Red Hat Security AdvisoryRHSA-2021:3810
libxml2 security update
Released 2021-10-12 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libxml2-2.9.1-6.el7_9.6, libxml2-python-2.9.1-6.el7_9.6
- Red Hat Enterprise Linux Client Optional (v. 7) libxml2-devel-2.9.1-6.el7_9.6, libxml2-static-2.9.1-6.el7_9.6
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libxml2-devel-2.9.1-6.el7_9.6, libxml2-static-2.9.1-6.el7_9.6
- Red Hat Enterprise Linux Server (v. 7) libxml2-2.9.1-6.el7_9.6, libxml2-2.9.1-6.el7_9.6.ppc, libxml2-devel-2.9.1-6.el7_9.6 +2
- Red Hat Enterprise Linux Server Optional (v. 7) libxml2-static-2.9.1-6.el7_9.6, libxml2-static-2.9.1-6.el7_9.6.ppc
- Red Hat Enterprise Linux Workstation (v. 7) libxml2-2.9.1-6.el7_9.6, libxml2-devel-2.9.1-6.el7_9.6, libxml2-python-2.9.1-6.el7_9.6
- Red Hat Enterprise Linux Workstation Optional (v. 7) libxml2-static-2.9.1-6.el7_9.6
Fixes 1 record
Priority MEDIUM 53
xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products) does not forbid namespace nodes in XPointer ranges, which allows remote att…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.08559 · Published 2016-09-25 · Partial fix · 1.7.1 CWE-119
