[ubuntu/trusty-security] expat 2.1.0-4ubuntu1.3 (Accepted)
Marc Deslauriers
marc.deslauriers at canonical.com
Mon Jun 20 16:36:31 UTC 2016
expat (2.1.0-4ubuntu1.3) trusty-security; urgency=medium
* SECURITY UPDATE: unanticipated internal calls to srand
- debian/patches/CVE-2012-6702-1.patch: remove srand, use more entropy
in lib/xmlparse.c.
- debian/patches/CVE-2012-6702-2.patch: use a prime that fits 32bits on
32bit platforms in lib/xmlparse.c.
- CVE-2012-6702
* SECURITY UPDATE: use of too little entropy
- debian/patches/CVE-2016-5300-1.patch: extract method
gather_time_entropy in lib/xmlparse.c.
- debian/patches/CVE-2016-5300-2.patch: extract entropy from XML_Parser
address in lib/xmlparse.c.
- CVE-2016-5300
Date: 2016-06-10 13:32:50.321189+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/expat/2.1.0-4ubuntu1.3
-------------- next part --------------
Sorry, changesfile not available.
More information about the Trusty-changes
mailing list