| From: |
| Marc Deslauriers <marc.deslauriers@canonical.com> |
| To: |
| ubuntu-security-announce@lists.ubuntu.com |
| Subject: |
| [USN-1153-1] libxml2 vulnerability |
| Date: |
| Thu, 16 Jun 2011 14:02:09 -0400 |
| Message-ID: |
| <1308247329.2600.89.camel@mdlinux> |
| Archive-link: |
| Article, Thread
|
==========================================================================
Ubuntu Security Notice USN-1153-1
June 16, 2011
libxml2 vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 11.04
- Ubuntu 10.10
- Ubuntu 10.04 LTS
- Ubuntu 8.04 LTS
Summary:
libxml2 could be made to crash or run programs as your login if it opened a
specially crafted file.
Software Description:
- libxml2: GNOME XML library
Details:
Chris Evans discovered that libxml2 incorrectly handled memory allocation.
If an application using libxml2 opened a specially crafted XML file, an
attacker could cause a denial of service or possibly execute code as the
user invoking the program.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 11.04:
libxml2 2.7.8.dfsg-2ubuntu0.1
Ubuntu 10.10:
libxml2 2.7.7.dfsg-4ubuntu0.2
Ubuntu 10.04 LTS:
libxml2 2.7.6.dfsg-1ubuntu1.2
Ubuntu 8.04 LTS:
libxml2 2.6.31.dfsg-2ubuntu1.6
After a standard system update you need to restart your session to make
all the necessary changes.
References:
CVE-2011-1944
Package Information:
https://launchpad.net/ubuntu/+source/libxml2/2.7.8.dfsg-2...
https://launchpad.net/ubuntu/+source/libxml2/2.7.7.dfsg-4...
https://launchpad.net/ubuntu/+source/libxml2/2.7.6.dfsg-1...
https://launchpad.net/ubuntu/+source/libxml2/2.6.31.dfsg-...
--
ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/ubuntu-security...
(
Log in to post comments)