exploit the possibilities
Home Files News &[SERVICES_TAB]About Contact Add New

Mandriva Linux Security Advisory 2009-214

Mandriva Linux Security Advisory 2009-214
Posted Aug 24, 2009
Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2009-214 - A vulnerability was found in xmltok_impl.c (expat) that with specially crafted XML could be exploited and lead to a denial of service attack.

tags | advisory, denial of service
systems | linux, mandriva
advisories | CVE-2009-2625
SHA-256 | 8baa30d1ae51b2aee60f255fb0bd84170f9ca0c145d62c2ac452aed9110c5983

Mandriva Linux Security Advisory 2009-214

Change Mirror Download

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Advisory MDVSA-2009:214
http://www.mandriva.com/security/
_______________________________________________________________________

Package : python-celementtree
Date : August 23, 2009
Affected: 2008.1, 2009.0, 2009.1
_______________________________________________________________________

Problem Description:

A vulnerability was found in xmltok_impl.c (expat) that with
specially crafted XML could be exploited and lead to a denial of
service attack. Related to CVE-2009-2625.

This update fixes this vulnerability.
_______________________________________________________________________

References:

https://bugs.gentoo.org/show_bug.cgi?id=280615
_______________________________________________________________________

Updated Packages:

Mandriva Linux 2008.1:
0de8d49fc12ae83ec3e9c57d9ea194c1 2008.1/i586/python-celementtree-1.0.5-2.1mdv2008.1.i586.rpm
d20e7fba969cdea88b0f81b17bf82c0a 2008.1/SRPMS/python-celementtree-1.0.5-2.1mdv2008.1.src.rpm

Mandriva Linux 2008.1/X86_64:
9170e96b8163d79b976dc550ad36a2fe 2008.1/x86_64/python-celementtree-1.0.5-2.1mdv2008.1.x86_64.rpm
d20e7fba969cdea88b0f81b17bf82c0a 2008.1/SRPMS/python-celementtree-1.0.5-2.1mdv2008.1.src.rpm

Mandriva Linux 2009.0:
c98400bef6a5fd43644a68defb0685d2 2009.0/i586/python-celementtree-1.0.5-2.1mdv2009.0.i586.rpm
25cd8c8679882ffaabcd850dd639d364 2009.0/SRPMS/python-celementtree-1.0.5-2.1mdv2009.0.src.rpm

Mandriva Linux 2009.0/X86_64:
17795f99905af34bad76a8d2fc2b02eb 2009.0/x86_64/python-celementtree-1.0.5-2.1mdv2009.0.x86_64.rpm
25cd8c8679882ffaabcd850dd639d364 2009.0/SRPMS/python-celementtree-1.0.5-2.1mdv2009.0.src.rpm

Mandriva Linux 2009.1:
a6c4cef36fe185a2ccf0de9e94cba322 2009.1/i586/python-celementtree-1.0.5-3.1mdv2009.1.i586.rpm
0759b2367936a7efc9a271e7abcb9399 2009.1/SRPMS/python-celementtree-1.0.5-3.1mdv2009.1.src.rpm

Mandriva Linux 2009.1/X86_64:
a19806476081fad1366d393f1b8bf7c4 2009.1/x86_64/python-celementtree-1.0.5-3.1mdv2009.1.x86_64.rpm
0759b2367936a7efc9a271e7abcb9399 2009.1/SRPMS/python-celementtree-1.0.5-3.1mdv2009.1.src.rpm
_______________________________________________________________________

To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.

All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:

gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

You can view other update advisories for Mandriva Linux at:

http://www.mandriva.com/security/advisories

If you want to report vulnerabilities, please contact

security_(at)_mandriva.com
_______________________________________________________________________

Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iD8DBQFKkXtzmqjQ0CJFipgRAk+yAKCIk+YRzfgWyfqYo/mBNwlbXiMpbgCfV5Sm
HMRkPKhTZecGRUSKz5qcvXI=
=a3i9
-----END PGP SIGNATURE-----
Login or Register to add favorites

File Archive:

April 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Apr 1st
    10 Files
  • 2
    Apr 2nd
    26 Files
  • 3
    Apr 3rd
    40 Files
  • 4
    Apr 4th
    6 Files
  • 5
    Apr 5th
    26 Files
  • 6
    Apr 6th
    0 Files
  • 7
    Apr 7th
    0 Files
  • 8
    Apr 8th
    22 Files
  • 9
    Apr 9th
    14 Files
  • 10
    Apr 10th
    10 Files
  • 11
    Apr 11th
    13 Files
  • 12
    Apr 12th
    14 Files
  • 13
    Apr 13th
    0 Files
  • 14
    Apr 14th
    0 Files
  • 15
    Apr 15th
    30 Files
  • 16
    Apr 16th
    10 Files
  • 17
    Apr 17th
    22 Files
  • 18
    Apr 18th
    45 Files
  • 19
    Apr 19th
    8 Files
  • 20
    Apr 20th
    0 Files
  • 21
    Apr 21st
    0 Files
  • 22
    Apr 22nd
    11 Files
  • 23
    Apr 23rd
    68 Files
  • 24
    Apr 24th
    23 Files
  • 25
    Apr 25th
    0 Files
  • 26
    Apr 26th
    0 Files
  • 27
    Apr 27th
    0 Files
  • 28
    Apr 28th
    0 Files
  • 29
    Apr 29th
    0 Files
  • 30
    Apr 30th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close