Advisories » MGASA-2015-0285

Updated expat package fixes security vulnerability

Publication date: 27 Jul 2015
Modification date: 27 Jul 2015
Type: security
Affected Mageia releases : 4 , 5
CVE: CVE-2015-1283

Description

Multiple integer overflows in the XML_GetBuffer function in Expat through
2.1.0 allow remote attackers to cause a denial of service (heap-based
buffer overflow) or possibly have unspecified other impact via crafted XML
data (CVE-2015-1283).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=16477
• http://googlechromereleases.blogspot.cz/2015/07/stable-channel-update_21.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1283

SRPMS

4/core

• expat-2.1.0-7.1.mga4

5/core

• expat-2.1.0-9.1.mga5