[SECURITY] [DSA 2424-1] libxml-atom-perl security update

2012-03-09T00:00:00
ID SECURITYVULNS:DOC:27718
Type securityvulns
Reporter Securityvulns
Modified 2012-03-09T00:00:00

Description

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1


Debian Security Advisory DSA-2424-1 security@debian.org http://www.debian.org/security/ Florian Weimer March 04, 2012 http://www.debian.org/security/faq


Package : libxml-atom-perl Vulnerability : XML external entity expansion Problem type : remote Debian-specific: no

It was discovered that the XML::Atom Perl module did not disable external entities when parsing XML from potentially untrusted sources. This may allow attackers to gain read access to otherwise protected ressources, depending on how the library is used.

For the stable distribution (squeeze), this problem has been fixed in version 0.37-1+squeeze1.

For the testing distribution (wheezy) and the unstable distribution (sid), this problem has been fixed in version 0.39-1.

We recommend that you upgrade your libxml-atom-perl packages.

Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: http://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux)

iQEcBAEBAgAGBQJPU5qcAAoJEL97/wQC1SS+vPkIAKqYWwKE0IX7TSP4APfXs8DH kwfLZhRbQIqOFtYP3j+p9IQwHLJkc6wjrtXG05AAWoNqca65tx9qadie20+APU0A YuWJRv5/KXpr6osXSvPaLbJcSSmHSZh4Cl1o0efE1KpXVwtPL7XYjHUH8SVsqPWb 6kTHzAI5Oa7PB8ZgSzJ3ebauc0CuoQAIZEWgYup8RqtoDkGGZrgzfel6aq4Oxj4Z 5wxwpc4rDKFRpUFpZyKzszz5h2bEEDFTLyUXfVzYDpeEqLNeiSHT6/O3pJL9FtBr 8VHuAuo1b9NtIlGxDGXulsRHFFaDIMbmYBKtlhTWZ3LhxOSw5T5Wc6FULhHEO6s= =fCTR -----END PGP SIGNATURE-----