Skip to content
OpenAdvisories
Critical RHSA-2021:3810 1 CVE

Red Hat Security Advisory: libxml2 security update

Published Sep 16, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 18

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::client libxml2 0:2.9.1-6.el7_9.6
Red Hat · RHEL 7 enterprise_linux:7::client libxml2-debuginfo 0:2.9.1-6.el7_9.6
Red Hat · RHEL 7 enterprise_linux:7::client libxml2-devel 0:2.9.1-6.el7_9.6
Red Hat · RHEL 7 enterprise_linux:7::client libxml2-python 0:2.9.1-6.el7_9.6
Red Hat · RHEL 7 enterprise_linux:7::client libxml2-static 0:2.9.1-6.el7_9.6
Red Hat · RHEL 7 enterprise_linux:7::computenode libxml2-debuginfo 0:2.9.1-6.el7_9.6
Red Hat · RHEL 7 enterprise_linux:7::computenode libxml2-devel 0:2.9.1-6.el7_9.6
Red Hat · RHEL 7 enterprise_linux:7::computenode libxml2-static 0:2.9.1-6.el7_9.6
Red Hat · RHEL 7 enterprise_linux:7::server libxml2 0:2.9.1-6.el7_9.6
Red Hat · RHEL 7 enterprise_linux:7::server libxml2-debuginfo 0:2.9.1-6.el7_9.6
Red Hat · RHEL 7 enterprise_linux:7::server libxml2-devel 0:2.9.1-6.el7_9.6
Red Hat · RHEL 7 enterprise_linux:7::server libxml2-python 0:2.9.1-6.el7_9.6
Red Hat · RHEL 7 enterprise_linux:7::server libxml2-static 0:2.9.1-6.el7_9.6
Red Hat · RHEL 7 enterprise_linux:7::workstation libxml2 0:2.9.1-6.el7_9.6
Red Hat · RHEL 7 enterprise_linux:7::workstation libxml2-debuginfo 0:2.9.1-6.el7_9.6
Red Hat · RHEL 7 enterprise_linux:7::workstation libxml2-devel 0:2.9.1-6.el7_9.6
Red Hat · RHEL 7 enterprise_linux:7::workstation libxml2-python 0:2.9.1-6.el7_9.6
Red Hat · RHEL 7 enterprise_linux:7::workstation libxml2-static 0:2.9.1-6.el7_9.6

Vulnerabilities 1

  • Critical 9.8
    CVE-2016-4658

    Nokogiri does not forbid namespace nodes in XPointer ranges

    xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products) does not forbid namespace nodes in XPointer ranges, which allows remote attackers to execute arbitrary code or cau…

    libxml2 libxml2 nokogiri Debian Ubuntu RubyGems

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1384424
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3810.json
  • report
    https://access.redhat.com/security/cve/CVE-2016-4658
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-4658
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-4658