Referenciados CVEs:
CVE-2008-4225, CVE-2008-4226


Descrição:
\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d \u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d Ubuntu Security Notice USN-673-1 nov 19, 2008libxml2 vulnerabilitiesCVE-2008-4225, CVE-2008-4226 \u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d \u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d Um problema de segurança afeta os seguintes Ubuntu releases: Ubuntu 6.06 LTSUbuntu 7.10Ubuntu 8,04 LTSUbuntu 8.10This consultoria também se aplica às versões correspondentes do ofKubuntu, Edubuntu, e Xubuntu.The problema pode ser corrigido por atualizar seu sistema para thefollowing pacote versões: Ubuntu 6.06 LTS: libxml2 2.6.24.dfsg-1ubuntu1. 4Ubuntu 7/10: libxml2 2.6.30.dfsg-2ubuntu1.4Ubuntu 8,04 LTS: libxml2 2.6.31.dfsg-2ubuntu1.3Ubuntu 8/10: libxml2 2.6.32.dfsg-4ubuntu1.1After um sistema padrão upgrade, você precisará reiniciar o sessões para effectthe necessário changes.Details seguir: Drew Yao descobriu que libxml2 não manipula corretamente corruptXML determinados documentos. Se um usuário ou sistema automatizado foram enganadas em processinga malicioso documento XML, um atacante remoto pode causar applicationslinked contra libxml2 para introduzir um loop infinito, levando a uma denialof serviço. (CVE-2008-4225) descobriu que Drew Yao libxml2 não manipula corretamente grandes memoryallocations. Se um usuário ou sistema automatizado foram enganadas em grande transformação Avery documento XML, um atacante remoto pode causar aplicações linkedagainst libxml2 a queda, levando a uma negação de serviço. (CVE-2008-4226)





Leia mais ...