Red Hat Security AdvisoryRHSA-2008:0884
libxml2 security update
Released 2008-09-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 libxml2-2.5.10-13, libxml2-2.5.10-13.i386, libxml2-devel-2.5.10-13 +3
- Red Hat Enterprise Linux (v. 5 server) libxml2-2.6.26-2.1.2.6, libxml2-2.6.26-2.1.2.6.i386, libxml2-2.6.26-2.1.2.6.ia64 +9
- Red Hat Enterprise Linux AS version 3 libxml2-2.5.10-13, libxml2-2.5.10-13.i386, libxml2-2.5.10-13.ia64 +9
- Red Hat Enterprise Linux AS version 4 libxml2-2.6.16-12.5, libxml2-2.6.16-12.5.i386, libxml2-2.6.16-12.5.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 5 client) libxml2-2.6.26-2.1.2.6, libxml2-2.6.26-2.1.2.6.i386, libxml2-python-2.6.26-2.1.2.6 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) libxml2-2.6.26-2.1.2.6, libxml2-devel-2.6.26-2.1.2.6, libxml2-devel-2.6.26-2.1.2.6.i386
- Red Hat Enterprise Linux Desktop version 4 libxml2-2.6.16-12.5, libxml2-2.6.16-12.5.i386, libxml2-devel-2.6.16-12.5 +3
- Red Hat Enterprise Linux ES version 3 libxml2-2.5.10-13, libxml2-2.5.10-13.i386, libxml2-2.5.10-13.ia64 +6
- Red Hat Enterprise Linux ES version 4 libxml2-2.6.16-12.5, libxml2-2.6.16-12.5.i386, libxml2-2.6.16-12.5.ia64 +6
- Red Hat Enterprise Linux WS version 3 libxml2-2.5.10-13, libxml2-2.5.10-13.i386, libxml2-2.5.10-13.ia64 +6
- Red Hat Enterprise Linux WS version 4 libxml2-2.6.16-12.5, libxml2-2.6.16-12.5.i386, libxml2-2.6.16-12.5.ia64 +6
Fixes 1 record
Priority MEDIUM 63
Heap-based buffer overflow in the xmlParseAttValueComplex function in parser.c in libxml2 before 2.7.0 allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via a long XML enti…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.23373 · Published 2008-09-12 · Fixed CWE-119
