[Bug 1213957] libxml2: out-of-bounds memory access when parsing an unclosed HTML comment

[bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1213957

Ján Rusnačko  changed:

   What|Removed |Added

 CC||jrusn...@redhat.com
 Whiteboard|impact=moderate,public=2015 |impact=moderate,public=2015
   |0419,reported=20150421,sour |0419,reported=20150421,sour
   |ce=oss-security,cvss2=5.8/A |ce=oss-security,cvss2=5.8/A
   |V:N/AC:M/Au:N/C:P/I:N/A:P,f |V:N/AC:M/Au:N/C:P/I:N/A:P,f
   |edora-all/libxml2=affected, |edora-all/libxml2=affected,
   |fedora-all/mingw-libxml2=af |fedora-all/mingw-libxml2=af
   |fected,epel-all/mingw-libxm |fected,epel-all/mingw-libxm
   |l2=affected,rhel-5/libxml2= |l2=affected,rhel-5/libxml2=
   |wontfix,rhel-6/libxml2=affe |wontfix,rhel-6/libxml2=affe
   |cted,rhel-7/libxml2=affecte |cted,rhel-7/libxml2=affecte
   |d   |d,cwe=CWE-119



-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=joRM3p7s3E=cc_unsubscribe
___
mingw mailing list
mingw@lists.fedoraproject.org
http://lists.fedoraproject.org/admin/lists/mingw@lists.fedoraproject.org

[Bug 1213957] libxml2: out-of-bounds memory access when parsing an unclosed HTML comment

[bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1213957

Huzaifa S. Sidhpurwala  changed:

   What|Removed |Added

 Status|POST|CLOSED
 Resolution|--- |ERRATA
 Whiteboard|impact=moderate,public=2015 |impact=moderate,public=2015
   |0419,reported=20150421,sour |0419,reported=20150421,sour
   |ce=oss-security,cvss2=5.8/A |ce=oss-security,cvss2=5.8/A
   |V:N/AC:M/Au:N/C:P/I:N/A:P,f |V:N/AC:M/Au:N/C:P/I:N/A:P,f
   |edora-all/libxml2=affected, |edora-all/libxml2=affected,
   |fedora-all/mingw-libxml2=af |fedora-all/mingw-libxml2=af
   |fected,epel-all/mingw-libxm |fected,epel-all/mingw-libxm
   |l2=affected,rhel-5/libxml2= |l2=affected,rhel-5/libxml2=
   |affected,rhel-6/libxml2=aff |wontfix,rhel-6/libxml2=affe
   |ected,rhel-7/libxml2=affect |cted,rhel-7/libxml2=affecte
   |ed  |d
Last Closed||2015-12-08 01:19:21



-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=YgdsjrwfVG=cc_unsubscribe
___
mingw mailing list
mingw@lists.fedoraproject.org
http://lists.fedoraproject.org/admin/lists/mingw@lists.fedoraproject.org

[Bug 1213957] libxml2: out-of-bounds memory access when parsing an unclosed HTML comment

[bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1213957



--- Comment #11 from errata-xmlrpc  ---
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 6

Via RHSA-2015:2549 https://rhn.redhat.com/errata/RHSA-2015-2549.html

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=dtMFQxnaei=cc_unsubscribe
___
mingw mailing list
mingw@lists.fedoraproject.org
http://lists.fedoraproject.org/admin/lists/mingw@lists.fedoraproject.org

[Bug 1213957] libxml2: out-of-bounds memory access when parsing an unclosed HTML comment

[bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1213957



--- Comment #12 from errata-xmlrpc  ---
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 7

Via RHSA-2015:2550 https://rhn.redhat.com/errata/RHSA-2015-2550.html

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=vtLkKgrzan=cc_unsubscribe
___
mingw mailing list
mingw@lists.fedoraproject.org
http://lists.fedoraproject.org/admin/lists/mingw@lists.fedoraproject.org

[Bug 1213957] libxml2: out-of-bounds memory access when parsing an unclosed HTML comment

[bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1213957
Bug 1213957 depends on bug 1213959, which changed state.

Bug 1213959 Summary: mingw-libxml2: libxml2: out-of-bounds memory access when 
parsing an unclosed HTML comment [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1213959

   What|Removed |Added

 Status|NEW |CLOSED
 Resolution|--- |EOL



-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=O3CF8dEsSu=cc_unsubscribe
___
mingw mailing list
mingw@lists.fedoraproject.org
http://lists.fedoraproject.org/admin/lists/mingw@lists.fedoraproject.org

[Bug 1213957] libxml2: out-of-bounds memory access when parsing an unclosed HTML comment

[bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1213957
Bug 1213957 depends on bug 1213958, which changed state.

Bug 1213958 Summary: libxml2: out-of-bounds memory access when parsing an 
unclosed HTML comment [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1213958

   What|Removed |Added

 Status|NEW |CLOSED
 Resolution|--- |EOL



-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=iu1Ls33QKt=cc_unsubscribe
___
mingw mailing list
mingw@lists.fedoraproject.org
http://lists.fedoraproject.org/admin/lists/mingw@lists.fedoraproject.org

[Bug 1213957] libxml2: out-of-bounds memory access when parsing an unclosed HTML comment

[bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1213957

Martin Cermak  changed:

   What|Removed |Added

 CC||mcer...@redhat.com



-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=f9IcC02jSX=cc_unsubscribe
___
mingw mailing list
mingw@lists.fedoraproject.org
http://lists.fedoraproject.org/admin/lists/mingw@lists.fedoraproject.org

[Bug 1213957] libxml2: out-of-bounds memory access when parsing an unclosed HTML comment

[bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1213957

Huzaifa S. Sidhpurwala  changed:

   What|Removed |Added

 Depends On||1286495
 Depends On||1286496
 Depends On||1286497



-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=FZI4D8JwQc=cc_unsubscribe
___
mingw mailing list
mingw@lists.fedoraproject.org
http://lists.fedoraproject.org/admin/lists/mingw@lists.fedoraproject.org

[Bug 1213957] libxml2: out-of-bounds memory access when parsing an unclosed HTML comment

[bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1213957

Huzaifa S. Sidhpurwala  changed:

   What|Removed |Added

 Blocks||1274223



-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=nPDhGxXajN=cc_unsubscribe
___
mingw mailing list
mingw@lists.fedoraproject.org
http://lists.fedoraproject.org/admin/lists/mingw@lists.fedoraproject.org

[Bug 1213957] libxml2: out-of-bounds memory access when parsing an unclosed HTML comment

[bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1213957

Huzaifa S. Sidhpurwala  changed:

   What|Removed |Added

 Depends On||1284794



-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=SZlHtEWnAD=cc_unsubscribe
___
mingw mailing list
mingw@lists.fedoraproject.org
http://lists.fedoraproject.org/admin/lists/mingw@lists.fedoraproject.org

[Bug 1213957] libxml2: out-of-bounds memory access when parsing an unclosed HTML comment

[bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1213957

Adam Mariš  changed:

   What|Removed |Added

 Blocks||1262850, 1276694



--- Comment #6 from Adam Mariš  ---
*** Bug 1262849 has been marked as a duplicate of this bug. ***

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=LEtr5yAuta=cc_unsubscribe
___
mingw mailing list
mingw@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/mingw

[Bug 1213957] libxml2: out-of-bounds memory access when parsing an unclosed HTML comment

[bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1213957

Adam Mariš  changed:

   What|Removed |Added

 CC||ama...@redhat.com



--- Comment #5 from Adam Mariš  ---
Upstream patch:

https://git.gnome.org/browse/libxml2/commit/?id=e724879d964d774df9b7969fc846605aa1bac54c

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=v9D47zqSsf=cc_unsubscribe
___
mingw mailing list
mingw@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/mingw

[Bug 1213957] libxml2: out-of-bounds memory access when parsing an unclosed HTML comment

[bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1213957

Vincent Danen vda...@redhat.com changed:

   What|Removed |Added

  Flags|needinfo+   |



-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=fMksmINPaCa=cc_unsubscribe
___
mingw mailing list
mingw@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/mingw

[Bug 1213957] libxml2: out-of-bounds memory access when parsing an unclosed HTML comment

[bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1213957


--- Doc Text *updated* by Martin Prpic mpr...@redhat.com ---
It was discovered that libxml2 could access out-of-bounds memory when parsing 
unclosed HTML comments. A remote attacker could provide a specially crafted XML 
file that, when processed by an application linked against libxml2, could cause 
the application to disclose heap memory contents.


-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=bOtaT7ysFsa=cc_unsubscribe
___
mingw mailing list
mingw@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/mingw

[Bug 1213957] libxml2: out-of-bounds memory access when parsing an unclosed HTML comment

[bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1213957

MinGW Maintenance Account fedora-mi...@lists.fedoraproject.org changed:

   What|Removed |Added

 CC|fedora-mingw@lists.fedorapr |
   |oject.org   |



-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=1aMCcqZKOQa=cc_unsubscribe
___
mingw mailing list
mingw@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/mingw

[Bug 1213957] libxml2: out-of-bounds memory access when parsing an unclosed HTML comment

[bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1213957


--- Doc Text *updated* by Stefan Cornelius scorn...@redhat.com ---
It was discovered that libxml2 could access out-of-bounds memory when parsing 
unclosed HTML comments. When processing specially crafted XML content, this 
could lead to e.g. the disclosure of heap memory contents.


-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=NbKKSLuBi3a=cc_unsubscribe
___
mingw mailing list
mingw@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/mingw

[Bug 1213957] libxml2: out-of-bounds memory access when parsing an unclosed HTML comment

[bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1213957

Stefan Cornelius scorn...@redhat.com changed:

   What|Removed |Added

  Flags||needinfo+
   ||needinfo?(veillard@redhat.c
   ||om)



-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=ui4bg0QyXVa=cc_unsubscribe
___
mingw mailing list
mingw@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/mingw

[Bug 1213957] libxml2: out-of-bounds memory access when parsing an unclosed HTML comment

[bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1213957

Stefan Cornelius scorn...@redhat.com changed:

   What|Removed |Added

 CC||fedora-mingw@lists.fedorapr
   ||oject.org



-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=9LHcq15ASka=cc_unsubscribe
___
mingw mailing list
mingw@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/mingw

[Bug 1213957] libxml2: out-of-bounds memory access when parsing an unclosed HTML comment

[bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1213957

Vasyl Kaigorodov vkaig...@redhat.com changed:

   What|Removed |Added

 Blocks||1214246



-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=q7vjWDFpMVa=cc_unsubscribe
___
mingw mailing list
mingw@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/mingw

[Bug 1213957] libxml2: out-of-bounds memory access when parsing an unclosed HTML comment

[bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1213957



--- Comment #2 from Vasyl Kaigorodov vkaig...@redhat.com ---

Created mingw-libxml2 tracking bugs for this issue:

Affects: fedora-all [bug 1213959]
Affects: epel-all [bug 1213960]

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=HLzKlrO8kba=cc_unsubscribe
___
mingw mailing list
mingw@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/mingw

[Bug 1213957] libxml2: out-of-bounds memory access when parsing an unclosed HTML comment

[bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1213957

Vasyl Kaigorodov vkaig...@redhat.com changed:

   What|Removed |Added

 Depends On||1213958
 Depends On||1213959
 Depends On||1213960



--- Comment #1 from Vasyl Kaigorodov vkaig...@redhat.com ---

Created libxml2 tracking bugs for this issue:

Affects: fedora-all [bug 1213958]


Referenced Bugs:

https://bugzilla.redhat.com/show_bug.cgi?id=1213958
[Bug 1213958] libxml2: out-of-bounds memory access when parsing an unclosed
HTML comment [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1213959
[Bug 1213959] mingw-libxml2: libxml2: out-of-bounds memory access when
parsing an unclosed HTML comment [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1213960
[Bug 1213960] mingw-libxml2: libxml2: out-of-bounds memory access when
parsing an unclosed HTML comment [epel-all]
-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=5mm9UQIVkja=cc_unsubscribe
___
mingw mailing list
mingw@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/mingw