Scientific Linux: January 2008 Advisory for libxml2 Denial of Service

Date: Mon, 14 Jan 2008 15:05:16 -0600
Reply-To: Troy Dawson 
Sender: Security Errata for Scientific Linux
 
From: Troy Dawson 
Subject: Security ERRATA for on SL3.x, SL4.x, SL5,x i386/x86_64
Comments: To: This email address is being protected from spambots. You need JavaScript enabled to view it.

Synopsis:	Important: libxml2 security update
Issue date:	2008-01-11
CVE Names:	CVE-2007-6284

A denial of service flaw was found in the way libxml2 processes certain
content. If an application linked against libxml2 processes malformed XML
content, it could cause the application to stop responding. (CVE-2007-6284)

SL 3.0.x

 SRPMS:
libxml2-2.5.10-8.src.rpm
 i386:
libxml2-2.5.10-8.i386.rpm
libxml2-devel-2.5.10-8.i386.rpm
libxml2-python-2.5.10-8.i386.rpm
 x86_64:
libxml2-2.5.10-8.i386.rpm
libxml2-2.5.10-8.x86_64.rpm
libxml2-devel-2.5.10-8.x86_64.rpm
libxml2-python-2.5.10-8.x86_64.rpm

SL 4.x

 SRPMS:
libxml2-2.6.16-10.1.src.rpm
 i386:
libxml2-2.6.16-10.1.i386.rpm
libxml2-devel-2.6.16-10.1.i386.rpm
libxml2-python-2.6.16-10.1.i386.rpm
 x86_64:
libxml2-2.6.16-10.1.i386.rpm
libxml2-2.6.16-10.1.x86_64.rpm
libxml2-devel-2.6.16-10.1.x86_64.rpm
libxml2-python-2.6.16-10.1.x86_64.rpm

SL 5.x

 SRPMS:
libxml2-2.6.26-2.1.2.1.src.rpm
 i386:
libxml2-2.6.26-2.1.2.1.i386.rpm
libxml2-devel-2.6.26-2.1.2.1.i386.rpm
libxml2-python-2.6.26-2.1.2.1.i386.rpm
 x86_64:
libxml2-2.6.26-2.1.2.1.i386.rpm
libxml2-2.6.26-2.1.2.1.x86_64.rpm
libxml2-devel-2.6.26-2.1.2.1.i386.rpm
libxml2-devel-2.6.26-2.1.2.1.x86_64.rpm
libxml2-python-2.6.26-2.1.2.1.x86_64.rpm

-Connie Sieh
-Troy Dawson