[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250770

 
 

909

 
 

196157

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

RHSA-2021:2569-01 -- Redhat libxml2, python3-libxml2

ID: oval:org.secpod.oval:def:73714Date: (C)2021-07-12   (M)2024-02-19
Class: PATCHFamily: unix




The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix: * libxml2: Use-after-free in xmlEncodeEntitiesInternal in entities.c * libxml2: Heap-based buffer overflow in xmlEncodeEntitiesInternal in entities.c * libxml2: Use-after-free in xmlXIncludeDoProcess in xinclude.c * libxml2: NULL pointer dereference when post-validating mixed content parsed in recovery mode * libxml2: Exponential entity expansion attack bypasses all existing protection mechanisms For more details about the security issue, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section.

Platform:
CentOS 8
Product:
libxml2
python3-libxml2
Reference:
RHSA-2021:2569-01
CVE-2021-3516
CVE-2021-3517
CVE-2021-3518
CVE-2021-3537
CVE-2021-3541
CVE    5
CVE-2021-3541
CVE-2021-3537
CVE-2021-3518
CVE-2021-3516
...
CPE    3
cpe:/o:centos:centos:8
cpe:/a:libxml2:libxml2
cpe:/a:python:python3-libxml2

© SecPod Technologies