Skip to content
OpenAdvisories
Unscored RHSA-2008:0836 1 CVE

Red Hat Security Advisory: libxml2 security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Fixed packages 54

ReleasePackageFixed in
Red Hat · RHEL 2 enterprise_linux:2.1::as libxml2 0:2.4.19-9.ent
Red Hat · RHEL 2 enterprise_linux:2.1::as libxml2-devel 0:2.4.19-9.ent
Red Hat · RHEL 2 enterprise_linux:2.1::as libxml2-python 0:2.4.19-9.ent
Red Hat · RHEL 2 enterprise_linux:2.1::aw libxml2 0:2.4.19-9.ent
Red Hat · RHEL 2 enterprise_linux:2.1::aw libxml2-devel 0:2.4.19-9.ent
Red Hat · RHEL 2 enterprise_linux:2.1::aw libxml2-python 0:2.4.19-9.ent
Red Hat · RHEL 2 enterprise_linux:2.1::es libxml2 0:2.4.19-9.ent
Red Hat · RHEL 2 enterprise_linux:2.1::es libxml2-devel 0:2.4.19-9.ent
Red Hat · RHEL 2 enterprise_linux:2.1::es libxml2-python 0:2.4.19-9.ent
Red Hat · RHEL 2 enterprise_linux:2.1::ws libxml2 0:2.4.19-9.ent
Red Hat · RHEL 2 enterprise_linux:2.1::ws libxml2-devel 0:2.4.19-9.ent
Red Hat · RHEL 2 enterprise_linux:2.1::ws libxml2-python 0:2.4.19-9.ent
Red Hat · RHEL 3 enterprise_linux:3::as libxml2 0:2.5.10-11
Red Hat · RHEL 3 enterprise_linux:3::as libxml2-debuginfo 0:2.5.10-11
Red Hat · RHEL 3 enterprise_linux:3::as libxml2-devel 0:2.5.10-11
Red Hat · RHEL 3 enterprise_linux:3::as libxml2-python 0:2.5.10-11
Red Hat · RHEL 3 enterprise_linux:3::desktop libxml2 0:2.5.10-11
Red Hat · RHEL 3 enterprise_linux:3::desktop libxml2-debuginfo 0:2.5.10-11
Red Hat · RHEL 3 enterprise_linux:3::desktop libxml2-devel 0:2.5.10-11
Red Hat · RHEL 3 enterprise_linux:3::desktop libxml2-python 0:2.5.10-11
Red Hat · RHEL 3 enterprise_linux:3::es libxml2 0:2.5.10-11
Red Hat · RHEL 3 enterprise_linux:3::es libxml2-debuginfo 0:2.5.10-11
Red Hat · RHEL 3 enterprise_linux:3::es libxml2-devel 0:2.5.10-11
Red Hat · RHEL 3 enterprise_linux:3::es libxml2-python 0:2.5.10-11
Red Hat · RHEL 3 enterprise_linux:3::ws libxml2 0:2.5.10-11
Red Hat · RHEL 3 enterprise_linux:3::ws libxml2-debuginfo 0:2.5.10-11
Red Hat · RHEL 3 enterprise_linux:3::ws libxml2-devel 0:2.5.10-11
Red Hat · RHEL 3 enterprise_linux:3::ws libxml2-python 0:2.5.10-11
Red Hat · RHEL 4 enterprise_linux:4::as libxml2 0:2.6.16-12.3
Red Hat · RHEL 4 enterprise_linux:4::as libxml2-debuginfo 0:2.6.16-12.3
Red Hat · RHEL 4 enterprise_linux:4::as libxml2-devel 0:2.6.16-12.3
Red Hat · RHEL 4 enterprise_linux:4::as libxml2-python 0:2.6.16-12.3
Red Hat · RHEL 4 enterprise_linux:4::desktop libxml2 0:2.6.16-12.3
Red Hat · RHEL 4 enterprise_linux:4::desktop libxml2-debuginfo 0:2.6.16-12.3
Red Hat · RHEL 4 enterprise_linux:4::desktop libxml2-devel 0:2.6.16-12.3
Red Hat · RHEL 4 enterprise_linux:4::desktop libxml2-python 0:2.6.16-12.3
Red Hat · RHEL 4 enterprise_linux:4::es libxml2 0:2.6.16-12.3
Red Hat · RHEL 4 enterprise_linux:4::es libxml2-debuginfo 0:2.6.16-12.3
Red Hat · RHEL 4 enterprise_linux:4::es libxml2-devel 0:2.6.16-12.3
Red Hat · RHEL 4 enterprise_linux:4::es libxml2-python 0:2.6.16-12.3
Red Hat · RHEL 4 enterprise_linux:4::ws libxml2 0:2.6.16-12.3
Red Hat · RHEL 4 enterprise_linux:4::ws libxml2-debuginfo 0:2.6.16-12.3
Red Hat · RHEL 4 enterprise_linux:4::ws libxml2-devel 0:2.6.16-12.3
Red Hat · RHEL 4 enterprise_linux:4::ws libxml2-python 0:2.6.16-12.3
Red Hat · RHEL 5 enterprise_linux:5::client libxml2 0:2.6.26-2.1.2.4
Red Hat · RHEL 5 enterprise_linux:5::client libxml2-debuginfo 0:2.6.26-2.1.2.4
Red Hat · RHEL 5 enterprise_linux:5::client libxml2-python 0:2.6.26-2.1.2.4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation libxml2 0:2.6.26-2.1.2.4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation libxml2-debuginfo 0:2.6.26-2.1.2.4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation libxml2-devel 0:2.6.26-2.1.2.4
Red Hat · RHEL 5 enterprise_linux:5::server libxml2 0:2.6.26-2.1.2.4
Red Hat · RHEL 5 enterprise_linux:5::server libxml2-debuginfo 0:2.6.26-2.1.2.4
Red Hat · RHEL 5 enterprise_linux:5::server libxml2-devel 0:2.6.26-2.1.2.4
Red Hat · RHEL 5 enterprise_linux:5::server libxml2-python 0:2.6.26-2.1.2.4

Vulnerabilities 1

  • Unscored —

    libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allo…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=458086
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0836.json
  • report
    https://access.redhat.com/security/cve/CVE-2008-3281
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-3281
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-3281