Debian Security Advisory DSA 2417-1 (libxml2)

Summary
The remote host is missing an update to libxml2 announced via advisory DSA 2417-1.
Solution
https://secure1.securityspace.com/smysecure/catid.html?in=DSA%202417-1
Insight
It was discovered that the internal hashing routine of libxml2, a library providing an extensive API to handle XML data, is vulnerable to predictable hash collisions. Given an attacker with knowledge of the hashing algorithm, it is possible to craft input that creates a large amount of collisions. As a result it is possible to perform denial of service attacks against applications using libxml2 functionality because of the computational overhead. For the stable distribution (squeeze), this problem has been fixed in version 2.7.8.dfsg-2+squeeze3. For the testing (wheezy) and unstable (sid) distributions, this problem will be fixed soon. We recommend that you upgrade your libxml2 packages.