[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <4E3236AC.6000100@redhat.com>
Date: Fri, 29 Jul 2011 09:57:24 +0530
From: Huzaifa Sidhpurwala <huzaifas@...hat.com>
To: oss-security@...ts.openwall.com
CC: Marcus Meissner <meissner@...e.de>, veillard@...hat.com,
billy.rios@...il.com
Subject: Re: libxml security fix from apple ... any information?
On 07/28/2011 06:52 PM, Marcus Meissner wrote:
> Hi folks, Billy, Daniel,
>
> On
> http://support.apple.com/kb/HT4808
> there is a libxml security issue listed:
>
> -----------------------------------------
> libxml
>
> Available for: Windows 7, Vista, XP SP2 or later
>
> Impact: Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution
>
> Description: A one-byte heap buffer overflow existed in libxml's handling of XML data. Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution.
>
> CVE-ID
>
> CVE-2011-0216 : Billy Rios of the Google Security Team
> -----------------------------------------
>
> I suspect this is libxml2 and it likely also affects Linux?
>
> If this is correct, could you identify the commit fixing this issue?
>
As far as i know, this does not affect linux
--
Huzaifa Sidhpurwala / Red Hat Security Response Team
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
