https://bugzilla.redhat.com/show_bug.cgi?id=858914
Bug ID: 858914 Keywords: Security, SecurityTracking Blocks: 822109 (CVE-2011-3102) QA Contact: extras-qa@fedoraproject.org Severity: low Version: el5 Priority: low CC: fedora-mingw@lists.fedoraproject.org, lfarkas@lfarkas.org, rjones@redhat.com, veillard@redhat.com Assignee: rjones@redhat.com Summary: CVE-2011-3102 libxml: An off-by-one out-of-bounds write by XPointer part evaluation [epel-5] Regression: --- Story Points: --- Classification: Fedora OS: Linux Reporter: huzaifas@redhat.com Type: --- Documentation: --- Hardware: All Mount Type: --- Status: NEW Component: mingw32-libxml2 Product: Fedora EPEL
This is an automatically created tracking bug! It was created to ensure that one or more security vulnerabilities are fixed in affected Fedora versions.
For comments that are specific to the vulnerability please use bugs filed against "Security Response" product referenced in the "Blocks" field.
For more information see: http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please include this bug ID and the bug IDs of this bug's parent bugs filed against the "Security Response" product (the top-level CVE bugs). Please mention the CVE IDs being fixed in the RPM changelog when available.
Bodhi update submission link: https://admin.fedoraproject.org/updates/new/?type_=security&bugs=822109
epel-5 tracking bug for mingw32-libxml2: see blocks bug list for full details of the security issue(s).
[bug automatically created by: add-tracking-bugs]
https://bugzilla.redhat.com/show_bug.cgi?id=858914
Huzaifa S. Sidhpurwala huzaifas@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Blocks| |835863 (CVE-2012-2807)
https://bugzilla.redhat.com/show_bug.cgi?id=858914
Huzaifa S. Sidhpurwala huzaifas@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Summary|CVE-2011-3102 libxml: An |CVE-2011-3102 CVE-2012-2807 |off-by-one out-of-bounds |mingw32-libxml2 various |write by XPointer part |flaws [epel-5] |evaluation [epel-5] |
https://bugzilla.redhat.com/show_bug.cgi?id=858914
--- Comment #1 from Huzaifa S. Sidhpurwala huzaifas@redhat.com ---
Adding parent bug CVE-2012-2807 New bodhi update url: https://admin.fedoraproject.org/updates/new/?type_=security&bugs=822109,...
https://bugzilla.redhat.com/show_bug.cgi?id=858914
Jason Taylor jason.taylor@secure-24.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |jason.taylor@secure-24.com Whiteboard| |fst_owner=jtaylor
https://bugzilla.redhat.com/show_bug.cgi?id=858914
Erik van Pienbroek erik-fedora@vanpienbroek.nl changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED CC| |erik-fedora@vanpienbroek.nl Resolution|--- |WONTFIX Last Closed| |2014-09-01 09:24:29
--- Comment #2 from Erik van Pienbroek erik-fedora@vanpienbroek.nl --- All mingw32 packages have been removed from EPEL-5 as per https://fedorahosted.org/rel-eng/ticket/5977