RHSA-2015:2549Medium

Red Hat Security Advisory: libxml2 security update

Published
December 7, 2015
Last Modified
November 7, 2026

🔗 CVE IDs covered (11)

CVE-2015-5312 →CVE-2015-7497 →CVE-2015-7498 →CVE-2015-7499 →CVE-2015-7500 →CVE-2015-7941 →CVE-2015-7942 →CVE-2015-8241 →CVE-2015-8242 →CVE-2015-8317 →CVE-2015-8710 →

📋 Description

CVE-2015-5312 — libxml2: CPU exhaustion when processing specially crafted XML input CVE-2015-7497 — libxml2: Heap-based buffer overflow in xmlDictComputeFastQKey CVE-2015-7498 — libxml2: Heap-based buffer overflow in xmlParseXmlDecl CVE-2015-7499 — libxml2: Heap-based buffer overflow in xmlGROW CVE-2015-7500 — libxml2: Heap buffer overflow in xmlParseMisc CVE-2015-7941 — libxml2: Out-of-bounds memory access CVE-2015-7942 — libxml2: heap-based buffer overflow in xmlParseConditionalSections() CVE-2015-8241 — libxml2: Buffer overread with XML parser in xmlNextChar CVE-2015-8242 — libxml2: Buffer overread with HTML parser in push mode in xmlSAX2TextNode CVE-2015-8317 — libxml2: Out-of-bounds heap read when parsing file with unfinished xml declaration CVE-2015-8710 — libxml2: out-of-bounds memory access when parsing an unclosed HTML comment

🎯 Affected products76

  • Red Hat Enterprise Linux Desktop (v. 6)
  • Red Hat Enterprise Linux Desktop Optional (v. 6)
  • Red Hat Enterprise Linux HPC Node (v. 6)
  • Red Hat Enterprise Linux HPC Node Optional (v. 6)
  • Red Hat Enterprise Linux Server (v. 6)
  • Red Hat Enterprise Linux Server Optional (v. 6)
  • Red Hat Enterprise Linux Workstation (v. 6)
  • Red Hat Enterprise Linux Workstation Optional (v. 6)
  • libxml2-0:2.7.6-20.el6_7.1.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)
  • libxml2-0:2.7.6-20.el6_7.1.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)
  • libxml2-0:2.7.6-20.el6_7.1.i686 as a component of Red Hat Enterprise Linux Server (v. 6)
  • libxml2-0:2.7.6-20.el6_7.1.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)
  • libxml2-0:2.7.6-20.el6_7.1.ppc as a component of Red Hat Enterprise Linux Server (v. 6)
  • libxml2-0:2.7.6-20.el6_7.1.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)
  • libxml2-0:2.7.6-20.el6_7.1.s390 as a component of Red Hat Enterprise Linux Server (v. 6)
  • libxml2-0:2.7.6-20.el6_7.1.s390x as a component of Red Hat Enterprise Linux Server (v. 6)
  • libxml2-0:2.7.6-20.el6_7.1.src as a component of Red Hat Enterprise Linux Desktop (v. 6)
  • libxml2-0:2.7.6-20.el6_7.1.src as a component of Red Hat Enterprise Linux HPC Node (v. 6)
  • libxml2-0:2.7.6-20.el6_7.1.src as a component of Red Hat Enterprise Linux Server (v. 6)
  • libxml2-0:2.7.6-20.el6_7.1.src as a component of Red Hat Enterprise Linux Workstation (v. 6)
  • libxml2-0:2.7.6-20.el6_7.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)
  • libxml2-0:2.7.6-20.el6_7.1.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)
  • libxml2-0:2.7.6-20.el6_7.1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)
  • libxml2-0:2.7.6-20.el6_7.1.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)
  • libxml2-debuginfo-0:2.7.6-20.el6_7.1.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)
  • libxml2-debuginfo-0:2.7.6-20.el6_7.1.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)
  • libxml2-debuginfo-0:2.7.6-20.el6_7.1.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)
  • libxml2-debuginfo-0:2.7.6-20.el6_7.1.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)
  • libxml2-debuginfo-0:2.7.6-20.el6_7.1.i686 as a component of Red Hat Enterprise Linux Server (v. 6)
  • libxml2-debuginfo-0:2.7.6-20.el6_7.1.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)
  • +46 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (15)