Stay Secure with the Latest Linux Advisories

security advisorydenial of serviceUbuntu

Ubuntu 12.04 LTS: USN-1500-2 Serious Vulnerability in Libxml2 Found

Applications using feedparser could be made to crash if they fetched a specially crafted feed.. =========================================================================Ubuntu Security Notice USN-1449-1 May 22, 2012 feedparser vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 12.04 LTS Summary: Applications using feedparser could be made to crash if they fetched a specially crafted feed. Software Description: - feedparser: Universal Feed Parser for Python Details: It was discovered that feedparser did not properly sanitize ENTITY declarations in encoded fields. A remote attacker could exploit this to cause a denial of service via memory exhaustion. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 12.04 LTS: python-feedparser 5.1-0ubuntu3.1 python3-feedparser 5.1-0ubuntu3.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-1449-1 CVE-2012-2921 Package Information: https://launchpad.net/ubuntu/+source/feedparser/5.1-0ubuntu3.1 . Ubuntu's USN-1450-1 addresses a vulnerability in the libraries that may cause unexpected behavior when processing corrupted data streams.. feedparser vulnerability, Ubuntu update, application crash. . Severity: Important. LinuxSecurity.com Team

May 22, 2012 •Important Ubuntu