Skip to content
OpenAdvisories
Unscored RHSA-2015:1419 1 CVE

Red Hat Security Advisory: libxml2 security and bug fix update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 20

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::client libxml2 0:2.7.6-20.el6
Red Hat · RHEL 6 enterprise_linux:6::client libxml2-debuginfo 0:2.7.6-20.el6
Red Hat · RHEL 6 enterprise_linux:6::client libxml2-devel 0:2.7.6-20.el6
Red Hat · RHEL 6 enterprise_linux:6::client libxml2-python 0:2.7.6-20.el6
Red Hat · RHEL 6 enterprise_linux:6::client libxml2-static 0:2.7.6-20.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode libxml2 0:2.7.6-20.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode libxml2-debuginfo 0:2.7.6-20.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode libxml2-devel 0:2.7.6-20.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode libxml2-python 0:2.7.6-20.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode libxml2-static 0:2.7.6-20.el6
Red Hat · RHEL 6 enterprise_linux:6::server libxml2 0:2.7.6-20.el6
Red Hat · RHEL 6 enterprise_linux:6::server libxml2-debuginfo 0:2.7.6-20.el6
Red Hat · RHEL 6 enterprise_linux:6::server libxml2-devel 0:2.7.6-20.el6
Red Hat · RHEL 6 enterprise_linux:6::server libxml2-python 0:2.7.6-20.el6
Red Hat · RHEL 6 enterprise_linux:6::server libxml2-static 0:2.7.6-20.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation libxml2 0:2.7.6-20.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation libxml2-debuginfo 0:2.7.6-20.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation libxml2-devel 0:2.7.6-20.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation libxml2-python 0:2.7.6-20.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation libxml2-static 0:2.7.6-20.el6

Vulnerabilities 1

  • Medium —
    CVE-2015-1819

    Nokogiri vulnerable to libxml XML Entity Expansion

    The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML Entity Expansion (XEE) attack.

    libxml2 libxml2 nokogiri Debian Ubuntu RubyGems

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1211278
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1419.json
  • report
    https://access.redhat.com/security/cve/CVE-2015-1819
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-1819
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-1819