DLA-0009-1 lxml - security update

Bulletin has no description...

Ubuntu: Security Advisory (USN-2214-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS : libxml2 regression (USN-2214-3)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2214-3 advisory. USN-2214-1 fixed vulnerabilities in libxml2. The upstream fix introduced a number of regressions. This update fixes the problem. We apologize for the inconvenienc...

USN-2214-3 libxml2 regression

USN-2214-1 fixed vulnerabilities in libxml2. The upstream fix introduced a number of regressions. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Daniel Berrange discovered that libxml2 would incorrectly perform entity substitution even when requested...

USN-2214-3: libxml2 regression

USN-2214-1 fixed vulnerabilities in libxml2. The upstream fix introduced a number of regressions. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Daniel Berrange discovered that libxml2 would incorrectly perform entity substitution even when requested...

Ubuntu: Security Advisory (USN-2214-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : libxml2 / python-libxml2 (openSUSE-SU-2014:0716-1)

Updated fix for openSUSE-SU-2014:0645-1 because of a regression that caused xmllint to break. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2014-394. The text description of this...

openSUSE Security Update : libxml2 / python-libxml2 (openSUSE-SU-2014:0753-1)

Removed fix for CVE-2014-0191. This fix breaks existing applications and there's currently no way to prevent that. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2014-409. The text...

openSUSE Security Update : libxml2 (openSUSE-SU-2013:1221-1)

Libxml2 was updated to fix buffer overread problems which could lead to crashes out of bounds read. CVE-2013-2877 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2013-592. The text...

openSUSE Security Update : libxml2 (openSUSE-SU-2014:0645-1)

fix for CVE-2014-0191 bnc876652 - libxml2: external parameter entity loaded when entity substitution is disabled - added libxml2-CVE-2014-0191.patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

openSUSE Security Update : libxml2 (openSUSE-SU-2012:0975-1)

Fixed an integer overflow in libxml2 which could lead to crashes or potential code execution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-501. The text description of this...

openSUSE Security Update : libxml2 (openSUSE-SU-2012:0107-1)

A heap-based buffer overflow during decoding of entity references with overly long names has been fixed. CVE-2011-3919 has been assigned. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : libxml2 (openSUSE-SU-2010:1004-1)

libxml2: Invalid memory access in the xpath handling has been fixed. CVE-2010-4008 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libxml2-3459. The text...

openSUSE Security Update : libxml2 (openSUSE-SU-2011:0255-1)

A bug in the Xpath processing inside libxml2 has been fixed. CVE-2010-4494 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libxml2-3758. The text description o...

openSUSE Security Update : libxml2 (openSUSE-SU-2011:0839-1)

Specially crafted xml files could crash applications using libxml2 CVE-2011-1944. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libxml2-4811. The text description of this plugin is C SUSE LL...

openSUSE Security Update : libxml2 (openSUSE-SU-2012:0073-1)

Specially crafted XPath expressions could allow attackers to cause a denial of service or possibly have unspecified other impact CVE-2011-2821,CVE-2011-2834. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

openSUSE Security Update : libxml2 (openSUSE-SU-2012:1647-1)

A Heap-based buffer underflow in the xmlParseAttValueComplex function in parser.c in libxml2 allowed remote attackers to cause a denial of service or possibly execute arbitrary code via crafted entities in an XML document. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

openSUSE Security Update : emacs and depending packages (openSUSE-SU-2012:1348-1)

This update fixes the following issues for emacs, emacs-w3, gnuplot and ddskk: emacs : - Add fix for bnc775993 which disable arbitrary lisp code execution when 'enable-local-variables' is set to ':safe' CVE-2012-3479 - Add fix for bnc780653 to allow emacs to parse tar archives with PAX extended...

openSUSE Security Update : libxml2 (openSUSE-SU-2012:0342-1)

This update of libxml2 fixes the hash table collision flaw which could be exploited by attackers to cause a Denial of Service CVE-2012-0841. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : libxml2 (openSUSE-SU-2013:0552-1)

libxml2 was updated to limit internal entity expansion denial of service problems IXE CVE-2013-0338 bnc805233 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2013-263. The text...