libxml2: Multiple vulnerabilities Multiple vulnerabilities were found in libxml2 which could lead to execution of arbitrary code or a Denial of Service. libxml2 2011-10-26 2011-10-26 345555 370715 386985 local, remote 2.7.8-r3 2.7.8-r3

libxml2 is the XML C parser and toolkit developed for the Gnome project.

Multiple vulnerabilities have been discovered in libxml2. Please review the CVE identifiers referenced below for details.

A local or remote attacker may be able to execute arbitrary code with the privileges of the application or cause a Denial of Service.

There is no known workaround at this time.

All libxml2 users should upgrade to the latest version:

# emerge --sync # emerge --ask --oneshot --verbose ">=dev-libs/libxml2-2.7.8-r3"
CVE-2010-4008 CVE-2010-4494 CVE-2011-1944 CVE-2011-2821 CVE-2011-2834 underling underling