Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 525
Alerts This Week
Warning Icon 1 525

Scientific Linux: CVE-2008-3529 Critical Buffer Overflow in Libxml2

Calendar Sep 11, 2008 • User Avatar LinuxSecurity Advisories
1 - 2 min read
Scientific Large Esm H446
Topics%20covered

Topics Covered

security advisory security update buffer overflow libxml2 scientific linux
Important: libxml2 security update 
Date: Thu, 11 Sep 2008 16:19:55 -0500
Reply-To: Troy Dawson 
Sender: Security Errata for Scientific Linux
 
From: Troy Dawson 
Subject: Security ERRATA for libxml2 on SL3.x, SL4.x, SL5.x i386/x86_64
Comments: To: "This email address is being protected from spambots. You need JavaScript enabled to view it."
 

Synopsis:	Important: libxml2 security update
Issue date:	2008-09-11
CVE Names:	CVE-2008-3529

A heap-based buffer overflow flaw was found in the way libxml2 handled long
XML entity names. If an application linked against libxml2 processed
untrusted malformed XML content, it could cause the application to crash
or, possibly, execute arbitrary code. (CVE-2008-3529)

SL 3.0.x

 SRPMS:
libxml2-2.5.10-13.src.rpm
 i386:
libxml2-2.5.10-13.i386.rpm
libxml2-devel-2.5.10-13.i386.rpm
libxml2-python-2.5.10-13.i386.rpm
 x86_64:
libxml2-2.5.10-13.i386.rpm
libxml2-2.5.10-13.x86_64.rpm
libxml2-devel-2.5.10-13.x86_64.rpm
libxml2-python-2.5.10-13.x86_64.rpm

SL 4.x

 SRPMS:
libxml2-2.6.16-12.5.src.rpm
 i386:
libxml2-2.6.16-12.5.i386.rpm
libxml2-devel-2.6.16-12.5.i386.rpm
libxml2-python-2.6.16-12.5.i386.rpm
 x86_64:
libxml2-2.6.16-12.5.i386.rpm
libxml2-2.6.16-12.5.x86_64.rpm
libxml2-devel-2.6.16-12.5.x86_64.rpm
libxml2-python-2.6.16-12.5.x86_64.rpm

SL 5.x

 SRPMS:
libxml2-2.6.26-2.1.2.6.src.rpm
 i386:
libxml2-2.6.26-2.1.2.6.i386.rpm
libxml2-devel-2.6.26-2.1.2.6.i386.rpm
libxml2-python-2.6.26-2.1.2.6.i386.rpm
 x86_64:
libxml2-2.6.26-2.1.2.6.i386.rpm
libxml2-2.6.26-2.1.2.6.x86_64.rpm
libxml2-devel-2.6.26-2.1.2.6.i386.rpm
libxml2-devel-2.6.26-2.1.2.6.x86_64.rpm
libxml2-python-2.6.26-2.1.2.6.x86_64.rpm

-Connie Sieh
-Troy Dawson