Bug 597116 – <dev-libs/libxml2-2.9.4-r1: NULL pointer deref in XPointer range-to

• Status: RESOLVED FIXED
• Product: Gentoo Security

[Description Agostino Sarubbo 2016-10-14 14:10:15 UTC]

From ${URL} :

Fix NULL pointer deref in XPointer range-to
- Check for errors after evaluating first operand.
- Add sanity check for empty stack.

Found with afl-fuzz.


@maintainer(s): after the bump, in case we need to stabilize the package, please let us know if it is ready for the stabilization or not.

[Comment 1 Aaron Bauman (RETIRED) 2016-11-19 00:33:20 UTC]

Patch is not present in latest 2.9.4 release.

[Comment 2 Aaron Bauman (RETIRED) 2017-01-02 06:46:15 UTC]

Security bump to -r1 in coordination with leio.

@maintainer(s), please let us know when you are ready to stabilize.

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=060503be258912e25b6da77ca79d450553ed0be3

[Comment 3 Aaron Bauman (RETIRED) 2017-01-04 13:07:10 UTC]

amd64 stable

[Comment 4 Agostino Sarubbo 2017-01-04 17:09:54 UTC]

x86 stable

[Comment 5 Tobias Klausmann (RETIRED) 2017-01-05 12:36:33 UTC]

Stable on alpha.

[Comment 6 Markus Meier 2017-01-08 18:32:52 UTC]

arm stable

[Comment 7 Jeroen Roovers (RETIRED) 2017-01-10 09:59:12 UTC]

Stable for PPC64.

[Comment 8 Agostino Sarubbo 2017-01-11 10:48:58 UTC]

sparc stable

[Comment 9 Jeroen Roovers (RETIRED) 2017-01-15 01:32:24 UTC]

Stable for HPPA.

[Comment 10 Aaron Bauman (RETIRED) 2017-01-15 08:33:53 UTC]

ia64/ppc bump

[Comment 11 Agostino Sarubbo 2017-01-15 16:00:32 UTC]

ppc stable

[Comment 12 GLSAMaker/CVETool Bot 2017-01-16 21:26:46 UTC]

This issue was resolved and addressed in
 GLSA 201701-37 at https://security.gentoo.org/glsa/201701-37
by GLSA coordinator Thomas Deutschmann (whissi).

[Comment 13 Thomas Deutschmann (RETIRED) 2017-01-16 21:27:50 UTC]

Re-opening for remaining arch.

[Comment 14 Agostino Sarubbo 2017-01-17 14:36:59 UTC]

ia64 stable.

Maintainer(s), please cleanup.

[Comment 15 Mart Raudsepp 2017-01-17 15:09:07 UTC]

cleanup done to the extent possible with arm64, m68k, s390 and sh still there.

[Comment 16 Thomas Deutschmann (RETIRED) 2017-06-08 21:03:51 UTC]

All done.