Vulnerability Bulletins

DSA-3579 xerces-c - security update

   
Affected software Debian
 
Gustavo Grieco discovered an use-after-free vulnerability in xerces-c, avalidating XML parser library for C++, due to not properly handlinginvalid characters in XML input documents in the DTDScanner.

More info:

https://www.debian.org/security/2016/dsa-3579