Advisories » MGASA-2015-0423

Updated libxml2 packages fix security vulnerabilities

Publication date: 02 Nov 2015
Modification date: 02 Nov 2015
Type: security
Affected Mageia releases : 5
CVE: CVE-2015-7942

Description

Updated libxml2 packages fix security vulnerability:

Crafted xml causes out of bound memory access in libxml2 due to a heap
buffer-overflow in xmlParseConditionalSections() in parser.c (CVE-2015-7942).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=17024
• https://bugzilla.gnome.org/show_bug.cgi?id=756456
• http://lwn.net/Alerts/662021/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7942

SRPMS

5/core

• libxml2-2.9.1-11.2.mga5