libxml2-2.7.6-12.1.0.1.AXS4
エラータID: AXSA:2013-166:02
Release date:
Tuesday, March 12, 2013 - 21:40
Subject:
libxml2-2.7.6-12.1.0.1.AXS4
Affected Channels:
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity:
High
Description:
This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX stream or and in-memory DOM like representations. In this case one can use the built-in XPath and XPointer implementation to select subnodes or ranges. A flexible Input/Output mechanism is available, with existing HTTP and FTP modules and combined to an URI library.
Security issues fixed with this release:
• CVE-2013-0338
No information available at the time of writing, please refer the CVE link below.
Solution:
Update packages.
CVEs:
CVE-2013-0338
libxml2 2.9.0 and earlier allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via an XML file containing an entity declaration with long replacement text and many references to this entity, aka "internal entity expansion" with linear complexity.
libxml2 2.9.0 and earlier allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via an XML file containing an entity declaration with long replacement text and many references to this entity, aka "internal entity expansion" with linear complexity.
Additional Info:
N/A
Download:
SRPMS
- libxml2-2.7.6-12.1.0.1.AXS4.src.rpm
MD5: bcd1e1da40901364997c3d98741addc9
SHA-256: 0b2d46e21ddb4df8ad52c35968fce79b274bdcf30f1e474f7628f5a1cc44a100
Size: 4.66 MB
Asianux Server 4 for x86
- libxml2-2.7.6-12.1.0.1.AXS4.i686.rpm
MD5: 1ca12cfd1c32446a33474ae19806c777
SHA-256: 59b5f41f257e8bd13b342e3e71940439ba39ee5549bbe1011a88bb3793c397e0
Size: 799.43 kB - libxml2-devel-2.7.6-12.1.0.1.AXS4.i686.rpm
MD5: 505612dca6f883379ad301ac8ae903c5
SHA-256: b122193b88af2a52550d56ffb50cf821a32be444d39fd537c0bd3ccaf9b8f874
Size: 1.06 MB - libxml2-python-2.7.6-12.1.0.1.AXS4.i686.rpm
MD5: cf0ddd465de3c8cd51879249b321392f
SHA-256: 0294911dde577db694f759b59d704c67bb13f55d0b3f23289a0fb614a6137a90
Size: 313.85 kB
Asianux Server 4 for x86_64
- libxml2-2.7.6-12.1.0.1.AXS4.x86_64.rpm
MD5: 34ed936f05c60f512b72a0986acba45e
SHA-256: 99e5dc7fa87502f5d8c2f0188ec7a780e0d9c144eef80f463ea67eb928f9a677
Size: 798.02 kB - libxml2-devel-2.7.6-12.1.0.1.AXS4.x86_64.rpm
MD5: 4e29d5cdbd03cfbfd28830e934cd285a
SHA-256: ecf1daf8fbe4de362bfafdbb9937e6c92a1047b3f3b277bad43cd99011a146e4
Size: 1.06 MB - libxml2-python-2.7.6-12.1.0.1.AXS4.x86_64.rpm
MD5: 51a67f7ac4ae86748ad76a233f76a432
SHA-256: 4da660246de00276a9d895e55ebfd37a9ac543a0e63885fbaf670cd79af5045e
Size: 320.32 kB - libxml2-2.7.6-12.1.0.1.AXS4.i686.rpm
MD5: 1ca12cfd1c32446a33474ae19806c777
SHA-256: 59b5f41f257e8bd13b342e3e71940439ba39ee5549bbe1011a88bb3793c397e0
Size: 799.43 kB - libxml2-devel-2.7.6-12.1.0.1.AXS4.i686.rpm
MD5: 505612dca6f883379ad301ac8ae903c5
SHA-256: b122193b88af2a52550d56ffb50cf821a32be444d39fd537c0bd3ccaf9b8f874
Size: 1.06 MB