Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

Fedora 11: 2009-8580 Moderate: Libxml2 Parsing Issues Resolved

fedora
Calendar Grey August 15, 2009
Dist Fedora Esm H88
The recent update features a pair of patches targeting libxml2 parsing vulnerabilities related to CVE-2009-2414 and CVE-2009-2416.
two patches for parsing problems raised by Ficora

Summary

MinGW Windows libxml2 XML processing library.

Update Information:

two patches for parsing problems raised by Ficora

Topics%20covered

Topics Covered

security advisory update Fedora moderate severity libxml2 parsing issue minGW

Change Log

* Mon Aug 10 2009 Daniel Veillard - 2.7.3-2 - two patches for parsing problems CVE-2009-2414 and CVE-2009-2416 * Mon May 4 2009 Erik van Pienbroek - 2.7.3-1 - Update to 2.7.3 * Fri Apr 3 2009 Erik van Pienbroek - 2.7.2-9 - Fixed %defattr line - Added -static subpackage. Applications which want to link against this static library needs to add -DLIBXML_STATIC to the CFLAGS - This package shouldn't own %{_mingw32_libdir}/pkgconfig

References


[ 1 ] Bug #515195 - CVE-2009-2414 libxml, libxml2: Stack overflow by parsing root XML element DTD definition https://bugzilla.redhat.com/show_bug.cgi?id=515195 [ 2 ] Bug #515205 - CVE-2009-2416 libxml, libxml2: Pointer use-after-free flaws by parsing Notation and Enumeration attribute types https://bugzilla.redhat.com/show_bug.cgi?id=515205

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update mingw32-libxml2' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
important
Lowest
Low
Medium
High
Critical

Name: mingw32-libxml2
Product: Fedora 11
Version: 2.7.3
Release: 2.fc11
URL: https://gitlab.gnome.org/GNOME/libxml2/-/wikis/home
Summary: MinGW Windows libxml2 XML processing library

Topics%20covered

Topics Covered

security advisory update Fedora moderate severity libxml2 parsing issue minGW

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here