Lucene search

K
osvGoogleOSV:DSA-3430-1
HistoryDec 23, 2015 - 12:00 a.m.

libxml2 - security update

2015-12-2300:00:00
Google
osv.dev
5

Several vulnerabilities were discovered in libxml2, a library providing
support to read, modify and write XML and HTML files. A remote attacker
could provide a specially crafted XML or HTML file that, when processed
by an application using libxml2, would cause that application to use an
excessive amount of CPU, leak potentially sensitive information, or
crash the application.

For the oldstable distribution (wheezy), these problems have been fixed
in version 2.8.0+dfsg1-7+wheezy5.

For the stable distribution (jessie), these problems have been fixed in
version 2.9.1+dfsg1-5+deb8u1.

For the testing distribution (stretch), these problems have been fixed
in version 2.9.3+dfsg1-1 or earlier versions.

For the unstable distribution (sid), these problems have been fixed in
version 2.9.3+dfsg1-1 or earlier versions.

We recommend that you upgrade your libxml2 packages.

CPENameOperatorVersion
libxml2eq2.9.1+dfsg1-5