Skip to content
OpenAdvisories
Unscored RHSA-2012:0017 6 CVEs

Red Hat Security Advisory: libxml2 security update

Published Sep 15, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 10

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client libxml2 0:2.6.26-2.1.12.el5_7.2
Red Hat · RHEL 5 enterprise_linux:5::client libxml2-debuginfo 0:2.6.26-2.1.12.el5_7.2
Red Hat · RHEL 5 enterprise_linux:5::client libxml2-python 0:2.6.26-2.1.12.el5_7.2
Red Hat · RHEL 5 enterprise_linux:5::client_workstation libxml2 0:2.6.26-2.1.12.el5_7.2
Red Hat · RHEL 5 enterprise_linux:5::client_workstation libxml2-debuginfo 0:2.6.26-2.1.12.el5_7.2
Red Hat · RHEL 5 enterprise_linux:5::client_workstation libxml2-devel 0:2.6.26-2.1.12.el5_7.2
Red Hat · RHEL 5 enterprise_linux:5::server libxml2 0:2.6.26-2.1.12.el5_7.2
Red Hat · RHEL 5 enterprise_linux:5::server libxml2-debuginfo 0:2.6.26-2.1.12.el5_7.2
Red Hat · RHEL 5 enterprise_linux:5::server libxml2-devel 0:2.6.26-2.1.12.el5_7.2
Red Hat · RHEL 5 enterprise_linux:5::server libxml2-python 0:2.6.26-2.1.12.el5_7.2

Vulnerabilities 6

  • Unscored —
    CVE-2010-4008

    libxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier, and other products, r…

    libxml2 Debian
  • Unscored —
    CVE-2011-0216

    Off-by-one error in libxml in Apple Safari before 5.0.6 allows remote attackers to execute arbitrary code or cause a de…

    libxml2 Debian
  • Unscored —
    CVE-2011-1944 Public exploit EPSS 13%

    Integer overflow in xpath.c in libxml2 2.6.x through 2.6.32 and 2.7.x through 2.7.8, and libxml 1.8.16 and earlier, all…

    libxml2 Debian
  • Unscored —
    CVE-2011-2834

    Double free vulnerability in libxml2, as used in Google Chrome before 14.0.835.163, allows remote attackers to cause a …

    libxml2 Debian
  • Unscored —
    CVE-2011-3905

    libxml2, as used in Google Chrome before 16.0.912.63, allows remote attackers to cause a denial of service (out-of-boun…

    libxml2 Debian
  • Unscored —
    CVE-2011-3919

    Heap-based buffer overflow in libxml2, as used in Google Chrome before 16.0.912.75, allows remote attackers to cause a …

    libxml2 Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=645341
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=709747
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=724906
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=735751
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=767387
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=771896
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0017.json
  • report
    https://access.redhat.com/security/cve/CVE-2010-4008
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-4008
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-4008
  • report
    https://access.redhat.com/security/cve/CVE-2011-0216
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-0216
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-0216
  • report
    https://access.redhat.com/security/cve/CVE-2011-1944
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-1944
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-1944
  • report
    https://access.redhat.com/security/cve/CVE-2011-2834
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-2834
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-2834
  • report
    https://access.redhat.com/security/cve/CVE-2011-3905
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-3905
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-3905
  • report
    https://access.redhat.com/security/cve/CVE-2011-3919
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-3919
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-3919