Advisories » MGASA-2015-0433

Updated libxml2 packages fix security vulnerability

Publication date: 05 Nov 2015
Modification date: 05 Nov 2015
Type: security
Affected Mageia releases : 5
CVE: CVE-2015-8035

Description

A denial of service in libxml2 when parsing a specially crafted XML file
if XZ support is enabled may cause applications to hang as the parsing
never terminates (CVE-2015-8035)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=17076
• http://openwall.com/lists/oss-security/2015/11/02/4
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8035

SRPMS

5/core

• libxml2-2.9.1-11.3.mga5