Bugtraq mailing list archives
[SECURITY] [DSA 2424-1] libxml-atom-perl security update
From: Florian Weimer <fw () deneb enyo de>
Date: Sun, 04 Mar 2012 17:23:40 +0100
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2424-1 security () debian org http://www.debian.org/security/ Florian Weimer March 04, 2012 http://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : libxml-atom-perl Vulnerability : XML external entity expansion Problem type : remote Debian-specific: no It was discovered that the XML::Atom Perl module did not disable external entities when parsing XML from potentially untrusted sources. This may allow attackers to gain read access to otherwise protected ressources, depending on how the library is used. For the stable distribution (squeeze), this problem has been fixed in version 0.37-1+squeeze1. For the testing distribution (wheezy) and the unstable distribution (sid), this problem has been fixed in version 0.39-1. We recommend that you upgrade your libxml-atom-perl packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: http://www.debian.org/security/ Mailing list: debian-security-announce () lists debian org -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAEBAgAGBQJPU5qcAAoJEL97/wQC1SS+vPkIAKqYWwKE0IX7TSP4APfXs8DH kwfLZhRbQIqOFtYP3j+p9IQwHLJkc6wjrtXG05AAWoNqca65tx9qadie20+APU0A YuWJRv5/KXpr6osXSvPaLbJcSSmHSZh4Cl1o0efE1KpXVwtPL7XYjHUH8SVsqPWb 6kTHzAI5Oa7PB8ZgSzJ3ebauc0CuoQAIZEWgYup8RqtoDkGGZrgzfel6aq4Oxj4Z 5wxwpc4rDKFRpUFpZyKzszz5h2bEEDFTLyUXfVzYDpeEqLNeiSHT6/O3pJL9FtBr 8VHuAuo1b9NtIlGxDGXulsRHFFaDIMbmYBKtlhTWZ3LhxOSw5T5Wc6FULhHEO6s= =fCTR -----END PGP SIGNATURE-----
Current thread:
- [SECURITY] [DSA 2424-1] libxml-atom-perl security update Florian Weimer (Mar 05)