RHSA-2015:2550Medium

Red Hat Security Advisory: libxml2 security update

Published
December 7, 2015
Last Modified
November 7, 2026

🔗 CVE IDs covered (12)

CVE-2015-1819 →CVE-2015-5312 →CVE-2015-7497 →CVE-2015-7498 →CVE-2015-7499 →CVE-2015-7500 →CVE-2015-7941 →CVE-2015-7942 →CVE-2015-8241 →CVE-2015-8242 →CVE-2015-8317 →CVE-2015-8710 →

📋 Description

CVE-2015-1819 — libxml2: denial of service processing a crafted XML document CVE-2015-5312 — libxml2: CPU exhaustion when processing specially crafted XML input CVE-2015-7497 — libxml2: Heap-based buffer overflow in xmlDictComputeFastQKey CVE-2015-7498 — libxml2: Heap-based buffer overflow in xmlParseXmlDecl CVE-2015-7499 — libxml2: Heap-based buffer overflow in xmlGROW CVE-2015-7500 — libxml2: Heap buffer overflow in xmlParseMisc CVE-2015-7941 — libxml2: Out-of-bounds memory access CVE-2015-7942 — libxml2: heap-based buffer overflow in xmlParseConditionalSections() CVE-2015-8241 — libxml2: Buffer overread with XML parser in xmlNextChar CVE-2015-8242 — libxml2: Buffer overread with HTML parser in push mode in xmlSAX2TextNode CVE-2015-8317 — libxml2: Out-of-bounds heap read when parsing file with unfinished xml declaration CVE-2015-8710 — libxml2: out-of-bounds memory access when parsing an unclosed HTML comment

🎯 Affected products84

  • Red Hat Enterprise Linux Client (v. 7)
  • Red Hat Enterprise Linux Client Optional (v. 7)
  • Red Hat Enterprise Linux ComputeNode (v. 7)
  • Red Hat Enterprise Linux ComputeNode Optional (v. 7)
  • Red Hat Enterprise Linux Server (v. 7)
  • Red Hat Enterprise Linux Server Optional (v. 7)
  • Red Hat Enterprise Linux Workstation (v. 7)
  • Red Hat Enterprise Linux Workstation Optional (v. 7)
  • libxml2-0:2.9.1-6.el7_2.2.i686 as a component of Red Hat Enterprise Linux Client (v. 7)
  • libxml2-0:2.9.1-6.el7_2.2.i686 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)
  • libxml2-0:2.9.1-6.el7_2.2.i686 as a component of Red Hat Enterprise Linux Server (v. 7)
  • libxml2-0:2.9.1-6.el7_2.2.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)
  • libxml2-0:2.9.1-6.el7_2.2.ppc as a component of Red Hat Enterprise Linux Server (v. 7)
  • libxml2-0:2.9.1-6.el7_2.2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)
  • libxml2-0:2.9.1-6.el7_2.2.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)
  • libxml2-0:2.9.1-6.el7_2.2.s390 as a component of Red Hat Enterprise Linux Server (v. 7)
  • libxml2-0:2.9.1-6.el7_2.2.s390x as a component of Red Hat Enterprise Linux Server (v. 7)
  • libxml2-0:2.9.1-6.el7_2.2.src as a component of Red Hat Enterprise Linux Client (v. 7)
  • libxml2-0:2.9.1-6.el7_2.2.src as a component of Red Hat Enterprise Linux ComputeNode (v. 7)
  • libxml2-0:2.9.1-6.el7_2.2.src as a component of Red Hat Enterprise Linux Server (v. 7)
  • libxml2-0:2.9.1-6.el7_2.2.src as a component of Red Hat Enterprise Linux Workstation (v. 7)
  • libxml2-0:2.9.1-6.el7_2.2.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)
  • libxml2-0:2.9.1-6.el7_2.2.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)
  • libxml2-0:2.9.1-6.el7_2.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)
  • libxml2-0:2.9.1-6.el7_2.2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)
  • libxml2-debuginfo-0:2.9.1-6.el7_2.2.i686 as a component of Red Hat Enterprise Linux Client (v. 7)
  • libxml2-debuginfo-0:2.9.1-6.el7_2.2.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)
  • libxml2-debuginfo-0:2.9.1-6.el7_2.2.i686 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)
  • libxml2-debuginfo-0:2.9.1-6.el7_2.2.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)
  • libxml2-debuginfo-0:2.9.1-6.el7_2.2.i686 as a component of Red Hat Enterprise Linux Server (v. 7)
  • +54 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (16)