MGASA-2021-0213

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2021-0213.html

Import Source

https://advisories.mageia.org/MGASA-2021-0213.json

JSON Data

https://api.test.osv.dev/v1/vulns/MGASA-2021-0213

Related

Published

2021-05-19T19:29:59Z

Modified

2021-05-19T18:22:57Z

Summary

Updated libxml2 packages fix security vulnerabilities

Details

The updated packages fix security vulnerabilities:

Use-after-free in xmlEncodeEntitiesInternal() in entities.c. (CVE-2021-3516)

Heap-based buffer overflow in xmlEncodeEntitiesInternal() in entities.c. (CVE-2021-3517)

Use-after-free in xmlXIncludeDoProcess() in xinclude.c. (CVE-2021-3518)

NULL pointer dereference in valid.c in xmlValidBuildAContentModel. (CVE-2021-3537)

References

Credits

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.9.9-2.6.mga7

{
    "section": "core"
}

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.9.10-7.1.mga8

{
    "section": "core"
}