AXSA:2008-277:03

Release date: 
Wednesday, October 29, 2008 - 19:25
Subject: 
libxml2-2.6.26-2.1.2.6.1AXS3
Affected Channels: 
Asianux Server 3 for x86_64
Asianux Server 3 for x86
Severity: 
High
Description: 

The XML C library was initially developed for the GNOME project. It is now used by many programs to load and save extensible data structures or manipulate any kind of XML files.
This library implements a number of existing standards related to markup languages, including the XML standard, name spaces in XML, XML Base, RFC 2396, XPath, XPointer, HTML4, XInclude, SGML catalogs, and XML catalogs. In most cases, libxml tries to implement the specification in a rather strict way. To some extent, it provides support for the following specifications, but does not claim to implement them: DOM, FTP client, HTTP client, and SAX.
The library also supports RelaxNG. Support for W3C XML Schemas is in progress.
CVE-2008-3529: Heap-based buffer overflow in the xmlParseAttValueComplex function in parser.c in libxml2 before 2.7.0 allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long XML entity name.

Solution: 

Update packages

Additional Info: 

N/A

Download: 

Asianux Server 3 for x86
  1. libxml2-2.6.26-2.1.2.6.1AXS3.i386.rpm
    MD5: faf63f8f54256c9731c253f2ee0f862e
    SHA-256: 1fb5e8651244ecba507e433c173ad9bd6b3e4aa8157aedd6e589672af9756e02
    Size: 799.33 kB
  2. libxml2-devel-2.6.26-2.1.2.6.1AXS3.i386.rpm
    MD5: 51c8a91065505b0fb35e7affb3c0e5dd
    SHA-256: 6f1ffceb66d6632dc99e058b3caf17be7bd3bbaa266d4bee64f5054e946c78eb
    Size: 2.13 MB
  3. libxml2-python-2.6.26-2.1.2.6.1AXS3.i386.rpm
    MD5: da2b795c44539cbcbc1b50829221414c
    SHA-256: 31bf4c9f5b5197e35e56724bcf2ef2e7b875a4599a1d3305eada059c12984819
    Size: 698.67 kB

Asianux Server 3 for x86_64
  1. libxml2-2.6.26-2.1.2.6.1AXS3.x86_64.rpm
    MD5: 832b39908e648ed66671bb593d4010de
    SHA-256: 532066ee761348caa41ab2b05a8aa88f804259b4417134c2ca8cc86ca09f3aec
    Size: 814.36 kB
  2. libxml2-devel-2.6.26-2.1.2.6.1AXS3.x86_64.rpm
    MD5: fc12c99d5d2677131ceec02e6135503e
    SHA-256: b963408e16f50abd8264ecc5d7204caa9218b56a2aa410202527051962b6623d
    Size: 2.17 MB
  3. libxml2-python-2.6.26-2.1.2.6.1AXS3.x86_64.rpm
    MD5: 4f20a1c7c262e2faf16ca4a0eb8b5ff9
    SHA-256: 4a294b19749e3456f02379803a8de97ab0447abb4cedc047686c8490af6e137d
    Size: 709.03 kB
Copyright 2007-2022 Cybertrust Japan Co., Ltd. All rights reserved.