[Bug 1470204] New: CVE-2017-10672 perl-XML-LibXML: Use-after-free by controlling the arguments to a replaceChild call

[bugzilla@xxxxxxxxxx]

https://bugzilla.redhat.com/show_bug.cgi?id=1470204

            Bug ID: 1470204
           Summary: CVE-2017-10672 perl-XML-LibXML: Use-after-free by
                    controlling the arguments to a replaceChild call
           Product: Security Response
         Component: vulnerability
          Keywords: Security
          Severity: medium
          Priority: medium
          Assignee: security-response-team@xxxxxxxxxx
          Reporter: anemec@xxxxxxxxxx
                CC: jplesnik@xxxxxxxxxx,
                    perl-devel@xxxxxxxxxxxxxxxxxxxxxxx,
                    perl-maint-list@xxxxxxxxxx, ppisar@xxxxxxxxxx,
                    psabata@xxxxxxxxxx




Use-after-free in the XML-LibXML module through 2.0129 for Perl allows
attackers to execute arbitrary code by controlling the arguments to a
replaceChild call.

Upstream issue:

https://rt.cpan.org/Public/Bug/Display.html?id=122246

-- 
You are receiving this mail because:
You are on the CC list for the bug.
_______________________________________________
perl-devel mailing list -- perl-devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to perl-devel-leave@xxxxxxxxxxxxxxxxxxxxxxx