Fedora 25: perl-XML-LibXML Security Update
Summary
This module implements a Perl interface to the GNOME libxml2 library
which provides interfaces for parsing and manipulating XML files. This
module allows Perl programmers to make use of the highly capable
validating XML parser and the high performance DOM implementation.
This release fixes a use-after-free in replaceChild() call.
[ 1 ] Bug #1470204 - CVE-2017-10672 perl-XML-LibXML: Use-after-free by controlling the arguments to a replaceChild call
https://bugzilla.redhat.com/show_bug.cgi?id=1470204
su -c 'dnf upgrade perl-XML-LibXML' at the command line.
For more information, refer to the dnf documentation available at
https://dnf.readthedocs.io/en/latest/command_ref.html
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/security/
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
FEDORA-2017-534f300508 2017-07-25 15:01:10.495549 Product : Fedora 25 Version : 2.0129 Release : 2.fc25 URL : https://metacpan.org/dist/XML-LibXML Summary : Perl interface to the libxml2 library Description : This module implements a Perl interface to the GNOME libxml2 library which provides interfaces for parsing and manipulating XML files. This module allows Perl programmers to make use of the highly capable validating XML parser and the high performance DOM implementation. This release fixes a use-after-free in replaceChild() call. [ 1 ] Bug #1470204 - CVE-2017-10672 perl-XML-LibXML: Use-after-free by controlling the arguments to a replaceChild call https://bugzilla.redhat.com/show_bug.cgi?id=1470204 su -c 'dnf upgrade perl-XML-LibXML' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ package-announce mailing list -- package-announce@lists.fedoraproject.org To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Change Log
References