Commit graph

6 commits

Author SHA1 Message Date
obache
5935a076ec Apply following Security updates, resolve one CVE, but remove one CVE fix.
Bump PKGREVISION to 3.

==============================================================================
   openSUSE Security Update: libxml2, python-libxml2: Reverted patch for CVE-2014-0191
______________________________________________________________________________

Announcement ID:    openSUSE-SU-2014:0753-1
Rating:             moderate
References:         #876652
Cross-References:   CVE-2014-0191
Affected Products:
                    openSUSE 13.1
                    openSUSE 12.3
______________________________________________________________________________

   An update that fixes one vulnerability is now available.

Description:

   Removed fix for CVE-2014-0191. This fix breaks existing applications and
   there's currently no way to prevent that.

==============================================================================
   openSUSE Security Update: update to fix CVE-2014-3660
______________________________________________________________________________

Announcement ID:    openSUSE-SU-2014:1330-1
Rating:             moderate
References:         #901546
Cross-References:   CVE-2014-3660
Affected Products:
                    openSUSE 13.1
                    openSUSE 12.3
______________________________________________________________________________

   An update that fixes one vulnerability is now available.

Description:

   This update fixes a denial of service vulnerability when expanding
   recursive entity (CVE-2014-3660) bnc#901546
2014-11-03 08:05:03 +00:00
obache
4a631931c8 define PKGNAME instead of fake DISTNAME. 2014-09-07 12:26:39 +00:00
obache
2caffe812b Apply openSUSE Security Update: openSUSE-SU-2014:0716-1
libxml2, python-libxml2: Prevent external entities from being loaded

Description:

   Updated fix for openSUSE-SU-2014:0645-1 because of a regression that
   caused xmllint to break.

Bump PKGREVISION.
2014-05-27 13:27:25 +00:00
wiz
d142fd022d Fix fetch. 2014-05-15 18:39:28 +00:00
obache
c68c5211d0 Apply openSUSE Security Update: openSUSE-SU-2014:0645-1
libxml2

Description:

   - fix for CVE-2014-0191 (bnc#876652)
   * libxml2: external parameter entity loaded when entity substitution is
   disabled
   * added libxml2-CVE-2014-0191.patch

Bump PKGREVISION.
2014-05-15 11:27:22 +00:00
obache
80251b35d0 Added openSUSE 13.1 packages, provides a number of components for a
openSUSE-based Linux binary emulation environment.
2013-12-05 11:42:12 +00:00