Oval Definition:oval:com.redhat.rhsa:def:20080884
Revision Date:2008-09-11Version:636
Title:RHSA-2008:0884: libxml2 security update (Important)
Description:The libxml2 packages provide a library that allows you to manipulate XML files. It includes support to read, modify, and write XML and HTML files.

  • A heap-based buffer overflow flaw was found in the way libxml2 handled long XML entity names. If an application linked against libxml2 processed untrusted malformed XML content, it could cause the application to crash or, possibly, execute arbitrary code. (CVE-2008-3529)

    All users of libxml2 are advised to upgrade to these updated packages, which contain a backported patch to resolve this issue.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2008-3529
    RHSA-2008:0884
    RHSA-2008:0884-01
    RHSA-2008:0884-01
    Platform(s):Red Hat Enterprise Linux 3
    Red Hat Enterprise Linux 4
    Red Hat Enterprise Linux 5
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 3 is installed
  • AND
  • libxml2 is earlier than 0:2.5.10-13
  • AND libxml2 is signed with Red Hat master key
  • libxml2-python is earlier than 0:2.5.10-13
  • AND libxml2-python is signed with Red Hat master key
  • libxml2-devel is earlier than 0:2.5.10-13
  • AND libxml2-devel is signed with Red Hat master key
  • OR Package Information
  • Red Hat Enterprise Linux 4 is installed
  • AND
  • libxml2 is earlier than 0:2.6.16-12.5
  • AND libxml2 is signed with Red Hat master key
  • libxml2-python is earlier than 0:2.6.16-12.5
  • AND libxml2-python is signed with Red Hat master key
  • libxml2-devel is earlier than 0:2.6.16-12.5
  • AND libxml2-devel is signed with Red Hat master key
  • OR Package Information
  • Red Hat Enterprise Linux 5 is installed
  • AND
  • libxml2-devel is earlier than 0:2.6.26-2.1.2.6
  • AND libxml2-devel is signed with Red Hat redhatrelease key
  • libxml2-python is earlier than 0:2.6.26-2.1.2.6
  • AND libxml2-python is signed with Red Hat redhatrelease key
  • libxml2 is earlier than 0:2.6.26-2.1.2.6
  • AND libxml2 is signed with Red Hat redhatrelease key
  • Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 4 is installed
  • AND
  • libxml2 is earlier than 0:2.6.16-12.5
  • AND libxml2 is signed with Red Hat redhatrelease2 key
  • libxml2-devel is earlier than 0:2.6.16-12.5
  • AND libxml2-devel is signed with Red Hat redhatrelease2 key
  • libxml2-python is earlier than 0:2.6.16-12.5
  • AND libxml2-python is signed with Red Hat redhatrelease2 key
  • OR Package Information
  • Red Hat Enterprise Linux 5 is installed
  • AND
  • libxml2 is earlier than 0:2.6.26-2.1.2.6
  • AND libxml2 is signed with Red Hat redhatrelease2 key
  • libxml2-devel is earlier than 0:2.6.26-2.1.2.6
  • AND libxml2-devel is signed with Red Hat redhatrelease2 key
  • libxml2-python is earlier than 0:2.6.26-2.1.2.6
  • AND libxml2-python is signed with Red Hat redhatrelease2 key
  • Definition Synopsis
  • Release Information
  • Red Hat Enterprise Linux 3 is installed
  • AND
  • libxml2 is earlier than 0:2.5.10-13
  • AND libxml2 is signed with Red Hat master key
  • libxml2-devel is earlier than 0:2.5.10-13
  • AND libxml2-devel is signed with Red Hat master key
  • libxml2-python is earlier than 0:2.5.10-13
  • AND libxml2-python is signed with Red Hat master key
  • OR Package Information
  • Red Hat Enterprise Linux 4 is installed
  • AND
  • libxml2 is earlier than 0:2.6.16-12.5
  • AND libxml2 is signed with Red Hat master key
  • libxml2-devel is earlier than 0:2.6.16-12.5
  • AND libxml2-devel is signed with Red Hat master key
  • libxml2-python is earlier than 0:2.6.16-12.5
  • AND libxml2-python is signed with Red Hat master key
  • OR Package Information
  • Red Hat Enterprise Linux 5 is installed
  • AND
  • libxml2 is earlier than 0:2.6.26-2.1.2.6
  • AND libxml2 is signed with Red Hat redhatrelease key
  • libxml2-devel is earlier than 0:2.6.26-2.1.2.6
  • AND libxml2-devel is signed with Red Hat redhatrelease key
  • libxml2-python is earlier than 0:2.6.26-2.1.2.6
  • AND libxml2-python is signed with Red Hat redhatrelease key
  • BACK