what you don't know can hurt you

Mandriva Linux Security Advisory 2012-126

Mandriva Linux Security Advisory 2012-126
Posted Aug 8, 2012
Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2012-126 - Multiple integer overflows in libxml2, on 64-bit Linux platforms allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. The updated packages have been patched to correct this issue.

tags | advisory, remote, denial of service, overflow
systems | linux, mandriva
advisories | CVE-2012-2807
MD5 | e9cd2acc91c30a5965909ce6d2d552ce

Mandriva Linux Security Advisory 2012-126

Change Mirror Download
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Advisory MDVSA-2012:126
http://www.mandriva.com/security/
_______________________________________________________________________

Package : libxml2
Date : August 6, 2012
Affected: 2011., Enterprise Server 5.0
_______________________________________________________________________

Problem Description:

A vulnerability was found and corrected in libxml2:

Multiple integer overflows in libxml2, on 64-bit Linux platforms
allow remote attackers to cause a denial of service or possibly have
unspecified other impact via unknown vectors (CVE-2012-2807).

The updated packages have been patched to correct this issue.
_______________________________________________________________________

References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2807
_______________________________________________________________________

Updated Packages:

Mandriva Linux 2011:
a34f4247ab539136e16916c83bd2758f 2011/i586/libxml2_2-2.7.8-6.7-mdv2011.0.i586.rpm
40ddd749a6038d044c71f890f0782a1f 2011/i586/libxml2-devel-2.7.8-6.7-mdv2011.0.i586.rpm
d2fc8917666fab027a2debe7daf6897c 2011/i586/libxml2-python-2.7.8-6.7-mdv2011.0.i586.rpm
79a5613b8cf588d42c97872da442df83 2011/i586/libxml2-utils-2.7.8-6.7-mdv2011.0.i586.rpm
d19ff2c9c701f17de1578652c9678d53 2011/SRPMS/libxml2-2.7.8-6.7.src.rpm

Mandriva Linux 2011/X86_64:
efcc5f822358faed7ae87514348ad705 2011/x86_64/lib64xml2_2-2.7.8-6.7-mdv2011.0.x86_64.rpm
81d48c94ec1c3a29928b3752ba8b2c51 2011/x86_64/lib64xml2-devel-2.7.8-6.7-mdv2011.0.x86_64.rpm
32566f11c13d8f0fda2fa89da771bc8c 2011/x86_64/libxml2-python-2.7.8-6.7-mdv2011.0.x86_64.rpm
0c58644d640f2106a285daa42c3d4830 2011/x86_64/libxml2-utils-2.7.8-6.7-mdv2011.0.x86_64.rpm
d19ff2c9c701f17de1578652c9678d53 2011/SRPMS/libxml2-2.7.8-6.7.src.rpm

Mandriva Enterprise Server 5:
e8095d67b008da5b2e3bef38fd9e0290 mes5/i586/libxml2_2-2.7.1-1.13mdvmes5.2.i586.rpm
99bf4be8f8709419c12e17e620c6a8d1 mes5/i586/libxml2-devel-2.7.1-1.13mdvmes5.2.i586.rpm
c19f10f26c864bf655bc26dadb4646a0 mes5/i586/libxml2-python-2.7.1-1.13mdvmes5.2.i586.rpm
be4bf5c770d10ff5234df1ef477a259a mes5/i586/libxml2-utils-2.7.1-1.13mdvmes5.2.i586.rpm
50cf43a948bc80027049d0d47f12db8a mes5/SRPMS/libxml2-2.7.1-1.13mdvmes5.2.src.rpm

Mandriva Enterprise Server 5/X86_64:
6069aa4860687f07f818a0545dfcb9ac mes5/x86_64/lib64xml2_2-2.7.1-1.13mdvmes5.2.x86_64.rpm
9c459ffe61c33b7196381da469012d9c mes5/x86_64/lib64xml2-devel-2.7.1-1.13mdvmes5.2.x86_64.rpm
747e3b8ce1f6e8b4986c21dbdce9cdc2 mes5/x86_64/libxml2-python-2.7.1-1.13mdvmes5.2.x86_64.rpm
9d3e778e84fc3622a82323fafb7d301f mes5/x86_64/libxml2-utils-2.7.1-1.13mdvmes5.2.x86_64.rpm
50cf43a948bc80027049d0d47f12db8a mes5/SRPMS/libxml2-2.7.1-1.13mdvmes5.2.src.rpm
_______________________________________________________________________

To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.

All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:

gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

You can view other update advisories for Mandriva Linux at:

http://www.mandriva.com/security/advisories

If you want to report vulnerabilities, please contact

security_(at)_mandriva.com
_______________________________________________________________________

Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iD8DBQFQIia3mqjQ0CJFipgRAleVAKCYL1PC5T2o/kMKPPh6IOfx5ebvwgCeMELK
A8Xc87OB8jkInvG00P6TBB4=
=bWqY
-----END PGP SIGNATURE-----


Comments

RSS Feed Subscribe to this comment feed

No comments yet, be the first!

Login or Register to post a comment

File Archive:

September 2019

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Sep 1st
    1 Files
  • 2
    Sep 2nd
    38 Files
  • 3
    Sep 3rd
    30 Files
  • 4
    Sep 4th
    15 Files
  • 5
    Sep 5th
    12 Files
  • 6
    Sep 6th
    17 Files
  • 7
    Sep 7th
    3 Files
  • 8
    Sep 8th
    1 Files
  • 9
    Sep 9th
    24 Files
  • 10
    Sep 10th
    22 Files
  • 11
    Sep 11th
    22 Files
  • 12
    Sep 12th
    15 Files
  • 13
    Sep 13th
    5 Files
  • 14
    Sep 14th
    0 Files
  • 15
    Sep 15th
    0 Files
  • 16
    Sep 16th
    0 Files
  • 17
    Sep 17th
    0 Files
  • 18
    Sep 18th
    0 Files
  • 19
    Sep 19th
    0 Files
  • 20
    Sep 20th
    0 Files
  • 21
    Sep 21st
    0 Files
  • 22
    Sep 22nd
    0 Files
  • 23
    Sep 23rd
    0 Files
  • 24
    Sep 24th
    0 Files
  • 25
    Sep 25th
    0 Files
  • 26
    Sep 26th
    0 Files
  • 27
    Sep 27th
    0 Files
  • 28
    Sep 28th
    0 Files
  • 29
    Sep 29th
    0 Files
  • 30
    Sep 30th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2019 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close