Wind River Support Network

HomeDefectsLIN1018-7603

Fixed

LIN1018-7603 : Security Advisory - libxml2 - CVE-2021-3518

Created: Apr 28, 2021 Updated: May 23, 2021

Resolved Date: May 23, 2021

Found In Version: 10.18.44.1

Severity: Standard

Applicable for: Wind River Linux LTS 18

Component/s: Userspace

Description

libxml2: use-after-free in xmlXIncludeDoProcess() in xinclude.c


Reference:
https://gitlab.gnome.org/GNOME/libxml2/-/issues/237

Upstream patch:
https://gitlab.gnome.org/GNOME/libxml2/-/commit/1098c30a040e72a4654968547f415be4e4c40fe7


CREATE(Triage):(User=admin) [CVE-2021-3518|https://nvd.nist.gov/vuln/detail/CVE-2021-3518]

CVEs

CVE-2021-3518