Skip to content
OpenAdvisories
Unscored RHSA-2004:650 2 CVEs

Red Hat Security Advisory: libxml security update

Published Sep 17, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 12

ReleasePackageFixed in
Red Hat · RHEL 3 enterprise_linux:3::as libxml 1:1.8.17-9.2
Red Hat · RHEL 3 enterprise_linux:3::as libxml-debuginfo 1:1.8.17-9.2
Red Hat · RHEL 3 enterprise_linux:3::as libxml-devel 1:1.8.17-9.2
Red Hat · RHEL 3 enterprise_linux:3::desktop libxml 1:1.8.17-9.2
Red Hat · RHEL 3 enterprise_linux:3::desktop libxml-debuginfo 1:1.8.17-9.2
Red Hat · RHEL 3 enterprise_linux:3::desktop libxml-devel 1:1.8.17-9.2
Red Hat · RHEL 3 enterprise_linux:3::es libxml 1:1.8.17-9.2
Red Hat · RHEL 3 enterprise_linux:3::es libxml-debuginfo 1:1.8.17-9.2
Red Hat · RHEL 3 enterprise_linux:3::es libxml-devel 1:1.8.17-9.2
Red Hat · RHEL 3 enterprise_linux:3::ws libxml 1:1.8.17-9.2
Red Hat · RHEL 3 enterprise_linux:3::ws libxml-debuginfo 1:1.8.17-9.2
Red Hat · RHEL 3 enterprise_linux:3::ws libxml-devel 1:1.8.17-9.2

Vulnerabilities 2

  • Unscored —
    CVE-2004-0110 Public exploit EPSS 24%

    Buffer overflow in the (1) nanohttp or (2) nanoftp modules in XMLSoft Libxml 2 (Libxml2) 2.6.0 through 2.6.5 allow remo…

    libxml2 Debian
  • Unscored —
    CVE-2004-0989 Public exploit EPSS 22%

    Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attacker…

    libxml2 Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=139090
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_650.json
  • report
    https://access.redhat.com/security/cve/CVE-2004-0110
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=430644
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2004-0110
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2004-0110
  • report
    https://access.redhat.com/security/cve/CVE-2004-0989
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=430645
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2004-0989
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2004-0989