Red Hat Security AdvisoryRHSA-2009:1206
libxml and libxml2 security update
Released 2009-08-10 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 libxml-1:1.8.17-9.3, libxml-1:1.8.17-9.3.i386, libxml-devel-1:1.8.17-9.3 +7
- Red Hat Enterprise Linux (v. 5 server) libxml2-2.6.26-2.1.2.8, libxml2-2.6.26-2.1.2.8.i386, libxml2-2.6.26-2.1.2.8.ia64 +9
- Red Hat Enterprise Linux AS version 3 libxml-1:1.8.17-9.3, libxml-1:1.8.17-9.3.i386, libxml-1:1.8.17-9.3.ia64 +17
- Red Hat Enterprise Linux AS version 4 libxml2-2.6.16-12.7, libxml2-2.6.16-12.7.i386, libxml2-2.6.16-12.7.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 5 client) libxml2-2.6.26-2.1.2.8, libxml2-2.6.26-2.1.2.8.i386, libxml2-python-2.6.26-2.1.2.8 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) libxml2-2.6.26-2.1.2.8, libxml2-devel-2.6.26-2.1.2.8, libxml2-devel-2.6.26-2.1.2.8.i386
- Red Hat Enterprise Linux Desktop version 4 libxml2-2.6.16-12.7, libxml2-2.6.16-12.7.i386, libxml2-devel-2.6.16-12.7 +3
- Red Hat Enterprise Linux ES version 3 libxml-1:1.8.17-9.3, libxml-1:1.8.17-9.3.i386, libxml-1:1.8.17-9.3.ia64 +12
- Red Hat Enterprise Linux ES version 4 libxml2-2.6.16-12.7, libxml2-2.6.16-12.7.i386, libxml2-2.6.16-12.7.ia64 +6
- Red Hat Enterprise Linux WS version 3 libxml-1:1.8.17-9.3, libxml-1:1.8.17-9.3.i386, libxml-1:1.8.17-9.3.ia64 +12
- Red Hat Enterprise Linux WS version 4 libxml2-2.6.16-12.7, libxml2-2.6.16-12.7.i386, libxml2-2.6.16-12.7.ia64 +6
Fixes 2 records
Priority LOW 33
Multiple use-after-free vulnerabilities in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml 1.8.17, allow context-dependent attackers to cause a denial of service (application crash) via crafted (1) Notatio…
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.0196 · Published 2009-08-11 · Fixed CWE-416
Priority LOW 26
Stack consumption vulnerability in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml 1.8.17, allows context-dependent attackers to cause a denial of service (application crash) via a large depth of element d…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.03135 · Published 2009-08-11 · Fixed CWE-119
