3

GLSA 201009-07 (Normal): libxml2

view full story
linux-howto

http://security.gentoo.org – libxml2: Denial of Service (Security)

dalinux's picture
Submitted by dalinux on 09/22/2010 – Made popular on 09/22/2010

Stories similar to GLSA 201009-07 (Normal): libxml2

libxml2: User-assisted execution of arbitrary code

I've already asked same question in stackoverflow.I need some more help.

I’m trying to upgrade libxml2 from 2.6.26 to 2.7.7 on CentOS5.5

I installed libxml2-2.7.7 in /opt/libxml2-2.7.7/bin/

I'd already installed 2.6.26 in /usr by yum install libxml2 libxml2-devel.

When I configur PHP5.3 --with-libxml-dir=/opt/libxml2-2.7.7/bin message shows.

checking whether to enable LIBXML support...

GLSA 201110-26 (High): libxml2 1 year 29 weeks ago

libxml2: Multiple vulnerabilities

Referenced CVEs: 

CVE-2008-3529, CVE-2009-2414, CVE-2009-2416

Description: 

=========================================================== Ubuntu Security Notice USN-815-1 August 11, 2009 libxml2 vulnerabilities CVE-2008-3529, CVE-2009-2414, CVE-2009-2416 ==================

our servers need to update the libxml2 version from 2.2.26 to 2.9 (latest version). It is no problem that we have been installed the libxml2-2.9 version on our servers. but the problem is how can we config the libs path of libxml2 path in php? Since it still show the old version on phpinfo().

What we have do is 1.

On September 27th, in a security notice Canonical published details about a libxml2 vulnerability for its Ubuntu 12.04 LTS, Ubuntu 11.10, Ubuntu 11.04, Ubuntu 10.04 LTS, and Ubuntu 8.04 LTS operating systems.

According to Canonical, applications using libxml2 could have been made to crash or run programs if users opened a specially crafted file.

Juri Aedla, the user who discovered the vulnerabil

When I run sudo apt-get upgrade on my Debian Squeeze install, I get the following error:

You might want to run 'apt-get -f install' to correct these. The following packages have unmet dependencies: libxml2-dev : Depends: libxml2 (= 2.7.8.dfsg-2+squeeze3) but 2.7.8.dfsg-2+squeeze5 is installed E: Unmet dependencies.

Hi guys, I'm trying to install php5 in SUSE. After unpacking and ./configure the installation halts giving me the error "configure: error: libxml2 version 2.6.11 or greater required."

I have installed both libxml2 and libxml2-dev through yast, but that only has upto version 2.6.7.

Can anyone give me some instructions on how to get the newest version? Thanks

trying to install libxml2, complains about dependencies; dependencies exist on system, any ideas anyone?