Red Hat Security AdvisoryRHSA-2008:0836
libxml2 security update
Released 2008-08-21 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 libxml2-2.5.10-11, libxml2-2.5.10-11.i386, libxml2-devel-2.5.10-11 +3
- Red Hat Enterprise Linux (v. 5 server) libxml2-2.6.26-2.1.2.4, libxml2-2.6.26-2.1.2.4.i386, libxml2-2.6.26-2.1.2.4.ia64 +9
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 libxml2-2.4.19-9.ent, libxml2-2.4.19-9.ent.i386, libxml2-2.4.19-9.ent.ia64 +4
- Red Hat Enterprise Linux AS version 3 libxml2-2.5.10-11, libxml2-2.5.10-11.i386, libxml2-2.5.10-11.ia64 +9
- Red Hat Enterprise Linux AS version 4 libxml2-2.6.16-12.3, libxml2-2.6.16-12.3.i386, libxml2-2.6.16-12.3.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 5 client) libxml2-2.6.26-2.1.2.4, libxml2-2.6.26-2.1.2.4.i386, libxml2-python-2.6.26-2.1.2.4 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) libxml2-2.6.26-2.1.2.4, libxml2-devel-2.6.26-2.1.2.4, libxml2-devel-2.6.26-2.1.2.4.i386
- Red Hat Enterprise Linux Desktop version 4 libxml2-2.6.16-12.3, libxml2-2.6.16-12.3.i386, libxml2-devel-2.6.16-12.3 +3
- Red Hat Enterprise Linux ES version 2.1 libxml2-2.4.19-9.ent, libxml2-2.4.19-9.ent.i386, libxml2-devel-2.4.19-9.ent.i386 +1
- Red Hat Enterprise Linux ES version 3 libxml2-2.5.10-11, libxml2-2.5.10-11.i386, libxml2-2.5.10-11.ia64 +6
- Red Hat Enterprise Linux ES version 4 libxml2-2.6.16-12.3, libxml2-2.6.16-12.3.i386, libxml2-2.6.16-12.3.ia64 +6
- Red Hat Enterprise Linux WS version 2.1 libxml2-2.4.19-9.ent, libxml2-2.4.19-9.ent.i386, libxml2-devel-2.4.19-9.ent.i386 +1
- Red Hat Enterprise Linux WS version 3 libxml2-2.5.10-11, libxml2-2.5.10-11.i386, libxml2-2.5.10-11.ia64 +6
- Red Hat Enterprise Linux WS version 4 libxml2-2.6.16-12.3, libxml2-2.6.16-12.3.i386, libxml2-2.6.16-12.3.ia64 +6
- Red Hat Linux Advanced Workstation 2.1 libxml2-2.4.19-9.ent, libxml2-2.4.19-9.ent.ia64, libxml2-devel-2.4.19-9.ent.ia64 +1
Fixes 1 record
Priority LOW 34
libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafte…
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.02507 · Published 2008-08-27 · Fixed CWE-776
