=====================================================================
                                    CERT-Renater

                         Note d'Information No. 2011/VULN282
_____________________________________________________________________

DATE                      : 01/04/2011

HARDWARE PLATFORM(S)      : /

OPERATING SYSTEM(S)       : openSUSE version 11 running libxml2.

======================================================================
https://hermes.opensuse.org/messages/7775091
______________________________________________________________________
______________________________________________________________________________
Announcement ID:    openSUSE-SU-2011:0255-1
Rating:             moderate
References:         661471
Cross-References:   CVE-2010-4494
Affected Products:

openSUSE 11.3
openSUSE 11.2

______________________________________________________________________________

Description:

  A bug in the Xpath processing inside libxml2 has been
fixed. CVE-2010-4494 has been assigned to this issue.


Patch Instructions:
    - openSUSE 11.3:

       zypper in -t patch libxml2-3758

    - openSUSE 11.2:

       zypper in -t patch libxml2-3758



Package List:

    - openSUSE 11.3 (i586 x86_64):

       libxml2-2.7.7-4.5.1
       libxml2-devel-2.7.7-4.5.1

    - openSUSE 11.3 (x86_64):

       libxml2-32bit-2.7.7-4.5.1
       libxml2-devel-32bit-2.7.7-4.5.1

    - openSUSE 11.3 (noarch):

       libxml2-doc-2.7.7-4.5.1

    - openSUSE 11.2 (i586 x86_64):

       libxml2-2.7.3-2.5.1
       libxml2-devel-2.7.3-2.5.1
       libxml2-doc-2.7.3-2.5.1

    - openSUSE 11.2 (x86_64):

       libxml2-32bit-2.7.3-2.5.1
       libxml2-devel-32bit-2.7.3-2.5.1


References:

http://support.novell.com/security/cve/CVE-2010-4494.html
https://bugzilla.novell.com/661471



======================================================================

           =========================================================
           Les serveurs de référence du CERT-Renater
           http://www.urec.fr/securite
           http://www.cru.fr/securite
           http://www.renater.fr
           =========================================================
           + CERT-RENATER          | tel : 01-53-94-20-44          +
           + 23 - 25 Rue Daviel    | fax : 01-53-94-20-41          +
           + 75013 Paris           | email: certsvp@renater.fr     +
           =========================================================