Red Hat Security AdvisoryRHSA-2014:1655
libxml2 security update
Released 2014-10-16 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libxml2-2.9.1-5.el7_0.1, libxml2-python-2.9.1-5.el7_0.1
- Red Hat Enterprise Linux Client Optional (v. 7) libxml2-devel-2.9.1-5.el7_0.1, libxml2-static-2.9.1-5.el7_0.1
- Red Hat Enterprise Linux ComputeNode (v. 7) libxml2-2.9.1-5.el7_0.1, libxml2-python-2.9.1-5.el7_0.1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libxml2-devel-2.9.1-5.el7_0.1, libxml2-static-2.9.1-5.el7_0.1
- Red Hat Enterprise Linux Desktop (v. 6) libxml2-2.7.6-17.el6_6.1, libxml2-python-2.7.6-17.el6_6.1
- Red Hat Enterprise Linux Desktop Optional (v. 6) libxml2-devel-2.7.6-17.el6_6.1, libxml2-static-2.7.6-17.el6_6.1
- Red Hat Enterprise Linux HPC Node (v. 6) libxml2-2.7.6-17.el6_6.1, libxml2-python-2.7.6-17.el6_6.1
- Red Hat Enterprise Linux HPC Node Optional (v. 6) libxml2-devel-2.7.6-17.el6_6.1, libxml2-static-2.7.6-17.el6_6.1
- Red Hat Enterprise Linux Server (v. 6) libxml2-2.7.6-17.el6_6.1, libxml2-2.7.6-17.el6_6.1.ppc, libxml2-devel-2.7.6-17.el6_6.1 +2
- Red Hat Enterprise Linux Server (v. 7) libxml2-2.9.1-5.el7_0.1, libxml2-2.9.1-5.el7_0.1.ppc, libxml2-devel-2.9.1-5.el7_0.1 +2
- Red Hat Enterprise Linux Server Optional (v. 6) libxml2-static-2.7.6-17.el6_6.1
- Red Hat Enterprise Linux Server Optional (v. 7) libxml2-static-2.9.1-5.el7_0.1, libxml2-static-2.9.1-5.el7_0.1.ppc
- Red Hat Enterprise Linux Workstation (v. 6) libxml2-2.7.6-17.el6_6.1, libxml2-devel-2.7.6-17.el6_6.1, libxml2-python-2.7.6-17.el6_6.1
- Red Hat Enterprise Linux Workstation (v. 7) libxml2-2.9.1-5.el7_0.1, libxml2-devel-2.9.1-5.el7_0.1, libxml2-python-2.9.1-5.el7_0.1
- Red Hat Enterprise Linux Workstation Optional (v. 6) libxml2-static-2.7.6-17.el6_6.1
- Red Hat Enterprise Linux Workstation Optional (v. 7) libxml2-static-2.9.1-5.el7_0.1
Fixes 1 record
Priority LOW 29
parser.c in libxml2 before 2.9.2 does not properly prevent entity expansion even when entity substitution has been disabled, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a c…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03782 · Published 2014-11-04 · Fixed
