Gentoo: 202310-01 Urgent: OpenSSL Security Vulnerability Notification

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Gentoo Linux Security Advisory                           GLSA 200403-01
~                                            https://security.gentoo.org/

~  Severity: Normal
~     Title: Libxml2 URI Parsing Buffer Overflow Vulnerabilities
~      Date: March 06, 2004
~      Bugs: #42735
~        ID: 200403-01


Synopsis
=======
A buffer overflow has been discovered in libxml2 versions prior to
2.6.6 which may be exploited by an attacker allowing the execution of
arbitrary code.

==========
Yuuichi Teranishi discovered a flaw in libxml2 versions prior to 2.6.6.
When the libxml2 library fetches a remote resource via FTP or HTTP,
libxml2 uses parsing routines that can overflow a buffer caused by
improper bounds checking if they are passed a URL longer than 4096
bytes.

Impact
=====
If an attacker is able to exploit an application using libxml2 that
parses remote resources, then this flaw could be used to execute
arbitrary code.

Workaround
=========
No w...
Read the Full Advisory