Wind River Support Network

HomeDefectsLIN1019-6462

Fixed

LIN1019-6462 : Security Advisory - libxml2 - CVE-2021-3516

Created: Apr 28, 2021 Updated: Jul 27, 2021

Resolved Date: Jul 27, 2021

Found In Version: 10.19.45.1

Fix Version: 10.19.45.17

Severity: Standard

Applicable for: Wind River Linux LTS 19

Component/s: Userspace

Description

 libxml2: use-after-free in xmlEncodeEntitiesInternal() in entities.c

Reference:
https://gitlab.gnome.org/GNOME/libxml2/-/issues/230

Upstream patch:
https://gitlab.gnome.org/GNOME/libxml2/-/commit/1358d157d0bd83be1dfe356a69213df9fac0b539

CREATE(Triage):(User=admin) [CVE-2021-3516|https://nvd.nist.gov/vuln/detail/CVE-2021-3516]

CVEs

CVE-2021-3516