Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Ubuntu 12.04 LTS: USN-1500-2 Serious Vulnerability in Libxml2 Found

ubuntu
Calendar Grey May 22, 2012
Scroller Ubuntu
Ubuntu's USN-1450-1 addresses a vulnerability in the libraries that may cause unexpected behavior when processing corrupted data streams.
Applications using feedparser could be made to crash if they fetched a specially crafted feed.

Summary

Applications using feedparser could be made to crash if they fetched a

specially crafted feed.

Software Description:

- feedparser: Universal Feed Parser for Python

Details:

It was discovered that feedparser did not properly sanitize ENTITY

declarations in encoded fields. A remote attacker could exploit this to

cause a denial of service via memory exhaustion.

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu memory exhaustion feedparser

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 LTS:
  python-feedparser               5.1-0ubuntu3.1
  python3-feedparser              5.1-0ubuntu3.1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-1449-1

CVE-2012-2921

Severity
important
Lowest
Low
Medium
High
Critical

May 22, 2012

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu memory exhaustion feedparser

Package Information

https://launchpad.net/ubuntu/+source/feedparser/5.1-0ubuntu3.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.