Red Hat Security AdvisoryRHSA-2013:0581
libxml2 security update
Released 2013-02-28 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) libxml2-2.6.26-2.1.21.el5_9.1, libxml2-2.6.26-2.1.21.el5_9.1.i386, libxml2-2.6.26-2.1.21.el5_9.1.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 6) libxml2-2.7.6-12.el6_4.1, libxml2-python-2.7.6-12.el6_4.1
- Red Hat Enterprise Linux Desktop Optional (v. 6) libxml2-2.7.6-12.el6_4.1, libxml2-devel-2.7.6-12.el6_4.1, libxml2-static-2.7.6-12.el6_4.1
- Red Hat Enterprise Linux HPC Node (v. 6) libxml2-2.7.6-12.el6_4.1, libxml2-python-2.7.6-12.el6_4.1
- Red Hat Enterprise Linux HPC Node Optional (v. 6) libxml2-2.7.6-12.el6_4.1, libxml2-devel-2.7.6-12.el6_4.1, libxml2-static-2.7.6-12.el6_4.1
- Red Hat Enterprise Linux Server (v. 6) libxml2-2.7.6-12.el6_4.1, libxml2-2.7.6-12.el6_4.1.ppc, libxml2-devel-2.7.6-12.el6_4.1 +2
- Red Hat Enterprise Linux Server Optional (v. 6) libxml2-2.7.6-12.el6_4.1, libxml2-static-2.7.6-12.el6_4.1
- Red Hat Enterprise Linux Workstation (v. 6) libxml2-2.7.6-12.el6_4.1, libxml2-devel-2.7.6-12.el6_4.1, libxml2-python-2.7.6-12.el6_4.1
- Red Hat Enterprise Linux Workstation Optional (v. 6) libxml2-2.7.6-12.el6_4.1, libxml2-static-2.7.6-12.el6_4.1
Fixes 1 record
Priority LOW 25
libxml2 2.9.0 and earlier allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via an XML file containing an entity declaration with long replacement text and many references to th…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02856 · Published 2013-04-25 · Partial fix CWE-119
