Bug 566374

Summary:	<dev-libs/libxml2-2.9.3: multiple vulnerabilities (CVE-2015-{1819,5312,7497,7498,7499,7500,7941,7942,8035,8242})
Product:	Gentoo Security	Reporter:	Hanno Böck <hanno>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal	CC:	gnome
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	http://www.xmlsoft.org/news.html
Whiteboard:	A3 [glsa cve]
Package list:		Runtime testing required:	---

Description Hanno Böck gentoo-dev

2015-11-21 09:18:47 UTC

libxml 2.9.3 fixes a large number of security issues. The release notes mention 10 CVEs (and I'm aware of at least two more issues I reported myself that didn't get CVEs yet).

Please update.

Comment 1 Gilles Dartiguelongue (RETIRED) gentoo-dev

2015-11-21 13:29:36 UTC

Note that a good load of these are already fixed in 2.9.2-r4.

Comment 2 Pacho Ramos gentoo-dev

2016-01-11 13:55:39 UTC

[master d8a8b05] dev-libs/libxml2: Version bump
 2 files changed, 216 insertions(+)
 create mode 100644 dev-libs/libxml2/libxml2-2.9.3.ebuild

Comment 3 GLSAMaker/CVETool Bot gentoo-dev

2017-01-16 21:21:25 UTC

This issue was resolved and addressed in
 GLSA 201701-37 at https://security.gentoo.org/glsa/201701-37
by GLSA coordinator Thomas Deutschmann (whissi).

Comment 4 GLSAMaker/CVETool Bot gentoo-dev

2017-01-16 21:25:30 UTC

This issue was resolved and addressed in
 GLSA 201701-37 at https://security.gentoo.org/glsa/201701-37
by GLSA coordinator Thomas Deutschmann (whissi).