Login
Newsletter
Werbung

Sicherheit: Denial of Service in ocaml-xml-light
Aktuelle Meldungen Distributionen
Name: Denial of Service in ocaml-xml-light
ID: FEDORA-2012-12500
Distribution: Fedora
Plattformen: Fedora 17
Datum: Sa, 1. September 2012, 11:39
Referenzen: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3514
Applikationen: ocaml-xml-light

Originalnachricht

Name        : ocaml-xml-light
Product : Fedora 17
Version : 2.3
Release : 0.1.svn234.fc17
URL : http://tech.motion-twin.com/xmllight.html
Summary : Minimal XML parser and printer for OCaml
Description :
Xml-Light is a minimal XML parser & printer for OCaml. It provides
functions to parse an XML document into an OCaml data structure, work
with it, and print it back to an XML document. It support also DTD
parsing and checking, and is entirely written in OCaml, hence it does
not require additional C library.

-------------------------------------------------------------------------------
-
Update Information:

Fix for CVE-2012-3514.
-------------------------------------------------------------------------------
-
ChangeLog:

* Tue Aug 21 2012 Richard W.M. Jones <rjones@redhat.com> - 2.3-0.1.svn234
- Update to latest version (subversion release 234).
- Includes fix for CVE-2012-3514 - moderate impact hash table collisions
(resolves: rhbz#787890).
- Clean up the spec file and bring up to modern standards.
- Add tests.
-------------------------------------------------------------------------------
-
References:

[ 1 ] Bug #787890 - ocaml-xml-light: hash table collisions CPU usage DoS
https://bugzilla.redhat.com/show_bug.cgi?id=787890
-------------------------------------------------------------------------------
-

This update can be installed with the "yum" update program. Use
su -c 'yum update ocaml-xml-light' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
-------------------------------------------------------------------------------
-
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce
Pro-Linux
Pro-Linux @Facebook
Neue Nachrichten
Werbung