openSUSE Security Update : libxml2 (openSUSE-2019-785)

This update for libxml2 fixes the following security issues : - CVE-2018-9251: The xzdecomp function allowed remote attackers to cause a denial of service infinite loop via a crafted XML file that triggers LZMAMEMLIMITERROR, as demonstrated by xmllint bsc1088279 - CVE-2018-14567: Prevent denial o...

SUSE SLES11 Security Update : libxml2 (SUSE-SU-2019:13985-1)

This update for libxml2 fixes the following issues : Security issue fixed : CVE-2018-14404: Prevent NULL pointer dereference in the xmlXPathCompOpEval function when parsing an invalid XPath expression in the XPATHOPAND or XPATHOPOR case leading to a denial of service attack bsc1102046 Other Issue...

SUSE-SU-2019:13985-1 Security update for libxml2

This update for libxml2 fixes the following issues: Security issue fixed: - CVE-2018-14404: Prevent NULL pointer dereference in the xmlXPathCompOpEval function when parsing an invalid XPath expression in the XPATHOPAND or XPATHOPOR case leading to a denial of service attack bsc1102046 Other Issue...

The vulnerability of the xz_decomp function in the libxml2 library, which allows a hacker to trigger a service failure.

The vulnerability of the xzdecomp function in the libxml2 library is related to an uncontrolled resource consumption. Exploiting this vulnerability may allow a malicious actor, operating remotely, to cause service failures using a specially crafted XML file...

EulerOS 2.0 SP3 : libxml2 (EulerOS-SA-2019-1034)

According to the version of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Use after free in libxml2 before 2.9.5, as used in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to potentiall...

Junos OS: Multiple vulnerabilities in libxml2 (JSA10902)

According to its self-reported version number, the remote Juniper Junos device is affected by a vulnerability. When a specific BGP flowspec configuration is enabled and upon receipt of a specific matching BGP packet meeting a specific term in the flowspec configuration, a reachable assertion...

rubygem-loofah: XSS vulnerability due to unescaped comments within attributes by libxml2

In the Loofah gem through 2.2.0 for Ruby, non-whitelisted HTML attributes may occur in sanitized output by republishing a crafted HTML fragment...

Photon OS 1.0: Libxml2 PHSA-2017-0024

An update of the libxml2 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0024. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121711;...

Photon OS 1.0: Libxml2 PHSA-2017-0001

An update of the libxml2 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0001. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121663;...

The vulnerability in the xpath.c:xmlXPathCompOpEval() function of the libxml2 library, related to pointer dereferencing errors, allows a hacker to trigger a service failure.

The vulnerability in the xpath.c:xmlXPathCompOpEval function of the libxml2 library is related to the dereferencing of a null pointer. Exploiting this vulnerability allows an attacker to cause a service failure...

Photon OS 2.0: Libxml2 PHSA-2018-2.0-0106

An update of the libxml2 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0106. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 1.0: Libxml2 PHSA-2017-0029

An update of the libxml2 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0029. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121723;...

Photon OS 1.0: Libxml2 PHSA-2018-1.0-0193

An update of the libxml2 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-1.0-0193. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 1.0: Libxml2 PHSA-2017-0039

An update of the libxml2 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0039. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121739;...

Security Bulletin: Vulnerability in libxml2 affects IBM Chassis Management Module (CVE-2017-8872)

Summary IBM Chassis Management Module CMM has addressed the following vulnerability in libxml2. Vulnerability Details Summary IBM Chassis Management Module CMM has addressed the following vulnerability in libxml2. Vulnerability Details CVEID: CVE-2017-8872 Description: libxml2 is vulnerable to a...

Security Bulletin: Vulnerabilities in libxml2 affect Intel® Manycore Platform Software Stack (Intel® MPSS) for Linux and Windows (CVE-2017-16931, CVE-2017-16932)

Summary Intel® Manycore Platform Software Stack Intel® MPSS for Linux and Windows have addressed the following vulnerabilities in libxml2. Vulnerability Details Summary Intel® Manycore Platform Software Stack Intel® MPSS for Linux and Windows have addressed the following vulnerabilities in libxml...

Security Bulletin: Vulnerabilities in libxml2 affect Intel® Manycore Platform Software Stack (Intel® MPSS) for Linux and Windows

Summary Intel Manycore Platform Software Stack Intel MPSS for Linux and Windows have addressed the following vulnerabilities in libxml2. Vulnerability Details Summary Intel® Manycore Platform Software Stack Intel® MPSS for Linux and Windows have addressed the following vulnerabilities in libxml2...

Security Bulletin: Vulnerabilities in libxml2 affect IBM Flex System Networking Switch products

Summary IBM Flex System Networking Switch products have addressed the following vulnerabilities in libxml2. Vulnerability Details Summary IBM Flex System Networking Switch products have addressed the following vulnerabilities in libxml2. Vulnerability Details: CVE-ID: CVE-2016-3627 Description:...

Security Bulletin: Vulnerabilities in libxml2 affect IBM Flex System Networking Switch Products

Summary IBM Flex System Networking Switch Products have addressed the following vulnerabilities in libxml2. Vulnerability Details Summary IBM Flex System Networking Switch Products have addressed the following vulnerabilities in libxml2. Vulnerability Details CVEID: CVE-2017-9050 Description:...

Security Bulletin: Vulnerability libxml2 affects IBM System Networking RackSwitch products (CVE-2015-8710)

Summary IBM System Networking RackSwitch products have addressed the following vulnerability in libxml2. Vulnerability Details Summary IBM System Networking RackSwitch products have addressed the following vulnerability in libxml2. Vulnerability Details CVE-ID: CVE-2015-8710 Description: Libxml2 ...