Alerts This Week
Warning Icon 1 619
Alerts This Week
Warning Icon 1 619

Fedora: 2009-8491 Essential Parsing Problems Found in Libxml2

fedora
Calendar Grey August 11, 2009
Dist Fedora Esm H88
An update for libxml2 in Fedora 10 resolves parsing bugs with improvements aimed at boosting efficiency and enhancing security protocols.
two patches for parsing problems raised by ficora

Summary

This library allows to manipulate XML files. It includes support

to read, modify and write XML and HTML files. There is DTDs support

this includes parsing and validation even with complex DtDs, either

at parse time or later once the document has been modified. The output

can be a simple SAX stream or and in-memory DOM like representations.

In this case one can use the built-in XPath and XPointer implementation

to select subnodes or ranges. A flexible Input/Output mechanism is

available, with existing HTTP and FTP modules and combined to an

URI library.

Update Information:

two patches for parsing problems raised by ficora

Change Log

* Mon Aug 10 2009 Daniel Veillard - 2.7.3-2 - two patches for parsing problems CVE-2009-2414 and CVE-2009-2416 * Mon Jan 19 2009 Daniel Veillard - 2.7.3-1.fc10 - new release 2.7.3 - limit default max size of text nodes - special parser mode for PHP - bug fixes and more compiler checks * Wed Nov 12 2008 Daniel Veillard - 2.7.2-2.fc10 - two patches for size overflows problems CVE-2008-4225 and CVE-2008-4226

References


[ 1 ] Bug #515195 - CVE-2009-2414 libxml, libxml2: Stack overflow by parsing root XML element DTD definition https://bugzilla.redhat.com/show_bug.cgi?id=515195 [ 2 ] Bug #515205 - CVE-2009-2416 libxml, libxml2: Pointer use-after-free flaws by parsing Notation and Enumeration attribute types https://bugzilla.redhat.com/show_bug.cgi?id=515205

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update libxml2' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: libxml2
Product: Fedora 10
Version: 2.7.3
Release: 2.fc10
URL:
Summary: Library providing XML and HTML support

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here