Date:         Thu, 21 Aug 2008 16:25:21 -0500
Reply-To:     Troy Dawson 
Sender:       Security Errata for Scientific Linux
              
From:         Troy Dawson 
Subject:      Security ERRATA for libxml2 on SL3.x, SL4.x, SL5.x i386/x86_64
Comments: To: "scientific-linux-errata@fnal.gov"
          

Synopsis:	Moderate: libxml2 security update
Issue date:	2008-08-21
CVE Names:	CVE-2008-3281

A denial of service flaw was found in the way libxml2 processes certain
content. If an application linked against libxml2 processes malformed XML
content, it could cause the application to stop responding. (CVE-2008-3281)

SL 3.0.x

      SRPMS:
libxml2-2.5.10-10.src.rpm
      i386:
libxml2-2.5.10-10.i386.rpm
libxml2-devel-2.5.10-10.i386.rpm
libxml2-python-2.5.10-10.i386.rpm
      x86_64:
libxml2-2.5.10-10.i386.rpm
libxml2-2.5.10-10.x86_64.rpm
libxml2-devel-2.5.10-10.x86_64.rpm
libxml2-python-2.5.10-10.x86_64.rpm

SL 4.x

      SRPMS:
libxml2-2.6.16-12.2.src.rpm
      i386:
libxml2-2.6.16-12.2.i386.rpm
libxml2-devel-2.6.16-12.2.i386.rpm
libxml2-python-2.6.16-12.2.i386.rpm
      x86_64:
libxml2-2.6.16-12.2.i386.rpm
libxml2-2.6.16-12.2.x86_64.rpm
libxml2-devel-2.6.16-12.2.x86_64.rpm
libxml2-python-2.6.16-12.2.x86_64.rpm

SL 5.x

      SRPMS:
libxml2-2.6.26-2.1.2.3.src.rpm
      i386:
libxml2-2.6.26-2.1.2.3.i386.rpm
libxml2-devel-2.6.26-2.1.2.3.i386.rpm
libxml2-python-2.6.26-2.1.2.3.i386.rpm
      x86_64:
libxml2-2.6.26-2.1.2.3.i386.rpm
libxml2-2.6.26-2.1.2.3.x86_64.rpm
libxml2-devel-2.6.26-2.1.2.3.i386.rpm
libxml2-devel-2.6.26-2.1.2.3.x86_64.rpm
libxml2-python-2.6.26-2.1.2.3.x86_64.rpm

-Connie Sieh
-Troy Dawson