libxml2-2.7.6-21.1.0.2.AXS4

エラータID: AXSA:2021-2481:04

Release date: 
Friday, October 15, 2021 - 09:07
Subject: 
libxml2-2.7.6-21.1.0.2.AXS4
Affected Channels: 
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity: 
Moderate
Description: 

The libxml2 library is a development toolbox providing the implementation of
various XML standards.

Security Fix(es):

* libxml2: Use after free via namespace node in XPointer ranges
(CVE-2016-4658)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.

CVE-2016-4658
xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before
10.12, tvOS before 10, and watchOS before 3, and other products) does not forbid
namespace nodes in XPointer ranges, which allows remote attackers to execute
arbitrary code or cause a denial of service (use-after-free and memory
corruption) via a crafted XML document.

Additional info:

Solution: 

Update packages.

CVEs: 
CVE-2016-4658
xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products) does not forbid namespace nodes in XPointer ranges, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and memory corruption) via a crafted XML document.
Additional Info: 

N/A

Download: 

SRPMS
  1. libxml2-2.7.6-21.1.0.2.AXS4.src.rpm
    MD5: 06bae33719e7a3801f238f74f890729a
    SHA-256: 78430ca11960e8fa5d5735532e16647e4ca3573cf5bc884c40fab294ced8bcea
    Size: 4.72 MB

Asianux Server 4 for x86
  1. libxml2-2.7.6-21.1.0.2.AXS4.i686.rpm
    MD5: 7488fb8369dcb2d685c763af76f1a08a
    SHA-256: 154bd41e3816373a4b87f509ab31c8deb9698000aab86b258779026b518a9296
    Size: 805.01 kB
  2. libxml2-devel-2.7.6-21.1.0.2.AXS4.i686.rpm
    MD5: b87182446299ec6f05cab171c4dc9232
    SHA-256: 9ca6d0004d8d25913e23ff8f3147aa381380700212f55d8f295b1058dad2abd5
    Size: 1.06 MB
  3. libxml2-python-2.7.6-21.1.0.2.AXS4.i686.rpm
    MD5: 08c6590ed22c854feb598a697a3d978e
    SHA-256: d22ac60a62409a5ea8a5f673644bcb7c8db6f4e4529adda26f8d640475352764
    Size: 317.34 kB

Asianux Server 4 for x86_64
  1. libxml2-2.7.6-21.1.0.2.AXS4.x86_64.rpm
    MD5: c7798565d26074c1811e5fd878697bcb
    SHA-256: 0609b26a950e9ab8079204ad5398d7638b3e770137f4f6bcce2d31b8cb306048
    Size: 804.29 kB
  2. libxml2-devel-2.7.6-21.1.0.2.AXS4.x86_64.rpm
    MD5: 33c1115d05a4747a13d08b31fbed13f7
    SHA-256: ad0b84a731a2024d674011f96f2e7a7dc228b94055e98b2ecefa953247d08488
    Size: 1.06 MB
  3. libxml2-python-2.7.6-21.1.0.2.AXS4.x86_64.rpm
    MD5: c3adf1b360678234f2fa29c82d8c30c2
    SHA-256: a96e6eed0996f60b0ba19557f22b584b4ba16c966076c23e818f85e10e8acf49
    Size: 323.81 kB
  4. libxml2-2.7.6-21.1.0.2.AXS4.i686.rpm
    MD5: 7488fb8369dcb2d685c763af76f1a08a
    SHA-256: 154bd41e3816373a4b87f509ab31c8deb9698000aab86b258779026b518a9296
    Size: 805.01 kB
  5. libxml2-devel-2.7.6-21.1.0.2.AXS4.i686.rpm
    MD5: b87182446299ec6f05cab171c4dc9232
    SHA-256: 9ca6d0004d8d25913e23ff8f3147aa381380700212f55d8f295b1058dad2abd5
    Size: 1.06 MB