Red Hat Security AdvisoryRHSA-2015:1419
libxml2 security and bug fix update
Released 2015-07-20 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) libxml2-2.7.6-20.el6, libxml2-python-2.7.6-20.el6
- Red Hat Enterprise Linux Desktop Optional (v. 6) libxml2-devel-2.7.6-20.el6, libxml2-static-2.7.6-20.el6
- Red Hat Enterprise Linux HPC Node (v. 6) libxml2-2.7.6-20.el6, libxml2-python-2.7.6-20.el6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) libxml2-devel-2.7.6-20.el6, libxml2-static-2.7.6-20.el6
- Red Hat Enterprise Linux Server (v. 6) libxml2-2.7.6-20.el6, libxml2-2.7.6-20.el6.ppc, libxml2-devel-2.7.6-20.el6 +2
- Red Hat Enterprise Linux Server Optional (v. 6) libxml2-static-2.7.6-20.el6
- Red Hat Enterprise Linux Workstation (v. 6) libxml2-2.7.6-20.el6, libxml2-devel-2.7.6-20.el6, libxml2-python-2.7.6-20.el6
- Red Hat Enterprise Linux Workstation Optional (v. 6) libxml2-static-2.7.6-20.el6
Fixes 1 record
Priority LOW 32
The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML Entity Expansion (XEE) attack.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.06289 · Published 2015-08-14 · Partial fix · 1.6.6.4 CWE-399
