From:
[email protected]
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
- ------------------------------------------------------------------------ Debian Security Advisory DSA-1666-1
[email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 17, 2008
http://www.debian.org/security/faq
- ------------------------------------------------------------------------
Package : libxml2
Vulnerability : several
Problem type : local(remote)
Debian-specific: no
CVE Id(s) : CVE-2008-4225 CVE-2008-4226
Several vulnerabilities have been discovered in the GNOME XML library.
The Common Vulnerabilities and Exposures project identifies the
following problems:
CVE-2008-4225
Drew Yao discovered that missing input sanitising in the
xmlBufferResize() function may lead to an infinite loop,
resulting in denial of service.
CVE-2008-4226
Drew Yao discovered that an integer overflow in the
xmlSAX2Characters() function may lead to denial of service or
the execution of arbitrary code.
For the stable distribution (etch), these problems have been fixed in
version 2.6.27.dfsg-6.
For the upcoming stable distribution (lenny) and the unstable
distribution (sid), these problems will be fixed soon.
We recommend that you upgrade your libxml2 packages.
Upgrade instructions
- --------------------
wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.
If you are using the apt-get package manager, use the line for
sources.list as given below:
apt-get update
will update the internal database
apt-get upgrade
will install corrected packages
You may use an automated update by adding the resources from the
footer to the proper configuration.
Debian GNU/Linux 4.0 alias etch
- -------------------------------
Stable updates are available for alpha, amd64, arm, hppa, i386, ia64, mips, mipsel, powerpc, s390 and sparc.
Source archives:
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2_2.6.27.dfsg-6.dsc
Size/MD5 checksum: 893 b6b2006ffadfb999e72974d574814b7c
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2_2.6.27.dfsg.orig.tar.gz
Size/MD5 checksum: 3416175 5ff71b22f6253a6dd9afc1c34778dec3
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2_2.6.27.dfsg-6.diff.gz
Size/MD5 checksum: 147867 d6a3bbbe39bffe96867de82b11c7c5be
Architecture independent packages:
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-doc_2.6.27.dfsg-6_all.deb
Size/MD5 checksum: 1328280 c2990030601040775b909c8ace076100
alpha architecture (DEC Alpha)
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-dbg_2.6.27.dfsg-6_alpha.deb
Size/MD5 checksum: 881946 38629543e71a18f6007b8d61d0500e36
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2_2.6.27.dfsg-6_alpha.deb
Size/MD5 checksum: 821150 f14ee677bb7eac20cd65adef90af0f3c
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-utils_2.6.27.dfsg-6_alpha.deb
Size/MD5 checksum: 37972 d7757b07f8b0c69f9fd0a07a1598a3e3
http://security.debian.org/pool/updates/main/libx/libxml2/python-libxml2_2.6.27.dfsg-6_alpha.deb
Size/MD5 checksum: 184750 020e5ca7663ee88695e1502c8e8af77c
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-dev_2.6.27.dfsg-6_alpha.deb
Size/MD5 checksum: 917020 f837c687d428d94559bf68e012bc0e02
amd64 architecture (AMD x86_64 (AMD64))
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-dev_2.6.27.dfsg-6_amd64.deb
Size/MD5 checksum: 745790 94edf60cc7d02dd31a70376baf740958
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-dbg_2.6.27.dfsg-6_amd64.deb
Size/MD5 checksum: 892010 a648a6d69a73593739035d78ed3c8436
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2_2.6.27.dfsg-6_amd64.deb
Size/MD5 checksum: 796410 9f38a5028c33f32cf1701535c1c37984
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-utils_2.6.27.dfsg-6_amd64.deb
Size/MD5 checksum: 36682 4de1bfa28b9361e462075451befbe66c
http://security.debian.org/pool/updates/main/libx/libxml2/python-libxml2_2.6.27.dfsg-6_amd64.deb
Size/MD5 checksum: 184126 1aae3163d718d0c378203b7ea1a53a9b
arm architecture (ARM)
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-dev_2.6.27.dfsg-6_arm.deb
Size/MD5 checksum: 673236 cda6995615db6e74610d8a51607e85e4
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-dbg_2.6.27.dfsg-6_arm.deb
Size/MD5 checksum: 817602 c5f81e370d055ba14a40a64d3fbb6e9e
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-utils_2.6.27.dfsg-6_arm.deb
Size/MD5 checksum: 34682 4b01403ce80c2949f31559e0eacc044b
http://security.debian.org/pool/updates/main/libx/libxml2/python-libxml2_2.6.27.dfsg-6_arm.deb
Size/MD5 checksum: 165284 f84251cc53fa6b67b7fb55f58dd47d5b
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2_2.6.27.dfsg-6_arm.deb
Size/MD5 checksum: 742176 2e9e6cbbc777d49a99d8a6d98c5dc799
hppa architecture (HP PA RISC)
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-dev_2.6.27.dfsg-6_hppa.deb
Size/MD5 checksum: 858220 0f8cf389ab60a7639fac0f6499325995
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-dbg_2.6.27.dfsg-6_hppa.deb
Size/MD5 checksum: 863998 2332655d5ec188cf038cf9fcab862d9f
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2_2.6.27.dfsg-6_hppa.deb
Size/MD5 checksum: 850370 6c600a26f96c3a3eea898821b0a63937
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-utils_2.6.27.dfsg-6_hppa.deb
Size/MD5 checksum: 36852 75d6a8790e01eacb3183e6f295542215
http://security.debian.org/pool/updates/main/libx/libxml2/python-libxml2_2.6.27.dfsg-6_hppa.deb
Size/MD5 checksum: 192850 f635c62c33d9a2ea17015b08370dfd8f
i386 architecture (Intel ia32)
[continued in next message]
--- SoupGate-Win32 v1.05
* Origin: you cannot sedate... all the things you hate (1:229/2)