Oval Definition:oval:org.mitre.oval:def:12709
Revision Date:2014-06-23Version:20
Title:DSA-2128-1 libxml2 -- invalid memory access
Description:Bui Quang Minh discovered that libxml2, a library for parsing and handling XML data files, does not well process a malformed XPATH, causing crash and allowing arbitrary code execution. For the stable distribution, this problem has been fixed in version 2.6.32.dfsg-5+lenny2. For the testing and unstable distribution, this problem has been fixed in version 2.7.8.dfsg-1. We recommend that you upgrade your libxml2 package.
Family:unixClass:patch
Status:ACCEPTEDReference(s):CVE-2010-4008
DSA-2128-1
Platform(s):Debian GNU/Linux 5.0
Product(s):libxml2
Definition Synopsis
  • Debian GNU/Linux 5.0 is installed
  • AND Architecture section
  • Architecture independet section
  • Installed architecture is all
  • AND libxml2-doc DPKG is earlier than 2.6.32.dfsg-5+lenny2
  • OR libxml2 DPKG is earlier than 2.6.32.dfsg-5+lenny2
  • OR libxml2-dev DPKG is earlier than 2.6.32.dfsg-5+lenny2
  • OR python-libxml2 DPKG is earlier than 2.6.32.dfsg-5+lenny2
  • OR libxml2-dbg DPKG is earlier than 2.6.32.dfsg-5+lenny2
  • OR libxml2-utils DPKG is earlier than 2.6.32.dfsg-5+lenny2
  • BACK