Skip to content
OpenAdvisories
Medium ELSA-2015-2550 11 CVEs

Moderate: libxml2 security update (Oracle Linux 7)

Published Dec 7, 2015 · Updated Dec 7, 2015

Ecosystem: Oracle Linux

Summary

[2.9.1-6.0.1.el7_1.2]
- Update doc/redhat.gif in tarball
- Add libxml2-oracle-enterprise.patch and update logos in tarball

[2.9.1-6.2]
- Fix a series of CVEs (rhbz#1286496)
- CVE-2015-7941 Stop parsing on entities boundaries errors
- CVE-2015-7941 Cleanup conditional section error handling
- CVE-2015-8317 Fail parsing early on if encoding conversion failed
- CVE-2015-7942 Another variation of overflow in Conditional sections
- CVE-2015-7942 Fix an error in previous Conditional section patch
- Fix parsing short unclosed comment uninitialized access
- CVE-2015-7498 Avoid processing entities after encoding conversion failures
- CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
- CVE-2015-5312 Another entity expansion issue
- CVE-2015-7499 Add xmlHaltParser() to stop the parser
- CVE-2015-7499 Detect incoherency on GROW
- CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
- CVE-2015-8242 Buffer overead with HTML parser in push mode
- CVE-2015-1819 Enforce the reader to run in constant memory

[2.9.1-6]
- Fix missing entities after CVE-2014-3660 fix
- CVE-2014-0191 Do not fetch external parameter entities (rhbz#1195650)
- Fix regressions introduced by CVE-2014-0191 patch

[2.9.1-5.1]
- CVE-2014-3660 denial of service via recursive entity expansion (rhbz#1149087)

Fixed packages 4

ReleasePackageFixed in
Oracle Linux · 7 libxml2 0:2.9.1-6.0.1.el7_2.2
Oracle Linux · 7 libxml2-devel 0:2.9.1-6.0.1.el7_2.2
Oracle Linux · 7 libxml2-python 0:2.9.1-6.0.1.el7_2.2
Oracle Linux · 7 libxml2-static 0:2.9.1-6.0.1.el7_2.2

Vulnerabilities 11

  • Medium —
    CVE-2015-1819

    Nokogiri vulnerable to libxml XML Entity Expansion

    The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML Entity Expansion (XEE) attack.

    libxml2 libxml2 nokogiri Debian Ubuntu RubyGems
  • High —
    CVE-2015-5312

    Nokogiri subject to DoS via libxml2 vulnerability

    The xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.3 does not properly prevent entity expansion, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data, a different vulnerability tha…

    libxml2 libxml2 nokogiri Debian Ubuntu RubyGems
  • Unscored —
    CVE-2015-7497

    Heap-based buffer overflow in the xmlDictComputeFastQKey function in dict.c in libxml2 before 2.9.3 allows context-depe…

    libxml2 libxml2 Debian Ubuntu
  • Unscored —
    CVE-2015-7498

    Heap-based buffer overflow in the xmlParseXmlDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent…

    libxml2 libxml2 Debian Ubuntu
  • Medium —
    CVE-2015-7499

    Heap-based buffer overflow in nokogiri

    Heap-based buffer overflow in the xmlGROW function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive process memory information via unspecified vectors.

    libxml2 libxml2 nokogiri Debian Ubuntu RubyGems
  • Unscored —
    CVE-2015-7500

    The xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of s…

    libxml2 libxml2 Debian Ubuntu
  • Unscored —
    CVE-2015-7941

    libxml2 2.9.2 does not properly stop parsing invalid input, which allows context-dependent attackers to cause a denial …

    libxml2 libxml2 Debian Ubuntu
  • Unscored —
    CVE-2015-7942

    The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary entities when it st…

    libxml2 libxml2 Debian Ubuntu
  • Unscored —
    CVE-2015-8241

    The xmlNextChar function in libxml2 2.9.2 does not properly check the state, which allows context-dependent attackers t…

    libxml2 libxml2 Debian Ubuntu
  • Unscored —
    CVE-2015-8242

    The xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before 2.9.3 allows context-…

    libxml2 libxml2 Debian Ubuntu
  • Unscored —
    CVE-2015-8317

    The xmlParseXMLDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive…

    libxml2 libxml2 Debian Ubuntu