Paketname
kompozer
Datum
2009-08-24
Advisory ID
MDVSA-2009:219
Betroffene Versionen
2009.0 x86_64 , 2009.0 i586 , 2009.1 i586 , 2009.1 x86_64

Problembeschreibung

A vulnerability was found in xmltok_impl.c (expat) that with
specially crafted XML could be exploited and lead to a denial of
service attack. Related to CVE-2009-2625 (CVE-2009-3720).

Additionally on 2009.0 a patch was added to prevent kompozer from
crashing (#44830), on 2009.1 a format string patch was added to make
it build with the -Wformat -Werror=format-security gcc optimization
switch added in 2009.1

This update fixes these issues.

Aktualisierte Pakete

2009.0 x86_64

 7f9547dc0af74f015ca28d57808f33d1  2009.0/x86_64/kompozer-0.7.10-3.2mdv2009.0.x86_64.rpm
 4767d2a9f5e400594edd33992b0cfa3f  2009.0/x86_64/kompozer-devel-0.7.10-3.2mdv2009.0.x86_64.rpm 
 70b15f82ad77d6fae7683bc7a76b73c6  2009.0/SRPMS/kompozer-0.7.10-3.2mdv2009.0.src.rpm

2009.0 i586

 40b57bb8609896b9f3414d394a2b80aa  2009.0/i586/kompozer-0.7.10-3.2mdv2009.0.i586.rpm
 2b3fad1cc94862007b46120467f1b32b  2009.0/i586/kompozer-devel-0.7.10-3.2mdv2009.0.i586.rpm 
 70b15f82ad77d6fae7683bc7a76b73c6  2009.0/SRPMS/kompozer-0.7.10-3.2mdv2009.0.src.rpm

2009.1 i586

 c6c2cc21a9332f629dd2406b1530a96a  2009.1/i586/kompozer-0.7.10-4.1mdv2009.1.i586.rpm
 b3a94128d547cfb70e357b5de7eecc9f  2009.1/i586/kompozer-devel-0.7.10-4.1mdv2009.1.i586.rpm 
 6f17fed53183c4b88697c94c3a15b544  2009.1/SRPMS/kompozer-0.7.10-4.1mdv2009.1.src.rpm

2009.1 x86_64

 9238d4b652f3bffbdfb353a362ba12b8  2009.1/x86_64/kompozer-0.7.10-4.1mdv2009.1.x86_64.rpm
 3dd34e69b846d39843dc759c9977a525  2009.1/x86_64/kompozer-devel-0.7.10-4.1mdv2009.1.x86_64.rpm 
 6f17fed53183c4b88697c94c3a15b544  2009.1/SRPMS/kompozer-0.7.10-4.1mdv2009.1.src.rpm

Referenzen