Wind River Support Network

HomeDefectsLIN10-8543

Fixed

LIN10-8543 : Security Advisory - libxml2 - CVE-2021-3516

Created: Apr 28, 2021 Updated: May 30, 2021

Resolved Date: May 30, 2021

Found In Version: 10.17.41.1

Severity: Standard

Applicable for: Wind River Linux LTS 17

Component/s: Userspace

Description

 libxml2: use-after-free in xmlEncodeEntitiesInternal() in entities.c

Reference:
https://gitlab.gnome.org/GNOME/libxml2/-/issues/230

Upstream patch:
https://gitlab.gnome.org/GNOME/libxml2/-/commit/1358d157d0bd83be1dfe356a69213df9fac0b539

CREATE(Triage):(User=admin) [CVE-2021-3516|https://nvd.nist.gov/vuln/detail/CVE-2021-3516]

CVEs

CVE-2021-3516