Source: xerces-c Version: 3.1.1-1 Severity: grave Tags: security patch upstream fixed-upstream
Hi, the following vulnerability was published for xerces-c. CVE-2015-0252[0]: Apache Xerces-C XML Parser Crashes on Malformed Input If you fix the vulnerability please also make sure to include the CVE (Common Vulnerabilities & Exposures) id in your changelog entry. For further information see: [0] https://security-tracker.debian.org/tracker/CVE-2015-0252 [1] https://xerces.apache.org/xerces-c/secadv/CVE-2015-0252.txt [2] http://svn.apache.org/viewvc?view=revision&revision=1667870 Regards, Salvatore p.s.: I uploaded already prepared packages for wheezy-security, but the packages are not yet released. -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org