p PatchFirst

USN-2214-2

USN-2214-2 · libxml2 regression

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

USN-2214-1 fixed vulnerabilities in libxml2. The upstream fix introduced a regression when using xmllint with the --postvalid option. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Daniel Berrange discovered that libxml2 would incorrectly perform entity substitution even when requested not to. If a user or automated system were tricked into opening a specially crafted document, an attacker could possibly cause resource consumption, resulting in a denial of service.

Correctif disponible

Publication
Mise à jour

Pile logicielle: system

Produits et versions concernés

  • libxml2 Ubuntu:14.04:LTS

    Versions du logiciel
    • 2.9.1+dfsg1-3ubuntu2
    • 2.9.1+dfsg1-3ubuntu3
    • 2.9.1+dfsg1-3ubuntu4
    • 2.9.1+dfsg1-3ubuntu4.1
    Plages de versions concernées
    • ECOSYSTEM: < 2.9.1+dfsg1-3ubuntu4.2

    Mettez à jour vers 2.9.1+dfsg1-3ubuntu4.2

Sources originales

Vérifiez votre serveur →