Oval Definition:oval:org.mitre.oval:def:13312
Revision Date:2014-06-30Version:20
Title:USN-890-4 -- python-xml vulnerabilities
Description:USN-890-1 fixed vulnerabilities in Expat. This update provides the corresponding updates for PyXML. Original advisory details: Jukka Taimisto, Tero Rontti and Rauli Kaksonen discovered that Expat did not properly process malformed XML. If a user or application linked against Expat were tricked into opening a crafted XML file, an attacker could cause a denial of service via application crash. It was discovered that Expat did not properly process malformed UTF-8 sequences. If a user or application linked against Expat were tricked into opening a crafted XML file, an attacker could cause a denial of service via application crash
Family:unixClass:patch
Status:ACCEPTEDReference(s):CVE-2009-2625
CVE-2009-3560
CVE-2009-3720
USN-890-4
USN-890-4
Platform(s):Ubuntu 6.06
Product(s):python-xml
Definition Synopsis
  • Ubuntu 6.06 is installed
  • AND Architecture section
  • Architecture independet section
  • Installed architecture is all
  • AND Packages section
  • python-xml DPKG is earlier than 0.8.4-1ubuntu3.1
  • OR xbel DPKG is earlier than 0.8.4-1ubuntu3.1
  • OR xbel-utils DPKG is earlier than 0.8.4-1ubuntu3.1
  • OR Architecture depended section
  • Supported architectures section
  • Installed architecture is sparc
  • OR Installed architecture is powerpc
  • OR Installed architecture is amd64
  • OR Installed architecture is i386
  • AND python2.4-xml DPKG is earlier than 0.8.4-1ubuntu3.1
  • BACK