RHSA-2016:1292HighCVSS 7.8

Red Hat Security Advisory: libxml2 security update

Published
June 23, 2016
Last Modified
November 5, 2026

🔗 CVE IDs covered (14)

CVE-2016-4449 →CVE-2016-1762 →CVE-2016-1834 →CVE-2016-1837 →CVE-2016-1838 →CVE-2016-1840 →CVE-2016-3627 →CVE-2016-4448 →CVE-2016-1833 →CVE-2016-1835 →CVE-2016-1836 →CVE-2016-1839 →CVE-2016-3705 →CVE-2016-4447 →

📋 Description

CVE-2016-1762 — libxml2: Heap-based buffer-overread in xmlNextChar CVE-2016-1833 — libxml2: Heap-based buffer overread in htmlCurrentChar CVE-2016-1834 — libxml2: Heap-buffer-overflow in xmlStrncat CVE-2016-1835 — libxml2: Heap use-after-free in xmlSAX2AttributeNs CVE-2016-1836 — libxml2: Heap use-after-free in xmlDictComputeFastKey CVE-2016-1837 — libxml2: Heap use-after-free in htmlPArsePubidLiteral and htmlParseSystemiteral CVE-2016-1838 — libxml2: Heap-based buffer overread in xmlPArserPrintFileContextInternal CVE-2016-1839 — libxml2: Heap-based buffer overread in xmlDictAddString CVE-2016-1840 — libxml2: Heap-buffer-overflow in xmlFAParserPosCharGroup CVE-2016-3627 — libxml2: stack exhaustion while parsing xml files in recovery mode CVE-2016-3705 — libxml2: stack overflow before detecting invalid XML file CVE-2016-4447 — libxml2: Heap-based buffer underreads due to xmlParseName CVE-2016-4448 — libxml2: Format string vulnerability CVE-2016-4449 — libxml2: Inappropriate fetch of entities content

🎯 Affected products160

  • Red Hat Enterprise Linux Client (v. 7)
  • Red Hat Enterprise Linux Client Optional (v. 7)
  • Red Hat Enterprise Linux ComputeNode (v. 7)
  • Red Hat Enterprise Linux ComputeNode Optional (v. 7)
  • Red Hat Enterprise Linux Desktop (v. 6)
  • Red Hat Enterprise Linux Desktop Optional (v. 6)
  • Red Hat Enterprise Linux HPC Node (v. 6)
  • Red Hat Enterprise Linux HPC Node Optional (v. 6)
  • Red Hat Enterprise Linux Server (v. 6)
  • Red Hat Enterprise Linux Server (v. 7)
  • Red Hat Enterprise Linux Server Optional (v. 6)
  • Red Hat Enterprise Linux Server Optional (v. 7)
  • Red Hat Enterprise Linux Workstation (v. 6)
  • Red Hat Enterprise Linux Workstation (v. 7)
  • Red Hat Enterprise Linux Workstation Optional (v. 6)
  • Red Hat Enterprise Linux Workstation Optional (v. 7)
  • libxml2-0:2.7.6-21.el6_8.1.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)
  • libxml2-0:2.7.6-21.el6_8.1.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)
  • libxml2-0:2.7.6-21.el6_8.1.i686 as a component of Red Hat Enterprise Linux Server (v. 6)
  • libxml2-0:2.7.6-21.el6_8.1.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)
  • libxml2-0:2.7.6-21.el6_8.1.ppc as a component of Red Hat Enterprise Linux Server (v. 6)
  • libxml2-0:2.7.6-21.el6_8.1.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)
  • libxml2-0:2.7.6-21.el6_8.1.s390 as a component of Red Hat Enterprise Linux Server (v. 6)
  • libxml2-0:2.7.6-21.el6_8.1.s390x as a component of Red Hat Enterprise Linux Server (v. 6)
  • libxml2-0:2.7.6-21.el6_8.1.src as a component of Red Hat Enterprise Linux Desktop (v. 6)
  • libxml2-0:2.7.6-21.el6_8.1.src as a component of Red Hat Enterprise Linux HPC Node (v. 6)
  • libxml2-0:2.7.6-21.el6_8.1.src as a component of Red Hat Enterprise Linux Server (v. 6)
  • libxml2-0:2.7.6-21.el6_8.1.src as a component of Red Hat Enterprise Linux Workstation (v. 6)
  • libxml2-0:2.7.6-21.el6_8.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)
  • libxml2-0:2.7.6-21.el6_8.1.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)
  • +130 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 For the update to take effect, all applications linked to the libxml2 library must be restarted, or the system rebooted.

🔗 References (17)