----------------------------------------------------------------------

Want a new job?

http://secunia.com/secunia_security_specialist/
http://secunia.com/hardcore_disassembler_and_reverse_engineer/

----------------------------------------------------------------------

TITLE:
Debian update for libxml2

SECUNIA ADVISORY ID:
SA31590

VERIFY ADVISORY:
http://secunia.com/advisories/31590/

CRITICAL:
Moderately critical

IMPACT:
DoS

WHERE:
>From remote

OPERATING SYSTEM:
Debian GNU/Linux 4.0
http://secunia.com/product/13844/
Debian GNU/Linux unstable alias sid
http://secunia.com/product/530/

DESCRIPTION:
Debian has issued an update for libxml2. This fixes a vulnerability,
which can be exploited by malicious people to cause a DoS (Denial of
Service).

For more information:
SA31558

SOLUTION:
Apply updated packages.

-- Debian GNU/Linux 4.0 alias etch --

Source archives:

http://security.debian.org/pool/updates/main/libx/libxml2/libxml2_2.6.27.dfsg.orig.tar.gz
Size/MD5 checksum: 3416175 5ff71b22f6253a6dd9afc1c34778dec3
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2_2.6.27.dfsg-3.dsc
Size/MD5 checksum: 901 800082d165a5627f571f019994bee93c
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2_2.6.27.dfsg-3.diff.gz
Size/MD5 checksum: 146017 10fc8479d96fb23d17ac8a51bfe40db9

Architecture independent packages:

http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-doc_2.6.27.dfsg-3_all.deb
Size/MD5 checksum: 1325318 11e64cd82ae7b549fa975a657f773f73

alpha architecture (DEC Alpha)

http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-utils_2.6.27.dfsg-3_alpha.deb
Size/MD5 checksum: 37976 909bab48a2b4a6c29e11b8b880dd464d
http://security.debian.org/pool/updates/main/libx/libxml2/python-libxml2_2.6.27.dfsg-3_alpha.deb
Size/MD5 checksum: 184758 2dbe0e48211dff90726296ee6786b73b
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-dbg_2.6.27.dfsg-3_alpha.deb
Size/MD5 checksum: 881704 110adb2bde79f8feb121beaa9ae8e15d
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-dev_2.6.27.dfsg-3_alpha.deb
Size/MD5 checksum: 916192 fd97550bc89ee18ef4c58da00b2c8b1c
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2_2.6.27.dfsg-3_alpha.deb
Size/MD5 checksum: 820740 47ba8095722f2bbdf6e88fa6881b365e

amd64 architecture (AMD x86_64 (AMD64))

http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-utils_2.6.27.dfsg-3_amd64.deb
Size/MD5 checksum: 36774 78fbbff7c5a940d516ddab2145af3a04
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-dbg_2.6.27.dfsg-3_amd64.deb
Size/MD5 checksum: 891114 54574b53e6e1d243c9a3a8db7a7ff845
http://security.debian.org/pool/updates/main/libx/libxml2/python-libxml2_2.6.27.dfsg-3_amd64.deb
Size/MD5 checksum: 182908 28cfebcd7ab010cf63e9261147be9806
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-dev_2.6.27.dfsg-3_amd64.deb
Size/MD5 checksum: 746356 96ee63f89da370e08d4d7cf2d656c414
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2_2.6.27.dfsg-3_amd64.deb
Size/MD5 checksum: 796450 d9e1bc7ac6e9ac08a50e4cc7fd245433

arm architecture (ARM)

http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-dev_2.6.27.dfsg-3_arm.deb
Size/MD5 checksum: 672716 21723fdd5875eb16170ec69734fa4cd4
http://security.debian.org/pool/updates/main/libx/libxml2/python-libxml2_2.6.27.dfsg-3_arm.deb
Size/MD5 checksum: 165296 091714fdcb9c7c7909496ac14d9af71d
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-utils_2.6.27.dfsg-3_arm.deb
Size/MD5 checksum: 34676 d1acb4cd2a7036e35a7cfbcdc25362b7
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-dbg_2.6.27.dfsg-3_arm.deb
Size/MD5 checksum: 816944 102757770541cb1d1336bb4d3c086aa8
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2_2.6.27.dfsg-3_arm.deb
Size/MD5 checksum: 741122 35af939918be6655ca6994462a3b9610

hppa architecture (HP PA RISC)

http://security.debian.org/pool/updates/main/libx/libxml2/python-libxml2_2.6.27.dfsg-3_hppa.deb
Size/MD5 checksum: 192856 0f670bcbefb06ace1dcd643e4045d5ce
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-dev_2.6.27.dfsg-3_hppa.deb
Size/MD5 checksum: 857960 cc1632c8c04e9582e79e46729ce6657b
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-utils_2.6.27.dfsg-3_hppa.deb
Size/MD5 checksum: 36856 35450be2eee5c16c4ac8b230b8d67de5
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-dbg_2.6.27.dfsg-3_hppa.deb
Size/MD5 checksum: 863890 fd6b47e9995c8150fe0d42036de52b92
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2_2.6.27.dfsg-3_hppa.deb
Size/MD5 checksum: 849758 3199a4ab9ce81877235f78c611f0ae4e

i386 architecture (Intel ia32)

http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-dbg_2.6.27.dfsg-3_i386.deb
Size/MD5 checksum: 857370 6a293fc2b6aeadb289e28a4566fbfc86
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-dev_2.6.27.dfsg-3_i386.deb
Size/MD5 checksum: 681830 2117114ebcaa25a76d21c454df990789
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2_2.6.27.dfsg-3_i386.deb
Size/MD5 checksum: 755986 7291a82a169cd4fa7b0d3347685fb3ad
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-utils_2.6.27.dfsg-3_i386.deb
Size/MD5 checksum: 34456 092ad89155004c50686cafca63b9257b
http://security.debian.org/pool/updates/main/libx/libxml2/python-libxml2_2.6.27.dfsg-3_i386.deb
Size/MD5 checksum: 169520 55365fa5e3fe422f0c09492d8289db6b

ia64 architecture (Intel ia64)

http://security.debian.org/pool/updates/main/libx/libxml2/libxml2_2.6.27.dfsg-3_ia64.deb
Size/MD5 checksum: 1079332 09539a6412b3723ae3a5cda3c3ad9909
http://security.debian.org/pool/updates/main/libx/libxml2/python-libxml2_2.6.27.dfsg-3_ia64.deb
Size/MD5 checksum: 196528 72eee7603a33f7f06046fed3a7cd19e3
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-dev_2.6.27.dfsg-3_ia64.deb
Size/MD5 checksum: 1105612 e3ac30716a2199d3c37f50ae7ab1bdc3
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-dbg_2.6.27.dfsg-3_ia64.deb
Size/MD5 checksum: 873890 f3d98ef2b14a8e48a8f8c44ced776b62
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-utils_2.6.27.dfsg-3_ia64.deb
Size/MD5 checksum: 48492 629a7c71342c5b380fc3e72c7bb8ad16

mipsel architecture (MIPS (Little Endian))

http://security.debian.org/pool/updates/main/libx/libxml2/python-libxml2_2.6.27.dfsg-3_mipsel.deb
Size/MD5 checksum: 168694 adce98b5257168bdb17c8a7aa0e60131
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-dev_2.6.27.dfsg-3_mipsel.deb
Size/MD5 checksum: 832722 cea7eaeb7952fa2c204803f004a23c79
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2_2.6.27.dfsg-3_mipsel.deb
Size/MD5 checksum: 768330 94bb5ac441e8ed3b8f14ca21fdcf7b5a
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-dbg_2.6.27.dfsg-3_mipsel.deb
Size/MD5 checksum: 897532 ffeec2f653021b3423f9d94610ca522f
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-utils_2.6.27.dfsg-3_mipsel.deb
Size/MD5 checksum: 34404 3b43ed7f884ba01176d6dc9ee8c0ca54

powerpc architecture (PowerPC)

http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-dbg_2.6.27.dfsg-3_powerpc.deb
Size/MD5 checksum: 897856 b5eacbc0ea09978b887707ed9b23fabb
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2_2.6.27.dfsg-3_powerpc.deb
Size/MD5 checksum: 779568 55f1f4ed3bdb39bc8bc59d74992b91e6
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-utils_2.6.27.dfsg-3_powerpc.deb
Size/MD5 checksum: 37658 0920a98fef39eabeffc2e6f4083ad6d5
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-dev_2.6.27.dfsg-3_powerpc.deb
Size/MD5 checksum: 770592 196fb7a7f7636cb5e350a97c4e06c020
http://security.debian.org/pool/updates/main/libx/libxml2/python-libxml2_2.6.27.dfsg-3_powerpc.deb
Size/MD5 checksum: 172722 64c1948d58bbf8b9094234715fca2509

s390 architecture (IBM S/390)

http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-dev_2.6.27.dfsg-3_s390.deb
Size/MD5 checksum: 749806 20d00f95a218a47daae2a86342e3222e
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-dbg_2.6.27.dfsg-3_s390.deb
Size/MD5 checksum: 885108 5ca88f61170d06854c9c1d9a86f3798d
http://security.debian.org/pool/updates/main/libx/libxml2/python-libxml2_2.6.27.dfsg-3_s390.deb
Size/MD5 checksum: 185726 bdfda7d18d0d0cc5d992e8548ed637f1
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-utils_2.6.27.dfsg-3_s390.deb
Size/MD5 checksum: 36364 9c3b2e9ac8e781bc990616d752752861
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2_2.6.27.dfsg-3_s390.deb
Size/MD5 checksum: 805446 f11839b2b45fc83a7972b867094773b2

sparc architecture (Sun SPARC/UltraSPARC)

http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-dbg_2.6.27.dfsg-3_sparc.deb
Size/MD5 checksum: 781288 3326281769c76631f973ff41682ab4ad
http://security.debian.org/pool/updates/main/libx/libxml2/python-libxml2_2.6.27.dfsg-3_sparc.deb
Size/MD5 checksum: 176878 60eba89a0a740429b8a8726ebcd175f1
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-utils_2.6.27.dfsg-3_sparc.deb
Size/MD5 checksum: 34578 34b4efd5a8b68a33b85ada99757f824a
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2_2.6.27.dfsg-3_sparc.deb
Size/MD5 checksum: 759292 a8e8ea8c000c365ecd2c6a04f0f748d3
http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-dev_2.6.27.dfsg-3_sparc.deb
Size/MD5 checksum: 712758 921af536cdc8ddd105768c4061aa2f3e

-- Debian GNU/Linux unstable alias sid --

Reportedly, this problem will be fixed soon.

ORIGINAL ADVISORY:
http://lists.debian.org/debian-security-announce/2008/msg00217.html

OTHER REFERENCES:
SA31558:
http://secunia.com/advisories/31558/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------