This bug was fixed in the package libxml2 - 2.7.8.dfsg-5.1ubuntu4.6 --------------- libxml2 (2.7.8.dfsg-5.1ubuntu4.6) precise-security; urgency=low
* SECURITY REGRESSION: regression with lxml (LP: #1201849) - parser.c: revised to fix regression, and a couple of wrong return values. - CVE-2013-2877 -- Marc Deslauriers <marc.deslauri...@ubuntu.com> Tue, 16 Jul 2013 14:05:24 -0400 ** Branch linked: lp:ubuntu/lucid-security/libxml2 ** Branch linked: lp:ubuntu/precise-security/libxml2 ** Branch linked: lp:ubuntu/quantal-security/libxml2 -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to libxml2 in Ubuntu. https://bugs.launchpad.net/bugs/1201849 Title: libxml2 security update regression Status in “libxml2” package in Ubuntu: New Status in “libxml2” source package in Lucid: Fix Released Status in “libxml2” source package in Precise: Fix Released Status in “libxml2” source package in Quantal: Fix Released Status in “libxml2” source package in Raring: New Bug description: USN-1904-1 seems to have introduced a regression. See https://bugs.launchpad.net/ubuntu/+source/libxml2/+bug/1194410/comments/5 Steps to reproduce: >>> from io import BytesIO >>> from lxml import etree >>> xml='''<root> ... <child name='one' /> ... <child name='two' /> ... </root> ... ''' >>> document = etree.iterparse(BytesIO(xml), events=('end',), tag='root') >>> for action, elem in document: ... print("%s: %s" % (action, elem.tag)) ... end: root >>> file('/tmp/test.xml', 'w').write(xml) >>> document = etree.iterparse('/tmp/test.xml', events=('end',), tag='root') >>> for action, elem in document: ... print("%s: %s" % (action, elem.tag)) ... end: root Traceback (most recent call last): File "<stdin>", line 1, in <module> File "iterparse.pxi", line 478, in lxml.etree.iterparse.__next__ (src/lxml/lxml.etree.c:98432) File "iterparse.pxi", line 530, in lxml.etree.iterparse._read_more_events (src/lxml/lxml.etree.c:98953) File "parser.pxi", line 601, in lxml.etree._raiseParseError (src/lxml/lxml.etree.c:74863) lxml.etree.XMLSyntaxError: None Can reproduce on Precise and Quantal To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/libxml2/+bug/1201849/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp