(RHSA-2008:0836) Moderate: libxml2 security update

2008-08-2100:00:00

access.redhat.com

0.007 Low

EPSS

Percentile

80.8%

JSON

The libxml2 packages provide a library that allows you to manipulate XML
files. It includes support to read, modify, and write XML and HTML files.

A denial of service flaw was found in the way libxml2 processes certain
content. If an application linked against libxml2 processes malformed XML
content, it could cause the application to stop responding. (CVE-2008-3281)

Red Hat would like to thank Andreas Solberg for responsibly disclosing this
issue.

All users of libxml2 are advised to upgrade to these updated packages,
which contain a backported patch to resolve this issue.

OSVersionArchitecturePackageVersionFilename
RedHatanys390libxml2-python< 2.6.16-12.2libxml2-python-2.6.16-12.2.s390.rpm
RedHatanyppc64libxml2< 2.6.16-12.3libxml2-2.6.16-12.3.ppc64.rpm
RedHatanys390libxml2-python< 2.5.10-10libxml2-python-2.5.10-10.s390.rpm
RedHatanyi386libxml2-devel< 2.6.26-2.1.2.3libxml2-devel-2.6.26-2.1.2.3.i386.rpm
RedHatanyppc64libxml2< 2.6.16-12.2libxml2-2.6.16-12.2.ppc64.rpm
RedHatanyia64libxml2-devel< 2.6.26-2.1.2.4libxml2-devel-2.6.26-2.1.2.4.ia64.rpm
RedHatanyi386libxml2-python< 2.6.16-12.3libxml2-python-2.6.16-12.3.i386.rpm
RedHatanyx86_64libxml2< 2.6.16-12.2libxml2-2.6.16-12.2.x86_64.rpm
RedHatanyia64libxml2-devel< 2.5.10-11libxml2-devel-2.5.10-11.ia64.rpm
RedHatanyx86_64libxml2< 2.5.10-10libxml2-2.5.10-10.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	s390	libxml2-python	< 2.6.16-12.2	libxml2-python-2.6.16-12.2.s390.rpm
RedHat	any	ppc64	libxml2	< 2.6.16-12.3	libxml2-2.6.16-12.3.ppc64.rpm
RedHat	any	s390	libxml2-python	< 2.5.10-10	libxml2-python-2.5.10-10.s390.rpm
RedHat	any	i386	libxml2-devel	< 2.6.26-2.1.2.3	libxml2-devel-2.6.26-2.1.2.3.i386.rpm
RedHat	any	ppc64	libxml2	< 2.6.16-12.2	libxml2-2.6.16-12.2.ppc64.rpm
RedHat	any	ia64	libxml2-devel	< 2.6.26-2.1.2.4	libxml2-devel-2.6.26-2.1.2.4.ia64.rpm
RedHat	any	i386	libxml2-python	< 2.6.16-12.3	libxml2-python-2.6.16-12.3.i386.rpm
RedHat	any	x86_64	libxml2	< 2.6.16-12.2	libxml2-2.6.16-12.2.x86_64.rpm
RedHat	any	ia64	libxml2-devel	< 2.5.10-11	libxml2-devel-2.5.10-11.ia64.rpm
RedHat	any	x86_64	libxml2	< 2.5.10-10	libxml2-2.5.10-10.x86_64.rpm