RHBA-2011:1053 - Bug Fix Advisory

Topic

Updated libxml2 packages that fixes several bugs are now available for Red Hat
Enterprise Linux 5.

Description

The libxml2 library is a development toolbox providing the implementation of
various XML standards. One of those standard is XML Schemas, which allow complex
validation and checking of document conforming to a schemas describing the
allowed structure and content of the document. Another one is XPath, which is a
language for addressing parts of an XML document.

This update fixes the following bugs:

• Due to an uninitialized field in one of the private libxml2 XPath data

structures, the XPath evaluation could have returned incorrect results. This
error has been fixed, the field is now initialized properly, and XPath
evaluation returns expected results. (BZ#613860)

• Prior to this update, there were several problems present in the XML Schemas

validation component of libxml2. As a result, validating a document against a
schema could have been aborted and an error message similar to "xmllint: free():
invalid next size (fast)" could have been displayed under certain circumstances.
With this update, the XML Schemas validation component has been fixed so that it
works as expected. (BZ#644312)

All users of libxml2 are advised to upgrade to these updated packages, which fix
these bugs.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 613860 - A problem of libxml2 which is not thread safe.
• BZ - 644312 - validation Aborted

CVEs

(none)

References

(none)