bugtraq - [ MDVSA-2012:126 ] libxml2

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Wed, 08 Aug 2012 13:55:00 +0200
From: security@...driva.com
To: bugtraq@...urityfocus.com
Subject: [ MDVSA-2012:126 ] libxml2

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 _______________________________________________________________________

 Mandriva Linux Security Advisory                         MDVSA-2012:126
 http://www.mandriva.com/security/
 _______________________________________________________________________

 Package : libxml2
 Date    : August 6, 2012
 Affected: 2011., Enterprise Server 5.0
 _______________________________________________________________________

 Problem Description:

 A vulnerability was found and corrected in libxml2:
 
 Multiple integer overflows in libxml2, on 64-bit Linux platforms
 allow remote attackers to cause a denial of service or possibly have
 unspecified other impact via unknown vectors (CVE-2012-2807).
 
 The updated packages have been patched to correct this issue.
 _______________________________________________________________________

 References:

 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2807
 _______________________________________________________________________

 Updated Packages:

 Mandriva Linux 2011:
 a34f4247ab539136e16916c83bd2758f  2011/i586/libxml2_2-2.7.8-6.7-mdv2011.0.i586.rpm
 40ddd749a6038d044c71f890f0782a1f  2011/i586/libxml2-devel-2.7.8-6.7-mdv2011.0.i586.rpm
 d2fc8917666fab027a2debe7daf6897c  2011/i586/libxml2-python-2.7.8-6.7-mdv2011.0.i586.rpm
 79a5613b8cf588d42c97872da442df83  2011/i586/libxml2-utils-2.7.8-6.7-mdv2011.0.i586.rpm 
 d19ff2c9c701f17de1578652c9678d53  2011/SRPMS/libxml2-2.7.8-6.7.src.rpm

 Mandriva Linux 2011/X86_64:
 efcc5f822358faed7ae87514348ad705  2011/x86_64/lib64xml2_2-2.7.8-6.7-mdv2011.0.x86_64.rpm
 81d48c94ec1c3a29928b3752ba8b2c51  2011/x86_64/lib64xml2-devel-2.7.8-6.7-mdv2011.0.x86_64.rpm
 32566f11c13d8f0fda2fa89da771bc8c  2011/x86_64/libxml2-python-2.7.8-6.7-mdv2011.0.x86_64.rpm
 0c58644d640f2106a285daa42c3d4830  2011/x86_64/libxml2-utils-2.7.8-6.7-mdv2011.0.x86_64.rpm 
 d19ff2c9c701f17de1578652c9678d53  2011/SRPMS/libxml2-2.7.8-6.7.src.rpm

 Mandriva Enterprise Server 5:
 e8095d67b008da5b2e3bef38fd9e0290  mes5/i586/libxml2_2-2.7.1-1.13mdvmes5.2.i586.rpm
 99bf4be8f8709419c12e17e620c6a8d1  mes5/i586/libxml2-devel-2.7.1-1.13mdvmes5.2.i586.rpm
 c19f10f26c864bf655bc26dadb4646a0  mes5/i586/libxml2-python-2.7.1-1.13mdvmes5.2.i586.rpm
 be4bf5c770d10ff5234df1ef477a259a  mes5/i586/libxml2-utils-2.7.1-1.13mdvmes5.2.i586.rpm 
 50cf43a948bc80027049d0d47f12db8a  mes5/SRPMS/libxml2-2.7.1-1.13mdvmes5.2.src.rpm

 Mandriva Enterprise Server 5/X86_64:
 6069aa4860687f07f818a0545dfcb9ac  mes5/x86_64/lib64xml2_2-2.7.1-1.13mdvmes5.2.x86_64.rpm
 9c459ffe61c33b7196381da469012d9c  mes5/x86_64/lib64xml2-devel-2.7.1-1.13mdvmes5.2.x86_64.rpm
 747e3b8ce1f6e8b4986c21dbdce9cdc2  mes5/x86_64/libxml2-python-2.7.1-1.13mdvmes5.2.x86_64.rpm
 9d3e778e84fc3622a82323fafb7d301f  mes5/x86_64/libxml2-utils-2.7.1-1.13mdvmes5.2.x86_64.rpm 
 50cf43a948bc80027049d0d47f12db8a  mes5/SRPMS/libxml2-2.7.1-1.13mdvmes5.2.src.rpm
 _______________________________________________________________________

 To upgrade automatically use MandrivaUpdate or urpmi.  The verification
 of md5 checksums and GPG signatures is performed automatically for you.

 All packages are signed by Mandriva for security.  You can obtain the
 GPG public key of the Mandriva Security Team by executing:

  gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

 You can view other update advisories for Mandriva Linux at:

  http://www.mandriva.com/security/advisories

 If you want to report vulnerabilities, please contact

  security_(at)_mandriva.com
 _______________________________________________________________________

 Type Bits/KeyID     Date       User ID
 pub  1024D/22458A98 2000-07-10 Mandriva Security Team
  <security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iD8DBQFQIia3mqjQ0CJFipgRAleVAKCYL1PC5T2o/kMKPPh6IOfx5ebvwgCeMELK
A8Xc87OB8jkInvG00P6TBB4=
=bWqY
-----END PGP SIGNATURE-----