libxml2-2.6.26-2.1.25.0.1.AXS3

エラータID: AXSA:2014-830:01

Release date: 
Wednesday, December 10, 2014 - 18:10
Subject: 
libxml2-2.6.26-2.1.25.0.1.AXS3
Affected Channels: 
Asianux Server 3 for x86_64
Asianux Server 3 for x86
Severity: 
Moderate
Description: 

Description :
This library allows to manipulate XML files. It includes support
to read, modify and write XML and HTML files. There is DTDs support
this includes parsing and validation even with complex DtDs, either
at parse time or later once the document has been modified. The output
can be a simple SAX stream or and in-memory DOM like representations.
In this case one can use the built-in XPath and XPointer implementation
to select subnodes or ranges. A flexible Input/Output mechanism is
available, with existing HTTP and FTP modules and combined to an
URI library.

Security issues fixed with this release:

CVE-2014-3660
parser.c in libxml2 before 2.9.2 does not properly prevent entity expansion even when entity substitution has been disabled, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted XML document containing a large number of nested entity references, a variant of the "billion laughs" attack.

Solution: 

Update package.

Additional Info: 

N/A

Download: 

SRPMS
  1. libxml2-2.6.26-2.1.25.0.1.AXS3.src.rpm
    MD5: 4921422a4ea0c2c0073939a3dd6254d3
    SHA-256: 2287601e0f23f0e05367a66531d4c1dfb751eac4100e79653609688143562fc0
    Size: 4.38 MB

Asianux Server 3 for x86
  1. libxml2-2.6.26-2.1.25.0.1.AXS3.i386.rpm
    MD5: 9e48e6831d9674fab32426851d07e514
    SHA-256: 6ddfbf4d7003f3286a79ccb8bea2258417c3aa6c231076252bcea33ccb94d32e
    Size: 799.38 kB
  2. libxml2-devel-2.6.26-2.1.25.0.1.AXS3.i386.rpm
    MD5: 626402813f54dfd4fb91977293345bb0
    SHA-256: 2d4d909413f9da307282b1feb96ad658d70773f84dbc3f0b36ac34872cf2c213
    Size: 2.10 MB
  3. libxml2-python-2.6.26-2.1.25.0.1.AXS3.i386.rpm
    MD5: 360e98ceaa32e6bcf37d7a01eabd13a9
    SHA-256: 02107a87cee0867afd4dfacde63f05caa8286d5e97b63587b8aa179868475f7c
    Size: 705.10 kB

Asianux Server 3 for x86_64
  1. libxml2-2.6.26-2.1.25.0.1.AXS3.x86_64.rpm
    MD5: 4ec8947531eaccff4d2bd21534f87372
    SHA-256: 75dde92f157ce826faf6d8a802c08eb4c4a814c1c634bf63a7967410f9e95586
    Size: 811.94 kB
  2. libxml2-devel-2.6.26-2.1.25.0.1.AXS3.x86_64.rpm
    MD5: 3512338176e06b2f46dec0333094e0f1
    SHA-256: e5663cc8b1cb7d794247f73be6e03f274eec5d3b4e6d798a9c620474266d25f0
    Size: 2.14 MB
  3. libxml2-python-2.6.26-2.1.25.0.1.AXS3.x86_64.rpm
    MD5: 963f2f4badd6ab37881ba137aa8a5f36
    SHA-256: ad287fdc0c9ee50ba08314dd385981db084470ddf191d1dca779fb0530f066f9
    Size: 715.53 kB