Register | Log in

xerces-c

Choose email to subscribe with

general

source: xerces-c (main)
version: 3.2.3+debian-1
maintainer: William Blough (DMD) (LowNMU)
arch: all any
std-ver: 4.5.0
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 3.1.1-5.1+deb8u4
o-o-sec: 3.1.1-5.1+deb8u3
oldstable: 3.1.4+debian-2+deb9u1
old-bpo: 3.2.2+debian-1~bpo9+1
stable: 3.2.2+debian-1
testing: 3.2.3+debian-1
unstable: 3.2.3+debian-1

versioned links

3.1.1-5.1+deb8u3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.1.1-5.1+deb8u4: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.1.4+debian-2+deb9u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.2.2+debian-1~bpo9+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.2.2+debian-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.2.3+debian-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libxerces-c-dev
libxerces-c-doc
libxerces-c-samples
libxerces-c3.2

action needed

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2018-1311: The Apache Xerces-C 3.0.0 to 3.2.2 XML parser contains a use-after-free error triggered during the scanning of external DTDs. This flaw has not been addressed in the maintained version of the library and has no current mitigation other than to disable DTD processing. This can be accomplished via the DOM using a standard parser feature, or via SAX using the XERCES_DISABLE_DTD environment variable.

Please fix it.

Created: 2019-12-26 Last update: 2020-08-07 06:08

1 security issue in bullseye high

There is 1 open security issue in bullseye.

1 important issue:

CVE-2018-1311: The Apache Xerces-C 3.0.0 to 3.2.2 XML parser contains a use-after-free error triggered during the scanning of external DTDs. This flaw has not been addressed in the maintained version of the library and has no current mitigation other than to disable DTD processing. This can be accomplished via the DOM using a standard parser feature, or via SAX using the XERCES_DISABLE_DTD environment variable.

Please fix it.

Created: 2019-12-26 Last update: 2020-08-07 06:08

1 ignored security issue in stretch low

There is 1 open security issue in stretch.

1 issue skipped by the security teams:

CVE-2018-1311: The Apache Xerces-C 3.0.0 to 3.2.2 XML parser contains a use-after-free error triggered during the scanning of external DTDs. This flaw has not been addressed in the maintained version of the library and has no current mitigation other than to disable DTD processing. This can be accomplished via the DOM using a standard parser feature, or via SAX using the XERCES_DISABLE_DTD environment variable.

Please fix it.

Created: 2019-12-26 Last update: 2020-08-07 06:08

1 ignored security issue in buster low

There is 1 open security issue in buster.

1 issue skipped by the security teams:

CVE-2018-1311: The Apache Xerces-C 3.0.0 to 3.2.2 XML parser contains a use-after-free error triggered during the scanning of external DTDs. This flaw has not been addressed in the maintained version of the library and has no current mitigation other than to disable DTD processing. This can be accomplished via the DOM using a standard parser feature, or via SAX using the XERCES_DISABLE_DTD environment variable.

Please fix it.

Created: 2019-12-26 Last update: 2020-08-07 06:08

Build log checks report 1 warning low

Build log checks report 1 warning

Created: 2020-06-03 Last update: 2020-06-03 03:06

news

[2020-04-14] xerces-c 3.2.3+debian-1 MIGRATED to testing (Debian testing watch)
[2020-04-11] Accepted xerces-c 3.2.3+debian-1 (source) into unstable (William Blough)
[2020-03-26] xerces-c 3.2.2+debian-3 MIGRATED to testing (Debian testing watch)
[2020-03-22] Accepted xerces-c 3.2.2+debian-3 (source) into unstable (William Blough)
[2020-03-17] Accepted xerces-c 3.2.2+debian-2 (source amd64 all) into unstable (William Blough)
[2018-11-06] Accepted xerces-c 3.2.2+debian-1~bpo9+1 (source amd64 all) into stretch-backports, stretch-backports (William Blough)
[2018-09-25] xerces-c 3.2.2+debian-1 MIGRATED to testing (Debian testing watch)
[2018-09-19] Accepted xerces-c 3.2.2+debian-1 (source amd64 all) into unstable (William Blough)
[2018-05-01] xerces-c 3.2.1+debian-2 MIGRATED to testing (Debian testing watch)
[2018-04-30] Accepted xerces-c 3.1.1-5.1+deb8u4 (source all amd64) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates (William Blough)
[2018-04-30] Accepted xerces-c 3.1.4+debian-2+deb9u1 (source amd64 all) into proposed-updates->stable-new, proposed-updates (William Blough)
[2018-04-26] Accepted xerces-c 3.2.1+debian-2 (source amd64 all) into unstable (William Blough)
[2018-04-03] xerces-c 3.2.1+debian-1 MIGRATED to testing (Debian testing watch)
[2018-03-29] Accepted xerces-c 3.1.1-3+deb7u5 (source all amd64) into oldoldstable (Markus Koschany)
[2018-03-28] Accepted xerces-c 3.2.1+debian-1 (source amd64 all) into unstable (William Blough)
[2017-11-21] xerces-c 3.2.0+debian-2 MIGRATED to testing (Debian testing watch)
[2017-11-15] Accepted xerces-c 3.2.0+debian-2 (source) into unstable (William Blough) (signed by: Tobias Frost)
[2017-10-27] Accepted xerces-c 3.2.0+debian-1 (source amd64 all) into experimental, experimental (William Blough) (signed by: Tobias Frost)
[2016-12-29] xerces-c 3.1.4+debian-2 MIGRATED to testing (Debian testing watch)
[2016-12-19] Accepted xerces-c 3.1.4+debian-2 (source) into unstable (William Blough) (signed by: Gianfranco Costamagna)
[2016-11-08] Accepted xerces-c 3.1.4+debian-1 (source) into unstable (William Blough) (signed by: Gianfranco Costamagna)
[2016-07-17] xerces-c 3.1.3+debian-2.1 MIGRATED to testing (Debian testing watch)
[2016-07-11] Accepted xerces-c 3.1.3+debian-2.1 (source) into unstable (Salvatore Bonaccorso)
[2016-07-04] Accepted xerces-c 3.1.1-5.1+deb8u3 (all source) into proposed-updates->stable-new, proposed-updates (Salvatore Bonaccorso)
[2016-06-29] Accepted xerces-c 3.1.1-3+deb7u4 (source all amd64) into oldstable (signed by: Salvatore Bonaccorso)
[2016-05-18] Accepted xerces-c 3.1.1-5.1+deb8u2 (all source) into proposed-updates->stable-new, proposed-updates (Salvatore Bonaccorso)
[2016-05-16] xerces-c 3.1.3+debian-2 MIGRATED to testing (Debian testing watch)
[2016-05-12] Accepted xerces-c 3.1.1-3+deb7u3 (source all i386) into oldstable (signed by: Thorsten Alteholz)
[2016-05-10] Accepted xerces-c 3.1.3+debian-2 (source) into unstable (William Blough) (signed by: Gianfranco Costamagna)
[2016-03-25] xerces-c 3.1.3+debian-1 MIGRATED to testing (Debian testing watch)

1
2

bugs [bug history graph]

all: 1
RC: 0
I&N: 1
M&W: 0
F&P: 0
patch: 0

links

homepage
lintian
buildd: logs, checks, clang, reproducibility, cross
popcon
browse source code
edit tags
security tracker
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 3.2.3+debian-1

Debian Package Tracker — Copyright 2013-2018 The Distro Tracker Developers

Report problems to the tracker.debian.org pseudo-package in the Debian BTS.

Documentation — Bugs — Git Repository — Contributing