(RHSA-2008:0884) Important: libxml2 security update

2008-09-1100:00:00

access.redhat.com

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.943 High

EPSS

Percentile

99.0%

JSON

The libxml2 packages provide a library that allows you to manipulate XML
files. It includes support to read, modify, and write XML and HTML files.

A heap-based buffer overflow flaw was found in the way libxml2 handled long
XML entity names. If an application linked against libxml2 processed
untrusted malformed XML content, it could cause the application to crash
or, possibly, execute arbitrary code. (CVE-2008-3529)

All users of libxml2 are advised to upgrade to these updated packages,
which contain a backported patch to resolve this issue.

OSVersionArchitecturePackageVersionFilename
RedHatanys390libxml2-python< 2.6.16-12.5libxml2-python-2.6.16-12.5.s390.rpm
RedHatanyppclibxml2-python< 2.6.26-2.1.2.6libxml2-python-2.6.26-2.1.2.6.ppc.rpm
RedHatanyppclibxml2-devel< 2.6.16-12.5libxml2-devel-2.6.16-12.5.ppc.rpm
RedHatanyia64libxml2-devel< 2.6.26-2.1.2.6libxml2-devel-2.6.26-2.1.2.6.ia64.rpm
RedHatanysrclibxml2< 2.6.26-2.1.2.6libxml2-2.6.26-2.1.2.6.src.rpm
RedHatanyppclibxml2< 2.6.16-12.5libxml2-2.6.16-12.5.ppc.rpm
RedHatanyia64libxml2< 2.6.16-12.5libxml2-2.6.16-12.5.ia64.rpm
RedHatanys390xlibxml2-devel< 2.6.26-2.1.2.6libxml2-devel-2.6.26-2.1.2.6.s390x.rpm
RedHatanyppc64libxml2-devel< 2.6.26-2.1.2.6libxml2-devel-2.6.26-2.1.2.6.ppc64.rpm
RedHatanyi386libxml2-python< 2.6.26-2.1.2.6libxml2-python-2.6.26-2.1.2.6.i386.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	s390	libxml2-python	< 2.6.16-12.5	libxml2-python-2.6.16-12.5.s390.rpm
RedHat	any	ppc	libxml2-python	< 2.6.26-2.1.2.6	libxml2-python-2.6.26-2.1.2.6.ppc.rpm
RedHat	any	ppc	libxml2-devel	< 2.6.16-12.5	libxml2-devel-2.6.16-12.5.ppc.rpm
RedHat	any	ia64	libxml2-devel	< 2.6.26-2.1.2.6	libxml2-devel-2.6.26-2.1.2.6.ia64.rpm
RedHat	any	src	libxml2	< 2.6.26-2.1.2.6	libxml2-2.6.26-2.1.2.6.src.rpm
RedHat	any	ppc	libxml2	< 2.6.16-12.5	libxml2-2.6.16-12.5.ppc.rpm
RedHat	any	ia64	libxml2	< 2.6.16-12.5	libxml2-2.6.16-12.5.ia64.rpm
RedHat	any	s390x	libxml2-devel	< 2.6.26-2.1.2.6	libxml2-devel-2.6.26-2.1.2.6.s390x.rpm
RedHat	any	ppc64	libxml2-devel	< 2.6.26-2.1.2.6	libxml2-devel-2.6.26-2.1.2.6.ppc64.rpm
RedHat	any	i386	libxml2-python	< 2.6.26-2.1.2.6	libxml2-python-2.6.26-2.1.2.6.i386.rpm