Skip to content
OpenAdvisories
Unscored RHSA-2008:0886 2 CVEs

Red Hat Security Advisory: libxml2 security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 12

ReleasePackageFixed in
Red Hat · RHEL 2 enterprise_linux:2.1::as libxml2 0:2.4.19-11.ent
Red Hat · RHEL 2 enterprise_linux:2.1::as libxml2-devel 0:2.4.19-11.ent
Red Hat · RHEL 2 enterprise_linux:2.1::as libxml2-python 0:2.4.19-11.ent
Red Hat · RHEL 2 enterprise_linux:2.1::aw libxml2 0:2.4.19-11.ent
Red Hat · RHEL 2 enterprise_linux:2.1::aw libxml2-devel 0:2.4.19-11.ent
Red Hat · RHEL 2 enterprise_linux:2.1::aw libxml2-python 0:2.4.19-11.ent
Red Hat · RHEL 2 enterprise_linux:2.1::es libxml2 0:2.4.19-11.ent
Red Hat · RHEL 2 enterprise_linux:2.1::es libxml2-devel 0:2.4.19-11.ent
Red Hat · RHEL 2 enterprise_linux:2.1::es libxml2-python 0:2.4.19-11.ent
Red Hat · RHEL 2 enterprise_linux:2.1::ws libxml2 0:2.4.19-11.ent
Red Hat · RHEL 2 enterprise_linux:2.1::ws libxml2-devel 0:2.4.19-11.ent
Red Hat · RHEL 2 enterprise_linux:2.1::ws libxml2-python 0:2.4.19-11.ent

Vulnerabilities 2

  • Unscored —
    CVE-2003-1564

    libxml2, possibly before 2.5.0, does not properly detect recursion during entity expansion, which allows context-depend…

  • Unscored —
    CVE-2008-3529 Public exploit EPSS 23%

    Heap-based buffer overflow in the xmlParseAttValueComplex function in parser.c in libxml2 before 2.7.0 allows context-d…

    libxml2 Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=461015
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=461107
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0886.json
  • report
    https://access.redhat.com/security/cve/CVE-2003-1564
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2003-1564
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2003-1564
  • report
    https://access.redhat.com/security/cve/CVE-2008-3529
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-3529
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-3529