Skip to content
OpenAdvisories
Unscored RHSA-2013:0217 11 CVEs

Red Hat Security Advisory: mingw32-libxml2 security update

Published Sep 15, 2024 · Updated Jun 28, 2026

Fixed packages 12

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::client mingw32-libxml2 0:2.7.6-6.el6_3
Red Hat · RHEL 6 enterprise_linux:6::client mingw32-libxml2-debuginfo 0:2.7.6-6.el6_3
Red Hat · RHEL 6 enterprise_linux:6::client mingw32-libxml2-static 0:2.7.6-6.el6_3
Red Hat · RHEL 6 enterprise_linux:6::computenode mingw32-libxml2 0:2.7.6-6.el6_3
Red Hat · RHEL 6 enterprise_linux:6::computenode mingw32-libxml2-debuginfo 0:2.7.6-6.el6_3
Red Hat · RHEL 6 enterprise_linux:6::computenode mingw32-libxml2-static 0:2.7.6-6.el6_3
Red Hat · RHEL 6 enterprise_linux:6::server mingw32-libxml2 0:2.7.6-6.el6_3
Red Hat · RHEL 6 enterprise_linux:6::server mingw32-libxml2-debuginfo 0:2.7.6-6.el6_3
Red Hat · RHEL 6 enterprise_linux:6::server mingw32-libxml2-static 0:2.7.6-6.el6_3
Red Hat · RHEL 6 enterprise_linux:6::workstation mingw32-libxml2 0:2.7.6-6.el6_3
Red Hat · RHEL 6 enterprise_linux:6::workstation mingw32-libxml2-debuginfo 0:2.7.6-6.el6_3
Red Hat · RHEL 6 enterprise_linux:6::workstation mingw32-libxml2-static 0:2.7.6-6.el6_3

Vulnerabilities 11

  • Unscored —

    libxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier, and other products, r…

  • Unscored —

    Double free vulnerability in libxml2 2.7.8 and other versions, as used in Google Chrome before 8.0.552.215 and other pr…

  • Unscored —

    Off-by-one error in libxml in Apple Safari before 5.0.6 allows remote attackers to execute arbitrary code or cause a de…

  • Unscored —
    CVE-2011-1944 Public exploit EPSS 13%

    Integer overflow in xpath.c in libxml2 2.6.x through 2.6.32 and 2.7.x through 2.7.8, and libxml 1.8.16 and earlier, all…

  • Unscored —

    Double free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allows remote attackers to cause a …

  • Unscored —

    Double free vulnerability in libxml2, as used in Google Chrome before 14.0.835.163, allows remote attackers to cause a …

  • Unscored —

    Off-by-one error in libxml2, as used in Google Chrome before 19.0.1084.46 and other products, allows remote attackers t…

  • Unscored —

    libxml2, as used in Google Chrome before 16.0.912.63, allows remote attackers to cause a denial of service (out-of-boun…

  • Unscored —

    Heap-based buffer overflow in libxml2, as used in Google Chrome before 16.0.912.75, allows remote attackers to cause a …

  • Unscored —

    libxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash collisions predictably, which…

  • Unscored —

    Heap-based buffer underflow in the xmlParseAttValueComplex function in parser.c in libxml2 2.9.0 and earlier, as used i…

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=645341
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=665963
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=709747
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=724906
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=735712
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=735751
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=767387
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=771896
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=787067
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=822109
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=880466
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0217.json
  • report
    https://access.redhat.com/security/cve/CVE-2010-4008
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-4008
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-4008
  • report
    https://access.redhat.com/security/cve/CVE-2010-4494
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-4494
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-4494
  • report
    https://access.redhat.com/security/cve/CVE-2011-0216
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-0216
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-0216
  • report
    https://access.redhat.com/security/cve/CVE-2011-1944
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-1944
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-1944
  • report
    https://access.redhat.com/security/cve/CVE-2011-2821
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-2821
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-2821
  • report
    https://access.redhat.com/security/cve/CVE-2011-2834
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-2834
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-2834
  • report
    https://access.redhat.com/security/cve/CVE-2011-3102
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-3102
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-3102
  • report
    https://access.redhat.com/security/cve/CVE-2011-3905
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-3905
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-3905
  • report
    https://access.redhat.com/security/cve/CVE-2011-3919
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-3919