libxml2 - security update

Fixed packages 1

Vulnerabilities 15

• High 8.1
  CVE-2016-1762

  The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of service (heap-based buffe…

  libxml2 libxml2 Debian Ubuntu
  Mar 24, 2016
• High 7.8
  CVE-2016-1834 Public exploit

  Heap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X …

  libxml2 libxml2 Debian Ubuntu
  May 20, 2016
• High 7.5
  CVE-2015-8806

  Denial of service or RCE from libxml2 and libxslt

  dict.c in libxml2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via an unexpected character immediately after the "<!DOCTYPE html" substring in a crafted HTML document.

  libxml2 libxml2 nokogiri Debian Ubuntu RubyGems
  Apr 13, 2016
• High 7.5
  CVE-2016-3627 Public exploit

  The xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery mode, allows context-de…

  libxml2 libxml2 Debian Ubuntu
  May 17, 2016
• Unscored —
  CVE-2016-1833

  The htmlCurrentChar function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS befo…

  libxml2 libxml2 Debian Ubuntu
  May 20, 2016
• Unscored —
  CVE-2016-1835

  Use-after-free vulnerability in the xmlSAX2AttributeNs function in libxml2 before 2.9.4, as used in Apple iOS before 9.…

  libxml2 libxml2 Debian Ubuntu
  May 20, 2016
• Unscored —
  CVE-2016-1837

  Multiple use-after-free vulnerabilities in the (1) htmlPArsePubidLiteral and (2) htmlParseSystemiteral functions in lib…

  libxml2 libxml2 Debian Ubuntu
  May 20, 2016
• Unscored —
  CVE-2016-1838 Public exploit

  The xmlPArserPrintFileContextInternal function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before …

  libxml2 libxml2 Debian Ubuntu
  May 20, 2016
• Unscored —
  CVE-2016-1839 Public exploit

  The xmlDictAddString function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS bef…

  libxml2 libxml2 Debian Ubuntu
  May 20, 2016
• Unscored —
  CVE-2016-1840

  Heap-based buffer overflow in the xmlFAParsePosCharGroup function in libxml2 before 2.9.4, as used in Apple iOS before …

  libxml2 libxml2 Debian Ubuntu
  May 20, 2016
• Unscored —
  CVE-2016-2073

  The htmlParseNameComplex function in HTMLparser.c in libxml2 allows attackers to cause a denial of service (out-of-boun…

  libxml2 libxml2 Debian Ubuntu
  Feb 12, 2016
• Unscored —
  CVE-2016-3705

  The (1) xmlParserEntityCheck and (2) xmlParseAttValueComplex functions in parser.c in libxml2 2.9.3 do not properly kee…

  libxml2 libxml2 Debian Ubuntu
  May 17, 2016
• Unscored —
  CVE-2016-4447 EPSS 14%

  The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent attackers to cause a deni…

  libxml2 libxml2 Debian Ubuntu
  Jun 9, 2016
• Unscored —
  CVE-2016-4449

  XML external entity (XXE) vulnerability in the xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.4,…

  libxml2 libxml2 Debian Ubuntu
  Jun 9, 2016
• Unscored —
  CVE-2016-4483

  The xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent attackers to cause a denial…

  libxml2 libxml2 Debian Ubuntu
  Apr 11, 2017