exploit the possibilities

Mandriva Linux Security Advisory 2012-109

Mandriva Linux Security Advisory 2012-109
Posted Jul 23, 2012
Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2012-109 - The XSL implementation in libxslt allows remote attackers to cause a denial of service via unspecified vectors. The updated packages have been patched to correct this issue.

tags | advisory, remote, denial of service
systems | linux, mandriva
advisories | CVE-2012-2825
MD5 | aafc52bea8d1aa208bf1e93da242e41d

Mandriva Linux Security Advisory 2012-109

Change Mirror Download
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Advisory MDVSA-2012:109
http://www.mandriva.com/security/
_______________________________________________________________________

Package : libxslt
Date : July 23, 2012
Affected: 2011., Enterprise Server 5.0
_______________________________________________________________________

Problem Description:

A vulnerability has been discovered and corrected in libxslt:

The XSL implementation in libxslt allows remote attackers to cause a
denial of service (incorrect read operation) via unspecified vectors
(CVE-2012-2825).

The updated packages have been patched to correct this issue.
_______________________________________________________________________

References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2825
_______________________________________________________________________

Updated Packages:

Mandriva Linux 2011:
5478c30ece46a9790270b60d7e596d97 2011/i586/libxslt1-1.1.26-4.2-mdv2011.0.i586.rpm
1c36a1e2dbbce726b348bdfc7be0cf00 2011/i586/libxslt-devel-1.1.26-4.2-mdv2011.0.i586.rpm
c6e1622a15d00cfb756552e6d460427d 2011/i586/python-libxslt-1.1.26-4.2-mdv2011.0.i586.rpm
3a64731760598b368609c318c57d897f 2011/i586/xsltproc-1.1.26-4.2-mdv2011.0.i586.rpm
d5b59fa350c0a3b58b46ea7d0f2d77cf 2011/SRPMS/libxslt-1.1.26-4.2.src.rpm

Mandriva Linux 2011/X86_64:
cf3431f296bfb9ed3e819d996ece1285 2011/x86_64/lib64xslt1-1.1.26-4.2-mdv2011.0.x86_64.rpm
f0b2203f52383de39d57acf2ef616e91 2011/x86_64/lib64xslt-devel-1.1.26-4.2-mdv2011.0.x86_64.rpm
0bf58a5c43e2a00252abbcd9614ed249 2011/x86_64/python-libxslt-1.1.26-4.2-mdv2011.0.x86_64.rpm
79b4f442e57ae917cc10f62496f7c157 2011/x86_64/xsltproc-1.1.26-4.2-mdv2011.0.x86_64.rpm
d5b59fa350c0a3b58b46ea7d0f2d77cf 2011/SRPMS/libxslt-1.1.26-4.2.src.rpm

Mandriva Enterprise Server 5:
9812c69006dc5f1a70343f9ddf6782fb mes5/i586/libxslt1-1.1.24-3.2mdvmes5.2.i586.rpm
9136b7990be6055a73b04442ca43c502 mes5/i586/libxslt-devel-1.1.24-3.2mdvmes5.2.i586.rpm
449579ced2ab4f715ab7e7ff3285c311 mes5/i586/libxslt-proc-1.1.24-3.2mdvmes5.2.i586.rpm
7bf549969ace3d5a4e00a2755f062dec mes5/i586/python-libxslt-1.1.24-3.2mdvmes5.2.i586.rpm
36713ea60977852e9da45fcac1cd65fe mes5/SRPMS/libxslt-1.1.24-3.2mdvmes5.2.src.rpm

Mandriva Enterprise Server 5/X86_64:
c7a3d34d5f3690c98cf56e81dc19c11d mes5/x86_64/lib64xslt1-1.1.24-3.2mdvmes5.2.x86_64.rpm
cf4b8b1e4df4425a51cf0ffc593f5038 mes5/x86_64/lib64xslt-devel-1.1.24-3.2mdvmes5.2.x86_64.rpm
1f00c1a5519ecb8e9d77c9a4bfd002bb mes5/x86_64/libxslt-proc-1.1.24-3.2mdvmes5.2.x86_64.rpm
d1b80cce3d860813a2deb3dd9210a26e mes5/x86_64/python-libxslt-1.1.24-3.2mdvmes5.2.x86_64.rpm
36713ea60977852e9da45fcac1cd65fe mes5/SRPMS/libxslt-1.1.24-3.2mdvmes5.2.src.rpm
_______________________________________________________________________

To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.

All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:

gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

You can view other update advisories for Mandriva Linux at:

http://www.mandriva.com/security/advisories

If you want to report vulnerabilities, please contact

security_(at)_mandriva.com
_______________________________________________________________________

Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iD8DBQFQDUcimqjQ0CJFipgRAr6AAKDEE/LN+SMYOh664q7Cqt2mwvkWeACguH08
aWQk6J0i7d19MsDlSF3V2Ec=
=iUm3
-----END PGP SIGNATURE-----


Comments

RSS Feed Subscribe to this comment feed

No comments yet, be the first!

Login or Register to post a comment

File Archive:

June 2019

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Jun 1st
    1 Files
  • 2
    Jun 2nd
    2 Files
  • 3
    Jun 3rd
    19 Files
  • 4
    Jun 4th
    21 Files
  • 5
    Jun 5th
    15 Files
  • 6
    Jun 6th
    12 Files
  • 7
    Jun 7th
    11 Files
  • 8
    Jun 8th
    1 Files
  • 9
    Jun 9th
    1 Files
  • 10
    Jun 10th
    15 Files
  • 11
    Jun 11th
    15 Files
  • 12
    Jun 12th
    15 Files
  • 13
    Jun 13th
    8 Files
  • 14
    Jun 14th
    16 Files
  • 15
    Jun 15th
    2 Files
  • 16
    Jun 16th
    1 Files
  • 17
    Jun 17th
    18 Files
  • 18
    Jun 18th
    15 Files
  • 19
    Jun 19th
    22 Files
  • 20
    Jun 20th
    14 Files
  • 21
    Jun 21st
    0 Files
  • 22
    Jun 22nd
    0 Files
  • 23
    Jun 23rd
    0 Files
  • 24
    Jun 24th
    0 Files
  • 25
    Jun 25th
    0 Files
  • 26
    Jun 26th
    0 Files
  • 27
    Jun 27th
    0 Files
  • 28
    Jun 28th
    0 Files
  • 29
    Jun 29th
    0 Files
  • 30
    Jun 30th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2019 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close