Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Scientific Linux: libxml2 Security Update Release for Multiple Versions

Calendar Nov 18, 2008 • User Avatar LinuxSecurity Advisories
2 - 3 min read
Scientific Large Esm H446
Topics%20covered

Topics Covered

security advisory denial of service buffer overflow libxml2 scientific linux
Important: libxml2 security update 
Date: Tue, 18 Nov 2008 14:36:13 -0600
Reply-To: Troy Dawson 
Sender: Security Errata for Scientific Linux
 
From: Troy Dawson 
Subject: Security ERRATA for libxml2 on SL3.x, SL4.x, SL5.x i386/x86_64
Comments: To: "This email address is being protected from spambots. You need JavaScript enabled to view it."
 

Synopsis:	Important: libxml2 security update
Issue date:	2008-11-17
CVE Names:	CVE-2008-4225 CVE-2008-4226

An integer overflow flaw causing a heap-based buffer overflow was found in
the libxml2 XML parser. If an application linked against libxml2 processed
untrusted, malformed XML content, it could cause the application to crash
or, possibly, execute arbitrary code. (CVE-2008-4226)

A denial of service flaw was discovered in the libxml2 XML parser. If an
application linked against libxml2 processed untrusted, malformed XML
content, it could cause the application to enter an infinite loop.
(CVE-2008-4225)

SL 3.0.x

 SRPMS:
libxml2-2.5.10-14.src.rpm
 i386:
libxml2-2.5.10-14.i386.rpm
libxml2-devel-2.5.10-14.i386.rpm
libxml2-python-2.5.10-14.i386.rpm
 x86_64:
libxml2-2.5.10-14.i386.rpm
libxml2-2.5.10-14.x86_64.rpm
libxml2-devel-2.5.10-14.x86_64.rpm
libxml2-python-2.5.10-14.x86_64.rpm

SL 4.x

 SRPMS:
libxml2-2.6.16-12.6.src.rpm
 i386:
libxml2-2.6.16-12.6.i386.rpm
libxml2-devel-2.6.16-12.6.i386.rpm
libxml2-python-2.6.16-12.6.i386.rpm
 x86_64:
libxml2-2.6.16-12.6.i386.rpm
libxml2-2.6.16-12.6.x86_64.rpm
libxml2-devel-2.6.16-12.6.x86_64.rpm
libxml2-python-2.6.16-12.6.x86_64.rpm

SL 5.x

 SRPMS:
libxml2-2.6.26-2.1.2.7.src.rpm
 i386:
libxml2-2.6.26-2.1.2.7.i386.rpm
libxml2-devel-2.6.26-2.1.2.7.i386.rpm
libxml2-python-2.6.26-2.1.2.7.i386.rpm
 x86_64:
libxml2-2.6.26-2.1.2.7.i386.rpm
libxml2-2.6.26-2.1.2.7.x86_64.rpm
libxml2-devel-2.6.26-2.1.2.7.i386.rpm
libxml2-devel-2.6.26-2.1.2.7.x86_64.rpm
libxml2-python-2.6.26-2.1.2.7.x86_64.rpm

-Connie Sieh
-Troy Dawson