libxml2 security update

2.9.1-5.0.1.el71.2 - Update doc/redhat.gif in tarball - Add libxml2-oracle-enterprise.patch and update logos in tarball 2.9.1-5.2 - Fix missing entities after CVE-2014-3660 fix - CVE-2014-0191 Do not fetch external parameter entities rhbz1195649 - Fix regressions introduced by CVE-2014-0191 patch...

Mandriva Linux Security Advisory : libxml2 (MDVSA-2015:111)

Updated libxml2 packages fix security vulnerabilities : It was discovered that libxml2, a library providing support to read, modify and write XML files, incorrectly performs entity substituton in the doctype prolog, even if the application using libxml2 disabled any entity substitution. A remote...

Debian DLA-151-1 : libxml2 security update

It was discovered that the update released for libxml2 in DSA 2978 fixing CVE-2014-0191 was incomplete. This caused libxml2 to still fetch external entities regardless of whether entity substitution or validation is enabled. In addition, this update addresses a regression introduced in DSA 3057 b...

DLA-151-1 libxml2 - security update

Bulletin has no description...

[SECURITY] [DSA 2978-2] libxml2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2978-2 [email protected] http://www.debian.org/security/ Alessandro Ghedini February 06, 2015 http://www.debian.org/security/faq -...

CVE-2015-0386

The CVE-2015-0386 entry concerns an unspecified vulnerability in the Oracle HTTP Server Web Listener component of Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0, and 12.1.3.0. It states that remote attackers could affect availability via unknown vectors, and explicitly notes this is a different is...

CVE-2014-0191

The xmlParserHandlePEReference function in parser.c in libxml2 before 2.9.2, as used in Web Listener in Oracle HTTP Server in Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0, and 12.1.3.0 and other products, loads external parameter entities regardless of whether entity substitution or validation i...

CVE-2014-0191

CVE-2014-0191 affects libxml2 up to version 2.9.1, where xmlParserHandlePEReference can load external parameter entities even when entity substitution or validation is disabled. This vulnerability can be exploited by processing crafted XML to cause resource consumption and denial of service in af...

Oracle Solaris Third-Party Patch Update : libxml2 (cve_2014_0191_denial_of)

The remote Solaris system is missing necessary patches to address security updates. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the Oracle Third Party software advisories. include'deprecatednasllevel.inc';...

Fedora Update for mingw-libxml2 FEDORA-2014-17573

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for mingw-libxml2 FEDORA-2014-17609

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OracleVM 3.3 : libxml2 (OVMSA-2014-0031)

The remote OracleVM system is missing necessary patches to address critical security updates : - Update doc/redhat.gif in tarball - Add libxml2-oracle-enterprise.patch and update logos in tarball - CVE-2014-3660 denial of service via recursive entity expansion rhbz1149085 - Fix a set of regressio...

[SECURITY] [DLA 80-1] libxml2 security update

Package : libxml2 Version : 2.7.8.dfsg-2+squeeze10 CVE ID : CVE-2014-0191 CVE-2014-3660 Sogeti found a denial of service flaw in libxml2, a library providing support to read, modify and write XML and HTML files. A remote attacker could provide a specially crafted XML file that, when processed by ...

AIX libxml2 vulnerability,VIOS libxml2 vulnerability

IBM SECURITY ADVISORY First Issued: Fri Aug 15 10:26:30 CDT 2014 Updated: Fri Aug 22 08:17:41 CDT 2014 Update: fixed APAR availability dates |Update: Mon Aug 25 15:18:37 CDT 2014 |Update Corrected a couple Service Pack levels The most recent version of this document is available here:...

Updated kdelibs4 packages fix security vulnerability and various bugs

This update fixes a security vulnerability in the polkit authentication backend of kdelibs CVE-2014-5033 mga13792, and fixes some additional issues: - duplicate targets in PythonMacros.cmake reviewboard kde 111371, - kded4 leak sockets in NetworkInterface::isWireless bko324954, - media type...

[DLA-0016-1] libxml2 security update

Package : libxml2 Version : 2.7.8.dfsg-2+squeeze9 CVE ID : CVE-2014-0191 Debian Bug : 747309 Daniel P. Berrange discovered a denial of service vulnerability in libxml2 entity substitution...

[SECURITY] [DSA 2978-1] libxml2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2978-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 11, 2014 http://www.debian.org/security/faq -...

openSUSE Security Update : libxml2 (openSUSE-SU-2014:0645-1)

fix for CVE-2014-0191 bnc876652 - libxml2: external parameter entity loaded when entity substitution is disabled - added libxml2-CVE-2014-0191.patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

openSUSE Security Update : libxml2 / python-libxml2 (openSUSE-SU-2014:0753-1)

Removed fix for CVE-2014-0191. This fix breaks existing applications and there's currently no way to prevent that. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2014-409. The text...

openSUSE Security Update : libtiff-devel (libtiff-devel-4144)

specially crafted tiff images could cause buffer overflows in libtiff CVE-2011-0191, CVE-2011-0192. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libtiff-devel-4144. The text description of...