Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Thu, 22 Oct 2009 16:04:37 +0200
From: Marc Schoenefeld <>
To: oss-security <>
CC: "Steven M. Christey" <>,
        Joe Orton <>, Ondrej Vasik <>,
        Roman Rakus <>,
        CERT-FI Vulnerability Co-ordination <>
Subject: Re: Regarding expat bug 1990430

Jan Lieskovsky wrote:
> Hello Steve, vendors,
> [...]
>    a, Does Apache Xerces2 Java contain embedded copy ot the expat
> library (i.e. it's
>       completely the same issue as in expat, w3c-libwww, PyXML and
> others) - Marc
>       could you help to reply this question?
the upstream patch for CVE-2009-2625 for xerces-j2 is  java-only [1] and
unrelated to fixes in other native C parsing libraries.



Marc Schoenefeld / Red Hat Security Response Team

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Powered by Openwall GNU/*/Linux - Powered by OpenVZ