Skip to content
OpenAdvisories
High ELSA-2016-1292 14 CVEs

Important: libxml2 security update (Oracle Linux 7)

Published Jun 23, 2016 · Updated Jun 23, 2016

Ecosystem: Oracle Linux

Summary

[2.9.1-6.0.1.3]
- Update doc/redhat.gif in tarball
- Add libxml2-oracle-enterprise.patch and update logos in tarball

[libxml2-2.9.1-6.3]
- Heap-based buffer overread in xmlNextChar (CVE-2016-1762)
- Bug 763071: Heap-buffer-overflow in xmlStrncat <https://bugzilla.gnome.org/show_bug.cgi?id=763071> (CVE-2016-1834)
- Bug 757711: Heap-buffer-overflow in xmlFAParsePosCharGroup <https://bugzilla.gnome.org/show_bug.cgi?id=757711> (CVE-2016-1840)
- Bug 758588: Heap-based buffer overread in xmlParserPrintFileContextInternal <https://bugzilla.gnome.org/show_bug.cgi?id=758588> (CVE-2016-1838)
- Bug 758605: Heap-based buffer overread in xmlDictAddString <https://bugzilla.gnome.org/show_bug.cgi?id=758605> (CVE-2016-1839)
- Bug 759398: Heap use-after-free in xmlDictComputeFastKey <https://bugzilla.gnome.org/show_bug.cgi?id=759398> (CVE-2016-1836)
- Fix inappropriate fetch of entities content (CVE-2016-4449)
- Heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral (CVE-2016-1837)
- Heap use-after-free in xmlSAX2AttributeNs (CVE-2016-1835)
- Heap-based buffer-underreads due to xmlParseName (CVE-2016-4447)
- Heap-based buffer overread in htmlCurrentChar (CVE-2016-1833)
- Add missing increments of recursion depth counter to XML parser. (CVE-2016-3705)
- Avoid building recursive entities (CVE-2016-3627)
- Fix some format string warnings with possible format string vulnerability (CVE-2016-4448)
- More format string warnings with possible format string vulnerability (CVE-2016-4448)

Fixed packages 4

ReleasePackageFixed in
Oracle Linux · 7 libxml2 0:2.9.1-6.0.1.el7_2.3
Oracle Linux · 7 libxml2-devel 0:2.9.1-6.0.1.el7_2.3
Oracle Linux · 7 libxml2-python 0:2.9.1-6.0.1.el7_2.3
Oracle Linux · 7 libxml2-static 0:2.9.1-6.0.1.el7_2.3

Vulnerabilities 14

  • High 8.1
    CVE-2016-1762

    The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of service (heap-based buffe…

    libxml2 libxml2 Debian Ubuntu
  • High 7.8
    CVE-2016-1834 Public exploit

    Heap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X …

    libxml2 libxml2 Debian Ubuntu
  • High 7.5
    CVE-2016-3627 Public exploit

    The xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery mode, allows context-de…

    libxml2 libxml2 Debian Ubuntu
  • Unscored —
    CVE-2016-1833

    The htmlCurrentChar function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS befo…

    libxml2 libxml2 Debian Ubuntu
  • Unscored —
    CVE-2016-1835

    Use-after-free vulnerability in the xmlSAX2AttributeNs function in libxml2 before 2.9.4, as used in Apple iOS before 9.…

    libxml2 libxml2 Debian Ubuntu
  • Unscored —
    CVE-2016-1836

    Use-after-free vulnerability in the xmlDictComputeFastKey function in libxml2 before 2.9.4, as used in Apple iOS before…

    libxml2 libxml2 Debian Ubuntu
  • Unscored —
    CVE-2016-1837

    Multiple use-after-free vulnerabilities in the (1) htmlPArsePubidLiteral and (2) htmlParseSystemiteral functions in lib…

    libxml2 libxml2 Debian Ubuntu
  • Unscored —
    CVE-2016-1838 Public exploit

    The xmlPArserPrintFileContextInternal function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before …

    libxml2 libxml2 Debian Ubuntu
  • Unscored —
    CVE-2016-1839 Public exploit

    The xmlDictAddString function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS bef…

    libxml2 libxml2 Debian Ubuntu
  • Unscored —
    CVE-2016-1840

    Heap-based buffer overflow in the xmlFAParsePosCharGroup function in libxml2 before 2.9.4, as used in Apple iOS before …

    libxml2 libxml2 Debian Ubuntu
  • Unscored —
    CVE-2016-3705

    The (1) xmlParserEntityCheck and (2) xmlParseAttValueComplex functions in parser.c in libxml2 2.9.3 do not properly kee…

    libxml2 libxml2 Debian Ubuntu
  • Unscored —
    CVE-2016-4447 EPSS 14%

    The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent attackers to cause a deni…

    libxml2 libxml2 Debian Ubuntu
  • Unscored —
    CVE-2016-4448

    Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string speci…

    libxml2 libxml2 Debian Ubuntu
  • Unscored —
    CVE-2016-4449

    XML external entity (XXE) vulnerability in the xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.4,…

    libxml2 libxml2 Debian Ubuntu