[CLSA-2021:1640697315] Fix of CVE: CVE-2021-3516, CVE-2021-3537, CVE-2017-8872, CVE-2021-3518, CVE-2019-20388, CVE-2020-24977, CVE-2021-3541, CVE-2021-3517
Type:
security
Severity:
moderate
Release date:
2021-12-28
Description:
- CVE-2021-3517.patch: validate UTF8 in xmlEncodeEntities - CVE-2021-3518.patch: fix user-after-free with 'xmllint --xinclude --dropdtd' - CVE-2021-3537.patch: propagate error in xmlParseElementChildrenContentDeclPriv - CVE-2021-3541.patch: parser fix for the billion laughs attack - CVE-2021-3516.patch: fix use-after-free with 'xmllint --html --push' - CVE-2017-8872.patch: free input buffer in xmlHaltParser - CVE-2019-20388.patch: fix memory leak in xmlSchemaValidateStream - CVE-2020-24977.patch: fix out-of-bounds read with 'xmllint --htmlout'
Updated packages:
  • libxml2-2.7.6-21.el6_8.1.tuxcare.els1.x86_64.rpm
    sha:cd966d71b2fb243aaaebc348413cfe2f8134b79b
  • libxml2-2.7.6-21.el6_8.1.tuxcare.els1.i686.rpm
    sha:18944effc5112973b7679485f884ef78028f8119
  • libxml2-static-2.7.6-21.el6_8.1.tuxcare.els1.x86_64.rpm
    sha:796c81d0b7b9e50add6922585322517ed14b3c79
  • libxml2-devel-2.7.6-21.el6_8.1.tuxcare.els1.x86_64.rpm
    sha:a76cddb0372606476ff22a90fb8a49cfb6cdec5b
  • libxml2-python-2.7.6-21.el6_8.1.tuxcare.els1.x86_64.rpm
    sha:7959a1ea7c460f66b027c797abc4b2dfac2d6c0d
  • libxml2-devel-2.7.6-21.el6_8.1.tuxcare.els1.i686.rpm
    sha:7d45bfeb4a9219027ead864259ebb3b2b24d6d9e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.