libxml2 - security update

Fixed packages 1

Vulnerabilities 4

• High 8.8
  CVE-2021-3518 EPSS 22%

  Nokogiri Implements libxml2 version vulnerable to use-after-free

  There's a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidentiality, integrity, an…

  libxml2 libxml2 nokogiri libxml2 Debian Ubuntu Alpine RubyGems
  May 18, 2021
• High 8.6
  CVE-2021-3517 EPSS 17%

  Nokogiri contains libxml Out-of-bounds Write vulnerability

  There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigger an out-of-bounds …

  qt5-qtwebengine libxml2 libxml2 nokogiri Debian Ubuntu Alpine RubyGems
  May 19, 2021
• Medium 5.9
  CVE-2021-3537

  Nokogiri Implements libxml2 version vulnerable to null pointer dereferencing

  A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference. If an untrusted XML document was parsed in recovery mode and post-validated, the flaw could be used …

  libxml2 libxml2 nokogiri libxml2 Debian Ubuntu Alpine RubyGems
  May 14, 2021
• Unscored —
  CVE-2021-3516

  There's a flaw in libxml2's xmllint in versions before 2.9.11. An attacker who is able to submit a crafted file to be p…

  libxml2 libxml2 Debian Ubuntu
  Jun 1, 2021