p PatchFirst

USN-2214-2

USN-2214-2 · libxml2 regression

Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.

USN-2214-1 fixed vulnerabilities in libxml2. The upstream fix introduced a regression when using xmllint with the --postvalid option. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Daniel Berrange discovered that libxml2 would incorrectly perform entity substitution even when requested not to. If a user or automated system were tricked into opening a specially crafted document, an attacker could possibly cause resource consumption, resulting in a denial of service.

Corrección disponible

Publicación
Actualización

Pila tecnológica: system

Productos y versiones afectados

  • libxml2 Ubuntu:14.04:LTS

    Versiones
    • 2.9.1+dfsg1-3ubuntu2
    • 2.9.1+dfsg1-3ubuntu3
    • 2.9.1+dfsg1-3ubuntu4
    • 2.9.1+dfsg1-3ubuntu4.1
    Intervalos de versiones afectados
    • ECOSYSTEM: < 2.9.1+dfsg1-3ubuntu4.2

    Actualiza a 2.9.1+dfsg1-3ubuntu4.2

Fuentes originales

Comprueba tu servidor →