Advisories:rPSA-2008-0325

From rPath Wiki

rPath Security Advisory 2008-0325-1

Published: 2008-11-19

Products

• rPath Appliance Platform Linux Service 1
• rPath Appliance Platform Linux Service 2
• rPath Linux 1
• rPath Linux 2

Rating

Major

Exposure Level Classification

Indirect User Deterministic Unauthorized Access

Updated Versions

• libxml2=conary.rpath.com@rpl:1/2.6.22-1.3-1
• libxml2=conary.rpath.com@rpl:2/2.6.30-3-0.1

rPath Issue Tracking System

• RPL-2723
• RPL-2891

References

• CVE-2008-3281
• CVE-2008-3529
• CVE-2008-4225
• CVE-2008-4226

Description

Previous versions of the libxml2 package contain multiple

vulnerabilities, the most serious of which may allow a

user-assisted attacker to execute arbitrary code via

maliciously crafted XML content. Other vulnerabilities

include Denials of Service.

Copyright 2008 rPath, Inc. This file is distributed under the terms of the MIT License. A copy is available at http://www.rpath.com/permanent/mit-license.html