Description
Double free vulnerability in libxml2, as used in Google Chrome before 14.0.835.163, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | libxml2 | 2.7.8.dfsg-5 | — |
| Debian 13 | libxml2 | 2.7.8.dfsg-5 | — |
| Debian 12 | libxml2 | 2.7.8.dfsg-5 | — |
| Debian 6.0 | libxml2 | 2.7.8.dfsg-2+squeeze2 | DSA-2394-1 |
| Debian 5.0 | libxml2 | 2.6.32.dfsg-5+lenny5 | DSA-2394-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | libxml2 +3 | 2.7.6-4.el6 | RHSA-2011:1749 |
| RHEL 6 | mingw32-libxml2 +1 | 2.7.6-6.el6_3 | RHSA-2013:0217 |
| RHEL 5 | libxml2 +2 | 2.6.26-2.1.12.el5_7.2 | RHSA-2012:0017 |
| RHEL 4 | libxml2 +2 | 2.6.16-12.9 | RHSA-2012:0016 |
Advisories 5
- RHSA-2013:0217 Red Hat Security Advisory: mingw32-libxml2 security update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- RHSA-2012:0017 Red Hat Security Advisory: libxml2 security update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- RHSA-2012:0016 Red Hat Security Advisory: libxml2 security update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- RHSA-2011:1749 Red Hat Security Advisory: libxml2 security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-2394-1 libxml2 - several Debian Security (DSA / DLA) · Mar 9, 2026
References
- MDVSA-2011:145 vendor-advisory
- HPSBMU02786 vendor-advisory
- APPLE-SA-2012-09-19-1 vendor-advisory
- 75560 vdb-entry
- http://support.apple.com/kb/HT5503
- RHSA-2013:0217 vendor-advisory
- oval:org.mitre.oval:def:14410 vdb-entry signature
- RHSA-2011:1749 vendor-advisory
- http://googlechromereleases.blogspot.com/2011/09/stable-channel-update_16.html
- http://code.google.com/p/chromium/issues/detail?id=93472
- chrome-libxml-code-execution(69885) vdb-entry
- http://support.apple.com/kb/HT5281
- APPLE-SA-2012-05-09-1 vendor-advisory
- DSA-2394 vendor-advisory