[Bug 1301931] New: mingw-libxml2: libxml2: out-of-bounds read in
htmlParseNameComplex() [epel-7]
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1301931
Bug ID: 1301931
Summary: mingw-libxml2: libxml2: out-of-bounds read in
htmlParseNameComplex() [epel-7]
Product: Fedora EPEL
Version: epel7
Component: mingw-libxml2
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: rjones(a)redhat.com
Reporter: mprpic(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: erik-fedora(a)vanpienbroek.nl,
fedora-mingw(a)lists.fedoraproject.org,
ktietz(a)redhat.com, lfarkas(a)lfarkas.org,
rjones(a)redhat.com, veillard(a)redhat.com
Blocks: 1301928
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora EPEL.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
epel-7 tracking bug for mingw-libxml2: see blocks bug list for full details of
the security issue(s).
This bug is never intended to be made public, please put any public notes
in the blocked bugs.
[bug automatically created by: add-tracking-bugs]
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1301928
[Bug 1301928] libxml2: out-of-bounds read in htmlParseNameComplex()
--
You are receiving this mail because:
You are on the CC list for the bug.
8 years, 3 months
[Bug 1301930] New: mingw-libxml2: libxml2: out-of-bounds read in
htmlParseNameComplex() [fedora-all]
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1301930
Bug ID: 1301930
Summary: mingw-libxml2: libxml2: out-of-bounds read in
htmlParseNameComplex() [fedora-all]
Product: Fedora
Version: 23
Component: mingw-libxml2
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: rjones(a)redhat.com
Reporter: mprpic(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: erik-fedora(a)vanpienbroek.nl,
fedora-mingw(a)lists.fedoraproject.org,
ktietz(a)redhat.com, lfarkas(a)lfarkas.org,
rjones(a)redhat.com, veillard(a)redhat.com
Blocks: 1301928
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora. While only
one tracking bug has been filed, please correct all affected versions at
the same time. If you need to fix the versions independent of each other,
you may clone this bug as appropriate.
[bug automatically created by: add-tracking-bugs]
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1301928
[Bug 1301928] libxml2: out-of-bounds read in htmlParseNameComplex()
--
You are receiving this mail because:
You are on the CC list for the bug.
8 years, 3 months
Fedora mingw-qt5-qtbase and opengl API
by Sandro Mani
Hi Erik
The current mingw-qt5-qtbase package is compiled with the support for
the OpenGL API autodetected by the configure script (i.e. no -opengl
option passed), which from what I understand results in Qt using OpenGL
ES 2.0 + ANGLE.
I have a project which uses full desktop OpenGL, and currently I'm
recompiling mingw-qt5-qtbase with "-opengl desktop". I see that Arch is
providing two mingw-qt5-qtbase variants, mingw-qt5-qtbase and
mingw-qt5-qtbase-opengl, which conflict with each other [1].
Would you be okay with having something similar in Fedora?
(There is actually a post on dynamic opengl implementation loading [2],
but I cannot find any trace of -opengl dynamic support in the qt-5.5.0
source code, not sure what happened to that...).
Thanks
Sandro
[1] https://aur.archlinux.org/packages/mingw-w64-qt5-base-opengl/
[2]
http://blog.qt.io/blog/2014/11/27/qt-weekly-21-dynamic-opengl-implementat...
8 years, 3 months
