mingw April 2016

mingw@lists.fedoraproject.org

2 participants
26 discussions

[Bug 1285399] CVE-2015-2328 pcre: infinite recursion compiling pattern with recursive reference in a group with indefinite repeat (8.36/20)
by Red Hat Bugzilla 26 Apr '16

26 Apr '16

https://bugzilla.redhat.com/show_bug.cgi?id=1285399 Tomas Hoger <thoger(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1330508 Depends On| |1330509 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1287636] CVE-2015-8386 pcre: Buffer overflow caused by lookbehind assertion (8.38/6)
by Red Hat Bugzilla 26 Apr '16

26 Apr '16

https://bugzilla.redhat.com/show_bug.cgi?id=1287636 Tomas Hoger <thoger(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1330455 Depends On| |1330456 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1287614] CVE-2015-8383 pcre: Buffer overflow caused by repeated conditional group (8.38/3)
by Red Hat Bugzilla 26 Apr '16

26 Apr '16

https://bugzilla.redhat.com/show_bug.cgi?id=1287614 Tomas Hoger <thoger(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1330455 Depends On| |1330456 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1287614] CVE-2015-8383 pcre: Buffer overflow caused by repeated conditional group (8.38/3)
by Red Hat Bugzilla 26 Apr '16

26 Apr '16

1 0

[Bug 1287636] CVE-2015-8386 pcre: Buffer overflow caused by lookbehind assertion (8.38/6)
by Red Hat Bugzilla 26 Apr '16

26 Apr '16

https://bugzilla.redhat.com/show_bug.cgi?id=1287636 Martin Prpic <mprpic(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|high |low Severity|high |low -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1285399] CVE-2015-2328 pcre: infinite recursion compiling pattern with recursive reference in a group with indefinite repeat (8.36/20)
by Red Hat Bugzilla 26 Apr '16

26 Apr '16

1 0

[Bug 1304636] New: CVE-2015-8806 libxml2: heap-buffer overread in dict.c
by Red Hat Bugzilla 25 Apr '16

25 Apr '16

https://bugzilla.redhat.com/show_bug.cgi?id=1304636 Bug ID: 1304636 Summary: CVE-2015-8806 libxml2: heap-buffer overread in dict.c Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: anemec(a)redhat.com CC: athmanem(a)gmail.com, c.david86(a)gmail.com, erik-fedora(a)vanpienbroek.nl, fedora-mingw(a)lists.fedoraproject.org, ktietz(a)redhat.com, lfarkas(a)lfarkas.org, ohudlick(a)redhat.com, rjones(a)redhat.com, veillard(a)redhat.com A heap-buffer overread vulnerability was found in libxml2. A specially crafted file can cause the application to crash. External bugzilla report with reproducer: https://bugzilla.gnome.org/show_bug.cgi?id=749115 CVE assignment: http://seclists.org/oss-sec/2016/q1/277 -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1301928] New: libxml2: out-of-bounds read in htmlParseNameComplex()
by Red Hat Bugzilla 25 Apr '16

25 Apr '16

https://bugzilla.redhat.com/show_bug.cgi?id=1301928 Bug ID: 1301928 Summary: libxml2: out-of-bounds read in htmlParseNameComplex() Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: mprpic(a)redhat.com CC: athmanem(a)gmail.com, c.david86(a)gmail.com, erik-fedora(a)vanpienbroek.nl, fedora-mingw(a)lists.fedoraproject.org, ktietz(a)redhat.com, lfarkas(a)lfarkas.org, ohudlick(a)redhat.com, rjones(a)redhat.com, veillard(a)redhat.com An out-of-bounds read flaw was reported in libxml2's htmlParseNameComplex() function: http://seclists.org/oss-sec/2016/q1/199 A remote attacker could provide a specially crafted XML file that, when processed by an application linked against libxml2, could cause the application to disclose crash. -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1287636] CVE-2015-8386 pcre: Buffer overflow caused by lookbehind assertion (8.38/6)
by Red Hat Bugzilla 15 Apr '16

15 Apr '16

https://bugzilla.redhat.com/show_bug.cgi?id=1287636 shiwang <shiwang(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|low |high Severity|low |high -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1287614] CVE-2015-8383 pcre: Buffer overflow caused by repeated conditional group (8.38/3)
by Red Hat Bugzilla 08 Apr '16

08 Apr '16

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

mingw April 2016