logo
DATABASE RESOURCES PRICING ABOUT US

libxml2 regression

Description

## Releases * Ubuntu 14.04 ESM * Ubuntu 13.10 * Ubuntu 12.04 * Ubuntu 10.04 ## Packages * libxml2 \- GNOME XML library USN-2214-1 fixed vulnerabilities in libxml2. The upstream fix introduced a number of regressions. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Daniel Berrange discovered that libxml2 would incorrectly perform entity substitution even when requested not to. If a user or automated system were tricked into opening a specially crafted document, an attacker could possibly cause resource consumption, resulting in a denial of service.


Affected Package


OS OS Version Package Name Package Version
Ubuntu 14.04 libxml2 2.9.1+dfsg1-3ubuntu4.3
Ubuntu 14.04 libxml2-dbg 2.9.1+dfsg1-3ubuntu4.3
Ubuntu 14.04 libxml2-dev 2.9.1+dfsg1-3ubuntu4.3
Ubuntu 14.04 libxml2-doc 2.9.1+dfsg1-3ubuntu4.3
Ubuntu 14.04 libxml2-udeb 2.9.1+dfsg1-3ubuntu4.3
Ubuntu 14.04 libxml2-utils 2.9.1+dfsg1-3ubuntu4.3
Ubuntu 14.04 libxml2-utils-dbg 2.9.1+dfsg1-3ubuntu4.3
Ubuntu 14.04 python-libxml2 2.9.1+dfsg1-3ubuntu4.3
Ubuntu 14.04 python-libxml2-dbg 2.9.1+dfsg1-3ubuntu4.3
Ubuntu 13.10 libxml2 2.9.1+dfsg1-3ubuntu2.3
Ubuntu 12.04 libxml2 2.7.8.dfsg-5.1ubuntu4.9
Ubuntu 10.04 libxml2 2.7.6.dfsg-1ubuntu1.13