Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 6 enterprise_linux:6::client | mingw32-libxml2 | 0:2.7.6-6.el6_3 |
| Red Hat · RHEL 6 enterprise_linux:6::client | mingw32-libxml2-debuginfo | 0:2.7.6-6.el6_3 |
| Red Hat · RHEL 6 enterprise_linux:6::client | mingw32-libxml2-static | 0:2.7.6-6.el6_3 |
| Red Hat · RHEL 6 enterprise_linux:6::computenode | mingw32-libxml2 | 0:2.7.6-6.el6_3 |
| Red Hat · RHEL 6 enterprise_linux:6::computenode | mingw32-libxml2-debuginfo | 0:2.7.6-6.el6_3 |
| Red Hat · RHEL 6 enterprise_linux:6::computenode | mingw32-libxml2-static | 0:2.7.6-6.el6_3 |
| Red Hat · RHEL 6 enterprise_linux:6::server | mingw32-libxml2 | 0:2.7.6-6.el6_3 |
| Red Hat · RHEL 6 enterprise_linux:6::server | mingw32-libxml2-debuginfo | 0:2.7.6-6.el6_3 |
| Red Hat · RHEL 6 enterprise_linux:6::server | mingw32-libxml2-static | 0:2.7.6-6.el6_3 |
| Red Hat · RHEL 6 enterprise_linux:6::workstation | mingw32-libxml2 | 0:2.7.6-6.el6_3 |
| Red Hat · RHEL 6 enterprise_linux:6::workstation | mingw32-libxml2-debuginfo | 0:2.7.6-6.el6_3 |
| Red Hat · RHEL 6 enterprise_linux:6::workstation | mingw32-libxml2-static | 0:2.7.6-6.el6_3 |
Vulnerabilities 11
-
Unscored —
libxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier, and other products, r…
-
Unscored —
Double free vulnerability in libxml2 2.7.8 and other versions, as used in Google Chrome before 8.0.552.215 and other pr…
-
Unscored —
Off-by-one error in libxml in Apple Safari before 5.0.6 allows remote attackers to execute arbitrary code or cause a de…
-
Unscored —
Integer overflow in xpath.c in libxml2 2.6.x through 2.6.32 and 2.7.x through 2.7.8, and libxml 1.8.16 and earlier, all…
-
Unscored —
Double free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allows remote attackers to cause a …
-
Unscored —
Double free vulnerability in libxml2, as used in Google Chrome before 14.0.835.163, allows remote attackers to cause a …
-
Unscored —
Off-by-one error in libxml2, as used in Google Chrome before 19.0.1084.46 and other products, allows remote attackers t…
-
Unscored —
libxml2, as used in Google Chrome before 16.0.912.63, allows remote attackers to cause a denial of service (out-of-boun…
-
Unscored —
Heap-based buffer overflow in libxml2, as used in Google Chrome before 16.0.912.75, allows remote attackers to cause a …
-
Unscored —
libxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash collisions predictably, which…
-
Unscored —
Heap-based buffer underflow in the xmlParseAttValueComplex function in parser.c in libxml2 2.9.0 and earlier, as used i…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=645341
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=665963
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=709747
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=724906
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=735712
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=735751
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=767387
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=771896
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=787067
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=822109
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=880466
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0217.json
-
report
https://access.redhat.com/security/cve/CVE-2010-4008
-
advisory
https://www.cve.org/CVERecord?id=CVE-2010-4008
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2010-4008
-
report
https://access.redhat.com/security/cve/CVE-2010-4494
-
advisory
https://www.cve.org/CVERecord?id=CVE-2010-4494
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2010-4494
-
report
https://access.redhat.com/security/cve/CVE-2011-0216
-
advisory
https://www.cve.org/CVERecord?id=CVE-2011-0216
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2011-0216
-
report
https://access.redhat.com/security/cve/CVE-2011-1944
-
advisory
https://www.cve.org/CVERecord?id=CVE-2011-1944
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2011-1944
-
report
https://access.redhat.com/security/cve/CVE-2011-2821
-
advisory
https://www.cve.org/CVERecord?id=CVE-2011-2821
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2011-2821
-
report
https://access.redhat.com/security/cve/CVE-2011-2834
-
advisory
https://www.cve.org/CVERecord?id=CVE-2011-2834
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2011-2834
-
report
https://access.redhat.com/security/cve/CVE-2011-3102
-
advisory
https://www.cve.org/CVERecord?id=CVE-2011-3102
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2011-3102
-
report
https://access.redhat.com/security/cve/CVE-2011-3905
-
advisory
https://www.cve.org/CVERecord?id=CVE-2011-3905
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2011-3905
-
report
https://access.redhat.com/security/cve/CVE-2011-3919
-
advisory
https://www.cve.org/CVERecord?id=CVE-2011-3919