Oval Definition:oval:com.redhat.rhsa:def:20151193
Revision Date:2015-06-29Version:638
Title:RHSA-2015:1193: xerces-c security update (Moderate)
Description:Xerces-C is a validating XML parser written in a portable subset of C++.

  • A flaw was found in the way the Xerces-C XML parser processed certain XML documents. A remote attacker could provide specially crafted XML input that, when parsed by an application using Xerces-C, would cause that application to crash. (CVE-2015-0252)

    All xerces-c users are advised to upgrade to this updated package, which contains a backported patch to correct this issue.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2015-0252
    RHSA-2015:1193
    RHSA-2015:1193-00
    RHSA-2015:1193-01
    Platform(s):Red Hat Enterprise Linux 7
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 7 is installed
  • AND
  • xerces-c is earlier than 0:3.1.1-7.el7_1
  • AND xerces-c is signed with Red Hat redhatrelease2 key
  • xerces-c-devel is earlier than 0:3.1.1-7.el7_1
  • AND xerces-c-devel is signed with Red Hat redhatrelease2 key
  • xerces-c-doc is earlier than 0:3.1.1-7.el7_1
  • AND xerces-c-doc is signed with Red Hat redhatrelease2 key
  • BACK