Red Hat Security AdvisoryRHSA-2012:0018
libxml2 security update
Released 2012-01-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) libxml2-2.7.6-4.el6_2.1, libxml2-python-2.7.6-4.el6_2.1
- Red Hat Enterprise Linux Desktop Optional (v. 6) libxml2-2.7.6-4.el6_2.1, libxml2-devel-2.7.6-4.el6_2.1, libxml2-static-2.7.6-4.el6_2.1
- Red Hat Enterprise Linux HPC Node (v. 6) libxml2-2.7.6-4.el6_2.1, libxml2-python-2.7.6-4.el6_2.1
- Red Hat Enterprise Linux HPC Node Optional (v. 6) libxml2-2.7.6-4.el6_2.1, libxml2-devel-2.7.6-4.el6_2.1, libxml2-static-2.7.6-4.el6_2.1
- Red Hat Enterprise Linux Server (v. 6) libxml2-2.7.6-4.el6_2.1, libxml2-2.7.6-4.el6_2.1.ppc, libxml2-devel-2.7.6-4.el6_2.1 +2
- Red Hat Enterprise Linux Server Optional (v. 6) libxml2-2.7.6-4.el6_2.1, libxml2-static-2.7.6-4.el6_2.1
- Red Hat Enterprise Linux Workstation (v. 6) libxml2-2.7.6-4.el6_2.1, libxml2-devel-2.7.6-4.el6_2.1, libxml2-python-2.7.6-4.el6_2.1
- Red Hat Enterprise Linux Workstation Optional (v. 6) libxml2-2.7.6-4.el6_2.1, libxml2-static-2.7.6-4.el6_2.1
Fixes 2 records
Priority LOW 38
Heap-based buffer overflow in libxml2, as used in Google Chrome before 16.0.912.75, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02476 · Published 2012-01-07 · Fixed CWE-787
Priority LOW 26
libxml2, as used in Google Chrome before 16.0.912.63, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01599 · Published 2011-12-13 · Fixed CWE-125
