Summary
[2.9.1-5.0.1.el7_0.1]
- Update doc/redhat.gif in tarball
- Add libxml2-oracle-enterprise.patch and update logos in tarball
[2.9.1-5.1]
- CVE-2014-3660 denial of service via recursive entity expansion (rhbz#1149087)
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | libxml2 | 0:2.9.1-5.0.1.el7_0.1 |
| Oracle Linux · 7 | libxml2-devel | 0:2.9.1-5.0.1.el7_0.1 |
| Oracle Linux · 7 | libxml2-python | 0:2.9.1-5.0.1.el7_0.1 |
| Oracle Linux · 7 | libxml2-static | 0:2.9.1-5.0.1.el7_0.1 |
Vulnerabilities 1
-
Unscored —
parser.c in libxml2 before 2.9.2 does not properly prevent entity expansion even when entity substitution has been disa…