Debian Long Term Support / LTS Security Information / 2017 / Security Information -- DLA-1171-1 libxml-libxml-perl

Debian Security Advisory

DLA-1171-1 libxml-libxml-perl -- LTS security update

Date Reported:

14 Nov 2017

Affected Packages:

libxml-libxml-perl

Vulnerable:

Yes

Security database references:

In the Debian bugtracking system: Bug 866676.
In Mitre's CVE dictionary: CVE-2017-10672.

More information:

The XML::LibXML perl module is affected by a "use-after-free" vulnerability which allows remote attackers to execute arbitrary code by controlling the arguments to a replaceChild() call.

For Debian 7 Wheezy, these problems have been fixed in version 2.0001+dfsg-1+deb7u2.

We recommend that you upgrade your libxml-libxml-perl packages.

Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS