BSD PortsVulnerable: version src_2_8_0nb2 is affected by 8 known vulnerabilities. See below.
wip/xerces-c-2.8.0 src_2_8_0nb2 NetBSD
Validating C++ XML parser with DOM and SAX support
- System
- NetBSD
- Repository
- pkgsrc-wip
- Maintainer
- [email protected]
- License
- apache-2.0
- Categories
- wip, textproc
Description
Xerces-C++ is a validating XML parser written in a portable subset of C++. Xerces-C++ makes it easy to give your application the ability to read and write XML data. A shared library is provided for parsing, generating, manipulating, and validating XML documents.
Xerces-C++ is faithful to the XML 1.0 recommendation and many associated standards.
In the other systems
The newest version among them is 3.3.0, as upstream numbers it.
| System | Port | Version | Vulnerabilities | Status | Maintainer | Last update |
|---|---|---|---|---|---|---|
| NetBSD | wip/xerces-c-2.8.0 | src_2_8_0nb2 | 8 known | - | [email protected] | - |
| OpenBSD | textproc/xerces-c by name | 3.3.0 newest | no data | - | The OpenBSD ports mailing-list <[email protected]> | 2026-09-21 |
Install
From pkgsrc-wip (no binary package):
cd /usr/pkgsrc/wip/xerces-c-2.8.0 && make install cleanDependency graph
Ports that need it on the left, what it needs to run on the right; at most 8 of each. "Dependencies" below lists them all.
Dependencies
Run dependencies 1
Required by 1
Known vulnerabilities 8
- xerces-c: multiple-vulnerabilities
- xerces-c: denial-of-service (CVE-2016-4463)
- xerces-c: denial-of-service (CVE-2008-4482)
- xerces-c: denial-of-service (CVE-2009-1885)
- xerces-c: unspecified (CVE-2016-2099)
- xerces-c: remote-code-execution (CVE-2016-0729)
- xerces-c: null-pointer-dereference (CVE-2017-12627)
- xerces-c: use-after-free (CVE-2018-1311)
1 NetBSD ports depend on it, directly or through others, and may carry the vulnerable code. The ports that need it