Mageia alert MGASA-2013-0218 (libxml2)

From:
    	     
 
Mageia Updates <buildsystem-daemon@mageia.org> 
To:
    	     
 
updates-announce@ml.mageia.org 
Subject:
    	     
 
[updates-announce] MGASA-2013-0218: Updated libxml2 packages fix
 CVE-2013-2877 
Date:
    	     
 
Sun, 21 Jul 2013 10:41:57 +0200
Message-ID:
    	     
 
<20130721084157.A703841D56@valstar.mageia.org>
Archive-link:
    	     
 
Article, Thread
              
MGASA-2013-0218 - Updated libxml2 packages fix CVE-2013-2877

Publication date: 21 Jul 2013
URL: http://advisories.mageia.org/MGASA-2013-0218.html
Type: security
Affected Mageia releases: 2, 3
CVE: CVE-2013-2877

Description:
It was discovered that libxml2 incorrectly handled documents that end
abruptly. If a user or automated system were tricked into opening a
specially crafted document, an attacker could possibly cause libxml2 to
crash, resulting in a denial of service (CVE-2013-2877).

References:
- http://www.ubuntu.com/usn/usn-1904-1/
- https://bugs.mageia.org/show_bug.cgi?id=10774
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2877

SRPMS:
- 3/core/libxml2-2.9.0-5.2.mga3
- 2/core/libxml2-2.7.8-14.20120229.8.mga2