     - debian/patches/CVE-2017-18258.patch: fix in xzlib.c.
     - CVE-2017-18258
   * SECURITY UPDATE: Denial of service
     - debian/patches/CVE-2018-14404.patch: fix in xpath.c.
     - CVE-2018-14404
   * SECURITY UPDATE: Infinite loop in LZMA decompression
     - debian/patches/CVE-2018-14567.patch: fix in xzlib.c.
     - CVE-2018-14567

Date: Wed, 15 Aug 2018 12:03:58 +0000
Changed-By: Openstack Ubuntu Testing Bot <openstack-testing-bot at ubuntu.com>
Signed-By: Openstack Ubuntu Testing Bot
Published-By: Corey Bryant <corey.bryant at canonical.com>


More information about the Cloud-archive-changes mailing list