Skip to content
OpenAdvisories
Medium RHSA-2020:1827 2 CVEs

Red Hat Security Advisory: libxml2 security update

Published Sep 16, 2024 · Updated Sep 21, 2026

Ecosystem: Red Hat

Fixed packages 9

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream libxml2-debuginfo 0:2.9.7-7.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream libxml2-debugsource 0:2.9.7-7.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream libxml2-devel 0:2.9.7-7.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream python3-libxml2-debuginfo 0:2.9.7-7.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos libxml2 0:2.9.7-7.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos libxml2-debuginfo 0:2.9.7-7.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos libxml2-debugsource 0:2.9.7-7.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos python3-libxml2 0:2.9.7-7.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos python3-libxml2-debuginfo 0:2.9.7-7.el8

Vulnerabilities 2

  • Medium 6.5
    CVE-2018-14404

    Nokogiri NULL Pointer Dereference

    A NULL pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval() function of libxml2 through 2.9.8 when parsing an invalid XPath expression in the XPATH_OP_AND or XPATH_OP_OR case. Applications processing untrusted XSL format inputs with th…

    libxml2 libxml2 nokogiri libxml2 Debian Ubuntu Alpine RubyGems
  • Unscored —
    CVE-2018-9251

    The xz_decomp function in xzlib.c in libxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial o…

    libxml2 Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.2_release_notes/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1565318
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1595985
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1827.json
  • report
    https://access.redhat.com/security/cve/CVE-2018-9251
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-9251
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-9251
  • report
    https://access.redhat.com/security/cve/CVE-2018-14404
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-14404
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-14404