Red Hat Security AdvisoryRHSA-2008:0988
libxml2 security update
Released 2008-11-17 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 libxml2-2.5.10-14, libxml2-2.5.10-14.i386, libxml2-devel-2.5.10-14 +3
- Red Hat Enterprise Linux (v. 5 server) libxml2-2.6.26-2.1.2.7, libxml2-2.6.26-2.1.2.7.i386, libxml2-2.6.26-2.1.2.7.ia64 +9
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 libxml2-2.4.19-12.ent, libxml2-2.4.19-12.ent.i386, libxml2-2.4.19-12.ent.ia64 +4
- Red Hat Enterprise Linux AS version 3 libxml2-2.5.10-14, libxml2-2.5.10-14.i386, libxml2-2.5.10-14.ia64 +9
- Red Hat Enterprise Linux AS version 4 libxml2-2.6.16-12.6, libxml2-2.6.16-12.6.i386, libxml2-2.6.16-12.6.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 5 client) libxml2-2.6.26-2.1.2.7, libxml2-2.6.26-2.1.2.7.i386, libxml2-python-2.6.26-2.1.2.7 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) libxml2-2.6.26-2.1.2.7, libxml2-devel-2.6.26-2.1.2.7, libxml2-devel-2.6.26-2.1.2.7.i386
- Red Hat Enterprise Linux Desktop version 4 libxml2-2.6.16-12.6, libxml2-2.6.16-12.6.i386, libxml2-devel-2.6.16-12.6 +3
- Red Hat Enterprise Linux ES version 2.1 libxml2-2.4.19-12.ent, libxml2-2.4.19-12.ent.i386, libxml2-devel-2.4.19-12.ent.i386 +1
- Red Hat Enterprise Linux ES version 3 libxml2-2.5.10-14, libxml2-2.5.10-14.i386, libxml2-2.5.10-14.ia64 +6
- Red Hat Enterprise Linux ES version 4 libxml2-2.6.16-12.6, libxml2-2.6.16-12.6.i386, libxml2-2.6.16-12.6.ia64 +6
- Red Hat Enterprise Linux WS version 2.1 libxml2-2.4.19-12.ent, libxml2-2.4.19-12.ent.i386, libxml2-devel-2.4.19-12.ent.i386 +1
- Red Hat Enterprise Linux WS version 3 libxml2-2.5.10-14, libxml2-2.5.10-14.i386, libxml2-2.5.10-14.ia64 +6
- Red Hat Enterprise Linux WS version 4 libxml2-2.6.16-12.6, libxml2-2.6.16-12.6.i386, libxml2-2.6.16-12.6.ia64 +6
- Red Hat Linux Advanced Workstation 2.1 libxml2-2.4.19-12.ent, libxml2-2.4.19-12.ent.ia64, libxml2-devel-2.4.19-12.ent.ia64 +1
Fixes 2 records
Priority MEDIUM 50
Integer overflow in the xmlSAX2Characters function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a large XML document.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.04051 · Published 2008-11-25 · Fixed CWE-399
Priority MEDIUM 40
Integer overflow in the xmlBufferResize function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service (infinite loop) via a large XML document.
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.0321 · Published 2008-11-25 · Fixed CWE-189
