Red Hat Security AdvisoryRHSA-2012:0324
libxml2 security update
Released 2012-02-21 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- RHEL Desktop Workstation (v. 5 client) libxml2-2.6.26-2.1.15.el5_8.2, libxml2-devel-2.6.26-2.1.15.el5_8.2, libxml2-devel-2.6.26-2.1.15.el5_8.2.i386
- Red Hat Enterprise Linux (v. 5 server) libxml2-2.6.26-2.1.15.el5_8.2, libxml2-2.6.26-2.1.15.el5_8.2.i386, libxml2-2.6.26-2.1.15.el5_8.2.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 5 client) libxml2-2.6.26-2.1.15.el5_8.2, libxml2-2.6.26-2.1.15.el5_8.2.i386, libxml2-python-2.6.26-2.1.15.el5_8.2 +1
- Red Hat Enterprise Linux Desktop (v. 6) libxml2-2.7.6-4.el6_2.4, libxml2-python-2.7.6-4.el6_2.4
- Red Hat Enterprise Linux Desktop Optional (v. 6) libxml2-2.7.6-4.el6_2.4, libxml2-devel-2.7.6-4.el6_2.4, libxml2-static-2.7.6-4.el6_2.4
- Red Hat Enterprise Linux HPC Node (v. 6) libxml2-2.7.6-4.el6_2.4, libxml2-python-2.7.6-4.el6_2.4
- Red Hat Enterprise Linux HPC Node Optional (v. 6) libxml2-2.7.6-4.el6_2.4, libxml2-devel-2.7.6-4.el6_2.4, libxml2-static-2.7.6-4.el6_2.4
- Red Hat Enterprise Linux Server (v. 6) libxml2-2.7.6-4.el6_2.4, libxml2-2.7.6-4.el6_2.4.ppc, libxml2-devel-2.7.6-4.el6_2.4 +2
- Red Hat Enterprise Linux Server Optional (v. 6) libxml2-2.7.6-4.el6_2.4, libxml2-static-2.7.6-4.el6_2.4
- Red Hat Enterprise Linux Workstation (v. 6) libxml2-2.7.6-4.el6_2.4, libxml2-devel-2.7.6-4.el6_2.4, libxml2-python-2.7.6-4.el6_2.4
- Red Hat Enterprise Linux Workstation Optional (v. 6) libxml2-2.7.6-4.el6_2.4, libxml2-static-2.7.6-4.el6_2.4
Fixes 1 record
Priority LOW 29
libxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML da…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.0326 · Published 2012-12-21 · Partial fix CWE-399
