Refererte CVEs:
CVE-2008-4225, CVE-2008-4226


Beskrivelse:
\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d \u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d Ubuntu Security Notice USN-673-1 nov 19, 2008libxml2 vulnerabilitiesCVE-2008-4225, CVE-2008-4226 \u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d \u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d et sikkerhetsspørsmål påvirker følgende Ubuntu utgivelser: Ubuntu 6.06 LTSUbuntu 7.10Ubuntu 8.04 LTSUbuntu 8.10This rådgivende gjelder også tilsvarende versjoner ofKubuntu, Edubuntu og Xubuntu.The problemet kan rettes opp ved å oppgradere systemet til thefollowing pakke versjoner: Ubuntu 6.06 LTS: libxml2 2.6.24.dfsg-1ubuntu1. 4Ubuntu 7.10: libxml2 2.6.30.dfsg-2ubuntu1.4Ubuntu 8.04 LTS: libxml2 2.6.31.dfsg-2ubuntu1.3Ubuntu 8.10: libxml2 2.6.32.dfsg-4ubuntu1.1After en standard systemoppgradering du trenger for å starte treningen til effectthe nødvendig changes.Details følger: Drew Yao oppdaget at libxml2 ikke riktig håndtere visse corruptXML dokumenter. Hvis en bruker eller automatiske systemet ble lures til processinga ondsinnet XML-dokument, en ekstern angriper kan forårsake applicationslinked mot libxml2 å angi en uendelig løkke, som fører til et denialof tjenesten. (CVE-2008-4225) Drew Yao oppdaget at libxml2 ikke riktig håndtere store memoryallocations. Hvis en bruker eller automatiske systemet ble lures til behandling Avery store XML-dokument, en ekstern angriper kan forårsake programmer linkedagainst libxml2 krasjer, fører til et tjenestenekt. (CVE-2008-4226)





Mer ...