libxml2 Recursive Entity Remote Denial of Service Vulnerability

Bugtraq ID:	30783
Class:	Design Error
CVE:	CVE-2008-3281
Remote:	Yes
Local:	No
Published:	Aug 21 2008 12:00AM
Updated:	Apr 13 2015 09:33PM
Credit:	Andreas Solberg
Vulnerable:	XMLSoft Libxml2 2.6.31 XMLSoft Libxml2 2.6.30 XMLSoft Libxml2 2.6.15 XMLSoft Libxml2 2.6.14 XMLSoft Libxml2 2.6.13 XMLSoft Libxml2 2.6.12 XMLSoft Libxml2 2.6.11 XMLSoft Libxml2 2.6.9 XMLSoft Libxml2 2.6.8 + Redhat Fedora Core2 XMLSoft Libxml2 2.6.7 XMLSoft Libxml2 2.6.6 XMLSoft Libxml2 2.6.5 XMLSoft Libxml2 2.6.4 XMLSoft Libxml2 2.6.3 XMLSoft Libxml2 2.6.2 XMLSoft Libxml2 2.6.1 XMLSoft Libxml2 2.6 .0 XMLSoft Libxml2 2.5.11 + Mandriva Linux Mandrake 9.2 amd64 + Mandriva Linux Mandrake 9.2 XMLSoft Libxml2 2.5.10 XMLSoft Libxml2 2.5.8 XMLSoft Libxml2 2.5.4 + Mandriva Linux Mandrake 9.1 ppc + Mandriva Linux Mandrake 9.1 XMLSoft Libxml2 2.5.1 XMLSoft Libxml2 2.4.23 XMLSoft Libxml2 2.4.19 + Debian Linux 3.0 sparc + Debian Linux 3.0 s/390 + Debian Linux 3.0 ppc + Debian Linux 3.0 mipsel + Debian Linux 3.0 mips + Debian Linux 3.0 m68k + Debian Linux 3.0 ia-64 + Debian Linux 3.0 ia-32 + Debian Linux 3.0 hppa + Debian Linux 3.0 arm + Debian Linux 3.0 alpha XMLSoft Libxml2 2.4.12 VMWare ESX Server 3.0.3 VMWare ESX Server 3.0.2 VMWare ESX Server 2.5.5 patch 8 VMWare ESX Server 2.5.5 patch 6 VMWare ESX Server 2.5.5 patch 4 VMWare ESX Server 2.5.5 patch 2 VMWare ESX Server 2.5.5 VMWare ESX Server 2.5.4 Patch 5 VMWare ESX Server 2.5.4 Patch 3 VMWare ESX Server 2.5.4 patch 19 VMWare ESX Server 2.5.4 Patch 17 VMWare ESX Server 2.5.4 Patch 16 VMWare ESX Server 2.5.4 patch 15 VMWare ESX Server 2.5.4 patch 13 VMWare ESX Server 2.5.4 Patch 10 VMWare ESX Server 2.5.4 Patch 1 VMWare ESX Server 2.5.4 VMWare ESX Server 3.5 VMWare ESX Server 2.5.5 patch 5 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 7.10 sparc Ubuntu Ubuntu Linux 7.10 powerpc Ubuntu Ubuntu Linux 7.10 lpia Ubuntu Ubuntu Linux 7.10 i386 Ubuntu Ubuntu Linux 7.10 amd64 Ubuntu Ubuntu Linux 7.04 sparc Ubuntu Ubuntu Linux 7.04 powerpc Ubuntu Ubuntu Linux 7.04 i386 Ubuntu Ubuntu Linux 7.04 amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 S.u.S.E. openSUSE 11.0 S.u.S.E. openSUSE 10.3 S.u.S.E. openSUSE 10.2 rPath rPath Linux 2 rPath rPath Linux 1 rPath Appliance Platform Linux Service 2 rPath Appliance Platform Linux Service 1 Redhat Enterprise Linux WS 4 Redhat Enterprise Linux WS 3 Redhat Enterprise Linux WS 2.1 IA64 Redhat Enterprise Linux WS 2.1 Redhat Enterprise Linux ES 4 Redhat Enterprise Linux ES 3 Redhat Enterprise Linux ES 2.1 IA64 Redhat Enterprise Linux ES 2.1 Redhat Enterprise Linux Desktop Workstation 5 client Redhat Enterprise Linux Desktop 5 client Redhat Enterprise Linux AS 4 Redhat Enterprise Linux AS 3 Redhat Enterprise Linux AS 2.1 IA64 Redhat Enterprise Linux AS 2.1 Redhat Enterprise Linux 5 Server Redhat Desktop 4.0 Redhat Desktop 3.0 Redhat Advanced Workstation for the Itanium Processor 2.1 IA64 Redhat Advanced Workstation for the Itanium Processor 2.1 Pardus Linux 2008 0 Pardus Linux 2007 0 Mandriva Linux Mandrake 2008.1 x86_64 Mandriva Linux Mandrake 2008.1 Mandriva Linux Mandrake 2008.0 x86_64 Mandriva Linux Mandrake 2008.0 Mandriva Linux Mandrake 2007.1 x86_64 Mandriva Linux Mandrake 2007.1 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 MandrakeSoft Corporate Server 4.0 Gentoo Linux Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0 Avaya Voice Portal 4.1 Avaya Voice Portal 4.0 Avaya Voice Portal 3.0 Avaya Proactive Contact 4.0 Avaya Proactive Contact 3.0 Avaya Proactive Contact 0 Avaya Messaging Storage Server MM3.0 Avaya Messaging Storage Server 4.0 Avaya Messaging Storage Server 3.1 Avaya Messaging Storage Server 2.0 Avaya Messaging Storage Server 1.0 Avaya Messaging Storage Server Avaya Message Networking MN 3.1 Avaya Message Networking 3.1 Avaya Message Networking Avaya Meeting Exchange - Enterprise Edition Avaya Meeting Exchange 5.0 .0.52 Avaya Meeting Exchange 5.0 Avaya Intuity AUDIX LX 2.0 Avaya EMMC 1.021 Avaya EMMC 1.017 Avaya EMMC 0 Avaya Communication Manager 3.1.4 SP2 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 Avaya Communication Manager 2.0.1 Avaya Communication Manager 2.0 Avaya Communication Manager 5.1 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 Avaya Communication Manager 5.0 SP3 Avaya Communication Manager 5.0 Avaya Communication Manager 3.1 Avaya Communication Manager 3.0 Avaya Communication Manager 2.2 Avaya Communication Manager 2.1 Avaya Aura SIP Enablement Services 5.0 Avaya Aura SIP Enablement Services 3.0 Avaya Aura Application Enablement Services 4.2.1 Avaya Aura Application Enablement Services 4.0.1 Avaya Aura Application Enablement Services 3.1.6 Avaya Aura Application Enablement Services 3.1.5 Avaya Aura Application Enablement Services 3.1.4 Avaya Aura Application Enablement Services 3.1.3 Avaya Aura Application Enablement Services 4.2 Avaya Aura Application Enablement Services 4.1 Avaya Aura Application Enablement Services 4.0 Avaya Aura Application Enablement Services 3.1 Avaya Aura Application Enablement Services 3.0 Apple Safari For Windows 3.2.1 Apple Safari 3.2.3 for Windows Apple Safari 3.2.3 Apple Safari 3.2.2 for Windows Apple Safari 3.1.2 for Windows Apple Safari 3.1.2 Apple Safari 3.1.1 for Windows Apple Safari 3.1.1 Apple Safari 3.0.4 Beta for Windows Apple Safari 3.0.3 Beta for Windows Apple Safari 3.0.3 Beta Apple Safari 3.0.2 Beta for Windows Apple Safari 3.0.2 Beta Apple Safari 3.0.1 Beta for Windows Apple Safari 3.0.1 Beta Apple Safari 2.0.4 Apple Safari 2.0.3 Apple Safari 2.0.2 Apple Safari 2.0.1 + Apple Mac OS X 10.4.2 + Apple Mac OS X 10.4.1 + Apple Mac OS X 10.4 + Apple Mac OS X Server 10.4.2 + Apple Mac OS X Server 10.4.1 + Apple Mac OS X Server 10.4 Apple Safari 1.3.2 Apple Safari 1.3.1 Apple Safari 1.3 + Apple Mac OS X 10.3.9 Apple Safari 1.2.3 Apple Safari 1.2.2 Apple Safari 1.2.1 Apple Safari 1.2 + Apple Mac OS X 10.3.7 + Apple Mac OS X 10.3.7 + Apple Mac OS X 10.3.6 + Apple Mac OS X 10.3.6 + Apple Mac OS X 10.3.5 + Apple Mac OS X 10.3.5 + Apple Mac OS X 10.3.4 + Apple Mac OS X 10.3.4 + Apple Mac OS X 10.3.3 + Apple Mac OS X 10.3.3 + Apple Mac OS X 10.3.2 + Apple Mac OS X 10.3.2 + Apple Mac OS X 10.3.1 + Apple Mac OS X 10.3.1 + Apple Mac OS X 10.3 + Apple Mac OS X 10.3 + Apple Mac OS X 10.2.8 + Apple Mac OS X 10.2.8 + Apple Mac OS X 10.2.7 + Apple Mac OS X 10.2.7 + Apple Mac OS X 10.2.6 + Apple Mac OS X 10.2.6 + Apple Mac OS X 10.2.5 + Apple Mac OS X 10.2.5 + Apple Mac OS X 10.2.4 + Apple Mac OS X 10.2.4 + Apple Mac OS X 10.2.3 + Apple Mac OS X 10.2.3 + Apple Mac OS X 10.2.2 + Apple Mac OS X 10.2.2 + Apple Mac OS X 10.2.1 + Apple Mac OS X 10.2.1 + Apple Mac OS X 10.2 + Apple Mac OS X 10.2 + Apple Mac OS X Server 10.3.7 + Apple Mac OS X Server 10.3.6 + Apple Mac OS X Server 10.3.6 + Apple Mac OS X Server 10.3.5 + Apple Mac OS X Server 10.3.5 + Apple Mac OS X Server 10.3.4 + Apple Mac OS X Server 10.3.4 + Apple Mac OS X Server 10.3.3 + Apple Mac OS X Server 10.3.3 + Apple Mac OS X Server 10.3.2 + Apple Mac OS X Server 10.3.2 + Apple Mac OS X Server 10.3.1 + Apple Mac OS X Server 10.3.1 + Apple Mac OS X Server 10.3 + Apple Mac OS X Server 10.3 + Apple Mac OS X Server 10.2.8 + Apple Mac OS X Server 10.2.8 + Apple Mac OS X Server 10.2.7 + Apple Mac OS X Server 10.2.7 + Apple Mac OS X Server 10.2.6 + Apple Mac OS X Server 10.2.6 + Apple Mac OS X Server 10.2.5 + Apple Mac OS X Server 10.2.5 + Apple Mac OS X Server 10.2.4 + Apple Mac OS X Server 10.2.4 + Apple Mac OS X Server 10.2.3 + Apple Mac OS X Server 10.2.3 + Apple Mac OS X Server 10.2.2 + Apple Mac OS X Server 10.2.2 + Apple Mac OS X Server 10.2.1 + Apple Mac OS X Server 10.2.1 + Apple Mac OS X Server 10.2 + Apple Mac OS X Server 10.2 Apple Safari 1.1 Apple Safari 1.0 + Apple Mac OS X 10.2.8 + Apple Mac OS X 10.2.8 + Apple Mac OS X 10.2.7 + Apple Mac OS X 10.2.7 + Apple Mac OS X 10.2.6 + Apple Mac OS X 10.2.6 + Apple Mac OS X 10.2.5 + Apple Mac OS X 10.2.5 + Apple Mac OS X 10.2.4 + Apple Mac OS X 10.2.4 + Apple Mac OS X 10.2.3 + Apple Mac OS X 10.2.3 + Apple Mac OS X 10.2.2 + Apple Mac OS X 10.2.2 + Apple Mac OS X 10.2.1 + Apple Mac OS X 10.2.1 + Apple Mac OS X 10.2 + Apple Mac OS X 10.2 + Apple Mac OS X Server 10.2.8 + Apple Mac OS X Server 10.2.7 + Apple Mac OS X Server 10.2.7 + Apple Mac OS X Server 10.2.6 + Apple Mac OS X Server 10.2.6 + Apple Mac OS X Server 10.2.5 + Apple Mac OS X Server 10.2.5 + Apple Mac OS X Server 10.2.4 + Apple Mac OS X Server 10.2.4 + Apple Mac OS X Server 10.2.3 + Apple Mac OS X Server 10.2.3 + Apple Mac OS X Server 10.2.2 + Apple Mac OS X Server 10.2.2 + Apple Mac OS X Server 10.2.1 + Apple Mac OS X Server 10.2.1 + Apple Mac OS X Server 10.2 + Apple Mac OS X Server 10.2 Apple Safari Beta 2 Apple Safari 4 Beta Apple Safari 3.2 Apple Safari 3.1 for Windows Apple Safari 3.1 Apple Safari 3 Beta for Windows Apple Safari 3 Beta Apple Safari 3 Apple iPod Touch 2.2.1 Apple iPod Touch 2.0.2 Apple iPod Touch 2.0.1 Apple iPod Touch 1.1.4 Apple iPod Touch 1.1.3 Apple iPod Touch 1.1.2 Apple iPod Touch 1.1.1 Apple iPod Touch 2.2 Apple iPod Touch 2.1 Apple iPod Touch 2.0 Apple iPod Touch 1.1 Apple iPhone 2.2.1 Apple iPhone 2.0.2 Apple iPhone 2.0.1 Apple iPhone 1.1.4 Apple iPhone 1.1.3 Apple iPhone 1.1.2 Apple iPhone 1.1.1 Apple iPhone 1.0.2 Apple iPhone 1.0.1 Apple iPhone 2.2 Apple iPhone 2.1 Apple iPhone 2.0 Apple iPhone 1.1 Apple iPhone 1
Not Vulnerable:	VMWare ESX Server 2.5.5 patch 10 VMWare ESX Server 2.5.4 patch 21 Apple Safari 4 for Windows Apple Safari 4 Apple iPod Touch 3.0 Apple iPhone 3.0

libxml2 Recursive Entity Remote Denial of Service Vulnerability

The libxml2 library is prone to a denial-of-service vulnerability.

An attacker can exploit this issue to cause the library to consume an excessive amount of memory, denying service to legitimate users.

libxml2 Recursive Entity Remote Denial of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

libxml2 Recursive Entity Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for more information.


Ubuntu Ubuntu Linux 7.10 powerpc

• Ubuntu libxml2-dbg_2.6.30.dfsg-2ubuntu1.2_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/libx/libxml2/libxml2-dbg_2 .6.30.dfsg-2ubuntu1.2_powerpc.deb


• Ubuntu libxml2-dbg_2.6.30.dfsg-2ubuntu1.3_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/libx/libxml2/libxml2-dbg_2 .6.30.dfsg-2ubuntu1.3_powerpc.deb


• Ubuntu libxml2-doc_2.6.30.dfsg-2ubuntu1.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/libx/libxml2/libxml2-doc_2 .6.30.dfsg-2ubuntu1.2_all.deb


• Ubuntu libxml2-doc_2.6.30.dfsg-2ubuntu1.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/libx/libxml2/libxml2-doc_2 .6.30.dfsg-2ubuntu1.3_all.deb


• Ubuntu libxml2-utils_2.6.30.dfsg-2ubuntu1.2_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/libx/libxml2/libxml2-utils _2.6.30.dfsg-2ubuntu1.2_powerpc.deb


• Ubuntu libxml2-utils_2.6.30.dfsg-2ubuntu1.3_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/libx/libxml2/libxml2-utils _2.6.30.dfsg-2ubuntu1.3_powerpc.deb


• Ubuntu python-libxml2-dbg_2.6.30.dfsg-2ubuntu1.2_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/libx/libxml2/python-libxml 2-dbg_2.6.30.dfsg-2ubuntu1.2_powerpc.deb


• Ubuntu python-libxml2-dbg_2.6.30.dfsg-2ubuntu1.3_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/libx/libxml2/python-libxml 2-dbg_2.6.30.dfsg-2ubuntu1.3_powerpc.deb


• Ubuntu python-libxml2_2.6.30.dfsg-2ubuntu1.2_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/libx/libxml2/python-libxml 2_2.6.30.dfsg-2ubuntu1.2_powerpc.deb


• Ubuntu python-libxml2_2.6.30.dfsg-2ubuntu1.3_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/libx/libxml2/python-libxml 2_2.6.30.dfsg-2ubuntu1.3_powerpc.deb

Debian Linux 4.0 amd64

• Debian libxml2-dbg_2.6.27.dfsg-4_amd64.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-dbg_ 2.6.27.dfsg-4_amd64.deb


• Debian libxml2-dev_2.6.27.dfsg-4_amd64.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-dev_ 2.6.27.dfsg-4_amd64.deb


• Debian libxml2-doc_2.6.27.dfsg-4_all.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-doc_ 2.6.27.dfsg-4_all.deb


• Debian libxml2-utils_2.6.27.dfsg-4_amd64.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-util s_2.6.27.dfsg-4_amd64.deb


• Debian libxml2_2.6.27.dfsg-4_amd64.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2_2.6. 27.dfsg-4_amd64.deb


• Debian python-libxml2_2.6.27.dfsg-4_amd64.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/python-libxm l2_2.6.27.dfsg-4_amd64.deb

Debian Linux 4.0 ia-32

• Debian libxml2-dbg_2.6.27.dfsg-4_i386.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-dbg_ 2.6.27.dfsg-4_i386.deb


• Debian libxml2-dev_2.6.27.dfsg-4_i386.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-dev_ 2.6.27.dfsg-4_i386.deb


• Debian libxml2-doc_2.6.27.dfsg-4_all.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-doc_ 2.6.27.dfsg-4_all.deb


• Debian libxml2-utils_2.6.27.dfsg-4_i386.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-util s_2.6.27.dfsg-4_i386.deb


• Debian libxml2_2.6.27.dfsg-4_i386.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2_2.6. 27.dfsg-4_i386.deb

Apple Safari 3.1

• Apple Safari4.0Leo.dmg
  http://www.apple.com/safari/download/


• Apple Safari4.0Ti.dmg
  http://www.apple.com/safari/download/

Apple Safari 4 Beta

• Apple Safari4.0Leo.dmg
  http://www.apple.com/safari/download/


• Apple Safari4.0Ti.dmg
  http://www.apple.com/safari/download/

Debian Linux 4.0 mips

• Debian libxml2-dbg_2.6.27.dfsg-4_mips.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-dbg_ 2.6.27.dfsg-4_mips.deb


• Debian libxml2-dev_2.6.27.dfsg-4_mips.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-dev_ 2.6.27.dfsg-4_mips.deb


• Debian libxml2-doc_2.6.27.dfsg-4_all.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-doc_ 2.6.27.dfsg-4_all.deb


• Debian libxml2-utils_2.6.27.dfsg-4_mips.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-util s_2.6.27.dfsg-4_mips.deb


• Debian libxml2_2.6.27.dfsg-4_mips.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2_2.6. 27.dfsg-4_mips.deb

Apple Safari 3 Beta

• Apple Safari4.0Leo.dmg
  http://www.apple.com/safari/download/


• Apple Safari4.0Ti.dmg
  http://www.apple.com/safari/download/

Apple Safari 3

• Apple Safari4.0Leo.dmg
  http://www.apple.com/safari/download/


• Apple Safari4.0Ti.dmg
  http://www.apple.com/safari/download/

Debian Linux 4.0 arm

• Debian libxml2-dbg_2.6.27.dfsg-4_arm.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-dbg_ 2.6.27.dfsg-4_arm.deb


• Debian libxml2-dev_2.6.27.dfsg-4_arm.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-dev_ 2.6.27.dfsg-4_arm.deb


• Debian libxml2-doc_2.6.27.dfsg-4_all.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-doc_ 2.6.27.dfsg-4_all.deb


• Debian libxml2-utils_2.6.27.dfsg-4_arm.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-util s_2.6.27.dfsg-4_arm.deb


• Debian libxml2_2.6.27.dfsg-4_arm.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2_2.6. 27.dfsg-4_arm.deb


• Debian python-libxml2_2.6.27.dfsg-4_arm.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/python-libxm l2_2.6.27.dfsg-4_arm.deb

Debian Linux 4.0 powerpc

• Debian libxml2-dbg_2.6.27.dfsg-4_powerpc.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-dbg_ 2.6.27.dfsg-4_powerpc.deb


• Debian libxml2-dev_2.6.27.dfsg-4_powerpc.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-dev_ 2.6.27.dfsg-4_powerpc.deb


• Debian libxml2-doc_2.6.27.dfsg-4_all.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-doc_ 2.6.27.dfsg-4_all.deb


• Debian libxml2-utils_2.6.27.dfsg-4_powerpc.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-util s_2.6.27.dfsg-4_powerpc.deb


• Debian libxml2_2.6.27.dfsg-4_powerpc.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2_2.6. 27.dfsg-4_powerpc.deb

Debian Linux 4.0 m68k

• Debian libxml2-doc_2.6.27.dfsg-4_all.deb
  http://security.debian.org/pool/updates/main/libx/libxml2/libxml2-doc_ 2.6.27.dfsg-4_all.deb

Ubuntu Ubuntu Linux 8.04 LTS lpia

• Ubuntu libxml2-dbg_2.6.31.dfsg-2ubuntu1.1_lpia.deb
  http://ports.ubuntu.com/pool/main/libx/libxml2/libxml2-dbg_2.6.31.dfsg -2ubuntu1.1_lpia.deb


• Ubuntu libxml2-dbg_2.6.31.dfsg-2ubuntu1.2_lpia.deb
  http://ports.ubuntu.com/pool/main/libx/libxml2/libxml2-dbg_2.6.31.dfsg -2ubuntu1.2_lpia.deb


• Ubuntu libxml2-dev_2.6.31.dfsg-2ubuntu1.1_lpia.deb
  http://ports.ubuntu.com/pool/main/libx/libxml2/libxml2-dev_2.6.31.dfsg -2ubuntu1.1_lpia.deb


• Ubuntu libxml2-dev_2.6.31.dfsg-2ubuntu1.2_lpia.deb
  http://ports.ubuntu.com/pool/main/libx/libxml2/libxml2-dev_2.6.31.dfsg -2ubuntu1.2_lpia.deb


• Ubuntu libxml2-udeb_2.6.31.dfsg-2ubuntu1.1_lpia.udeb
  http://ports.ubuntu.com/pool/main/libx/libxml2/libxml2-udeb_2.6.31.dfs g-2ubuntu1.1_lpia.udeb


• Ubuntu libxml2-udeb_2.6.31.dfsg-2ubuntu1.2_lpia.udeb
  http://ports.ubuntu.com/pool/main/libx/libxml2/libxml2-udeb_2.6.31.dfs g-2ubuntu1.2_lpia.udeb


• Ubuntu libxml2_2.6.31.dfsg-2ubuntu1.2_lpia.deb
  http://ports.ubuntu.com/pool/main/libx/libxml2/libxml2_2.6.31.dfsg-2ub untu1.2_lpia.deb


• Ubuntu python-libxml2-dbg_2.6.31.dfsg-2ubuntu1.1_lpia.deb
  http://ports.ubuntu.com/pool/main/libx/libxml2/python-libxml2-dbg_2.6. 31.dfsg-2ubuntu1.1_lpia.deb


• Ubuntu python-libxml2-dbg_2.6.31.dfsg-2ubuntu1.2_lpia.deb
  http://ports.ubuntu.com/pool/main/libx/libxml2/python-libxml2-dbg_2.6. 31.dfsg-2ubuntu1.2_lpia.deb


• Ubuntu python-libxml2_2.6.31.dfsg-2ubuntu1.2_lpia.deb
  http://ports.ubuntu.com/pool/main/libx/libxml2/python-libxml2_2.6.31.d fsg-2ubuntu1.2_lpia.deb

Ubuntu Ubuntu Linux 7.10 lpia

• Ubuntu libxml2-dbg_2.6.30.dfsg-2ubuntu1.2_lpia.deb
  http://ports.ubuntu.com/pool/main/libx/libxml2/libxml2-dbg_2.6.30.dfsg -2ubuntu1.2_lpia.deb


• Ubuntu libxml2-dbg_2.6.30.dfsg-2ubuntu1.3_lpia.deb
  http://ports.ubuntu.com/pool/main/libx/libxml2/libxml2-dbg_2.6.30.dfsg -2ubuntu1.3_lpia.deb


• Ubuntu libxml2-doc_2.6.30.dfsg-2ubuntu1.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/libx/libxml2/libxml2-doc_2 .6.30.dfsg-2ubuntu1.2_all.deb


• Ubuntu libxml2-doc_2.6.30.dfsg-2ubuntu1.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/libx/libxml2/libxml2-doc_2 .6.30.dfsg-2ubuntu1.3_all.deb


• Ubuntu libxml2-utils_2.6.30.dfsg-2ubuntu1.2_lpia.deb
  http://ports.ubuntu.com/pool/main/libx/libxml2/libxml2-utils_2.6.30.df sg-2ubuntu1.2_lpia.deb


• Ubuntu libxml2-utils_2.6.30.dfsg-2ubuntu1.3_lpia.deb
  http://ports.ubuntu.com/pool/main/libx/libxml2/libxml2-utils_2.6.30.df sg-2ubuntu1.3_lpia.deb


• Ubuntu python-libxml2-dbg_2.6.30.dfsg-2ubuntu1.2_lpia.deb
  http://ports.ubuntu.com/pool/main/libx/libxml2/python-libxml2-dbg_2.6. 30.dfsg-2ubuntu1.2_lpia.deb


• Ubuntu python-libxml2-dbg_2.6.30.dfsg-2ubuntu1.3_lpia.deb
  http://ports.ubuntu.com/pool/main/libx/libxml2/python-libxml2-dbg_2.6. 30.dfsg-2ubuntu1.3_lpia.deb


• Ubuntu python-libxml2_2.6.30.dfsg-2ubuntu1.2_lpia.deb
  http://ports.ubuntu.com/pool/main/libx/libxml2/python-libxml2_2.6.30.d fsg-2ubuntu1.2_lpia.deb


• Ubuntu python-libxml2_2.6.30.dfsg-2ubuntu1.3_lpia.deb
  http://ports.ubuntu.com/pool/main/libx/libxml2/python-libxml2_2.6.30.d fsg-2ubuntu1.3_lpia.deb

Apple Safari 1.0

• Apple Safari4.0Leo.dmg
  http://www.apple.com/safari/download/


• Apple Safari4.0Ti.dmg
  http://www.apple.com/safari/download/

Apple Safari 1.1

• Apple Safari4.0Leo.dmg
  http://www.apple.com/safari/download/


• Apple Safari4.0Ti.dmg
  http://www.apple.com/safari/download/

Apple Safari 1.2

• Apple Safari4.0Leo.dmg
  http://www.apple.com/safari/download/


• Apple Safari4.0Ti.dmg
  http://www.apple.com/safari/download/

Apple Safari 1.2.2

• Apple Safari4.0Leo.dmg
  http://www.apple.com/safari/download/


• Apple Safari4.0Ti.dmg
  http://www.apple.com/safari/download/

Apple Safari 1.2.3

• Apple Safari4.0Leo.dmg
  http://www.apple.com/safari/download/


• Apple Safari4.0Ti.dmg
  http://www.apple.com/safari/download/

Apple Safari 1.3

• Apple Safari4.0Leo.dmg
  http://www.apple.com/safari/download/


• Apple Safari4.0Ti.dmg
  http://www.apple.com/safari/download/

Apple Safari 2.0.1

• Apple Safari4.0Leo.dmg
  http://www.apple.com/safari/download/


• Apple Safari4.0Ti.dmg
  http://www.apple.com/safari/download/

Apple Safari 2.0.3

• Apple Safari4.0Leo.dmg
  http://www.apple.com/safari/download/


• Apple Safari4.0Ti.dmg
  http://www.apple.com/safari/download/

Apple Safari 3.0.1 Beta

• Apple Safari4.0Leo.dmg
  http://www.apple.com/safari/download/


• Apple Safari4.0Ti.dmg
  http://www.apple.com/safari/download/

Apple Safari 3.0.3 Beta

• Apple Safari4.0Leo.dmg
  http://www.apple.com/safari/download/


• Apple Safari4.0Ti.dmg
  http://www.apple.com/safari/download/

libxml2 Recursive Entity Remote Denial of Service Vulnerability

References:

• ASA-2008-402 - libxml2 security update (RHSA-2008-0836) (Avaya)