CVE-2020-25713

Name	CVE-2020-25713
Description	A malformed input file can lead to a segfault due to an out of bounds array access in raptor_xml_writer_start_element_common.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DLA-2846-1, ELA-528-1
Debian Bugs	974664

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
raptor (PTS)	jessie	1.4.21-11	vulnerable
raptor2 (PTS)	jessie, jessie (lts)	2.0.14-1+deb8u2	fixed
	stretch (security), stretch (lts), stretch	2.0.14-1+deb9u2	fixed
	buster	2.0.14-1.1~deb10u2	fixed
	buster (security), buster (lts)	2.0.14-1.1~deb10u1	vulnerable
	bullseye	2.0.14-1.2	fixed
	bookworm	2.0.15-4	fixed
	sid, trixie	2.0.16-4	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
raptor	source	jessie	(unfixed)	end-of-life
raptor	source	(unstable)	(unfixed)
raptor2	source	jessie	2.0.14-1+deb8u2		ELA-528-1
raptor2	source	stretch	2.0.14-1+deb9u2		DLA-2846-1
raptor2	source	buster	2.0.14-1.1~deb10u2
raptor2	source	(unstable)	2.0.14-1.2			974664

https://bugs.librdf.org/mantis/view.php?id=650