Red Hat Security AdvisoryRHSA-2013:0131
gnome-vfs2 security and bug fix update
Released 2013-01-08 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) gnome-vfs2-2.16.2-10.el5, gnome-vfs2-2.16.2-10.el5.i386, gnome-vfs2-2.16.2-10.el5.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 5 client) gnome-vfs2-2.16.2-10.el5, gnome-vfs2-2.16.2-10.el5.i386, gnome-vfs2-smb-2.16.2-10.el5 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) gnome-vfs2-2.16.2-10.el5, gnome-vfs2-devel-2.16.2-10.el5, gnome-vfs2-devel-2.16.2-10.el5.i386
Fixes 1 record
Priority LOW 31
neon before 0.28.6, when expat is used, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafted XML doc…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.08437 · Published 2009-08-21 · Partial fix CWE-399
